MikroTik's Cloud Core Router (CCR) devices are designed to deliver high performance in routing tasks, including handling edge traffic in medium to large networks.

Although CCRs come equipped with firewall capabilities through RouterOS, the decision to use a MikroTik CCR as an edge firewall instead of dedicated firewall solutions like Fortinet or Cisco ASA depends on several key factors:

Security Requirements

• Firewall Capabilities: MikroTik RouterOS provides robust firewall functionalities, including packet filtering, NAT, and mangle, which may be suitable for many networks. However, if your security requirements include advanced packet inspection capabilities, intrusion protection (IPS), sandboxing, and advanced real-time malware protection, you may benefit from a specialized security appliance.
• Network Environment: For simple to moderately complex network environments, a CCR can effectively serve as an edge firewall. For large enterprise networks with complex security and compliance requirements, a dedicated solution could offer additional benefits.

Performance

• Processability: MikroTik CCRs are designed to handle large volumes of traffic with multiple processing cores, making them suitable to function as edge devices. However, performance may vary when advanced security features are enabled, as these can be resource intensive.

Cost

• Budget: MikroTik devices typically offer an excellent cost-performance ratio. If budget is an important consideration, a CCR could offer an effective edge security solution for a fraction of the cost of specialized solutions.

Management and Support

• Interface and Management: MikroTik's RouterOS offers a powerful management interface but with a learning curve. Specialized firewall solutions typically come with more intuitive management interfaces and analytical tools.
• Support and Community: Consider the level of technical support and community resources available. MikroTik has an active community and a good amount of documentation, but specialist firewall vendors can offer more direct technical support and consulting services.

Conclusion

A MikroTik CCR can be a viable option as a border firewall for many organizations, especially those with limited budgets, moderate security requirements, and technical staff familiar with RouterOS.

However, for environments that require high-end network security, with deep packet inspection, intrusion prevention, and other advanced security capabilities, it may be advisable to consider a specialized firewall solution.

The final choice should be based on a detailed evaluation of your specific security, performance, and budget needs.