Juniper Contrail SD-WAN vs Prisma SD-WAN comparison

Juniper and Palo Alto Networks are both solutions in the Software Defined WAN (SD-WAN) Solutions category. Juniper is ranked #14 with an average rating of 7.5, while Palo Alto Networks is ranked #5 with an average rating of 8.7. Juniper holds a 0.8% mindshare in SDW, compared to Palo Alto Networks’s 6.0% mindshare. Additionally, 83% of Juniper users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Prisma SD-WAN and Juniper Contrail SD-WAN are leading competitors in the SD-WAN market. Based on user reviews, Prisma SD-WAN appears to have the upper hand due to its straightforward setup and support.

Features: Prisma SD-WAN is noted for its robust security integration, intuitive management, and straightforward setup. Juniper Contrail SD-WAN is recognized for its advanced feature set, including advanced analytics, multi-cloud support, and strong capabilities.

Room for Improvement: Prisma SD-WAN users have identified a need for enhanced reporting tools, improved documentation, and more customization options. Juniper Contrail SD-WAN users highlighted the need for a more streamlined setup process, improved technical support, and better user interface design.

Ease of Deployment and Customer Service: Prisma SD-WAN is praised for its straightforward deployment and responsive customer service. Juniper Contrail SD-WAN, while more complex to deploy, benefits from robust support once in place.

Pricing and ROI: Prisma SD-WAN users mention competitive pricing and good ROI. Juniper Contrail SD-WAN's higher pricing is justified by its advanced features, providing satisfactory ROI.

To learn more, read our detailed Juniper Contrail SD-WAN vs. Prisma SD-WAN Report (Updated: February 2025).

Buyer's Guide

Juniper Contrail SD-WAN vs. Prisma SD-WAN

February 2025

Download the complete report

Helped 846,617 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of April 2025, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Fortinet FortiGate is 21.1%, up from 21.0% compared to the previous year. The mindshare of Juniper Contrail SD-WAN is 0.8%, down from 0.9% compared to the previous year. The mindshare of Prisma SD-WAN is 6.0%, up from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Software Defined WAN (SD-WAN) Solutions

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Luis Corrochano

Presales Manager and Co-founder at Kaizen Networks

A stable and scalable solution that helps to cut cost by reducing MPLs

My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH. The solution is expensive. Its support can be better. The tool is stable. The solution is more…

Read full review

Engineerinfosec67

Senior Information Security Engineer at Westcon-Comstor

Centralized management streamlines global network traffic control

Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access. Although there has been improvement, further steps can be taken. Additionally, it would be beneficial if the solution integrated the SD-WAN features of Prisma SD-WAN with the security features of Palo Alto's next-generation firewalls, as they currently do not align.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"FortiGate has led to a reduction in our security budget."

"FortiGate's ability to perform as expected and fulfil our needs has been the most compelling feature for network security."

"The most important features of Fortinet FortiGate are the Intrusion Prevention System (IPS) and firewall control applications."

"It's quite comfortable to handle the FortiGate firewall."

"The solution has very good threat and content filtering switches."

"Fortinet FortiGate's reliability is valuable."

"Good load balancing feature."

"Easy to use support and licensing portal as well as activation process."

More Fortinet FortiGate pros

"I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provisioning tool. Unlike solutions from Palo Alto or other SD-WANs orchestrated by a SaaS solution, Juniper Contrail SD-WAN already had the files and built their SaaS to orchestrate the configuration. Initially, you didn't do much, but then it started adding some routing capabilities."

"It supports desktop management, network management, and SD-WAN policies."

"The support is very good from Juniper and from the local distributors."

"It gives you that level of visibility to understand what's going on between layer four and layer seven."

"My customers use the solution to have better control and knowledge about the applications inside ONE Access. It also helps them cut costs by reducing MPLs and using better internet access from FTTH."

"The solution is more specific about what's happening since it explains where the problem may lie and points out areas where there is a problem. So, we like that it provides more visibility."

"I like the link monitoring and analytics. These are the features that set Prisma apart from other products. Prisma works well with large, complex networks. One of my clients is a top bank in the United States, and Prisma has performed well for that customer."

"Prisma SD-WAN offers capabilities such as path selection based on Layer 7 attributes and application quality of service at the application level."

"Prisma's analytics provide a lot of valuable data. I like the internet health chart that shows latency, dropped packets, MOS for data quality, etc. It also runs a continuous speed test in the background. I've used it multiple times to troubleshoot internet connections when the service provider has attempted to claim nothing is wrong with the circuit. It gives me data to send them showing we're not getting the speed we should, or there is constant packet loss."

"From the main controller, we can administer the customer's devices, QoS, network, and traffic. We can monitor it and we can change and create policies as well as upgrade the software. We can totally control a customer's network from one site, the Prisma SD-WAN portal."

"The product provides efficient stability, security, and reliability features."

"Prisma SD-WAN is intuitive. We have a better idea of the different tools we can use and jump between the menus quickly."

"The AI ops feature streamlines revisions and automates compliance."

"I like that the integration with Palo Alto is easy."

More Prisma SD-WAN pros

Cons

"I would like to see a more intuitive dashboard."

"It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server."

"The setup is pretty complex and not easy to implement."

"It could use more templates for third-party site-to-site VPN setups other than FortiGate and Cisco."

"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."

"There are a lot of bugs I have found in the solution and it is difficult to upgrade. These areas need improvement."

"For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial."

"The support structure needs to be improved because every time we contact them, there is a delay in the response."

More Fortinet FortiGate cons

"The only issue was the switch we got, which was a little problematic because it was PoC equipment, and we had a little problem with that."

"The training could be better. When it comes to the demo dashboard capability, I feel like it could be much easier for our customers to use. Our last customer complained about this."

"Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with other solutions like Meraki SD-WAN, which is almost plug-and-play with its zero-touch provisioning. In Juniper Contrail SD-WAN, it was more challenging."

"The solution is expensive. Its support can be better."

"The solution installs similarly to competitors. It is not more difficult or easier. However, it could be easier and take less time for the installation."

"Areas for improvement in the Juniper Contrail SD-WAN solution include the on-premises deployment process."

"They could add more advanced security features to the product."

"Accessibility could be improved. Any new person attempting to access Prisma will have difficulty. It doesn't have CLI available."

"The pricing model could be improved to make it more affordable for smaller companies."

"Prisma could be a little cheaper."

"Customer support is our biggest pain point. The quality of support has gone down a little since we initially deployed this product. I don't know if this is due to turnover at Palo Alto or a lack of training. It is now taking one or two days to get an initial response that says, "Hey, we've looked into this, can you pull this data for us?" In the past, we'd immediately get a response."

"The solution should include custom ports and group voice connections."

"There are two parallel things that we want Palo Alto to work on. First, customers want a unified appliance that does the work of all firewalls in addition to SD-WAN. Second, the cloud presence should be completely automated. If I purchase the SASE architecture, I shouldn't worry about deployments in Prisma Access or on Prisma SD-WAN. It should be deployed in one go."

"The product could be a bit cheaper for the services it provides."

More Prisma SD-WAN cons

Pricing and Cost Advice

"As far as I'm aware, in our case, it's just a yearly pricing arrangement with no additional licensing costs."

"This is not a cheap solution but it isn't expensive, either. It's a good solution for the right price."

"It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles."

"The licensing costs are very low."

"Pricing is good. They offer a lot of things, the most important is the support. Every time you upgrade your license, you also get insurance for the equipment. If you have any problem with equipment, they send in new equipment."

"Fortinet has more device options that are affordable for small businesses than Palo Alto, and its enterprise-level models are also cheaper. Palo Alto also has a separate license for VPN connections and SD-WAN, but FortiGate offers these features standard."

"The license of Fortinet FortiGate should be reduced."

"The price is okay."

More Fortinet FortiGate pricing and cost advice

"The cost of the solution is a little expensive. The hardware is a one-time purchase fee and the software is purchased on an annual basis. There are additional costs for other software features that are available which are on an annual basis, such as extra capacity."

"They are neither very expensive nor cheap. So, we can consider its pricing somewhere in the middle."

"The licensing structure is very flexible."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

"It is more expensive than Fortinet."

"Prisma SD-WAN is a pretty expensive solution."

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

846,617 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Educational Organization

31%

Computer Software Company

14%

Government

Financial Services Firm

Educational Organization

24%

Computer Software Company

11%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Juniper Contrail SD-WAN?

I've worked with several SD-WAN solutions over the past few years, and the product felt more like an automated provis...

See all answers

What is your experience regarding pricing and costs for Juniper Contrail SD-WAN?

My advice regarding setup costs, pricing, and licensing for Juniper Contrail SD-WAN would be to carefully evaluate an...

See all answers

What needs improvement with Juniper Contrail SD-WAN?

Implementing new branches or changing existing ones in Juniper Contrail SD-WAN wasn't as straightforward as with othe...

See all answers

What do you like most about Prisma SD-WAN?

The product's initial setup phase is straightforward.

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

The product could be a bit cheaper for the services it provides.

See all answers

What needs improvement with Prisma SD-WAN?

I think the product could be a bit cheaper, but otherwise, I am satisfied with it.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 10% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Huawei Enterprise Routers vs Juniper Contrail SD-WAN

Compared 18% of the time

Juniper Mist Edge vs Juniper Contrail SD-WAN

Compared 16% of the time

Cisco Catalyst SD-WAN vs Juniper Contrail SD-WAN

Compared 16% of the time

More Juniper Contrail SD-WAN Competitors

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 23% of the time

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 21% of the time

Meraki SD-WAN vs Prisma SD-WAN

Compared 15% of the time

Aruba EdgeConnect SD-WAN Platform vs Prisma SD-WAN

Compared 10% of the time

VMware VeloCloud SD-WAN vs Prisma SD-WAN

Compared 7% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

April 2025

Download Fortinet FortiGate product report

Buyer's Guide

Juniper Contrail SD-WAN

April 2025

Download Juniper Contrail SD-WAN product report

Buyer's Guide

Prisma SD-WAN

March 2025

Download Prisma SD-WAN product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Contrail SD-WAN

CloudGenix

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Contrail SD-WAN delivers a simple, automated multicloud SD-WAN. It enables you to create an evolvable architecture to simplify growth, from secure routers to SD-WAN, SD-Branch, and beyond. It automates the WAN edge across Juniper virtual cloud endpoints and on-premises next-generation firewall or universal CPE platforms. And it provisions and enforces multilevel security policy at scale, across multiple clouds and enterprise sites with diverse topologies.

Juniper

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Allied Pinnacle

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Juniper Contrail SD-WAN vs. Prisma SD-WAN

February 2025

Free Report: Juniper Contrail SD-WAN vs. Prisma SD-WAN

Find out what your peers are saying about Juniper Contrail SD-WAN vs. Prisma SD-WAN and other solutions. Updated: February 2025.

DOWNLOAD NOW

846,617 professionals have used our research since 2012.

See our Juniper Contrail SD-WAN vs. Prisma SD-WAN report.

See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.