We changed our name from IT Central Station: Here's why

Fortinet FortiGate-VM vs Palo Alto Networks NG Firewalls comparison

Cancel
You must select at least 2 products to compare!
Comparison Summary
Question: Features comparison between Palo Alto and Fortinet firewalls
Answer: Hi PaloAlto is better when working on app control feature and special virtual wire links. Execpt that specific point, Fortinet is above. Best Regards, Damien
Featured Review
Find out what your peers are saying about Fortinet FortiGate-VM vs. Palo Alto Networks NG Firewalls and other solutions. Updated: January 2022.
564,729 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The feature set is fine and is rarely a problem.""If configured, Firepower provides us with application visibility and control.""Firepower has been used for quite a few enterprise clients. Most of our clients are Fortune 500 and Firepower is used to improve their end to end firewall functionality.""The customer service/technical support is very good with this solution.""I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable.""The most important features are the intrusion prevention engine and the application visibility and control. The Snort feature in Firepower is also valuable.""Another benefit has been user integration. We try to integrate our policies so that we can create policies based on active users. We can create policies based on who is accessing a resource instead of just IP addresses and ports.""I have experience with URL filtering, and it is very good for URL filtering. You can filter URLs based on the categories, and it does a good job. It can also do deep packet inspection."

More Cisco Firepower NGFW Firewall Pros →

"Web filtering and the IPS functionality.""I did like the ability to back up the configuration into the cloud, as opposed to having to store the configurations or just downloading them, the backups, to local devices.""The most valuable features are site-to-site connections and UTM.""The EPM bundle is a good feature.""Its interface is good. It comes with a lot of features, and its performance is also very good.""The support is good. We don't have any issues with the technical support.""The solution can scale well.""While the stability maybe isn't quite to the level of Cisco, it is a very cost-effective solution. It's cheap compared to Cisco."

More Fortinet FortiGate-VM Pros →

"From my experience, comparing it to other products, the granularity you can have in the application is very good. The application detection is excellent. It's certainly one of the best.""The most valuable features are the IPS/IDS subscriptions.""IoT security is most valuable in the current version. Content IDs, DDoS protection, zone protection, and DLP are the most prominent features in Palo Alto Networks NG Firewall. It is easier to configure than other solutions.""The graphical interface is easy to troubleshoot because it has a drill-down sequence. It is easy to monitor traffic.""The stability of the product has been good over the years.""Its flexibility is the most valuable.""The interface and dashboards are good.""It's a next-generation firewall and it's pretty stable. You don't have to worry about if you restart it for some maintenance. It will just come back."

More Palo Alto Networks NG Firewalls Pros →

Cons
"The product line does not address the SMB market as it is supposed to do. Cisco already has an on-premises sandbox solution.""The initial setup was a bit complex. It wasn't a major challenge, but due to our requirements and network, it was not very straightforward but still easy enough.""The change-deployment time can always be improved. Even at 50 seconds, it's longer than some of its competitors. I would challenge Cisco to continue to improve in that area.""On the VPN side, Firepower could be better. It needs more monitoring on VPNs. Right now, it's not that good. You can set up a VPN in Firepower, but you can't monitor it.""The configuration in Firepower Management Center is very slow. Deployment takes two to three minutes. You spend a lot of time on modifications. Whereas, in FortiGate, you press a button, and it takes one second.""The Firepower FTD code is missing some old ASA firewalls codes. It's a small thing. But Firepower software isn't missing things that are essential, anymore.""I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device.""They need a VTI. I know it's going to be available in the next software version, which is the 6.7 version. However, the problem with that is that the 6.7 is going to deprecate all the older IKEv1 deployment tunnels. Therefore, the problem is that we have a lot of customers which are using older encryptions. If I do that, update it, it's not going to work for me."

More Cisco Firepower NGFW Firewall Cons →

"The stability could be improved. I find Cisco to be more stable than Fortigate, which is I major differentiator between the two.""It is difficult to size the VM in terms of machine resources, and for this reason, clients prefer the appliance.""The solution should provide more useful GUI features.""The price is problematic.""The user interface could be improved.""We haven't attempted to scale the solution just yet. If we want to scale this solution we may have to look at other models. With certain requirements, we probably wouldn't be able to scale it so well as it is right now.""To improve FortiGate-VM, Fortinet needs to harden it more. For example, if you are using Hyper-V, then you need guidelines for hardening FortiGate-VM that are specific to the Hyper-V environment. If it's VMware, there should be at least a guideline on how to harden the firewall.""We have encountered certain issues with the bandwidth in respect of the security layer."

More Fortinet FortiGate-VM Cons →

"Its software updates can be improved. It sometimes becomes very slow with the software updates for different features. It should have an External Dynamic List of data. The malicious IP is not frequently getting updated in Palo Alto, and this should be done.""The configuration part could be improved. It's very difficult to configure. It doesn't have a user-friendly interface. You have to know Palo Alto deeply to use it.""Its stability can be better. Their technical response from the support side can also be better.""Over the past one or two years, Palo Alto Networks has added a lot of features into the NG Firewall products. I think this is becoming more complicated for our customers. Therefore, we could use some best practices, best practice tools, and implementation guides for some of the complicated features.""I think visibility can be improved.""The solution has normal authentication, but does not have two-factor or multi-factor authentication. There is room for development there.""With new features and applications you get bugs.""Maybe they could add some tools and more competing services, like servers, but that would increase the cost of the solution."

More Palo Alto Networks NG Firewalls Cons →

Pricing and Cost Advice
  • "Cisco pricing is premium. However, they gave us a 50 to 60 percent discount."
  • "There are additional implementation and validation costs."
  • "Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed."
  • "This product requires licenses for advanced features including Snort, IPS, and malware detection."
  • "This product is expensive."
  • "For me, personally, as an individual, Cisco Firepower NGFW Firewall is expensive."
  • "The price of Firepower is not bad compared to other products."
  • "The solution was chosen because of its price compared to other similar solutions."
  • More Cisco Firepower NGFW Firewall Pricing and Cost Advice →

  • "The price of this product is great compared to others."
  • "This solution is very expensive."
  • "The price is similar to Symantec Endpoint, but it's more expensive than Forcepoint solutions. Fortinet is better than Forcepoint."
  • "There is a benefit in terms of the cost of using this solution because the price is very good."
  • "It's not a cheap solution but it comes with its benefits."
  • "Of all the firewalls that we compared, FortiGate is the cheapest and most affordable, so we are satisfied with the pricing."
  • "There is no additional cost. Once you get the licensing fee, you're good."
  • "There should be a reduction in the setup price and licensing costs."
  • More Fortinet FortiGate-VM Pricing and Cost Advice →

  • "The price of this product should be reduced."
  • "The pricing is competitive in the market."
  • "This is an expensive product, which is why some of our customers don't adopt it."
  • "The product is expensive compared to competing products but uses a similar type of pricing model based on hardware, software and maintenance."
  • "It is a little bit expensive than other firewalls, but it is worth every penny. There are different licenses for the kinds of services you want to use. When we buy a new product, we go for a three-year subscription."
  • "It is a little bit expensive."
  • "The NG firewall is an expensive solution."
  • "This is an expensive product and there is a subscription cost."
  • More Palo Alto Networks NG Firewalls Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    564,729 professionals have used our research since 2012.
    Answers from the Community
    Donny Lee
    author avatarABHILASH TH
    Reseller

    Hi,


    Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner)


    Fortinet: 


    Have higher throughput; which comes with competitive rates


    Wide range of models to select to meet your requirement, without spending heavliy


    Outstanding customer support and very active customer care team


    Easly available skilled resources from the channel for deployment and post-implementation support 


    Regards


    Abhilash



    author avatarAlexander Denisenko
    User

    Hello. The question is what you are going to have as a result of application

    Questions from the Community
    Top Answer: 
    When you compare these firewalls you can identify them with different features, advantages, practices and… more »
    Top Answer: 
    The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
    Top Answer: 
    It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
    Top Answer: 
    In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
    Top Answer: 
    Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigate… more »
    Top Answer: 
    Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure… more »
    Top Answer: 
    Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat… more »
    Top Answer: 
    With its single pane of glass, it makes monitoring and troubleshooting a bit more homogeneous. We are not looking at… more »
    Comparisons
    Also Known As
    Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
    FortiGate Virtual Appliance, FortiGate-VM
    Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall, Palo Alto Networks PA-Series
    Learn More
    Overview

    Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
    small/branch offices to high performance data centers and service providers. Available in a wide
    range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
    defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
    Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
    features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
    volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
    for increased performance, high availability configurations, and more.
    Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
    deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
    the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
    can deliver micro-segmentation to protect east-west network traffic.
    Cisco firewalls provide consistent security policies, enforcement, and protection across all your
    environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
    delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
    SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
    greater simplicity, visibility, and efficiency.
    Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

    FortiGate Virtual Appliances allow you to mitigate blind spots by implementing critical security controls within your virtual infrastructure. They also allow you to rapidly provision security infrastructure whenever and wherever it is needed. FortiGate virtual appliances feature all of the security and networking services common to traditional hardware-based FortiGate appliances. With the addition of virtual appliances from Fortinet, you can deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized management platform.

    Palo Alto Networks' next-generation firewalls secure your business with a prevention-focused architecture and integrated innovations that are easy to deploy and use. Now, you can accelerate growth and eliminate risks at the same time.

    Offer
    Learn more about Cisco Firepower NGFW Firewall
    Learn more about Fortinet FortiGate-VM
    Learn more about Palo Alto Networks NG Firewalls
    Sample Customers
    Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
    Security7 Networks, COOPENAE
    SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
    Top Industries
    REVIEWERS
    Comms Service Provider22%
    Financial Services Firm16%
    Manufacturing Company8%
    Non Profit8%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company21%
    Government7%
    Manufacturing Company4%
    REVIEWERS
    Comms Service Provider16%
    Financial Services Firm11%
    Manufacturing Company8%
    Energy/Utilities Company5%
    VISITORS READING REVIEWS
    Comms Service Provider33%
    Computer Software Company29%
    Government5%
    Energy/Utilities Company4%
    REVIEWERS
    Comms Service Provider20%
    Computer Software Company17%
    Financial Services Firm13%
    Healthcare Company7%
    VISITORS READING REVIEWS
    Comms Service Provider26%
    Computer Software Company25%
    Government6%
    Energy/Utilities Company4%
    Company Size
    REVIEWERS
    Small Business43%
    Midsize Enterprise28%
    Large Enterprise29%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise65%
    REVIEWERS
    Small Business49%
    Midsize Enterprise27%
    Large Enterprise24%
    VISITORS READING REVIEWS
    Small Business29%
    Midsize Enterprise29%
    Large Enterprise42%
    REVIEWERS
    Small Business38%
    Midsize Enterprise31%
    Large Enterprise31%
    VISITORS READING REVIEWS
    Small Business34%
    Midsize Enterprise14%
    Large Enterprise52%
    Find out what your peers are saying about Fortinet FortiGate-VM vs. Palo Alto Networks NG Firewalls and other solutions. Updated: January 2022.
    564,729 professionals have used our research since 2012.

    Fortinet FortiGate-VM is ranked 12th in Firewalls with 69 reviews while Palo Alto Networks NG Firewalls is ranked 7th in Firewalls with 72 reviews. Fortinet FortiGate-VM is rated 8.2, while Palo Alto Networks NG Firewalls is rated 8.6. The top reviewer of Fortinet FortiGate-VM writes "Flexible with good cloud management and a straightforward user interface". On the other hand, the top reviewer of Palo Alto Networks NG Firewalls writes "The product stability and level of security are second to none in the industry". Fortinet FortiGate-VM is most compared with Azure Firewall, Fortinet FortiGate, Palo Alto Networks VM-Series, OPNsense and Sophos UTM, whereas Palo Alto Networks NG Firewalls is most compared with Fortinet FortiGate, Azure Firewall, Sophos XG, Meraki MX and Check Point CloudGuard Network Security. See our Fortinet FortiGate-VM vs. Palo Alto Networks NG Firewalls report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.