Cisco IOS Security vs Palo Alto Networks CN-Series comparison

Cisco and Palo Alto Networks are both solutions in the Firewalls category. Cisco is ranked #29 with an average rating of 9.0, while Palo Alto Networks is ranked #31 with an average rating of 9.5. Cisco holds a 0.4% mindshare in Firewalls, compared to Palo Alto Networks’s 0.2% mindshare. Additionally, 91% of Cisco users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco IOS Security and Palo Alto Networks CN-Series based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cisco IOS Security vs. Palo Alto Networks CN-Series Report (Updated: December 2025).

Buyer's Guide

Cisco IOS Security vs. Palo Alto Networks CN-Series

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Cisco IOS Security is 0.4%, up from 0.2% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.2%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	18.8%
Cisco IOS Security	0.4%
Palo Alto Networks CN-Series	0.2%
Other	80.6%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Danijel Cerovecki

Head of Cyber Defense Department and Network Technologies Department at Verso Altima

Have faced challenges in keeping licensing clear and consistent while ensuring reliable network protection

We are a Gold Partner with Cisco. Our customers come from various industries, including service providers, and we target service providers and enterprise customers.We do not extensively use Zone-Based Firewalls in Cisco IOS Security, instead typically deploying standalone firewalls such as Cisco FTDs or Cisco ASA devices. For threat analytics and vulnerability scanning, we utilize third-party vendors with dedicated devices and software. We use products such as Tenable from Nessus for this type of analysis. We have implemented Secure Access Control Server in Cisco IOS Security, which combines multiple security mechanisms including AAA, 802.1X for network access control with Cisco ICE, TrustSec for identity-based segmentation, and Cisco DNA Center. Cisco IOS Security's VPN support is comprehensive and increasingly important in daily communication, from basic site-to-site tunnels to remote access VPNs and SD-WAN secure VPNs. Protecting and encrypting communication is essential in modern networks. The challenges with Cisco IOS Security are more operational than product-related. There is an understaffing issue, making automation and orchestration capabilities particularly valuable. For the products themselves, we only encounter routine operational matters such as addressing new vulnerabilities and patching. For those considering Cisco IOS Security, it is important to understand that Cisco offers a complete ecosystem. When embracing the Cisco ecosystem fully, customers receive excellent products and comprehensive solutions. On a scale of 1-10, I rate Cisco IOS Security a 9.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most significant aspect of IPS is self-explanatory as it primarily focuses on intrusion prevention, which is crucial for Fortinet's internal outbreak prevention efforts and ensuring compliance on endpoint devices."

"What I like the most is the configuration and that it's simple, and straightforward to maintain."

"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."

"The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations. Additionally, the Security Fabric tool is very good."

"FortiGate is on the cheaper end, and it offers good value."

"The most valuable feature of this solution is Quota."

"I would rate the scalability of this product a nine out of ten because it is highly scalable. We have not had problems with customers in terms of scalability."

"The product is easy to install since we only need to follow the user manual, documents, and articles provided by Fortinet to install the product."

More Fortinet FortiGate pros

"The most valuable features are DNS service and shell self-service within a network."

"Completely integrates branch offices with perimeter security."

"One of the main features is that the hardware is extremely reliable."

"The technical is excellent."

"In Pakistan, we only use Cisco because they have good local support infrastructure. Huawei and Fortinet don't offer direct support in Pakistan."

"Cisco products are very secure and integrate easily with other devices."

"It covers everything we need it to without looking to secondary solutions."

"Previously, anyone in the organization would see any data point in the wall. They could just go and connect their machine with that data point and could access the network. But now, even if someone came and tried that, they will not be given access."

More Cisco IOS Security pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

Cons

"Updating the software during issues can be quite convoluted, especially if there is an unexpected attack, such as on a Saturday."

"The firewall engine is not so strong as of now, in my opinion... My second concern is that, while they have Zero-day vulnerability and anti-malware features, the threat engine needs to be strengthened, its efficiency can be increased."

"The UI could be improved."

"When considering the policy of the vendors, they do not offer much of a discount policy, making the licensing model an area that needs improvement."

"I would rate Fortinet support a six out of ten. The immediate response is not that good, particularly when raising a critical or P1 ticket; they lag in the immediate response."

"Some of the web policy reports could be improved."

"The scalability could be better."

"I would like to have SD-WAN as a part of the Next Generation Firewall. It would enhance high availability."

More Fortinet FortiGate cons

"Pricing can be reduced. I rate the current price for the product a four out of ten."

"Cisco IOS Security could improve its security features. There are competitors that have some additional security features, such as Fortinet FortiGate. Additionally, there should be better synchronization with Cisco IOS Security and other vendors, and improved AI features would be beneficial."

"We faced significant challenges related to licensing issues, particularly when licenses expire."

"Cisco IOS Security's monitoring is rather rudimentary and could be improved."

"In the security portfolio from Cisco, the issue is marketing. Cisco is still seen primarily as an enterprise network player rather than being acknowledged as a security vendor."

"There could be a bit more functions on offer that could make it easier to use."

"The routers, don't have like long-term tendency features, or higher availability features available for the IOS. It could also use a better user interface."

"The solution is not user friendly and it is hard to manage the GUI interface."

More Cisco IOS Security cons

"I'd like to see more IOPs features."

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

Pricing and Cost Advice

"The Fortinet FortiGate security features cost approximately $1,500 a year. The firewall itself doesn't have a recurring cost. It's the security features on top of that that you pay for."

"There is a need to pay for a license for the product."

"It's a very full-featured and it's priced well solution."

"Fortinet is reasonable in pricing and licensing. Overall, FortiGate is affordable. The licensing fee can be a little high, depending on the budget for your project."

"I think that the pricing is fair."

"Fortinet FortiGate IPS' licensing is quite simple to understand."

"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."

"Fortinet FortiGate IPS is cheaper than other solutions like Cisco or Check Point."

More Fortinet FortiGate pricing and cost advice

"Palo Alto networks are more expensive than this solution and this is why you will see more products like this one in Mexico."

"Cisco IOS Security price could be reduced, it is more expensive than many of the other solutions, such as Sophos and Fortinet FortiGate."

"The cost may be around $5,000 to $10,000 a year. If you want support you have to pay at least this price."

"The licensing is on a subscription basis, and it is fairly costly. I would prefer a one-time payment."

"Cisco IOS Security is not very expensive, and pricing depends on where you live. It's affordable for both individuals and institutions. On a scale from one to five, I would give Cisco's pricing a four."

"It is necessary to pay for a license in order to use the solution. It is on a yearly basis and the price is high."

"The pricing is average and includes all features with support."

"The licenses for this solution are expensive."

More Cisco IOS Security pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

23%

Manufacturing Company

Government

Outsourcing Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	188

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	14
Large Enterprise	18

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Cisco IOS Security?

Cisco IOS Security is a mature product with extensive capabilities, serving as the base for the defense layer. It off...

See all answers

What is your experience regarding pricing and costs for Cisco IOS Security?

The cost of Cisco IOS Security for customers is on the higher end of pricing compared to the competition, depending o...

See all answers

What needs improvement with Cisco IOS Security?

Regarding improvements in Cisco IOS Security, what consistently confuses me is the inability of Cisco to maintain a c...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 6% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Cisco IOS Security

Compared 18% of the time

Cisco Meraki MX vs Cisco IOS Security

Compared 8% of the time

OPNsense vs Cisco IOS Security

Compared 8% of the time

Cato SASE Cloud Platform vs Cisco IOS Security

Compared 8% of the time

Juniper SRX Series Firewall vs Cisco IOS Security

Compared 6% of the time

More Cisco IOS Security Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 49% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 29% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 23% of the time

More Palo Alto Networks CN-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2026

Download Fortinet FortiGate product report

Buyer's Guide

Cisco IOS Security

January 2026

Download Cisco IOS Security product report

Buyer's Guide

Firewalls

January 2026

Download Palo Alto Networks CN-Series product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

IOS Security

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Cisco IOS Software delivers a sophisticated set of security capabilities for a comprehensive, layered security approach throughout your network infrastructure. Cisco IOS security technologies help to defend critical business processes against attack and disruption, protect privacy, and support policy and regulatory compliance controls.

Cisco

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Arup Group, Brunel University London, City of Biel, Gobierno de Castilla-La Mancha, K&L Gates , New South Wales Rural Fire Service, Offshore Northern Seas, Transplace

Information Not Available

Buyer's Guide

Cisco IOS Security vs. Palo Alto Networks CN-Series

December 2025

Free Report: Cisco IOS Security vs. Palo Alto Networks CN-Series

Find out what your peers are saying about Cisco IOS Security vs. Palo Alto Networks CN-Series and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Cisco IOS Security vs. Palo Alto Networks CN-Series report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.