which fortinet product should I buy?

Fortinet will not solve your ransomware problem.  Nothing is 100%.  Nothing is CLOSE to 100%.  You need to do multiple things to protect your network.  While it's not clear, you should understand a Ubiquiti Access Point has NOTHING (or NEAR nothing) to do with your security.  It only provides wireless - it's not even a router!

Fortinet devices are mostly router/firewalls.  What router/firewall are you using now?  Linksys?  Netgear?  Something you bought from BestBuy?  Consumer grade stuff is a joke and offers very little in protection.

Fortinet is a valid solution.  But so are many other business-class products, including Ubiquiti's Gateway products.  I personally use Untangle.  But even if you put something business class in place, you still have to TRAIN your users, run and keep updated an antivirus product, implement antivirus on your gateway (router/firewall), and perform backups and off-site backups.  

Anyone telling you you just need one thing is lying to you.

Fortinet will not solve your ransomware problem.

True. More to the point, no router will. It is NOT a router problem.

Ransomware is a SPAM problem and silly people clicking on "See this great picture"  link. Dead and gone.

Get a Top Notch Spam Filter
Train users to NOT open emails from strangers
Have daily backups that go Offline.

Training should be a constant effort

Firewall is just a means to the end to treat symptoms and mitigate further exposure but it cannot stop your machine from being infected. You needed layer of defence from network to system to application to people.

1. Network - The best first line of defense is to segment the network. Without proper segmentation, ransomworms like WannaCry can easily propagate across the network, even to backup stores, making the recovery portion of your incident response (IR) plan much more difficult to implement.

Implement security controls - Apply signature and behavioral-based solutions throughout your network in order to detect and thwart attacks both at the edge of your network as well as once they have penetrated your perimeter defenses.

2. System - Discover and then maintain a live inventory of what devices are on your network at all times. Of course, this is hard to do if your security devices, access points, and network devices can't talk to each other. As IT resources continue to be stretched then, an integrated NOC-SOC solution is a valuable approach. Diligence in keeping up to date with patching is critical. The past WannaCry breach is a classic example that makes clear that unpatched systems continue to be a primary conduit for attacks and malware.

3. Application - Make it a rule that any devices coming onto your network meet basic security requirements and that you actively scan for unpatched or infected devices and traffic. And especially if you are running internet accessible web application or equivalent, they are part of the asset to be validated through regular penetration testing.

People - Training up support to look out for anomalies on the threats through the defence set up above. People vigilance is the last of defence and beware of phishing email and suspicious thumb drives or USB sticks.

Sum up, as I digress, fortigate type and model will need a deeper understanding on your environment and best to tall to the technical sales.

But you may consider more if you looking at end to end protection.  Caveat, I am not trying to persuade you towards this vendor but to help broaden the outcome that you may be looking at. Multiple solution to create the layer defence as shared earlier.

FortiGuard security services are designed to optimize performance and maximize protection across Fortinet’s security platforms and are available as subscription feeds for the FortiGate Next-Generation Firewall / IPS platforms, the FortiMail secure email gateway, the FortiClient endpoint protection software, FortiSandbox, FortiCache, and the FortiWeb web application firewall.

This includes IP reputation updates, intrusion prevention, web filtering, antivirus/anti-spyware, anti-spam, database security, , virus outbreak protection service, content disarm & reconstruction, security rating services and network and web application control capabilities to enable unified protection.

Well, I agree with all of the above.

The best bet to Solve the Ransomware problem is a single thing:

1. Train your people in what is a legitimate email and what's not.

If you want to invest in a FortiGate, you can get a simple 60E or 100, it will depend on how many items are going to be directed connected.

OR
I particularly recommend Malwarebytes, Since I've been working with them for years (3 or 4) with the paid version and I have never had any kind of issues, with my computer, or my wife's (which is a regular user, not a technical person).

It also depends on what speed your ISP network connection may be.  Fortinet will reduce your issues, but can't eliminate them completely.  You do need a multi-prong approach and Fortinet will just be one aspect.  You will need to subscribe annually to get the protection.

Hello,

FortiGate or any other network security device  is sized based on the bandwidth you want to be protect and what features you would like to enable (IPS, AV, DLP and Web filtering). I would agree with btan for recommending the FortiGate, since they are the only vendor whose core of business is network security and recommended by the third party tests (NSS).

Just deploying edge security device wont help you, you have to make sure that all your devices are patched and have latest antivirus. You may use Fortinet's FortiClient (Supports AV, Application control, Web filtering and vulnerability scanning) and can be directly integrated with FortiGate. This integration will help you to run security compliance check.

Make sure that you have proper network segmentation (Keep servers on different vlans and apply network level security) to stop ransomware/infection to spread across your network.

Good Luck!

As I said previously,

It also depends on what speed your ISP network connection may be.

That determines which minimum Fortinet device you need to get, more than price.  If you plan on upgrading your speeds, then, you'd need to get the next higher model for bandwidth needs.

Hi,
for a couple of servers and about 60 users I'd recommend Fortigate
FGT-101E
You should buy it with the bundle part number which includes UTM services (Content filtering, antivirus, IPS, antimalware).

hope this helps
max