Palo Alto Networks CN-Series vs WatchGuard Firebox comparison

Palo Alto Networks and WatchGuard are both solutions in the Firewalls category. Palo Alto Networks is ranked #33 with an average rating of 9.5, while WatchGuard is ranked #13 with an average rating of 7.6. Palo Alto Networks holds a 0.1% mindshare in Firewalls, compared to WatchGuard’s 2.8% mindshare. Additionally, 100% of Palo Alto Networks users are willing to recommend the solution, compared to 95% of WatchGuard users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 5, 2025

WatchGuard Firebox and Palo Alto Networks CN-Series compete in the cybersecurity market. While Palo Alto Networks CN-Series is often viewed as superior due to its advanced features, WatchGuard Firebox excels in pricing and customer service.

Features: WatchGuard Firebox provides comprehensive security with intrusion prevention, web filtering, and numerous VPN options. Palo Alto Networks CN-Series includes machine learning and advanced threat prevention with cutting-edge threat intelligence.

Ease of Deployment and Customer Service: WatchGuard Firebox is known for straightforward deployment and strong support services. Palo Alto Networks CN-Series requires more complex initial deployment but benefits from excellent documentation and a knowledgeable support team.

Pricing and ROI: WatchGuard Firebox offers competitive pricing, promising quicker ROI through lower initial costs. Palo Alto Networks CN-Series involves higher initial costs but provides long-term value with premium security features, making the investment worthwhile for many.

To learn more, read our detailed Palo Alto Networks CN-Series vs. WatchGuard Firebox Report (Updated: September 2025).

Buyer's Guide

Palo Alto Networks CN-Series vs. WatchGuard Firebox

September 2025

Download the complete report

Helped 869,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.1%, up from 0.0% compared to the previous year. The mindshare of WatchGuard Firebox is 2.8%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
WatchGuard Firebox	2.8%
Palo Alto Networks CN-Series	0.1%
Other	76.7%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

ScottEastman

Project Consultant at SEVERN HOSPICE LIMITED

Reduces the risks of sending data where it shouldn't be going

We use the solution to ensure that no data breach, such as credit card details and national insurance numbers, leaves the company. However, we have to allow some information to go through because we send a lot of information to the National Healthcare Service If we don't want specific data sent…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product's most valuable features are SD-WAN and the integration of WiFi and switches."

"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."

"One of the best features of Fortinet FortiGate is that it's a very powerful equipment that gives many security features in a single box with good performance, and the user interface is friendly to use and configure."

"I like that they have given me a solution at a fair price."

"It's very easy to configure."

"What I like the most is the configuration and that it's simple, and straightforward to maintain."

"The SD-WAN feature is the most valuable. This feature evolved from link load balancing. It has helped us in terms of our uptime and privatizing applications whenever we experience an outage. The SD-WAN feature has been a plus for us. Two-factor authentication has allowed us to add more users in terms of remote working. We have two-factor authentication for remote workers to authenticate them before they get on the network."

"The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, the Fortinet FortiGate does not require a controller for the access points."

More Fortinet FortiGate pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

"Some of the most valuable features of the Firebox include web blocking, application control, protection against brute force attacks, load balancing, SD-WAN, and VPN support. These features help us manage and secure our network efficiently."

"The most effective and helpful features of WatchGuard Firebox, especially when purchased with the full suite of applications, are its bundled applications and subscriptions for comprehensive protection against various threats."

"The product's usability is good. It is straightforward and simple. One of the benefits is that it is easy to navigate and intuitive."

"The tool provides automated responses."

"[A] valuable feature would be the branch office. We have five offices throughout the United States, and it coordinates the connections of those offices."

"Two of the functionalities we use most are the traffic monitoring and the full panel dashboard. Those are two things that are very useful for us... In addition, it provides us with layered security. It allows us to determine what types of access, to which networks, we want to allow or deny."

"From my experience with their customer service team, I would say that they seem quite knowledgeable and fairly quick to respond."

"The most valuable are the VPN and proxy features."

More WatchGuard Firebox pros

Cons

"Improvement is needed in the Web Filter quotas to restrict users with allocated quotas."

"Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements. They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security."

"They should consider making some improvements regarding the pricing."

"Monitoring and reporting could be better."

"I face difficulties integrating Fortinet FortiGate with Active Directory."

"With the standard support subscription, if the device goes down, the customer has to first ship the box, and then Fortinet sends the replacement. With the higher support, the customer has to ship the device after they have the replacement. It would be better for customers to get immediate replacements even with a standard subscription."

"There is an area for improvement in vulnerability management."

"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."

More Fortinet FortiGate cons

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"I'd like to see more IOPs features."

"It doesn't offer the best protection and it's incompatible with a lot of China's websites. It makes a lot of mistakes when it is detecting items as it's not recognizing items correctly."

"I believe there is room for improvement in policies, with the potential to enhance the margins further."

"It's very hard to get information from their website, for exactly what I need to do. Sometimes I end up having to open a lot of support tickets... It's a navigational issue which makes it hard to find what I'm looking for and it's just so broad."

"I would like to see faster automatation."

"The interface is not the best."

"The solution needs to improve the interface. I'm not able to easily find things using it."

"I think one area for improvement in this solution would be enhancing communication with tools like Active Directory. This would make the tool easier to integrate and effective for users."

"The UI and web view aren't nice."

More WatchGuard Firebox cons

Pricing and Cost Advice

"Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not."

"Price-wise, it's at a good price point for our market."

"It is less expensive than a Cisco solution."

"The Fortinet FortiGate security features cost approximately $1,500 a year. The firewall itself doesn't have a recurring cost. It's the security features on top of that that you pay for."

"When comparing this solution to others, I would rate it a ten out of ten in terms of pricing. However, the issue of requiring a separate license for redundancy is a drawback, and I would rate it a nine out of ten."

"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."

"It is affordable. Palo Alto is much more expensive than Fortinet."

"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."

More Fortinet FortiGate pricing and cost advice

Information not available

"Its cost is okay. It is not too expensive, not too low. I would rate it a nine out of ten in terms of pricing."

"WatchGuard Data Loss Prevention's pricing is expensive. I rate it a seven out of ten."

"The pricing was in line with everyone else; maybe slightly higher."

"The two larger devices are about $1,000 each and the smaller ones are about $500 or $600 each... It's cheaper and you have more control because it's self-managed."

"It's in the medium range. Its price is pretty good considering the functions and add-ons that are used."

"Despite the fact that there is always room for improvement, the current pricing of the solution is still lower compared to its competitors."

"It is an entry-level product, so the price is cheap."

"The solution's most valuable feature is its pricing."

More WatchGuard Firebox pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

869,760 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

No data available

Computer Software Company

14%

Comms Service Provider

11%

Manufacturing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

No data available

By reviewers
Company Size	Count
Small Business	91
Midsize Enterprise	25
Large Enterprise	15

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

What is your primary use case for WatchGuard Firebox?

We are providing our services to all WatchGuard customers in the region.

See all answers

What is your primary use case for WatchGuard Firebox?

We just use it as a secondary WiFi device. We're a small office and we needed to set up a WiFi device for a few of ou...

See all answers

What is your primary use case for WatchGuard Firebox?

We're a hospital and we use it for developing our incoming and outgoing policies, and we also use it for VPN.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 100% of the time

More Palo Alto Networks CN-Series Competitors

OPNsense vs WatchGuard Firebox

Compared 7% of the time

SonicWall TZ vs WatchGuard Firebox

Compared 5% of the time

Netgate pfSense vs WatchGuard Firebox

Compared 5% of the time

Sophos XGS vs WatchGuard Firebox

Compared 4% of the time

SonicWall NSa vs WatchGuard Firebox

Compared 4% of the time

More WatchGuard Firebox Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

October 2025

Download Fortinet FortiGate product report

Buyer's Guide

Firewalls

September 2025

Download Palo Alto Networks CN-Series product report

Buyer's Guide

WatchGuard Firebox

September 2025

Download WatchGuard Firebox product report

Also Known As

No data available

WatchGuard Threat Detection and Response, WatchGuard Application Control, WatchGuard Data Loss Prevention, WatchGuard Gateway AntiVirus, WatchGuard Intrusion Prevention Service

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

WatchGuard Firebox is a high-performance firewall known for its ease of setup, offering robust security with layered protection and centralized management capabilities.

WatchGuard Firebox stands out for its intuitive management and high throughput, addressing security needs with features like VPN, web filtering, and threat detection. Its centralized control and reporting abilities, along with Active Directory integration, make it popular among varied organizations. Its user-friendly interface and ongoing updates enhance usability and reliability. However, there's a call for better cloud-based administration, scalability, and improved integration with third-party vendors.

What are the key features of WatchGuard Firebox?

Ease of Setup: Quick and straightforward installation process.
GUI: User-friendly graphical interface for simplified navigation.
VPN Features: Secure and efficient virtual private network management.
Web Filtering: Advanced filtering for safer browsing experiences.
Threat Detection: Proactive monitoring and detection of cyber threats.

What benefits or ROI should be evaluated?

Centralized Control: Streamlined management from a single point.
High Throughput: Efficient data handling and processing capacity.
Stable Performance: Consistent and reliable operational functionality.
Active Directory Integration: Seamless connection with user directories.
Customer Service: Strong support service for customer inquiries.

WatchGuard Firebox is implemented across industries to secure internet gateways and protect data in multi-site businesses. Its applications span from Unified Threat Management (UTM) and intrusion prevention to compliance support in business environments requiring secure connectivity through VPNs.

WatchGuard

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence

Buyer's Guide

Palo Alto Networks CN-Series vs. WatchGuard Firebox

September 2025

Free Report: Palo Alto Networks CN-Series vs. WatchGuard Firebox

Find out what your peers are saying about Palo Alto Networks CN-Series vs. WatchGuard Firebox and other solutions. Updated: September 2025.

DOWNLOAD NOW

869,760 professionals have used our research since 2012.

See our Palo Alto Networks CN-Series vs. WatchGuard Firebox report.

See our list of best Firewalls vendors and best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.