Try our new research platform with insights from 80,000+ expert users

Netgate pfSense vs Palo Alto Networks VM-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
5.5
Netgate pfSense provides high ROI by reducing hardware and licensing costs, enhancing reliability, and lowering support and maintenance expenses.
Sentiment score
5.7
Palo Alto Networks VM-Series delivers strong ROI through enhanced security, rapid deployment, and significant time savings despite high pricing.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
If they can save their data from attackers then it would save them at least two days of not working plus the cost of recovery, which would be much more than the cost of the system and maintenance.
CEO at In.sist d.o.o.
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
Network Engineer at a media company with 51-200 employees
In four years of using it, that payment of 189 dollars per year has already paid off.
L2 Systems Administrator at a comms service provider with 201-500 employees
Customers can see data within a week, indicating a quick return on investment.
Senior Manager Technical Security at Hitachi Systems, Ltd.
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
7.9
Netgate pfSense users often rely on forums, yet paid support is praised for its responsiveness and problem-solving expertise.
Sentiment score
7.5
Customers appreciate Palo Alto Networks VM-Series support for responsiveness and expertise, despite occasional delays and high premium service costs.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
They are highly responsive.
Network Administrator at a healthcare company with 51-200 employees
I couldn't imagine having better support.
Director of IT at Cutting Edge Hair Salon RSS
The support quality could be improved.
Senior Manager Technical Security at Hitachi Systems, Ltd.
Resolving issues promptly.
Head of Sales at Omgea Exim Ltd
They are responsive and provide high-quality assistance.
Cyber security consultant at L&T Technology Services
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
6.5
Netgate pfSense offers exceptional scalability and performance, efficiently managing various environments with seamless hardware integration and virtualization.
Sentiment score
7.4
Palo Alto Networks VM-Series is scalable, easy to deploy, and suits businesses with positive feedback on flexibility and growth.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
CTO at Vigon Business Solutions Limited
I don't think Netgate pfSense can offer much scalability for big enterprises.
Director at a tech vendor with 5,001-10,000 employees
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
IT Manager at a healthcare company with 11-50 employees
They are easy to upgrade, and with credit licensing, they scale effectively according to demand.
Security Technical Lead at a tech services company with 11-50 employees
The solution is scalable and can easily handle an increase in the number of users.
Cyber security consultant at L&T Technology Services
It is easy to use with an excellent graphical user interface and extensive documentation, which contributes to its high scalability.
Senior Security Consultant at Netsecurity.no
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.0
Netgate pfSense is highly stable and reliable, with user-reported issues typically tied to hardware or outdated versions.
Sentiment score
8.2
Palo Alto Networks VM-Series is highly regarded for stability, reliable performance, and consistent uptime, despite minor navigation delays.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
I rate the solution's stability a ten out of ten.
Infrastructure and integration Architect at CommunityForce
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
Technical Sales Specialist at a tech vendor with 10,001+ employees
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
Partner and Owner at Free Range Geeks
Hardware is generally very stable.
Security Technical Lead at a tech services company with 11-50 employees
I have not experienced any major problems or downtime.
Senior IT Infrastructure Specialist at contemi
Perfection is unlikely as the dynamic nature of traffic and constant changes can result in occasional bugs despite regular updates.
Senior Security Consultant at Netsecurity.no
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
Netgate pfSense users seek improvements in interface, management, features, reporting, and third-party integration for enhanced usability.
Palo Alto Networks VM-Series needs UI updates, better platform integration, scalability, user-friendliness, and improved documentation for broader efficiency.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
There is some trade-off between having a certain level of security and maintaining acceptable performance.
CEO at In.sist d.o.o.
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
Information Security Manager at a tech services company with 11-50 employees
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
Co-Owner at Steffi and Tim
Integration with CSIRT across all use levels would make it easier for administrators to stay updated on the blocked entities without manual intervention.
Cyber security consultant at L&T Technology Services
Most customers go for partner-enabled support, which involves multiple layers, leading to delays.
Security Technical Lead at a tech services company with 11-50 employees
Having those features missing, we are not proposing Palo Alto Networks VM-Series to all customers.
Sr. Network Engineer at a tech services company with 1-10 employees
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
Netgate pfSense offers enterprises cost-effective, open-source security with free software and optional, competitively-priced support subscriptions.
Palo Alto VM-Series is costly but reliable, with complex licensing; AWS Marketplace offers scalable subscription options.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The price of setup is approximately €500 to €800, which also includes the initial monitoring.
CEO at In.sist d.o.o.
The product is free of cost.
Director of Information Technology at MASFinancials
Opting for twenty-four-seven support significantly increases the price, reaching around ten thousand to thirteen hundred dollars.
IT Manager at Gandia Consulting Group
Palo Alto is expensive in terms of pricing, particularly when comparing features to cost.
Security Technical Lead at a tech services company with 11-50 employees
The cost involves purchasing through a vendor, which might mark up due to the supply chain.
Senior IT Infrastructure Specialist at contemi
Pricing for Palo Alto Networks is higher than other OEMs, but considering the robustness and features, it gains customer trust.
Head of Sales at Omgea Exim Ltd
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
Netgate pfSense is a cost-effective, scalable, customizable firewall offering security, VPNs, traffic management, and strong community support.
The VM-Series provides scalable, flexible security with advanced threat management, visibility, and integration features, enhancing network protection.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
With pfSense, network configurations adhere to standard practices, facilitating troubleshooting without the need for complex overlays or policies.
IT Manager at Gandia Consulting Group
The price point is the most valuable aspect of the solution.
Director at InfoVale Ltd.
I like the tool's flexibility in the sense that you do not have to buy an appliance. You can put it on your own hardware, and it can be very simplistic hardware with simple configurations.
Information Security Manager at a tech services company with 11-50 employees
We use these tools to prevent all known and unknown threats using Palo Alto Networks' Wildfire and other data filtering tools to gather information, analyze traffic, manage malicious traffic, and offer visibility, control, and attack prevention.
Senior Manager Technical Security at Hitachi Systems, Ltd.
Palo Alto's robust threat intelligence supports new updates, and I can open cases directly with their Threat Intelligence team.
Security Technical Lead at a tech services company with 11-50 employees
The DNS security significantly enhances security through visibility and detection, allowing control over crucial traffic like DNS, which is often exploited by ransomware.
Senior Security Consultant at Netsecurity.no
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Netgate pfSense
Ranking in Firewalls
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
220
Ranking in other categories
No ranking in other categories
Palo Alto Networks VM-Series
Ranking in Firewalls
13th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
66
Ranking in other categories
Advanced Threat Protection (ATP) (11th)
 

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.7%, down from 20.5% compared to the previous year. The mindshare of Netgate pfSense is 9.8%, down from 15.9% compared to the previous year. The mindshare of Palo Alto Networks VM-Series is 1.3%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.7%
Netgate pfSense9.8%
Palo Alto Networks VM-Series1.3%
Other70.2%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
MC
Chief information security officer at Center for Information Management, Inc.
Provides visibility that enables users to make data-driven decisions
pfSense flexibility overall is pretty good. They are making some really big improvements. That said, they're a long way from enterprise. They advertise things that they don't have. I've worked for probably 30% of the Corporate 100, and they won't tolerate the high availability and it being as buggy as it is. The fact that if you configure it incorrectly without any visual indications that it's not done in the way Netscape does, then it will not only break the firewall, it will break both firewalls. The only way you can even try to recover is by getting new images from Netgate. You have to open up a tech support case, download the image for, then reimage the firewalls, and reapply your configuration. The fact that you can completely brick your firewalls just by having a configuration that they allow, and they don't even don't tell you there's a problem until they both go down. That's totally unacceptable in an enterprise. As a standalone firewall, they're excellent. As an enterprise, we're not touching it with a ten-foot pole. It’s difficult to configure and use add-on features. It's really easy to add them. On the website, they say “Oh, we do this, this, and this.” However, they do a lot through third-party add-ons. The problem is, if there's any problems at all, the very first thing they want you to do is disable those add-ons. So that's not really supporting anything. There are two ways that firewalls are viewed: talking to the firewall and talking through the firewall. If you're talking about “to the firewall,” then it's a very robust, very secure firewall. However, it doesn't have things that they claim helps with protecting data, most of it's third party. If you want to do all these things that are typically associated with enterprise-level firewalls, most of them are done by a third party. It's not actually cooked into their product. I like their OSPF. I wish it was more current. The only bugs that are in the OSPF are ones that have been known about for almost two years. Maybe they're they're victims of their own success. Their growth curve has outstripped their technical support and has outstripped their ability to develop. They're just growing so fast. They're trying to do everything. Updates from third parties can take too long. For example, if there's a problem with a package and no available update is available, you have to wait. Since it's via a third party, there's no definable schedule, as the update needs to come from a third-party open organization with no financial interest to make the process faster. Sometimes, there's more finger-pointing than resolution. In, OSPF, they give you lots of information. However, when it comes to hardcore troubleshooting of different routing zones or things like that, then you had to keep dropping down to the CLI in order to get it. And that's where your experience can change quite a bit. If you're running OSPF on Cumulus or some of the other big routing or switching solutions, then they're running much newer versions of it, which are all bug-patched and fixed. However, pfSense is running on an operating system that is not theirs. They don't necessarily have full control over it. When you get a real enterprise firewall, and when you hook up the redundancy, you expect redundancy to work and be predictable. And never ever will the redundancy crash your system. If you don't create the interfaces in the exact same order on both firewalls every single time, if so much as one interface is out of order, if the command line is different because of the way the operating system works, you will slowly corrupt your configuration to the point where it'll break.
AV
Cyber security consultant at L&T Technology Services
Enhance cybersecurity for large enterprises using advanced threat management
An improvement could be the integration of security intelligence with Palo Alto cloud via APIs. This would allow IOCs, domains, and hash values to be automatically entered, reducing manual entry. Integration with CSIRT across all use levels would make it easier for administrators to stay updated on the blocked entities without manual intervention.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
879,986 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
15%
Comms Service Provider
13%
Manufacturing Company
6%
University
6%
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
10%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business168
Midsize Enterprise33
Large Enterprise29
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise17
Large Enterprise24
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Warren Rogers Associates
Find out what your peers are saying about Netgate pfSense vs. Palo Alto Networks VM-Series and other solutions. Updated: December 2025.
879,986 professionals have used our research since 2012.