We just raised a $30M Series A: Read our story

Compare Fortinet FortiGate vs. Fortinet FortiOS

Cancel
You must select at least 2 products to compare!
Comparison Summary
Question: Features comparison between Palo Alto and Fortinet firewalls
Answer: Hi PaloAlto is better when working on app control feature and special virtual wire links. Execpt that specific point, Fortinet is above. Best Regards, Damien
Featured Review
Find out what your peers are saying about Fortinet FortiGate vs. Fortinet FortiOS and other solutions. Updated: November 2021.
552,136 professionals have used our research since 2012.
Quotes From Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros
"The solution offers very easy configurations.""One of the most valuable features of Firepower 7.0 is the "live log" type feature called Unified Event Viewer. That view has been really good in helping me get to data faster, decreasing the amount of time it takes to find information, and allowing me to fix problems faster. I've found that to be incredibly valuable because it's a lot easier to get to some points of data now.""We have not had to deal with stability issues.""The most valuable feature that Cisco Firepower NGFW provides for us is the Intrusion policy.""You do not have to do everything through a command line which makes it a lot easier to apply rules.""The feature set is fine and is rarely a problem.""It's got the capabilities of amassing a lot of throughput with remote access and VPNs.""One of the most valuable features is the AMP. It's very good and very reliable when it comes to malicious activities, websites, and viruses."

More Cisco Firepower NGFW Firewall Pros »

"The initial setup is straightforward.""It's very fast and easy to configure.""It's inexpensive compared to some of the other technology out there.""Using this product makes the VPN seamless and almost invisible to me in the sense that I don't have to think about it.""The most valuable features are the possibility of having one fabric for switching on security.""The SD-WAN feature is the most valuable. This feature evolved from link load balancing. It has helped us in terms of our uptime and privatizing applications whenever we experience an outage. The SD-WAN feature has been a plus for us. Two-factor authentication has allowed us to add more users in terms of remote working. We have two-factor authentication for remote workers to authenticate them before they get on the network.""Fortinet FortiGate appears to be scalable.""The customization potential is quite impressive."

More Fortinet FortiGate Pros »

"Performance-wise, I think FortiOS is much better than its Juniper counterpart. Based on our actual experience and performance metrics, FortiOS-based products are much better than Juniper.""All networks are security-driven, we get throughputs and security. We feel that the people at Fortinet are easy to deal with from a support standpoint. If they need to jump in and help us, they're very willing to do that. Their email filtering, their data loss prevention, their intrusion prevention, type of products in the newest OSs has been outstanding.""The VDOM (Virtual DOM) is a virtualized firewall that has some opportunities for flexibility that are an advantage in certain configurations.""The main features I find useful are intrusion prevention and web filtering. Additionally, the solution is easy to manage.""FortiGate as a product is very easy to configure.""Has a very simple OS and a good price point.""There are a lot of features that we like within the solution. The resources or performance of the firewall is very good. However, the real selling point is the fact that the solution offers so many features, it gives our clients a lot of extras that they can work with. There's a lot on offer.""I personally think the site-to-site VPN is the most useful feature. A lot of firewalls have that, but to me, that's one of the features that's essential."

More Fortinet FortiOS Pros »

Cons
"Web filtering needs improvement because sometimes the URL is miscategorized.""I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device.""The price and SD-WAN capabilities are the areas that need improvement.""We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond.""On the VPN side, Firepower could be better. It needs more monitoring on VPNs. Right now, it's not that good. You can set up a VPN in Firepower, but you can't monitor it.""Deploying configurations takes longer than it should.""It would be great if some of the load times were faster.""Cisco Firepower NGFW Firewall can be more secure."

More Cisco Firepower NGFW Firewall Cons »

"We have an issue with hotel guest vouchers.""They are doing good, but they can improve the distributor assignment. The availability of the product and the timeline of delivery are the main things. The distribution should be swift, and the distributor should not reach out to end customers directly. They should work as a distributor. There should also be one more local distributor. Currently, there is only one distributor in Pakistan, and the rest of them are in UAE. It is difficult to work with only one distributor. Sometimes, you don't get along with the same distributor, and that's why they should have one more distributor. Their licensing should also be improved. The activation or renewal of the product should be done from the date of renewal, not from the date on which the license expired.""The customization could be improved. Cisco, for example, is much better at this. They need to work to be at least as good as they are.""Difficult to add or define, and not that easy to configure and manage.""If they had better integration with security products, such as Cisco ISE or Rapid Threat Containment, then it would be an improvement.""Backup can be improved.""In the balance between links feature normally you can just choose one option to balance. It would be better for the solution to have more than one option, preferably three.""It's my understanding that more of the current generation features could be brought in. There could be more integration with EDRs, for example."

More Fortinet FortiGate Cons »

"Right now, it's very trendy to integrate everything into the cloud. This solution would be more effective if they did more integration in that regard.""Lacks flexibility for different scenario configurations.""The solution could improve by making the dashboard easier to use.""I can only compare it with SonicWall, and it is missing many advanced features that SonicWall has.""The reporting and monitoring could improve, they have a lot of limitations. The monitoring is not easy compared to the other firewall.""It could more scalable for the lower end users.""FortiOS doesn't work well with all browsers. I think they need to do a better job of making it compatible with the various browsers that are out there.""The implementation could be simplified."

More Fortinet FortiOS Cons »

Pricing and Cost Advice
"The price of Firepower is not bad compared to other products.""This solution is expensive and other solutions, such as FortiGate, are cheaper.""Its price is in the middle range. Both Firepower and FortiGate are not cheap. Palo Alto and Check Point are the cheapest ones. I don't remember any costs in addition to the standard licensing fees.""This product requires licenses for advanced features including Snort, IPS, and malware detection.""I like the Smart Licensing, because it is more dynamic and easier to keep track of where you are at. If we have a high availability firewall pair and they are deployed in active/standby rather than active/active, I would expect that we would only pay for one set of licenses because you are using only one firewall at any one time. The other is there just for resiliency. The licensing, from a Firepower perspective, still requires you to have two licenses, even if the firewalls are in active/standby, which means that you pay for the two licenses, even though you might only be using one firewall any one time. This is probably not the best way to do it and doesn't represent the best value for money. This could be looked at to see if it could be done in a fairer way.""Cisco pricing is premium. However, they gave us a 50 to 60 percent discount.""The solution was chosen because of its price compared to other similar solutions.""The price for Firepower is more expensive than FortiGate. The licensing is very complex. We usually ask for help from Solutel because of its complexity. I have a Cisco account where I can download the VPN client, then connect. Instead, I create an issue with Solutel, then Solutel solves the case."

More Cisco Firepower NGFW Firewall Pricing and Cost Advice »

"For our organization, the licensing costs are approximately $7,000 per year.""The price of the license and warranty can be better because it is very expensive.""The price of FortiGate is average and I would say that based on the top five products available on the market, it is in the affordable range.""Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license.""It's a very full-featured and it's priced well solution.""We just pay a flat monthly fee to the vendor for the support.""Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees.""When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."

More Fortinet FortiGate Pricing and Cost Advice »

"The price of Fortinet FortiOS has been reasonable.""There is a license required for the solution and the price is fair.""The software costs roughly half what the hardware costs. Overall, the product is expensive.""The support contracts are usually about $100 - $200 a device."

More Fortinet FortiOS Pricing and Cost Advice »

report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
552,136 professionals have used our research since 2012.
Answers from the Community
Donny Lee
author avatarABHILASH TH
Reseller

Hi,


Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner)


Fortinet: 


Have higher throughput; which comes with competitive rates


Wide range of models to select to meet your requirement, without spending heavliy


Outstanding customer support and very active customer care team


Easly available skilled resources from the channel for deployment and post-implementation support 


Regards


Abhilash



author avatarAlexander Denisenko
User

Hello. The question is what you are going to have as a result of application

Questions from the Community
Top Answer:  When you compare these firewalls you can identify them with different features, advantages, practices and… more »
Top Answer:  The Cisco Firepower NGFW Firewall is a very powerful and very complex piece of anti-viral software. When one considers… more »
Top Answer: It is easy to integrate Cisco ASA with other Cisco products and also other NAC solutions. When you understand the Cisco… more »
Top Answer: In my opinion and as a result of years of experience: - Both are great firewalls with excellent performance and a… more »
Top Answer: In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it… more »
Top Answer: Hi, This really gets to two things: - how fast your internet access is and how much are you planning to grow in the… more »
Top Answer: Performance-wise, I think FortiOS is much better than its Juniper counterpart. Based on our actual experience and… more »
Top Answer: FortiOS has a UTM feature, for which you have to buy an annual subscription. Most brands of firewalls will also have… more »
Top Answer: They're using a lot of application-specific IC, so that may be causing some performance issues. And whenever a Fortinet… more »
Comparisons
Also Known As
Cisco Firepower NGFW, Cisco Firepower Next-Generation Firewall, FirePOWER, Cisco NGFWv
FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
Learn More
Overview

Cisco NGFW firewalls deliver advanced threat defense capabilities to meet diverse needs, from
small/branch offices to high performance data centers and service providers. Available in a wide
range of models, Cisco NGFW can be deployed as a physical or virtual appliance. Advanced threat
defense capabilities include Next-generation IPS (NGIPS), Security Intelligence (SI), Advanced
Malware Protection (AMP), URL filtering, Application Visibility and Control (AVC), and flexible VPN
features. Inspect encrypted traffic and enjoy automated risk ranking and impact flags to reduce event
volume so you can quickly prioritize threats. Cisco NGFW firewalls are also available with clustering
for increased performance, high availability configurations, and more.
Cisco Firepower NGFWv is the virtualized version of Cisco's Firepower NGFW firewall. Widely
deployed in leading private and public clouds, Cisco NGFWv automatically scales up/down to meet
the needs of dynamic cloud environments and high availability provides resilience. Also, Cisco NGFWv
can deliver micro-segmentation to protect east-west network traffic.
Cisco firewalls provide consistent security policies, enforcement, and protection across all your
environments. Unified management for Cisco ASA and FTD/NGFW physical and virtual firewalls is
delivered by Cisco Defense Orchestrator (CDO), with cloud logging also available. And with Cisco
SecureX included with every Cisco firewall, you gain a cloud-native platform experience that enables
greater simplicity, visibility, and efficiency.
Learn more about Cisco’s firewall solutions, including virtual appliances for public and private cloud.

The FortiGate family of NG firewalls provides proven protection with unmatched performance across the network, from internal segments, to data centers, to cloud environments. FortiGates are available in a large range of sizes and form factors and are key components of the Fortinet Security Fabric, which enables immediate, intelligent defense against known and new threats throughout the entire network.

Control all the security and networking capabilities in all your FortiGates across your entire network with one intuitive operating system. Improve your protection and visibility while reducing operating expenses and saving time with a truly consolidated next generation enterprise firewall platform.

Offer
Learn more about Cisco Firepower NGFW Firewall
Learn more about Fortinet FortiGate
Learn more about Fortinet FortiOS
Sample Customers
Rackspace, The French Laundry, Downer Group, Lewisville School District, Shawnee Mission School District, Lower Austria Firefighters Administration, Oxford Hospital, SugarCreek, Westfield
Pittsburgh Steelers, LUSH Cosmetics, NASDAQ, Verizon, Arizona State University, Levi Strauss & Co. Whitepaper and case studies here
Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data
Top Industries
REVIEWERS
Comms Service Provider22%
Financial Services Firm16%
Manufacturing Company8%
Non Profit8%
VISITORS READING REVIEWS
Comms Service Provider32%
Computer Software Company21%
Government7%
Manufacturing Company4%
REVIEWERS
Comms Service Provider14%
Computer Software Company10%
Financial Services Firm8%
Energy/Utilities Company6%
VISITORS READING REVIEWS
Comms Service Provider36%
Computer Software Company19%
Government5%
Educational Organization4%
REVIEWERS
Comms Service Provider38%
Transportation Company15%
Financial Services Firm15%
Wholesaler/Distributor8%
VISITORS READING REVIEWS
Comms Service Provider30%
Computer Software Company25%
Government5%
Manufacturing Company4%
Company Size
REVIEWERS
Small Business43%
Midsize Enterprise28%
Large Enterprise29%
VISITORS READING REVIEWS
Small Business21%
Midsize Enterprise13%
Large Enterprise66%
REVIEWERS
Small Business48%
Midsize Enterprise25%
Large Enterprise28%
VISITORS READING REVIEWS
Small Business35%
Midsize Enterprise25%
Large Enterprise40%
REVIEWERS
Small Business63%
Midsize Enterprise15%
Large Enterprise22%
Find out what your peers are saying about Fortinet FortiGate vs. Fortinet FortiOS and other solutions. Updated: November 2021.
552,136 professionals have used our research since 2012.

Fortinet FortiGate is ranked 1st in Firewalls with 96 reviews while Fortinet FortiOS is ranked 20th in Firewalls with 13 reviews. Fortinet FortiGate is rated 8.4, while Fortinet FortiOS is rated 8.4. The top reviewer of Fortinet FortiGate writes "Stable, easy to set up, and offers good ROI". On the other hand, the top reviewer of Fortinet FortiOS writes "Robust, scales well using FortiManager, and you have a choice of two different modes to run in". Fortinet FortiGate is most compared with Cisco ASA Firewall, pfSense, Meraki MX, Check Point NGFW and SonicWall TZ, whereas Fortinet FortiOS is most compared with Fortinet FortiWeb, Zyxel Unified Security Gateway, Azure Firewall, Darktrace and Cato Networks. See our Fortinet FortiGate vs. Fortinet FortiOS report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.