Try our new research platform with insights from 80,000+ expert users

Hillstone T-Series vs Palo Alto Networks PA-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
327
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Hillstone T-Series
Ranking in Firewalls
38th
Average Rating
7.4
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
15th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
32
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.1%, up from 17.7% compared to the previous year. The mindshare of Hillstone T-Series is 0.1%, up from 0.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 0.5%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
TahirMahmood - PeerSpot reviewer
Is stable and has a user-friendly dashboard and a good interface
We installed Hillstone T-Series after a ransomware attack. The dashboard and user interface are very good We cannot secure a specific IP class with this firewall. Another loophole with Hillstone T-Series is that when we connect through WiFi and turn our hot spot on, all who connect through the…
Deminda Dilan - PeerSpot reviewer
Good for enterprise-level businesses and offers many features like URL filtering and antivirus capabilities
Palo Alto can improve the web application firewall (WAF) feature at layer 7. Currently, I don't think it's available. If they can improve that, it would be better. We wouldn't need to purchase a separate WAF solution because they already have advanced URL filtering. But I don't think that advanced URL filtering has the same features as a dedicated WAF, like F5 or other solutions. That is an area for improvement. If they can improve the WAF feature, customers won't have to buy a separate WAF solution. They could do it with the same Palo Alto firewall, perhaps through a subscription-based model. So the web application firewall feature has to be improved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortinet FortiGate is scalable for our users. Right now, we have almost 70 users. We do not have any plan to increase our usage of FortiGate. For maintaining the firewall solution, one staff member is enough."
"It's very good and very stable for businesses. It works very well."
"I like Fortinet FortiGate's antispam filter, SPN, and clustering features."
"The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup."
"Its user interface is good, and it is always working fine."
"The threat prevention is the solution's most valuable aspect."
"The initial installation is very straightforward."
"What I like the most is the configuration and that it's simple, and straightforward to maintain."
"It has been stable so far."
"We installed Hillstone T-Series after a ransomware attack. The dashboard and user interface are very good."
"The only firewall able to monitor traffic from a CCTV network. Can detect unauthorized devices plugged into the network, which standard firewalls can't do."
"It is scalable. But that depends on what model you are using."
"A valuable feature that we can consider is the deployment time, which is significantly reduced, almost 90% faster compared to other solutions. This leads to quicker deployment and less downtime."
"The documentation is great."
"It has its own logging system. You can go to monitoring and check the logs to see if a connection is getting blocked. You can use multiple types of logs to check if a file or a port is getting blocked or if there are any TCP resets from the source or destination. It's easy to troubleshoot with the monitoring and logging it provides."
"I rate the stability as ten out of ten."
"The most effective features for threat prevention in the PA-Series are its integration with Cortex and the use of machine learning AI for advanced threat detection."
"The tool's most valuable feature is WildFire."
"Comprehensive logging is essential for monitoring and analysis purposes. For remote users, the firewall can be configured as a VPN concentrator, with VPN policies defined within the firewall settings."
 

Cons

"Price, of course, can always be more competitive or better."
"They should make the rule sets more understandable for the end user. When you're trying to explain to somebody how a computer network is secured, sometimes it's difficult for an end user or customer to understand. If there was a way to make the terminology more accessible to the end user, the set up could be easier. They should translate the technical jargon to an easily relatable and understandable conversation for the end user, the customer, that would be brilliant. Particularly in an environment where the IT structure is audited regularly, there's always pressure from the auditor to up the standards and up the security and you get your USCERT's that come out and there's a warning about this and the customer will want to lock out so much and when you apply it they run into issue where they can't search the internet or print to their remote office. Of course they can't print to your remote office, they just locked it up. They should make the language more understandable for the customer. If there's a product out there that made the jargon understandable to John Q. Public, I would buy that."
"FortiOS is not simple."
"Quality control on their firmware versions needs improvement. When they introduce new firmware, there tend to be bugs."
"The main aspect of FortiGate that could be improved is load balancing. Our management team does not want to buy another appliance for only load balancing."
"The platform's compatibility with Wi-Fi equipment needs improvement."
"Its reporting and pricing need improvement."
"Monitoring and reporting could be better."
"Another loophole with Hillstone T-Series is that when we connect through WiFi and turn our hot spot on, all who connect through the hotspot get all the functions, and the security does not work."
"They have a very good technical support team, but I think there are some communication issues due to language differences."
"Licensing is not cheap."
"The SD-WAN feature of Palo Alto Networks is not good compared to FortiGate."
"Compared to other vendors, the solution's community should be strong enough to solve the problems engineers face."
"I encountered a slight issue with the application portal, which was not functioning correctly."
"Palo Alto should integrate artificial intelligence for security purposes in the background for well-known threats and new risks coming to the market."
"There seem to be some issues with TAC (Technical Assistance Center) or Palo Alto support. Anytime you open a case, a level one engineer joins, and then you have to escalate it to level two or three. The support system has changed in the past few years, and that's something they need to look into."
"Pricing flexibility could be an aspect worth considering, as it has been a concern for some of our clients."
"With Palo Alto Networks PA-Series, I find that the support team takes a long time to resolve the issues that a user may face during the use of the product."
"As we migrate fully into the cloud, additional features like capacity upgrading and improvements to hardware resources will be necessary, especially since our equipment consists of older-generation switches and routers."
 

Pricing and Cost Advice

"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."
"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."
"If you purchase a one-year subscription with the hardware and then you want to renew for the second year, it is very costly."
"Its pricing is competitive with other solutions."
"The support subscription for the solution is annual. You are paying for support and there are two levels of support, professional and advanced."
"It's a very full-featured and it's priced well solution."
"Fortinet FortiGate is reasonably priced."
"It has a competitive price."
"On a scale from one to ten, with one being low and ten being high price, I would rate the price of Hillstone T-Series at three. There are no additional costs other than renewal costs."
"We got a much cheaper price than that provided by Fortinet right now."
"The prices are pretty high, definitely on the upper end."
"Price-wise, Palo Alto offers high-price products."
"Palo Alto is more expensive than FortiGate."
"This product has an affordable and reasonable price point."
"While other firewalls may come with a higher cost, when you consider the cost in relation to the services and features that Palo Alto offers, it is clear that Palo Alto is delivering excellent value."
"Palo Alto’s pricing is way higher than any other solution provider."
"The solution's pricing is high compared to that of Cisco and Fortinet."
"The tool's pricing was reasonable when we bought the product. We pay around 60,000 dollars per year."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
21%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Financial Services Firm
19%
Computer Software Company
19%
Real Estate/Law Firm
14%
Hospitality Company
9%
Computer Software Company
17%
Manufacturing Company
13%
University
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Hillstone T-Series?
We installed Hillstone T-Series after a ransomware attack. The dashboard and user interface are very good.
What is your experience regarding pricing and costs for Hillstone T-Series?
On a scale from one to ten, with one being low and ten being high price, I would rate the price of Hillstone T-Series...
What needs improvement with Hillstone T-Series?
We cannot secure a specific IP class with this firewall. Another loophole with Hillstone T-Series is that when we con...
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What needs improvement with Palo Alto Networks PA-Series?
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Hillstone T-Series Intelligent Next-Generation Firewalls, Hillstone iNGFW
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
University of Córdoba
Information Not Available
Find out what your peers are saying about Hillstone T-Series vs. Palo Alto Networks PA-Series and other solutions. Updated: April 2025.
848,253 professionals have used our research since 2012.