Hey everyone! 👋 Hope you're all having a productive week. I've been pulled into a project that's a bit outside my usual marketing automation sandbox, but I think it's a fascinating problem. A close friend is the IT lead for a growing retail chain (about 300 employees across 25 locations), and they're finally upgrading from a patchwork of old gear to a proper, unified FortiGate setup. The big kicker is they're committed to implementing SD-WAN to handle their mix of broadband circuits at each store for reliability and to support their new cloud-based inventory and POS systems.
They've asked me for my take, and while I'm coming at it from a workflow and "connecting systems" perspective, I'd *love* to tap into this community's real-world experience. Their core needs seem to be:
* **Scale for 300 users,** but with the understanding that concurrent connections are spread out across locations, with the heaviest load being at the main HQ (maybe 50-75 users).
* **Strong SD-WAN capabilities** that are manageable. They don't have a huge networking team, so a straightforward interface for policy-based routing, link health monitoring, and failover is key.
* **Future-proofing for retail.** Think PCI-DSS compliance scanning, the ability to segment traffic for payment systems, and maybe even some basic guest WiFi control at each location.
* **Centralized management** is a non-negotiable. They need to push policies and updates to all locations without having to visit each store physically.
From my research dive, I'm looking at the **FortiGate 100F** series for the larger headquarters. It seems like the sweet spot for performance with full UTM features turned on. For the branch stores, I'm oscillating between the **FortiGate 60F or 80F** models. The 60F feels cost-effective, but I worry about headroom if they add more bandwidth or services at each location in a few years.
My big questions for those of you who've been in the trenches:
* For a distributed retail environment, is the 60F sufficient per branch, or is the jump to the 80F for the extra throughput and larger connection table worth the investment?
* How hands-on is the SD-WAN configuration in FortiOS? Are we talking about a steep learning curve, or is it something a smaller team can get up and running with good documentation?
* Any "gotchas" with mixing models (like a 100F at HQ and 60Fs at branches) when it comes to FortiManager or FortiAnalyzer for reporting?
* I'm also thinking about the importance of a good HA setup at the central site—would you pair the 100F with another 100F, or consider a step-up model for the active node?
I'm all about building efficient, automated workflows—just usually in Marketo! 😄 Applying that same mindset here, I want to help them choose a model that won't create a ton of manual overhead or need a forklift upgrade in two years. Any stories, performance reports, or configuration tips you can share would be incredibly valuable.
Automate everything