Re: Fortinet Firewalls

["Pufahl, Jason" <jason.pufahl () UCONN EDU>]

The University of Connecticut uses Fortinet firewalls at a variety of locations throughout campus.  Unfortunately, we 
deployed them at our Internet borders and they have never performed as advertised.  We have had no end of significant 
software issues related to A/V and IPS scanning and performance.  At our lower traffic volume sites the hardware 
performs adequately.  Our opinion is that Fortinet is not suited for an enterprise deployment, but that they fit well 
in a small office/small network scenario.
We are in the process of evaluating different vendors now with the intention of replacing the Internet facing  
firewalls before next fall.
Feel free to contact me off list if you would like additional information.
-Jason Pufahl
Team Lead, Network Security
University of Connecticut


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kellogg, 
Brian D.
Sent: Thursday, April 23, 2009 8:57 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Fortinet Firewalls

We currently run an old Pix firewall and it’s done the job well, but it’s time to retire it.  We are looking at 
Fortinet and Cisco ASA at the moment and are quite interested in Fortinet due to the its price and capabilities at that 
price point.  Would anyone be willing to share their experience with Fortinet firewalls and their tech support?  We are 
most interested in their VPN, both user and site to site; SSL VPN; virus scanning; and IPS features.
Suggestions of other vendors that can provide the same features are welcome as well.


Thank you,

Brian Kellogg
Network Services Manager
St. Bonaventure University
716-375-4092