Forcepoint Next Generation Firewall vs Juniper Contrail SD-WAN comparison

Forcepoint and Juniper are both solutions in the Software Defined WAN (SD-WAN) Solutions category. Forcepoint is ranked #10 with an average rating of 7.2, while Juniper is ranked #15 with an average rating of 7.5. Forcepoint holds a 2.2% mindshare in SDW, compared to Juniper’s 0.9% mindshare. Additionally, 78% of Forcepoint users are willing to recommend the solution, compared to 83% of Juniper users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Forcepoint Next Generation Firewall and Juniper Contrail SD-WAN compete in the cybersecurity and networking market. Users generally favor Juniper Contrail SD-WAN for its extensive feature set and user satisfaction, despite higher costs.

Features: Forcepoint Next Generation Firewall is praised for its robust security features, intrusion prevention, and advanced threat protection. Juniper Contrail SD-WAN is favored for its flexible networking capabilities, easy integration, and comprehensive management tools.

Room for Improvement: Users suggest that Forcepoint needs improvements in scalability and analytics tools. For Juniper Contrail SD-WAN, feedback includes a desire for better support documentation and streamlined updates.

Ease of Deployment and Customer Service: Forcepoint Next Generation Firewall is reported to have a steeper learning curve and longer deployment times. Its customer service is viewed as generally responsive but sometimes slow. Juniper Contrail SD-WAN is noted for easier and faster deployment, though users have mixed experiences with support, finding it effective but occasionally difficult to reach.

Pricing and ROI: Forcepoint is regarded as having a lower initial setup cost but a mixed ROI due to its higher ongoing maintenance expenses. Juniper Contrail SD-WAN, while having a higher setup cost, is deemed to deliver better ROI by users due to its extended features and lower long-term operational costs.

To learn more, read our detailed Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN Report (Updated: May 2025).

Buyer's Guide

Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN

May 2025

Download the complete report

Helped 857,162 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2025, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Fortinet FortiGate is 20.9%, up from 20.9% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 2.2%, up from 2.1% compared to the previous year. The mindshare of Juniper Contrail SD-WAN is 0.9%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Software Defined WAN (SD-WAN) Solutions

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

OusaidAbaz

Security Network Architect at Inmac

Provides decent protection for the LAN but complicated interface

We had some licensing issues with its web filtering capabilities. That's why we migrated our web filtering to Cisco Umbrella. Moreover, the interface is complicated. It's difficult to locate all the necessary menus and functions. For example, one of the many issues is with SSH. Even now, we haven't successfully opened the port to connect using SSH mode when we want to change the configuration. It's like a black box—not very open to changes and customization. It's simply not easy to configure. There are other problems, too. For example regarding Forcepoint's Websense component. We had a lot of problems managing the web settings within Websense. That's why we migrated to Cisco Umbrella for cloud-based web filtering. It's not that Forcepoint is inherently bad. The issue is that it's not user-friendly. It is not easy to use. The developers need to redesign the interface (GUI) for better management. It is very difficult to manage. For example, simple actions require too many clicks compared to FortiGate or Palo Alto. That's the main problem.

Read full review

Luis Corrochano

Presales Manager and Co-founder at Kaizen Networks

A stable and scalable solution that helps to cut cost by reducing MPLs

My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH. The solution is expensive. Its support can be better. The tool is stable. The solution is more…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The multi-tenancy feature is most valuable. It integrates very well with FortiManager and FortiAnalyzer."

"Fortinet FortiGate is easy to use."

"FortiGate has led to a reduction in our security budget."

"FortiGate improved our security. It's one of the best hardware firewalls."

"The solution is scalable."

"The security features that they have are quite good. On top of that, their licensing model is quite nice where they don't charge you anything for the SD-WAN functionality for the firewall."

"We've found the solution to be pretty stable."

"The email protection and VPN features are the most valuable."

More Fortinet FortiGate pros

"The VPN is great."

"The blocking, based on the signal provided, is the solution's most valuable aspect."

"I don't have anything bad to say about the product. I absolutely love it."

"The most valuable feature is controlling the traffic and the logging. They have real-time logins for traffic logs. Troubleshooting was very easy for me."

"I like the Firewall and the IPS."

"I have found that Forcepoint Next Generation Firewall is easy to use, highly secure, and the main VPN tunnel is created automatically which is a benefit."

"We're trying to use all the firewall's features. Most of the features were effective, but the usability is a huge concern."

"Next Generation Firewall's best feature is that it can be managed on one platform."

More Forcepoint Next Generation Firewall pros

"My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH."

"The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility."

"It supports desktop management, network management, and SD-WAN policies."

"It gives you that level of visibility to understand what's going on between layer four and layer seven."

"The support is very good from Juniper and from the local distributors."

"I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities."

Cons

"There are some license issues. Not every feature must have a separate license. There must be some of kind synergy between the license so we don't have to pay for every individual license that we would like to have."

"If they had better integration with security products, such as Cisco ISE or Rapid Threat Containment, then it would be an improvement."

"The SD-WAN functionality is a bit overly complicated and not fully documented."

"They need faster serviceability and more security features."

"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."

"I prefer Palo Alto over Fortinet FortiGate. Its IPS engine is not better than the Palo Alto version. The monitoring tool needs improvement, and the syslog configuration needs enhancement."

"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."

"Its reporting can be improved. Sometimes, I don't get proper reports."

More Fortinet FortiGate cons

"The solution needs to add an antivirus profile and anti-spyware profile, not just policies and VPN."

"You do need knowledge of the solution in order to set the product up properly."

"Its management center should be easier to use. The management interface of Forcepoint is unique and a little bit different from some of the firewall solutions on which people might have worked before. Sometimes, the customers say that it is not very friendly, and we help them with how to use this management interface. It just takes a little bit of time, and after some time, it gets easy to manage or use. It is quite similar to Palo Alto, Fortinet, and legacy Juniper solutions. Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us."

"The solution needs to build upon its network functionality. It needs to be a bit smarter."

"Forcepoint would be improved if there were more training available."

"Forcepoint is a little difficult to configure compared to its competitors."

"The network interface could be better, and it could be cheaper."

"They need to work on stability, it has not been the best in our experience."

More Forcepoint Next Generation Firewall cons

"The solution is expensive. Its support can be better."

"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that."

"The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this."

"The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation."

"Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with other solutions like Meraki SD-WAN, which is almost plug-and-play with its zero-touch provisioning. In Juniper Contrail SD-WAN, it was more challenging."

"Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process."

Pricing and Cost Advice

"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."

"There is a license to use Fortinet FortiGate."

"It is cheaper and more competitive compared to other options. For example, when comparing Palo Alto products to others, Palo Alto tends to be more expensive. If you compare Cisco's platform, including Cisco Meraki, with Fortinet products, you'll notice that Cisco's offerings are generally higher priced than Fortinet's firewall solutions."

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."

"Each feature costs money, so it is important to study your needs."

"It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price."

"The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone."

"The price of Fortinet FortiGate could improve, it is expensive."

More Fortinet FortiGate pricing and cost advice

"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"

"It is an affordable product. We purchase its yearly license."

"I consider Forcepoint Next Generation Firewall's price to be good."

"We have just a subscription for the cloud, and this license is great. The license is so good."

"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."

"I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."

"It is expensive."

"There is a need to make payments towards the licensing charges attached to the product. The product is not expensive."

More Forcepoint Next Generation Firewall pricing and cost advice

"The licensing structure is very flexible."

"The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."

"They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

857,162 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

15%

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Computer Software Company

18%

Manufacturing Company

10%

Financial Services Firm

10%

Government

10%

Computer Software Company

20%

Financial Services Firm

12%

Real Estate/Law Firm

11%

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Forcepoint Next Generation Firewall?

The product's initial setup phase is easy.

See all answers

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?

The licensing model is dependent on negotiation skills, but there is room for improvement. The costs can be high sinc...

See all answers

What needs improvement with Forcepoint Next Generation Firewall?

The licensing model should be more flexible. I recommend that additional features be included in a single license to ...

See all answers

What do you like most about Juniper Contrail SD-WAN?

I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provis...

See all answers

What is your experience regarding pricing and costs for Juniper Contrail SD-WAN?

My advice regarding setup costs, pricing, and licensing for Juniper Contrail SD-WAN would be to carefully evaluate an...

See all answers

What needs improvement with Juniper Contrail SD-WAN?

Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with othe...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 21% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 12% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks Advanced Threat Prevention vs Forcepoint Next Generation Firewall

Compared 20% of the time

Check Point NGFW vs Forcepoint Next Generation Firewall

Compared 12% of the time

Sophos XG vs Forcepoint Next Generation Firewall

Compared 5% of the time

OPNsense vs Forcepoint Next Generation Firewall

Compared 4% of the time

Arista NDR vs Forcepoint Next Generation Firewall

Compared 3% of the time

More Forcepoint Next Generation Firewall Competitors

Juniper Mist Edge vs Juniper Contrail SD-WAN

Compared 18% of the time

Cisco Catalyst SD-WAN vs Juniper Contrail SD-WAN

Compared 15% of the time

Huawei Enterprise Routers vs Juniper Contrail SD-WAN

Compared 13% of the time

More Juniper Contrail SD-WAN Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

June 2025

Download Fortinet FortiGate product report

Buyer's Guide

Forcepoint Next Generation Firewall

June 2025

Forcepoint Next Generation Firewall report

Download Forcepoint Next Generation Firewall product report

Buyer's Guide

Juniper Contrail SD-WAN

June 2025

Download Juniper Contrail SD-WAN product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform

Contrail SD-WAN

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Forcepoint Next Generation Firewall is a versatile and comprehensive solution for perimeter security, offering features such as SD-WAN, IPS, VPN, and cloud or on-premises subscription keys. It is preferred by many clients over Cisco and is used for obligation redundancy, VPN access, and as the main point of security in infrastructure.

The product is praised for its simplicity, flexibility, complete feature set, scalability, and central management capabilities. Other valuable features include IPS, firewall, sandbox, application control, filtering, security management center, connectivity, and integration capabilities.

Forcepoint

Contrail SD-WAN delivers a simple, automated multicloud SD-WAN. It enables you to create an evolvable architecture to simplify growth, from secure routers to SD-WAN, SD-Branch, and beyond. It automates the WAN edge across Juniper virtual cloud endpoints and on-premises next-generation firewall or universal CPE platforms. And it provisions and enforces multilevel security policy at scale, across multiple clouds and enterprise sites with diverse topologies.

Juniper

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

California Department of Corrections and Rehabilitation (CDCR)

Allied Pinnacle

Buyer's Guide

Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN

May 2025

Free Report: Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN

Find out what your peers are saying about Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN and other solutions. Updated: May 2025.

DOWNLOAD NOW

857,162 professionals have used our research since 2012.

See our Forcepoint Next Generation Firewall vs. Juniper Contrail SD-WAN report.

See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.