Reply to thread

Message

<blockquote data-quote="MacDefender" data-source="post: 917000" data-attributes="member: 83059">It&#039;s not cheap but it&#039;s one of the lowest cost UTM services out there. Meraki MX is about $1000/yr for the same set of features on their 450mbit appliance. IPS, AV, and web filtering requires constant updates (several a day) and you&#039;re protecting 20-50 devices behind a firewall.Your distributor is correct in that the Fortinet box is not a VPN client. Its VPN does two things:<ol>
<li data-xf-list-type="ol">Allow clients to VPN into the Fortinet box to get internal network access (dialup mode)</li>
<li data-xf-list-type="ol">Connect to other VPN capable firewalls&nbsp; and route to those remote networks (site to site VPN)</li>
</ol>The mode of operation you&#039;re looking for is being a VPN client and NATting all local traffic through that VPN connection, which is not something Fortinet supports.Again, price-wise, you really do have to ask yourself if UTM is the right solution for you. I run a few servers at home and have a few dozen IoT devices, and I don&#039;t babysit any of them too regularly. I have had Cisco&#039;s IPS save my butt when I assumed my Windows Server automatically patched but a glitch caused it to not auto-reboot for a wormable vulnerability! But if you on the other hand just had 10 computers on your network and you can get a $100/yr family pack of Kaspersky on them, that might be a better way forward.And please don&#039;t tempt yourself into thinking that grabbing a few dozen piHole blocklists from Twitter and messing around with open-source free Snort rules is going to be similar to a UTM in performance. A lot of the value-add in these UTMs is the fact that Fortinet has millions of customers and has fine-tuned all their rulesets for the right level of protection vs minimal false alarms. I&#039;ve been there done that, and after trying that for a few years I happily pay for a professional company to do this work for me <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" /></blockquote>

[QUOTE="MacDefender, post: 917000, member: 83059"] It's not cheap but it's one of the lowest cost UTM services out there. Meraki MX is about $1000/yr for the same set of features on their 450mbit appliance. IPS, AV, and web filtering requires constant updates (several a day) and you're protecting 20-50 devices behind a firewall. Your distributor is correct in that the Fortinet box is not a VPN client. Its VPN does two things: [LIST=1] [*]Allow clients to VPN into the Fortinet box to get internal network access (dialup mode) [*]Connect to other VPN capable firewalls and route to those remote networks (site to site VPN) [/LIST] The mode of operation you're looking for is being a VPN client and NATting all local traffic through that VPN connection, which is not something Fortinet supports. Again, price-wise, you really do have to ask yourself if UTM is the right solution for you. I run a few servers at home and have a few dozen IoT devices, and I don't babysit any of them too regularly. I have had Cisco's IPS save my butt when I assumed my Windows Server automatically patched but a glitch caused it to not auto-reboot for a wormable vulnerability! But if you on the other hand just had 10 computers on your network and you can get a $100/yr family pack of Kaspersky on them, that might be a better way forward. And please don't tempt yourself into thinking that grabbing a few dozen piHole blocklists from Twitter and messing around with open-source free Snort rules is going to be similar to a UTM in performance. A lot of the value-add in these UTMs is the fact that Fortinet has millions of customers and has fine-tuned all their rulesets for the right level of protection vs minimal false alarms. I've been there done that, and after trying that for a few years I happily pay for a professional company to do this work for me :D [/QUOTE]

Verification