We performed a comparison between Palo Alto Networks NG Firewalls and WatchGuard Firebox based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We use the filtering feature the most. It has filtering and inbuilt securities. We can create customized rules to define which users can access a particular type of site. We can create policies inside the firewall."
"Initial setup is easy to configure."
"The most valuable features are that it is very simple to configure and to manage."
"The ability to set up remote systems is the most valuable feature."
"The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point."
"It is easy to use and performs very well."
"All of the features of Fortinet FortiGate are useful and the security protection is good."
"It has improved our organization with control data."
"This solution not only provides better security than flat VLAN segments but allows easy movement through the lifecycle of the server."
"The initial setup process is quite easy."
"The first time I came across these firewalls, what surprised me the most was their web user interface. It is complete and gives you a lot of information. You can do 80% of the things related to your network and firewall through the web UI. In some of the other devices, the UI is not as complete. App-ID is also very valuable in customer networks. When you're seeing a lot of traffic in your network, you can see in your web UI which users have the applications that are consuming the most bandwidth. You have a broad context, which is very good."
"It has a solid network security with some robust tools. We can block unexpected attacks, especially zero-day attacks. Since they use the Pan-OS engine, they can collect attacks from all over the world and analyze them. They can then protect against zero-day attacks and unexpected attacks."
"Palo Alto NGFW provides a unified platform that natively integrates all security capabilities, which is very useful. This prevents us from having to go to a lot of different systems, and in some cases, many different systems in many different regions, because we are a global company with 60 remote offices around the world in 30 different countries. Its centralized platform is really what we look for in all services, whether it be security or otherwise."
"There are plenty of features available in this solution, such as attack blocker and spam blocker. Additionally, it is very robust and in-depth."
"The most valuable feature is the security provided by the ATP."
"The most valuable features are the power of the threat prevention and the WildFire service. Its strength comes from the huge number of sensors all over the world. The firewalls have a rich library of signatures."
"The security that is used for defending from the attacks is very good."
"The main reason we went with it was the security protocols. They were more robust on this device."
"The most valuable are the VPN and proxy features."
"The most valuable feature for small and medium businesses is the support for various protocol proxies."
"I like their management features a lot. Their System Manager server as well the System Manager software make managing them, and tracking changes, very easy and complete."
"The client is easy to use and stable"
"It protects me against malicious websites, as well as malicious downloads, as a perimeter anti-virus. I've also seen it blocking a lot of pings and different probes."
"The GUI is easy and intuitive."
"As far as wanting more scalability or things in the network diagram, it's going to cost you."
"The product does need better support in the cloud environment. It's not exactly cloud-native right now."
"There aren't really any negative aspects to discuss."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"We sometimes have issues with FortiGate's routing table in the latest firmware update. We had to downgrade the device because our customers complained about bugs."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"The renewal price and the availability could be improved."
"The reporting in Fortinet FortiGate could improve. Customers are having to purchase additional reporting components. When I have used the Sophos solution it is a complete solution, in Fortinet FortiGate you have to use additional tools to have the features needed."
"The analytics could be improved."
"There is a tradeoff between security and network performance, as security is always top-notch, but performance can sometimes lag and has room for improvement."
"Its price can be improved. It is expensive. Other vendors have pre-configured policies for the protection of web servers. Palo Alto has an official procedure for protecting the web servers. Many people prefer pre-configured policies, but for me, it is not an issue."
"We would like to see the external dynamic list for this solution improved. The current version does not automatically block malicious IP addresses, which would be very useful."
"I would like to see more integration."
"The cloud could be improved. I would like to have more visibility of the vulnerabilities of the network as well."
"The support could be improved."
"The only real drawback to this product is that it is expensive. But you get what you pay for and there is no way to put a price on top-notch security."
"I would like to see more training become available for us."
"I don't think I can get a full-blown DNS client from it. I've been trying to have DNS services. It has forwarding, but I don't get the services of a full DNS client. My main difficulty with it is that I can't run a complete service. I need NTP. I need DNS. I need DHCP for my domain, but I only get forwarding. As far as I can tell, I don't get caching and the kinds of reporting and registration needed to host a DNS for a domain. I have to have a separate solution for that."
"Make WatchGuard Firebox capable of integrating with third-party vendors like FireMon, Splunk, Tenable, etc."
"WatchGuard Firebox could improve the speed of updates, such as new features or improvements. However, they are frequently improving the solution in many areas, such as geo-locations, definitions, and web blocking."
"Due to their lack of investment in marketing, channel development, and certifications, WatchGuard faces challenges in gaining visibility and market share, especially in regions like Pakistan."
"The only downside is that it is missing an API, that you can use to easily collect information from it."
"The performance of the solution's processor needs to be faster."
"The UI is not as user-friendly as the model that I had used before, which was from Check Point. The design of the Firebox UI is restricted and needs an experienced network guy to understand the format and settings."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Palo Alto Networks NG Firewalls is ranked 6th in Firewalls with 163 reviews while WatchGuard Firebox is ranked 13th in Firewalls with 79 reviews. Palo Alto Networks NG Firewalls is rated 8.6, while WatchGuard Firebox is rated 8.4. The top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". On the other hand, the top reviewer of WatchGuard Firebox writes "Offers a streamlined deployment, intuitive interface and robust security features". Palo Alto Networks NG Firewalls is most compared with Check Point NGFW, Azure Firewall, Meraki MX, Sophos XG and Palo Alto Networks VM-Series, whereas WatchGuard Firebox is most compared with Netgate pfSense, Sophos XG, OPNsense and SonicWall TZ. See our Palo Alto Networks NG Firewalls vs. WatchGuard Firebox report.
See our list of best Firewalls vendors and best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.