We performed a comparison between Fortinet FortiGate-VM and Palo Alto Networks K2-Series based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We use the filtering feature the most. It has filtering and inbuilt securities. We can create customized rules to define which users can access a particular type of site. We can create policies inside the firewall."
"The inspection and web security features are most valuable."
"FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features."
"The simplicity of the configuration and the stability of the product are most valuable. The VPN concentrator is very useful."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"The most important features with FortiGate are the web filter and application controls. We can control our internet usage and use the web filter for application purposes."
"The dashboard I have found the most valuable in Fortinet FortiGate."
"The most valuable feature is the interface, which is very user friendly. We are utilizing most of the features, like content filtering. The firewall is powerful."
"Primarily, the VPN solution is most valuable. It allows you to have more flexibility in terms of what is there on the end-user device, and what is not there. You can check and make sure that they're current. It has more flexibility than just a straight VPN solution. It works really well. It has the features that 99% of people need."
"We work in the archiving domain where a secure environment is very important. We have some special requirements regarding the security of infrastructure."
"The solution offers good documentation."
"I really like that it's internationally deployable."
"The most valuables features are the ease of use and deployment."
"The technical support is very good."
"The solution's initial setup process was very easy."
"It is easy to set up the solution."
"I have found that Palo Alto Networks K2-Series has the best security. They are more user-friendly, older firewalls used to have to be configured using the command-line interface, but in this solution, it can be done in the GUI."
"One of the most valuable features is Palo Alto's firewall management. We find it easier to manage the firewall centrally."
"Palo Alto has better and finer controls than, say, Cisco or Check Point."
"As long as the solution is kept updated, it's pretty stable."
"It is a stable solution."
"The most valuable feature of Palo Alto Networks K2-Series is its management abilities. Additionally, the updates are very good."
"Palo Alto firewalls are scalable enough. We have about 110 employees in our company, and we are about to expand to 130."
"Palo Alto has a unique solution for DNS security, which is very good."
"I would like some automated custom reporting."
"In the next release, maybe the documentation on how to use this solution could be improved."
"The customization could be improved. Cisco, for example, is much better at this. They need to work to be at least as good as they are."
"With the addition of some features, it is possible that FortiGate can be used in all verticals."
"It should be more stable. There should be full integration within Fortinet products themselves as well as with other third-party products. Especially when you're not dealing with SIEM and the correlation of the security box, we want Fortinet to be able to share that information with as many other products as it can."
"Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful."
"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."
"Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."
"FortiGate should be more customer friendly and budgeted better."
"Some issues with connecting to the VPN from home after firmware updates."
"The licensing needs to be improved. We need longer licensing periods, especially for POCs and trials. It should be for six months. Right now, it's too short of a timeframe."
"Price-wise, it could be slightly better, however, if you compared it to other makes and models of equal category, it is generally cheaper."
"With FortiGate, we sometimes encounter bugs in various operating systems."
"One thing that can be better is added automation. And, on top of that, enhanced security when it comes to the automation itself."
"We have lost some information and we do not know how that happened through the solution. So that needs improvement."
"We'd like to have more customization and easier customization of policies."
"There are a lot of bugs in this solution."
"The URL Filtering module needs to have more categories added to it."
"The reporting functionality in GlobalProtect needs to be improved."
"The technical support, and how they provide it to the client, needs to be improved."
"In the past, we've had trouble with Palo Alto's application filtering not getting it right. I would not be recommending layer 7 application filtering yet."
"It is recommended that the Palo Alto Networks K2-Series be implemented step by step for the Panorama. Sometimes we can't overwrite the configurations because it fails."
"We had some issues with upgrading in the past. They could make the process easier."
"Palo Alto doesn't have extended visibility to the end point in their firewalls."
Fortinet FortiGate-VM is ranked 9th in Firewalls with 113 reviews while Palo Alto Networks K2-Series is ranked 28th in Firewalls with 29 reviews. Fortinet FortiGate-VM is rated 8.4, while Palo Alto Networks K2-Series is rated 8.4. The top reviewer of Fortinet FortiGate-VM writes "An easy-to-manage and configure tool that provides ample documentation to help with the setup phase". On the other hand, the top reviewer of Palo Alto Networks K2-Series writes "Easy to implement and manage, and the documentation is good". Fortinet FortiGate-VM is most compared with Azure Firewall, Palo Alto Networks VM-Series, Fortinet FortiOS, OPNsense and Cisco Secure Firewall, whereas Palo Alto Networks K2-Series is most compared with Palo Alto Networks NG Firewalls. See our Fortinet FortiGate-VM vs. Palo Alto Networks K2-Series report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most.
PA is good at app control, web filtering and such like, they have always been top of the pile there. The GUI is very good, and their product is very user-focused.
Fortinet is good for scalability and predictable high throughput (ASICs in the hardware), and useful things like authentication flexibility, CLI config (if you have any networking/Cisco people, they always seem to prefer CLI over GUI) and have better OT features, maybe relevant to your manufacturing use?
Fortinet seem to have a broader integration offering with their security fabric than PA do, plus they can do Fortinet-based wifi, switching, etc. Depends if you are prepared to go all-in with a single vendor.
Hi,
Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner)
Fortinet:
Have higher throughput; which comes with competitive rates
Wide range of models to select to meet your requirement, without spending heavliy
Outstanding customer support and very active customer care team
Easly available skilled resources from the channel for deployment and post-implementation support
Regards
Abhilash
Hello. The question is what you are going to have as a result of application