Citrix SD-WAN [EOL] vs Prisma SD-WAN comparison

Citrix and Palo Alto Networks are both solutions in the Software Defined WAN (SD-WAN) Solutions category. Additionally, 90% of Citrix users are willing to recommend the solution, compared to 95% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 12, 2025

Citrix SD-WAN [EOL] and Prisma SD-WAN are both competing in the network optimization product category. Based on the data comparisons, Prisma SD-WAN seems to have the upper hand due to its advanced analytics and machine learning capabilities, which provide superior traffic management and WAN management.

Features: Citrix SD-WAN [EOL] is known for its reliability, customization, and cost-effective connectivity management, which are highly beneficial for large networks. Its notable features include load balancing and comprehensive security options. Prisma SD-WAN stands out with its advanced analytics, Layer 7 visibility, and machine learning, which allow for detailed application-specific traffic optimization and easier integration with other Palo Alto networks.

Room for Improvement: Citrix SD-WAN [EOL] has areas needing improvement such as customization, reporting capabilities, and communication regarding the product lifecycle, as well as having variable quality in technical support. Prisma SD-WAN faces challenges with its documentation, pricing, and hardware integration. Users express a need for better event correlation and more responsive technical support.

Ease of Deployment and Customer Service: Citrix SD-WAN [EOL] is primarily available for on-premises deployment, and often users experience inconsistent customer support, leading many to rely on external consultants. Prisma SD-WAN supports hybrid and cloud deployments; however, users indicate that skilled resources are needed for successful deployment, and support also receives mixed reviews.

Pricing and ROI: Citrix SD-WAN [EOL] has higher upfront costs but offers a potentially high ROI due to minimized Telco costs and efficient subscription options. It is particularly valuable for large deployments that benefit from savings on MPLS expenditures. Prisma SD-WAN is considered expensive mainly due to its functionalities and integrations that add value for enterprises within Palo Alto's ecosystem but may not be cost-effective for smaller businesses. Larger organizations find the product's advanced management capabilities justify the higher price point.

To learn more, read our detailed Software Defined WAN (SD-WAN) Solutions Report (Updated: March 2026).

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

March 2026

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Rohit Ghorpade

Cloud Network Engineer at a insurance company with 5,001-10,000 employees

A scalable solution for MCN controller but lacks technical supports, upgrades

There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.

Read full review

reviewer2706744

Cybersecurity Analyst at a government with 201-500 employees

Navigating documentation challenges leads to reduced incidents with strong setup

The areas that need improvement include documentation/customer support and cross-communication between the support teams. The documentation tends to be outdated, often directing us to resources that are no longer accurate or available, and this is one of the reasons we are potentially looking at alternatives. In terms of the Prisma SD-WAN security integrations, we have seen some benefits, but part of our difficulty is trying to get all of that information on what it does and set up properly. Because we've had issues in the past with getting devices set up properly, scalability is a significant concern for us due to the poor documentation that limits our ability to understand and utilize their system effectively.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The firewall engine is very good, very suitable for picking up Zero-day threats, and it has protected us from two or three instances, thanks to this engine."

"Fortinet FortiGate saves a lot of time in expert hours from an expert engineer because the administration of the Fortinet FortiGate solution is easy, which may lead to fewer hours of an engineer spent on Fortinet FortiGate."

"I think that the UTM features are the most value, as it truly protects my infrastructure."

"Fortigate represents a really scalable way of delivering perimeter network security, some level of layer 7 security, WAF, and also a way to create a meshed ADVPN solution."

"The interface is very user-friendly and I like it very much."

"The license management is very valuable. You can get a new license each year, or you can enroll every two to four years. You can get the logs, and you will get the information on the risk in your network and the entire organization. With this information, you can take action on your actives, computers, or devices. You can bring your own device as an SSE."

"It is complemented by other equipment, such as the Fortinet switch, and it is integrated with other tools that help to prevent cyberattacks, including a web filter, IPS, and application control."

"The most valuable features are the enterprise modeling and the simple interface."

More Fortinet FortiGate pros

"The VPN and the load balancing are the most valuable features."

"The most valuable feature of Citrix SD-WAN is customization. You are able to customize the solution to your needs."

"CIFS optimisation is really good and benefits are realised if using ICA also."

"The most valuable feature is its reliability."

"It lowered our Internet costs and gave me the flexibility to choose providers based on each location's connectivity."

"The scalability and stability are quite good in general."

"The solution's most valuable feature is load balancing."

"If you only take into consideration its features and capability, it is definitely one of the better products available in the market to date."

More Citrix SD-WAN [EOL] pros

"The security offered by the solution is pretty good."

"It is flexible to use the internet connection via local breakouts without going to data centers."

"I like that the integration with Palo Alto is easy."

"Prisma supports all of the applications we're currently using."

"Prisma SD-WAN offers capabilities such as path selection based on Layer 7 attributes and application quality of service at the application level."

"The AI ops feature streamlines revisions and automates compliance."

"The biggest benefit for us is that we've seen a reduction in incidents."

"From the main controller, we can administer the customer's devices, QoS, network, and traffic. We can monitor it and we can change and create policies as well as upgrade the software. We can totally control a customer's network from one site, the Prisma SD-WAN portal."

More Prisma SD-WAN pros

Cons

"I would like to see the licensing aspect improved because there is a feature we were yearning to use, the bandwidth monitoring feature, but it's licensed separately."

"Lacks training for new features."

"The configuration part was challenging, especially converting configurations from another OEM to FortiGate."

"Stability and technical support are the two major issues I have found with Fortinet."

"We called them for a geolocation issue and we didn't get any proper assistance."

"They could improve the response time and quality of support."

"Part of the setup was straightforward and other parts were complex. They need to work on feature placements and menus."

"One issue that I have had is that sometimes I need to monitor the traffic, so I need to filter it according to the user and which user is using it the most. I experience a bottleneck most of the time, particularly at the peak time when the number of contracts and users are at maximum."

More Fortinet FortiGate cons

"Citrix SD-WAN does not have the SD-WAN with one optimization in a single license. Other competitors have this option and it should be added to this solution."

"The communication around the life cycle would have been really helpful. The main issue we have had is related to the life cycle because some of the things that we are using were discontinued. They were discontinued within a year after we had purchased it, which is a bit painful. If we had known that, we would've made some other decisions."

"The reports need to be improved. We need to have them customized but they don't have that right now."

"The only improvement for Citrix SD-WAN would be to lower its cost."

"The price is the only thing that could be improved. Citrix is not a cheap solution."

"Given that Citrix SD-WAN solved all our problems by providing us with everything we needed to unify communications with our branches and data centers, I cannot suggest anything further in terms of improvements."

"Overall, network security and next-generation firewall features are areas that they can improve on."

"Citrix SD-WAN's knowledge base has a few missing things, so you may need to seek help from support."

More Citrix SD-WAN [EOL] cons

"Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access."

"We initially had challenges with AIOps, which was overwhelming, and could benefit from simplification or improved training."

"If Palo Alto could open the platform to manage other SD-WANs, it would be beneficial."

"The setup isn't completely straightforward, but it's manageable when you have proper knowledge."

"Prisma SD-WAN's technical support should be improved."

"Accessibility could be improved. Any new person attempting to access Prisma will have difficulty. It doesn't have CLI available."

"We are incorporating their zone-based firewalls. Prisma SD-WAN has limited documentation on how it manipulates traffic, e.g., how it is interacting with TCP and UDP. We recently had some traffic that was black holing. We literally had to do packet captures to see that the new zone-based firewall, which runs on top of Prisma SD-WAN, was causing issues."

"Prisma SD-WAN can be built on top of a couple of hardware platforms, including the Palo Alto Next-Generation Firewall or the CloudGenix infrastructure."

More Prisma SD-WAN cons

Pricing and Cost Advice

"The pricing is justified. It's a little pricey, but what you pay for is what you get."

"The product is expensive."

"It is around $50,000 per month."

"The cost of Fortinet FortiGate is competitive and not expensive compared to other enterprise- grade solutions. On average, the license cost per year is around seventy percent of the firewall's purchase price."

"In the Asian economy in which we operate, FortiGate is expensive."

"They are more expensive than others."

"FortiGate SWG is a cost-effective solution well-suited for organisations of all sizes."

"If we have an older version, the support costs get quite high."

More Fortinet FortiGate pricing and cost advice

"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."

"It's a little bit on the high side compared to the other products."

"The price is relatively expensive."

"Citrix SD-WAN is quite an affordable product."

"The license was a one-time purchase. It's expensive."

"I'm not quite sure of the price ranges. Roughly, the hidden devices can scale up to $20K for one appliance. However, the branch CPs are USD $1,000 to $2,500."

"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."

"It is a bit expensive. A cheaper product would be good, but everybody likes things to be cheaper. We bought the devices up front, and then we pay for the annual support."

More Citrix SD-WAN [EOL] pricing and cost advice

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

"It is more expensive than Fortinet."

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

"Prisma SD-WAN is a pretty expensive solution."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Marketing Services Firm

Manufacturing Company

Computer Software Company

Government

Financial Services Firm

13%

Manufacturing Company

Computer Software Company

Legal Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	360
Midsize Enterprise	135
Large Enterprise	190

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	5
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	5
Large Enterprise	13

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What needs improvement with Citrix SD-WAN?

The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...

See all answers

What advice do you have for others considering Citrix SD-WAN?

If a customer already has Citrix NetScaler and is not looking to change anything in their existing environment, we pr...

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

Regarding whether Prisma SD-WAN is an expensive solution, I would say the price is competitively high. Everything dep...

See all answers

What needs improvement with Prisma SD-WAN?

I am still working on what should be improved in Prisma SD-WAN to make this product better, and I cannot give any upd...

See all answers

What is your primary use case for Prisma SD-WAN?

Our customers' main use cases for Prisma SD-WAN are to connect multiple branches since they have numerous locations t...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 19% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Aruba EdgeConnect SD-WAN Platform vs Citrix SD-WAN [EOL]

Compared 24% of the time

Cisco Catalyst SD-WAN vs Citrix SD-WAN [EOL]

Compared 12% of the time

VMware VeloCloud SD-WAN vs Citrix SD-WAN [EOL]

Compared 11% of the time

FatPipe WAN Optimization vs Citrix SD-WAN [EOL]

Compared 8% of the time

Cato SASE Cloud Platform vs Citrix SD-WAN [EOL]

Compared 8% of the time

More Citrix SD-WAN [EOL] Competitors

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 20% of the time

VMware VeloCloud SD-WAN vs Prisma SD-WAN

Compared 10% of the time

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 8% of the time

BigLeaf vs Prisma SD-WAN

Compared 5% of the time

Cato SASE Cloud Platform vs Prisma SD-WAN

Compared 5% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

March 2026

Download Fortinet FortiGate product report

Buyer's Guide

Citrix SD-WAN [EOL]

March 2026

Download Citrix SD-WAN [EOL] product report

Buyer's Guide

Prisma SD-WAN

March 2026

Download Prisma SD-WAN product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Citrix CloudBridge, WOC, NetScaler SD-WAN

CloudGenix

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Citrix SD-WAN [EOL] enhances connectivity and performance by optimizing bandwidth utilization, ensuring reliable communication across branch offices and headquarter data centers. It offers centralized management, efficient deployment options, and improved network reliability.

Citrix SD-WAN [EOL] is designed for businesses seeking enhanced connectivity solutions that boost application performance while reducing costs. With HDX WAN Optimization and reliable Active-Active connectivity, it assures improved bandwidth management. Tailored for both cloud and on-premise deployments, it supports fast communication and seamless integration, making it user-friendly even for those with limited technical expertise. Security features and zero-touch deployments further enhance its appeal. However, users highlight areas needing improvement, such as configuration intuitiveness, pricing alignment for specific markets, and stability. Enhanced reporting, networking features, and technical support are desired. Integration with Windows, security elements like firewalls, and licensing clarity require attention to meet user expectations.

What are the key features of Citrix SD-WAN [EOL]?

HDX WAN Optimization: Enhances application performance and traffic.
Load Balancing: Ensures efficient traffic distribution across networks.
Reliable Connectivity: Provides seamless failover and reduced costs through MPLS replacement.
Cloud Management: Simplifies deployment and management via the cloud.
Zero-Touch Deployment: Facilitates easy setup and provisioning.
Active-Active Lines: Optimizes bandwidth utilization and performance.
Backup Capabilities: Centralizes data management for security.

What benefits should users look for in Citrix SD-WAN [EOL]?

Enhanced Connectivity: Improves stability and reduces downtime.
Cost Reduction: Efficiently decreases expenses by replacing MPLS.
Network Optimization: Offers better bandwidth for diverse communication types.
Secure Interconnectivity: Ensures secure and reliable network connections.
Management Flexibility: Supports cloud or on-premise deployment options.

Industries benefit from Citrix SD-WAN [EOL] by leveraging its features to ensure stable, redundant connectivity between branches and data centers. Organizations experiencing frequent line failures or high reliance on bandwidth-heavy applications find it particularly useful. It caters to sectors needing reliable data management and enhanced networking.

Citrix

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

March 2026

Download Free Report

Find out what your peers are saying about Fortinet, Cisco, Check Point Software Technologies and others in Software Defined WAN (SD-WAN) Solutions. Updated: March 2026.

DOWNLOAD NOW

884,933 professionals have used our research since 2012.

See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.