We changed our name from IT Central Station: Here's why

Azure Firewall vs Fortinet FortiGate-VM comparison

Cancel
You must select at least 2 products to compare!
Comparison Summary
Question: Which would you recommend - FortiGate VM or Azure Firewall?
Answer: Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate VM integrates well and has excellent centralized reporting. It is very easy to use, provides greater security than many other solutions, and is very scalable and flexible. This solution has an amazing VPN offering, which can help filter traffic to ensure the right traffic is getting through while blocking the rest. Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall cloud platform, autoscaling, and the ability for users to create virtual IP addresses. The cost of the solution is also competitive. Fortinet FortiGate VM can be challenging to deploy. Updates are not automatic and one needs to be vigilant to ensure they are not missing any in order to stay current. Also, some new updates can be a bit buggy and should be tested more thoroughly before release. For Azure Firewall, you have to specify each IP address used. We also found Azure to be challenging to implement from region to region, as it does not currently offer a universal approach across regions. Conclusion It really boils down to what you need the solution to do for you or your client. Fortinet FortiGate has VPN options that are super secure and flexible and best represents what many of our clients are really asking for, as so much of the workforce is still working remotely. Azure Firewall is great with cloud-based options and of course, being a part of the Azure ecosystem makes it a great fit for many of our clients. Both of these solutions help us offer excellent, necessary options to our varied client base across the globe.
Featured Review
Find out what your peers are saying about Azure Firewall vs. Fortinet FortiGate-VM and other solutions. Updated: January 2022.
563,780 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature that Cisco Firepower NGFW provides for us is the Intrusion policy.""The most valuable features of this solution are the integrations and IPS throughput.""Another benefit has been user integration. We try to integrate our policies so that we can create policies based on active users. We can create policies based on who is accessing a resource instead of just IP addresses and ports.""The dashboard is the most important thing. It provides good visibility and makes management easy. Firepower also provides us with good application visibility and control.""The most valuable features of this solution are advanced malware protection, IPS, and IDS.""Provides good integrations and reporting.""I have access to the web version of Cisco Talos to see the reputation of IP addresses. I find this very helpful. It provides important information for my company to obtain the reputation of IP addresses. The information in Talos is quite complete.""It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS."

More Cisco Firepower NGFW Firewall Pros →

"I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.""The solution is very stable. When comparing it to other environments, it's actually quite impressive.""Azure's cost-effectiveness is its major advantage.""The most valuable feature is the integration into the overall cloud platform.""It's auto-scalable, which is a great feature.""The solution can autoscale.""Great security and connectivity.""Network filtering is valuable. The scalability capability from the cloud-native service helps us a lot because it simplifies our day-to-day maintenance activity."

More Azure Firewall Pros →

"The initial setup is very user-friendly.""The thing that I like the most is that they're very willing to work with us to resolve issues that they haven't taken care of before in their product.""The most valuable features are network security, VLAN, network protection, and encryption are very valuable to us.""The most valuable features are locking applications from in and out of my test network and testing malware on different devices. I use malware detection, antivirus, and basic firewall policies to check for different types of security breaches. The UI is really nice and easy to use.""The most valuable feature is the WAN optimization.""In terms of administration, it's perfect.""Its performance is adequate. We are quite satisfied with its performance. The fact that it is a complete ecosystem with all kinds of integrations is valuable. It did take us a couple of months to get a grip on the new software, but all in all, it replaced our on-premise and single-point solution environment.""I like the visibility and monitoring features because they're easy to use to monitor traffic. Features like geo-blocking and more have AI, and we're currently using all of it. But for now, we're only using geo-blocking, and we're able to block traffic from different countries. I also like that it's highly responsive. VM04 is also very powerful."

More Fortinet FortiGate-VM Pros →

Cons
"The visibility for VPN is one big part. The policy administration could be improved in terms of customizations and flexibility for changing it to our needs.""There is limited data storage on the appliance itself. So, you need to ship it out elsewhere in order for you to store it. The only point of consideration is around that area, basically limited storage on the machine and appliance. Consider logging it elsewhere or pushing it out to a SIEM to get better controls and manipulation over the data to generate additional metrics and visibility.""The performance should be improved.""Web filtering needs improvement because sometimes the URL is miscategorized.""Report generation is an area that should be improved.""FirePOWER does a good job when it comes to providing us with visibility into threats, but I would like to see a more proactive stance to it.""One feature I would like to see, that Firepower doesn't have, is email security. Perhaps in the future, Cisco will integrate Cisco Umbrella with Firepower. I don't see why we should have to pay for two separate products when both could be integrated in one box.""FlexConfig is there as a bridge for features that are not yet natively integrated into Firepower. It is a way of allowing you to be able to configure things that wouldn't otherwise be possible until the development team can add them into Firepower's native capability. There is still some work that needs to be done around FlexConfig. There are still quite a few complex things, like policy-based routing, that have to be done in FlexConfig, and it doesn't always work perfectly. Sometimes, there are some glitches. It is recommended that you configure FlexConfig policies with Cisco TAC. It would be good to see Cisco accelerate some of those configurations that you can only do in FlexConfig into the platform, so that they are there natively."

More Cisco Firepower NGFW Firewall Cons →

"They can improve the pricing of Azure Firewall.""It is a cloud service, but the lending speed for each region is not always the same. For example, in China, the speed is slow. They need to think about how to make sure that the service pace or speed is always the same in all regions. It would be a great improvement if they can provide the same pace worldwide.""Currently, it only supports IP addresses, so you have to be specific about the IPs that are in your environment.""We find it's different implementing it region-to-region. It might help if it was universal across all regions.""The product could be made more customizable.""It would be much easier if the on-premises, firewall rules, had some kind of export-import possibility in place, which is not the case right now.""The reporting, logging, and monitoring features, as well as the flexibility of the policies, need to be improved.""There are a number of things that need to be simplified, but it's mostly costs. It needs to be simplified because it's pretty expensive."

More Azure Firewall Cons →

"Integration could be better. Whatever devices I'm using with FortiGate are all compatible. The access points and switches are also FortiGate, so I can easily integrate them. But it would be better if we could embed other devices as well. There are compatibility issues with other brands, and we need that. We can only integrate universal brands with FortiGate. The initial setup could also be easier.""The user interface could be improved.""We are experiencing a failed login issue. There should also be improvements in functionalities we store to enhance our services.""Now they do have the ability to pop up a command line, which is nice, however, the fact that you can't do everything within the GUI is probably a problem.""Price-wise, it could be slightly better, however, if you compared it to other makes and models of equal category, it is generally cheaper.""Some issues with connecting to the VPN from home after firmware updates.""In terms of improvement, there have been some problems with the bandwidth of the security layer.""The price model is not transparent by any means and should be made more clear. What's included in the packages is often not very obvious."

More Fortinet FortiGate-VM Cons →

Pricing and Cost Advice
  • "Cisco pricing is premium. However, they gave us a 50 to 60 percent discount."
  • "There are additional implementation and validation costs."
  • "Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed."
  • "This product requires licenses for advanced features including Snort, IPS, and malware detection."
  • "This product is expensive."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The price of Firepower is not bad compared to other products."
  • "The solution was chosen because of its price compared to other similar solutions."
  • More Cisco Firepower NGFW Firewall Pricing and Cost Advice →

  • "Azure Firewall is more expensive. If Microsoft can make Azure Firewall cheaper, I can see that all clients will think of using it. One client used FortiGate because it is much cheaper. Some clients ask me for Cisco, but in the cloud estimate, I found its cost is the same as Azure Firewall."
  • "Azure Firewall is quite an expensive product."
  • "The licensing module is good."
  • "The total cost of ownership is much less than Palo Alto, Cisco, or any other brand."
  • "It is pay-as-you-go. So, you pay based on the usage. If I remember it well, there is a basic fee, and there is a traffic fee. It is not per month. It is per hour or something like that. It is not so expensive."
  • "Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."
  • More Azure Firewall Pricing and Cost Advice →

  • "The price of this product is great compared to others."
  • "This solution is very expensive."
  • "The price is similar to Symantec Endpoint, but it's more expensive than Forcepoint solutions. Fortinet is better than Forcepoint."
  • "There is a benefit in terms of the cost of using this solution because the price is very good."
  • "It's not a cheap solution but it comes with its benefits."
  • "Of all the firewalls that we compared, FortiGate is the cheapest and most affordable, so we are satisfied with the pricing."
  • "There is no additional cost. Once you get the licensing fee, you're good."
  • "There should be a reduction in the setup price and licensing costs."
  • More Fortinet FortiGate-VM Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    563,780 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer: 
    The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
    Top Answer: 
    It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer: 
    Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure… more »
    Top Answer: 
    Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the… more »
    Top Answer: 
    Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate… more »
    Top Answer: 
    In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer: 
    The best part about FortiGate-VM is its strong security.
    Top Answer: 
    The license we pay is a yearly fee. I can't say it's very expensive; it is a good price and is highly suitable for our… more »
    Comparisons
    Also Known As
    Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
    FortiGate Virtual Appliance, FortiGate-VM
    Learn More
    Overview

    Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
    small/branch offices to high performance data centers and service providers. Available in a wide
    range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
    defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
    Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
    features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
    volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
    for increased performance, high availability configurations, and more.
    Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
    deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
    the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
    can deliver micro-segmentation to protect east-west network traffic.
    Cisco firewalls provide consistent security policies, enforcement, and protection across all your
    environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
    delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
    SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
    greater simplicity, visibility, and efficiency.
    Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

    Azure Firewall is a user-friendly, intuitive, cloud-native firewall security solution that provides top-of-the-industry threat protection for all your Azure Virtual Network resources. Azure Firewall is constantly and thoroughly analyzing all traffic and data packets, making it a very valuable and secure fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall allows users to create virtual IP addresses and provides for secure DDoS protection for the virtual machines on your network. It also provides fast and efficient east-west and north-south traffic security.

    Azure Firewall is a managed, cloud-based network security service built to protect your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

    Azure Firewall has two significant offerings, Standard and Premium.

    Azure Firewall Standard works directly with Microsoft Cyber Security and supplies excellent L3-L7 filtering and threat awareness. The proactive real-time threat awareness will quickly alert you and immediately deny all traffic to and from any known problematic or suspicious domains or IP addresses. Microsoft Cyber Security is updated continually to protect against all new and known potential threats at all times. To learn more about Azure Firewall Standard, click here.

    Azure Firewall Premium provides everything the standard version does, and additionally adds extra levels of data encryption, network intrusion detection, extended URL filtering, and Web category filters. To learn more about the added features of Azure Firewall Premium, click here.

    Key Benefits and Features of Azure Firewall:

    • High availability - You do not need load balancers with Azure Firewall; it's already built in and ready to go.
    • Self-scalability - Azure Firewall is intuitive and will auto-scale as needed based on traffic flow to be ready for peak traffic times.
    • Threat awareness - Using Microsoft Cyber Security to filter traffic, Azure Firewall will deny any known problematic threats to keep your network safe.
    • Additional IP addresses - You can securely add up to 250 public IP addresses with Azure Firewall
    • Improved web category filtering - You can set up specific protocols to allow or deny categories within websites that are deemed inappropriate for use within your network. You have the ability to organize categories based on a defined set of descriptions.

    What our real users have to say:

    Many IT CEntral Station (soon to be Peerspot) users found Azure Firewall to be very user-friendly and easy to use. They liked that it offers seamless integration to the cloud and were especially pleased with the threat filtering options.

    Regarding integration and threat intelligence, our users wrote:

    “The most valuable feature is the integration into the overall cloud platform.”

    The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats.”

    I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.”



    FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

    Offer
    Learn more about Cisco Firepower NGFW Firewall
    Learn more about Azure Firewall
    Learn more about Fortinet FortiGate-VM
    Sample Customers
    Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
    Information Not Available
    Security7 Networks, COOPENAE
    Top Industries
    REVIEWERS
    Comms Service Provider22%
    Financial Services Firm16%
    Manufacturing Company8%
    Non Profit8%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company21%
    Government7%
    Manufacturing Company4%
    REVIEWERS
    Computer Software Company23%
    Financial Services Firm23%
    Government15%
    Manufacturing Company15%
    VISITORS READING REVIEWS
    Computer Software Company30%
    Comms Service Provider22%
    Government6%
    Financial Services Firm5%
    REVIEWERS
    Comms Service Provider16%
    Financial Services Firm11%
    Manufacturing Company8%
    Energy/Utilities Company5%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company29%
    Government5%
    Energy/Utilities Company4%
    Company Size
    REVIEWERS
    Small Business43%
    Midsize Enterprise28%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise66%
    REVIEWERS
    Small Business23%
    Midsize Enterprise18%
    Large Enterprise59%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise13%
    Large Enterprise69%
    REVIEWERS
    Small Business49%
    Midsize Enterprise27%
    Large Enterprise23%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise42%
    Find out what your peers are saying about Azure Firewall vs. Fortinet FortiGate-VM and other solutions. Updated: January 2022.
    563,780 professionals have used our research since 2012.

    Azure Firewall is ranked 19th in Firewalls with 22 reviews while Fortinet FortiGate-VM is ranked 12th in Firewalls with 67 reviews. Azure Firewall is rated 7.2, while Fortinet FortiGate-VM is rated 8.2. The top reviewer of Azure Firewall writes "Good value for your money, good URL filtering, supports intrusion prevention, and is stable". On the other hand, the top reviewer of Fortinet FortiGate-VM writes "Flexible with good cloud management and a straightforward user interface". Azure Firewall is most compared with Palo Alto Networks NG Firewalls, Palo Alto Networks VM-Series, Check Point NGFW, Cisco ASA Firewall and Sophos XG, whereas Fortinet FortiGate-VM is most compared with Fortinet FortiGate, Palo Alto Networks VM-Series, OPNsense, Cisco ASA Firewall and Sophos UTM. See our Azure Firewall vs. Fortinet FortiGate-VM report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.