Try our new research platform with insights from 80,000+ expert users

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 4, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
7.3
Cisco Secure Firewall boosts ROI with enhanced security, cost reductions, and compatibility, proving its value and efficiency over time.
Sentiment score
7.1
Palo Alto Networks NG Firewalls offer strong ROI with enhanced security, reduced costs, operational efficiency, and improved threat management.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
The biggest return on investment when using Cisco Secure Firewall is that there's no waste in any infrastructure cost and licensing costs for us.
Assistant Vice President at PLDT Enterprise
From my point of view, the biggest return on investment when using Cisco Secure Firewall is the single pane of glass, which is a huge plus for us.
Network Engineer at a government with 10,001+ employees
The biggest return on investment for me when using Cisco Secure Firewall is reliability and robust network design.
OT NETWORK MANAGER at a energy/utilities company with 10,001+ employees
Their user-friendly interface and Panorama central management, which provides a comprehensive overview, make them an ideal investment.
Technical Lead at Accenture
The solution helped reduce downtime, which is crucial in time-sensitive industries like manufacturing.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
I have seen a return on investment since using Palo Alto Networks NG Firewalls in terms of time saved.
Security Professional at BT - British Telecom
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
7.5
Cisco Secure Firewall's customer service is praised for its knowledgeable support, though initial response times and experiences vary.
Sentiment score
6.9
Palo Alto Networks' customer service receives mixed reviews, praised for knowledge yet critiqued for delays and first-level support quality.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
I have to provide many logs, yet problems remain unresolved, often requiring workarounds rather than solutions.
VSO at a computer software company with 501-1,000 employees
I have been working with them on firewalls, wireless, switching, and routing, and the support is the best.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
They have expertise and provide solutions for the most difficult problems.
Network Security Administrator at a government with 501-1,000 employees
Palo Alto's network support is excellent, and I would rate it a ten out of ten.
Founder at a tech services company with 11-50 employees
Their response time is within one hour.
Head of data centers at a non-profit with 10,001+ employees
They offer fast and competent assistance.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
7.3
Cisco Secure Firewall offers scalable solutions with adaptable clustering, despite some licensing concerns, enhancing integration and management ease.
Sentiment score
7.0
Palo Alto Networks NG Firewalls offer scalable options with flexible deployments, centralized management but may face cost challenges for smaller businesses.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
Scalability presents a challenge.
VSO at a computer software company with 501-1,000 employees
Compared to FortiGate and Palo Alto, it lags in configuration and other aspects.
Senior Network Administrator at iib
Even with the highest one, the 4600, we still face issues, particularly when transitioning between screens; it becomes very slow.
Network Security Engineer at a computer software company with 501-1,000 employees
Cloud deployments benefit from auto-scaling, allowing for automatic adjustments to firewall capacity based on demand.
Technical Lead at Accenture
It is important to assess the infrastructure size before choosing a model.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
Palo Alto Networks NG Firewalls are scalable and reliable.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.4
Cisco Secure Firewall is stable, with some VPN issues; recent updates improve stability, highlighting the importance of proper configuration.
Sentiment score
8.4
Palo Alto Networks NG Firewalls are praised for stability, reliability, robust security, and smooth performance during configuration changes.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
We have often encountered split-brain scenarios during failover processes and code upgrades, which have been persistent problems for us.
Senior Manager, Network Engineering at TTi Power Equipment
We work with a cluster with high availability, so if something goes wrong, we have it functioning.
Cisco Secure Firewall offers exceptional performance and stability.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
With appropriately configured policies, these firewalls can provide robust network security.
Solution Architect at a retailer with 201-500 employees
After the upgrade, we are experiencing performance issues.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
I have not experienced any outages or issues.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
Cisco Secure Firewall is hindered by complex UI, licensing issues, outdated features, and needs improvements in scalability and integration.
Palo Alto Networks NG Firewalls need improved reporting, ease-of-use, third-party integration, cost, decryption, support, and streamlined updates.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
Senior IT specialist at SAUDIA ALIRLINES
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time.
Senior Manager, Network Engineering at TTi Power Equipment
Firepower Management Center is quite out of date compared to other vendors.
Team Lead at WM Group
The integration between Cisco products themselves presents difficulties, such as SD-WAN configuration.
VSO at a computer software company with 501-1,000 employees
When performance degrades due to full packet inspection, the solution should be to increase the computing power within the same firewall, not to recommend upgrading to a larger, more expensive model.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Further integration into a unified system could improve usability.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
Palo Alto Networks NG Firewalls lack built-in multi-factor authentication, requiring the purchase of a third-party tool to implement this essential security feature.
Head of data centers at a non-profit with 10,001+ employees
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
Cisco Secure Firewall has high pricing and complex licensing, with significant ongoing costs despite potential discounts.
Palo Alto Networks NG Firewalls offer premium security solutions with high costs justified by advanced features and enterprise-focused services.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
It's good to have them, however, it costs us a lot.
It Administration at Dilcon Community School
It's considered a premium, but people pay that price for Cisco.
Principal Consultant at Epitome Infotech Solutions (P) Ltd
There are a lot of in-place contracts for us that provide the benefit of discounts.
Solutions Architect at a manufacturing company with 501-1,000 employees
Palo Alto Networks NG Firewalls are expensive.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Palo Alto Networks NG Firewalls come at a premium, exceeding the cost of most competitors by 45 percent.
Head of data centers at a non-profit with 10,001+ employees
Colleagues looking for the cheapest and fastest firewall can still use Palo Alto Networks NG Firewalls because they are affordable.
Director at Zuci Systems
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
Cisco Secure Firewall offers comprehensive security with robust access control, scalability, and advanced protection features, enhancing enterprise security.
Palo Alto NG Firewalls deliver comprehensive security with advanced threat prevention, seamless integration, and user-friendly management for various industries.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
What stands out positively about Cisco is their training and support, which has effectively prepared engineers to work with their products.
Senior Manager, Network Engineering at TTi Power Equipment
This is very important to my organization, as we work extensively with security because we are a bank, so we can keep the data safe.
Network Security Administrator at a government with 501-1,000 employees
Cisco Secure Firewall allows me to safeguard Layer 7 or Layer 3 and manage the security rules with the business needs of my organization.
The most valuable features of Palo Alto Networks NG Firewalls are DNS sync calls, enabled security features, and Wildfire.
Technical Engineer - Technical Security at a tech services company with 1,001-5,000 employees
Threat Vault allows us access to a comprehensive threat database, enabling us to get detailed information on threats and how to mitigate them.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
The most valuable feature of Palo Alto Networks NG Firewalls is Cortex Data Lake.
Solution Architect at a retailer with 201-500 employees
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco Secure Firewall
Ranking in Firewalls
7th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
429
Ranking in other categories
Cisco Security Portfolio (3rd)
Palo Alto Networks NG Firew...
Ranking in Firewalls
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
196
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.7%, down from 20.5% compared to the previous year. The mindshare of Cisco Secure Firewall is 6.9%, up from 5.4% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 4.6%, up from 3.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.7%
Palo Alto Networks NG Firewalls4.6%
Cisco Secure Firewall6.9%
Other69.80000000000001%
Firewalls
 

Q&A Highlights

Abdul Azim - PeerSpot reviewer
Network Security Engineer at IIPL
Nov 05, 2024
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Phil Shiflett - PeerSpot reviewer
Senior Manager, Network Engineering at TTi Power Equipment
Unified policies streamline network management but complex licensing requires attention
Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.
VR
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
Cost-effective with operational and maintenance ease
Understanding the flow and application of securities can be complex, requiring navigation across different sections. Further integration into a unified system could improve usability. It is a bit complex to understand the flows and how the securities are applied to each of those flows. It was a little bit challenging because we had to go to two different sections to figure that out. It would be helpful if it is all unified so that we can see the way the firewall connections and security are set up and the applications that are using those connections. It could be structured differently so that it is more understandable. It has been a while, but it was a bit of a complex way. We had to hop from one area to the other and go back and forth to figure out how a specific connection and application was set up.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
879,455 professionals have used our research since 2012.
 

Comparison Review

it_user206346 - PeerSpot reviewer
Security Consultant at Webernetz.net - Network Security Consulting
Mar 11, 2015
Cisco ASA vs. Palo Alto Networks
Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…
 

Answers from the Community

Abdul Azim - PeerSpot reviewer
Network Security Engineer at IIPL
Nov 5, 2024
Nov 5, 2024
When considering a firewall solution, Palo Alto Networks stands out in terms of advanced security features, AI-driven automation, and ease of management. These attributes make it an ideal choice for organizations looking to not only secure their networks today but also protect themselves from the evolving cyber threats of tomorrow. In comparison, Cisco Firepower, while a solid solution, lacks t...
See 2 answers
Raj Metkar - PeerSpot reviewer
Director, Head of Networks at MUFG, EMEA
Sep 10, 2024
I will say go for Palo Alto Firewalls purely on basis of ease of management(centralised management has all features that one will need), only reason one would think of Cisco firepower if you are dependent on EIGRP as dynamic routing protocol and PA's will support anything else like BGP/OSPF for total integration and Dynamic topology, Similar to Checkpoint firewalls but much cheaper in price.We use All 3 firewall technologies , Cisco, PA and Checkpoint, if I have money I will go for checkpoint everywhere, main problem with Cisco has been centralised managed and Cisco never got it right, Central management for PA is almost there but is still not as good as Checkpoint.
Bijo Abraham - PeerSpot reviewer
Technical Consultant | Network and Security at Interconnect Consulting Limited
Nov 5, 2024
When considering a firewall solution, Palo Alto Networks stands out in terms of advanced security features, AI-driven automation, and ease of management. These attributes make it an ideal choice for organizations looking to not only secure their networks today but also protect themselves from the evolving cyber threats of tomorrow. In comparison, Cisco Firepower, while a solid solution, lacks the same level of integrated AI capabilities, cloud-readiness, and seamless management interface. Given these factors, Palo Alto Networks offers superior protection, greater operational efficiency, and long-term scalability — all of which align with modern business requirements for agility, security, and growth. We strongly recommend that the organization adopt Palo Alto Networks Firewalls to meet current and future security needs. This recommendation aligns with the organization’s objectives of reducing complexity, improving security posture, and preparing for future threats with an intelligent and easily manageable security solution.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
16%
Manufacturing Company
8%
University
7%
Comms Service Provider
7%
Computer Software Company
12%
Financial Services Firm
9%
Manufacturing Company
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business180
Midsize Enterprise126
Large Enterprise212
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise56
Large Enterprise84
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is better - Fortinet FortiGate or Cisco ASA Firewall?
One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...
How does Cisco's ASA firewall compare with the Firepower NGFW?
It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...
Which is better - Meraki MX or Cisco ASA Firewall?
Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall, Cisco Secure Firewall ASA Virtual - BYOL
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
Find out what your peers are saying about Cisco Secure Firewall vs. Palo Alto Networks NG Firewalls and other solutions. Updated: December 2025.
879,455 professionals have used our research since 2012.