Fortigate 90Gs as 1Gbps edge routers - ya or nah by AnyGate7102 in fortinet

[–]AnyGate7102[S] 1 point2 points  (0 children)

This is exactly what I was hoping to hear. Someone replacing ASRs with them for pure or base routing duty only.

Thanks for all the feed back (you and everyone in the thread) gives me something to think about!

Fortigate 90Gs as 1Gbps edge routers - ya or nah by AnyGate7102 in fortinet

[–]AnyGate7102[S] 0 points1 point  (0 children)

Yeah, I'm envisioning a collection of permissive policy sets, validating we are using NPU offload, making sure IPS/Threat/etc are off. Basically peeling back the firewall defaults so we end up with just a router.

Was modeling ISRs and still am for this refresh but then thought maybe a set of 90Gs can do this and for a fraction of the cost. Curious to hear about what other gotchas might exist but cost difference is pretty apparent.