Try our new research platform with insights from 80,000+ expert users

FortiGate Next Generation Firewall (NGFW) vs IPFire comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
FortiGate Next Generation F...
Ranking in Firewalls
10th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
46
Ranking in other categories
ZTNA (4th), Unified Threat Management (UTM) (9th)
IPFire
Ranking in Firewalls
37th
Average Rating
8.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of FortiGate Next Generation Firewall (NGFW) is 0.3%, up from 0.1% compared to the previous year. The mindshare of IPFire is 1.3%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Anish Bheekoo - PeerSpot reviewer
Good support and highly scalable solution
In terms of support, they are very responsive. If you reach out to them, they will contact you within 15 minutes. Managing FortiGate is easy and simple compared to other products. It's not too complex. Even if we miss renewing our licenses, FortiGate provides a grace period of 90 days, which is exceptional. Most products only offer 30 days. That's the best part, in my opinion. The support is excellent. I've had very positive experiences with FortiGate's support team. They are friendly and always available. Their support is available 24/7 via phone, email, or chat. They even offer remote access if we need help with configuration or auditing logs. Their support is reliable both locally and internationally.
Amr Fouad - PeerSpot reviewer
Prevented any kind of hacking and enables us to comply with customer requirements
We use the solution for firewall, intrusion prevention and detection. We installed it in order to comply with customers requirements IPFire has prevented any kind of hacking and enables us to comply with customer requirements. Accessing the internet was a bit complicated. We opted for this…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"There are lots of features and most of them are deployed for internet security. Users are protected if they accidentally go to some malicious sites."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"The most valuable feature of Fortinet FortiGate is security. They are known for efficiency and are on the top of Gartner Quadrant reviews. Fortinet FortiGate has an easy-to-use platform with a good graphical interface. The configuration is simple and the solution provides an overall good layer of security."
"The most valuable feature is the FortiManager for centralized management."
"We can detect any attack of viruses or malware at the first point of contact."
"The CLI is robust and powerful, enabling rapid, consistent changes via SSH."
"It blocks the vulnerabilities that can negatively impact us."
"The network security and cloud security are most valuable."
"The most valuable feature of FortiGate Next Generation Firewall is its SD-WAN."
"The FortiGate Next-Generation Firewall is always updating. For example, if there is a big attack, they fix it in their firmware. They release new firmware with the necessary patches to address the vulnerabilities."
"It is a very user-friendly solution. Moreover, Foritgate offers good performance."
"The solution’s interface is pretty user-friendly."
"The solution has a user-friendly interface."
"When I survey FortiGate products, I see that they have a good performance, especially in terms of next generation firewalls."
"The most valuable features we found are the SD-WAN, FortiGate SD-WAN, and the standard UTM protection, among others."
"Routing and reporting are two areas where the product has an added advantage compared to any other product."
"IPFire has prevented any kind of hacking and enables us to comply with customer requirements."
 

Cons

"Pricing for it is a bit high. It could be cheaper."
"WAN load-balancing could be a lot better at detecting when a link is poor or inconsistent, and not just flat out dead."
"The solution's framework needs to be frequently updated in order to have a stable solution."
"The improvement is related to logs. Instead of the CLI, we should be able to have more insights into the logs of the firewall in the GUI."
"In the balance between links feature normally you can just choose one option to balance. It would be better for the solution to have more than one option, preferably three."
"It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server."
"The advanced models are expensive."
"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."
"The licensing model and pricing need improvement."
"FortiGate may include AI capabilities and integrate external threat intelligence. However, version management and backup/restore operations could be improved."
"One area for improvement is the IPS engine."
"The solution must improve the support provided for customers around the globe, considering the time differences in different places."
"The product's data guard feature should support a USB port when the internet connection is unavailable."
"I would like to have SD-WAN as a part of the Next Generation Firewall. It would enhance high availability."
"The solution needs to improve its support."
"I would like to see improvements in some of the hard drive features on FortiGate so that we can generate reporting within a single box."
"Accessing the internet was a bit complicated."
 

Pricing and Cost Advice

"Fortinet has more device options that are affordable for small businesses than Palo Alto, and its enterprise-level models are also cheaper. Palo Alto also has a separate license for VPN connections and SD-WAN, but FortiGate offers these features standard."
"The price of the license and warranty can be better because it is very expensive."
"It is a good product from a price perspective versus functionality."
"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."
"If the price of the license in Fortinet FortiGate was less expensive it would be better."
"Fortinet's pricing is more straightforward than other solutions. If Fortinet doesn't stick out when you're searching for a solution, you are a glutton for punishment. You only need to know two things when purchasing a Fortinet solution: your total bandwidth and bandwidth at the site. You need to estimate the future bandwidth with other solutions if your customer plans to upgrade."
"Fortinet FortiGate as a less expensive solution than Palo Alto."
"We find the most valuable aspect of this solution is the price. It is affordable, and cheaper than other firewalls."
"Although the solution's pricing is high, compared with other products, it may be cheap."
"The solution is more expensive than Sophos. It could be cheaper. The licensing is on a yearly basis. We have had it for about three years. We must only pay extra for the license, additional requirements, and the hardware box."
"FortiGate Next Generation Firewall is a very cheap solution."
"The pricing is better compared to other solutions like Check Point, Arista, or Cisco."
"I rate the pricing an eight and a half on a scale of one to ten, where one is low, and ten is high."
"It's an expensive solution"
"FortiGate Next-Generation Firewall is cheaper than Cisco or CheckPoint."
"The solution's price is average."
Information not available
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
21%
Comms Service Provider
13%
Educational Organization
7%
Non Profit
6%
Comms Service Provider
24%
Computer Software Company
14%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about FortiGate Next Generation Firewall (NGFW)?
The tool's most valuable feature is IPS. In my experience, I haven't encountered any issues with integration. It easi...
What is your experience regarding pricing and costs for FortiGate Next Generation Firewall (NGFW)?
The price is very aggressive in India as India is a rapidly growing market, the original equipment manufacturer offer...
What needs improvement with FortiGate Next Generation Firewall (NGFW)?
I would like to see improvements in some of the hard drive features on FortiGate so that we can generate reporting wi...
What needs improvement with IPFire?
Accessing the internet was a bit complicated.
What is your primary use case for IPFire?
We use the solution for firewall, intrusion prevention and detection. We installed it in order to comply with custome...
What advice do you have for others considering IPFire?
I recommend the solution. Overall, I rate the solution an eight or nine out of ten.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
1. Siemens 2. IBM 3. Cisco 4. Dell 5. HP 6. Intel 7. Oracle 8. Google 9. Microsoft 10. Amazon 11. Apple 12. Facebook 13. Twitter 14. Netflix 15. Adobe 16. SAP 17. VMware 18. Juniper Networks 19. Ericsson 20. Nokia 21. AT&T 22. Verizon 23. T-Mobile 24. Vodafone 25. Orange 26. Deutsche Telekom 27. British Telecom 28. Comcast 29. Time Warner 30. Sony 31. Samsung 32. LG
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls. Updated: January 2025.
831,020 professionals have used our research since 2012.