Try our new research platform with insights from 80,000+ expert users

Huawei NGFW vs Zscaler Cloud Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
390
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Huawei NGFW
Ranking in Firewalls
27th
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Unified Threat Management (UTM) (12th)
Zscaler Cloud Firewall
Ranking in Firewalls
25th
Average Rating
8.2
Reviews Sentiment
8.0
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.2%, up from 17.7% compared to the previous year. The mindshare of Huawei NGFW is 1.0%, up from 0.5% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.4%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Haseeb Mehdi - PeerSpot reviewer
Provides very little difference between NGFW throughput and switching, but needs WAF included
The solution's performance is good with IPSec. IPSec's capacity for Huawei Firewalls was much better than most of the vendors. What happens in Fortinet is when we see the overall switching capacity and the next-generation firewall throughput, there is a big gap. Maybe the overall switching capacity is 20 gigs, but the NGFW throughput is only two gigs. With Huawei, this difference is very little. Many of the features are implemented in the hardware. When we enable it, the firewall capacity does not go down by a big margin. This is something we look forward to, which is better. Huawei also has better core density, so we see a lot of 100G ports and 10G ports available with us. The solution is easy and convenient, and we don't need extra switches to deploy the solution in the network.
Bhaskar Rao - PeerSpot reviewer
Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues
The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The customization potential is quite impressive."
"Fortinet FortiGate is easy to use."
"The inspection and web security features are most valuable."
"It is pretty straightforward to manage and has robust capabilities. I appreciate that Fortinet FortiGate can be a central controller for other Fortinet products, such as switches and access points."
"The best features of Fortinet FortiGate are that it does the job effectively and protects our environment."
"Consolidated our network environment at all locations, but mainly at our datacenter."
"The most valuable feature of this solution is the analytics."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"The solution's implementation is pretty easy."
"I like that the initial setup is straighforward. It's also a scalable solution."
"The security is good. It's as effective as anything else on the market."
"The setup is quite easy."
"We have found the initial setup to be straightforward."
"The stability is fine. I would rate the stability a nine out of ten."
"Huawei was able to assist us in the installation of their product. The installation was very fast."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The solution is scalable."
"Since it is really customizable, I can use it and avoid enabling access to the full network."
"Once you have Zscaler running you have access to configure it however you want."
"The visibility and log availability offered are highly valued for troubleshooting purposes, and this is a key factor driving customer interest in the firewall module."
"It helps a lot of companies to reduce their downtime. Also, It helps businesses in terms of being secured and protected from any threats."
"The scalability is okay. We have around 2200 people using this solution."
"Zscaler provides effective protection against various cyber threats ensuring a safe environment"
"If malicious traffic attacks our on-premises servers, then it gets blocked by Zscaler Cloud Firewall."
 

Cons

"I believe there is room for improvement in machine learning and AI in Fortinet FortiGate. I would like to see more automation regarding AI and machine learning in Fortinet FortiGate."
"There is a lot of improvement needed with SSL-VPN."
"The firmware updates are sometimes not stable. The stability issues can vary, sometimes happening once a month or quarterly. New firmware updates can occasionally introduce bugs, causing some policies to fail. We then have to raise a ticket, and Fortinet usually provides a fix within a few days."
"At the moment, if you don't integrate any third-party solution with a simple Fortinet FortiGate box, the box would not function as expected for superb protection."
"The pricing could always be better."
"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files.​"
"Fortinet FortiGate could be improved in terms of user friendliness at the policy level and assigning URL based and keyword based features."
"I would rate Fortinet support a six out of ten. The immediate response is not that good, particularly when raising a critical or P1 ticket; they lag in the immediate response."
"One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had."
"Huawei also need to improve spam techniques and add a web application firewall. Currently, Huawei does not have a built-in web application firewall (WAF) like Fortinet does."
"I would like to see an antivirus solution included with the product."
"Huawei should improve their threat intelligence."
"The solution isn't cheap. It's market price."
"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."
"Huawei NGFW should have better reporting and a dashboard for the visibility of traffic."
"There needs to be more security equipment for the solution."
"Instead of the standard license, they should certainly provide customers with the visibility to access and view the logs."
"Because it's on cloud, it doesn't allow application of extra settings."
"Certain criteria need to be met if you want to scale this solution."
"Data Leak Prevention is only for web filtering and there is no protection for email."
"Pricing is a challenge."
"Apart from the issues associated with the product in areas like the DC performance issues and DC failover, Zscaler Cloud Firewall's IP should not have a proxy IP."
"There are some areas it could improve when it comes to blocking, we have to block some things manually. For example, if we block a top-level domain we have seen that the new IPs come through, the IPs are not blocked. There should be some more granular way of doing it. My only request is if you're blocking something at a top level, the sub-level sub-domains and all those other IPs should be blocked too automatically."
"There are several areas for improvement. Firstly, the GUI is outdated, with noticeable lags and delays, especially when generating reports for past transactions."
 

Pricing and Cost Advice

"It is expensive. You need to pay for the subscription every year, which is very expensive. The subscription includes technical support and hardware exchange in case of failure."
"The pricing for this solution is good."
"Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees."
"I think the price of Fortinet FortiGate is very reasonable."
"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."
"For medium and enterprise organizations, FortiGate is more affordable."
"It is an inexpensive solution."
"On a scale of one being cheap and ten being expensive, I rate the tool's price as an eight."
"Huawei is 30% cheaper than Arista."
"The solution isn't cheap. It's market price."
"Huawei is priced lower than most competitors."
"I believe that we are entitled to a one-year extension on our licensing."
"The solution is inexpensive."
"When you compare the price with other products, it's quite cost-effective. But the problem is always after, let's say, two years or three years later because they are not able to provide updates or patches very quickly."
"Licensing fees are billed on an annual basis."
"The price of the license of this solution is high."
"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."
"Zscaler is priced too high compared to the cost of Fortinet."
"There are licensing costs, and I would not say that it's a cheap vendor."
"It comes at a significantly reduced cost while ensuring control and effectiveness."
"It is expensive for small businesses."
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."
"There is an annual license required for the use of the Zscaler Cloud Firewall."
"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
862,514 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
8%
Manufacturing Company
7%
Educational Organization
7%
Computer Software Company
14%
Manufacturing Company
10%
Financial Services Firm
9%
Educational Organization
7%
Computer Software Company
13%
Financial Services Firm
11%
Manufacturing Company
9%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Huawei NGFW?
The solution's implementation is pretty easy.
What is your experience regarding pricing and costs for Huawei NGFW?
The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.
What needs improvement with Huawei NGFW?
Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...
Which lesser known firewall product has the best chance at unseating the market leaders?
Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...
What do you like most about Zscaler Cloud Firewall?
The product’s firewall and VPN package are fantastic compared to any other solution.
What is your experience regarding pricing and costs for Zscaler Cloud Firewall?
Zscaler Cloud Firewall is quite expensive compared to competitors. However, it offered moderate value for money.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
KMITL, Peking University
Zenith Live, Azure, Carlsberg Group
Find out what your peers are saying about Huawei NGFW vs. Zscaler Cloud Firewall and other solutions. Updated: July 2025.
862,514 professionals have used our research since 2012.