FortiConverter vs. HYCU

Unless you are rebuilding rules from scratch, FortiConverter is a must-have when migrating legacy rulesets from competing platforms such as Cisco ASA, CheckPoint, Juniper, etc. to FortiGate Appliances. Without FortiConverter, guaranteed there will be some flows you missed and you will be troubleshooting them during your cutover maintenance window. Utilizing FortiConverter, you will minimize such issues as cutover time because you have the ability to stage the new ruleset in advance. Complex topologies and multi-platform migrations require highly skilled consultation from experts that [have] done this several times before.

Incentivized

The SQL database structure and application-consistent snapshots to local storage and recovery are very well done. The interface is nicely made and it is an intuitive design that needs very little training to use. The Restore from the Cloud function is cumbersome and slow, that could be improved by downloading and finding parts needed, instead of the entire backup media.

Incentivized

• Audit existing rulesets from CheckPoint, Cisco, Juniper and other platforms
• Build migration rulesets to FortiGate
• Stages migration before actual cutover
• Reduces or eliminates obsolete and shadow rules
• Simple logic

Incentivized

• Backup of virtual machines.
• Upload to Cloud backups.
• Recovery of databases backed up through HYCU.

Incentivized

• Programming or scripting skills are not needed but highly recommended
• Requires excellent command of REGEX
• Interface Mapping from complex topologies requires a deep understanding of FortiGate interface capabilities and scripting

Incentivized

• The rollout of the file level backup is still not there.
• The Restore from the Cloud function is not ideal and needs lots of work.
• Backups being in native format would be nice for certain files.

Incentivized

FortiConverter is currently the best option to assist in migrating legacy firewalls to FortiGate firewalls. FortiConverter is flexible enough to be the single tool to use when migrating Check Point, Cisco ASA, Juniper and other platforms to FortiGate Firewalls. FortiConverter is not a multi-user software however it is easy for multiple engineers to work on a single or multiple migration projects.

Incentivized

I have had several requests, and issues with the rollout and deployment of HYCU in our production environment. The HYCU team of support and developers have met each issue with importance and some kind of resolution or explanation of help. They have been so supportive even in the not so easy ones. That says something for their product and team behind it.

Incentivized

FortiConverter is the easiest of the firewall migration tools to use compared to Checkpoint SmartMove, Cisco Firewall Migration Tool, FWMIG, etc. It has a more robust user interface and allows you to customize the rule imports as needed. Rulebase analysis, hit count, NAT, and dynamic routing are presented in an easy to understand format with FortiConverter.

Incentivized

I have used several backup programs, I selected 2 just to be brief. The best thing I see with HYCU over Veeam is that it is much more difficult for an attacker if inside the network to gain access to the backups and objects saved in the backup storage. The best part about HYCU over Bacula is that it is much easier to use and more stable. The interface alone will save you from time and energy using other products

Incentivized

• Streamlined migrations successful on the first try
• Simple and fast cutover maintenance window
• Audit and tune existing rule base
• Quickly identify shadow rules
• Quickly identify rules with elevated access

Incentivized

• We have saved a few SQL issues and recovered data that could have been corrupted.
• Applications and files have a place in the cloud in case the need is there for other depts.
• Restoring across datacenters is possible with HYCU saving us time and money to do so.

Incentivized