Try our new research platform with insights from 80,000+ expert users

Citrix SD-WAN [EOL] vs Prisma SD-WAN comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 30, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
370
Ranking in other categories
Firewalls (2nd), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Citrix SD-WAN [EOL]
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
22
Ranking in other categories
No ranking in other categories
Prisma SD-WAN
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
23
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (5th), WAN Edge (5th), Secure Access Service Edge (SASE) (8th)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Rohit Ghorpade - PeerSpot reviewer
A scalable solution for MCN controller but lacks technical supports, upgrades
There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.
Engineerinfosec67 - PeerSpot reviewer
Centralized management streamlines global network traffic control
Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access. Although there has been improvement, further steps can be taken. Additionally, it would be beneficial if the solution integrated the SD-WAN features of Prisma SD-WAN with the security features of Palo Alto's next-generation firewalls, as they currently do not align.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"FortiGate is on the cheaper end, and it offers good value."
"Fortinet FortiGate is a security device. It can optimize security on the networks of a company. It actually protects the company from attacks from outside. With FortiGate, you can categorize the users. You can create a group of users that can access all of the websites for their work. You can limit other users' access."
"Its stability is the most valuable."
"The best features of Fortinet FortiGate include the simple user interface."
"The most valuable features are the possibility of having one fabric for switching on security."
"The email protection and VPN features are the most valuable."
"The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback."
"It has upscaled our security posture, especially regarding external connectivity, because any access or connection from the company has to go through the Fortinet FortiGate firewall."
"Downtime for branch offices is now almost zero. We have 100% real-time visibility into all of our lines. MPLS links have been replaced with lower-cost links, saving a larger percentage of line costs. Overall, I see SD-WAN as a must. And the Citrix SD-WAN product has delivered on expectations and exceeded them. (With later firmware updates we now have good firewall capabilities in the product too)."
"The solution's most valuable feature is load balancing."
"The reliability of connectivity is most valuable."
"The stability is the main feature of Citrix SD-WAN. You can also upgrade the data packages or have less transmission."
"The VPN and the load balancing are the most valuable features."
"They have a zero downtime failover mechanism, where, when there's a link failure or a link weakness, or bad link conditions, they provide the ability to fail back seamlessly."
"We are using it widely for the local record for SaaS-based applications. Another valuable feature is a local breakout."
"The most valuable feature is security, as it gives me the port bindings that cannot be accomplished using other solutions."
"The security offered by the solution is pretty good."
"If the MPLS goes down, there is a really smooth transition for a branch site to take traffic over the Internet. It will advertise the routes of that site in a jiffy."
"The implementation of the solution is easy."
"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."
"The gateway is available on the cloud which allows you access from anywhere and still connects to your home gateway."
"The AI ops feature streamlines revisions and automates compliance."
"Prisma SD-WAN offers capabilities such as path selection based on Layer 7 attributes and application quality of service at the application level."
"When it comes to supporting large, complex, network architectures, it's a very simple architecture. The main component is the fabric. It's very easy to troubleshoot if there is an issue happening in the underlying network."
 

Cons

"I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues."
"They need to improve their technical support."
"The logs need to be better. They need to be more visible and easier to access."
"Their software support needs improvement. I would prefer to have better support for bug fixes. Sometimes, we open a ticket, and it is very difficult to get a solution. Specifically, we are not at all happy with their support for load balancing."
"The issue lies with features available in GUI versus CLI during configuration. When using GUI, I want to accomplish everything there, but sometimes it requires using CLI to ensure proper configuration."
"The visibility of the network can be better. The GUI can be improved for better visibility of the network flow. Other solutions have better GUI in terms of network visibility."
"There are some cloud-based features that could be much more flexible than they currently are."
"The cloud features and integration could be improved."
"Enhancements are needed to improve the stability."
"Overall, network security and next-generation firewall features are areas that they can improve on."
"The only improvement for Citrix SD-WAN would be to lower its cost."
"The reports need to be improved. We need to have them customized but they don't have that right now. I would like for them to have better system predictions. We don't have that right now. My system may be working fine right now but after making some changes, that can change."
"There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out."
"The solution's licensing model could be improved."
"Citrix SD-WAN does not have the SD-WAN with one optimization in a single license. Other competitors have this option and it should be added to this solution."
"The initial setup could be a bit easier."
"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."
"The product could be a bit cheaper for the services it provides."
"The tool needs to work on price and complexity."
"They could add more advanced security features to the product."
"Prisma SD-WAN can be built on top of a couple of hardware platforms, including the Palo Alto Next-Generation Firewall or the CloudGenix infrastructure."
"Event correlation and analysis capabilities do not help minimize the number of alarms from a single event. That is the problem. We are getting a lot of incidents, and there is some issue with the correlation. That is still a drawback."
"The solution should include custom ports and group voice connections."
"If Palo Alto could open the platform to manage other SD-WANs, it would be beneficial."
 

Pricing and Cost Advice

"Fortinet FortiGate is cheaper than Palo Alto. It is about 20% cheaper."
"Fortinet FortiGate as a less expensive solution than Palo Alto."
"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."
"The pricing for the product is alright."
"It was worth the money overall. It's good value."
"For the performance that we get, the price is reasonable. There are cheaper options, but they may not deliver the same kind of performance that we want. For the performance they provide, the price is acceptable."
"The pricing for this solution is good."
"We have the full license that included all of the features and support."
"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."
"As NetScaler is now, I find it quite pricey."
"It's a little bit on the high side compared to the other products."
"The price of the subscription should be cheaper."
"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."
"It is a bit expensive. A cheaper product would be good, but everybody likes things to be cheaper. We bought the devices up front, and then we pay for the annual support."
"The price is relatively expensive."
"Citrix SD-WAN is quite an affordable product."
"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."
"Prisma SD-WAN is a pretty expensive solution."
"It is more expensive than Fortinet."
"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
859,579 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Educational Organization
13%
Comms Service Provider
8%
Manufacturing Company
7%
Computer Software Company
26%
Real Estate/Law Firm
10%
Educational Organization
7%
Financial Services Firm
5%
Computer Software Company
13%
Educational Organization
12%
Financial Services Firm
11%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Citrix SD-WAN?
It lowered our Internet costs and gave me the flexibility to choose providers based on each location's connectivity.
What is your experience regarding pricing and costs for Citrix SD-WAN?
It is on the expensive side. I would give it an eight out of ten in terms of costliness. In my region, the approximat...
What needs improvement with Citrix SD-WAN?
The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...
What do you like most about Prisma SD-WAN?
The product's initial setup phase is straightforward.
What is your experience regarding pricing and costs for Prisma SD-WAN?
The costs seem crazy to me since I'm relatively new to the pricing world of enterprise security solutions, but compar...
What needs improvement with Prisma SD-WAN?
The areas that need improvement include documentation/customer support and cross-communication between the support te...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Citrix CloudBridge, WOC, NetScaler SD-WAN
CloudGenix
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International
Open Networking User Group, Columbia Sportswear Company, Coca Cola
Find out what your peers are saying about Fortinet, Cisco, Cato Networks and others in Software Defined WAN (SD-WAN) Solutions. Updated: May 2025.
859,579 professionals have used our research since 2012.