Mar 23, 2021
Hi
PaloAlto is better when working on app control feature and special virtual wire links.
Execpt that specific point, Fortinet is above.
Best Regards,
Damien
Fortinet FortiGate-VM and Palo Alto Networks K2-Series are two prominent products in the network security domain. Fortinet FortiGate-VM often scores higher in user reviews for pricing and support, while Palo Alto Networks K2-Series stands out for its advanced feature set, making it perceived as worth the higher price by many users.
Features: Users value Fortinet FortiGate-VM for its comprehensive threat protection, ease of use, and straightforward deployment. Palo Alto Networks K2-Series is recognized for superior application control, advanced threat prevention capabilities, and a more robust feature set.
Room for Improvement: Fortinet FortiGate-VM users identify the need for a more intuitive interface, better documentation, and additional reporting capabilities. Users of Palo Alto Networks K2-Series highlight the need for performance efficiency improvements, better update procedures, and reduced complexity in deployment.
Ease of Deployment and Customer Service: Fortinet FortiGate-VM users report a straightforward deployment process and reliable customer service. Palo Alto Networks K2-Series deployment is viewed as complex, requiring a steep learning curve, but their customer service is also highly rated.
Pricing and ROI: Fortinet FortiGate-VM is valued for its competitive pricing and favorable ROI based on user feedback. Conversely, Palo Alto Networks K2-Series carries a higher setup cost but is seen as delivering substantial long-term ROI.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
I observed a fifty to sixty percent reduction in operational costs after migrating to FortiGate VM.
They have a platform that organizes their networks and access effectively.
We haven't used MPLS for over five years now, and it was extremely beneficial to see the changes from MPLS to SD-WAN using Fortinet FortiGate.
For CN-Series, there is no competitor which works the same way as Palo Alto does.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
The speed of Fortinet's technical support is significantly faster compared to Palo Alto.
Their support is helpful and effective.
The end-user support is delayed at levels L2 and L3.
I would rate tech support from Palo Alto Networks at around eight out of ten points because we had dedicated people assigned to us.
We get Gold support from them, and they are pretty good.
I would rate the technical support for the Palo Alto Networks K2-Series from Palo Alto as nine out of ten points.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Fortinet FortiGate-VM adapts effectively; for example, you have a limited number of VPN connections on VM01, accommodating around 1,000 remote users, and if the customer needs another endpoint, we can deploy VM02 and manage that transition effectively.
Scalability is well-supported, with the notable ability to implement features easily.
It can start with a single core and scale up to a 32-core license for a robust deployment.
Vertical scaling allows you to purchase more powerful devices with additional RAM, compute, and larger model form factors.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
The stability of Fortinet FortiGate is excellent.
The product has been very stable, based on my ten to eleven years of experience.
In the past couple of years, they started releasing numerous new features, and things have become somewhat unstable.
Palo Alto typically doesn't have many glitches.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
The constant daily revisions necessitate meticulous identification of the relevant documents to prevent the use of outdated information that could jeopardize our environment.
I am concerned about Fortinet's ability to help us meet regulatory compliance because its optimal functionality requires deploying all solutions within the mesh as Fortinet products.
The API needs better integration to match accounts and objects more effectively.
Enhancing web traffic protection would be a great upgrade.
L1 engineers cannot work on the Palo Alto Networks K2-Series because it's too complex, which requires L2 and above level of engineers.
With AI, if there is a Precision AI bundle that you're planning on exploring, then that definitely needs a significant uplift because currently it doesn't work for all the known models.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
FortiGate is priced lower than Palo Alto.
The license for Fortinet FortiGate-VM costs 100K to 150K Philippine pesos per year for VM1 or VM2.
I don't have this experience with Fortinet FortiGate-VM because my colleagues in Germany are reaching better prices than me.
It's a little bit expensive.
The pricing for the Palo Alto Networks K2-Series solution is affordable.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The more integrated we become, the less we spend on solving bugs and issues, allowing us to reduce time focusing on understanding and improving our network.
Fortinet is the only provider to have successfully set up a unified operating system on all its products in the network security ecosystem.
For what we need to do, which is setting up a VPN connection between both sides and using it for SSL VPN connections for remote users, it works effectively and we haven't encountered vulnerabilities.
Overall, the K2-Series helps in much more protection, and dashboard compliances are being met.
We had configured dynamic user groups and App-ID based policies, which makes it all Zero Trust.
Mainly, it is very easy to understand, and the logs are very good.
| Product | Market Share (%) |
|---|---|
| Fortinet FortiGate | 20.4% |
| Fortinet FortiGate-VM | 1.9% |
| Palo Alto Networks K2-Series | 0.1% |
| Other | 77.6% |
| Company Size | Count |
|---|---|
| Small Business | 350 |
| Midsize Enterprise | 130 |
| Large Enterprise | 187 |
| Company Size | Count |
|---|---|
| Small Business | 70 |
| Midsize Enterprise | 31 |
| Large Enterprise | 35 |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 8 |
| Large Enterprise | 13 |
Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.
Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.
What are the key features of Fortinet FortiGate?Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.
FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.
Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
