Cisco Secure Firewall vs Palo Alto Networks K2-Series comparison

Cisco Secure Firewall vs. Palo Alto Networks K2-Series

Download the complete report

Helped 867,676 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of September 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.7%, up from 18.6% compared to the previous year. The mindshare of Cisco Secure Firewall is 6.0%, up from 5.3% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.1%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.7%
Cisco Secure Firewall	6.0%
Palo Alto Networks K2-Series	0.1%
Other	73.2%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Unified policies streamline network management but complex licensing requires attention

Phil Shiflett

Senior Manager, Network Engineering at TTi Power Equipment

Cisco Secure Firewall has some growth opportunities in terms of visibility and control capabilities regarding managing encrypted traffic. It has the ability to analyze encrypted traffic, and there is potential for more integration with APIs and AI to enhance these capabilities. Cisco Secure Firewall needs improvement in deployment time and the capability to access the CLI during support calls. I often encounter issues when technical support uses a CLI that is not familiar to me while troubleshooting through the GUI. My ongoing complaint for the last six years has been the lack of CLI functionality, which hinders my ability to work on the firewall, alongside concerns regarding deployment time. For the next release, they should look at the features offered by competitors such as Fortinet, including the ability to perform packet capture directly from the interface. If they enhanced their troubleshooting efficiency related to packet capture for each specific rule, it would simplify the process significantly.

One of the best tools for the prevention of evasive threats

Krishnakumar M

enterprise architect at a tech services company with 1-10 employees

There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.

More Fortinet FortiGate pros

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like Fortinet FortiGate's antispam filter, SPN, and clustering features."

"The web filtering feature and the intrusion protection system are the most valuable. It is a resilient appliance. I never had an issue with it in terms of any security breaches."

"I like how we can achieve total integration."

"The multi-tenancy feature is most valuable. It integrates very well with FortiManager and FortiAnalyzer."

"The most valuable features of Fortinet FortiGate are the ability to work in proxy mode, which other solutions, such as Palo Alto cannot. There are some features that are better that come at no extra license or subscriptions cost, such as basic SD-WAN. The DLT is useful, other solutions have the same feature too, such as Palo Alto."

"My company never had any complaints about the tool in terms of performance or stability."

"Before using this solution, we had so many problems accessing our resources because we don't have a lot of internet bandwidth. And by using application control and traffic shaping, we were able to manage user to quickly access services that are important. This tool has aided to the simplicity of our day-to-day management."

"I like the common administration and the possibility of adding Fortinet defense systems."

"It is very stable compared to other firewall products."

"The features I appreciate the most about Cisco Secure Firewall are the policies, ACLs, and traffic behavior analytics."

"Firewall help with cybersecurity resilience. I really like this Cisco product. It's user-friendly. I don't like some other vendors. I've tried those in the past. Cisco is pretty easy. A caveman could do it."

"Stability, high availability of services, and very high MTBU were the most valuable features for me."

"It is a very stable product. I've not had any issues with it. It is a super product, and I won't need to change it anytime soon."

"We feel that we can trust the security, and our assets and business are well protected. We need to have trust in it, but we also see that it works. We have a security company that has tested that it works."

"Cisco ASA provides us with very good application visibility and control."

"What I appreciate the most about Cisco Secure Firewall is that it can be very elastic, as it can be configured with all the flexibility of my network needs and complexity."

More Cisco Secure Firewall pros

"Overall, this is a very simple and very effective firewall, and I am satisfied with it."

"Palo Alto's App-ID is what differentiates it from other competitors."

"The most valuable feature of Palo Alto Networks K2-Series is the configuration, it is very clear."

"The most valuable feature is availability."

"The most valuable feature of Palo Alto Networks K2-Series is the performance which is above their competitors. The throughput they have delivered is good. When we used other solutions they failed the deployment when we were using different rules. They have a theory perform performance light and performance degradation. However, Palo Alto Networks K2-Series never fails in that scenario."

"The most valuable feature of Palo Alto Networks K2-Series is its management abilities. Additionally, the updates are very good."

"This is a very reliable firewall and we have never had problems with it."

"I have found that Palo Alto Networks K2-Series has the best security. They are more user-friendly, older firewalls used to have to be configured using the command-line interface, but in this solution, it can be done in the GUI."

More Palo Alto Networks K2-Series pros

Cons

"It could use more templates for third-party site-to-site VPN setups other than FortiGate and Cisco."

"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."

"The issue lies with features available in GUI versus CLI during configuration. When using GUI, I want to accomplish everything there, but sometimes it requires using CLI to ensure proper configuration."

"It would be a benefit if Fortinet would release a one-stop solution that is better integrated with other products and an automated emergency response system."

"The solution’s pricing is high."

"There should be some open-source training or free training for decision makers, or some webinars should be available. These would help understand the new product line and the existing product line features."

"The interface and product support could use improvement."

"I would like Fortinet to add more automation to FortiGate."

More Fortinet FortiGate cons

"These firewalls are not for beginners."

"ASDM needs to be able to customize applets."

"Cisco Secure Firewall’s customer support could be improved."

"Trying to renew the partnership with them became challenging as they were requesting numerous things on our side, and since we are a very small business, it wasn't possible to get through that verification."

"We wanted to integrate Firepower with our solution, but it didn't have the capability to accommodate our bandwidth since they only had two 10 gig interfaces on the box. We run way more than that through our network because we are a service provider, providing Internet to our customers."

"One of the problems that we have had is the solution requires Java to work. This has caused some problems with the application visibility and control. When the Java works, it is good, but Java wasn't a good choice. I don't like the Java implementation. It can be difficult to work with sometimes."

"It can probably provide a holistic view of different appliances because many customers do not have only one brand, besides the traditional SNMP protocols, to cover all their devices. There are some specific requirements in terms of configurations or actions that sometimes have to be done in a very manual way because of the different versions or brands in a customer's infrastructure. It could also have some additional analytics capabilities. It has some very interesting ways to monitor the traffic and identify false positives from the architecture and the environment. It would be good if there is a way to patch with some other industry-specific solutions and synchronize some of the information, such as what other customers experience in their operations and probably share some additional information that could be leveraged or shared among the industry. Such information would be something interesting to see. It could have AI capabilities related to how the appliances could benefit from learning the current environment and different exposures."

"I'm not a big fan of the FDM (Firepower Device Manager) that comes with Firepower. I found out that you need to use the Firepower Management Center, the FMC, to manage the firewalls a lot better. You can get a lot more granular with the configuration in the FMC, versus the FDM that comes out-of-the-box with it. FDM is like Firepower for dummies."

More Cisco Secure Firewall cons

"If we have issues, they take anywhere from two days to a week to respond. I even wrote to their CEO because there was no response. When it comes to support, this is the worst company."

"When it comes to renewing the solution, they tend to try to jack up the pricing."

"Threat prevention could use improvement. Not just in malware exploits and C2 traffic; enhancing web traffic protection would be a great upgrade."

"The password function of the solution could be improved. Additionally, some of the processes take too long to complete."

"The solution's commitment time could be reduced as it often takes a lot of time to execute."

"Threat prevention could use improvement."

"The reporting functionality in GlobalProtect needs to be improved."

"In the past, we've had trouble with Palo Alto's application filtering not getting it right. I would not be recommending layer 7 application filtering yet."

More Palo Alto Networks K2-Series cons

Pricing and Cost Advice

"There is a license required to use Fortinet FortiGate with all the features. It has to be updated with the threats on an ongoing basis for the signatures to prevent threats and a license is needed to receive those security updates."

"The solution is cheap."

"The pricing for this solution is good."

"The price of Fortinet FortiGate could improve, it is expensive."

"Fortinet prices are around $600 for the small 40F model, and for licenses, the simplest option is about $300 for a year. They sell licenses that can last for 1, 2, 3, or 5 years."

"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."

"The pricing of the solution is very competitive."

"We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."

More Fortinet FortiGate pricing and cost advice

"The licensing models that are available for Cisco Secure Firewall are okay. You have nearly every option that you need. You can pick filtering, advanced malware protection, or all the available features. It's sufficient. In terms of pricing, there are, for sure, some cheaper vendors, but overall, it's nearly the same. It has a fair price."

"The Firepower series of appliances is not cheap. I just got a quote recently for six firewalls that was in the range of over half-a-million dollars. That's what could push us to look to other vendors..."

"Pricing is high."

"Their pricing is very aggressive and good. Even a small company can afford it. I am happy with its pricing. Its licensing is on a yearly basis."

"I just bought it off the shelf, and I'm using it with my previous one, so I have not spent that much."

"Price point is too high for features and throughput available."

"It was initially heavy on my pocket, but it soon actualised its worth."

"Always plan ahead for three years. In other words, do not buy a firewall on what your needs are today, but try to predict where you will be three years from now in terms of bandwidth, security requirements, and changes in organizational design."

More Cisco Secure Firewall pricing and cost advice

"If you compare K2-Series' quality with its price, I think it is reasonable."

"The price of this solution is too high."

"This is an expensive solution, although you will get value for the price."

"The overall price of Palo Alto Networks K2-Series could be reduced."

"Pricing is a sensitive issue because the cost is high in this market."

"The price of the solution is expensive."

"Products by the leader in the field are justifiably a bit more expensive compared to other vendors."

"The pricing is expensive."

More Palo Alto Networks K2-Series pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

867,676 professionals have used our research since 2012.

Comparison Review

it_user206346

Security Consultant at Webernetz.net - Network Security Consulting

Mar 11, 2015

Cisco ASA vs. Palo Alto Networks

Cisco ASA vs. Palo Alto: Management Goodies You often have comparisons of both firewalls concerning security components. Of course, a firewall must block attacks, scan for viruses, build VPNs, etc. However, in this post I am discussing the advantages and disadvantages from both vendors concerning…

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

20%

University

Manufacturing Company

Comms Service Provider

Performing Arts

24%

Computer Software Company

16%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	129
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	180
Midsize Enterprise	126
Large Enterprise	212

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	8
Large Enterprise	13

Questions from the Community

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

Which is better - Fortinet FortiGate or Cisco ASA Firewall?

One of our favorite things about Fortinet Fortigate is that you can deploy on the cloud or on premises. Fortinet Fort...

How does Cisco's ASA firewall compare with the Firepower NGFW?

It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cis...

Which is better - Meraki MX or Cisco ASA Firewall?

Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

What is your experience regarding pricing and costs for Palo Alto Networks K2-Series?

The pricing for the Palo Alto Networks K2-Series solution is affordable and there are no complaints about the licensing.

What needs improvement with Palo Alto Networks K2-Series?

The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto N...

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 17% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 4% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks WildFire vs Cisco Secure Firewall

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Cisco Secure Firewall

Compared 8% of the time

Netgate pfSense vs Cisco Secure Firewall

Compared 4% of the time

OPNsense vs Cisco Secure Firewall

Compared 4% of the time

Cisco Meraki MX vs Cisco Secure Firewall

Compared 3% of the time

More Cisco Secure Firewall Competitors

Juniper SRX Series Firewall vs Palo Alto Networks K2-Series

Compared 43% of the time

More Palo Alto Networks K2-Series Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Cisco Secure Firewall

Download Cisco Secure Firewall product report

Palo Alto Networks K2-Series

August 2025

Download Palo Alto Networks K2-Series product report

Also Known As

No data available

Cisco Adaptive Security Appliance (ASA) Firewall, Cisco ASA NGFW, Adaptive Security Appliance, Cisco Sourcefire Firewalls, Cisco ASAv, Cisco Firepower NGFW Firewall

No data available

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Cisco Secure Firewall stands as a robust and adaptable security solution, catering to organizations of all sizes. It's designed to shield networks from a diverse array of cyber threats, such as ransomware, malware, and phishing attacks. Beyond mere protection, it also offers secure access to corporate resources, beneficial for employees, partners, and customers alike. One of its key functions includes network segmentation, which serves to isolate critical assets and minimize the risk of lateral movement within the network.

The core features of Cisco Secure Firewall are multifaceted:

Advanced threat protection is achieved through a combination of intrusion prevention, malware detection, and URL filtering technologies.
For secure access, the firewall presents multiple options, including VPN, remote access, and single sign-on.
Its network segmentation capability is vital in creating barriers within the network to safeguard critical assets.
The firewall is scalable, effectively serving small businesses to large enterprises.
Management is streamlined through Cisco DNA Center, a central management system.

The benefits of deploying Cisco Secure Firewall are substantial. It significantly reduces the risk of cyberattacks, thereby enhancing the security posture of an organization. This security also translates into increased productivity, as secure access means uninterrupted work. Compliance with industry regulations is another advantage, as secure access and network segmentation align with many regulatory standards. Additionally, it helps in reducing IT costs by automating security tasks and simplifying management processes.

In practical scenarios, Cisco Secure Firewall finds diverse applications. It's instrumental in protecting branch offices from cyberattacks, securing remote access for various stakeholders, safeguarding cloud workloads, and segmenting networks to isolate sensitive areas.

User reviews from PeerSpot reflect an overall positive experience with the Cisco Secure Firewall. Users appreciate its ease of configuration, good management capabilities, robust protection, user-friendly interface, and scalability. However, some areas for improvement include better integration capabilities with other vendors, maturity, control over bandwidth for end-users, and addressing software bugs.

In summary, Cisco Secure Firewall is a comprehensive, versatile, and reliable security solution that effectively meets the security needs of various organizations. It offers a balance of advanced protection, user-friendly management, and scalability, making it a valuable asset in the realm of network security.

Cisco

Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

There are more than one million Adaptive Security Appliances deployed globally. Top customers include First American Financial Corp., Genzyme, Frankfurt Airport, Hansgrohe SE, Rio Olympics, The French Laundry, Rackspace, and City of Tomorrow.

State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME

Cisco Secure Firewall vs. Palo Alto Networks K2-Series