Hi everyone, new to this corner of the forum. I've mostly been involved in Google Workspace and SaaS migrations, but our recent firewall upgrade project has me diving deep into the NGFW world. We're a ~500 user organization, and the budget committee is laser-focused on TCO, not just the sticker price.
We've narrowed it down to Fortinet (FortiGate) and Cisco (specifically Firepower). I've been reading the datasheets, but I'm really interested in real-world operational costs. For a shop of our size, which platform ends up being less of a burden to run day-to-day?
From my own migration experience, hidden costs always pop up. I'm trying to think this through:
* **Licensing Complexity:** I've heard Cisco's licensing tiers can be a maze. Is the management overhead as significant as some say?
* **Operational Overhead:** Which one has a steeper learning curve for a team that's competent but not full-time firewall experts? Time spent troubleshooting is a cost.
* **Feature Clarity:** For core next-gen features (IPS, web filtering, SSL inspection) at our scale, is one notably more straightforward to implement and keep running?
We value stability and clear management. I’d love to hear from teams who have lived with one or, ideally, both. What were your surprises, good or bad, after the initial deployment?
Migration is never smooth.