No more typing reviews! Try our Samantha, our new voice AI agent.

Netgate pfSense Plus Firewall/VPN/Router vs Zscaler Cloud Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Netgate pfSense Plus Firewa...
Ranking in Firewalls
22nd
Average Rating
9.0
Reviews Sentiment
4.3
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Zscaler Cloud Firewall
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
No ranking in other categories
 

Featured Reviews

JK
IP Network Security Specialist at MTN Ghana
Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.
Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.
Jim Voige - PeerSpot reviewer
Site Manager at a consultancy with 11-50 employees
High availability routing has secured our network and delivers reliable support every day
One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it would run on. Right now, we're using Netgate's hardware, but I'm interested in knowing if there are other hardware options available, particularly heavier duty hardware, because the Supermicro 1537 version we have only has a single power supply, which is a shortcoming in an IT environment where dual power supplies are ideal. The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options. I'm familiar with the costs of Supermicro servers, and I believe Netgate charges a premium for their server hardware without enough upside to justify it. The pricing is not justified.
Carlos Snel - PeerSpot reviewer
Director at Aquila ICT Solutions
Has streamlined secure deployments across large enterprises while offering reliable protection and intuitive management
The centralized management console, also referred to as the Zscaler dashboard, impacts the ability of my customers to respond to security incidents significantly. I see it as user-friendly, and clients are really happy with using it, which motivates them to keep using Zscaler Cloud Firewall because they enjoy the GUI. It's very intuitive, making it easy to navigate alerts and incidents. My clients rarely have questions about where to find specific information once Zscaler Cloud Firewall is running. The interface speaks for itself, requiring little to no additional training, which is a major plus. Advanced threat protection features in Zscaler Cloud Firewall are practically the key component that every customer wants. Unfortunately, it is an option and not included in the basic package. Clients need to pay for the next higher bundle to access it, but practically all clients I have dealt with want this feature 100%. Regarding visibility, I can confirm that Zscaler Cloud Firewall indeed includes a feature for application layer visibility embedded in the service. It provides visibility into what you're doing, which is especially interesting nowadays when discussing AI tools, as companies do not want their employees to copy-paste sensitive information into AI systems. We have seen cases such as Samsung's chip design where sensitive info got exposed. The visibility of applications, including cloud applications and AI tools, is significant for compliance with data policies, and you can also run reports and alerts on it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"FortiGate tech support is very good because we get immediate support from them; for example, whenever we raise a ticket, we get an immediate response, and someone attends to help."
"Previously, my organization had the Checkpoint firewall solution, which has been replaced by the Fortinet Fortigate solution, which is cost effective and more manageable from a beginner's perspective."
"Fortigate can mitigate all attacks, it can handle a lot, it has a good set of UTM features, a good bandwidth shaping mechanism, and other features."
"In almost every case, I've experienced (or had customers experience) an ROI within 12 months, based on better performance for the same price or increased functionality for the same (or less) price."
"Fortinet FortiGate SWG's content is its most valuable feature."
"The best features of Fortinet FortiGate are the integration of SD-WAN capabilities with Fortinet Unified SASE."
"The solution is stable."
"Its stability is the most valuable."
"I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job."
"My experience with the product is that it is a stable and good product that is easy to use."
"Overall, the entire Netgate pfSense Plus Firewall_VPN_Router product has been reliable, though some of their smaller gear aimed at remote offices hasn't been cost-effective."
"We use pfSense and Netgate pfSense Plus Firewall/VPN/Router to establish a VPN tunnel between our client and our headquarters to transfer data between client and our equipment; it's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."
"It's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."
"They are more satisfied with Netgate pfSense Plus Firewall_VPN_Router in terms of its flexibility and customer support."
"The solution is scalable."
"Zscaler is the Rolls Royce for this kind of solution."
"Zscaler provides effective protection against various cyber threats ensuring a safe environment"
"The technical support from Zscaler was excellent."
"The centralized management console, also referred to as the Zscaler dashboard, impacts the ability of my customers to respond to security incidents significantly, and clients are really happy with using it, which motivates them to keep using Zscaler Cloud Firewall because they enjoy the GUI."
"Zscaler has a good foothold in the market and any new competitor will have to be cognizant of the fact that they will have to be affordable and provide all of the features Zscaler has while being good at threat analysis and filtering."
"It is a stable solution."
"The visibility and log availability offered are highly valued for troubleshooting purposes, and this is a key factor driving customer interest in the firewall module."
 

Cons

"There is room for improvement related to the logging and reporting aspect."
"The routing capability on the FortiGate devices has room for improvement."
"Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements. They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security."
"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."
"The solution lacks multi-language support."
"Performance on the box and technical support are areas where Fortinet FortiGate can be improved."
"FortiGate support could do some improvements on their IPv6 configuration. Right now it's still in the very early stage for utilizing in an enterprise level network environment."
"We were not able to build a full-mesh VPN; however, I am not sure if this was the fault of Fortinet FortiGate."
"The most significant drawback in recent years has been the cessation of firmware release downloads."
"They have to learn something more from FortiGate."
"I would assess the effectiveness of Netgate pfSense Plus Firewall_VPN_Router's traffic shaping as good, but I would give a six marks only for that compared to others because in the past few years, there has been a stop of improvement or lack of improvement showing in Netgate pfSense Plus Firewall_VPN_Router."
"The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options."
"The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control."
"The issue right now is probably that Zscaler is not providing web browser isolation. Another solution, Menlo, offers this. For one customer, we had to send traffic to Menlo to do the isolation for us. It was requested by the customer so that they could integrate any iframe. Zscaler needs to add this type of feature in their next release."
"Certain criteria need to be met if you want to scale this solution."
"When it comes to customer support, there is room for improvement in Zscaler's service."
"The issue right now is probably that Zscaler is not providing web browser isolation."
"There are some areas it could improve when it comes to blocking, we have to block some things manually. For example, if we block a top-level domain we have seen that the new IPs come through, the IPs are not blocked. There should be some more granular way of doing it. My only request is if you're blocking something at a top level, the sub-level sub-domains and all those other IPs should be blocked too automatically."
"Its technical support services could be better."
"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."
"There are some areas it could improve when it comes to blocking, we have to block some things manually."
 

Pricing and Cost Advice

"Fortinet FortiGate gives you most of the features in one license."
"The price of the license and warranty can be better because it is very expensive."
"Fortinet FortiGate as a less expensive solution than Palo Alto."
"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."
"It is too expensive for us. My organization is very small, and we have a total of ten users. We have three internal users and seven external users. The FortiGate 100D series is too expensive for renewing the licenses."
"It is cost-effective, and provides a good value for your money. The pricing, and license renewal, is very reasonable for us."
"If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it."
"Its pricing is competitive with other solutions."
Information not available
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."
"There are licensing costs, and I would not say that it's a cheap vendor."
"Zscaler is priced too high compared to the cost of Fortinet."
"There are different subscription models available."
"It comes at a significantly reduced cost while ensuring control and effectiveness."
"There is an annual license required for the use of the Zscaler Cloud Firewall."
"It is expensive for small businesses."
"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
902,495 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
38%
Comms Service Provider
10%
Healthcare Company
8%
Manufacturing Company
7%
Construction Company
12%
Manufacturing Company
12%
Financial Services Firm
9%
Marketing Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business369
Midsize Enterprise139
Large Enterprise195
No data available
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise13
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What needs improvement with Netgate pfSense Plus Firewall/VPN/Router?
Netgate pfSense Plus Firewall/VPN/Router regularly provides updates. One aspect they can improve is that most people ...
What is your primary use case for Netgate pfSense Plus Firewall/VPN/Router?
We work with Netgate products. We are a reseller and consultant. We have been working with Netgate and Fortinet for a...
What advice do you have for others considering Netgate pfSense Plus Firewall/VPN/Router?
For metrics to measure its impact, we do not measure in a formal way. We use bandwidth monitoring to check how effect...
Which lesser known firewall product has the best chance at unseating the market leaders?
Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...
What is your experience regarding pricing and costs for Zscaler Cloud Firewall?
My experience with pricing, setup cost, and licensing was fine.
What needs improvement with Zscaler Cloud Firewall?
I think Zscaler Cloud Firewall can be improved by adding more features. The needed improvements involve scalability, ...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
Zenith Live, Azure, Carlsberg Group
Find out what your peers are saying about Netgate pfSense Plus Firewall/VPN/Router vs. Zscaler Cloud Firewall and other solutions. Updated: June 2026.
902,495 professionals have used our research since 2012.