Key Highlights

  • Fortinet (NASDAQ:FTNT) was downgraded two notches by Arete on Wednesday, October 21, 2026, from Buy straight to Sell, with a price target of USD 117.
  • A double downgrade skips the Neutral rating entirely, so it signals a reversal from expected outperformance to expected underperformance rather than a gradual cooling of the view.
  • The call landed on a day when CrowdStrike Holdings (NASDAQ:CRWD) rose about 6% and Palo Alto Networks (NASDAQ:PANW) about 4% on a critical PHP software flaw.
  • Fortinet sells firewall hardware with attached security subscriptions, so its product revenue depends on customer upgrade cycles far more than the revenue of most software-led security peers.

A Rare Two-Step Downgrade

Fortinet (NASDAQ:FTNT), which builds FortiGate network firewalls around its own custom chips and sells security subscriptions alongside them, received a double downgrade from Arete on Wednesday, October 21, 2026. The research firm moved its rating from Buy to Sell, bypassing Neutral. It set a price target of USD 117. Arete's detailed reasoning was not made public with the rating change. The timing stood out, because the same session brought a sector rally after two critical PHP flaws took some European government websites offline. CrowdStrike gained about 6%, Palo Alto Networks about 4%, and Zscaler (NASDAQ:ZS) and Cloudflare (NYSE:NET) gained about 5% to 7%. Fortinet's third-quarter report, due in the coming weeks, will be the first test of the call.

How Firewall Cycles Drive Fortinet's Earnings

For Fortinet (NASDAQ:FTNT), the business model explains why analysts can swing sharply. Revenue has two parts: product sales of firewall appliances, recognised when shipped, and service revenue from security subscriptions and support, recognised over the contract. Product sales follow refresh cycles, the periods when large numbers of customers replace older hardware at once. When a cycle peaks, product growth can slow quickly, and service growth follows later because fewer new boxes carry new subscriptions. Investors have seen this sensitivity before: in August 2025 the shares fell more than 20% in a single session after management said a major firewall refresh was roughly halfway complete. A Sell rating usually implies a target below the current share price, so USD 117 likely marks expected downside, an inference from the rating.

Risks and What to Watch

The main risk to the Arete view is that Fortinet (NASDAQ:FTNT) reports product growth that holds up, since a single strong quarter can undercut a bearish call quickly. For holders, the risks run the other way: a slowing refresh cycle, pricing pressure from Palo Alto Networks and others, and a gradual shift of spending toward cloud-delivered security, where Zscaler competes. A Sell rating from one firm also tends to draw scrutiny from others ahead of results. High rates add pressure, with the 10-year Treasury yield near 5.1%. Investors should watch Fortinet's third-quarter product revenue and billings, the Fed decision on Wednesday, October 28, 2026 and the midterm elections on Tuesday, November 3, 2026.

Where Things Stand

The answer is that Arete moved Fortinet (NASDAQ:FTNT) two notches to Sell with a USD 117 target, a rare step that points to a turn in the firewall cycle rather than a mild cooling of sentiment. The call ran against a sector rally driven by the PHP flaws. The next catalysts are Fortinet's third-quarter results in the coming weeks, the Fed decision on October 28 and the November 3 midterms. Price targets are opinions, not guarantees, and this is not investment advice.