Try our new research platform with insights from 80,000+ expert users

Citrix SD-WAN [EOL] vs Juniper Contrail SD-WAN comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 30, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
331
Ranking in other categories
Firewalls (2nd), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Citrix SD-WAN [EOL]
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
22
Ranking in other categories
No ranking in other categories
Juniper Contrail SD-WAN
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
6
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (14th), WAN Edge (14th)
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Rohit Ghorpade - PeerSpot reviewer
A scalable solution for MCN controller but lacks technical supports, upgrades
There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.
Luis Corrochano - PeerSpot reviewer
A stable and scalable solution that helps to cut cost by reducing MPLs
My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH.  The solution is expensive. Its support can be better.  The tool is stable.  The solution is more…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."
"The most valuable feature is the ease of use."
"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."
"We've found the solution to be pretty stable."
"It enables our organization to become more productive. Also, it protects our NEtWare from viruses and malware."
"The ability to set up remote systems is the most valuable feature."
"The most valuable feature is the FortiManager for centralized management."
"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."
"The most valuable feature is its reliability."
"The stability is the main feature of Citrix SD-WAN. You can also upgrade the data packages or have less transmission."
"The main advantage of Citrix SD-WAN is that it enables fast communication between our branches and data centers. And, with its cloud management features, it also makes the process of adding new branches into our company network much easier."
"Downtime for branch offices is now almost zero. We have 100% real-time visibility into all of our lines. MPLS links have been replaced with lower-cost links, saving a larger percentage of line costs. Overall, I see SD-WAN as a must. And the Citrix SD-WAN product has delivered on expectations and exceeded them. (With later firmware updates we now have good firewall capabilities in the product too)."
"The VPN and the load balancing are the most valuable features."
"The tool is quite cost-effective because it replaces the need for MPLS, which is a bit expensive...Citrix SD-WAN doesn't need much maintenance."
"The most valuable feature of Citrix SD-WAN is customization. You are able to customize the solution to your needs."
"The solution is brilliant, the way it calculates its paths and trails is great."
"My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH."
"It supports desktop management, network management, and SD-WAN policies."
"It gives you that level of visibility to understand what's going on between layer four and layer seven."
"I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities."
"The support is very good from Juniper and from the local distributors."
"The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility."
 

Cons

"I prefer Palo Alto over Fortinet FortiGate. Its IPS engine is not better than the Palo Alto version. The monitoring tool needs improvement, and the syslog configuration needs enhancement."
"They should offer special pricing to premium partners and customers."
"Regarding challenges, customers initially faced issues like internet dropping, but after firmware upgrades, everything worked well."
"Application management can be improved."
"The firmware updates are sometimes not stable. The stability issues can vary, sometimes happening once a month or quarterly. New firmware updates can occasionally introduce bugs, causing some policies to fail. We then have to raise a ticket, and Fortinet usually provides a fix within a few days."
"This product could be improved with Active directory integration and better handling in IPsec and GRE Tunnels."
"The SD-WAN functionality is a bit overly complicated and not fully documented."
"Difficult to add or define, and not that easy to configure and manage."
"I am happy with this product. If anything, its price can be reduced. It is a bit expensive."
"Even though the monitoring is pretty good, there is some room for improvement there."
"Citrix should continue to offer a perpetual licensing model because it is very important to us."
"There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out."
"The initial setup could be a bit easier."
"Enhancements are needed to improve the stability."
"The solution's licensing model could be improved."
"Overall, network security and next-generation firewall features are areas that they can improve on."
"The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this."
"Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process."
"Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with other solutions like Meraki SD-WAN, which is almost plug-and-play with its zero-touch provisioning. In Juniper Contrail SD-WAN, it was more challenging."
"The solution is expensive. Its support can be better."
"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that."
"The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation."
 

Pricing and Cost Advice

"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."
"The price is high compared to some of the other solutions."
"Each feature costs money, so it is important to study your needs."
"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."
"For the price, I'd rate it a ten because it's very cost-effective."
"You need to pay a license for this solution. Our licensing is now done in our subsidiary."
"Price-wise, it's at a good price point for our market."
"The pricing for this solution is good."
"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."
"It's a little bit on the high side compared to the other products."
"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."
"As NetScaler is now, I find it quite pricey."
"I'm not quite sure of the price ranges. Roughly, the hidden devices can scale up to $20K for one appliance. However, the branch CPs are USD $1,000 to $2,500."
"I believe that Citrix SD-WAN is a good investment, but I do not have the information to be more specific."
"The price of the subscription should be cheaper."
"Citrix SD-WAN is quite an affordable product."
"The licensing structure is very flexible."
"The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."
"They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
20%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Computer Software Company
25%
Real Estate/Law Firm
9%
Financial Services Firm
7%
Retailer
5%
Educational Organization
33%
Computer Software Company
13%
Financial Services Firm
8%
Real Estate/Law Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Citrix SD-WAN?
It lowered our Internet costs and gave me the flexibility to choose providers based on each location's connectivity.
What is your experience regarding pricing and costs for Citrix SD-WAN?
It is on the expensive side. I would give it an eight out of ten in terms of costliness. In my region, the approximat...
What needs improvement with Citrix SD-WAN?
The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...
What do you like most about Juniper Contrail SD-WAN?
I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provis...
What is your experience regarding pricing and costs for Juniper Contrail SD-WAN?
My advice regarding setup costs, pricing, and licensing for Juniper Contrail SD-WAN would be to carefully evaluate an...
What needs improvement with Juniper Contrail SD-WAN?
Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with othe...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Citrix CloudBridge, WOC, NetScaler SD-WAN
Contrail SD-WAN
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International
Allied Pinnacle
Find out what your peers are saying about Fortinet, Cisco, VMware and others in Software Defined WAN (SD-WAN) Solutions. Updated: April 2025.
850,671 professionals have used our research since 2012.