Does a network with a fortigate 400 firewall need a router or a router/firewall between it and the internet?

A diagram of the basic setup:

T1 connection (i.e. the internet you typically see on these diagrams)
|
router about 4-6 years old (sorry about the lack of brand/model, I'm writing this from offsite, and I don't have the info at hand)
|
fortigate 400 (used as a firewall, AV, etc.)
|
Internal Network

They are ready to replace the router. They like cisco.

The Q: Is there a cisco router that would be secure on the edge of the network, or do they need a router with firewall built in (potentially making at least some of the fortigate 400 capabilities redundant)?

Added info - there are about 150 employees. there is an exchange server and two web servers behind the fortigate, and they'd like to use the new fortigate SSL VPN.

Thanks for the help. Help with style is welcome - this is a first time post.
youngslimAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

noctotCommented:
What's your budget?
0
youngslimAuthor Commented:
Not sure. 1K - 2K perhaps. Some of it will depend on what's appropriate.
0
youngslimAuthor Commented:
Sorry about the delay in answering. A different fire came up over the weekend. :-)
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

noctotCommented:
Check out the Cisco 2800 series. Probably a 2801 would work and be close to that price range. A used 2811 or 2821 would probably be more than you need and be under budget. The 2800 series should be powerful enough to replace your router and firewall. Firewalls are really just routers that are specially designed to do traffic analysis work.
0
youngslimAuthor Commented:
Noctot,
1. Are you suggesting the 2801 could or should replace the Fortigate firewall? the fortigate serves other functions as well. If yes, would the router handle the NAT?

2. "With the Cisco IOS® Software Advanced Security feature set, the Cisco 2800 provides a robust array of common security features such as a Cisco IOS Software Firewall, intrusion prevention, IPSec VPN, advanced application inspection and control, Secure Shell (SSH) Protocol Version 2.0, and Simple Network Management Protocol (SNMPv3) in one secure solution set."

Is the above included in the router?



0
noctotCommented:
  The 2800 can definitely handle NAT. The advanced security feature set is a firmware upgrade but I'm sure you can purchase the router with the security feature set included.
   What other features of the Fortigate are you using? The only one I know of that a Cisco router doesn't handle is virus protection.
0
youngslimAuthor Commented:
The content filtering is good. They use the anti-spam in addition to a different vendor on their exchange. (same story for AV)

0
youngslimAuthor Commented:
I'm about ready to close out this question. Appreciate the help so far.
I'm going to suggest they leave the fortigate in place because they like it, know it and use its features, and purchase a a Cisco 2800 model t(probably the 2801) to replace the current router.

Can they continue to use the fortigate vpn or would they be forced to switch to the one in the cisco router. Any last thoughts?
0
noctotCommented:
  If you just want to replace the router then the 2801 is a perfect choice. They should be able to continue using the Forigate exactly as it is with no configuration changes whatsoever. Just make sure you are very clear on the router-to-be-replaced's config as you will need to recreate it in the Cisco.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
youngslimAuthor Commented:
Thanks for all your help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.