Palo Alto Networks K2-Series vs Zscaler Cloud Firewall comparison

Palo Alto Networks K2-Series vs. Zscaler Cloud Firewall

Download the complete report

Helped 869,095 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.1%, up from 0.0% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.5%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
Zscaler Cloud Firewall	0.5%
Palo Alto Networks K2-Series	0.1%
Other	79.0%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Krishnakumar M

enterprise architect at a tech services company with 1-10 employees

One of the best tools for the prevention of evasive threats

There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.

Read full review

Carlos Snel

Director at Aquila ICT Solutions

Has streamlined secure deployments across large enterprises while offering reliable protection and intuitive management

The centralized management console, also referred to as the Zscaler dashboard, impacts the ability of my customers to respond to security incidents significantly. I see it as user-friendly, and clients are really happy with using it, which motivates them to keep using Zscaler Cloud Firewall because they enjoy the GUI. It's very intuitive, making it easy to navigate alerts and incidents. My clients rarely have questions about where to find specific information once Zscaler Cloud Firewall is running. The interface speaks for itself, requiring little to no additional training, which is a major plus. Advanced threat protection features in Zscaler Cloud Firewall are practically the key component that every customer wants. Unfortunately, it is an option and not included in the basic package. Clients need to pay for the next higher bundle to access it, but practically all clients I have dealt with want this feature 100%. Regarding visibility, I can confirm that Zscaler Cloud Firewall indeed includes a feature for application layer visibility embedded in the service. It provides visibility into what you're doing, which is especially interesting nowadays when discussing AI tools, as companies do not want their employees to copy-paste sensitive information into AI systems. We have seen cases such as Samsung's chip design where sensitive info got exposed. The visibility of applications, including cloud applications and AI tools, is significant for compliance with data policies, and you can also run reports and alerts on it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I really like the captive portal feature for our guest network. It has nice VLAN features in terms of separating our network. The anti-virus is also good."

"SD-WAN has had a positive impact by reducing the operational costs in terms of headcount and management."

"There is an easy process for configuring it, and it is straightforward to implement the device from scratch."

"I would advise others considering or evaluating the Fortinet FortiGate to buy it."

"I value it's IPS and application control solution."

"The threat prevention is the solution's most valuable aspect."

"The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with."

"FortiGate Next Generation Firewall has IBS/IPS systems"

More Fortinet FortiGate pros

"Mainly, it is very easy to understand, and the logs are very good."

"I have found that Palo Alto Networks K2-Series has the best security. They are more user-friendly, older firewalls used to have to be configured using the command-line interface, but in this solution, it can be done in the GUI."

"K2-Series' best features include its scalability, which is the best on the market."

"Prevention of evasive threats is one of the best tools I've encountered."

"The most valuable feature of Palo Alto Networks K2-Series is its management abilities. Additionally, the updates are very good."

"Palo Alto has better and finer controls than, say, Cisco or Check Point."

"The company is inventive and always adds a lot of great features."

"It is a stable solution."

More Palo Alto Networks K2-Series pros

"The visibility and log availability offered are highly valued for troubleshooting purposes, and this is a key factor driving customer interest in the firewall module."

"The solution is scalable."

"If malicious traffic attacks our on-premises servers, then it gets blocked by Zscaler Cloud Firewall."

"It provides in-depth visibility into your network, ensuring that traffic flowing into your organization, be it from offices or individual users, is effectively filtered and secured through multiple layers of protection."

"Zscaler provides effective protection against various cyber threats ensuring a safe environment"

"The product’s firewall and VPN package are fantastic compared to any other solution."

"The initial setup is straightforward."

"The technical support from Zscaler was excellent."

More Zscaler Cloud Firewall pros

Cons

"It does not have key authentication for admin access."

"There should be more testing before releasing software since it can be a little buggy sometimes when new features come out after updates."

"The solution lacks multi-language support."

"Two-way inspections are not possible in FortiGate."

"One of the weaknesses of the solution is something we noticed, especially after comparing the tool with SD-WAN features, since, unfortunately, in a massive scale size environment, the solution is not good. I"

"FortiOS is not simple."

"Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful."

"The area that Fortinet may improve is customer support. When you have an incident, situation, or open a case, the support is not as good as Cisco or other platforms I have tested."

More Fortinet FortiGate cons

"Threat prevention could use improvement. Not just in malware exploits and C2 traffic; enhancing web traffic protection would be a great upgrade."

"It is recommended that the Palo Alto Networks K2-Series be implemented step by step for the Panorama. Sometimes we can't overwrite the configurations because it fails."

"If we have issues, they take anywhere from two days to a week to respond. I even wrote to their CEO because there was no response. When it comes to support, this is the worst company."

"It would be really helpful to have dashboards that provide information on IOC blockings such as where and how many. It will also be good to know how many hashing files have been reported. It would also be nice to have easy access to this information. Otherwise, it's a painful, manual task."

"The solution's commitment time could be reduced as it often takes a lot of time to execute."

"Palo Alto has many other products. It would be nice for these products to be centralized under one tool"

"The scalability for on-premises version is limited as it depends on the model."

"The reporting functionality in GlobalProtect needs to be improved."

More Palo Alto Networks K2-Series cons

"It would be better if they improved their policy, package visibility, and flexibility while we're creating rules for inspection. It could also be cheaper or more things could be included in the basic package. In the next release, I would like better coverage in the Asia Pacific region and better quality of service."

"I don't have the visibility of a control dashboard or a network management system."

"It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing."

"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."

"When it comes to customer support, there is room for improvement in Zscaler's service."

"The issue right now is probably that Zscaler is not providing web browser isolation. Another solution, Menlo, offers this. For one customer, we had to send traffic to Menlo to do the isolation for us. It was requested by the customer so that they could integrate any iframe. Zscaler needs to add this type of feature in their next release."

"There are several areas for improvement. Firstly, the GUI is outdated, with noticeable lags and delays, especially when generating reports for past transactions."

"Because it's on cloud, it doesn't allow application of extra settings."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."

"It is quite affordable for our customers. There is a separate cost for IPS, antivirus, web filtering, and other features. They have a great choice of licenses. You can go for the license that you want, which is quite useful."

"The price of FortiGate is average and I would say that based on the top five products available on the market, it is in the affordable range."

"The solution requires a license annually, it is not a user license, you can have as many users as your want. I must renew the license regularly per device."

"It is affordable. Palo Alto is much more expensive than Fortinet."

"It is not a very costly product if you compare it with other products. The return on investment is also good. If you compare the return of investment and money that you are spending on this product with Palo Alto, Cisco, Check Point, and other solutions, the investment is very less. We are happy with this solution. The optional licenses are there, and you can choose which one you want and which one to avoid."

"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."

"The product is expensive compared to one of its competitors."

More Fortinet FortiGate pricing and cost advice

"It is an expensive solution."

"This solution is expensive compared to other, similar products."

"Pricing is a sensitive issue because the cost is high in this market."

"The price of the solution is expensive."

"We are on an annual license to use Palo Alto Networks K2-Series."

"Palo Alto Networks K2-Series is an expensive solution, the price could be reduced. They are more expensive than some of their competitors."

"This product is designed for large companies. The price would not be suitable for a small or medium size company."

"When comparing Palo Alto Networks K2-Series with other solutions it is on the higher end of the price scale."

More Palo Alto Networks K2-Series pricing and cost advice

"It is expensive for small businesses."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"It is not the most budget-friendly solution, but it's important to consider its overall value."

"It comes at a significantly reduced cost while ensuring control and effectiveness."

"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

"There are licensing costs, and I would not say that it's a cheap vendor."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

869,095 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Performing Arts

23%

Computer Software Company

16%

Manufacturing Company

Comms Service Provider

Computer Software Company

12%

Manufacturing Company

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	8
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	2
Large Enterprise	13

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

What is your experience regarding pricing and costs for Palo Alto Networks K2-Series?

The pricing for the Palo Alto Networks K2-Series solution is affordable and there are no complaints about the licensing.

What needs improvement with Palo Alto Networks K2-Series?

The graphical user interface is a little complex and difficult to manage. L1 engineers cannot work on the Palo Alto N...

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

Zscaler Cloud Firewall is quite expensive compared to competitors. However, it offered moderate value for money.

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Palo Alto Networks K2-Series

Compared 54% of the time

Juniper SRX Series Firewall vs Palo Alto Networks K2-Series

Compared 46% of the time

More Palo Alto Networks K2-Series Competitors

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 11% of the time

Azure Firewall vs Zscaler Cloud Firewall

Compared 11% of the time

Check Point Quantum Force (NGFW) vs Zscaler Cloud Firewall

Compared 10% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 8% of the time

Sangfor NGAF vs Zscaler Cloud Firewall

Compared 6% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Download Fortinet FortiGate product report

Fortinet FortiGate

October 2025

Palo Alto Networks K2-Series

Download Palo Alto Networks K2-Series product report

Zscaler Cloud Firewall

Download Zscaler Cloud Firewall product report

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.

Palo Alto Networks

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME

Zenith Live, Azure, Carlsberg Group

Palo Alto Networks K2-Series vs. Zscaler Cloud Firewall