Citrix SD-WAN [EOL] vs Prisma SD-WAN comparison

Citrix and Palo Alto Networks are both solutions in the Software Defined WAN (SD-WAN) Solutions category. Additionally, 90% of Citrix users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 30, 2025

Citrix SD-WAN and Prisma SD-WAN are competitors in the network optimization and management category. Prisma SD-WAN appears to have an edge due to its robust application visibility and integration with Palo Alto Networks hardware.

Features: Citrix SD-WAN offers HDX WAN Optimization, Application Acceleration, and excellent connectivity between branches, enhanced by user-friendly management and customization capabilities. Prisma SD-WAN provides deep application visibility, Layer 7 intelligence, and strong analytics capabilities, with zero-touch provisioning.

Room for Improvement: Citrix SD-WAN needs improvements in reporting features, better pricing models, and enhanced technical support. Prisma SD-WAN users note a need for better traffic handling documentation, refined alert systems, and improved training resources.

Ease of Deployment and Customer Service: Citrix SD-WAN focuses on on-premises and public cloud scenarios, often requiring external consultants for deployment, with varied support experiences. Prisma SD-WAN offers flexibility across hybrid and public cloud environments, though its complexity necessitates expert resources.

Pricing and ROI: Citrix SD-WAN is expensive, but its perpetual licenses offer cost management benefits, providing a strong ROI through MPLS savings. Prisma SD-WAN is a premium solution with high costs and a subscription-based model, appealing to larger enterprises despite its higher price point.

To learn more, read our detailed Software Defined WAN (SD-WAN) Solutions Report (Updated: April 2025).

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

April 2025

Download the complete report

Helped 850,671 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Rohit Ghorpade

Cloud network engineer at Bajaj Allianz General Insurance Co. Ltd.

A scalable solution for MCN controller but lacks technical supports, upgrades

There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.

Read full review

Engineerinfosec67

Senior Information Security Engineer at Westcon-Comstor

Centralized management streamlines global network traffic control

Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access. Although there has been improvement, further steps can be taken. Additionally, it would be beneficial if the solution integrated the SD-WAN features of Prisma SD-WAN with the security features of Palo Alto's next-generation firewalls, as they currently do not align.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is very flexible to use."

"On a scale of one to ten, I rate this solution 10 out of 10."

"The best features of Fortinet FortiGate are that it does the job effectively and protects our environment."

"The features that prevent internet connections, the filtering are the most valuable because we did not have any internet protection before."

"Fortinet has a very good solution for Secure SD-WAN. One very good feature is that they have robust and simple FortiOS through which they provide all solutions. That's their strength. There's not much complexity involved with the Secure SD-WAN solution of Fortinet as compared to Cisco's solution, which has a lot of flexibility but complexity also comes with that flexibility."

"Allows for firewall rules to be programmed and named in a way that makes it “readable”"

"I only deal with it from a security analyst's point of view. I don't really get into the features of the actual FortiGate. From the security point of view, it works, and it does its job."

"We use the FortiGate Sandbox to detect zero-day vulnerabilities, such as anomalies or malware, that are unknown and have not yet been discovered."

More Fortinet FortiGate pros

"It allows us to use additional VPNs, offering more options compared to other VPN solutions."

"The tool is quite cost-effective because it replaces the need for MPLS, which is a bit expensive...Citrix SD-WAN doesn't need much maintenance."

"We are using it widely for the local record for SaaS-based applications. Another valuable feature is a local breakout."

"They have a zero downtime failover mechanism, where, when there's a link failure or a link weakness, or bad link conditions, they provide the ability to fail back seamlessly."

"Downtime for branch offices is now almost zero. We have 100% real-time visibility into all of our lines. MPLS links have been replaced with lower-cost links, saving a larger percentage of line costs. Overall, I see SD-WAN as a must. And the Citrix SD-WAN product has delivered on expectations and exceeded them. (With later firmware updates we now have good firewall capabilities in the product too)."

"The main advantage of Citrix SD-WAN is that it enables fast communication between our branches and data centers. And, with its cloud management features, it also makes the process of adding new branches into our company network much easier."

"The most valuable feature is security, as it gives me the port bindings that cannot be accomplished using other solutions."

"The SD-WAN solution as it is already is quite feature-rich and the upgrade process is very simple."

More Citrix SD-WAN [EOL] pros

"From the main controller, we can administer the customer's devices, QoS, network, and traffic. We can monitor it and we can change and create policies as well as upgrade the software. We can totally control a customer's network from one site, the Prisma SD-WAN portal."

"Prisma supports all of the applications we're currently using."

"The product's initial setup phase is straightforward."

"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."

"Prisma SD-WAN is an absolutely stable solution."

"The gateway is available on the cloud which allows you access from anywhere and still connects to your home gateway."

"The security offered by the solution is pretty good."

"When it comes to supporting large, complex, network architectures, it's a very simple architecture. The main component is the fabric. It's very easy to troubleshoot if there is an issue happening in the underlying network."

More Prisma SD-WAN pros

Cons

"Bandwidth usage in reporting could be improved for Fortinet FortiGate."

"The support we receive when we need to upgrade is not satisfactory and has room for improvement."

"Vulnerability scanning could be improved."

"I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself."

"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."

"Difficult to add or define, and not that easy to configure and manage."

"Web security solutions can be improved."

"There are some complex administration tasks in their administration portal. That needs to be improved."

More Fortinet FortiGate cons

"The firewall reporting could be easier to use and filter. (It works well enough, but if I need to give an area for improvement, I think this would be it.). The built-in reporting on the product in this regard is not great."

"The solution's licensing model could be improved."

"There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out."

"I would like to see more customization to adjust for the WAN lock-out due to our unexpected power outages."

"The initial setup could be a bit easier."

"Overall, network security and next-generation firewall features are areas that they can improve on."

"Citrix SD-WAN's knowledge base has a few missing things, so you may need to seek help from support."

"The price is the only thing that could be improved. Citrix is not a cheap solution."

More Citrix SD-WAN [EOL] cons

"Customer support is our biggest pain point. The quality of support has gone down a little since we initially deployed this product. I don't know if this is due to turnover at Palo Alto or a lack of training. It is now taking one or two days to get an initial response that says, "Hey, we've looked into this, can you pull this data for us?" In the past, we'd immediately get a response."

"The solution should include custom ports and group voice connections."

"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."

"Prisma SD-WAN's technical support should be improved."

"Sometimes, during the product's initial setup phase, bypass pair or couple ports don't come up normally, and it requires an hour and a half to troubleshoot to reset the box from Prisma SD-WAN to factory default."

"The pricing for Prisma SD-WAN needs improvement."

"We initially had challenges with AIOps, which was overwhelming, and could benefit from simplification or improved training."

"Accessibility could be improved. Any new person attempting to access Prisma will have difficulty. It doesn't have CLI available."

More Prisma SD-WAN cons

Pricing and Cost Advice

"It was worth the money overall. It's good value."

"It is expensive. You need to pay for the subscription every year, which is very expensive. The subscription includes technical support and hardware exchange in case of failure."

"It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles."

"These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."

"It's very competitive."

"Fortinet's pricing is more straightforward than other solutions. If Fortinet doesn't stick out when you're searching for a solution, you are a glutton for punishment. You only need to know two things when purchasing a Fortinet solution: your total bandwidth and bandwidth at the site. You need to estimate the future bandwidth with other solutions if your customer plans to upgrade."

"There is a license to use Fortinet FortiGate."

"The price of the license and warranty can be better because it is very expensive."

More Fortinet FortiGate pricing and cost advice

"The price of the subscription should be cheaper."

"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."

"I'm not quite sure of the price ranges. Roughly, the hidden devices can scale up to $20K for one appliance. However, the branch CPs are USD $1,000 to $2,500."

"The license was a one-time purchase. It's expensive."

"I believe that Citrix SD-WAN is a good investment, but I do not have the information to be more specific."

"It is a bit expensive. A cheaper product would be good, but everybody likes things to be cheaper. We bought the devices up front, and then we pay for the annual support."

"It's a little bit on the high side compared to the other products."

"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."

More Citrix SD-WAN [EOL] pricing and cost advice

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

"It is more expensive than Fortinet."

"Prisma SD-WAN is a pretty expensive solution."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

850,671 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

20%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

25%

Real Estate/Law Firm

Financial Services Firm

Retailer

Educational Organization

22%

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Citrix SD-WAN?

It lowered our Internet costs and gave me the flexibility to choose providers based on each location's connectivity.

See all answers

What is your experience regarding pricing and costs for Citrix SD-WAN?

It is on the expensive side. I would give it an eight out of ten in terms of costliness. In my region, the approximat...

See all answers

What needs improvement with Citrix SD-WAN?

The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...

See all answers

What do you like most about Prisma SD-WAN?

The product's initial setup phase is straightforward.

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

The product could be a bit cheaper for the services it provides.

See all answers

What needs improvement with Prisma SD-WAN?

I think the product could be a bit cheaper, but otherwise, I am satisfied with it.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Cisco Catalyst SD-WAN vs Citrix SD-WAN [EOL]

Compared 34% of the time

Aruba EdgeConnect SD-WAN Platform vs Citrix SD-WAN [EOL]

Compared 32% of the time

More Citrix SD-WAN [EOL] Competitors

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 22% of the time

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 21% of the time

Meraki SD-WAN vs Prisma SD-WAN

Compared 15% of the time

Aruba EdgeConnect SD-WAN Platform vs Prisma SD-WAN

Compared 10% of the time

VMware VeloCloud SD-WAN vs Prisma SD-WAN

Compared 8% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2025

Download Fortinet FortiGate product report

Buyer's Guide

Citrix SD-WAN [EOL]

May 2025

Download Citrix SD-WAN [EOL] product report

Buyer's Guide

Prisma SD-WAN

April 2025

Download Prisma SD-WAN product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Citrix CloudBridge, WOC, NetScaler SD-WAN

CloudGenix

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Citrix SD-WAN [EOL] enhances network stability, redundancy, and reliability, supporting connectivity between branches, optimizing internet access, and enabling secure, redundant networks, both on-premises and cloud-based.

Corporations utilize Citrix SD-WAN [EOL] to improve network performance, minimize downtime, and ensure high availability. Combining communication methods and supporting interbranch internet routing, it assists businesses in transitioning from MPLS, centralizing monitoring, and optimizing bandwidth use. Its functionality includes secure connections, cost reductions, and effective management of internet access. The support for multiple communication methods, application reliability, and ease of implementation make it a valuable tool for modern network management.

What key features does Citrix SD-WAN [EOL] offer?

Security: Enhanced protection to safeguard network data
IPv6 layering over IPv4: Ensures compatibility and future-proofing
Active-Active bandwidth use: Maximizes bandwidth utilization
Zero downtime failover: Maintains continuous operation during failures
Zero-touch deployment: Simplifies the installation process
Application reliability: Ensures high performance for critical applications
Cost-effectiveness: Reduces overall networking expenses
Central deployment: Facilitates easy configuration updates and management

What benefits should users look for in Citrix SD-WAN [EOL] reviews?

Enhanced performance: Improved application and connectivity speed
Increased reliability: Minimized network downtime and interruptions
Centralized monitoring: Streamlined network oversight and control
Scalable security: Adaptable protection for evolving network needs
Cost savings: Lower operational costs compared to traditional MPLS
Flexibility: Ability to handle multiple network functions effectively

Industries implement Citrix SD-WAN [EOL] to replace costly MPLS setups with more flexible VPN and NetScaler options, benefiting sectors like finance, healthcare, and retail that require robust, secure, and scalable network solutions. Organizations achieve better device management and efficient connectivity across multiple branches, enhancing their operational effectiveness.

Citrix

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

April 2025

Download Free Report

Find out what your peers are saying about Fortinet, Cisco, VMware and others in Software Defined WAN (SD-WAN) Solutions. Updated: April 2025.

DOWNLOAD NOW

850,671 professionals have used our research since 2012.

See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.