FortiConverter vs. Quest Migration Manager & Migrator

Unless you are rebuilding rules from scratch, FortiConverter is a must-have when migrating legacy rulesets from competing platforms such as Cisco ASA, CheckPoint, Juniper, etc. to FortiGate Appliances. Without FortiConverter, guaranteed there will be some flows you missed and you will be troubleshooting them during your cutover maintenance window. Utilizing FortiConverter, you will minimize such issues as cutover time because you have the ability to stage the new ruleset in advance. Complex topologies and multi-platform migrations require highly skilled consultation from experts that [have] done this several times before.

Incentivized

Dell ChangeBASE is well suited in migrating an OS to a new version, or 32/64-bit. It's also helpful when virtualizating workstations into Thin Clients for use with Citrix or other thin provisioning services.

Incentivized

• Audit existing rulesets from CheckPoint, Cisco, Juniper and other platforms
• Build migration rulesets to FortiGate
• Stages migration before actual cutover
• Reduces or eliminates obsolete and shadow rules
• Simple logic

Incentivized

• OS Patch Testing - We further used this to test Microsoft's Patch Tuesday releases before we put them in production.
• Web Dashboard - The latest version added a fully customization dashboard with widgets to give you an at-a-glance view.
• Application comparability - We used this to test our Windows XP to Windows 7 migration.

Incentivized

• Programming or scripting skills are not needed but highly recommended
• Requires excellent command of REGEX
• Interface Mapping from complex topologies requires a deep understanding of FortiGate interface capabilities and scripting

Incentivized

• Initial setup can be tricky - We needed to contact support for some help.
• Prior to the latest version, there wasn't an easy way to view all of our results. The new dashboard has rectified this.

Incentivized

FortiConverter is currently the best option to assist in migrating legacy firewalls to FortiGate firewalls. FortiConverter is flexible enough to be the single tool to use when migrating Check Point, Cisco ASA, Juniper and other platforms to FortiGate Firewalls. FortiConverter is not a multi-user software however it is easy for multiple engineers to work on a single or multiple migration projects.

Incentivized

FortiConverter is the easiest of the firewall migration tools to use compared to Checkpoint SmartMove, Cisco Firewall Migration Tool, FWMIG, etc. It has a more robust user interface and allows you to customize the rule imports as needed. Rulebase analysis, hit count, NAT, and dynamic routing are presented in an easy to understand format with FortiConverter.

Incentivized

Dell ChangeBASE is more costly when compared to Admin Studio, I believe the price was almost double. However, Admin Studio did not provide a comfortable level of support and we felt we were in better hands with Dell's patching schedule. Admin Studio wasn't able to answer our question on when they released software updates and how complex an upgrade would be.

Incentivized

• Streamlined migrations successful on the first try
• Simple and fast cutover maintenance window
• Audit and tune existing rule base
• Quickly identify shadow rules
• Quickly identify rules with elevated access

Incentivized

• ROI was seen after 10 months of use.
• Greatly sped up the application testing process by several weeks, and allowed our existing development team to continue working on other projects.

Incentivized