No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco IOS Security vs Palo Alto Networks NG Firewalls comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate boosts ROI by reducing WAN costs, minimizing downtime, and enhancing productivity with centralized management and security.
Sentiment score
7.4
Cisco IOS Security delivered significant ROI through improved routing, security, stability, and cost-efficiency, despite competitive vendor pressures.
Sentiment score
6.7
Palo Alto Networks NG Firewalls provide high ROI with enhanced security, reduced costs, reliable protection, and efficient management.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
The return on investment is satisfactory with Cisco products as they have long lifespans, and our customers are satisfied with them.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
Their user-friendly interface and Panorama central management, which provides a comprehensive overview, make them an ideal investment.
Technical Lead at Accenture
The solution helped reduce downtime, which is crucial in time-sensitive industries like manufacturing.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
Although the costs for Palo Alto Networks NG Firewalls are on the higher side compared to other vendors, the features and security capabilities justify the investment.
Network Security Engineer at Arrow PC Network Pvt Ltd
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's support is prompt but has delays and gaps; users prefer integrators and rate it 6-9 out of 10.
Sentiment score
6.7
Cisco IOS Security support is generally praised for speed and skill, though some report delays and complexity in access.
Sentiment score
6.9
Palo Alto Networks NG Firewalls' support receives mixed reviews, excelling in higher-tier assistance but needing first-level improvement.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
My impression is that the support quality has deteriorated over time.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
Palo Alto's network support is excellent, and I would rate it a ten out of ten.
Founder at a tech services company with 11-50 employees
Their response time is within one hour.
Head of data centers at a non-profit with 10,001+ employees
They offer fast and competent assistance.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate offers scalable, adaptable solutions for businesses, ensuring performance and compatibility with management tools during network expansion.
Sentiment score
7.4
Cisco IOS Security offers scalable, enterprise-level solutions but may increase costs and limit universality due to required hardware.
Sentiment score
6.9
Palo Alto Networks NG Firewalls offer scalable, flexible solutions, though pricing and hardware limitations may challenge smaller companies.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
Cloud deployments benefit from auto-scaling, allowing for automatic adjustments to firewall capacity based on demand.
Technical Lead at Accenture
They support scaling across different environments, allowing you to start with the smallest hardware model for branch offices and scale up to high-end appliances for data centers, such as the PA-700 series, which supports very high throughput.
Network Security Engineer at Arrow PC Network Pvt Ltd
It is important to assess the infrastructure size before choosing a model.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for stability and reliability, though some issues with updates and high-traffic conditions are noted.
Sentiment score
7.6
Cisco IOS Security is generally reliable with occasional issues, frequently updated for stability, scoring 7-10 in satisfaction.
Sentiment score
8.5
Palo Alto Networks NG Firewalls are praised for stability and reliability, outperforming competitors like Cisco and Fortinet.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
We find Cisco products stable and thoroughly tested before new software or firmware versions are released.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
I find Cisco IOS Security to be a very stable product.
Partner/Owner and Director of Human Resources at Up arrow Systems
With appropriately configured policies, these firewalls can provide robust network security.
Solution Architect at a retailer with 201-500 employees
After the upgrade, we are experiencing performance issues.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
I have not experienced any outages or issues.
IP / Operations Support System Engineer; Pre-Sales Engineer at Avantguard.it
 

Room For Improvement

Fortinet FortiGate needs better interface readability, customer support, integration, usability, documentation, and pricing, with improved automation and stability.
Cisco IOS Security struggles with integration, usability, cost, lacking features, complex licensing, performance, and requires enhancement and support.
Palo Alto Networks NG Firewalls face challenges with pricing, complexity, setup, management costs, and need UI and feature enhancements.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
Cisco changes their licensing policy quite frequently, which is becoming confusing and complicated.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
When performance degrades due to full packet inspection, the solution should be to increase the computing power within the same firewall, not to recommend upgrading to a larger, more expensive model.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Further integration into a unified system could improve usability.
Director IT Infrastructure and Operations at a analyst firm with 51-200 employees
One of the main challenges we face is the high cost, especially for small to mid-sized businesses (SMBs), with licensing for features such as threat prevention, URL filtering, and WildFire being quite expensive.
Network Security Engineer at Arrow PC Network Pvt Ltd
 

Setup Cost

Fortinet FortiGate offers cost-effective solutions with competitive pricing, though licensing is complex, making it appealing to enterprises.
Cisco IOS Security is costly, favoring medium to large enterprises with longer-term savings over SMB challenges.
Palo Alto Networks NG Firewalls are costly but valued for advanced security, suiting larger enterprises despite high expenses.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The cost of Cisco IOS Security for customers is on the higher end of pricing compared to the competition, depending on the targeted customers.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
Palo Alto Networks NG Firewalls are expensive.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Palo Alto Networks NG Firewalls come at a premium, exceeding the cost of most competitors by 45 percent.
Head of data centers at a non-profit with 10,001+ employees
Colleagues looking for the cheapest and fastest firewall can still use Palo Alto Networks NG Firewalls because they are affordable.
Director at Zuci Systems
 

Valuable Features

Fortinet FortiGate integrates firewall, VPN, and SD-WAN, providing robust security, ease of use, stability, and efficient network performance.
Cisco IOS Security offers scalable, stable solutions with VPN, AAA, firewall integration, and user-friendly management for high-demand environments.
Palo Alto Networks NG Firewalls provide customizable, advanced threat prevention with machine learning, enhancing security management and reducing complexity.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The firewall and VPN features are the most valuable in protecting our customers' networks.
Sales & Support at a tech services company with 1-10 employees
This solution, called Network Access Controller, handles authentication, authorization, and accounting for devices accessing the network.
Partner/Owner and Director of Human Resources at Up arrow Systems
The best features of Cisco IOS Security are its integration with software management tools such as Cisco DNA Center and Cisco ICE, which provide centralized policy and network access control.
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
The most valuable features of Palo Alto Networks NG Firewalls are DNS sync calls, enabled security features, and Wildfire.
Technical Engineer Technical Security at a tech services company with 10,001+ employees
Threat Vault allows us access to a comprehensive threat database, enabling us to get detailed information on threats and how to mitigate them.
Senior Network Engineer L4 at a tech services company with 10,001+ employees
The most valuable feature of Palo Alto Networks NG Firewalls is Cortex Data Lake.
Solution Architect at a retailer with 201-500 employees
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
589
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco IOS Security
Ranking in Firewalls
34th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
49
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (16th)
Palo Alto Networks NG Firew...
Ranking in Firewalls
6th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
198
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 17.2%, down from 21.3% compared to the previous year. The mindshare of Cisco IOS Security is 0.5%, up from 0.3% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 5.2%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate17.2%
Palo Alto Networks NG Firewalls5.2%
Cisco IOS Security0.5%
Other77.1%
Firewalls
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at Arrow PC Network Pvt Ltd
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Danijel Cerovecki - PeerSpot reviewer
Head of Cyber Defense Department and Network Technologies Department at Verso Altima
Have faced challenges in keeping licensing clear and consistent while ensuring reliable network protection
We are a Gold Partner with Cisco. Our customers come from various industries, including service providers, and we target service providers and enterprise customers.We do not extensively use Zone-Based Firewalls in Cisco IOS Security, instead typically deploying standalone firewalls such as Cisco FTDs or Cisco ASA devices. For threat analytics and vulnerability scanning, we utilize third-party vendors with dedicated devices and software. We use products such as Tenable from Nessus for this type of analysis. We have implemented Secure Access Control Server in Cisco IOS Security, which combines multiple security mechanisms including AAA, 802.1X for network access control with Cisco ICE, TrustSec for identity-based segmentation, and Cisco DNA Center. Cisco IOS Security's VPN support is comprehensive and increasingly important in daily communication, from basic site-to-site tunnels to remote access VPNs and SD-WAN secure VPNs. Protecting and encrypting communication is essential in modern networks. The challenges with Cisco IOS Security are more operational than product-related. There is an understaffing issue, making automation and orchestration capabilities particularly valuable. For the products themselves, we only encounter routine operational matters such as addressing new vulnerabilities and patching. For those considering Cisco IOS Security, it is important to understand that Cisco offers a complete ecosystem. When embracing the Cisco ecosystem fully, customers receive excellent products and comprehensive solutions. On a scale of 1-10, I rate Cisco IOS Security a 9.
Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at Arrow PC Network Pvt Ltd
Advanced visibility has transformed security policies and provides proactive threat prevention
Palo Alto Networks NG Firewalls are powerful, but there are areas for improvement that could enhance their effectiveness, such as cost and licensing models. One of the main challenges we face is the high cost, especially for small to mid-sized businesses (SMBs), with licensing for features such as threat prevention, URL filtering, and WildFire being quite expensive. Additionally, centralized management with Panorama is a dependency for managing multiple firewalls, leading to added costs and complexity, and the built-in centralized management features could be made more user-friendly. Moreover, the learning curve associated with the initial setup and advanced configuration including NAT, decryption, and routing can be complex for new users, and enhancements in logging and reporting could also improve the user experience. There are a few more areas where improvements could streamline operations, such as optimizing commit times. Sometimes committing changes takes a noticeable amount of time, particularly for larger configurations, so a faster commit option would significantly help during urgent troubleshooting. Easier policy troubleshooting is necessary as well. Even though logs are detailed, finding the exact rule match and issue can still be time-consuming in complex environments, so having automated policy simulation and a recommendation tool would expedite troubleshooting. Additionally, better default templates and best practices for SMB data centers and branch offices would speed up deployment and reduce errors. Enhancing integration visibility through a unified dashboard would simplify monitoring, and improving the firmware upgrade process to allow for a more seamless zero downtime upgrade would also enhance operations, as upgrades are stable but typically require careful planning and downtime.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
886,468 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
7%
Computer Software Company
16%
Construction Company
9%
Financial Services Firm
7%
Comms Service Provider
7%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business365
Midsize Enterprise135
Large Enterprise191
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise14
Large Enterprise18
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise56
Large Enterprise85
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Cisco IOS Security?
Cisco IOS Security is a mature product with extensive capabilities, serving as the base for the defense layer. It off...
What is your experience regarding pricing and costs for Cisco IOS Security?
The cost of Cisco IOS Security for customers is on the higher end of pricing compared to the competition, depending o...
What needs improvement with Cisco IOS Security?
Regarding improvements in Cisco IOS Security, what consistently confuses me is the inability of Cisco to maintain a c...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
IOS Security
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Arup Group, Brunel University London, City of Biel, Gobierno de Castilla-La Mancha, K&L Gates , New South Wales Rural Fire Service, Offshore Northern Seas, Transplace
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
Find out what your peers are saying about Cisco IOS Security vs. Palo Alto Networks NG Firewalls and other solutions. Updated: April 2026.
886,468 professionals have used our research since 2012.