We are looking to add new dedicated Internet lines to our branch offices (5-50 people per site) as part of a new WAN implementation. We are weighting the options between 2 different providers and both are offering to install dedicated fully managed internet lines at these offices using cable modems or DSL lines. One is offering to connect the cable/DSL lines into their CPE managed ISR-G2 router and just run a Cisco IOS Security Bundle Firewall for protection and the other is offering to connect the cable/DSL lines to a Fortinet Fortigate Firewall which is then connected to their CPE managed ISR-G2 router.
My question is, since these lines are just for browsing the web, no NATs, no special ACLs, no special ports to be opened, just web browsing. Is there really a benefit one way or the other of which firewall to use? This is mainly to protect against outside hackers getting into our network via these lines
Thank you,
John
