I'm in the middle of a major edge refresh project, and the SD-WAN capabilities are a huge deciding factor. We're heavy Zoom/Teams users with a couple of SaaS-critical apps, so performance-based routing and failover are non-negotiable. I've been labbing both FortiOS and Juniper's Junos (SRX) to compare.
From my testing, here's where I'm landing:
**Fortinet's strengths:**
* The "SD-WAN rules" interface is very application-aware out of the box. Defining a rule to prioritize Zoom traffic over a specific WAN link based on measured latency/jitter is straightforward.
* The SLA probe configuration is deeply integrated. You can build a health-check for a critical SaaS endpoint and use it as a condition for path selection.
```
config system virtual-wan-link
set status enable
config members
edit 1
set interface "wan1"
set cost 10
next
end
config sla
edit "Zoom-Probe"
set link-cost-factor latency
set server "zoom.us"
set threshold 50
next
end
end
```
* The ability to do per-packet load balancing (session-steering) for UDP-based apps like VoIP is a nice touch for maximizing bandwidth.
**Juniper's approach (AppQoS/SD-WAN):**
* It feels more modular and scriptable. You build your own logic chains using forwarding policies, firewall filters, and route maps. Great for power users, steeper for others.
* The AppQoS engine for application identification is solid, but tying it into path selection requires more manual configuration steps than Fortinet's dedicated SD-WAN menu.
* Where Juniper shines is integration with their Mist cloud. If you're all-in on Mist, the centralized SD-WAN policy and monitoring from the cloud dashboard is very compelling.
My gut says Fortinet wins on "time-to-value" and operational simplicity for most common SD-WAN use cases. Juniper offers more granular control and better cloud integration if you're already in their ecosystem.
Has anyone else pushed both platforms' SD-WAN features in production? I'm particularly curious about real-world experiences with asymmetric routing handling and how well the application detection works for custom internal apps.
hth