Side by side · No scores
Cisco and Fortinet: GenAI security controls side by side
In short
Cisco and Fortinet both state finds shadow AI use, protects homegrown AI apps at runtime and blocks inline in real time. Cisco states one console for AI and network policy, while Fortinet states inspects prompts for sensitive data, controls AI agent and MCP traffic, coaches or warns the user, has a watch or log-only action and can run on your own infrastructure. This page compares published facts only; it does not pick a side.
By The Inline Desk · GenAI Security Finder · Published 2026-10-26
Desk research from the six vendors' own public pages, read on 7 October 2026. Profiles follow our published method; we did not run the products.
- SSE · Security cloud (SASE or SSE)
- AIG · AI gateway and guardrails
- FWG · Firewall or self-hosted gateway
- Cisco: filled square where described
- Fortinet: dashed outline where described
- Filled square: described on the vendor pages we read
- Hatched square: partly described (a narrower scope, or the enforcement point is not stated)
- Dashed square: not in our sources (it may exist; we did not find it)
Check by check
| Check | Cisco | Fortinet | Difference |
|---|---|---|---|
| Finds shadow AI use | Stated Inspects web traffic to identify shadow AI, including API calls made to AI models inside AI-enhanced applications. Source: Cisco Secure Access: AI Access · Read 7 Oct 2026 | Stated Discovers AI applications in use with their categories, use cases, risk levels and log details. Source: Fortinet: AI security · Read 7 Oct 2026 | Same status |
| Inspects prompts for sensitive data | Partly stated AI Defense names data leakage among the runtime threats it addresses; prompt-level DLP is not described on the pages we read. Source: Cisco AI Defense · Read 7 Oct 2026 | Stated FortiAIGate checks prompts and outputs before they reach users or systems and is described as stopping data leaks. Source: Fortinet: FortiAIGate · Read 7 Oct 2026 | Fortinet states it |
| Controls AI agent and MCP traffic | Partly stated Secure Access registers every agent, maps it to a human owner, and quarantines compromised agents with inline runtime monitoring; MCP is not mentioned on the pages we read. Source: Cisco Secure Access · Read 7 Oct 2026 | Stated Checks agent tool calls and catches prompt injection, jailbreaks and data leaks in MCP tool traffic. Source: Fortinet: FortiAIGate · Read 7 Oct 2026 | Fortinet states it |
| Covers coding agents | Not in our sources | Not in our sources | Same status |
| Protects homegrown AI apps at runtime | Stated AI Runtime Protection places guardrails in the network to block adversarial attacks and harmful responses in real time. Source: Cisco AI Defense · Read 7 Oct 2026 | Stated Guardrails check text, images, audio, video and code, and catch prompt injection and jailbreaks. Source: Fortinet: FortiAIGate · Read 7 Oct 2026 | Same status |
| Blocks inline in real time | Stated Detects and blocks malicious and undesired AI traffic using multiple enforcement points. Source: Cisco Secure Access: AI Access · Read 7 Oct 2026 | Stated FortiAI blocks unauthorized prompts; FortiAIGate is described as stopping harmful AI content in real time. Source: Fortinet: AI security · Read 7 Oct 2026 | Same status |
| Coaches or warns the user | Partly stated Can redirect requests to approved services; user coaching is not named. Source: Cisco Secure Access: AI Access · Read 7 Oct 2026 | Stated User coaching drives correct behavior and captures artifacts for intent investigation. Source: Fortinet: AI security · Read 7 Oct 2026 | Fortinet states it |
| Has a watch or log-only action | Partly stated Inline runtime monitoring and semantic inspection are described for agents; a watch-only action for employee AI use is not named. Source: Cisco Secure Access · Read 7 Oct 2026 | Stated Apply guardrails, monitor activity and adjust policies in real time. Source: Fortinet: AI security · Read 7 Oct 2026 | Fortinet states it |
| Redacts or anonymizes data in prompts | Not in our sources | Not in our sources | Same status |
| Can run on your own infrastructure | Not in our sources | Stated With self-hosting, data and logs stay on your infrastructure; FortiSASE also has a Sovereign option deployed in the customer's own data centres. Source: Fortinet: FortiAIGate · Read 7 Oct 2026 | Fortinet states it |
| States FedRAMP | Partly stated Cisco Secure Access states FedRAMP authorization covering Secure Internet Access, VPNaaS and ZTNA; AI Access is not named in that scope. Source: Cisco Secure Access · Read 7 Oct 2026 | Not in our sources | Cisco partly |
| Lists security attestations | Not in our sources | Partly stated The trust page states alignment with the ISO/IEC 27000 series and NIST 800-53; specific certifications for FortiSASE are not stated in the text we read. Source: Fortinet: trust · Read 7 Oct 2026 | Fortinet partly |
| One console for AI and network policy | Stated Single console, unified client and centralized policy management for Secure Access, with AI Access integrated into it. Source: Cisco Secure Access · Read 7 Oct 2026 | Partly stated Unified SASE is built on a single OS, policy engine and management plane; FortiAIGate is described as a separate control point. Source: Fortinet: Unified SASE · Read 7 Oct 2026 | Cisco states it |
Approaches
- SSE
AI controls in a SASE or SSE cloud
CiscoDescribed
FortinetPartly described
- AIG
Standalone AI security layer
CiscoDescribed
FortinetDescribed
- FWG
Firewall or self-hosted AI gateway
CiscoNot in our sources
FortinetDescribed
- Filled square: described on the vendor pages we read
- Hatched square: partly described (a narrower scope, or the enforcement point is not stated)
- Dashed square: not in our sources (it may exist; we did not find it)
Responses
Cisco
Cisco states Block; Watch and Coach are partly stated; Redact is not in our sources.
Fortinet
Fortinet states Watch, Coach and Block; Redact is not in our sources.
Network and compliance in each vendor's words
| Fact | Cisco | Fortinet |
|---|---|---|
| Network | No PoP or data-centre count on the pages we read. Source: Cisco Secure Access · Read 7 Oct 2026 | A global network of 200+ PoPs on Fortinet-owned infrastructure, extended through integration with AWS, Google Cloud and Oracle Cloud. Source: Fortinet: FortiSASE · Read 7 Oct 2026 |
| Compliance | FedRAMP authorization for Secure Internet Access, VPNaaS and ZTNA. Other certifications are not stated on the page. Source: Cisco Secure Access · Read 7 Oct 2026 | PSIRT disclosure aligned with ISO/IEC 30111 and 29147; security aligned with the ISO/IEC 27000 series and NIST 800-53. FortiSASE certifications such as SOC 2 or FedRAMP are not stated in the text we read. Source: Fortinet: trust · Read 7 Oct 2026 |
| Analyst placement | The SASE page says "Cisco named a SASE Leader"; the analyst firm and report name are not given in the page text. Source: Cisco: SASE solution · Read 7 Oct 2026 | Recognized as a Challenger in the 2026 Gartner Magic Quadrant for SASE Platforms. Source: Fortinet: FortiSASE · Read 7 Oct 2026 |
Which might suit you?
Look at Cisco if you run Cisco Secure Access and want shadow AI controls in the same console, or if agent identity and least-privilege access are your main concern.
Look at Fortinet if AI traffic, data and logs must stay on infrastructure you run, or if you already run FortiGate firewalls and want AI controls from the same family.
In the quiz
| Profile | Cisco | Fortinet |
|---|---|---|
| Shadow AI and prompt data, SASE in place, block inline | Later | Later |
| Agents and coding tools at scale, redact rather than block | Same fit as Fortinet · Equal fit | Same fit as Cisco · Equal fit |
| Shadow AI and prompt data, coach people first | Later | Later |
| US federal supplier that needs FedRAMP | First group | Later |
| Homegrown AI apps on a firewall estate, self-hosted | Later | First group |
| Teams building AI apps, choosing network security now | Same fit as Fortinet · Equal fit | Same fit as Cisco · Equal fit |
| Zscaler customer coaching first, large estate | Later | Later |
| Under 1,000 people, watching shadow AI first | Same fit as Fortinet · Equal fit | Same fit as Cisco · Equal fit |
Limits to check
Cisco
- Prompt-level DLP, named coding agents and MCP are not described on the pages we read.
- The stated FedRAMP scope names Secure Internet Access, VPNaaS and ZTNA, not AI Access or AI Defense.
Fortinet
- Which enforcement point delivers employee AI controls (FortiSASE, a FortiGate or FortiAIGate) is not stated on the pages we read.
- Compliance certifications for FortiSASE, including FedRAMP, are not stated in the trust page text we read.
- Named coding agents are not described.
Questions
Which states more checks, Cisco or Fortinet?
Cisco states 4 of 13 checks and Fortinet states 8, on the pages we read. A count is not a quality measure: check the ones your answers make matter in the quiz.
Do Cisco and Fortinet publish prices?
Neither publishes prices on the pages we read.
Which one covers MCP and agent traffic?
Cisco: Partly stated. Secure Access registers every agent, maps it to a human owner, and quarantines compromised agents with inline runtime monitoring; MCP is not mentioned on the pages we read. Fortinet: Stated. Checks agent tool calls and catches prompt injection, jailbreaks and data leaks in MCP tool traffic.