We just raised a $30M Series A: Read our story

Compare Fortinet FortiGate vs. WatchGuard Firebox

Cancel
You must select at least 2 products to compare!
Comparison Summary
Question: How does Fortinet FortiGate compare with WatchGuard Firebox?
Answer: Looking at the latest reports from Gartner, at least in the SDN part, I think there is no comparison. Fortinet is leading a large part of the network virtualization market and above all it is positioning itself as the option to have value-added services on the base layer of SDN and I mean security features that today, according to the consumption of the branch are more demanded by bringing the secure perimeter to each point of the network, consuming public services and direct navigation is already a fact.
Featured Review
Find out what your peers are saying about Fortinet FortiGate vs. WatchGuard Firebox and other solutions. Updated: March 2020.
553,954 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS.""The dashboard is the most important thing. It provides good visibility and makes management easy. Firepower also provides us with good application visibility and control.""The customer service/technical support is very good with this solution.""The most valuable features of this solution are the integrations and IPS throughput.""Being able to determine our active users vs inactive users has led us to increased productivity through visibility. Also, if an issue was happening with our throughput, then we wouldn't know without research. Now, notifications are more proactively happening.""The feature set is fine and is rarely a problem.""I like the firewall features, Snort, and the Intrusion Prevention System (IPS).""The Firepower+ISE+AMP for endpoint integration is something that really stands it out with other vendor solutions. They have something called pxGrid and i think it is already endorsed by IETF. This allows all devices on the network to communicate."

More Cisco Firepower NGFW Firewall Pros »

"The notable features that I have found most valuable are that it includes the antivirus, and also IPS, and even SD-WAN.""The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls.""I think that the UTM features are the most value, as it truly protects my infrastructure.""We use a lot of function on the IPS and it works well for us.""The usage in general is pretty good.""The application control features, such as Facebook blocking and Spotify blocking, are the most valuable.""It's great for capturing the traffic and troubleshooting it.""The VPN is the most valuable feature."

More Fortinet FortiGate Pros »

"Policy VPN, site-to-site VPN, traffic monitoring, anti-spam filters, and all other advanced features are valuable.""Among the most valuable features is the ease of use — love the interface — of both the web interface and of the WatchGuard System Manager.""The main reason we went with it was the security protocols. They were more robust on this device.""The most valuable feature is the ease of use of the interface.""It saves us time in the respect that we now have the template built for it so we can get in and get it done. We've had much less problem supporting Voice over IP technologies from different companies. Because our client base has grown over the years, we're probably saving 20 to 30 man-hours a month now that we've got this on a good stable level.""Two of the functionalities we use most are the traffic monitoring and the full panel dashboard. Those are two things that are very useful for us... In addition, it provides us with layered security. It allows us to determine what types of access, to which networks, we want to allow or deny.""Because we bought two firewalls... we need a central place to manage the policies and deploy them to both devices. It's good that it provides a system management console that is able to manipulate and manage policies in one place and deploy them to different locations.""It provides us with Layer 2 and Layer 3 security."

More WatchGuard Firebox Pros »

Cons
"The price and SD-WAN capabilities are the areas that need improvement.""The initial setup was a bit complex. It wasn't a major challenge, but due to our requirements and network, it was not very straightforward but still easy enough.""One of the few things that are brought up is that for the overall management, it would be great to have a cloud instance of that. And not only just a cloud instance, but one of the areas that we've looked at is using an HA type of cloud. To have the ability to have a device file within a cloud. If we had an issue with one, the other one would pick up automatically.""In a future release, it would be ideal if they could offer an open interface to other security products so that we could easily connect to our own open industry standard.""It would be great if some of the load times were faster.""The initial setup can be a bit complex for those unfamiliar with the solution.""When you make any changes, irrespective of whether they are big or small, Firepower takes too much time. It is very time-consuming. Even for small changes, you have to wait for 60 seconds or maybe more, which is not good. Similarly, when you have many IPS rules and policies, it slows down, and there is an impact on its performance.""I would like to see improvement when you create policies on Snort 3 IPS on Cisco Firepower. On Snort 2, it was more like a UI page where you had some multiple choices where you could tweak your config. On Snort 3, the idea is more to build some rules on the text file or JSON file, then push it. So, I would like to see a lot of improvements here."

More Cisco Firepower NGFW Firewall Cons »

"The product does need better support in the cloud environment. It's not exactly cloud-native right now.""There are just some services that aren't available. For example, the Ethernet or point-to-point protocols. They could add these services to their product offering - especially services for ISPs.""Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements. They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security.""They've become quite expensive.""Backup can be improved.""It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server.""The captive portal could be improved.""FortiGate support could do some improvements on their IPv6 configuration. Right now it's still in the very early stage for utilizing in an enterprise level network environment."

More Fortinet FortiGate Cons »

"The data loss protection works well, but it could be easier to configure. The complexity of data loss protection makes it a more difficult feature to fully leverage. Better integration with third-party, two-factor authentication would be advantageous.""I would like to see the devices made more flexible by adding modules to increase the ports that we can use.""The pricing could be improved. It is definitely one of the more expensive products.""I haven’t dug deeply into the reporting features yet or if they are working well. However, I have generated several reports and there was too much unnecessary information, in comparison with the reporting features in the Sophos firewall. Sophos' reporting is more readable and easier to configure.""There is room for improvement on the education side, regarding what does what, rather than just throwing it at a person and assuming they know everything about it. A lot of times, you have to call WatchGuard support to get the solution that will work, rather than their just having it published so that you can fix the problem on your own.""The solution can improve by adding a feature to tag a MAC address of a computer system in the policy and more IP configuration settings.""The few issues that we have had, such as not knowing where to go, they have been answered quickly.""Websense is an application that monitors and filters internet traffic. Websense was derived from WatchGuard. But when you go to WatchGuard to actually implement that particular feature, you have to use some type of additional feature and you have to pay for it, unfortunately. I think it should be free or free in the WatchGuard box itself, as an option. It would be nice if they didn't charge us for that."

More WatchGuard Firebox Cons »

Pricing and Cost Advice
"I am happy with the product in general, including the pricing.""I know that licensing for some of the advanced solutions, like Intrusion Prevention and Secure Malware Analytics, are nominal costs.""The solution was chosen because of its price compared to other similar solutions.""When we are fighting against other competitors for customers, whether it is a small or big business, we feel very comfortable with the price that Firepower has today.""Cisco, as we all know, is expensive, but for the money you are paying, you know that you are also getting top-notch documentation as well as support if needed.""Its price is in the middle range. Both Firepower and FortiGate are not cheap. Palo Alto and Check Point are the cheapest ones. I don't remember any costs in addition to the standard licensing fees.""Pricing is the same as other competitors. It is comparable. The licensing has gotten better. It has been easier with Smart Licensing.""The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case."

More Cisco Firepower NGFW Firewall Pricing and Cost Advice »

"For our organization, the licensing costs are approximately $7,000 per year.""I think the price of Fortinet FortiGate is very reasonable.""Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you.""The pricing for the product is alright.""The price of FortiGate support is too expensive.""It's very affordable.""The price for the device and software is high. However, the solution is of good quality and has a lot of features.""The licensing costs are very low."

More Fortinet FortiGate Pricing and Cost Advice »

"I think the larger firewall packages are much better because a normal firewall is not enough for these times. You need IPS, APT, and all the security features of a firewall that you can buy.""WatchGuard had a very competitive price. It was only 10 to 20 percent more than a single instance device but with that extra cost it provided a second load balancing device... unlike other brands whose method of hardware and software licensing would have doubled our cost.""It has a very good price. It is not the most expensive one, and it is also not the cheapest one. It is just spot-on in terms of price.""I find the solution to be very affordable.""The pricing of WatchGuard is probably a little higher than the SonicWall, but it makes up for it in dependability. It's worth it to me, especially since it's not much higher. For just a little bit higher price you get the dependability of the firewall with the WatchGuard brand.""It's fair pricing, but it could always be reduced.""They license it. When we buy it, we buy it with a three-year license. That's the most cost-effective way to do it. So, if you're going to buy it, then buy it with the three-year licensing.""The primary reason that we went with Firebox was its cost. It is very economical and it provided us with all the security functions that we were looking for at the time. And the throughput was more than what we required, so it was a very cost-effective device to deploy on our network."

More WatchGuard Firebox Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
553,954 professionals have used our research since 2012.
Answers from the Community
Netanya Carmi
Questions from the Community
Top Answer:  When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer:  The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
Top Answer: It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
Top Answer: In my opinion and as a result of years of experience: - Both are great firewalls with excellent performance and a… more »
Top Answer: In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
Top Answer: I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such)… more »
Top Answer: We are providing our services to all WatchGuard customers in the region. 
Top Answer: We just use it as a secondary WiFi device. We're a small office and we needed to set up a WiFi device for a few of our… more »
Top Answer: We're a hospital and we use it for developing our incoming and outgoing policies, and we also use it for VPN.
Comparisons
Also Known As
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
Learn More
Overview

Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

The FortiGate family of NG firewalls provides proven protection with unmatched performance across the network, from internal segments, to data centers, to cloud environments. FortiGates are available in a large range of sizes and form factors and are key components of the Fortinet Security Fabric, which enables immediate, intelligent defense against known and new threats throughout the entire network.

WatchGuard's approach to network security focuses on bringing best-in-class, enterprise-grade security to any organization, regardless of size or technical expertise. Ideal for SMBs and distributed enterprise organizations, our award-winning Unified Threat Management (UTM) appliances are designed from the ground up to focus on ease of deployment, use, and ongoing management, in addition to providing the strongest security possible.

Offer
Learn more about Cisco Firepower NGFW Firewall
Learn more about Fortinet FortiGate
Learn more about WatchGuard Firebox
Sample Customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Pittsburgh Steelers, LUSH Cosmetics, NASDAQ, Verizon, Arizona State University, Levi Strauss & Co. Whitepaper and case studies here
Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence
Top Industries
REVIEWERS
Comms Service Provider22%
Financial Services Firm16%
Government8%
Manufacturing Company8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company21%
Government7%
Manufacturing Company4%
REVIEWERS
Comms Service Provider14%
Computer Software Company10%
Financial Services Firm8%
Manufacturing Company6%
VISITORS READING REVIEWS
Comms Service Provider36%
Computer Software Company19%
Government5%
Educational Organization4%
REVIEWERS
Manufacturing Company18%
Construction Company15%
Healthcare Company9%
University6%
VISITORS READING REVIEWS
Comms Service Provider34%
Computer Software Company17%
Government6%
Wholesaler/Distributor4%
Company Size
REVIEWERS
Small Business43%
Midsize Enterprise28%
Large Enterprise29%
VISITORS READING REVIEWS
Small Business21%
Midsize Enterprise13%
Large Enterprise66%
REVIEWERS
Small Business48%
Midsize Enterprise25%
Large Enterprise28%
VISITORS READING REVIEWS
Small Business35%
Midsize Enterprise25%
Large Enterprise40%
REVIEWERS
Small Business67%
Midsize Enterprise21%
Large Enterprise13%
VISITORS READING REVIEWS
Small Business87%
Midsize Enterprise3%
Large Enterprise10%
Find out what your peers are saying about Fortinet FortiGate vs. WatchGuard Firebox and other solutions. Updated: March 2020.
553,954 professionals have used our research since 2012.

Fortinet FortiGate is ranked 1st in Firewalls with 97 reviews while WatchGuard Firebox is ranked 3rd in Unified Threat Management (UTM) with 25 reviews. Fortinet FortiGate is rated 8.4, while WatchGuard Firebox is rated 8.6. The top reviewer of Fortinet FortiGate writes "Stable, easy to set up, and offers good ROI". On the other hand, the top reviewer of WatchGuard Firebox writes "Competent, basic front-end; the ports that I have assigned appear to be unattainable to outsiders". Fortinet FortiGate is most compared with Cisco ASA Firewall, pfSense, Meraki MX, Check Point NGFW and Cisco SD-WAN, whereas WatchGuard Firebox is most compared with Sophos XG, SonicWall NSa, pfSense, Cisco ASA Firewall and Azure Firewall. See our Fortinet FortiGate vs. WatchGuard Firebox report.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.