FortiGate Next Generation Firewall (NGFW) vs Zscaler Cloud Firewall comparison

FortiGate Next Generation Firewall (NGFW) vs. Zscaler Cloud Firewall

Download the complete report

Helped 848,207 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of April 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.1%, up from 17.7% compared to the previous year. The mindshare of FortiGate Next Generation Firewall (NGFW) is 0.4%, up from 0.2% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 0.4%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

MOHAN SUKUMAR

Head of computer systems at Indian Institute of Space Science & Technology(IIST)

User-based policies improve network security but integration complexity persists

The main area needing improvement is the user-friendliness of FortiGate's integration with other Fortinet tools like FortiAuthenticator and VPN services. Configuring these services is quite complex and not very user-friendly, requiring technical steps that are difficult for normal users to understand. Fortinet support's resolution of issues is slow, and the research on making the solution user-friendly needs to progress further.

Read full review

Bhaskar Rao

Network manager admin at Yamaha

Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues

The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The VPN is the most valuable feature."

"The most valuable features of Fortinet FortiGate are the rules and quality of service."

"The solution can scale well."

"The wireless control is helpful."

"It does a lot for you for intrusion protection and as an antivirus. The threat management bundle is worth the money. You don't need another company to monitor your web traffic for you. You can do everything yourself on the firewall. You restrict your own black list for people on the firewall. You don't need to pay some other company for another product to do that for you. The firewall can do that for you. So, it's an easy-to-use product for people to be independent. They don't need to rely on other vendors to do what the firewall can do. They can do everything."

"The most important feature, normally for small business customers, is link load balancing."

"Its administrative panel is very intuitive and simple. It is simpler than the other solutions that we had. As an administrator, we are always looking for the easiest solution to manage network policies. We are able to filter everything on our network and also use the VPN feature, which is important these days when people are working remotely during COVID."

"The features that prevent internet connections, the filtering are the most valuable because we did not have any internet protection before."

More Fortinet FortiGate pros

"The firewall and VPN features are the most valuable in protecting our customers' networks."

"The common valuable feature for FortiGate is its UTM functionality, which includes various features under a license that is commonly implemented."

"FortiGate Next Generation Firewall has a simple configuration."

"FortiGate Next Generation Firewall has IBS/IPS systems"

"There are multiple features I have found to be valuable, such as encryption and integrated security features."

"The scalability is very good."

"The most helpful features of FortiGate include its firewall policy, specifically the user-based policy, which I find to be quite beneficial in managing our network security effectively."

"The solution is secure."

More FortiGate Next Generation Firewall (NGFW) pros

"Most of the features that Zscaler has to offer, we will deploy."

"The technical support from Zscaler was excellent."

"Once you have Zscaler running you have access to configure it however you want."

"It helps a lot of companies to reduce their downtime. Also, It helps businesses in terms of being secured and protected from any threats."

"The product’s firewall and VPN package are fantastic compared to any other solution."

"It provides in-depth visibility into your network, ensuring that traffic flowing into your organization, be it from offices or individual users, is effectively filtered and secured through multiple layers of protection."

"The scalability is okay. We have around 2200 people using this solution."

"Since it is really customizable, I can use it and avoid enabling access to the full network."

More Zscaler Cloud Firewall pros

Cons

"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."

"We would like to see a better training platform implemented."

"They need faster serviceability and more security features."

"I feel that the reporting needs to be improved."

"It should be more stable. There should be full integration within Fortinet products themselves as well as with other third-party products. Especially when you're not dealing with SIEM and the correlation of the security box, we want Fortinet to be able to share that information with as many other products as it can."

"It would be good if they had fewer updates."

"There were quite a few problems with the stability of the system."

"It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features."

More Fortinet FortiGate cons

"The solution's stability should be improved because it is extremely unstable."

"There are some issues with security features and aspects like logs not being up to the mark."

"I would like to see improvements in the IPS/IDS feature to enhance protection against attacks from attackers, including ransomware protection."

"The management consoles can be improved."

"Vulnerabilities owing to viruses in the OS need to be reduced in FortiGate Next Generation Firewall from an improvement perspective."

"There have been several vulnerabilities in the firewall. It is hackable, some of the images are hackable."

"Technical support is not helpful."

"The solution’s pricing is high."

More FortiGate Next Generation Firewall (NGFW) cons

"Certain criteria need to be met if you want to scale this solution."

"Its technical support services could be better."

"There are some areas it could improve when it comes to blocking, we have to block some things manually. For example, if we block a top-level domain we have seen that the new IPs come through, the IPs are not blocked. There should be some more granular way of doing it. My only request is if you're blocking something at a top level, the sub-level sub-domains and all those other IPs should be blocked too automatically."

"Zscaler Cloud Firewall should have a better understanding of all dynamic cloud applications."

"Pricing is a challenge."

"We are having some issues with internet access being denied when organizational ID-based policies change. For example, a lower level employee ends up getting the same level of access as that of a higher level employee."

"Apart from the issues associated with the product in areas like the DC performance issues and DC failover, Zscaler Cloud Firewall's IP should not have a proxy IP."

"Because it's on cloud, it doesn't allow application of extra settings."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"If you purchase a one-year subscription with the hardware and then you want to renew for the second year, it is very costly."

"Compared to other firewall products, it's a little cheaper in terms of pricing."

"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."

"It is cost-effective, and provides a good value for your money. The pricing, and license renewal, is very reasonable for us."

"Pricing is good. They offer a lot of things, the most important is the support. Every time you upgrade your license, you also get insurance for the equipment. If you have any problem with equipment, they send in new equipment."

"Before choosing a piece of equipment you have to take into account the cost-benefit offered by each one. Sometimes it is not worth paying a very cheap price to have a minimum level of security."

"The price of Fortinet FortiGate is the lowest in the market."

"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."

More Fortinet FortiGate pricing and cost advice

"The product is a little bit expensive."

"FortiGate Next Generation Firewall costs our company around $12000 per year."

"We pay $500 per year for the license."

"It is an expensive solution."

"FortiGate Next Generation Firewall is a very cheap solution."

"The solution's price is average."

"It's an expensive solution"

"The solution is more expensive than Sophos. It could be cheaper. The licensing is on a yearly basis. We have had it for about three years. We must only pay extra for the license, additional requirements, and the hardware box."

More FortiGate Next Generation Firewall (NGFW) pricing and cost advice

"It is not the most budget-friendly solution, but it's important to consider its overall value."

"It comes at a significantly reduced cost while ensuring control and effectiveness."

"Zscaler is priced too high compared to the cost of Fortinet."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

"There are different subscription models available."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

"There are licensing costs, and I would not say that it's a cheap vendor."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

848,207 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

21%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

20%

Comms Service Provider

11%

Financial Services Firm

Manufacturing Company

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What do you like most about FortiGate Next Generation Firewall (NGFW)?

The tool's most valuable feature is IPS. In my experience, I haven't encountered any issues with integration. It easi...

What is your experience regarding pricing and costs for FortiGate Next Generation Firewall (NGFW)?

The pricing of the FortiGate firewall is good. It offers cost savings as it is generally cheaper than the competition.

What needs improvement with FortiGate Next Generation Firewall (NGFW)?

There should be more testing before releasing software since it can be a little buggy sometimes when new features com...

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need ...

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

OPNsense vs FortiGate Next Generation Firewall (NGFW)

Compared 27% of the time

Tailscale vs FortiGate Next Generation Firewall (NGFW)

Compared 24% of the time

Netgate pfSense vs FortiGate Next Generation Firewall (NGFW)

Compared 18% of the time

Fortinet FortiGate-VM vs FortiGate Next Generation Firewall (NGFW)

Compared 7% of the time

Zyxel Unified Security Gateway vs FortiGate Next Generation Firewall (NGFW)

Compared 5% of the time

More FortiGate Next Generation Firewall (NGFW) Competitors

Azure Firewall vs Zscaler Cloud Firewall

Compared 18% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 11% of the time

Check Point NGFW vs Zscaler Cloud Firewall

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 7% of the time

Cisco Multicloud Defense vs Zscaler Cloud Firewall

Compared 6% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

FortiGate Next Generation Firewall (NGFW)

Download FortiGate Next Generation Firewall (NGFW) product report

FortiGate Next Generation Firewall (NGFW) report

Download Zscaler Cloud Firewall product report

Zscaler Cloud Firewall

March 2025

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

The FortiGate Next Generation Firewall (NGFW) from Fortinet is a comprehensive cybersecurity solution designed to cater to a wide array of organizational needs. It integrates seamlessly into the Fortinet Security Fabric, offering robust protection against various internal and external threats, including attacks, malware, and vulnerabilities. The NGFW is known for its advanced features such as SSL inspection, application control, visibility enhancements, and an effective intrusion prevention system (IPS). This IPS plays a critical role in identifying and blocking malicious traffic by monitoring and inspecting incoming data.

FortiGate NGFW can be deployed in diverse environments, including on-premises, in the cloud, or hybrid setups. The firewall is equipped with next-generation antivirus capabilities, IPS, web filtering, sandboxing, and intelligent security automation features like threat intelligence integration and automated incident response. Its reporting and analytics tools are comprehensive, aiding in enhancing an organization's security posture.

A notable aspect of the FortiGate NGFW is its diverse and highly rated features, including a powerful VPN, a user-friendly Firewall Management Console, policy-based controls, and advanced reporting and logging capabilities. The system also supports Identification Technologies, Visualization Tools, Content Inspection, and seamless integration with Active Directory and LDAP directories. Its High Availability and the flexibility to deploy in various configurations, such as on-premises or as a Virtual Machine, make it a versatile choice for different business needs.

The FortiGate NGFW also excels in providing secure connectivity. It supports various VPN protocols, offers SD-WAN for intelligent traffic routing, and integrates SASE for unified security and networking solutions. These features contribute to improved security, reduced operational costs, and increased agility for organizations.

When it comes to user experiences and satisfaction, FortiGate NGFW has garnered positive feedback, with an average rating of about 4.26 out of 5 on PeerSpot Reviews. Users from diverse roles, including core network teams, technical officers, and cybersecurity engineers, and from various sectors such as tech services, education, and finance, have found the solution effective. This indicates its versatility and suitability across different company sizes and types.

However, there are areas for improvement. Enhancing the details in Logging Services and making 10 Gigabit Interfaces available for lower models are some suggested enhancements. Simplifying the installation of FortiAP services is also noted as a potential area for improvement.

Fortinet

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Zenith Live, Azure, Carlsberg Group

FortiGate Next Generation Firewall (NGFW) vs. Zscaler Cloud Firewall