Huawei NGFW vs Palo Alto Networks CN-Series comparison

Huawei and Palo Alto Networks are both solutions in the Firewalls category. Huawei is ranked #37 with an average rating of 7.3, while Palo Alto Networks is ranked #31 with an average rating of 9.5. Huawei holds a 1.0% mindshare in Firewalls, compared to Palo Alto Networks’s 0.2% mindshare. Additionally, 66% of Huawei users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Huawei NGFW and Palo Alto Networks CN-Series based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Huawei NGFW vs. Palo Alto Networks CN-Series Report (Updated: December 2025).

Buyer's Guide

Huawei NGFW vs. Palo Alto Networks CN-Series

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Huawei NGFW is 1.0%, up from 0.7% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.2%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	18.8%
Palo Alto Networks CN-Series	0.2%
Huawei NGFW	1.0%
Other	80.0%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Waqas Zubair

Senior Manager Technology at CNS Engineering

GUI application allows for easy monitoring and analysis of potential intrusions but needs improvement in threat prevention signatures

Based on the threat prevention signatures, they need updates. They should add some machine learning features and Machine learning detection. In future releases, I would like to see improvements in CDR technology. Forcepoint is pitching CDR technology, which extends sandboxing. Configuring data on the console needs enhancement. Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does. Tools like SIEM, SOAR, and Tenable can be integrated, but they require additional setup and should be integrated via API. For external threat detection, using the TAXII or STIX protocol, would be an improvement over the current features.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Allows for firewall rules to be programmed and named in a way that makes it “readable”"

"It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything."

"The most valuable feature of FortiGate Next Generation Firewall is its SD-WAN."

"The network security and cloud security are most valuable."

"Fortinet FortiGate is quite popular in my region, so we are implementing Fortinet FortiGate firewalls. Fortinet FortiGate is the best option on the market when it comes to firewalls. It's straightforward to deploy and has good stability and performance."

"The security on offer is very good."

"It is user friendly, and has all the features you need."

"We are a visual effects company, and there have been a number of high profile security issues in our industry. This has brought us to a higher standard of security, which our clients are very keen on these days."

More Fortinet FortiGate pros

"Huawei support is excellent. I rate it 10 out of 10."

"I like that the initial setup is straighforward. It's also a scalable solution."

"We make use of the new data center, specifically the containerized data center which is built and reviewed by Huawei, including all the device's infrastructure."

"The solution's implementation is pretty easy."

"The stability is fine. I would rate the stability a nine out of ten."

"The security is good. It's as effective as anything else on the market."

"It enables us to configure different policies and restrictions for specific users within the same subnet."

"The tool helps us to integrate with other brands."

More Huawei NGFW pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

Cons

"Fortinet FortiGate is not very easy to use. The navigation could be improved to make it easier to use."

"One of the weaknesses of the solution is something we noticed, especially after comparing the tool with SD-WAN features, since, unfortunately, in a massive scale size environment, the solution is not good. I"

"The room for improvement is about the global delivery time period. Usually I need to wait for almost one month to deliver it overseas. So if you can shorten the deliver time it'd be great."

"It should be more stable. There should be full integration within Fortinet products themselves as well as with other third-party products. Especially when you're not dealing with SIEM and the correlation of the security box, we want Fortinet to be able to share that information with as many other products as it can."

"I have used technical support and they could improve."

"Another issue is how deduplication services don't work reliably after enabling deduplication on Fortinet."

"The security of Fortinet FortiGate could improve."

"I cannot say definitively about the return on investment with Fortinet FortiGate because I have always been in the technical field, but most of our clients are very happy since threats were stopped, generating confidence in the Fortinet brand among our clients."

More Fortinet FortiGate cons

"The user interface could be more user-friendly."

"The solution could be more secure and have better integration."

"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."

"I would like to see an antivirus solution included with the product."

"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."

"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."

"The tool lacks features."

"The solution requires a more interactive dashboard. That would make it easier than playing with configurations the way we have to now."

More Huawei NGFW cons

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"I'd like to see more IOPs features."

Pricing and Cost Advice

"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."

"The licensing costs are very low."

"FortiGate Next Generation Firewall is a very cheap solution."

"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."

"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."

"We find the most valuable aspect of this solution is the price. It is affordable, and cheaper than other firewalls."

"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."

"I would say that all things considered, the pricing is pretty good."

More Fortinet FortiGate pricing and cost advice

"The price of the license of this solution is high."

"The solution is inexpensive."

"Huawei is 30% cheaper than Arista."

"The solution isn't cheap. It's market price."

"I believe that we are entitled to a one-year extension on our licensing."

"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."

"Huawei is priced lower than most competitors."

"The pricing is cheap."

More Huawei NGFW pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

11%

Computer Software Company

11%

Manufacturing Company

University

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	188

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	6
Large Enterprise	7

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Huawei NGFW?

The solution's implementation is pretty easy.

See all answers

What is your experience regarding pricing and costs for Huawei NGFW?

The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.

See all answers

What needs improvement with Huawei NGFW?

Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 6% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Huawei NGFW

Compared 10% of the time

Sophos Firewall vs Huawei NGFW

Compared 7% of the time

H3C SecPath Firewalls vs Huawei NGFW

Compared 5% of the time

Palo Alto Networks NG Firewalls vs Huawei NGFW

Compared 5% of the time

OPNsense vs Huawei NGFW

Compared 5% of the time

More Huawei NGFW Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 49% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 29% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 23% of the time

More Palo Alto Networks CN-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2026

Download Fortinet FortiGate product report

Buyer's Guide

Huawei NGFW

January 2026

Download Huawei NGFW product report

Buyer's Guide

Firewalls

January 2026

Download Palo Alto Networks CN-Series product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Huawei's Next-Generation Firewall (NGFW) is a cutting-edge security solution designed to protect networks from advanced threats. With its advanced threat detection and prevention capabilities, the Huawei NGFW ensures the highest level of network security.

The product offers comprehensive security features, including intrusion prevention, application control, and URL filtering, to safeguard against a wide range of cyber threats. The NGFW also provides deep packet inspection and advanced threat intelligence, enabling real-time threat detection and response.

With its high-performance architecture, the Huawei NGFW delivers fast and efficient security without compromising network performance. It is easy to deploy and manage, thanks to its intuitive user interface and centralized management platform.

The NGFW also supports flexible deployment options, including virtualization and cloud integration, making it suitable for various network environments.

Huawei

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

KMITL, Peking University

Information Not Available

Buyer's Guide

Huawei NGFW vs. Palo Alto Networks CN-Series

December 2025

Free Report: Huawei NGFW vs. Palo Alto Networks CN-Series

Find out what your peers are saying about Huawei NGFW vs. Palo Alto Networks CN-Series and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Huawei NGFW vs. Palo Alto Networks CN-Series report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.