No more typing reviews! Try our Samantha, our new voice AI agent.

Citrix SD-WAN [EOL] vs Forcepoint Next Generation Firewall comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Citrix SD-WAN [EOL]
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
22
Ranking in other categories
No ranking in other categories
Forcepoint Next Generation ...
Average Rating
7.6
Reviews Sentiment
6.5
Number of Reviews
52
Ranking in other categories
Firewalls (25th), Software Defined WAN (SD-WAN) Solutions (10th), WAN Edge (11th)
 

Featured Reviews

Rohit Ghorpade - PeerSpot reviewer
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
A scalable solution for MCN controller but lacks technical supports, upgrades
There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.
Ajit Pratap Kundan - PeerSpot reviewer
Manager Solution Consulting at Accops Systems Pvt Ltd
Unified security management has improved traffic control and simplified remote workforce access
Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We tried to use it, and it worked well."
"The hands-on customer support and load balancing that come with this solution are above all others on the market."
"The stability is the main feature of Citrix SD-WAN. You can also upgrade the data packages or have less transmission."
"The scalability and stability are quite good in general."
"In summary, this is a very good product and one that I recommend."
"The other banks, bank branches, require good connectivity, which is very important for a branch to have, and they managed to have an SLA of almost 100%."
"It allows you to combine two asymmetrical connections."
"The SD-WAN solution as it is already is quite feature-rich and the upgrade process is very simple."
"Forcepoint Next Generation Firewall is quite affordable, cheaper than other brands like Palo Alto or Check Point, with a lot of capabilities, very stable, and very well-made, making it a really good product for its price when compared to other vendors."
"The most valuable feature of this solution is the support."
"I found the initial setup process to be very simple and straightforward."
"I like the IPS; IPS is the master feature and I depend on the firewall and sandbox."
"The VPN is great."
"The most valuable feature is SD-WAN."
"It provides decent protection for the LAN, especially in run mode."
"Forcepoint is a complete package because it has network and systems applications. Other firewalls are only for the network."
 

Cons

"Overall, network security and next-generation firewall features are areas that they can improve on."
"The initial setup is not that easy."
"Citrix SD-WAN does not have the SD-WAN with one optimization in a single license. Other competitors have this option and it should be added to this solution."
"Even though the monitoring is pretty good, there is some room for improvement there."
"The only improvement for Citrix SD-WAN would be to lower its cost."
"I think the price can be improved, particularly in third world countries such as Ecuador where companies don't have the budget to implement expensive products."
"Citrix should continue to offer a perpetual licensing model because it is very important to us."
"The communication around the life cycle would have been really helpful. The main issue we have had is related to the life cycle because some of the things that we are using were discontinued. They were discontinued within a year after we had purchased it, which is a bit painful. If we had known that, we would've made some other decisions."
"Forcepoint Next Generation Firewall should make some improvements because there is some instability with their software. Sometimes it could lag or become over-utilized, you need to clear some caches and do some restarts, and sometimes some traffic is being blocked and the reason is not entirely clear."
"My experience with this Forcepoint Next Generation Firewall wasn't very pleasant due to its complexity. For example, the firewall loses some features when working in a cluster, which is a huge challenge. It caused me several weeks to solve an issue to make the VPN work, even after opening several cases with support. Also, the debug, which should provide essential knowledge about everything going on, the flow of traffic, and how the engine works, wasn't very informative in identifying the issue."
"The ability to dynamically change policies could be improved."
"They should have a GUI on the product itself, not a separate management tool to be used on the management server or on a server to be used to manage the file. It should be all in one device. The device should be controlled through its own GUI. They also have to improve the learning center and the documents as the documents don't really help."
"We spent a lot of time and received help from different people, and it was still a failure in the end. We disposed of the product."
"A VPN client feature is missing in our region, which we hope Forcepoint will address in future updates."
"Management could be better. They can improve the management."
"However, one downside that I see is that they need to improve some network functionality."
 

Pricing and Cost Advice

"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."
"It is a bit expensive. A cheaper product would be good, but everybody likes things to be cheaper. We bought the devices up front, and then we pay for the annual support."
"The price of the subscription should be cheaper."
"The license was a one-time purchase. It's expensive."
"Citrix SD-WAN is quite an affordable product."
"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."
"I believe that Citrix SD-WAN is a good investment, but I do not have the information to be more specific."
"As NetScaler is now, I find it quite pricey."
"It is an affordable product. We purchase its yearly license."
"Forcepoint is very expensive but it's really secure."
"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."
"Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
"We would love to take other solution from Forcepoint, but unfortunately the price is too high. That's why we are not considering using Forcepoing for our proxy and DLB. They have a very good DLB, but the matter in the end is the cost."
"We have just a subscription for the cloud, and this license is great. The license is so good."
"The cost is fair, but it could be improved."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
907,816 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
18%
Outsourcing Company
13%
Financial Services Firm
10%
Manufacturing Company
7%
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise10
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise11
Large Enterprise14
 

Questions from the Community

What needs improvement with Citrix SD-WAN?
The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. However, when you compare its licensing with the prices of competitors, you will se...
What advice do you have for others considering Citrix SD-WAN?
If a customer already has Citrix NetScaler and is not looking to change anything in their existing environment, we proceed with Citrix SD-WAN. However, if a customer is looking for a change because...
What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to other vendors, and pricing is not a problem, especially for the Asian market, with...
What needs improvement with Forcepoint Next Generation Firewall?
The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integrate a third-party component with Forcepoint Next Generation Firewall to complet...
What is your primary use case for Forcepoint Next Generation Firewall?
The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot of traffic coming from the public domain. That is why we are putting these fire...
 

Also Known As

Citrix CloudBridge, WOC, NetScaler SD-WAN
Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
 

Overview

 

Sample Customers

AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International
California Department of Corrections and Rehabilitation (CDCR)
Find out what your peers are saying about Fortinet, Cisco, Check Point Software Technologies and others in Software Defined WAN (SD-WAN) Solutions. Updated: July 2026.
907,816 professionals have used our research since 2012.