Huawei NGFW vs Palo Alto Networks K2-Series comparison

Huawei and Palo Alto Networks are both solutions in the Firewalls category. Huawei is ranked #26 with an average rating of 8.0, while Palo Alto Networks is ranked #36 with an average rating of 8.7. Huawei holds a 1.0% mindshare in Firewalls, compared to Palo Alto Networks’s 0.1% mindshare. Additionally, 66% of Huawei users are willing to recommend the solution, compared to 96% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Huawei NGFW and Palo Alto Networks K2-Series compete in the next-generation firewall market. Users report preferring Palo Alto Networks K2-Series for its advanced capabilities despite Huawei NGFW's advantageous pricing and support.

Features: Huawei NGFW offers robust security features, high performance, integrated threat intelligence, and comprehensive protection mechanisms. Palo Alto Networks K2-Series provides advanced threat prevention, deep packet inspection, and high availability for in-depth threat analysis capabilities.

Room for Improvement: Huawei NGFW could benefit from improved documentation, more intuitive management tools, and enhanced reporting tools. Palo Alto Networks K2-Series users desire better reporting tools, streamlined configuration processes, and more intuitive user interfaces.

Ease of Deployment and Customer Service: Huawei NGFW is praised for straightforward deployment and responsive customer support. Palo Alto Networks K2-Series has efficient deployment but slightly more complex configurations, with users rating its customer service highly.

Pricing and ROI: Huawei NGFW is cost-effective with a reasonable ROI, suitable for enterprises on a budget. Palo Alto Networks K2-Series is more expensive but justifies its higher cost with superior features and long-term value, resulting in satisfactory ROI for users willing to invest.

To learn more, read our detailed Huawei NGFW vs. Palo Alto Networks K2-Series Report (Updated: September 2025).

Buyer's Guide

Huawei NGFW vs. Palo Alto Networks K2-Series

September 2025

Download the complete report

Helped 869,566 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Huawei NGFW is 1.0%, up from 0.6% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.1%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
Huawei NGFW	1.0%
Palo Alto Networks K2-Series	0.1%
Other	78.5%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Fernando Solanes

Product Manager at Daxa Argentina

A simple firewall solution that can detect intrusions but updated firewalls doesn't have the features of older ones

One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had. Huawei NGFW sells new products quickly without fully developing them. So, when the new firewalls come out, they may not have all the features the old ones had. We can't tell our customers this. The problem is that the end-of-life for the old products is often very near, or it's already here, and we don't have the fully-featured new product to replace it.

Read full review

Krishnakumar M

enterprise architect at a tech services company with 1-10 employees

One of the best tools for the prevention of evasive threats

There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most important features of Fortinet FortiGate are the Intrusion Prevention System (IPS) and firewall control applications."

"It's a good product that significantly enhances security and protects organizational data."

"Fortinet FortiGate has a very simple configuration, is easy to set up, and includes SD-WAN features at no additional cost."

"The setup is easy."

"Regionally, we are well covered. Technical support is good in this area."

"We use a southern institution that's audited for IT security and the reporting that automatically comes off the unit makes it much easier to meet compliance standards and makes it easier as far as the amount of time that has to be spent to compile that information. If you get your reporting set up correctly when you initially set it up, you just select the one you want and hit print. The auditing trail on it is the best feature."

"The solution is very stable."

"The best features of Fortinet FortiGate include the simple user interface."

More Fortinet FortiGate pros

"It enables us to configure different policies and restrictions for specific users within the same subnet."

"The security is good. It's as effective as anything else on the market."

"I like that the initial setup is straighforward. It's also a scalable solution."

"Huawei was able to assist us in the installation of their product. The installation was very fast."

"The support for the solution has been excellent. If we ever had an issue they would send an engineer to help us with our problem."

"The tool helps us to integrate with other brands."

"The operational management dashboard is easy to use for the customers."

"Huawei support is excellent. I rate it 10 out of 10."

More Huawei NGFW pros

"The company is inventive and always adds a lot of great features."

"I have found the threat profile feature valuable."

"The solution is reliable and scales well."

"The most valuable feature of Palo Alto Networks K2-Series is the performance which is above their competitors. The throughput they have delivered is good. When we used other solutions they failed the deployment when we were using different rules. They have a theory perform performance light and performance degradation. However, Palo Alto Networks K2-Series never fails in that scenario."

"We've found the solution offers us good stability."

"Mainly, it is very easy to understand, and the logs are very good."

"The most valuable features are the virtualization of the firewall and the antivirus."

"The customer service and support are really good."

More Palo Alto Networks K2-Series pros

Cons

"Palo Alto has a feature called WildFire Analysis that is unavailable in FortiGate. WildFire is better than a sandbox because it can address zero-day threats and vulnerabilities. It can immediately identify zero-day threats from the cloud."

"There is room for improvement in being proactive about identifying and integrating new signatures."

"The solution lacks sufficient filtering."

"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."

"To improve Fortinet FortiGate, I think they need to improve the software and make updates more quickly, rather than taking a long time to update the software or firmware."

"They have to just improve its performance when we enable all UTM features. When you enable all the features, the performance of FortiGate, as well as of Sophos and SonicWall, goes down."

"It's one of the more expensive brands."

"I would like to have logs, monitoring, and reporting for a month without extra fees."

More Fortinet FortiGate cons

"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."

"The solution could be cheaper."

"There needs to be more security equipment for the solution."

"With the Huawei firewall, none of the features comes at the top. We found out later that customer support is really not good. For this firewall, because of our customers' routine, for example, every six months they'll do a penetration test to find weaknesses. So whenever they came up with VAPT reports, they are looking to Huawei for help. I think that's basically because it's a different culture. Chinese culture and our culture is different. They have always tried to help find some excuses or say some other things that cannot help you solve the problem immediately."

"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."

"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."

"I would like to see an antivirus solution included with the product."

"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."

More Huawei NGFW cons

"The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto Networks K2-Series because it's too complex, which requires L2 and above level of engineers."

"The licensing cost is a typical complaint with many clients. The solution is expensive."

"The reporting functionality in GlobalProtect needs to be improved."

"Palo Alto doesn't have extended visibility to the end point in their firewalls."

"They should implement the features that the other firewalls have."

"Sometimes there are interactions with support or the provider that are not ideal."

"Threat prevention could use improvement."

"The scalability of Palo Alto Networks K2-Series is good. It is good for larger environments over smaller ones."

More Palo Alto Networks K2-Series cons

Pricing and Cost Advice

"It's a year based license."

"We pay about $4,000 for a yearly license, and there aren't any additional fees."

"It's very competitive."

"The price of the license and warranty can be better because it is very expensive."

"Fortinet FortiGate is reasonably priced."

"We are on an annual license to use Fortinet FortiGate."

"The pricing is fair."

"I rate FortiGate Next Generation Firewall a five out of ten for pricing."

More Fortinet FortiGate pricing and cost advice

"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."

"Huawei is 30% cheaper than Arista."

"The solution isn't cheap. It's market price."

"Huawei is priced lower than most competitors."

"The pricing is cheap."

"Licensing fees are billed on an annual basis."

"The price of the license of this solution is high."

"I believe that we are entitled to a one-year extension on our licensing."

More Huawei NGFW pricing and cost advice

"It would be nice if they lowered their prices for small businesses."

"Palo Alto Networks K2-Series is an expensive solution, the price could be reduced. They are more expensive than some of their competitors."

"This solution is expensive compared to other, similar products."

"The price of the solution is expensive."

"Palo Alto firewalls are very expensive."

"We are on an annual license to use Palo Alto Networks K2-Series."

"When comparing Palo Alto Networks K2-Series with other solutions it is on the higher end of the price scale."

"It is an expensive solution."

More Palo Alto Networks K2-Series pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

869,566 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

14%

Manufacturing Company

10%

Financial Services Firm

University

Performing Arts

24%

Computer Software Company

16%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	6
Large Enterprise	7

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	8
Large Enterprise	13

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Huawei NGFW?

The solution's implementation is pretty easy.

See all answers

What is your experience regarding pricing and costs for Huawei NGFW?

The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.

See all answers

What needs improvement with Huawei NGFW?

Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks K2-Series?

The pricing for the Palo Alto Networks K2-Series solution is affordable and there are no complaints about the licensing.

See all answers

What needs improvement with Palo Alto Networks K2-Series?

The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto N...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Huawei NGFW

Compared 10% of the time

Palo Alto Networks NG Firewalls vs Huawei NGFW

Compared 6% of the time

H3C SecPath Firewalls vs Huawei NGFW

Compared 6% of the time

Check Point Quantum Force (NGFW) vs Huawei NGFW

Compared 5% of the time

Sophos XGS vs Huawei NGFW

Compared 5% of the time

More Huawei NGFW Competitors

Cisco Secure Firewall vs Palo Alto Networks K2-Series

Compared 52% of the time

Juniper SRX Series Firewall vs Palo Alto Networks K2-Series

Compared 48% of the time

More Palo Alto Networks K2-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

October 2025

Download Fortinet FortiGate product report

Buyer's Guide

Huawei NGFW

September 2025

Download Huawei NGFW product report

Buyer's Guide

Palo Alto Networks K2-Series

September 2025

Download Palo Alto Networks K2-Series product report

Also Known As

No data available

Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series

No data available

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Huawei's Next-Generation Firewall (NGFW) is a cutting-edge security solution designed to protect networks from advanced threats. With its advanced threat detection and prevention capabilities, the Huawei NGFW ensures the highest level of network security.

The product offers comprehensive security features, including intrusion prevention, application control, and URL filtering, to safeguard against a wide range of cyber threats. The NGFW also provides deep packet inspection and advanced threat intelligence, enabling real-time threat detection and response.

With its high-performance architecture, the Huawei NGFW delivers fast and efficient security without compromising network performance. It is easy to deploy and manage, thanks to its intuitive user interface and centralized management platform.

The NGFW also supports flexible deployment options, including virtualization and cloud integration, making it suitable for various network environments.

Huawei

Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

KMITL, Peking University

State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME

Buyer's Guide

Huawei NGFW vs. Palo Alto Networks K2-Series

September 2025

Free Report: Huawei NGFW vs. Palo Alto Networks K2-Series

Find out what your peers are saying about Huawei NGFW vs. Palo Alto Networks K2-Series and other solutions. Updated: September 2025.

DOWNLOAD NOW

869,566 professionals have used our research since 2012.

See our Huawei NGFW vs. Palo Alto Networks K2-Series report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.