Netgate pfSense vs Palo Alto Networks CN-Series comparison

Netgate and Palo Alto Networks are both solutions in the Firewalls category. Netgate is ranked #2 with an average rating of 8.8, while Palo Alto Networks is ranked #35 with an average rating of 9.5. Netgate holds a 9.1% mindshare in Firewalls, compared to Palo Alto Networks’s 0.2% mindshare. Additionally, 93% of Netgate users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Netgate pfSense and Palo Alto Networks CN-Series based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Netgate pfSense vs. Palo Alto Networks CN-Series Report (Updated: March 2026).

Buyer's Guide

Netgate pfSense vs. Palo Alto Networks CN-Series

March 2026

Download the complete report

Helped 885,264 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of March 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.3%, down from 21.1% compared to the previous year. The mindshare of Netgate pfSense is 9.1%, down from 14.4% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.2%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	18.3%
Netgate pfSense	9.1%
Palo Alto Networks CN-Series	0.2%
Other	72.4%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Juan-Arias

Principal Cloud Architect - Software Engineer at a consultancy with 11-50 employees

Rapid VPN setup has connected offices in minutes and brings live insights for proactive issue control

What I appreciate the most about Netgate pfSense is the ease and straightforward nature of the platform. I can set up a new office in less than 10 minutes. The benefits of using Netgate pfSense are that I can set up VPNs in less than two to three minutes, and then just deploy the file across my networks, where everybody would be connected in less than an hour. The dashboards of Netgate pfSense bring all the necessary information that I need at a glance, and it is actually a live update every three to five seconds. It is spotless, and I have been able to catch issues before they hit operations.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiGate NGF is simple compared to other firewalls. It is easy to use and you don't need any training. Any person with basic firewall knowledge can use it."

"Fortinet FortiGate is quite popular in my region, so we are implementing Fortinet FortiGate firewalls. Fortinet FortiGate is the best option on the market when it comes to firewalls. It's straightforward to deploy and has good stability and performance."

"It's a user-friendly and stable firewall."

"The multi-threat protection feature helps us secure our organization."

"The solution is used in my company since its management is very comfortable"

"The performance of the solution is very good."

"We have a lot of experience with this solution and haven't had any issues; for repairs, the RMA process is also good, and we don't have any issues with the interface, customization, or integration, as this solution works well."

"The signature database and zero-day detection are Fortinet FortiGate's most valuable features."

More Fortinet FortiGate pros

"The most valuable features are the alerting and local monitoring."

"Creation of certificates and the facility to administer services are valuable features."

"pfSense is good for a company that is looking for a solution with a reasonable cost for implementation."

"It's powerful. You can get quite granular in setting up a highly topical application of pfSense, but if you want just basic protection, you can do that easily. It depends on your needs and how brave you are. You can go deep into the system and do some cool things with it or set up the bare protection you would get from any firewall."

"This solution has increased the level of security, given us more control, provided a deep insight into network traffic, and is a great VPN solution."

"The biggest benefit of pfSense is its ease of setup, especially for VPN — both the end-user VPN and site-to-site feed."

"I like pfSense's reports and how I can control access to the policies on the firewall."

"The GUI is easy to understand."

More Netgate pfSense pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

Cons

"The licensing could be improved as it is a little confusing and too granular for Fortinet FortiGate."

"We faced some technical issues on the Fortinet side."

"The UI/UX experience can be a little better."

"There could be more modifications."

"There is a lot of improvement needed with SSL-VPN."

"One of the problems I was having was with user mapping, and it is an issue for which I have escalated tickets with Fortinet support."

"The license renewal process, annual renewal price, and the web application firewall features should be improved."

"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."

More Fortinet FortiGate cons

"Also, simplifying the rules for the GeoIP. Making it simpler to understand would be an improvement."

"In an upcoming release, the reporting could be more user-friendly. For example, the reporting in graphs and charts for the host can be cumbersome."

"The integration could be improved."

"We are at the moment looking to use it as a proxy service so that we can limit what websites people go and view and that sort of thing. That's an area I've struggled with a little bit at the moment and it could be a bit easier to set up."

"We do not have a single pane of glass management."

"The solution could always work at being more secure. It's a good idea to continue to work on security features and capabilities in order to ensure they can keep clients safe."

"RadiusServer needs some work done."

"Proxy filters are not supported for the blocking of HTTPS sites."

More Netgate pfSense cons

"I'd like to see more IOPs features."

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

Pricing and Cost Advice

"The pricing is based on a licensing model for each IPS in your environment."

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."

"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."

"If you compare the price of Fortinet FortiGate IPS to other firewalls, Check Point is priced very high followed by Palo Alto and Sophos. Fortinet FortiGate IPS price is more reasonable."

"Other firewalls are more expensive than Fortinet FortiGate, such as the Azure firewall."

"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."

"Its price could be better."

"Our licensing costs are on a yearly basis."

More Fortinet FortiGate pricing and cost advice

"There are a few features not included, and when you have to use those features, you have to pay for them."

"I prefer the software licensing model."

"It is free. It is open source."

"Netgate pfSense is competitively priced."

"The price point is highly competitive."

"Netgate pfSense is fairly priced."

"It is economical (i.e., free)."

"PFSENSE turns out to be very economical, the license is free and for little money you get very good support"

More Netgate pfSense pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

885,264 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

13%

Computer Software Company

11%

Manufacturing Company

Educational Organization

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	361
Midsize Enterprise	135
Large Enterprise	190

By reviewers
Company Size	Count
Small Business	168
Midsize Enterprise	33
Large Enterprise	29

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

Help me find the best open source router

You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...

See all answers

How do I choose between Fortinet FortiGate and pfSense?

Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...

See all answers

What is the difference between PfSense and OPNsense?

Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 19% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 4% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

OPNsense vs Netgate pfSense

Compared 57% of the time

Sophos Firewall vs Netgate pfSense

Compared 5% of the time

Cisco Secure Firewall vs Netgate pfSense

Compared 2% of the time

Sophos UTM vs Netgate pfSense

Compared 2% of the time

KerioControl vs Netgate pfSense

Compared 2% of the time

More Netgate pfSense Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 26% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 25% of the time

Juniper SRX Series Firewall vs Palo Alto Networks CN-Series

Compared 11% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 10% of the time

Cisco Secure Firewall vs Palo Alto Networks CN-Series

Compared 9% of the time

More Palo Alto Networks CN-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

March 2026

Download Fortinet FortiGate product report

Buyer's Guide

Netgate pfSense

March 2026

Download Netgate pfSense product report

Buyer's Guide

Firewalls

March 2026

Download Palo Alto Networks CN-Series product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Netgate pfSense is an open-source firewall and router software known for scalability, cost-effectiveness, and community support. It includes customizable packages for varied network management needs, offering solid performance and straightforward management for diverse setups.

Netgate pfSense provides an impressive range of functionalities including firewall capabilities, VPN options, and extensive customization through packages. Its low resource usage and high availability make it viable for businesses of all sizes, especially when dealing with tailored network demands. Despite its strengths, users suggest improvements in ease of use, mobile compatibility, and support for plug-ins. Enhanced centralized management, better documentation, and additional security features are frequent requests.

What are the key features of Netgate pfSense?

Scalability: Suits any network size from small home setups to large enterprises.
Open-source: Offers transparency and flexibility, allowing for community-driven development.
Firewall Capabilities: Provides robust protection against unauthorized access.
VPN Options: Supports secure remote connectivity with various VPN protocols.
Customizable Packages: Allows users to personalize functionalities to fit network needs.
High Availability: Ensures continuous network operations with redundancy features.
Load Balancing: Distributes traffic efficiently across multiple paths or connections.
Traffic Shaping: Manages bandwidth allocation to optimize network performance.

What benefits should users consider in reviews?

Cost-effectiveness: Significant savings due to low operational costs and open-source nature.
Performance: Reliable service delivery with minimal hardware demands.
User-friendly Interface: Intuitive design that simplifies complex network management.
Community Support: Access to extensive community resources for troubleshooting and advice.
Comprehensive Documentation: Detailed guides and tutorials to facilitate installation and configuration.

In education and healthcare, Netgate pfSense is employed for secure connectivity and efficient traffic management, accommodating distinct demands of remote access and content filtering. Organizations in these sectors often utilize features such as load balancing and VPNs to maintain secure and reliable network operations while integrating with services like Active Directory for streamlined identity management. Small to medium-sized enterprises benefit from its affordability and robust functionality, making it a go-to choice for managed service environments requiring effective network security and control.

Netgate

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring

Information Not Available

Buyer's Guide

Netgate pfSense vs. Palo Alto Networks CN-Series

March 2026

Free Report: Netgate pfSense vs. Palo Alto Networks CN-Series

Find out what your peers are saying about Netgate pfSense vs. Palo Alto Networks CN-Series and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,264 professionals have used our research since 2012.

See our Netgate pfSense vs. Palo Alto Networks CN-Series report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.