Try our new research platform with insights from 80,000+ expert users

OPNsense vs Palo Alto Networks PA-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.7
Organizations benefit financially and operationally with Fortinet FortiGate, citing savings, increased productivity, better security, and centralized management.
Sentiment score
4.4
OPNsense offers quick ROI, annual savings, improved network protection, efficiency, but faces challenges like market disruptions and cyber threats.
Sentiment score
7.5
Palo Alto Networks PA-Series offers cost-effective ROI with advanced security features, strong performance, and long-term user satisfaction.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
 

Customer Service

Sentiment score
6.4
Fortinet FortiGate's customer support is praised for knowledgeable staff but criticized for inconsistent responsiveness and varying service quality.
Sentiment score
5.0
Users often solve issues using online resources, valuing community help, but suggest OPNsense centralize and improve support options.
Sentiment score
7.1
Customers praise Palo Alto Networks PA-Series support for quality and speed, though initial response times could improve.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
OPNsense is open source, so you have to rely on the community for customer support.
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
I am happy with the technical support from Palo Alto.
 

Scalability Issues

Sentiment score
7.0
Fortinet FortiGate is scalable, adaptable for business needs, but requires advanced planning to avoid hardware and licensing issues.
Sentiment score
7.4
OPNsense is scalable and adaptable, supporting small to large deployments with flexibility in hardware upgrades and virtual machines.
Sentiment score
7.3
PA-Series offers scalable solutions but some models need upgrades; choosing the right model is crucial for adaptability.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Aside from these aspects, it demonstrated good scalability.
It supports routing, VPN setups, and traffic monitoring with additional packages like Snort and Suricata.
OPNsense is an extremely scalable solution.
The solution can handle more than ten thousand users in my organization.
There are no restrictions in scalability.
 

Stability Issues

Sentiment score
7.5
Fortinet FortiGate is praised for its stability and performance, though some models face issues with high traffic.
Sentiment score
8.6
Users find OPNsense generally stable, though VPNs, updates, and hardware compatibility can occasionally cause issues.
Sentiment score
8.5
Palo Alto Networks PA-Series is praised for its robust stability, reliability, and effective performance, though frequent updates are noted.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
 

Room For Improvement

FortiGate needs improvements in interface stability, user experience, reporting, VPNs, licensing costs, documentation, performance, and support.
OPNsense's challenges include interface usability, integration issues, and the need for improved VPN, analytics, and virtualization support.
Palo Alto Networks PA-Series needs enhanced security, usability, support, integration, and pricing flexibility to address current user challenges.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
For high availability, it's crucial to have a method in place where a designated component oversees the entire process.
Improved guidance on package usage and integration beyond relying on external tutorials or community support would be beneficial.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
For the next release of the Palo Alto Networks PA-Series firewall, I would like to see logs monitoring included.
 

Setup Cost

Fortinet FortiGate is valued for cost-effectiveness, clear licensing, but renewal costs can vary compared to competitors.
OPNsense is a cost-effective, open-source firewall solution with free core features, ideal for budget-conscious enterprises.
Palo Alto Networks PA-Series is costly but valued for robust performance and features, appealing to enterprise customers despite higher prices.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It is about 20% cheaper.
The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost.
It is a free solution, and when you compare it to alternatives like FortiGate, which is quite powerful but also costly, the value becomes evident.
I would rate the pricing a nine out of ten, especially considering the availability of a free community edition.
It is free.
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
The price of Palo Alto Networks PA-Series is expensive.
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to 3 year renewals.
 

Valuable Features

Fortinet FortiGate is valued for its high-performance security features, ease of use, scalability, and cost-effectiveness.
OPNsense is appreciated for its flexibility, user-friendly interface, robust security features, and extensive customization options through open-source access.
Palo Alto Networks PA-Series offers robust security with advanced threat detection, user-friendly interface, and seamless integration enhancing functionality.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
The most valuable feature of Palo Alto Networks PA-Series is that it is highly customizable.
The best features of the Palo Alto Networks PA-Series firewall include Global protector VPN workings.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
411
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
OPNsense
Ranking in Firewalls
3rd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
43
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
13th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
33
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.1%, up from 18.4% compared to the previous year. The mindshare of OPNsense is 11.1%, down from 15.9% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate20.1%
OPNsense11.1%
Palo Alto Networks PA-Series0.8%
Other68.0%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Moutaz Sheikh Alard - PeerSpot reviewer
Has helped simulate enterprise security setups and strengthens network segmentation practices
For my capstone, I use OPNsense for my project and its broader benefits for enterprise and cybersecurity context. OPNsense is an open source based firewall and routing platform. It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost. This platform has a modular design, a clean web-based GUI, and frequent updates that prioritize security and usability. It competes with commercial firewalls such as Cisco ASA, FortiGate, and Palo Alto, but stands out because it's community-driven, cost-effective, and transparent. I find OPNsense's feature of acting as a central firewall and gateway most valuable, providing robust point segmentation between the internal network and DMZs in my capstone project, intrusion detection to monitor malicious traffic, VPN services for secure remote access, and logging and monitoring for compliance and auditing. This allows me to simulate a real-world enterprise environment on a smaller scale, demonstrating both security hardening and network efficiency. OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing. The flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers. The security-first design for IDS/IPS integration helps me showcase modern defense-in-depth strategies. The user-friendly management through the web GUI makes it possible to manage complex firewall rules clearly, which is critical when documenting and presenting a capstone. Scalability is also an advantage. Although my project is lab-based, OPNsense can scale into production deployments in SMBs and enterprise.
Bilal  Mustafa - PeerSpot reviewer
Manage security with leading firewall features while navigating AWS cloud challenges
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges. It functions very well in data centers. Its effectiveness is highly dependent on budget and approach. Moreover, the return on investment is calculated according to my organization’s sizing and has never been an issue.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
867,349 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
16%
Comms Service Provider
16%
University
6%
Manufacturing Company
6%
Computer Software Company
13%
Manufacturing Company
10%
Comms Service Provider
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business261
Midsize Enterprise99
Large Enterprise143
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise4
Large Enterprise8
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise5
Large Enterprise14
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about OPNsense?
What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control.
What is your experience regarding pricing and costs for OPNsense?
The pricing is competitive when compared to vendors like Palo and FortiNet.
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to ...
What needs improvement with Palo Alto Networks PA-Series?
I do not have any challenges or areas for improvement with Palo Alto Networks PA-Series. There are no AI integrations...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
1. Deciso B.V. 2. iXsystems, Inc.  3. EuroBSDCon  4. Netgate  5. Claranet  6. Voleatech  7. Open Systems AG  8. Securebit AG  9. Proxmox Server Solutions GmbH  10. AVM Computersysteme Vertriebs GmbH  Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.
Information Not Available
Find out what your peers are saying about OPNsense vs. Palo Alto Networks PA-Series and other solutions. Updated: September 2025.
867,349 professionals have used our research since 2012.