SECURITY

Replacing your core router with a FortiGate device depends on your network needs. While FortiGate offers robust security features like firewall protection, VPN, and intrusion prevention, core routers handle routing protocols and large-scale traffic. I recommend using FortiGate as a security appliance alongside your core router rather than replacing it entirely, as core routers are optimized for routing functions that FortiGate may not fully support. This approach ensures both strong security and efficient network routing.

Hi @ULL1903 ,

Without a network topology diagram, it's really hard to provide you with any recommendations.

However, you may use the Core Router as the Gateway for the FortiGate device.

Hello @ULL1903 

Following points need to checked:

1. Make sure the device supports the protocols which are running on your existing device.

2. Firewall policies needs to be correctly applied, else it will break the communicationn.

3. Device hardware capability.

4. Network topology as mentioned by the other members, it plays the important role

What is the current vendor and model of your Core router ?

As others have asked, your topology and requirements would allow for a more complete answer, but for sake of just adding some further insight, using myself as an example, I use a FortiGate solution as my core router at my data center for specific subnets I want to perform security inspection on. So while my Aruba CX equipment does L3 routing for some network subnets from my WAN sites, my FortiGate does L3 routing and security inspection for those subnets at my datacenter I want that added level of protection on.