We performed a comparison between Palo Alto Networks K2-Series and Palo Alto Networks NG Firewalls based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It's very fast and easy to configure."
"It is quite easy to handle."
"The most valuable feature is the ease of use."
"The most valuable features of Fortinet FortiGate are the ease of use and there are several operating systems that can include the hardware capacities. In the newer releases, the resources were more useful because they were included in the operating system."
"We purchased Fortinet because of the pricing, its functionality, because it met our requirements, and the total cost of ownership over five years was quite reasonable. In the market, Fortinet is rated quite well."
"Fortinet FortiGate is a scalable solution."
"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."
"The reporting you receive out of this appliance is excellent. You will not need an external management system."
"The most valuable features are the intuitive user interface, ease of use, and reporting."
"The scalability of the product is quite high."
"It is a stable solution."
"The IPS system is the best in the field."
"The most valuable feature of Palo Alto Networks K2-Series is the performance which is above their competitors. The throughput they have delivered is good. When we used other solutions they failed the deployment when we were using different rules. They have a theory perform performance light and performance degradation. However, Palo Alto Networks K2-Series never fails in that scenario."
"The company is inventive and always adds a lot of great features."
"Palo Alto firewalls are scalable enough. We have about 110 employees in our company, and we are about to expand to 130."
"Palo Alto's App-ID is what differentiates it from other competitors."
"They are regularly releasing new versions that include more integration with third-party services."
"Overall, it is a good solution. It is stable. We use URL filtering, which is useful for blocking undesired URLs."
"The most important part of this solution is its reliability, as it just works without any fancy features."
"The graphical interface is easy to troubleshoot because it has a drill-down sequence. It is easy to monitor traffic."
"The user experience is good and the configuration is very easy."
"The DNS sync code in your filtering is the most valuable feature of the Palo Alto Networks NG Firewalls."
"The most important thing is that it's really user-friendly. I have almost stopped using the CLI because I like the graphical interface. You can do whatever you want on a single screen, including all the configuration and implementation, using Panorama. You don't have to switch from one place to another."
"I like all the threat alerts and WildFire. I also like scanning because everything that comes into our network via customers is scanned. We're an electric company, so every one of the bills is scanned and emailed in and out of our network."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."
"Difficult to add or define, and not that easy to configure and manage."
"We would like to have the ability to disable some of the security functionalities."
"With the addition of some features, it is possible that FortiGate can be used in all verticals."
"The sniffing packets or packet captures, can be simplified and improved because it's a little confusing."
"One of the problems I was having was with user mapping, and it is an issue for which I have escalated tickets with Fortinet support."
"I would like Fortinet to add more automation to FortiGate."
"The password function of the solution could be improved. Additionally, some of the processes take too long to complete."
"I'd like to see more data protection on the system."
"The ease of management and configuration should be improved."
"The product should get frequent updates allowing us to add new signatures."
"The licensing cost is a typical complaint with many clients. The solution is expensive."
"I would like to see the threat intelligence capability integrated with other vendors such as Cisco and Forcepoint."
"In the past, we've had trouble with Palo Alto's application filtering not getting it right. I would not be recommending layer 7 application filtering yet."
"Higher levels of support are excellent but new users may need additional options."
"Could also use better customer support."
"Palo Alto Networks NG Firewalls do not provide a unified platform that natively integrates all security capabilities."
"In my opinion, the training provided is satisfactory, but there is certainly room for improvement. It would be great to have more comprehensive training at a lower cost, or even for free."
"The only area I can see for improvement is that Palo Alto should do more marketing."
"The whole performance takes a long time. It takes a long time to configure."
"The bugs can be improved."
"Overall it is good. It is reliable and easy to understand. However, the monitoring feature could be improved."
"We would like to see improvement in the web interface for this solution, so that it can handle updates without manual intervention to put the data in order."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Palo Alto Networks K2-Series is ranked 27th in Firewalls with 29 reviews while Palo Alto Networks NG Firewalls is ranked 6th in Firewalls with 161 reviews. Palo Alto Networks K2-Series is rated 8.4, while Palo Alto Networks NG Firewalls is rated 8.6. The top reviewer of Palo Alto Networks K2-Series writes "Easy to implement and manage, and the documentation is good". On the other hand, the top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". Palo Alto Networks K2-Series is most compared with , whereas Palo Alto Networks NG Firewalls is most compared with Check Point NGFW, Azure Firewall, Meraki MX, Sophos XG and Netgate pfSense. See our Palo Alto Networks K2-Series vs. Palo Alto Networks NG Firewalls report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most.
PA is good at app control, web filtering and such like, they have always been top of the pile there. The GUI is very good, and their product is very user-focused.
Fortinet is good for scalability and predictable high throughput (ASICs in the hardware), and useful things like authentication flexibility, CLI config (if you have any networking/Cisco people, they always seem to prefer CLI over GUI) and have better OT features, maybe relevant to your manufacturing use?
Fortinet seem to have a broader integration offering with their security fabric than PA do, plus they can do Fortinet-based wifi, switching, etc. Depends if you are prepared to go all-in with a single vendor.
Hi,
Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner)
Fortinet:
Have higher throughput; which comes with competitive rates
Wide range of models to select to meet your requirement, without spending heavliy
Outstanding customer support and very active customer care team
Easly available skilled resources from the channel for deployment and post-implementation support
Regards
Abhilash
Hello. The question is what you are going to have as a result of application