We performed a comparison between Fortinet FortiGate, Palo Alto Networks NG Firewalls, and WatchGuard XTM [EOL] based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."The most valuable features of Fortinet FortiGate are the rules and quality of service."
"The performance is good."
"We were looking for the VPN feature and controlling the inflow and outflow of all the traffic within the site and across the sites. We are also using it for the VPN and VLANs."
"The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good."
"Fortinet FortiGate's ease of management is the most valuable feature."
"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."
"The email protection and VPN features are the most valuable."
"In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable."
"Some of Palo Alto Networks NG Firewalls' valuable features are their powerful capabilities and user-friendliness."
"Their Prisma log collection is pretty great. Our product collects the logs, and it definitely makes the configuration of log collection easier."
"The ease of use and the ease of configuration of our policies are the most valuable features."
"Operationally, it is easier, and the manageability and their security features are good."
"The best feature is the packet inspection; compared to solutions like Cisco and FortiGate, Palo Alto's packet inspection is much less CPU intensive, allowing it to detect threats embedded within packages more quickly and efficiently."
"The most important thing is that it's really user-friendly. I have almost stopped using the CLI because I like the graphical interface. You can do whatever you want on a single screen, including all the configuration and implementation, using Panorama. You don't have to switch from one place to another."
"It has a unique approach to packet processing. It has single-pass architecture. We can easily perform policy lookups, application decoding, and integration or merging. This can be all done with a single pass. It effectively reduces the amount of processing required to perform multiple actions. This is the main advantage of using Palo Alto."
"The most valuable features are the IPS/IDS subscriptions."
"It is stable and does not require you to reboot all the time."
"They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time."
"WatchGuard XTM is fairly basic. We use it as the perimeter firewall. The main point is to protect from attack software and hacking."
"Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular."
"There is a site-to-site VPN configuration between others people."
"I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site."
"Monitoring of network activity is included in the box."
"We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them."
"The ease of use could be improved."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"The support we receive when we need to upgrade is not satisfactory and has room for improvement."
"You do need some IT knowledge in order to effectively work with the solution."
"Lacks sufficient security options."
"Backup can be improved."
"Technical support could be better. You don't always get the level of help you need right away."
"The reports are very basic."
"The initial configuration is complicated to set up."
"There is room for improvement in the area of customer service."
"In terms of what could be improved, comparatively the price is very high. That would be the one thing."
"For an upcoming release, they could improve on the way to build security rules per user."
"There is a bit of limitation with its next-generation capabilities. They could be better. In terms of logs, I feel like I am a bit limited as an administrator. While I see a lot of logs, and that is good, it could be better."
"I think visibility can be improved."
"The tool's central management system is complicated, making it challenging to manage multiple devices centrally. Individually, the firewalls are easy to use and manage. I'd like to see better central management features in the next release. They've introduced some, but I haven't tried them yet, so I can't say how effective they are. However, having a single management interface would be a big improvement."
"The price of the solution is very high."
"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."
"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."
"I would like them to improve the product's overall protections. This would be good for all product users."
"The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic."
"The VPN errors are not helpful when troubleshooting."
"Sometimes we have had issues with stability of the product."
"Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer)."
"One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format. Readable means, I don't want Excel online. We repeat auditing when we trigger the report or setup calendar. That functionality is what we are looking for from WatchGuard XTM here."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Earn 20 points