We changed our name from IT Central Station: Here's why

Forcepoint Next Generation Firewall vs Palo Alto Networks Threat Prevention comparison

Cancel
You must select at least 2 products to compare!
Featured Review
Find out what your peers are saying about Fortinet, Check Point, Netgate and others in Firewalls. Updated: January 2022.
564,729 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Provides good integrations and reporting.""It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS.""The most valuable feature is stability.""The Firepower+ISE+AMP for endpoint integration is something that really stands it out with other vendor solutions. They have something called pxGrid and i think it is already endorsed by IETF. This allows all devices on the network to communicate.""One of the most valuable features is the AMP. It's very good and very reliable when it comes to malicious activities, websites, and viruses.""Web filtering is a big improvement for us. The previous version we used, the AC520, did not have that feature included. It was not very easy for us, especially because the environment had to be isolated and we needed to get updates from outside, such as Windows patches. That feature has really helped us when we are going outside to pull those patches.""It is one of the fastest solutions, if not the fastest, in the security technology space. This gives us peace of mind knowing that as soon as a new attack comes online that we will be protected in short order. From that perspective, no one really comes close now to Firepower, which is hugely valuable to us from an upcoming new attack prevention perspective.""The dashboard is the most important thing. It provides good visibility and makes management easy. Firepower also provides us with good application visibility and control."

More Cisco Firepower NGFW Firewall Pros →

"I like the IPS. IPS is the master feature. I depend on the firewall and sandbox.""I like the Firewall and the IPS.""The blocking, based on the signal provided, is the solution's most valuable aspect.""The VPN is great.""The most valuable feature of this solution is the support.""When comparing this solution to others this one has better reporting, user management, and is easy to use.""It is a stable solution, and there are no issues so far.""Forcepoint Next Generation Firewall is very simple, easy to use, and flexible."

More Forcepoint Next Generation Firewall Pros →

"Everything has been okay with the solution. We are using all of the features.""For those who want a next-gen firewall that's easy to configure and easy to operate, I think you should go for Palo Alto.""Edge protection is a valuable feature.""I like the solution's interface.""The most valuable features are that it's user-friendly, has interesting features, URL filtering, and threat prevention."

More Palo Alto Networks Threat Prevention Pros →

Cons
"I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device.""One of the few things that are brought up is that for the overall management, it would be great to have a cloud instance of that. And not only just a cloud instance, but one of the areas that we've looked at is using an HA type of cloud. To have the ability to have a device file within a cloud. If we had an issue with one, the other one would pick up automatically.""The initial setup could be simplified, as it can be complex for new users.""One issue with Firepower Management Center is deployment time. It takes seven to 10 minutes and that's a long time for deployment. In that amount of time, management or someone else can ask me to change something or to provide permissions, but during that time, doing so is not possible. It's a drawback with Cisco. Other vendors, like Palo Alto or Fortinet do not have this deployment time issue.""When you make any changes, irrespective of whether they are big or small, Firepower takes too much time. It is very time-consuming. Even for small changes, you have to wait for 60 seconds or maybe more, which is not good. Similarly, when you have many IPS rules and policies, it slows down, and there is an impact on its performance.""The intelligence has room for improvement. There are some hackers that we haven't seen before and its ability to detect those types of attacks needs to be improved.""Cisco makes horrible UIs, so the interface is something that should be improved.""Its interface is sometimes is a little bit slow, and it can be improved. When you need to put your appliance in failover mode, it is a little difficult to do it remotely because you need to turn off the appliance in Cisco mode. In terms of new features, it would be good to have AnyConnect VPN with Firepower. I am not sure if it is available at the moment."

More Cisco Firepower NGFW Firewall Cons →

"Forcepoint would be improved if there were more training available.""If I want to allow access to Facebook, yet not allow the user to access videos, then I am not able to do it with this product.""The security features need to be improved.""We feel the product's technical support could be better, as this relates to the solution itself, to the installation of the product, and to having a proper understanding of the case.""Management could be better. They can improve the management. I think all our customers can't accept firewalls that have standalone management. So, they prefer Fortinet or Palo Alto. But overall, inspection and other features are working fine.""Its interface is complex when compared with a firewall like FortiGate. Forcepoint Next Generation Firewall needs a management console, whereas FortiGate doesn't need any console. When you have a few devices, a console is not really necessary. It's good to have a private console only when you have a lot of devices.""Its management center should be easier to use. The management interface of Forcepoint is unique and a little bit different from some of the firewall solutions on which people might have worked before. Sometimes, the customers say that it is not very friendly, and we help them with how to use this management interface. It just takes a little bit of time, and after some time, it gets easy to manage or use. It is quite similar to Palo Alto, Fortinet, and legacy Juniper solutions. Their support should be faster. We have received complaints that they are not responding fast, which is not good for the vendor and us.""My team is looking for more throughput and better integration with our security framework."

More Forcepoint Next Generation Firewall Cons →

"The documentation needs to be improved. I need better information about how to configure it and what the best practices are.""The pricing has improved with the newer generation of their Firewalls, but the price could always be lower. In comparison with other solutions, I believe they're quite competitive.""In terms of what needs improvement, the only thing I don't like is the support.""The technology firewall anomaly network could stand improvement.""Palo Alto's maintenance needs to be improved."

More Palo Alto Networks Threat Prevention Cons →

Pricing and Cost Advice
  • "Cisco pricing is premium. However, they gave us a 50 to 60 percent discount."
  • "There are additional implementation and validation costs."
  • "Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed."
  • "This product requires licenses for advanced features including Snort, IPS, and malware detection."
  • "This product is expensive."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The price of Firepower is not bad compared to other products."
  • "The solution was chosen because of its price compared to other similar solutions."
  • More Cisco Firepower NGFW Firewall Pricing and Cost Advice →

  • "Forcepoint is very expensive but it's really secure."
  • "It is expensive."
  • "The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"
  • "Everything in Forcepoint comes with an individual license, which is kind of a problem. In our last meeting, they said that it may change at the beginning of 2021, and they will try to merge some licenses together. Customers will get more features than what they got previously. We will wait and see."
  • "We have found the price could be reduced. It is a little expensive."
  • "The pricing of the solution is normally competitive with other products."
  • "The pricing should be more competitive against other vendors in the market."
  • "The cost is fair, but it could be improved."
  • More Forcepoint Next Generation Firewall Pricing and Cost Advice →

  • "The pricing has improved with the newer generation of their Firewalls, but the price could always be lower."
  • "The pricing could be lower."
  • More Palo Alto Networks Threat Prevention Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    564,729 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: 
    When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer: 
    The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
    Top Answer: 
    It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer: 
    I like the IPS. IPS is the master feature. I depend on the firewall and sandbox.
    Top Answer: 
    We have just a subscription for the cloud, and this license is great. The license is so good.
    Top Answer: 
    Management could be better. They can improve the management. I think all our customers can't accept firewalls that have… more »
    Top Answer: 
    The resource consumption should be addressed. The technology firewall anomaly network could stand improvement. The… more »
    Comparisons
    Also Known As
    Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
    Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
    Learn More
    Overview

    Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
    small/branch offices to high performance data centers and service providers. Available in a wide
    range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
    defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
    Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
    features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
    volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
    for increased performance, high availability configurations, and more.
    Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
    deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
    the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
    can deliver micro-segmentation to protect east-west network traffic.
    Cisco firewalls provide consistent security policies, enforcement, and protection across all your
    environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
    delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
    SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
    greater simplicity, visibility, and efficiency.
    Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

    Forcepoint Stonesoft Next Generation Firewall protects enterprise networks with high-performance "intelligence aware" security supported by real-time updates. This enables Stonesoft to deliver the industry's best defense against advanced evasions, alone with complete next-generation firewall protection when and where you need it - at remote sites, branch offices, data centers, and the network edge.

    Threats do not discriminate between application delivery vectors, requiring an approach that has full visibility into all application traffic, including SSL encrypted content, with full user context. Threat Prevention leverages the visibility of our next-generation firewall to inspect all traffic, automatically preventing known threats, regardless of port, protocol or SSL encryption.

    Offer
    Learn more about Cisco Firepower NGFW Firewall
    Learn more about Forcepoint Next Generation Firewall
    Learn more about Palo Alto Networks Threat Prevention
    Sample Customers
    Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
    California Department of Corrections and Rehabilitation (CDCR)
    University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
    Top Industries
    REVIEWERS
    Comms Service Provider22%
    Financial Services Firm16%
    Government8%
    Non Profit8%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company21%
    Government7%
    Manufacturing Company4%
    REVIEWERS
    Comms Service Provider33%
    Computer Software Company25%
    University8%
    Retailer8%
    VISITORS READING REVIEWS
    Comms Service Provider28%
    Computer Software Company23%
    Government7%
    Energy/Utilities Company4%
    REVIEWERS
    Financial Services Firm33%
    Comms Service Provider33%
    Aerospace/Defense Firm11%
    Healthcare Company11%
    VISITORS READING REVIEWS
    Computer Software Company24%
    Comms Service Provider22%
    Government6%
    Financial Services Firm6%
    Company Size
    REVIEWERS
    Small Business43%
    Midsize Enterprise28%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise65%
    REVIEWERS
    Small Business63%
    Midsize Enterprise15%
    Large Enterprise22%
    REVIEWERS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise43%
    Find out what your peers are saying about Fortinet, Check Point, Netgate and others in Firewalls. Updated: January 2022.
    564,729 professionals have used our research since 2012.

    Forcepoint Next Generation Firewall is ranked 20th in Firewalls with 19 reviews while Palo Alto Networks Threat Prevention is ranked 12th in Intrusion Detection and Prevention Software (IDPS) with 5 reviews. Forcepoint Next Generation Firewall is rated 7.8, while Palo Alto Networks Threat Prevention is rated 8.8. The top reviewer of Forcepoint Next Generation Firewall writes "Good console management, but the interface is not user-friendly and application filtering needs finer granularity". On the other hand, the top reviewer of Palo Alto Networks Threat Prevention writes "Easy to configure and easy to operate with great stability". Forcepoint Next Generation Firewall is most compared with Fortinet FortiGate, Darktrace, pfSense, Check Point NGFW and Sophos XG, whereas Palo Alto Networks Threat Prevention is most compared with Darktrace, Cisco Stealthwatch, Check Point IPS, Fortinet FortiGate IPS and Vectra AI.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.