Fortinet is conducting a 2010 network security survey. Completing the 15 multiple choice questions automatically enters takers into a drawing for a chance to win one of three new Apple iPads. By taking this survey, you are helping us better understand what the users see as significant trends that are occurring in the security industry. While your answers will remain anonymous, we ask for your email at the end of the survey so that you can be notified should you be one of the three lucky iPad winners.

Winners will be announced in August. Questions related to this survey can be addressed to Rick Popko. Thank you for your participation.

It seems that we keep getting caught up in what can be referred to as “religious” discussions when it comes to technology and the choices in front of us.  Consider the UTM debate and the proposition by influencers of the industry that enterprises have no business investing in this technology.  I am not going to focus on the debate between UTM and alternatives available within the market today; instead I want to ask why there needs to be a line drawn in the sand? Is there value in telling enterprises “thou shall not adopt UTM,” or is there more value in giving an impartial opinion on how each approach has their own respective merits for ANYONE, enterprise or not? Never before (at least not that I can recall) has there been such adamant drives to tell customers what technology simply has NO PLACE for them.

This is casting our memories back to a time when firewalls and VPNs were “supposed to be” separated for many reasons (performance, security etc.), but with technology innovation and advances the naysayers were silenced.  Yes, it makes sense to merge these perimeter technologies – the technology exists, it makes sense and it benefits customers.

Can we not draw a parallel between this example with new security products and solutions?  Yes, I don’t doubt that there are some customers that are not ready for the convergence of an integrated security solution (aka UTM), but there are many customers who are ready and a UTM solution is right for them. ”Evangelists” are merely doing the industry a disservice by saying “NO! You might like the idea, heck you might even like the product and can derive significant benefit from it…but you are an ENTERPRISE! Send that box packing on that Unicorn riding Pixie it rode in on.”

We can all quote factual data supporting any side of the story, but at the end of the day what counts is that we are all developing products and technologies to stop the spread of cybercrime and protect customers and their infrastructures.  The packaging is just the wrapping – do yourself a favor, evaluate and purchase the technology that solves your problem, and if you are an enterprise evaluating UTM, don’t fret. We are here to support you.

In July, Gartner published its Magic Quadrant for SMB Multifunction Firewalls report, which we view positively as it is the firm’s official validation of multifunction security consolidation appliances. Gartner defines multifunction firewalls as all-in-one security appliances, and multifunction firewall is the firm’s term for what has been more widely known as unified threat management, or UTM, coined by IDC in 2004.

Fortinet pioneered and built its business on the vision that unified solutions bring security, cost, and operational benefits to customers of all sizes. While we are pleased to be the best-positioned vendor in Gartner’s report, we disagree with various statements the firm makes — namely that multifunction firewalls (or UTM solutions) only belong in small to medium business environments. We see evidence to the contrary every single day.

It is true that SMBs and larger enterprises use multifunction firewalls differently; SMBs typically deploy more of the integrated security functions than do large enterprises. However, we believe, and the data supports, that numerous enterprises, telecommunication carriers and service providers have adopted UTM solutions for the benefit of being able to turn the functions on one at time as needed without having to deploy additional functions. This is a clear trend among our enterprise customers. But perhaps the strongest evidence for UTM’s rightful place in enterprise environments is quantitative data from IDC.

According to the IDC Worldwide Security Appliance Tracker, more than $500 million was spent on enterprise and high-end UTM appliances in 2008, compared with $280 million in 2006*. So, if UTM is not an enterprise or high-end play, where are all of these units going?

Further supporting IDC’s quantitative data is research from Frost & Sullivan, who reported in its World Unified Threat Management 2008 end-user study that “UTM has started to appear in enterprise and data-center class networks.” We are observing the same trends that IDC and Frost & Sullivan are seeing. Here is some data to support this:

• Fortinet has shipped more than 450,000 UTM appliances.
• More than 75,000 global customers, including the majority of the Global 100, have purchased our UTM appliances.
• Some notable customers include Polycom, CKE Restaurants, Sylvania and many branches of the U.S. Federal Government, including the Marine Corps, Army, Navy, Air Force, civilian agencies and the intelligence community.

Gartner is certainly entitled to its opinion, but there are hard facts to support the notion that UTM appliances are not an SMB only solution. Data from numerous analyst firms, vendors, and end-users themselves give credence to the fact that enterprises are adopting UTM solutions at an accelerating pace. For a firm like Gartner to continue to ignore or refute this market shift is difficult to fully understand and seems a disservice to those who rely on their research and analysis.

* Data based on price bands above $6K

We had a bit of a win last week. CRNtech published a top-notch review of the FortiGate-620B, one of our more popular multi-threat security appliances among enterprises. We normally don’t like to brag about our products, but this is a project of which our R&D team can be very proud.

Naysayers in the past have expressed concerns that no company can do all things well; we’ve proven that wrong. Here are some examples from the review:

• What’s attention-grabbing about this device… is that it fights threats that have broken through the security perimeter of the average network, including threats posed by mobile devices that often pass through traditional security defenses.

• Fortinet has designed this device from the ground up, delivering the goods on both the hardware and the software fronts.

• The software is the latest, version 4.0’s. core technologies include firewall, Web content filtering, antimalware, intrusion protection, VPN (both IPSec and SSL) and two additional critical components: data leak prevention and granular application control.

• The management interface is well-designed, and full of information and configuration options… The management interface includes a series of widgets that can be added, changed and moved around offering complete customizability for the administrator.

• To help sift through the potentially dizzying array of options, the FortiGate’s management interface has intuitive help guides. The help topic relates to the specific area of the interface you are in, a feature that is so helpful and so woefully lacking in other UTMs we have tested.

We’ve worked hard. Thousands of Fortinet customers have already installed and upgraded to FortiOS 4.0 to take advantage of the enhanced security features outlined above. This is an appliance that can scale, as proven by the reviewer, our management interface is grade A.

While again this might be a bit boastful, I’m proud of our team. And thankful for our customers, for giving us the feedback and ideas needed to develop these products.