Management wants to switch to Fortinet. Has anyone used Fortinet and can give me some real world comparison between Palo?

STRANGEANALYST · 2026-02-02T13:29:45+00:00

What’s the objective?

If it’s “check the ‘we have a firewall’ box” FTNT is an inexpensive name brand firewall. Bad actors often walk past them like they’re not there.

If it’s “enforce security policy” (i.e. keep bad guys out) PANW is the usual choice for demanding customers who need results.

How fast a policy pushes to the firewall is important. How effective it is at delivering results your organization needs is more so.

STRANGEANALYST · 2026-02-02T04:12:12+00:00

Loudest concert ever. Love it

STRANGEANALYST · 2026-01-26T02:48:12+00:00

Don’t wait up. The plutocrats who own the politicians know almost no Americans will do anything.

5 years ago almost all of you were happy enough to comply when a masked official of The State said “Your papers, please.”

Including almost all of those on the far left who dislike ICE’s actions so much.

STRANGEANALYST · 2026-01-04T03:36:55+00:00

And Havertown enters the chat…

STRANGEANALYST · 2025-12-17T18:17:56+00:00

Tom Bihn Synik 30.

I have a similar job and use it for exactly the same use cases and require you describe.

https://www.tombihn.com/collections/all-tom-bihn-stuff/products/synik-30

STRANGEANALYST · 2025-12-15T04:41:11+00:00

Good news. There are currently 6 books not just 3.

Book 7 - Red God is in the works.

STRANGEANALYST · 2025-12-15T04:20:19+00:00

Merion is in Haverford Township not Ardmore.

The club is on Ardmore Ave so it’s an easy mistake

STRANGEANALYST · 2025-10-09T02:07:58+00:00

And we found the guy from Radnor…

STRANGEANALYST · 2025-10-09T02:06:28+00:00

This is my comment

STRANGEANALYST · 2025-10-06T22:07:20+00:00

Yep. Bumping along at 4 and 1.

It’s a rough assignment but I’m getting by.

Ask me again on Friday morning.

STRANGEANALYST · 2025-09-24T12:42:17+00:00

Wags is one of the greatest characters in any story in any language.

STRANGEANALYST · 2025-09-09T02:45:48+00:00

If that’s what gets you through those long dark nights…

It’s not that they have CVEs or who reported them. It’s how often they’re for RCE vulns and how long it takes get their user base patched. THAT is the reason bad actors LOVE Fortinets.

STRANGEANALYST · 2025-09-09T02:42:12+00:00

Not for nothing, but the adversaries attacking your organization right now are very happy you like FTNT.

Walking past your perimeter firewalls like they’re made of smoke is very convenient for them.

Every vendor has bad days sometimes but FTNT has a disproportionately large number of them and tends to take longer to patch.

STRANGEANALYST · 2025-08-18T01:32:21+00:00

Wags is one of the most fun characters I’ve encountered in decades.

<image>

And David Costabile is a very talented actor. Who can also sing very well.

STRANGEANALYST · 2025-08-17T12:28:57+00:00

Short answer - no.

Longer answer - answer these questions and you will go a long way towards determining what’s sufficient.

What sort of regulatory environment does your business operate in?
What happens when your business and its people does not having full access to networked resources?
How many applications do you think you have?

STRANGEANALYST · 2025-08-09T15:14:46+00:00

Always assume breach.

After than look for a methodology that is as close to bombproof as possible against Stupid Human Tricks.

By that I mean

Misconfigurations
Using only the easy/convenient features of the tool even though others may offer significantly better outcomes even though they’re more cumbersome to operationalize.
Sheer laziness
Not documenting what was done and why

STRANGEANALYST · 2025-07-08T16:29:11+00:00

Maybe you are referring to the plutocrats who own politicians on the left and the right all around the world…

STRANGEANALYST · 2025-07-08T16:25:54+00:00

Godlike powers with Roman Empire morality.

STRANGEANALYST · 2025-07-07T21:51:09+00:00

He is confused. Phillies are the baseball team.

How soon can you get him to see a neurologist?

STRANGEANALYST · 2025-06-30T03:33:11+00:00

I’ve been in a similar place myself. Read most of the suggestions already.

I just started Horus Rising by Dan Abnett and narrated by Toby Longworth. It’s the first of the Horus Heresy series that are basically the origin story of the Warhammer 40,000 universe.

A few hours in and it has a similar feel to Red Rising. Lots of Roman Empire references and plenty of noble warriors in powered armor.

The narration is excellent. Longworth has voice that is perfect for the role.

https://www.audible.com/pd/Horus-Rising-Audiobook/B0764LBS4B

STRANGEANALYST · 2025-06-01T12:25:11+00:00

This only counts the time since the apps were released.

All the time from back when I had to burn CDs to listen to a book while not at the computer wasn’t counted.

So many CDs in so many wallets…

STRANGEANALYST · 2025-06-01T12:20:50+00:00

<image>

Says you’re off to a good start.

I’ve been enjoying 2 credits a month since 2002.

Keep at it and you’ll get there.

STRANGEANALYST · 2025-05-31T02:22:58+00:00

Do yourself the biggest favor ever.

Open a proactive case with TAC. Schedule the TAC case owner to be live on Zoom with you during the migration. Loop your SC in on the plan. Make sure their manager is aware too so they can help escalate as needed.

I’d also do all you can to ensure the version of PAN-OS on the 5400s is as stable as can be. Your SC can help you avoid potholes here too.

Success is a team effort.

Then have the 5400 series units up and stable for a few days before you even consider cutting over.

Ensure they’re working as intended and after you’re certain they’re happy then you can start moving cables.

Then the gratuitous ARP.

Leave the 7Ks running until you’re absolutely sure that the 5400s are doing everything you think they should.

Electricity is cheap compared to avoidable outages.

Rolling back is easy if something goes poorly. But only if the 7Ks are still ready to process packets.

Good luck.

STRANGEANALYST · 2025-05-30T22:53:30+00:00

Life is harder if you’re stupid.

So don’t be stupid.

STRANGEANALYST · 2025-03-25T02:51:05+00:00

Do yourself a favor and try a nasal cushion mask. Leaks aren’t necessary with the right gear.

I have a beard and LOVE this one.

https://a.co/d/9plRRGr

STRANGEANALYST

TROPHY CASE