No more typing reviews! Try our Samantha, our new voice AI agent.

IPFire vs Palo Alto Networks PA-Series comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IPFire
Ranking in Firewalls
29th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
17th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
37
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Firewalls category, the mindshare of IPFire is 0.9%, down from 2.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 1.1%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks PA-Series1.1%
IPFire0.9%
Other98.0%
Firewalls
 

Featured Reviews

AE
Chief Technology Officer at Agileware Limited
Firewall deployment has secured mission-critical public apps and simplifies Linux-based management
The best features IPFire offers include its very intuitive nature because, even though it has a Linux back-end, in terms of configuration, it has a very rich GUI interface. The GUI and configuration features of IPFire have made my work easier and more efficient because their positioning and the sequence with which I follow is easy. In terms of all the processes, what you need to do at first and the next thing that you need to do is clear. The GUI is well arranged in sequential order, so you can follow that from whatever you want to do until you get the target objective. IPFire includes features with a very robust and rich community that is very much valid in terms of content. IPFire has positively impacted my organization by giving us some mileage. At least, a lot of organizations now know that we have a solution that can deliver the same value.
Rohit Ghorpade - PeerSpot reviewer
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
Identity-based perimeter control has improved security and supports reliable remote access
Currently, we are working with vendors such as Palo Alto Networks PA-Series, Cisco, Check Point, and Citrix. Palo Alto Networks PA-Series is a better firewall. Deep packet inspection and threat prevention basically comply with whatever traffic is incoming and outgoing through the firewall. I do not think anything improvement is required. The thing is that Palo Alto Networks PA-Series works mostly on a license-based model. If you want to utilize any feature, you have to purchase the license. For example, URL filtering requires a license purchase. It simplifies the implementation because LDAP server profile can be integrated. Basically, that simplifies the implementation of access rule or security policy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"IPFire has prevented any kind of hacking and enables us to comply with customer requirements."
"What I appreciate the most about IPFire is that it is simple, and I learned it when I was in school, so that is really something simple and I know it, so I continue to use it."
"I would rate the stability as ten out of ten for IPFire."
"Regarding IPFire's AI capabilities, I think they are quite focused; in all the deployments I have done, I have not had any incidents or breaches."
"It has its own logging system. You can go to monitoring and check the logs to see if a connection is getting blocked. You can use multiple types of logs to check if a file or a port is getting blocked or if there are any TCP resets from the source or destination. It's easy to troubleshoot with the monitoring and logging it provides."
"It is scalable. But that depends on what model you are using."
"Palo Alto Networks PA-Series is basically integrated with LDAP to fetch the identity of the users and we provide access based on the identity."
"I rate the stability as ten out of ten."
"App-ID is a really good feature."
"It functions very well in data centers."
"A valuable feature that we can consider is the deployment time, which is significantly reduced. It is almost 90% faster compared to other solutions."
"The solution is used for security and IoT security."
 

Cons

"The graphical interface could be much better."
"I would rate IPFire 8 out of 10 because I do not think there is any solution anywhere in the world that is 100 percent efficient."
"If anything, a graphical interface would be what I want."
"Accessing the internet was a bit complicated."
"Palo Alto should integrate artificial intelligence for security purposes in the background for well-known threats and new risks coming to the market."
"Palo Alto Networks PA-Series is expensive. We would like to see additional threat hunting features."
"There seem to be some issues with TAC (Technical Assistance Center) or Palo Alto support. Anytime you open a case, a level one engineer joins, and then you have to escalate it to level two or three. The support system has changed in the past few years, and that's something they need to look into."
"There are constant updates for the operating system. It is a nice thing also, but it has its own disadvantages. Continuous updates are there. The users face issues like, how often do I need to update that? Within a period of five months, I'm updating it two or three times. It gives them a feeling that they are not confident about their product and have to update it so frequently."
"Because they have a separate license for VPNs and do not provide any type of quick support, which is why I have rated it nine instead of a perfect score."
"The web interface is slow."
"Currently, they are not protected with any data security when they work from home or outside the network. They surf the Internet directly and should implement a proxy or firewall to monitor the data between the endpoint and the internet."
"Pricing flexibility could be an aspect worth considering, as it has been a concern for some of our clients."
 

Pricing and Cost Advice

Information not available
"Palo Alto is more expensive than FortiGate."
"The pricing is fair."
"The tool's pricing was reasonable when we bought the product. We pay around 60,000 dollars per year."
"Price-wise, Palo Alto offers high-price products."
"The solution's pricing is high compared to that of Cisco and Fortinet."
"The product is offered to users at high prices compared to the pricing model of the other vendors in the market."
"The pricing is a bit on the higher side."
"Compared to other vendors, Palo Alto Networks PA-Series is expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
921,665 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
University
9%
Computer Software Company
9%
Outsourcing Company
7%
Outsourcing Company
13%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise7
Large Enterprise17
 

Questions from the Community

What needs improvement with IPFire?
To be honest, I have not made the updates of IPFire since a long time, so I continue to use the 2017 asset. I do not know if today there is something I can add on it. I am just comfortable with it ...
What is your primary use case for IPFire?
I am still using IPFire, but at home, not at work. I have my own servers at home, and I have my test infrastructure here. I have my VPN, my DMZ, and my LAN actually on IPFire. I connect to my home ...
What advice do you have for others considering IPFire?
I would give IPFire a good eight on a scale from one to ten. This review reflects my overall rating of eight.
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
If we look at the features, then the price is good, but they do charge for the GlobalProtect VPNs. Overall, the pricing is good, but if they included GlobalProtect, it would be more valuable.
What needs improvement with Palo Alto Networks PA-Series?
There is room for improvement in Palo Alto Networks PA-Series in the areas where they can minimize applications and implement features that can be useful for us.
What is your primary use case for Palo Alto Networks PA-Series?
I am using Palo Alto Networks PA-Series to ensure protection and cybersecurity by preventing and implementing network security features to safeguard networks against threats and malware. I have to ...
 

Overview

 

Sample Customers

1. Siemens 2. IBM 3. Cisco 4. Dell 5. HP 6. Intel 7. Oracle 8. Google 9. Microsoft 10. Amazon 11. Apple 12. Facebook 13. Twitter 14. Netflix 15. Adobe 16. SAP 17. VMware 18. Juniper Networks 19. Ericsson 20. Nokia 21. AT&T 22. Verizon 23. T-Mobile 24. Vodafone 25. Orange 26. Deutsche Telekom 27. British Telecom 28. Comcast 29. Time Warner 30. Sony 31. Samsung 32. LG
Information Not Available
Find out what your peers are saying about IPFire vs. Palo Alto Networks PA-Series and other solutions. Updated: November 2026.
921,665 professionals have used our research since 2012.