Try our new research platform with insights from 80,000+ expert users

Cloudflare One vs Prisma SD-WAN comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 4, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Software Defined WAN (SD-WAN) Solutions
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
587
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cloudflare One
Ranking in Software Defined WAN (SD-WAN) Solutions
13th
Average Rating
8.8
Reviews Sentiment
6.7
Number of Reviews
22
Ranking in other categories
Email Security (20th), Secure Web Gateways (SWG) (15th), Data Loss Prevention (DLP) (21st), Cloud Access Security Brokers (CASB) (11th), Distributed Denial-of-Service (DDoS) Protection (7th), Access Management (12th), Bot Management (3rd), ZTNA as a Service (8th), ZTNA (3rd), Secure Access Service Edge (SASE) (10th), Remote Browser Isolation (RBI) (3rd)
Prisma SD-WAN
Ranking in Software Defined WAN (SD-WAN) Solutions
5th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
25
Ranking in other categories
WAN Edge (5th), Secure Access Service Edge (SASE) (9th)
 

Mindshare comparison

As of March 2026, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Fortinet FortiGate is 12.3%, down from 20.0% compared to the previous year. The mindshare of Cloudflare One is 3.5%, up from 1.9% compared to the previous year. The mindshare of Prisma SD-WAN is 5.7%, down from 5.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Defined WAN (SD-WAN) Solutions Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate12.3%
Prisma SD-WAN5.7%
Cloudflare One3.5%
Other78.5%
Software Defined WAN (SD-WAN) Solutions
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
reviewer2706744 - PeerSpot reviewer
Cybersecurity Analyst at a government with 201-500 employees
Navigating documentation challenges leads to reduced incidents with strong setup
The areas that need improvement include documentation/customer support and cross-communication between the support teams. The documentation tends to be outdated, often directing us to resources that are no longer accurate or available, and this is one of the reasons we are potentially looking at alternatives. In terms of the Prisma SD-WAN security integrations, we have seen some benefits, but part of our difficulty is trying to get all of that information on what it does and set up properly. Because we've had issues in the past with getting devices set up properly, scalability is a significant concern for us due to the poor documentation that limits our ability to understand and utilize their system effectively.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The security for endpoints is the most valuable. It is very secure for our workers. It allows us to secure a transaction and enable security for a specific segment in the workflow."
"FortiGate Next Generation Firewall has a very high ROI"
"Centralized monitoring, policy management, and virtualized appliances allow us to take control over our public and private infrastructure."
"It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything."
"FortiOS is quite good in my experience with Fortinet FortiGate, and it works very effectively and is stable for companies. The customers have given feedback that FortiOS has been very stable for a long time."
"The technical support is good."
"The most valuable features of Fortinet FortiGate are the ease of use and there are several operating systems that can include the hardware capacities. In the newer releases, the resources were more useful because they were included in the operating system."
"It's a user-friendly firewall. Most of the tasks are very simple. It's simple to configure and troubleshoot this firewall."
"Using Cloudflare One makes my work quite easy because for DDoS protection, all I need to do is understand the OSI model and click; it makes it easier than trying to write a command line or use a Linux command."
"The simplicity of the solution is its valuable features as almost no effort was needed to learn the configurations. It is also one of the cheapest firewalls available in this category."
"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."
"Clover is the best product globally."
"Cloudflare is simple to use."
"The blocking feature is very good."
"Cloudflare Access is part of the Zero Trust philosophy."
"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."
"The security offered by the solution is pretty good."
"The product's initial setup phase is straightforward."
"From the main controller, we can administer the customer's devices, QoS, network, and traffic. We can monitor it and we can change and create policies as well as upgrade the software. We can totally control a customer's network from one site, the Prisma SD-WAN portal."
"I like that the integration with Palo Alto is easy."
"Prisma SD-WAN is recommended due to its comprehensive capabilities."
"The implementation of the solution is easy."
"The dynamic routing in Prisma SD-WAN is high-speed and valuable because it quickly adjusts, so users do not realize the link is down."
 

Cons

"Quality control on their firmware versions needs improvement. When they introduce new firmware, there tend to be bugs."
"Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards. Fortinet is lacking in features in comparison to competitors."
"In the next release, maybe the documentation on how to use this solution could be improved."
"The pricing of the solution is expensive, so it could be cheaper."
"We have never encountered any issues with it. The price and deployment part of Fortinet FortiGate is good, but it can always be better."
"Even though our currency in this part of the world is becoming increasingly weak, the pricing is now expensive for us. I have tried pushing Fortinet FortiGate to some customers, however, sometimes the transactions don't conclude due to pricing issues."
"I wish that they could integrate zero-trust technology into Fortinet FortiGate. I am not sure whether it has been done already, but if they could implement that, it would help significantly."
"Monitoring could be improved."
"There are premium tier live service and lower tier live service, so we opted for the lower tier. But there is no medium tier where we pay a little extra and get a bit more service. So if that can be improved."
"The initial onboarding was causing us some confusion."
"The onboarding process can be improved a little bit."
"Cloudflare DDoS has poor technical support."
"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."
"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
"For the topic of improvement, providing some training material is one of my suggestions."
"The tool should provide on-premise versions. Currently, all versions are cloud-based."
"The solution should include custom ports and group voice connections."
"The product could be a bit cheaper for the services it provides."
"I'd like to see them move more towards CASB."
"Event correlation and analysis capabilities do not help minimize the number of alarms from a single event. That is the problem. We are getting a lot of incidents, and there is some issue with the correlation. That is still a drawback."
"The pricing for Prisma SD-WAN needs improvement."
"The setup isn't completely straightforward, but it's manageable when you have proper knowledge."
"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."
"It is widely known that Palo Alto is quite expensive. The licensing model is pretty expensive, which would be the only downside to Palo Alto, but regarding the features of the box, it does what it needs to do."
 

Pricing and Cost Advice

"I'll rate FortiGate's pricing a five out of ten since it is moderately priced."
"The solution is more expensive than Sophos. It could be cheaper. The licensing is on a yearly basis. We have had it for about three years. We must only pay extra for the license, additional requirements, and the hardware box."
"If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it."
"The price of FortiGate is average and I would say that based on the top five products available on the market, it is in the affordable range."
"The Fortinet FortiGate security features cost approximately $1,500 a year. The firewall itself doesn't have a recurring cost. It's the security features on top of that that you pay for."
"I think price-wise, the solution is totally reasonable since it has many products to serve, starting from small homes to massive scale sites."
"Easy to understand licensing requirements."
"I rate FortiGate Next Generation Firewall a five out of ten for pricing."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The prices are slightly expensive."
"Cloudflare Zero Trust Platform's pricing is good."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"The solution is not that expensive."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"The solution's pricing lacks transparency."
"Prisma SD-WAN is a pretty expensive solution."
"It is more expensive than Fortinet."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."
"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
884,012 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Comms Service Provider
11%
Computer Software Company
10%
Financial Services Firm
8%
Manufacturing Company
8%
Financial Services Firm
13%
Manufacturing Company
9%
Computer Software Company
7%
Legal Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business360
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise10
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise5
Large Enterprise13
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What needs improvement with Cloudflare Access?
Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...
What is your primary use case for Cloudflare Access?
Cloudflare Access provides secure access to internal applications for employees, external members of the organization...
What advice do you have for others considering Cloudflare Access?
Cloudflare Access is one of the best integrations available. While about two hundred vendors offer similar services, ...
What is your experience regarding pricing and costs for Prisma SD-WAN?
Regarding whether Prisma SD-WAN is an expensive solution, I would say the price is competitively high. Everything dep...
What needs improvement with Prisma SD-WAN?
I am still working on what should be improved in Prisma SD-WAN to make this product better, and I cannot give any upd...
What is your primary use case for Prisma SD-WAN?
Our customers' main use cases for Prisma SD-WAN are to connect multiple branches since they have numerous locations t...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
CloudGenix
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
23andMe
Open Networking User Group, Columbia Sportswear Company, Coca Cola
Find out what your peers are saying about Cloudflare One vs. Prisma SD-WAN and other solutions. Updated: March 2026.
884,012 professionals have used our research since 2012.