k-strider Posted July 5, 2019 Posted July 5, 2019 Hi has anyone swapped out their netasq/stormshield U250S-A fierwall to a Fortigate one that EXA are now recomending.... just curious
hallb15 Posted July 5, 2019 Posted July 5, 2019 We ditched the Stormshield when we moved to Darklight, but we went with our own UniFi Gateway Pro, rather than the Fortigate. It has its plusses and minuses but I like having full control.
k-strider Posted July 5, 2019 Author Posted July 5, 2019 We ditched the Stormshield when we moved to Darklight, but we went with our own UniFi Gateway Pro, rather than the Fortigate. It has its plusses and minuses but I like having full control. how big is your school /estate... we have 100 LL but we dont often top it out im sure the Stormshield SSL decrytion of the web traffic is where our bottleneck actually is given that nearly all web traffic is now SSL...
hallb15 Posted July 5, 2019 Posted July 5, 2019 how big is your school /estate... we have 100 LL but we dont often top it out im sure the Stormshield SSL decrytion of the web traffic is where our bottleneck actually is given that nearly all web traffic is now SSL... We're a large primary with 730 pupils and about 200 devices, including 40 iPads. We're on a 300Mb connection but we don't often top 100Mb. The Stormshield was definitely slowing things down for us before - it just didn't handle SSL traffic well. 1
crc-ict Posted July 5, 2019 Posted July 5, 2019 We were switched over to the cloud filtering because the Stormshield was causing a bottleneck for us. However, we have also been told that we still need to change the Stormshield out as firewall because it is no longer supported by the manufacturer. What is annoying is that we will now have to pay £200 a year for management for the new firewall which did not previously have to pay with the Stormshield. So it's either the annual management cost for Exa to continue managing it, or the training cost for me to be trained to do it! 1
k-strider Posted July 5, 2019 Author Posted July 5, 2019 We were switched over to the cloud filtering because the Stormshield was causing a bottleneck for us. However, we have also been told that we still need to change the Stormshield out as firewall because it is no longer supported by the manufacturer. What is annoying is that we will now have to pay £200 a year for management for the new firewall which did not previously have to pay with the Stormshield. So it's either the annual management cost for Exa to continue managing it, or the training cost for me to be trained to do it! how does the cloud filtering work is it transparent like the netasq? just install / push out a certificate? and how does it get users from AD
mavhc Posted July 5, 2019 Posted July 5, 2019 I bought my own fortigate and trained myself as much cheaper. It's a little tricky to get started with, but loads of documentation. It's been able to cope with whatever wacky config ideas I've had. Proxy that's only enabled at break time so pupils appear as a different IP, and thus games are not filtered? Fine. Only slight trouble was when it decided to help with SIP.
Alis_Klar Posted July 9, 2019 Posted July 9, 2019 (edited) Is there an iOS config guide for fortigate VPN that Exa provide for their cloud firewall? Can you just use the native iOS IPSec client as here https://cookbook.fortinet.com/ipsec-vpn-for-ios-devices/ Seems the Forticlient for iOS does not support IPsec which I guess is because iOS has it's own native client? Edited July 9, 2019 by Alis_Klar
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now