We performed a comparison between Juniper vSRX and Palo Alto Networks NG Firewalls based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature of this solution is Quota."
"In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable."
"It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything."
"It is very flexible to use."
"It performs very well."
"The SD-WAN feature is the most valuable. This feature evolved from link load balancing. It has helped us in terms of our uptime and privatizing applications whenever we experience an outage. The SD-WAN feature has been a plus for us. Two-factor authentication has allowed us to add more users in terms of remote working. We have two-factor authentication for remote workers to authenticate them before they get on the network."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"Its stability is the most valuable."
"The technical support has been good."
"This solution works well. Their switches and firewall are good."
"The product’s quality and performance are better than other vendors."
"The authentication part is seamless and easy for people."
"The initial setup was very straightforward. There was no problem. The initial deployment took about one hour."
"The tool's most valuable features are routing features and service quality."
"It's much faster to deploy a power source. If you need to deploy a firewall in the cloud of software, it's much easier and much faster than deploying the office firewall in a rush."
"The dashboard, customization, API, and pricing are good."
"It's very important that Palo Alto NG Firewalls embed machine learning into the core of the firewall to provide inline, real-time attack prevention. That increases our security posture... The firewall is able to capture it and flag it and it is easy to mitigate as soon as we see something like that happening, to secure the environment more, in real time."
"The most valuable feature is the security provided by the ATP."
"The application IDs, application controls, URL filtering, visibility, monitoring, and reporting are the most valuable features."
"Some of the valuable features in this solution are traffic monitoring, GUI functionality, and it very easy to troubleshoot if there is any problem that happens."
"The solution is user-friendly. It's secure and easy to understand your network visibility, control the network, and prevent attacks."
"I like the architecture because it separates the management plan process and the data plan process."
"The interface is very nice. We generally like the UI the product offers."
"The solution's most valuable feature is the robust firewall, which we can also use as a UTM device."
"Fortinet doesn't provide multiple virtual firewalls which would facilitate end users and customers."
"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."
"Fortinet FortiGate is not very easy to use. The navigation could be improved to make it easier to use."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"Fortinet needs to overhaul its documentation."
"The logs need to be better. They need to be more visible and easier to access."
"I would like Fortinet to add more automation to FortiGate."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"Juniper vSRX is expensive."
"The pricing still needs some improvement."
"The solution can be improved by allowing automatic updates for the OS devices."
"The solution's GUI needs improvement."
"They could provide support for cloud deployments."
"The reporting can be improved."
"The GUI really needs a lot of work, and it has got worse with successive version updates."
"We experienced some technical issues during implementation"
"The cost of the device is very high."
"The pricing could be improved upon."
"The VPN connectors should be better. We had some challenges in terms of the VPN with Palo Alto Networks NG Firewall, and that's one of the main reasons why we moved to Sophos. Its load handling can also be improved. There were challenges when traffic was high. During peak business hours, it did not function very well. There was a lot of slowness, and the users used to complain, especially when they were connecting from outside. We even reported this to the support team. Their support should also be improved. Technical support was a bit of a concern while using this solution. We didn't get very good support from the Palo Alto team."
"The configuration part could be improved. It's very difficult to configure. It doesn't have a user-friendly interface. You have to know Palo Alto deeply to use it."
"In terms of what could be improved, comparatively the price is very high. That would be the one thing."
"The level of control and granularity in terms of rule customization could be enhanced. However, compared to our previous solution, Palo Alto provides much better drill-down capabilities."
"When there was change from IPv4 to IPv6, some of the firewalls still didn't support IPv6. In North America, we have seen most customers are using IPv6, as they are getting the IPv6 IPs from their ISPs. Sometimes, when they go through the firewall, it denies the traffic."
"When you delete and add a new rule, because of the one hundred rule limit, if the new rule has an ID that is greater than one hundred, even though you have fewer than that, it will not work."
More Palo Alto Networks NG Firewalls Pricing and Cost Advice →
Juniper vSRX is ranked 27th in Firewalls with 33 reviews while Palo Alto Networks NG Firewalls is ranked 6th in Firewalls with 164 reviews. Juniper vSRX is rated 7.8, while Palo Alto Networks NG Firewalls is rated 8.6. The top reviewer of Juniper vSRX writes "Fast with good usability and fairly scalable". On the other hand, the top reviewer of Palo Alto Networks NG Firewalls writes "We get reports back from WildFire on a minute-by-minute basis". Juniper vSRX is most compared with Juniper SRX Series Firewall, Azure Firewall, Meraki MX and Cisco Secure Firewall, whereas Palo Alto Networks NG Firewalls is most compared with Check Point NGFW, Azure Firewall, Meraki MX, Sophos XG and Netgate pfSense. See our Juniper vSRX vs. Palo Alto Networks NG Firewalls report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.