When we're upgrading, it's sometimes quite challenging, especially firmware. We usually don't upgrade unless we have a bug, and we still feel it's not safe to react instead of being proactive. We often have some delays when updating FortiGuard, too. Nevertheless, I believe that it's okay most of the time with proper management. We also run into some problems using FortiGate as a UTM solution. I feel like maybe they're not giving me a full view of the other components that they have in that box. Their box has some DDoS defense, but I need complete DDoS protection. I must not have light DDoS protection on other UTM boxes because if I'm uncertain about the security posture, it will compromise me. We like having everything in one box because running multiple boxes eats up more resources on the computing level. We need a total solution, not half-half.
