Try our new research platform with insights from 80,000+ expert users

Fortinet FortiGate-VM vs Netgate pfSense comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Number of Reviews
316
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Fortinet FortiGate-VM
Ranking in Firewalls
9th
Average Rating
8.4
Number of Reviews
117
Ranking in other categories
No ranking in other categories
Netgate pfSense
Ranking in Firewalls
1st
Average Rating
8.6
Number of Reviews
206
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2024, in the Firewalls category, the mindshare of Fortinet FortiGate is 19.8%, up from 17.1% compared to the previous year. The mindshare of Fortinet FortiGate-VM is 1.8%, up from 1.8% compared to the previous year. The mindshare of Netgate pfSense is 19.5%, down from 23.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

DineshKumar28 - PeerSpot reviewer
Sep 25, 2024
Effective threat prevention with responsive customer support
We are using Fortinet FortiGate as a firewall Fortinet FortiGate has been invaluable. It has helped save costs due to its various features, reliable performance, very good UI, low latency, and stability. The Threat Intel engine in Fortinet FortiGate is highly rated for its effectiveness in…
SHUBHAM BHINGARDE - PeerSpot reviewer
Feb 8, 2024
A tool to help businesses create a blockage for external traffic
The tool improved the security in our company's virtualized environment, as it was helpful in creating an additional layer of security for the organization and for the use of the internet. The tool was the most important product to be implemented in the organization. To be able for our organization to build our services, we need to operate inside a certain network while ensuring that the outside traffic gets blocked by using the firewall services from the tool, as it helps to create a secure network inside our company. Without the tool in our organization, our network would have been compromised. The aforementioned area consists of details related to how the tool helps with the workload protection aspect. I recommend the solution to others who plan to use it since it helps in areas where it helps block a particular website with the help of the firewall functionalities that it possesses. The tool also helps block outside traffic, and it is mandatory to implement a firewall as an organization grows for the smooth operations of business. I rate the tool a ten out of ten.
Vincent Hamm - PeerSpot reviewer
Jul 1, 2024
I appreciate the depth of what the solution can do and the simplicity of the initial setup
We do a lot of managed services and are currently trying to get people off of L2TP VPN. Apparently, we can download a mobile config file from a configured NetGate device, and we're primarily Apple. We've experimented with it on a device that's not a production device, and we can't seem to get the phase one IPSec set correctly so that the Apple config will accept it. We've tried looking at the documentation but haven't found anything. While it's not the highest priority, it is rather frustrating. We'd like to do this, and the feature is right there, but we can't get it configured. We certainly don't want to try it on a production machine because it will break the current VPN. I would like to download the Apple mobile config so that I can tell it to configure my VPN connection to do that. We have some cross-platform things. So there's also a Windows VPN. You can download a script or a PowerShell, put it on a Windows machine, and it can connect to the VPN. It would be nice if I could say I want Mac only, Windows only, or both. I wish it could configure the IPSec phase one and phase two, or at least give me solid instructions on how to configure that. It doesn't supply out-of-the-box visibility to drive decisions. You get 75 log lines, so if you're trying to troubleshoot something, you have to look at one log and then another. It integrates with SysLog systems, but our customers are not at the level where they want to pay for some third-party SysLog system. Usually, we can get things taken care of fairly quickly. I would like to have the ability to control all my devices from one place. With Ubiquiti, you can get a controller that allows you to control all of your Wi-Fi devices, switches, and routers. From one area, you can switch to that customer and see what's happening in their environment. That's not part of pfSense. I understand why it's not because pfSense is open source and community supported. That's something that someone in the community needs to pick up and run with. It's not something the pfSense can easily implement. If they could, that'd be great.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ECC management and the GUI that offers single interface management are the most valuable features of Fortinet FortiGate."
"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."
"A strong point of FortiGate is the graphical interface is complete and easy to use."
"The most valuable features are the enterprise modeling and the simple interface."
"The ability to set up remote systems is the most valuable feature."
"I think that the UTM features are the most value, as it truly protects my infrastructure."
"Fortinet FortiGate's most valuable features are ease of use, flexibility, and most of the configuration we can be done using the GUI. When we compare Fortinet FortiGate with other solutions the firewall policy are very easy to understand."
"The solution can scale well."
"The product's initial setup phase was easy."
"The tool improved the security in our company's virtualized environment, as it was helpful in creating an additional layer of security for the organization and for the use of the internet."
"The initial setup was quite straightforward."
"I really like that it's internationally deployable."
"The VM it's very quick for deployment. If we need to have a POC for a customer, if we don't have any hardware physically at our premises, at our store, in our office, we can download the VM from Fortinet and install all the VM to their environment in order to run it. If we have a customer that says "let's start tomorrow" we are able to do that in a way that's not possible with a hardware version."
"It handles our current load with ease, and I think it can handle a bit more. It definitely can handle a lot more capacity than we currently use."
"The solution's initial setup process was very easy."
"Fortinet FortiGate-VM is very easy to create the user of VPN, allowing them to use it quickly. Additionally, the integration and interface are good."
"As a first-time NetGate pfSense user, I've been impressed by several features: easy integration for blocking traffic by country, straightforward creation and management of firewall rules, and the ability to extend functionality through plugins."
"It is a robust tool that can replace your consumer-grade firewall router solution."
"pfSense allows us to spread the hours of connection and do the filtering on the pfSense site."
"The most valuable features of pfSense are security, user-friendliness, and helpful online management."
"It is a resilient product with a very easy-to-use interface."
"Users can manage everything under one single pane of glass."
"Stability has been excellent. We have experienced no issues; it never fails."
"The visibility in pfSense helps optimize performance."
 

Cons

"We'd like more management across other integrations."
"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."
"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."
"The debugging and troubleshooting has room for improvement."
"The performance could be a bit better. Right now, I find it to be lacking. Having good performance is very important for our work."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"Technical support is good but the response time could be faster."
"In the next release, maybe the documentation on how to use this solution could be improved."
"We have lost some information and we do not know how that happened through the solution. So that needs improvement."
"​The tech support calls were not the best and could be improved. ​There have been times when we felt as if we knew more about the device than the support person on the phone.​"
"The log settings and filters could use some improvement."
"Now they do have the ability to pop up a command line, which is nice, however, the fact that you can't do everything within the GUI is probably a problem."
"The operating system isn't stable, so it goes to memory counters every night."
"Some issues with connecting to the VPN from home after firmware updates."
"They should keep us up to date about the latest version. That's the biggest thing. Currently, we have to go looking for the latest version. We should get notified about what's going on with the versions. I would like to see easier dual-factor authentication."
"The user interface needs to be improved."
"The solution requires a lot of administration."
"When I checked other packages, it seems they use different tools that are installed on the PSS for functionality. They rely on third-party tools, unlike Fortinet, for example, which has its own tools. In comparison, we also use third-party tools on pfSense. For example, we had a situation where we needed a tool to identify authorized users, and when I searched for a solution, I found a third-party tool. However, using such tools may come with additional costs."
"pfSense has some limitations in detecting site sessions. We want to control internet usage based on sites and their content, and pfSense doesn't perform this function."
"​Perhaps the documentation is not clear and because it is supported in the community there is no basic documentation."
"Perhaps the documentation is not clear and because it is supported in the community there is no basic documentation."
"Evaluation and contracting could be improved."
"The intrusion protection system is provided by a third-party provider that's verified by pfSense. It would be best to have an option for IPS because when you deploy pfSense to a SOC, you have to subscribe to another IPS provider. The IPS should be a default feature. On the other hand, that's also the benefit of pfSense because you can also acquire another IPS solution."
"A way to clean squid cache from the GUI."
 

Pricing and Cost Advice

"For our organization, the licensing costs are approximately $7,000 per year."
"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."
"Fortinet FortiGate is expensive."
"It is not a very costly product if you compare it with other products. The return on investment is also good. If you compare the return of investment and money that you are spending on this product with Palo Alto, Cisco, Check Point, and other solutions, the investment is very less. We are happy with this solution. The optional licenses are there, and you can choose which one you want and which one to avoid."
"If you compare Fortinet FortiGate with Sophos and other firewall products available in the market, this solution is affordable."
"The price is fair compared to the other competitors."
"You need to pay a license for this solution. Our licensing is now done in our subsidiary."
"We just pay a flat monthly fee to the vendor for the support."
"There is no additional cost. Once you get the licensing fee, you're good."
"The license we pay is a yearly fee. I can't say it's very expensive; it is a good price and is highly suitable for our usage."
"There is a benefit in terms of the cost of using this solution because the price is very good."
"There are yearly or monthly licenses which you can choose from."
"The license can be purchased at intervals of one, three, and five years."
"The pricing and licensing are not as expensive as its competitors."
"We have been waiting a long time for the vendor to give us licenses, it has been five months and we are still waiting. However, the price is reasonable."
"We don't have to pay for the licenses. But we might purchase licenses in the future."
"I prefer the software licensing model."
"Looking at what it does, I think that it is fairly priced."
"I use the product's free version."
"Netgate pfSense is competitively priced."
"It's a very good solution, but it's a bit too expensive for private use."
"It's open-source and it's free. Anything for free is good."
"If you need to buy hardware onto which to install PfSense, go with their boxes on their website, they are great."
"The pricing seems fair overall, but I think they need more reasonably priced options for very small offices."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
815,854 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
15%
Manufacturing Company
6%
Comms Service Provider
6%
Computer Software Company
22%
Financial Services Firm
8%
Manufacturing Company
6%
Government
6%
Computer Software Company
15%
Comms Service Provider
9%
Government
8%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which would you recommend - FortiGate VM or Azure Firewall?
Both of these solutions are excellent options that provide flexible scalability and solid security. Fortinet Fortigat...
What do you like most about Fortinet FortiGate-VM?
An enhanced security solution for any kind of alert that we have configured.
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate
FortiGate Virtual Appliance, FortiGate-VM
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Security7 Networks, COOPENAE
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Find out what your peers are saying about Fortinet FortiGate-VM vs. Netgate pfSense and other solutions. Updated: October 2024.
815,854 professionals have used our research since 2012.