Most Helpful Review
I like GlobalProtect, the URL filtering and the threat prevention, but the boot time should be improved on
Find out what your peers are saying about Palo Alto NG Firewalls vs. WatchGuard XTM and other solutions. Updated: January 2019.
318,001 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
I like to install Palo Alto mainly on the data center side to have visibility into all VLANs. That gives full visibility into the core.
It has the typical features of a next-generation firewall. It can do application control, antivirus, content filtering, etc.
I like the hostwatch because I can see what traffic uses the most bandwidth and I can block that site.
I could still keep the data rates really high, up near the two gigahertz data speeds, without compromise on the security perimeters being acted simultaneously.
We have used technical support for WatchGuard many times and overall, we are satisfied with it. They are always listening and there is a good reaction time to our findings. When there are issues, they really try to resolve them.
Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular.
Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process.
They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time.
It is stable and does not require you to reboot all the time.
It configures in all-in-one place.
I'm thinking about a new feature. They have decryption. It's a good idea to use decryption on Palo Alto. It would be good if they had offloading of the traffic, and if they could decrypt the traffic and offload it. Like, for example, ASM on our site. We have an SSL decryption to offload the traffic. We could use that on Palo Alto.
I would like to see more in terms of reporting tools and the threat analysis capabilities.
The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic.
Setup of this solution is complex, it's not plug and play.
Sometimes we have had issues with stability of the product.
WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure.
The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out.
Cloud-based central administration of all devices from one point would be nice
Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer).
The VPN errors are not helpful when troubleshooting.
Pricing and Cost Advice
Information Not Available
The licensing and renewal is very expensive.
Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative.
Very competitive pricing regarding throughput compared to other alternatives.
It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use.
Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network.
out of 48 in Firewalls
out of 48 in Firewalls
Compared 49% of the time.
Compared 15% of the time.
Compared 12% of the time.
Compared 27% of the time.
Compared 14% of the time.
Compared 13% of the time.
Also Known As
|Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall, Palo Alto Networks PA-Series|
|Palo Alto Networks||WatchGuard|
Palo Alto Networks' next-generation firewalls secure your business with a prevention-focused architecture and integrated innovations that are easy to deploy and use. Now, you can accelerate growth and eliminate risks at the same time.
|Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection Ð but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.|
Learn more about Palo Alto NG Firewalls
Learn more about WatchGuard XTM
|SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments||AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense|
No Data Available
Financial Services Firm36%
Import And Exporter7%