Fortinet FortiGate vs Netgate pfSense comparison

Cancel
You must select at least 2 products to compare!
Fortinet Logo
123,063 views|89,961 comparisons
Netgate Logo
145,326 views|123,931 comparisons
Comparison Buyer's Guide
Executive Summary
Updated on Apr 4, 2024

Fortinet FortiGate and Netgate pfSense are firewall solutions. FortiGate is a commercial product with a focus on advanced security features and ease of use, making it ideal for businesses of all sizes. pfSense, on the other hand, is an open-source firewall known for its flexibility, customization, and cost-effectiveness, popular among tech-savvy users and small to medium businesses.

What are the valuable features of FortiGate and pfSense?

  • Security: FortiGate boasts a comprehensive security suite with features like Intrusion Prevention System (IPS), application control, web filtering, and sandboxing. pfSense offers similar functionalities but may require additional configuration for optimal protection.
  • Scalability: Both solutions offer scalability, but FortiGate caters to a wider range of needs, from small offices to large enterprises.
  • Management: FortiGate offers a user-friendly web interface and intuitive management tools. pfSense has a steeper learning curve but provides extensive granular control for experienced users.
  • VPN: Both offer VPN capabilities, but FortiGate integrates seamlessly with other Fortinet security products.
  • Customization and Integration: pfSense offers more extensive customization options due to its open-source nature. FortiGate integrates seamlessly with other Fortinet security products for a holistic network security solution.

Pricing and ROI: Fortinet FortiGate has mixed reviews regarding pricing, setup cost, and licensing. FortiGate offers positive ROI with cost savings, reduced communication costs, and enhanced security. pfSense provides valuable ROI with flexibility, scalability, and improved network solutions. pfSense is open source. The pfSense Community Edition (CE) is a free. However, Netgate developed pfSense is a commercial version of pfSense called pfSense Plus. pfSense Plus includes additional features and support, but the core functionality is the same as the Community Edition. ROI comes from cost savings and granular control.

Room for Improvement: FortiGate users would appreciate better monitoring and advanced reporting. pfSense reviewers suggest improvements to the user interface for a more streamlined experience, also advanced reporting, better documentation, and troubleshooting tools.

Deployment and customer support: FortiGate users commented for a straightforward setup process with clear documentation and readily available support. pfSense installation is considered user-friendly, but advanced configurations can be challenging. The open-source community provides extensive documentation and online resources.

The summary above is based on 296 interviews we conducted recently with Fortinet FortiGate and pfSense users. To access the review's full transcripts, download our report.

To learn more, read our detailed Fortinet FortiGate vs. Netgate pfSense Report (Updated: March 2024).
767,319 professionals have used our research since 2012.
Q&A Highlights
Question: What are the differences between Fortinet FortiGate and pfSense?
Answer: Especially with support and updates of the signatures, FortiGate has a more solid base. Being an IPO company, with respect to Pfsense, start as a community project and you can purchase support and even dedicated appliances if you have a budget for FortiGate, or if you are starting Pfsense. Greetings
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable.""The solution is extremely reliable.""Our security improved from being able to put in rules and close off unwanted traffic.""The most valuable feature of this solution is the analytics.""We are using the FortiGate 100D series. VPN, firewall, anti-malware, OTM, and intrusion prevention are useful features.""It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly.""It is useful for protecting and segregating the internal networks from the internet. Most of our customers also use the FortiGate client to connect to their offices by using the VPN client, and of course, they usually activate the antivirus, deep inspection, and intrusion prevention services. They are also using it for web filtering and implementing various policies dealing with forwardings, NAT, etc.""It's very fast and easy to configure."

More Fortinet FortiGate Pros →

"The product’s documentation is good.""Super easy to manage. Anyone who has been working with firewalls can handle it.""Creation of certificates and the facility to administer services are valuable features.""The solution is very easy to use and configure.""I have found pfSense to be stable.""The initial setup is easy.""Routing, load balancing, Traffic Limiter and queues. Since this company relies on an Internet connection, having these features is a must.""It is a stable solution."

More Netgate pfSense Pros →

Cons
"A lack of integration between our data centers.""In the next release, I would like to see the interface simplified to be more user-friendly.""They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI.""Its price could be better.""Fortinet FortiGate can improve the integration with Active Directory. Additionally, I would like to have a Cloud Controller, such as they do in the Cisco Meraki solution.""The cloud management and automation capability could be improved.""One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering.""The central management for the FortiGate Fortinet Firewall needs improvement. They have the manager to do the essential management for both SD-WAN and for the security policy. They should also improve the SD-WAN function."

More Fortinet FortiGate Cons →

"They could improve their commercial stance and be more agile when it comes to the commercial pricing of enterprise deals.""Also, simplifying the rules for the GeoIP. Making it simpler to understand would be an improvement.""User interface is a little clumsy.""As an open-source solution, there are so many loopholes happening within the product. By design, no one is taking ownership of it, and that is worrisome to me.""I'd like to find something in pfSense that is more specific to URL filtering. We have customers who would like to filter their web traffic. They would like to be able to say to their employees, "You can surf the web, but you cannot get access to Facebook or other social media," or "You can surf the web, but you're not allowed to gamble or watch porn on the web." My technicians say that doing this kind of stuff with pfSense nowadays is not easy. They can implement some filters using IP addresses but not by using the names of the domains and categories. So, we are not able to exclude some categories from the allowed traffic, such as porn, gambling, etc. To do that, we have to use another product and another web filter that uses DNS. I know that there are some third-party products that could work with pfSense, but I'd like the native pfSense solution to do that.""I would like to see different graphs available in the reporting.""The integration of pfSense with EPS and EDS could be better. Also, it should be easier to get reports on how many users are connecting simultaneously and how sections connect in real-time.""Ease of use is a problem for a user who is unfamiliar with this product because, in the interface, everything has to be set manually."

More Netgate pfSense Cons →

Pricing and Cost Advice
  • "Fortinet has one or two license types, and the VPN numbers are only limited by the hardware chassis make."
  • "These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
  • "Go for long term pricing negotiated at the time of purchase."
  • "Work through partners for the best pricing."
  • "The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
  • "Easy to understand licensing requirements."
  • "​We saved a bundle by not needing all the past appliances from an NGFW.​"
  • "The cost is too high... They have to focus on more features with less cost for the customer. If you see the market, where it's going, there are a lot of players offering more features for less cost."
  • More Fortinet FortiGate Pricing and Cost Advice →

  • "PFSENSE turns out to be very economical, the license is free and for little money you get very good support"
  • "Unless they have specific requirements that demand a particular device, I always suggest pfSense specifically because of the absence of pricing and licensing."
  • "Spend at least $300 or more on a good pfSense box. Use a hard drive, and not a USB flash drive for pfSense storage."
  • "It's open source (and free - as in beer and speech), but also has commercial support."
  • "If you need to buy hardware onto which to install PfSense, go with their boxes on their website, they are great."
  • "It works quite well for an open source product."
  • "From Sonic Wall, their price is much higher, because for every feature that you want to add, you have to pay. I can do the same things with pfSense, but everything is included in one price."
  • "There are a few features not included, and when you have to use those features, you have to pay for them."
  • More Netgate pfSense Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
    767,319 professionals have used our research since 2012.
    Comparison Review
    Anonymous User
    I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main hang-ups will be with the VIP/load balancing and SSL. For some reason that completely escapes me, both of these vendors make getting valid certificates onto their boxes unnecessarily difficult -- the Fortinet appliances more so than the Sophos UTM appliances. At one point a Fortinet engineer had to write an entire manual on how to get an SSL certificate uploaded successfully on the 4.x firmware Sophos: The one feature that is missing (and this makes some amount of sense) from the Sophos appliance is BITS caching for updates. Other than that, Sophos offers a full replacement for TMG on UTM9. The XG platform also offers a replacement for the TMG; however, some of the rumblings about upcoming releases suggests that Sophos is going to give XG the Apple iOS treatment and "streamline" the interface...potentially cutting out/hiding some functionality. On the effectiveness of the NGFW, Sophos is mostly good but has a few issues blocking all pieces of an application. For instance, we had to build custom blocking rules for OpenVPN (the vpn was being used to bypass the content filter) because the default Application Control wasn't effectively blocking the application. Fortinet: If it… Read more →
    Answers from the Community
    Ml Chouhan
    Cesar Reza - PeerSpot reviewerCesar Reza
    Reseller

    Both are very good products, but some features that Sophos mentioned as new, FortiGate has been handling. If you are going to grow with several appliances I recommend Sophos, since the administration can be done from the cloud. With Fortinet, you have to pay a licensing fee. In terms of costs and all the options, they are very similar. Another detail to review is the support, at the beginning with Fortigate, I had enough details, but it is really improving significantly with respect to Sophos. 


    My comment is based on experience and I do not lean toward any of the brands. To reiterate, they are good types of equipment.

    Questions from the Community
    Top Answer: When you compare these firewalls you can identify them with different features, advantages, practices and usage at large. In my opinion, Fortinet would be the best option and l use Fortinet too.… more »
    Top Answer:From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know the firewalls change every 5 to 7 years as stated but you really do need to… more »
    Top Answer:As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite good. The most valuable features for me are their web and email filtering. I would… more »
    Top Answer:You don't really specify what type of router you are looking for but if you are talking about a gateway router I recommend PFSense. This software solutions can be installed on youf own hardware or you… more »
    Top Answer:Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigate both cost-effective and efficient. One of the features we like most is that… more »
    Top Answer:Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and client, Open VPN and client, and PPTP client. Both also have intrusion detection and… more »
    Ranking
    2nd
    out of 59 in Firewalls
    Views
    123,063
    Comparisons
    89,961
    Reviews
    48
    Average Words per Review
    661
    Rating
    8.4
    1st
    out of 59 in Firewalls
    Views
    145,326
    Comparisons
    123,931
    Reviews
    12
    Average Words per Review
    505
    Rating
    8.3
    Comparisons
    Also Known As
    FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
    Learn More
    Netgate
    Video Not Available
    Overview

    Fortinet FortiGate enhances network security, prevents unauthorized access, and offers robust firewall protection. Valued features include advanced threat protection, reliable performance, and a user-friendly interface. It improves efficiency, streamlines processes, and boosts collaboration, providing valuable insights for informed decision-making and growth.

    pfSense is a powerful and reliable network security appliance primarily used for security purposes such as firewall and VPN or traffic shaping, network management, and web filtering. It is commonly used by small businesses and managed service providers to protect their customers' networks and enable remote access through VPNs. 

    The solution is praised for its stability, user-friendly interface, scalability potential, open-source nature, free cost, easy installation, firewall capabilities, security features, flexibility, and simplicity. Overall, pfSense is a cost-effective solution for enterprises that need a VPN for their employees.

    pfSense Key Features

    pfSense has many key features and capabilities, including:

    • Strength and accuracy: pfSense is able to always follow either default or custom rules, making it a stronger firewall than some of its competitors. It also filters traffic separately, whether it’s coming from your internal network of devices or the open internet, allowing you to set different rules and policies for each.

    • Flexibility: pfSense can work both as a basic firewall and as a complete security system because it gives you the flexibility to integrate additional features as code where necessary.

    • Open-source: Because it is open-source, not only is pfSense free to use, but community members can contribute to the code to make it a better software.

    • User-friendly: Usually firewall products are not user-friendly because they often include complex settings, options, and features that require fine-tuning. pfSense’s interface is simple, direct, and easy to use.

    • WireGuard Support: Instead of building your own VPN using pfSense, or settling for a commercial VPN provider, you can directly integrate WireGuard with the pfSense firewall.

    • Speed Management and Fault Tolerance: pfSense’s multi-WAN feature allows your system to continue operating in case components fail.

    • Well-supported: pfSense regularly has security and feature updates. It also has a documentation site and a well-informed and knowledgeable support forum.

    Reviews from Real Users

    Below is some feedback from PeerSpot Users who are currently using the solution.

    Bojan O., CEO at In.sist d.o.o., says, “The classic features, such as content inspection, content protection, and the application-level firewall, are the most important."

    Another PeerSpot user, a chef at a media company, explains what he finds most valuable about pfSense: "The plugins or add-ons are most valuable. Sometimes, they are free of charge, and sometimes, you have to pay for them, but you can purchase or download very valuable plugins or add-ons to perform internal testing of your network and simulate a denial-of-service attack or whichever attack you want to simulate. You can also remote and monitor your network and see where the gap is."

    T.O., a VP of Business Development at a tech services company, mentions, "What I found most valuable is the cost of the platform, the flexibility of the platform, and the fact that the ongoing fees are not there as they are with the competitor."



    Sample Customers
    1. Amazon Web Services 2. Microsoft 3. IBM 4. Cisco 5. Dell 6. HP 7. Oracle 8. Verizon 9. AT&T 10. T-Mobile 11. Sprint 12. Vodafone 13. Orange 14. BT Group 15. Telstra 16. Deutsche Telekom 17. Comcast 18. Time Warner Cable 19. CenturyLink 20. NTT Communications 21. Tata Communications 22. SoftBank 23. China Mobile 24. Singtel 25. Telus 26. Rogers Communications 27. Bell Canada 28. Telkom Indonesia 29. Telkom South Africa 30. Telmex 31. Telia Company 32. Telkom Kenya
    Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
    Top Industries
    REVIEWERS
    Comms Service Provider16%
    Computer Software Company9%
    Financial Services Firm8%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Educational Organization20%
    Computer Software Company15%
    Comms Service Provider8%
    Manufacturing Company6%
    REVIEWERS
    Manufacturing Company9%
    University9%
    Marketing Services Firm8%
    Comms Service Provider8%
    VISITORS READING REVIEWS
    Comms Service Provider14%
    Computer Software Company14%
    Government8%
    Educational Organization6%
    Company Size
    REVIEWERS
    Small Business48%
    Midsize Enterprise23%
    Large Enterprise30%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise32%
    Large Enterprise41%
    REVIEWERS
    Small Business69%
    Midsize Enterprise19%
    Large Enterprise12%
    VISITORS READING REVIEWS
    Small Business33%
    Midsize Enterprise18%
    Large Enterprise49%
    Buyer's Guide
    Fortinet FortiGate vs. Netgate pfSense
    March 2024
    Find out what your peers are saying about Fortinet FortiGate vs. Netgate pfSense and other solutions. Updated: March 2024.
    767,319 professionals have used our research since 2012.

    Fortinet FortiGate is ranked 2nd in Firewalls with 306 reviews while Netgate pfSense is ranked 1st in Firewalls with 128 reviews. Fortinet FortiGate is rated 8.4, while Netgate pfSense is rated 8.6. The top reviewer of Fortinet FortiGate writes "It's a reliable solution that's easy to install and cheaper than competitors ". On the other hand, the top reviewer of Netgate pfSense writes "User-friendly, easy to manage the firewall, rule-wise and interface-wise". Fortinet FortiGate is most compared with Sophos XG, Cisco Secure Firewall, Meraki MX, Check Point NGFW and WatchGuard Firebox, whereas Netgate pfSense is most compared with OPNsense, Sophos XG, Sophos UTM, KerioControl and Cisco Secure Firewall. See our Fortinet FortiGate vs. Netgate pfSense report.

    See our list of best Firewalls vendors.

    We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.