Softwr

Cybersecurity · head to head

Fortinet FortiGate vs One Identity

Fortinet FortiGate logo

Fortinet FortiGate

Cybersecurity

Next-generation firewall with AI-powered threat protection

From
$500/year
Rated
-
Full reviewWebsite
One Identity logo

One Identity

Cybersecurity

Quest-owned identity governance, PAM and Active Directory management

From
On request
Rated
-
Full reviewWebsite

The short version

  • Each has a real cost: Fortinet FortiGate security services are sold as separate FortiGuard subscription bundles, so ATP, UTP and ENT determine which protections are actually active; One Identity the portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
  • They diverge on capability: Fortinet FortiGate covers Next-generation firewall, One Identity covers Identity Manager.
  • Prices and features above were last checked on 1 September 2026.

Where they differ

Only the attributes on which Fortinet FortiGate and One Identity actually diverge.

Attributes where Fortinet FortiGate and One Identity differ
AttributeFortinet FortiGateOne Identity
Starting price$500/yearOn request
Pricing modelsubscriptionquote
PlatformsHardware, Virtual, CloudWeb, Windows, Linux
Founded2000Unknown

Identical on both: free tier (No), user rating (Not yet rated), category (Cybersecurity).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Fortinet FortiGate

  • Next-generation firewall
  • Intrusion prevention
  • SSL/TLS inspection
  • Application control
  • Web filtering
  • SD-WAN
  • Zero-trust network access
  • AI-powered threat detection

Only in One Identity

  • Identity Manager
  • Safeguard
  • Active Roles
  • OneLogin
  • Password Manager
  • syslog-ng
  • Starling connectors

What people use each for

The jobs each tool is most often brought in to do.

Fortinet FortiGate

  • Next-generation firewalling at data centre, campus and branch scalenot One Identity
  • Secure SD-WAN across distributed sitesnot One Identity
  • Zero trust network access to internal applicationsnot One Identity
  • Virtual firewalls in AWS, Azure, Google Cloud and Oraclenot One Identity
  • Ruggedised deployments in industrial environmentsnot One Identity

One Identity

  • An organisation whose authoritative directory will remain on premises Active Directory and needs delegated administration with attribute-level controlnot Fortinet FortiGate
  • A government or defence environment requiring privileged session management on a hardened physical appliance rather than a cloud servicenot Fortinet FortiGate
  • A manufacturer with SAP and Active Directory needing provisioning governed under one certification processnot Fortinet FortiGate
  • An enterprise consolidating Active Directory after an acquisition and needing automated account lifecycle across both forestsnot Fortinet FortiGate

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Fortinet FortiGate

  • Security services are sold as separate FortiGuard subscription bundles, so ATP, UTP and ENT determine which protections are actually active
  • Throughput is tied to the appliance model, from 500 Mbps on the FortiGate 30G to 520 Gbps on the 7121F, so capacity planning is a hardware purchase
  • Pricing is not published and goes through partners

One Identity

  • The portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
  • Identity Manager implementations are customisation-heavy and commonly run over a year, with the services spend exceeding the licence cost in the first year.
  • Quest has changed private equity ownership more than once since the Dell separation, and buyers should ask directly about product investment commitments before signing a multi-year deal.
  • Product documentation and support sit behind a customer portal, which makes independent evaluation before purchase harder than with vendors that publish openly.
  • The cloud-native and developer experience trails the pure-play identity vendors, so organisations moving decisively to SaaS applications find the on premises heritage becomes a constraint rather than an asset.

Pricing, plan by plan

Fortinet FortiGate

$500/year
  • FortiGate Entry$500/year
    • Basic firewall
    • VPN support
    • Threat protection
  • FortiGate Enterprise$2500/year
    • Advanced threat protection
    • SSL inspection
    • Application control
  • FortiGate Ultimate$10000/year
    • All Enterprise features
    • Zero-trust access
    • AI-powered analytics

One Identity

On request
  • Identity Manager$undefined/year
    • Priced per managed identity
    • On premises or hosted
    • Access certification and provisioning
  • Safeguard$undefined/year
    • Priced per privileged user or per appliance
    • Hardened appliance option for session management
    • Licensed separately from Identity Manager
  • Active Roles$undefined/year
    • Priced per managed Active Directory account
    • Delegated administration and automated provisioning
    • Licensed separately

Which should you pick?

Choose Fortinet FortiGate if

  • You need next-generation firewall.
  • You work on Hardware, Virtual, Cloud.
  • You also want intrusion prevention.
Fortinet FortiGate review

Choose One Identity if

  • You need identity manager.
  • You work on Web, Windows, Linux.
  • You also want safeguard.
One Identity review

Questions people ask

Is Fortinet FortiGate or One Identity better?
Neither clearly leads. Fortinet FortiGate starts at $500/year and One Identity at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Fortinet FortiGate or One Identity?
Fortinet FortiGate starts at $500/year and One Identity at On request.
Does Fortinet FortiGate or One Identity run on more platforms?
Fortinet FortiGate runs on Hardware, Virtual, Cloud. One Identity runs on Web, Windows, Linux.
What is Fortinet FortiGate best used for?
Fortinet FortiGate is most often used for next-generation firewalling at data centre, campus and branch scale, secure sd-wan across distributed sites, zero trust network access to internal applications, virtual firewalls in aws, azure, google cloud and oracle. Of those, next-generation firewalling at data centre, campus and branch scale and secure sd-wan across distributed sites are not what One Identity is typically brought in for.
What can Fortinet FortiGate do that One Identity cannot?
Fortinet FortiGate covers Next-generation firewall, Intrusion prevention, SSL/TLS inspection, Application control. One Identity covers Identity Manager, Safeguard, Active Roles, OneLogin.

Answered from the vendors’ own pages

Fortinet FortiGate: What are the FortiGate security bundle options?

Fortinet offers three FortiGuard AI-Powered Security Services bundles: ENT Bundle (ultimate security for networks, web, file, SaaS, data, and devices), UTP Bundle (advanced web and network protection), and ATP Bundle (protection against network intrusions and malware with IPS, antivirus, and application control).

Source
One Identity: Is One Identity the same company as Quest?

Yes. One Identity is Quest Software's identity and access management business unit, not a separate vendor.

Fortinet FortiGate: How do I get pricing for FortiGate?

Pricing is not published on the product page. To obtain a quote, you can request a free product demo or connect with a security expert through the contact options on the site.

Source
One Identity: Does it include privileged access?

Safeguard provides it, but it is licensed separately from Identity Manager. Neither includes the other.

Fortinet FortiGate: Is there a free trial for FortiGate?

The product page does not mention a free trial. However, Fortinet offers a free product demo that allows you to evaluate the solution before committing to a purchase.

Source
One Identity: Why choose this over SailPoint or Saviynt?

Almost always because of Active Directory depth via Active Roles or an appliance requirement for privileged sessions. For cloud-first estates the specialists are the stronger choice.

Share

Related pages

More on Fortinet FortiGate

More on One Identity

Keep looking

Other head to heads