Fortinet FortiGate vs Juniper Contrail SD-WAN comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
13,719 views|10,274 comparisons
90% willing to recommend
Juniper Logo
829 views|432 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortinet FortiGate and Juniper Contrail SD-WAN based on real PeerSpot user reviews.

Find out in this report how the two Software Defined WAN (SD-WAN) Solutions solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortinet FortiGate vs. Juniper Contrail SD-WAN Report (Updated: March 2024).
769,479 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The features that I have found most valuable are the SD-WAN and their IP4 policy.""The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup.""The initial setup of Fortinet FortiGate was straightforward.""I only deal with it from a security analyst's point of view. I don't really get into the features of the actual FortiGate. From the security point of view, it works, and it does its job.""The most important feature, normally for small business customers, is link load balancing.""This product is definitely scalable.""Fortinet FortiGate is stable. It's used across all the countries, this is the way most multinationals run their system.""I appreciate FortiGate's flexibility, which allows for centralized management through FortiManager."

More Fortinet FortiGate Pros →

"It gives you that level of visibility to understand what's going on between layer four and layer seven.""It supports desktop management, network management, and SD-WAN policies.""The support is very good from Juniper and from the local distributors.""My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH.""The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility."

More Juniper Contrail SD-WAN Pros →

Cons
"The customization could be improved. Cisco, for example, is much better at this. They need to work to be at least as good as they are.""There are some problems that support cannot give you a logical reason as to why it happened. For example, I had a case where I was dealing with a WhatsApp application that was giving issues. Technical support gave more than one reason it could be giving issues, but none of them solved the problem. Eventually I solved the problem, but it was far from the solutions that support had given.""I would like to see improvements made to the dashboard and UI, as well as to the reporting.""The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility.""I would like to have logs, monitoring, and reporting for a month without extra fees.""They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company.""In some cases, its initial setup could be hard for customers.""I think that the infrastructure for the VPN could be improved. The way that it is bundled also made it difficult to use and sell as it is too expensive."

More Fortinet FortiGate Cons →

"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that.""Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process.""The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this.""The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation.""The solution is expensive. Its support can be better."

More Juniper Contrail SD-WAN Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "The licensing structure is very flexible."
  • "The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."
  • "They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."
  • More Juniper Contrail SD-WAN Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
    769,479 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main hang-ups will be with the VIP/load balancing and SSL. For some reason that completely escapes me, both of these vendors make getting valid certificates onto their boxes unnecessarily difficult -- the Fortinet appliances more so than the Sophos UTM appliances. At one point a Fortinet engineer had to write an entire manual on how to get an SSL certificate uploaded successfully on the 4.x firmware Sophos: The one feature that is missing (and this makes some amount of sense) from the Sophos appliance is BITS caching for updates. Other than that, Sophos offers a full replacement for TMG on UTM9. The XG platform also offers a replacement for the TMG; however, some of the rumblings about upcoming releases suggests that Sophos is going to give XG the Apple iOS treatment and "streamline" the interface...potentially cutting out/hiding some functionality. On the effectiveness of the NGFW, Sophos is mostly good but has a few issues blocking all pieces of an application. For instance, we had to build custom blocking rules for OpenVPN (the vpn was being used to bypass the content filter) because the default Application Control wasn't effectively blocking the application. Fortinet: If it… Read more →
    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too.… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know the firewalls change every 5 to 7 years as stated but you really do need to… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite good. The most valuable features for me are their web and email filtering. I would… more »
    Top Answer:It supports desktop management, network management, and SD-WAN policies.
    Top Answer:My advice regarding setup costs, pricing, and licensing for Juniper Contrail SD-WAN would be to carefully evaluate and position the solution in line with competitive offerings, especially considering… more »
    Top Answer:Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process, which can be challenging for customers compared to cloud deployment. Additionally, integration… more »
    Ranking
    Views
    13,719
    Comparisons
    10,274
    Reviews
    42
    Average Words per Review
    690
    Rating
    8.4
    Views
    829
    Comparisons
    432
    Reviews
    3
    Average Words per Review
    544
    Rating
    8.3
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Contrail SD-WAN
    Learn More
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    Contrail SD-WAN delivers a simple, automated multicloud SD-WAN. It enables you to create an evolvable architecture to simplify growth, from secure routers to SD-WAN, SD-Branch, and beyond. It automates the WAN edge across Juniper virtual cloud endpoints and on-premises next-generation firewall or universal CPE platforms. And it provisions and enforces multilevel security policy at scale, across multiple clouds and enterprise sites with diverse topologies.

    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Allied Pinnacle
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    VISITORS READING REVIEWS
    Educational Organization31%
    Computer Software Company11%
    Government8%
    Construction Company6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise41%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise32%
    Large Enterprise46%
    Buyer's Guide
    Fortinet FortiGate vs. Juniper Contrail SD-WAN
    March 2024
    Find out what your peers are saying about Fortinet FortiGate vs. Juniper Contrail SD-WAN and other solutions. Updated: March 2024.
    769,479 professionals have used our research since 2012.

    Fortinet FortiGate is ranked 2nd in Software Defined WAN (SD-WAN) Solutions with 306 reviews while Juniper Contrail SD-WAN is ranked 15th in Software Defined WAN (SD-WAN) Solutions with 5 reviews. Fortinet FortiGate is rated 8.4, while Juniper Contrail SD-WAN is rated 8.0. The top reviewer of Fortinet FortiGate writes "It's a reliable solution that's easy to install and cheaper than competitors ". On the other hand, the top reviewer of Juniper Contrail SD-WAN writes "A scalable solution that is easy to configure". Fortinet FortiGate is most compared with Sophos XG, Cisco Secure Firewall, Netgate pfSense, Meraki MX and WatchGuard Firebox, whereas Juniper Contrail SD-WAN is most compared with Juniper Mist Edge, Cisco SD-WAN, VMware SD-WAN and Aruba EdgeConnect SD-WAN Platform. See our Fortinet FortiGate vs. Juniper Contrail SD-WAN report.

    See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

    We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.