We performed a comparison between Fortinet FortiGate, Juniper SRX Series Firewall, and Sophos Cyberoam UTM based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."We can detect any attack of viruses or malware at the first point of contact."
"We are very happy with the general bandwidth agility we have seen from one website to another website."
"The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point."
"One of the nice things about FortiGate is that it can be deployed on the cloud or on-premises. You can actually do both. That's the biggest reason why I stick with this solution as opposed to something like Cisco Meraki. Another nice thing is that I can log directly into a FortiGate or get to it through their FortiCloud access products. They're pretty reliable and consistent. One of the reasons why I started using the product was their single pane of management. I can deploy their line of firewalls in conjunction with their switching and access points, and I can manage the entire network from one interface. I don't have to log into one interface for the firewall, another one for the access points, and another one for the switches. These firewalls have access point controller functionality built right into the system, so I don't even have to purchase additional devices to manage them."
"In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable."
"The main benefit is the grouping of our security monitoring."
"The security features that they have are quite good. On top of that, their licensing model is quite nice where they don't charge you anything for the SD-WAN functionality for the firewall."
"Anti-Spam web content filterinG."
"The most valuable features are the security cloud ACP and KPP features."
"The main features are safeguarding their data and ensuring robust security services for organizational data."
"Using a Juniper CLI, you configure a "candidate configuration", then "commit" it to bring it live. If you do not like it or messed up something, you just "rollback" to the previous configuration. It can all be done in a matter of minutes. This is super handy once you get use to it."
"I have used technical support quite a bit, and they are really good."
"One of Juniper SRX's most valuable features is the site-to-site VPN."
"From a protection perspective, it provides a network perimeter security function for our company."
"Security policies in combination with zones: It is very easy to organize the security polices in a logical structure."
"The high availability of the application is good."
"The most valuable features are the firewall section, the VPN, and how you control live users."
"The product is easy to maintain."
"All in one UTM appliance."
"The solution's web filtering is an important feature for us in our company."
"Bandwidth Management and aggregation. It is valuable for combining two ISPs. Switching to a secondary/redundant ISP is thus seamless, in the event that the primary ISP goes down. The Bandwidth Management is also valuable for limiting heavy downloaders that may impact negatively on the experience of other users."
"The product is a simple and user-friendly UTM that can handle accounting, reporting, firewall, IPS, and antivirus for industries."
"The user interface is well laid out and understandable."
"The best feature is the flexibility the product offers, in terms of remote access. What we had before was a decentralized mechanism in our organization, but after having this product we were able to get the remote locations into the same LAN. We were able to control the bandwidth and were able to take virtual access of those machines and give them the support, as and when required."
"Maybe they could make some features more accessible, such as a way to translate directions between two networks that share the same subnets."
"Fortinet FortiGate could improve by adding enhancements to FortiMail, FortiSOAR, and FortiDeceptor."
"It would be a benefit if Fortinet would release a one-stop solution that is better integrated with other products and an automated emergency response system."
"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."
"Technical support could be better. You don't always get the level of help you need right away."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"I would like Fortinet to add more automation to FortiGate."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"We'd like to improve the stability and the kill rate."
"The user interface is something that Juniper needs to improve."
"Third-party support for Juniper is a lot less than Cisco. This is no surprise, but a definite consideration if you are expecting to use a lot of third party support. In my guesstimate, for every 100 Cisco shops, you will find one Juniper shop."
"The solution is quite advanced. You need a lot of training to use it effectively."
"Junos Space should be improved to be on par with FortiGate's solution for managing firewalls and routing."
"In some cases, customers encounter issues related to network interfaces, while others prioritize security concerns."
"The web interface on Juniper SRX is just a short conversion from Junos OS CLI; this is not very suitable for users with little expertise/"
"The workplace management console needs improvement. It should be a little bit more developed. Also, the interface needs a bit more improvement."
"I would like to see a better content management pack and also the website searching should be better."
"It should have better VPN protection. Some of the VPN applications are not blocked by this firewall. Some VPNs are able to get through this firewall, which is why I am planning to replace this firewall with a good one in the near future."
"The solution had a feature to import users from a CSV file. However, the latest version does not have that option."
"The policy is a bit too vague."
"In my experience the solution can be easier to configure with more documentation, we need more training."
"The reporting part could be more user-friendly for troubleshooting and identifying network issues. It should be more easy for a normal user to identify the problem in their network."
"The VPN needs to be improved."
"The solution could be cheaper."
