Fortinet FortiClient vs SonicWall Capture Advanced Threat Protection comparison

The compared Fortinet and SonicWall solutions aren't in the same category. Fortinet is ranked #12 in EPP , with an average rating of 8.1, and holds a 1.8% mindshare in the category. SonicWall is ranked #28 in ATP , and holds a 2.2% mindshare. Additionally, 92% of Fortinet users are willing to recommend the solution, compared to 100% of SonicWall users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Fortinet FortiClient and SonicWall Capture Advanced Threat Protection based on real PeerSpot user reviews.

Find out in this report how the two Endpoint Protection Platform (EPP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection Report (Updated: March 2020).

Buyer's Guide

Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection

March 2020

Download the complete report

Helped 887,041 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiClient	1.8%
Microsoft Defender for Endpoint	7.2%
CrowdStrike Falcon	6.3%
Other	84.7%

Endpoint Protection Platform (EPP)

Advanced Threat Protection (ATP) Mindshare Distribution
Product	Mindshare (%)
SonicWall Capture Advanced Threat Protection	2.2%
Palo Alto Networks WildFire	7.5%
Microsoft Defender for Office 365	6.9%
Other	83.4%

Advanced Threat Protection (ATP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Kok Keong-Low

Senior Technical Manager at Flexaccel

Remote access has become seamless and secure while deployment remains simple for our users

Performance could be improved today. People are now moving toward SASE, which stands for Secure Access, Secure Edge Solution. Fortinet also has that offering, which would be easier since it operates through the cloud, acting as a first line of defense. When the user connects to the internet, they connect to the cloud first for posture assessment and monitoring before connecting to the outside world. The impact is significant because nowadays people are adopting SASE. During COVID time, many users were trying to connect back to their office, causing the performance or CPU utilization of the firewall to increase tremendously, which slowed down performance. I have not worked with endpoint telemetry in Fortinet FortiClient that could have been helpful for threat mitigation.

Read full review

MohammadAta

Technical Manager, NOC at TEXUM JORDAN

Has a good configuration but the price should be more competitive

Our primary use case of this solution is for security. It's a good solution but the price is high. It also has an easy configuration. The feedback that we get from our customers is that it's a good product. Our customers are mostly smaller enterprises. The price should be more competitive. I…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The level of security I get for my endpoints and servers is extremely valuable."

"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."

"Cortex XDR features advanced threat detection capabilities."

"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."

"It has pretty much everything we need and works well within the Palo Alto ecosystem."

"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

"The tool is designed to scale for large enterprises and handle large volumes of data."

More Cortex XDR by Palo Alto Networks pros

"Installation was easy."

"The return on investment was very reasonable. It was low cost and it functioned, so the return on investment was excellent."

"It works well with the Fortigate Firewall."

"The product works fine and I have never had any problems with it."

"The Fortinet FortiClient is simple to use, easy to install, supports two-factor authentication, has good reporting, is user-friendly, and has good documentation."

"The VPN capabilities are good, it's very stable, it can scale well, and technical support has been helpful."

"It is not at all interesting for me as a standalone product, but as a product that is integrated with FortiGate with all features, it is actually a great tool and a great experience."

"We mainly use this solution because we have many Fortinet solutions like antivirus and SSL assessment."

More Fortinet FortiClient pros

"The reporting that you get from it is the most valuable feature. You can see it via the appliance itself, and also via the MySonicWall account for the registered device. You are able to select the file if it's malicious, and you can select it in the reporting and see what triggered it, and things like that. I found that to be quite useful."

"The most valuable feature is the alerting system."

"SonicWall came out with a new add-on; it was inexpensive to add on to the existing product that we already owned, so we added it."

"The ATP (Advanced Threat Protection) on scanning is the most valuable feature."

"The feedback that we get from our customers is that it's a good product."

"I like this setup for a firewall. You can set things up very easily and you can automate items as well. It's a very robust firewall solution for enterprise as well as small businesses."

"We use it for protection against viruses and ransomware attacks."

"We get alert messages whenever there is a new threat. We are notified at the firewall level that things are blocked, which keeps us in our comfort zone."

More SonicWall Capture Advanced Threat Protection pros

Cons

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

"The product's pricing needs improvement. They could provide more discounts. Additionally, the dashboard and control panel could be enhanced."

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."

"We have found that there are times Cortex XDR by Palo Alto Networks does not detect some of the viruses, we have to use another protection solution called Kaspersky."

"The solution lacks real-time, on-demand antivirus."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."

More Cortex XDR by Palo Alto Networks cons

"I haven't found that the solution does anything amazing; there is nothing special about it."

"While I cannot think of new features to add, it would be nice if the reports were improved, to have these sent automatically."

"As far as I can tell, the solution only has one single function, so they could expand its functionality."

"The user interface on the central server could be improved."

"The solution could add data to the endpoint."

"I'm hoping they change the management system."

"They can improve the interface because it is very technical for a normal client to understand."

"Technical support has been a nightmare."

More Fortinet FortiClient cons

"SonicWall should promote their roadmap and improve their marketing to customers."

"The setup needs improvement. It needs to be made more user-friendly."

"Sometimes customers are not aware of which protection is best for their business and SonicWall doesn't provide them with information on security features."

"SonicWall had a recent layoff. This is a concern for us, because now we are missing the local presence from both the engineering and sales side."

"The setup needs improvement. It needs to be made more user-friendly."

"Having an on-premise solution as well would be an option for some people, but they'll want to use a cloud solution for their sandboxing. Certain sites would want to keep all the checks done on an on-premise appliance. All the checking, rather than sending that up into a cloud engine."

"I would say the solution needs a much simpler user interface, but the functionality of the firewall is quite extensive."

"It does fare well against enterprise products."

More SonicWall Capture Advanced Threat Protection cons

Pricing and Cost Advice

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"The price of the solution is high for the license and in general."

"It is "expensive" and flexible."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Its pricing is good. One thing that has always attracted us to the Fortinet range of products is that their pricing is very competitive. Our particular licensing is on a yearly basis. However, as part of this project, we did pre-purchase three years of maintenance and support at a fairly significant discount."

"The solution is not expensive. We need more discounted rates in Pakistan. The price of the solution could be reduced to be more affordable for the solution."

"I don't have the licensing schema for the VPN solution because we just purchased the VPN gateway."

"An annual license costs about 1.5 to 3,000 US dollars. There are no additional costs."

"Pricing is an area that I would like to see improved, as it could be lower."

"As a technical team member, I am not responsible to look into the pricing matters. These aspects are typically handled by the management team, who have the authority to obtain the necessary licenses based on certain established principles."

"The cost per port is very less as compared to the other technologies."

"The licensing fee varies with what one is trying to accomplish. It can range from being free to costing several hundred thousand dollars per year."

More Fortinet FortiClient pricing and cost advice

"The best deal from SonicWall is to buy the HA pair. When you buy the initial one, you receive the second one at a significant discount. If there is an event and something happens to one firewall, then you have the second firewall to roll into. For the price, it's pretty to tough to beat and not a lot of other firewall vendors offer it. You battle for a discount on both. Where with SonicWall, if you buy one, the second one is at half price. It's pretty straightforward."

"We get our value for our money."

"It's thirty dollars per user and we have 30 users."

"When you compare it with other solutions, they are cheaper and more economical."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

887,041 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

11%

Computer Software Company

Comms Service Provider

Financial Services Firm

Construction Company

17%

Comms Service Provider

13%

Media Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	20
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	23
Large Enterprise	25

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	3

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

How does Fortinet FortiClient compare with Open VPN Access Server?

Fortinet FortiClient is a feature-rich solution that is easy to use and deploy without sacrificing safety and securit...

See all answers

What's the difference between Fortinet's FortiEDR and FortiClient?

I suggest Fortinet’s FortiEDR over FortiClient for several reasons. For starters, FortiEDR guarantees solid protectio...

See all answers

What is your experience regarding pricing and costs for Fortinet FortiClient?

The solution is not cloud-based; it comes from the firewall itself.

See all answers

What needs improvement with SonicWall Capture Advanced Threat Protection?

SonicWall Capture Advanced Threat Protection needs to reconsider the pricing, especially in the cloud environment. Th...

See all answers

What is your primary use case for SonicWall Capture Advanced Threat Protection?

My main use case for SonicWall Capture Advanced Threat Protection is that it helps us with sandboxing for analyzing a...

See all answers

What advice do you have for others considering SonicWall Capture Advanced Threat Protection?

I advise others looking into using SonicWall Capture Advanced Threat Protection to consider that it is truly helpful ...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

OpenVPN Access Server vs Fortinet FortiClient

Compared 14% of the time

SentinelOne Singularity Endpoint vs Fortinet FortiClient

Compared 5% of the time

Microsoft Defender for Endpoint vs Fortinet FortiClient

Compared 4% of the time

Kaspersky Next XDR Optimum vs Fortinet FortiClient

Compared 3% of the time

Ivanti Connect Secure vs Fortinet FortiClient

Compared 3% of the time

More Fortinet FortiClient Competitors

Fortinet FortiSandbox vs SonicWall Capture Advanced Threat Protection

Compared 21% of the time

Palo Alto Networks WildFire vs SonicWall Capture Advanced Threat Protection

Compared 16% of the time

Check Point SandBlast Network vs SonicWall Capture Advanced Threat Protection

Compared 8% of the time

Microsoft Defender for Office 365 vs SonicWall Capture Advanced Threat Protection

Compared 8% of the time

Barracuda CloudGen Firewall vs SonicWall Capture Advanced Threat Protection

Compared 7% of the time

More SonicWall Capture Advanced Threat Protection Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Fortinet FortiClient

April 2026

Download Fortinet FortiClient product report

Buyer's Guide

Advanced Threat Protection (ATP)

April 2026

SonicWall Capture Advanced Threat Protection report

Download SonicWall Capture Advanced Threat Protection product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

FortiClient

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

FortiClient is a fabric agent that delivers endpoint protection, endpoint compliance, and secure access in a single, lightweight, lightweight client, providing visibility, information, and control to your endpoints. In addition, it enables secure, remote connectivity to the security fabric. It also integrates network and endpoint with segmentation and automation. FortiClient enables unified endpoint awareness by sharing endpoint telemetry with the security fabric. It is compatible with third-party EDR (endpoint detection and response and anti-malware solutions.

The FortiClient fabric agent can:

• Report on the status of a device, including firmware version and applications running.
• Send all suspicious files to a fabric sandbox.
• Enforce USB control, application control, URL filtering, and firmware upgrade policies.
• Provide application firewall service and malware protection.
• Enable devices to connect securely to the security fabric over either ZTNA tunnels or VPN (IPsec or SSL), both encrypted. The connection to the security fabric can be either a SASE service or a FortiGate next-generation firewall.

You can purchase FortiClient with one of three levels of capability:

Zero Trust security - The ZTNA edition enables both VPN and ZTNA encrypted tunnels, as well as USB device control and URL filtering.
Endpoint security - The EPP/APT edition adds AI-based NGAV (next-generation antivirus), application firewall, endpoint quarantine, and support for cloud sandbox.
Cloud-based endpoint security

Benefits and Features

• Fabric agent leverages integrations and provides telemetry information to the rest of the Fortinet security fabric.
• SAAS control and web/content filtering
• Dynamic access control helps with automation and simplifies compliance.
• Software inventory management enables visibility as well as management of licenses.
• Automated response detects and isolates any endpoints that may be compromised.
• ZTNA delivers better remote access and consistent application access policies
• Managed endpoint security services remotely assist with setup, configuration, deployment, vulnerability monitoring, and overall monitoring of endpoint security.

Reviews from Real Users:

PeerSpot users like that FortiClient is easy to use and integrates well with other solutions. They also appreciate the richness of its features and find it to be inexpensive in comparison to other products that require separate purchases for separate features.

Fortinet

SonicWall Capture, a cloud based service available with SonicWall firewalls, revolutionizes advanced threat detection and sandboxing with a multi-engine approach to stopping unknown and zero-day attacks at the gateway, and with automated remediation. Customers benefit from high security effectiveness, fast response times and reduced total cost of ownership.

SonicWall

Sample Customers

CBI Health Group, University Honda, VakifBank

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data

Wonder Cement, Foster Clark Products

Buyer's Guide

Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection

March 2020

Free Report: Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection

Find out what your peers are saying about Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection and other solutions. Updated: March 2020.

DOWNLOAD NOW

887,041 professionals have used our research since 2012.

See our Fortinet FortiClient vs. SonicWall Capture Advanced Threat Protection report.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.