Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks Advanced Threat Prevention vs WatchGuard Firebox comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.9
Fortinet FortiGate offers strong security, cost efficiency, and easy integration, saving organizations up to 30% on data costs.
Sentiment score
5.7
Palo Alto Networks Advanced Threat Prevention offers financial benefits and high user satisfaction despite its cost, boosting revenues, especially in Italy.
Sentiment score
7.0
WatchGuard Firebox boosts security, reduces admin costs, and increases productivity with efficient threat management and reliable VPN solutions.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
It offers insights into security threats, despite the inability to quantify its impact in numbers.
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is generally effective, but some users report delays and issues with complex problem resolution and communication.
Sentiment score
5.9
Palo Alto Networks' support is praised for expertise but faces inconsistent response times and communication challenges with third-party facilitation.
Sentiment score
6.2
Users praise WatchGuard Firebox's responsive, knowledgeable support, though some note delays due to time differences.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
I rate technical support from Palo Alto as eight out of ten.
I have proof of this rating - when I escalate a case, I receive a reply from TAC support after two days.
Overall, I find the technical support from Palo Alto Networks quite good, although getting a hold of the TAC can be challenging and sometimes requires long phone calls.
On a scale of one to 10, I would rate the technical support of the WatchGuard Firebox a 10.
Finally, we connected with someone, and I would rate their support as eight or nine out of ten once we were able to speak with them.
The technical support is good.
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate efficiently scales for SMEs, though hardware upgrades can be challenging, with virtual deployments offering flexibility.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is scalable, adaptable, and efficient, though cost may constrain its broad deployment.
Sentiment score
7.0
WatchGuard Firebox offers strong scalability for diverse needs, though selecting the appropriate model is crucial for optimal performance.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Palo Alto Networks Advanced Threat Prevention is scalable and works well wherever enforcement points exist.
The user interface and features compared to newer firewalls are not up to the mark, which includes functionalities such as filtering, web filtering, threat protection, user identity, and UTM features that need improvement.
If we're going for more concurrent users, we need to change the entire box.
I find the WatchGuard Firebox scalable, as it's easy to change configurations from this product to another one.
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its dependable stability, minimal downtime, and robust performance, especially with regular firmware updates.
Sentiment score
7.7
Palo Alto Networks Advanced Threat Prevention is praised for its superior stability and performance, though requires careful version selection.
Sentiment score
7.9
WatchGuard Firebox is praised for stability and reliability, requiring minimal maintenance and quick resolutions for occasional hardware issues.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
Proper sizing of the firewall models ensures that the system does not experience crippling performance issues.
There are issues with traffic hitting the firewall, which could indicate performance problems related to throughput.
 

Room For Improvement

Users seek improvements in FortiGate's performance, web interface, reporting, documentation, licensing, and training resources.
Palo Alto Networks needs improvements in email filtering, setup ease, user experience, support services, and enhanced security features.
WatchGuard Firebox users seek a user-friendly interface, improved integrations, clearer reporting, better support, and enhanced threat detection features.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations.
The behavioral detection capabilities could be expanded to address all threats at the perimeter, reducing the reliance on endpoint detection and response systems.
The cost for renewal after three years is 75% of the hardware cost, which is a significant problem.
When implementing a rule using a group of IPs, it is not possible to do that directly.
It is also difficult to diagnose issues if any devices get compromised; for example, if someone hacks our system, it becomes hard to trace who made changes or accessed the firewall.
 

Setup Cost

Fortinet FortiGate offers robust features at a competitive price but can be costly, especially with licenses; long-term pricing negotiation advised.
Palo Alto Networks Advanced Threat Prevention is costly but valued for strong threat detection, with pricing challenging for smaller businesses.
WatchGuard Firebox offers cost-effective pricing and discounts, making it attractive to enterprises seeking affordable security solutions.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to competitors like Cisco AMP and FortiGate firewalls.
When we tried to renew the Palo Alto license, the cost was beyond any reasonable range.
It's expensive us here.
I have faced challenges with the WatchGuard Firebox regarding price since we work with customers who use the Stormshield product, which is less expensive and French-made.
 

Valuable Features

Fortinet FortiGate provides robust security, seamless integration, user-friendly interface, and cost-effective advanced threat management for diverse network environments.
Palo Alto Networks excels in threat prevention with features like sandboxing, machine learning, and user-friendly design, enhancing efficiency.
WatchGuard Firebox provides user-friendly interface, robust security features, and cloud support for efficient multi-site management and enhanced protection.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
As traditional signature-based mechanisms become less effective due to the evolving nature of attacks, this solution's focus on behavioral analysis is crucial.
We are satisfied with the analytic capabilities of Palo Alto Networks Advanced Threat Prevention, especially the reporting features available in the Palo Alto portal in terms of their application visibility interface, which is very good for us to get visibility on all critical applications and the associated users, as well as the risks associated with every category of traffic.
The Firebox offers valuable features such as network security, URL filtering, UTM features, intrusion prevention and detection, and authentication.
Basically, we have received a good return on investment.
I utilize AI within the WatchGuard Firebox, as we use the interconnection with threat syncs, and AI is implemented.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Intrusion Detection and Prevention Software (IDPS)
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
574
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (2nd), Unified Threat Management (UTM) (1st)
Palo Alto Networks Advanced...
Ranking in Intrusion Detection and Prevention Software (IDPS)
6th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
29
Ranking in other categories
No ranking in other categories
WatchGuard Firebox
Ranking in Intrusion Detection and Prevention Software (IDPS)
4th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
126
Ranking in other categories
Data Loss Prevention (DLP) (11th), Firewalls (13th), Anti-Malware Tools (10th), Endpoint Detection and Response (EDR) (20th), Application Control (6th), Unified Threat Management (UTM) (4th)
 

Mindshare comparison

As of October 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Fortinet FortiGate is 16.6%, down from 19.4% compared to the previous year. The mindshare of Palo Alto Networks Advanced Threat Prevention is 5.6%, up from 5.1% compared to the previous year. The mindshare of WatchGuard Firebox is 8.4%, down from 12.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate16.6%
WatchGuard Firebox8.4%
Palo Alto Networks Advanced Threat Prevention5.6%
Other69.4%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Partha Dash - PeerSpot reviewer
Advanced protection enables us to confidently secure against evolving threats
Palo Alto Networks can improve Advanced Threat Prevention by catering to the growing adoption of AI and agentic tooling. The Threat Protection modules should have the necessary intelligence to protect against those types of threats, as AI will be there to do a human job; this is an evolving area. From an Advanced Threat Protection perspective, the technology associated with Palo Alto Networks, such as their sandboxing environment, is quite good. However, Palo Alto needs to focus on how to bring that technology to end users and how easy it is to use, especially in a hybrid environment where users work from various locations. While Palo Alto excels in certain setups, they need to improve the user experience in distributed working conditions.
Syed Pasha - PeerSpot reviewer
Makes defining policies simpler but lacks performance and modern features
WatchGuard Firebox is only deployed in one location within my customer's organization, and at the other locations, we are using Meraki and FortiGate. We plan to replace WatchGuard Firebox soon. My impression of the spam blocking capabilities of WatchGuard is not very favorable, as I don't think it is very capable. I haven't noticed effective web ratings or IPS signatures, which may be due to managing an older OS; I'm not certain about the performance of the newer versions. I am not aware of whether the transition to faster ports on WatchGuard Firebox supports maintaining productivity levels during peak usage times. Based on my experience, I would rate WatchGuard Firebox as five out of ten overall.
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
872,029 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
Government
8%
Computer Software Company
14%
Comms Service Provider
10%
Manufacturing Company
7%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business350
Midsize Enterprise130
Large Enterprise187
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise4
Large Enterprise14
By reviewers
Company SizeCount
Small Business92
Midsize Enterprise25
Large Enterprise15
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...
What is your experience regarding pricing and costs for Palo Alto Networks Threat Prevention?
Palo Alto Networks Advanced Threat Prevention requires an add-on license and is considered expensive compared to comp...
What is your primary use case for WatchGuard Firebox?
We are providing our services to all WatchGuard customers in the region.
What is your primary use case for WatchGuard Firebox?
We just use it as a secondary WiFi device. We're a small office and we needed to set up a WiFi device for a few of ou...
What is your primary use case for WatchGuard Firebox?
We're a hospital and we use it for developing our incoming and outgoing policies, and we also use it for VPN.
 

Also Known As

No data available
No data available
WatchGuard Threat Detection and Response, WatchGuard Application Control, WatchGuard Data Loss Prevention, WatchGuard Gateway AntiVirus, WatchGuard Intrusion Prevention Service
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
University of Arkansas, JBG SMITH, SkiStar AB, TRI-AD, Temple University, Telkom Indonesia
Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence
Find out what your peers are saying about Palo Alto Networks Advanced Threat Prevention vs. WatchGuard Firebox and other solutions. Updated: September 2025.
872,029 professionals have used our research since 2012.