No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco IOS Security vs Palo Alto Networks CN-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco IOS Security
Ranking in Firewalls
39th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
49
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (16th)
Palo Alto Networks CN-Series
Ranking in Firewalls
32nd
Average Rating
9.6
Reviews Sentiment
7.4
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of Cisco IOS Security is 0.5%, up from 0.3% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate16.0%
Palo Alto Networks CN-Series0.4%
Cisco IOS Security0.5%
Other83.1%
Firewalls
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at Arrow PC Network Pvt Ltd
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Danijel Cerovecki - PeerSpot reviewer
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
Have faced challenges in keeping licensing clear and consistent while ensuring reliable network protection
We are a Gold Partner with Cisco. Our customers come from various industries, including service providers, and we target service providers and enterprise customers.We do not extensively use Zone-Based Firewalls in Cisco IOS Security, instead typically deploying standalone firewalls such as Cisco FTDs or Cisco ASA devices. For threat analytics and vulnerability scanning, we utilize third-party vendors with dedicated devices and software. We use products such as Tenable from Nessus for this type of analysis. We have implemented Secure Access Control Server in Cisco IOS Security, which combines multiple security mechanisms including AAA, 802.1X for network access control with Cisco ICE, TrustSec for identity-based segmentation, and Cisco DNA Center. Cisco IOS Security's VPN support is comprehensive and increasingly important in daily communication, from basic site-to-site tunnels to remote access VPNs and SD-WAN secure VPNs. Protecting and encrypting communication is essential in modern networks. The challenges with Cisco IOS Security are more operational than product-related. There is an understaffing issue, making automation and orchestration capabilities particularly valuable. For the products themselves, we only encounter routine operational matters such as addressing new vulnerabilities and patching. For those considering Cisco IOS Security, it is important to understand that Cisco offers a complete ecosystem. When embracing the Cisco ecosystem fully, customers receive excellent products and comprehensive solutions. On a scale of 1-10, I rate Cisco IOS Security a 9.
Ahmed_Shalaby - PeerSpot reviewer
Senior Cyber Security Engineer at Beta Information Technology
Application control excels and integration with monitoring system boosts efficiency
I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortinet FortiGate is easy to use."
"Web filtering is the most useful feature."
"We've actually replaced 30 or more Cisco routers that were doing these VPN connections, and we replaced them with the FortiGates in order to provide Point-to-Point connectivity."
"I am pleased with this solution and the features it offers right now."
"FortiGate Next Generation Firewall is a good solution because it has a range of options and a clear ecosystem."
"Fortinet FortiGate is a firewall that protects all network data."
"The security for endpoints is the most valuable; it is very secure for our workers and allows us to secure a transaction and enable security for a specific segment in the workflow."
"The solution is very, very easy to use, the user interface is very nice, the product offers pretty good customization, configuration has been straightforward and simple, the reporting is quite good, the initial setup is straightforward as well, and we've found the pricing to be pretty good."
"Previously, anyone in the organization would see any data point in the wall. They could just go and connect their machine with that data point and could access the network. But now, even if someone came and tried that, they will not be given access."
"The most valuable feature of Cisco IOS Security is posturing."
"The VPN was valuable for us because more people are working from home. It has a lot of reporting and easy-to-use management tools."
"Cisco has always been a premium product. There's a lot of other entry-level solutions. This is more robust."
"This OS has changed the definition of network security by using the router."
"The most valuable features of Cisco IOS Security are the plenty of functionality it provides, many people are IT certified in the usage, and the user interface is good."
"The most valuable feature is the scalability. The nice thing with the bigger vendors is that they're very good at scale."
"The scalability of Cisco IOS Security is good, and I can increase and decrease elements when needed for approximately 45,000 people who can use the solution, including about 1,000 IT managers, technicians, and other users who directly use it."
"The app inspection is very helpful for network security."
"The stability of Palo Alto Networks CN-Series is excellent."
 

Cons

"The performance could be a bit better. Right now, I find it to be lacking."
"We would like to see an improvement in the consistency of the product's performance levels."
"They should make the product user-friendly and enhance the security features."
"The most important feature to have is zero trust, which is lacking in Fortinet FortiGate IPS."
"Fortinet FortiGate is a stable solution. However, my issue is the performance only. When I use all the profiles, this affects the performance. From the beginning, I should have had a better sizing of the box."
"Difficult to add or define, and not that easy to configure and manage."
"The built-in logging and reporting is limited without FortiAnalyzer."
"In terms of pricing, the solution is a bit expensive, but I think it was a better option than Checkpoint, which is why I replaced it."
"Some additional features could be improved. For example, the licensing for DNA environments could be better."
"Pricing can be reduced. I rate the current price for the product a four out of ten."
"The configuration should be easier in the solution."
"There are the usual bugs that are inherent to some software upgrades. Sometimes this provides some unexpected issues, however, it happens with all brands all the time."
"With Cisco IOS, especially the routers, don't have like long-term tendency features, or high availability features available for the IOS. Also, it could use a better user interface."
"While Cisco IOS Security is stable and scalable, I would like to see it improved to be even better."
"With respect to user-friendliness, it is a command-line interface and those with such experience will get along just fine, whereas others may struggle."
"While I do not have specific recommendations for improvement, pricing can be reduced."
"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."
"I'd like to see more IOPs features."
 

Pricing and Cost Advice

"The price for the device and software is high. However, the solution is of good quality and has a lot of features."
"As far as I'm aware, in our case, it's just a yearly pricing arrangement with no additional licensing costs."
"The price, in comparison to other products is very cheap."
"There is a license to use Fortinet FortiGate."
"Its price is normal. If I compare it with other vendors, such as Palo Alto, it's normal. Palo Alto is expensive."
"I would rate the pricing a five out of ten"
"They are very competitive, but we like to have the factory warranty taken care of."
"Its licenses cost the same for different subscription plans."
"The licensing is on a subscription basis, and it is fairly costly. I would prefer a one-time payment."
"The pricing for Cisco IOS Security is reasonable compared to other Cisco products."
"The price of the solution should be cheaper, and the license is purchase annually."
"The tool could be priced lower. If you want advanced services, then you need to purchase them."
"Palo Alto networks are more expensive than this solution and this is why you will see more products like this one in Mexico."
"It is an expensive solution."
"You can get a better price if you commit to a longer-term license. Three years, five years, or even seven or ten years will be cheaper than a three-month or one-year term."
"They have smart licenses that can be provided for one year, two years, three years, five years, and seven years. Alternatively, they have perpetual licenses available."
Information not available
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Computer Software Company
14%
Construction Company
9%
Manufacturing Company
8%
Comms Service Provider
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business367
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise14
Large Enterprise18
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Cisco IOS Security?
The cost of Cisco IOS Security for customers is on the higher end of pricing compared to the competition, depending o...
What needs improvement with Cisco IOS Security?
Regarding improvements in Cisco IOS Security, what consistently confuses me is the inability of Cisco to maintain a c...
What is your primary use case for Cisco IOS Security?
The main use cases for Cisco IOS Security include elementary device hardening, access control, control-plane policing...
What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?
The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.
What needs improvement with Palo Alto Networks CN-Series?
Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...
What is your primary use case for Palo Alto Networks CN-Series?
I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
IOS Security
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Arup Group, Brunel University London, City of Biel, Gobierno de Castilla-La Mancha, K&L Gates , New South Wales Rural Fire Service, Offshore Northern Seas, Transplace
Information Not Available
Find out what your peers are saying about Cisco IOS Security vs. Palo Alto Networks CN-Series and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.