Azure Firewall vs Palo Alto Networks NG Firewalls comparison

Azure Firewall vs. Palo Alto Networks NG Firewalls

Download the complete report

Helped 859,957 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of July 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.2%, up from 17.7% compared to the previous year. The mindshare of Azure Firewall is 2.2%, down from 2.5% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 3.7%, up from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Q&A Highlights

Netanya Carmi

Content Manager at PeerSpot

Aug 22, 2021

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall cloud platform, autoscaling, and the ability for users to create virtual IP addresses. The cost of the solution is also competitive. Palo Alto Networks NG Firewall is easy to configure and easy to upgrade, offering very good content control. It offers a parallel processing data plan, which makes the overall processes more efficient. Palo Alto offers blocking of undesirable URLs and also offers some threat hunt capabilities, which makes it better than other vendors. However, pricing can be high and support response can be a bit slow. Also, it only offers a cloud-based solution. For Azure Firewall you have to specify each IP address used. We also found Azure to be challenging to implement from region to region, as it does not currently offer a universal approach across regions. Conclusions Although Azure Firewall is very user-friendly and offers good support, it can be very limiting if your operation is more global. We found that even though it costs more, Palo Alto Network NG Firewall was a better fit, as it offers a cloud-based solution and has threat protection capabilities that make it a better overall investment for our business needs.

A stable solution with an intuitive interface and quick customer service

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

AnvarSadique

Information Technology Architect at GMS INC

Easy setup and effective traffic routing enhance security

In terms of improvements, I think the price could be a concern as Azure ( /products/microsoft-azure-reviews ) services are often more expensive compared to other firewalls. However, the functional aspects of Azure Firewall met our needs. While I found the interface not particularly user-friendly, this is a common issue across vendors.

Read full review

AmjadKhan1

Head of data centers at a non-profit with 10,001+ employees

Provides inline protection with a unified view and anti-spyware capabilities

I would rate Palo Alto Networks NG Firewalls ten out of ten because it is the best. Our disaster recovery site utilizes Palo Alto Networks Next-Generation Firewalls. We are also in the process of upgrading the firewalls at our 365 sites in Pakistan to Palo Alto Networks firewalls. While budget firewalls may advertise comparable features, they often fall short of effectively detecting viruses, threats, and ransomware. In contrast, Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage. I recommend conducting a proof of concept before selecting a firewall. This will allow you to evaluate different options and determine which best suits your needs. While Palo Alto offers robust firewall solutions, it's essential to compare them with other vendors to ensure you make an informed decision.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities."

"The firewall is pretty good if you understand how to use it. It performs at a very high level, and we are loving it."

"The tool is a nice product and easy to handle. The software's user interface is also good. You can easily implement remote access in the solution."

"It's inexpensive compared to some of the other technology out there."

"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."

"It is easy to use and performs very well."

"This is an easy solution to deploy."

"It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly."

More Fortinet FortiGate pros

"I like its order management feature. It doesn't have the kind of threat intelligence that Palo Alto has, but the order management makes it much simpler to know the difference."

"The solution can autoscale."

"The most valuable features of Azure Firewall for me are its URL-based internet access control and DDoS protection for incoming traffic."

"The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats."

"Azure Firewall is integrated well with Microsoft ecosystem."

"Azure Firewall integrates well with multiple platforms."

"I find the solution to be very stable, and would rate it a ten out of ten in terms of stability."

"The feature that I have found the most valuable is the control over the network permissions and the network."

More Azure Firewall pros

"We have found the DPI ability to understand web applications and build access rules on web application categories first to be a great feature."

"Our clients find the most valuable features in Palo Alto Networks NG Firewalls to be the user-friendly interface, extensive capabilities, and highly granular rule creation process."

"The initial setup was very easy."

"The trackability is most valuable. When a port is open for a protocol, such as port 443 for HTTPS, it can look inside the traffic and identify or verify the applications that are using the port, which was previously not possible with traditional firewalls."

"Some of Palo Alto Networks NG Firewalls' valuable features are their powerful capabilities and user-friendliness."

"The tool's most valuable features are its security features, which are highly valued based on market standards and Gartner reports. We conducted a POC before procuring it, and from that perspective, it is very good. The machine learning feature helps prevent more threats, but no device or firewall can be 100 percent secure because threats evolve daily."

"The key aspect of this solution that provides the most value is its next-gen capabilities, which represented a significant change for us."

"This solution not only provides better security than flat VLAN segments but allows easy movement through the lifecycle of the server."

More Palo Alto Networks NG Firewalls pros

Cons

"Areas of improvement for Fortinet FortiGate include the need for more training and certification, especially when dealing with distributors globally, which presents challenges in product availability and delivery timelines."

"The integration with third-party tools may be something that they should work on."

"I think there could be more QoS features"

"You do need some IT knowledge in order to effectively work with the solution."

"I mostly do administration, and I found Cisco to be the hardest major firewall manufacturer to deal with, with Fortinet FortiGate being the second hardest for me."

"I would suggest that Fortinet add sandboxing to their solution."

"The performance and speed are aspects of the solution that could always be improved upon."

"Fortinet FortiGate can improve the integration with Active Directory. Additionally, I would like to have a Cloud Controller, such as they do in the Cisco Meraki solution."

More Fortinet FortiGate cons

"An Azure firewall is not a real firewall."

"The interface could be improved, it's not very user friendly."

"Azure Firewall has limited visibility for IDPS, no TLS inspection, no app ID, no user ID, no content ID, no device ID. There is no antivirus or anti-spyware. Azure Firewall doesn't scan traffic for malware unless it triggers an IDPS signature. There is no sandbox or machine learning functionality, meaning we are not protected from Zero-day threats. There is no DNS security and limited web categories."

"Azure should be able to work better as a balancer also, instead of just being a firewall. It should have a wider mandate."

"The solution lacks artificial intelligence and machine learning. It might be in the roadmap. However, currently, it's not available."

"Right now, with Azure Firewall, we cannot have a normal inbound traffic flow. For inbound, Microsoft suggests using application gateways, so the options are very limited. I cannot use this firewall as an intermediate firewall because of the limitations, and I cannot point routing to another firewall. So if I want to use back-to-back firewall architecture in my environment, I cannot use Azure Firewall for that type of configuration either."

"The product pricing could be more competitive."

"When we started deploying the solution, it was not a mature product at times."

More Azure Firewall cons

"I am in GCC in the Middle East. The support that we are getting from Palo Alto is disastrous. The problem is that the support ticket is opened through the distributor channel. Before opening a ticket, we already do a lot of troubleshooting, and when we open a ticket, it goes to a distributor channel. They end up wasting our time again doing what we have already done. They execute the same things and waste time. The distributor channel's engineer tries to troubleshoot, and after spending hours, they forward the ticket to Palo Alto. It is a very time-consuming process. The distributor channels also do not operate 24/7, and they are very lazy in responding to the calls."

"Currently, they don't have email protection. They can maybe add it in the future. Currently, if you want to do so, you need to go with another solution."

"The performance of the Panorama interface needs to be improved. It tends to be very sluggish at times."

"There is a tradeoff between security and network performance, as security is always top-notch, but performance can sometimes lag and has room for improvement."

"The analysis of the ITS ID by Palo Alto Networks NG Firewalls could be improved."

"The cloud could be improved. I would like to have more visibility of the vulnerabilities of the network as well."

"Understanding the flow and application of securities can be complex, requiring navigation across different sections."

"In terms of what could be improved, comparatively the price is very high. That would be the one thing."

More Palo Alto Networks NG Firewalls cons

Pricing and Cost Advice

"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."

"Its licenses cost the same for different subscription plans."

"The price range is quite acceptable and normal."

"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."

"We purchased a five-year bundle package, which worked out cheaper than competing solutions."

"Fortinet prices are around $600 for the small 40F model, and for licenses, the simplest option is about $300 for a year. They sell licenses that can last for 1, 2, 3, or 5 years."

"It is expensive. You need to pay for the subscription every year, which is very expensive. The subscription includes technical support and hardware exchange in case of failure."

"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."

More Fortinet FortiGate pricing and cost advice

"The pricing of Azure Firewall is pay-as-you-go. Fortinet also has a pay-as-you-go model, but Azure's pricing is higher and, with FortiGate, you also have the license."

"Azure Firewall is more expensive. If Microsoft can make Azure Firewall cheaper, I can see that all clients will think of using it. One client used FortiGate because it is much cheaper. Some clients ask me for Cisco, but in the cloud estimate, I found its cost is the same as Azure Firewall."

"Azure Firewalls operate on a pay-as-you-go model, similar to cloud services."

"The solution is cheaper than other brands. My company has an enterprise contract and we finally got a good price with Azure."

"The total cost of ownership is much less than Palo Alto, Cisco, or any other brand."

"The licensing module is good."

"It is pay-as-you-go. So, you pay based on the usage. If I remember it well, there is a basic fee, and there is a traffic fee. It is not per month. It is per hour or something like that. It is not so expensive."

"Azure Firewall is expensive."

More Azure Firewall pricing and cost advice

"It could be less expensive."

"The solution’s cost is a little high compared to other products."

"Paul Alto is the most expensive solution in this category."

"It's cheaper to replace the equipment every three years than to upgrade. We have done two refreshes of their appliances. What I have seen is that the initial hardware cost is low, but you need a subscription and you need maintenance plans. After every three years, if you're trying to renew your maintenance or subscription, that can be very costly. It's cheaper to just get a newer solution with a three-year subscription and maintenance. It's cheaper to replace your hardware completely with a new subscription plan and a new maintenance plan than to renew the maintenance subscription on existing hardware."

"The cost of Palo Alto Network NG Firewalls is significantly higher compared to Huawei."

"Don't buy a device with more power than you really need, because licensing depends on the cost of the box you have."

"Unfortunately, Palo Alto Networks products aren't cheap, but you have to pay the price for good security technology. I don't know the exact price, but it's about $10,000 to $15,000 without a subscription. Cisco is priced similarly. FortiGate is inexpensive in Poland, so a lot of customers prefer that. Though it's pricey, customers ultimately realize Palo Alto is the best security solution because it's stable and the network security functions are practical. Cisco has some problems from time to time, but I feel comfortable with Palo Alto Networks."

"It's an expensive product."

More Palo Alto Networks NG Firewalls pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

859,957 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Educational Organization

12%

Comms Service Provider

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

10%

Government

Manufacturing Company

Computer Software Company

14%

Financial Services Firm

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

How does Azure Firewall compare with Palo Alto Networks VM Series?

Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...

Which would you recommend - FortiGate VM or Azure Firewall?

Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

What do you like most about Palo Alto Networks NG Firewalls?

We utilize advanced threat prevention features like web filtering and SSL decryption, which haven't caused any issues.

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 20% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 12% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Fortinet FortiOS vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

Fortinet FortiGate-VM vs Azure Firewall

Compared 18% of the time

Palo Alto Networks VM-Series vs Azure Firewall

Compared 7% of the time

Azure Front Door vs Azure Firewall

Compared 5% of the time

Check Point NGFW vs Azure Firewall

Compared 5% of the time

Microsoft Defender for Cloud vs Azure Firewall

Compared 4% of the time

More Azure Firewall Competitors

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 11% of the time

Sophos XG vs Palo Alto Networks NG Firewalls

Compared 10% of the time

Check Point NGFW vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Meraki MX vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Netgate pfSense vs Palo Alto Networks NG Firewalls

Compared 7% of the time

More Palo Alto Networks NG Firewalls Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Azure Firewall

Download Azure Firewall product report

Palo Alto Networks NG Firewalls

Download Palo Alto Networks NG Firewalls product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Azure Firewall is a user-friendly, intuitive, cloud-native firewall security solution that provides top-of-the-industry threat protection for all your Azure Virtual Network resources. Azure Firewall is constantly and thoroughly analyzing all traffic and data packets, making it a very valuable and secure fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. Azure Firewall allows users to create virtual IP addresses and provides for secure DDoS protection for the virtual machines on your network. It also provides fast and efficient east-west and north-south traffic security.

Azure Firewall is a managed, cloud-based network security service built to protect your Azure Virtual Network resources. It is a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

Azure Firewall has two significant offerings, Standard and Premium.

Azure Firewall Standard works directly with Microsoft Cyber Security and supplies excellent L3-L7 filtering and threat awareness. The proactive real-time threat awareness will quickly alert you and immediately deny all traffic to and from any known problematic or suspicious domains or IP addresses. Microsoft Cyber Security is updated continually to protect against all new and known potential threats at all times. To learn more about Azure Firewall Standard, click here.

Azure Firewall Premium provides everything the standard version does, and additionally adds extra levels of data encryption, network intrusion detection, extended URL filtering, and Web category filters. To learn more about the added features of Azure Firewall Premium, click here.

Key Benefits and Features of Azure Firewall:

High availability - You do not need load balancers with Azure Firewall; it's already built in and ready to go.
Self-scalability - Azure Firewall is intuitive and will auto-scale as needed based on traffic flow to be ready for peak traffic times.
Threat awareness - Using Microsoft Cyber Security to filter traffic, Azure Firewall will deny any known problematic threats to keep your network safe.
Additional IP addresses - You can securely add up to 250 public IP addresses with Azure Firewall
Improved web category filtering - You can set up specific protocols to allow or deny categories within websites that are deemed inappropriate for use within your network. You have the ability to organize categories based on a defined set of descriptions.

What our real users have to say:

Many PeerSpot users found Azure Firewall to be very user-friendly and easy to use. They liked that it offers seamless integration to the cloud and were especially pleased with the threat filtering options.

Regarding integration and threat intelligence, our users wrote:

“The most valuable feature is the integration into the overall cloud platform.”

“The most valuable feature is threat intelligence. It is based on filtering and can identify multiple threats.”

“I think that one of the best features is definitely the premium version, along with the IDPs in terms of the intrusion detection and prevention system.”

Microsoft

Palo Alto Networks NG Firewalls offer comprehensive security, including application control, traffic shaping, threat prevention, and load balancing, designed to secure internal networks, perimeter protection, VPN services, and cloud environments.

Palo Alto Networks NG Firewalls are a key choice for managing and protecting data centers, securing remote access, network segmentation, malware prevention, and ensuring high availability and performance for business-critical applications. Known for stability and strong security, these firewalls use application-aware identifiers and IPS/IDS subscriptions to offer advanced threat protection. The unified platform facilitates seamless integration, while GlobalProtect and centralized management via Panorama enhance ease of use. However, there are areas for improvement, including pricing strategies, training, user support, and integration with third-party applications.

What are the essential features?

Stability: Reliable performance in different environments.
Application Control: Identifies applications to manage traffic.
Advanced Threat Protection: Includes DNS security, WildFire, and machine learning.
GlobalProtect: Secure remote access for users.
Centralized Management: Managed via the Panorama platform.

What benefits or ROI should users expect?

Security: Protects against threats with robust features.
User-Friendly: Simplified interface and easy configuration.
High Availability: Ensures performance for critical applications.
Integration: Seamless with existing systems and applications.
Support: Reliable technical support and resources.

In industries like finance, healthcare, and retail, Palo Alto Networks NG Firewalls secure sensitive data and meet regulatory requirements. These firewalls help manage large-scale networks in these sectors, providing essential security features and maintaining high-performance standards. They are implemented to ensure compliance, protect patient information, secure financial transactions, and safeguard customer data.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

Azure Firewall vs. Palo Alto Networks NG Firewalls