No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point CloudGuard Network Security vs Cisco Secure Firewall vs Palo Alto Networks NG Firewalls comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers high ROI with cost savings, enhanced security, and increased productivity, driving widespread user satisfaction.
Sentiment score
7.2
Check Point CloudGuard Network Security improves ROI through cost savings, enhanced security, automation, and reduced personnel needs.
Sentiment score
4.8
Cisco Secure Firewall boosts returns with cost reductions, efficiency, stability, enhanced security, and appreciated integration and cost-effectiveness.
Sentiment score
6.6
Palo Alto Networks NG Firewalls enhance security and reduce costs, improving efficiency and delivering substantial ROI in regulated industries.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
The value lies in maintaining operational integrity with zero downtime or incidents, facilitating secure, ongoing business operations.
Cybersecurity consultant at a comms service provider with 51-200 employees
Implementing CloudGuard has resulted in an excellent return on investment over one hundred percent ROI.
Android Developer at Droidforge
The unified policy is comprehensive and helps me to create firewall policies that are shared across all our facilities and plants.
System engineer at a manufacturing company with 1,001-5,000 employees
There is always a return on investment because you find you invest heavily, but your environment is secure and then you are at rest; you do not need to panic.
Specialist Datacenter And Server at IHS Towers
The biggest return on investment when using Cisco Secure Firewall is that there's no waste in any infrastructure cost and licensing costs for us.
Assistant Vice President at PLDT Enterprise
From my point of view, the biggest return on investment when using Cisco Secure Firewall is the single pane of glass, which is a huge plus for us.
Network Engineer at a government with 10,001+ employees
Their user-friendly interface and Panorama central management, which provides a comprehensive overview, make them an ideal investment.
Technical Lead at Accenture
The solution helped reduce downtime, which is crucial in time-sensitive industries like manufacturing.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
I have seen a return on investment since using Palo Alto Networks NG Firewalls in terms of time saved.
Security Professional at BT - British Telecom
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is generally well-rated for responsiveness and expertise, though experiences vary by region and complexity.
Sentiment score
7.1
Check Point CloudGuard Network Security's customer service is generally praised for expertise and responsiveness, despite regional variations.
Sentiment score
7.3
Cisco Secure Firewall receives high ratings for responsive, knowledgeable support, despite some concerns about process speed and consistency.
Sentiment score
6.9
Customer service for Palo Alto Networks NG Firewalls varies, with users noting fast responses but inconsistent service and language issues.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
They usually respond quite fast, and they are very knowledgeable about what they do.
Network security engineer at a tech services company with 201-500 employees
We had an endless loop of emails trying to fix this, and the suggestion was to reinstall the gateway and do it from scratch, which was not an option at that point because it would leave that specific location without access.
System administrator at a consultancy with 201-500 employees
Available twenty-four by seven.
Android Developer at Droidforge
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
VSO at a computer software company with 501-1,000 employees
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
They have expertise and provide solutions for the most difficult problems.
Network Security Administrator at a government with 501-1,000 employees
Palo Alto's network support is excellent, and I would rate it a ten out of ten.
Founder at a tech services company with 11-50 employees
Their response time is within one hour.
Head of data centers at a non-profit with 10,001+ employees
They offer fast and competent assistance.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate effectively scales for diverse enterprises, despite occasional hardware limitations and complexities in adding new devices.
Sentiment score
7.6
Check Point CloudGuard Network Security is praised for scalability, seamless cloud integration, and requires careful planning for optimal use.
Sentiment score
6.7
Cisco Secure Firewall offers scalable performance for diverse enterprises, though potentially costly, with adaptable clustering and model options for growth.
Sentiment score
6.8
Palo Alto Networks NG Firewalls offer scalability and reliability but may face hardware limitations and cost concerns for smaller setups.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
I can deploy it everywhere I need it.
Security & Network Services at a tech company with 201-500 employees
We have transitioned from 1,000 to 500 users without any issue.
Cloud Infrastructure Engineer at delaware BeLux
We perform minor and major upgrades, and it works seamlessly.
Manager, Managed Security Services at a tech vendor with 51-200 employees
When something happens in the device, the failover happens very quickly without any interruption.
Network Unit Head at a comms service provider with 501-1,000 employees
Cisco Secure Cloud now allows us to potentially take the management functions of Cisco Secure Firewall, move it into the cloud, and integrate it with other Cisco security products, managing everything from one single pane.
Senior Network Engineer at a insurance company with 5,001-10,000 employees
I rate the scalability as a number 10.
Cybersecurity Team Leader at EMAK For Computer Manufacturing (ECM)
Cloud deployments benefit from auto-scaling, allowing for automatic adjustments to firewall capacity based on demand.
Technical Lead at Accenture
It is important to assess the infrastructure size before choosing a model.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
Palo Alto Networks NG Firewalls are scalable and reliable.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is stable, with minor issues mostly resolved by updates, and users rate its stability highly.
Sentiment score
8.0
Check Point CloudGuard Network Security is praised for its high stability, performance, and smooth operation in demanding environments.
Sentiment score
7.7
Cisco Secure Firewall is praised for reliability, stability, strong performance, effective support, with minor bugs not affecting its high availability.
Sentiment score
8.5
Palo Alto Networks NG Firewalls are praised for high stability and reliability, outperforming competitors despite occasional hardware and update issues.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
I have not observed any downtime.
Sales manager/ project manager at Atea
For instance, when we are working on a release and do an upgrade, we start experiencing unexpected issues.
Chief Technology Officer at Chief Security Officers
The solution is stable.
Network administrator at Helios IT Service GmbH
We have often encountered split-brain scenarios during failover processes and code upgrades, which have been persistent problems for us.
Senior Manager, Network Engineering at TTi Power Equipment
We work with a cluster with high availability, so if something goes wrong, we have it functioning.
Cisco Secure Firewall offers exceptional performance and stability.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
With appropriately configured policies, these firewalls can provide robust network security.
Solution Architect at a retailer with 201-500 employees
After the upgrade, we are experiencing performance issues.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
I have not experienced any outages or issues.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Room For Improvement

Fortinet FortiGate users face stability issues, high costs, complex interfaces, and desire improvements in support, integration, and features.
Users suggest Check Point CloudGuard improve design, compatibility, reports, integrations, pricing, training, policy management, support, scalability, and automation.
Users desire a more intuitive Cisco Secure Firewall GUI with better integration, simplified licensing, and enhanced threat management capabilities.
Palo Alto Networks NG Firewalls need better configuration, user-friendliness, integration, and cost-effective, scalable hardware with enhanced support and management.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.
Security architect at Twinformatics
Better documentation would be welcome.
Network security engineer at a tech services company with 201-500 employees
The user interface could be more intuitive, and the initial setup and configuration can be complex, requiring a technical team.
Android Developer at Droidforge
My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time.
Senior Manager, Network Engineering at TTi Power Equipment
The GUI is useless for me and frustrates me to a very high degree, which led me to switch to the CLI for configuration.
Network Engineer at a logistics company with 10,001+ employees
Firewall as a Service can scale to a very large extent because it is a cloud-based offering that can scale up to a very large number, which is not a problem.
Chief Technology Officer at Binary Global Limited
When performance degrades due to full packet inspection, the solution should be to increase the computing power within the same firewall, not to recommend upgrading to a larger, more expensive model.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Further integration into a unified system could improve usability.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
Palo Alto Networks NG Firewalls lack built-in multi-factor authentication, requiring the purchase of a third-party tool to implement this essential security feature.
Head of data centers at a non-profit with 10,001+ employees
 

Setup Cost

Fortinet FortiGate is cost-effective and flexible compared to competitors, but may be expensive for small businesses.
Enterprise users find Check Point CloudGuard flexible but expensive, with varied pricing and a need for more affordable options.
Cisco Secure Firewall offers balanced pricing with comprehensive features, justifying higher costs through reliability, security, and support.
Palo Alto Networks NG Firewalls are costly, but advanced security features justify the expense for many users.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars.
Android Developer at Droidforge
Check Point is expensive, however, with the features and capabilities, I can justify the cost.
Manager, Managed Security Services at a tech vendor with 51-200 employees
It is the highest in the market.
System engineer at a manufacturing company with 1,001-5,000 employees
It's good to have them, however, it costs us a lot.
It Administration at Dilcon Community School
It's considered a premium, but people pay that price for Cisco.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
There are a lot of in-place contracts for us that provide the benefit of discounts.
Solutions Architect at a manufacturing company with 501-1,000 employees
Palo Alto Networks NG Firewalls are expensive.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Palo Alto Networks NG Firewalls come at a premium, exceeding the cost of most competitors by 45 percent.
Head of data centers at a non-profit with 10,001+ employees
Colleagues looking for the cheapest and fastest firewall can still use Palo Alto Networks NG Firewalls because they are affordable.
Director at Zuci Systems
 

Valuable Features

Fortinet FortiGate offers robust security features, user-friendly interface, scalability, affordability, and centralized management, ideal for diverse applications.
Check Point CloudGuard Network Security offers auto-scaling, centralized management, threat prevention, cloud integration, and improved security with a user-friendly interface.
Cisco Secure Firewall offers strong protection with VPN, FMC management, high availability, threat detection, and seamless Cisco integration.
Palo Alto Networks NG Firewalls provide advanced security, ease of use, and integration, excelling in application ID and URL filtering.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The firewall and VPN features are the most valuable in protecting our customers' networks.
Sales & Support at a tech services company with 1-10 employees
One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches.
Android Developer at Droidforge
Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.
Security & Network Services at a tech company with 201-500 employees
Network Security provides us with unified security management across hybrid and cloud as well as on-prem.
Manager, Managed Security Services at a tech vendor with 51-200 employees
What stands out positively about Cisco is their training and support, which has effectively prepared engineers to work with their products.
Senior Manager, Network Engineering at TTi Power Equipment
This is very important to my organization, as we work extensively with security because we are a bank, so we can keep the data safe.
Network Security Administrator at a government with 501-1,000 employees
Cisco Secure Firewall allows me to safeguard Layer 7 or Layer 3 and manage the security rules with the business needs of my organization.
The most valuable features of Palo Alto Networks NG Firewalls are DNS sync calls, enabled security features, and Wildfire.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Threat Vault allows us access to a comprehensive threat database, enabling us to get detailed information on threats and how to mitigate them.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
The most valuable feature of Palo Alto Networks NG Firewalls is Cortex Data Lake.
Solution Architect at a retailer with 201-500 employees
 

Mindshare comparison

As of April 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.3%, down from 21.1% compared to the previous year. The mindshare of Check Point CloudGuard Network Security is 1.6%, up from 0.3% compared to the previous year. The mindshare of Cisco Secure Firewall is 7.5%, up from 5.5% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 5.3%, up from 3.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate18.3%
Cisco Secure Firewall7.5%
Palo Alto Networks NG Firewalls5.3%
Check Point CloudGuard Network Security1.6%
Other67.3%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Devraj Kc - PeerSpot reviewer
network and security engineer at Max international
Cloud security has strengthened compliance and now protects internet access for our workloads
The best features Check Point CloudGuard Network Security offers are its threat emulation and threat extraction blade as well as bring your own license where you can use the on-prem Check Point CloudGuard and decommission it to use in the cloud. I believe Check Point CloudGuard Network Security has impacted our organization positively because it is one of the stable products that I have used till now, and we do not have to upgrade Check Point CloudGuard Network Security for any sort of CVE or bug in its OS and it is very stable. Check Point CloudGuard Network Security has decreased the organizational risk because it provides compliance with HIPAA as well as PCI DSS by means of its compliance blade. It makes it easier for us to determine if we are compliant or not. It made me more secure because when you talk about security, Check Point CloudGuard Network Security is on top of the list with 99.8 in blocking malware according to the Miercom list. I believe it has had a positive effect and we have not had any incidents.
Phil Shiflett - PeerSpot reviewer
Senior Manager, Network Engineering at TTi Power Equipment
Unified policies streamline network management but complex licensing requires attention
Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.
SV
Solution Architect // Network Consultant at Group S
Network security has improved and allows detailed user-based control over encrypted traffic
Bandwidth usage is not something we use much, but it depends on the SD-WAN plugin because the application load balancing is based on the SD-WAN product. That functionality does not work as it should, although the App-ID is working very well. SD-WAN functionality is working, but when you compare it with other products on the market, it is very limited. Palo Alto also has ION devices, and ION devices together with Prisma Access or Strata Cloud Manager now are more the way to go than using Palo Alto Networks NG Firewalls on-premises. At the moment I have some issues, but the issues are more related to the general way of working of many vendors. They implement new things very fast and it is not always bug-free. With new releases, sometimes you still have some issues. This is the main concern. If you look back five or maybe ten years ago, the products were more stable and you had more decent releases, but that is something in general for many vendors. Palo Alto is also a factor with that. They want to bring new features to the market too fast. Features are a concern because all vendors try to compete against each other. If one vendor comes out with a new feature, then other vendors do the same. Sometimes they want to be the first on the market with it, and that sometimes introduces bugs or issues with the product.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
885,376 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
13%
Construction Company
8%
Marketing Services Firm
8%
Performing Arts
7%
Computer Software Company
12%
Manufacturing Company
9%
Comms Service Provider
7%
Construction Company
6%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business364
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business67
Midsize Enterprise40
Large Enterprise76
By reviewers
Company SizeCount
Small Business186
Midsize Enterprise129
Large Enterprise231
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise56
Large Enterprise85
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Check Point CloudGuard Network Security?
The tool's most valuable feature is its management console.
What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Although I do not know much about the pricing or setup costs, Check Point CloudGuard Network Security is very cost-ef...
What needs improvement with Check Point CloudGuard Network Security?
Check Point CloudGuard Network Security could be improved with faster policy propagation across large multi-cloud env...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
 

Comparisons

 

Also Known As

Fortinet FortiGate Next-Generation Firewall
CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Physicians Choice Laboratory Services, Helvetica Insurance
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: March 2026.
885,376 professionals have used our research since 2012.