Get comprehensive, cutting-edge SD-WAN capabilities.
As proven in the NSS Labs SD-WAN Group Test, Barracuda consistently beats Fortinet when it comes to ensuring secure, seamless availability of business-critical applications
Leverage Azure Virtual WAN with dynamic, multi-ISP path selection.
Barracuda is the first and only vendor supporting the new multi-uplink Azure Virtual WAN. This new functionality lets you leverage Microsoft Global Network to build a secure, efficient, high-performance enterprise WAN.
Get zero-touch deployment without exposing credentials.
Barracuda's zero-touch deployment lets you put firewalls in production quickly and safely. Confidential data like your confidential passwords, certificates and tokens are only shared between your Firewall Control Center and your firewalls.
Centrally manage a vast number of firewalls.
Barracuda provides enterprise licensing (aka pool licensing), making it simple for MSPs, distributed enterprises, and others to manage large deployments (hundreds or thousands) of firewalls.
The Barracuda Advantage
| FEATURES |
BARRACUDA CLOUDGEN FIREWALL |
FORTINET FORTIGATE |
|---|---|---|
|
FIREWALL AND SECURITY
|
||
|
Firewall, application control, and IPS
|
|
|
|
Full security set in flow mode security scanning
|
|
|
|
Dual malware protection
|
|
|
|
Botnet and spyware protection
|
|
|
|
Sandboxing (ATP) accuracy
|
|
|
|
Sandboxing (ATP) speed
|
|
|
|
SD-WAN AND NETWORKING
|
||
|
Secure and confidential rollout (ZTD)
|
|
|
|
Drag-and-drop VPN tunnel creation
|
|
|
|
Dynamic bandwidth detection
|
|
|
|
VPN tunnel across multiple uplinks
|
|
|
|
Proprietary high-performance VPN protocol (TINA)
|
|
|
|
Performance-based transport selection
|
|
|
|
Adaptive Bandwidth Protection
|
|
|
|
Adaptive session balancing
|
|
|
|
Tested SD-WAN performance
|
|
|
|
Setup complexity for large WAN networks
|
|
|
|
Fully automated setup for Azure Virtual WAN
|
|
|
|
Multi-uplink for Azure Virtual WAN
|
|
|
|
DAILY ADMINISTRATION AND SUPPORT
|
||
|
On-the-fly reporting with every appliance
|
|
|
|
Fast and efficient troubleshooting
|
|
|
|
Real-time traffic analysis and troubleshooting
|
|
|
|
Award-winning direct support
|
|
|
| CENTRAL MANAGEMENT | BARRACUDA FIREWALL CONTROL CENTER | FORTINET FORTI MANAGER |
|---|---|---|
|
100-percent central management
|
|
|
|
Service provider licensing (pool)
|
|
|
|
Globally reusable templates
|
|
|
|
Dynamically linked repositories, with instantaneous update of 1,000s of units
|
|
|
|
Multi-tenancy (MSP) and multi-administrator
|
|
|
Dynamic bandwidth detection and performance-based transport selection
Fortinet’s basic SD-WAN implementation is not able to apply SD-WAN principles to encrypted VPN traffic between sites. Its multi-transport capability is limited by the nature of the generic IPsec protocol. So when a tunnel goes bad, first the IPsec tunnel has to recognize it, and then routing needs to learn the new route. In some conditions, this may take minutes or hours.
Barracuda CloudGen Firewall uses the proprietary TINA VPN protocol to detect tunnel outages and bandwidth fluctuations instantly and then automatically establishes new pathways within a fraction of a second.
Adaptive Bandwidth Protection
As a side effect of having to fit the industry-standard IPsec protocol into the SD-WAN paradigm and not being fully SD-WAN capable, Fortinet cannot adaptively offload less important traffic from a high-quality link to make room for business-critical traffic.
Barracuda CloudGen Firewalls include Adaptive Bandwidth Protection to ensure that the highest-quality links are used for the most important traffic.
Adaptive session balancing
FortiGate chooses the best uplink path only as a network session is initiated; from then on, as long as the session remains active, it cannot switch uplinks. So, for example, if traffic on a given uplink is severely degraded during a lengthy backup session, it will stay on that uplink, likely exceeding its window and resulting in a failed backup. And if the uplink fails completely, FortiGate devices have to renegotiate the session to restart, which can also lead to a failed backup.
Barracuda CloudGen Firewalls dynamically assess uplink quality and switch uplinks on the fly as needed.
Azure Virtual WAN
Fortinet recently announced basic support for Azure Virtual WAN, but it amounts to nothing more than a number of scripts you can run to connect to Azure Virtual WAN. By contrast, Barracuda CloudGen Firewall and Firewall Control Center give you fully automated deployment.
Fortinet only supports a single uplink to Azure Virtual WAN. It does not support dynamic path selection across multiple ISPs for Azure Virtual WAN, which is among the most highly valued features of Azure Virtual WAN. Barracuda's link balancing features ensure the most reliable possible connectivity to your Azure Virtual WAN.
Daily administration, troubleshooting, and support
Barracuda CloudGen Firewall’s built-in tools make daily admin tasks fast and easy. Two available apps deliver timely, actionable reports, and Barracuda customer support is among the industry’s best.
With FortiGate, connections can be allowed and blocked in several places, with scattered information. Some blocked connections might not be logged anywhere, leaving you to sniff them via command line. The slow, kludgy FortiAnalyzer still leaves many users exporting logs directly to save time. And Fortinet support is known for being costly and often of poor quality.
Recommended by customers and analysts.
Interested in Barracuda CloudGen Firewall?
Request a no-risk, free evaluation.
Schedule a CloudGen Firewall demo!
When is a good time for us to call? We will do a brief needs assessment and arrange for the CloudGen Firewall demo that best meets those needs.
Do you need immediate assistance? Chat now or call us at +1 866 945 4518.
