Try our new research platform with insights from 80,000+ expert users

Juniper SRX Series Firewall vs Palo Alto Networks K2-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
318
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Juniper SRX Series Firewall
Ranking in Firewalls
20th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
91
Ranking in other categories
Unified Threat Management (UTM) (5th)
Palo Alto Networks K2-Series
Ranking in Firewalls
28th
Average Rating
8.4
Reviews Sentiment
7.7
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Juniper SRX Series Firewall is 1.5%, down from 1.5% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.0%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
MURALI NIDAMANURI - PeerSpot reviewer
Highly scalable, user-friendly UI, and easy to maintain
We have used Juniper SRX Series Firewall in airports and multiple other industries The most valuable features of the Juniper SRX Series Firewall are the user-friendly UI, and accessing the solution is simple. The pricing strategy of the vendor could improve. I have been using Juniper SRX Series…
Krishnakumar M - PeerSpot reviewer
One of the best tools for the prevention of evasive threats
There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The flexibility and ease of configuration are the most valuable features."
"It is simple to manage, and there are a lot of functionalities in the same box."
"FortiGate firewalls are user-friendly, and I like the security profiling features."
"The most valuable feature of Fortinet FortiGate is the simple configuration."
"This product is definitely scalable."
"The most important features of Fortinet FortiGate are the Intrusion Prevention System (IPS) and firewall control applications."
"The most valuable feature is the FortiManager for centralized management."
"The GUI is good."
"Juniper SRX is a very powerful firewall and sometimes can be used as a router."
"There are a lot of security features."
"It helped us with its routing capabilities which eased the cost, because otherwise I would have had to take a router and firewall, and then integrate it. With this, however, it was an integration of firewall and routing services all together in a single product. That was one thing that I loved about it."
"The rollback option and Commit Confirmed are great features. They give us the security to change configurations without downtime."
"On a scale from one to ten, one being the worst and ten being the best I'd give Juniper SRX an overall rating of eight because of its' competitive price."
"It is very fast and very easy to maintain. Another nice part of it is that you can easily extract the logs and move them over to a security operations center."
"Using a Juniper CLI, you configure a "candidate configuration", then "commit" it to bring it live. If you do not like it or messed up something, you just "rollback" to the previous configuration. It can all be done in a matter of minutes. This is super handy once you get use to it."
"Technical support is good. They quickly respond, and they even have local help here. They can actually give you an answer very quickly."
"K2-Series' best features include its scalability, which is the best on the market."
"The customer service and support are really good."
"The scalability of the product is quite high."
"I have found that Palo Alto Networks K2-Series has the best security. They are more user-friendly, older firewalls used to have to be configured using the command-line interface, but in this solution, it can be done in the GUI."
"We've found the solution offers us good stability."
"Overall, this is a very simple and very effective firewall, and I am satisfied with it."
"Palo Alto's App-ID is what differentiates it from other competitors."
"The most valuable feature of Palo Alto Networks K2-Series is the performance which is above their competitors. The throughput they have delivered is good. When we used other solutions they failed the deployment when we were using different rules. They have a theory perform performance light and performance degradation. However, Palo Alto Networks K2-Series never fails in that scenario."
 

Cons

"Its reporting and pricing need improvement."
"The support from Fortinet FortiGate could improve. They are not easily accessible when we need them. They could improve their response time."
"The stability of Fortinet FortiGate could improve."
"Application management can be improved."
"In some cases, its initial setup could be hard for customers."
"I think the only issue that needs improvement is the interface."
"Some features of Fortinet FortiGate are actually fee enabled that are inconvenient for deploying in production. Other issues relate to isolation with Cisco products and your server."
"The SD-WAN functionality is a bit overly complicated and not fully documented."
"The centralized management platform could be improved."
"The configuration is difficult and it should be easier."
"The solution's configurations and syntax are specific and more complicated than other platforms."
"It should be easier to escalate support tickets."
"Its logging is very good, but we would like to have an easier way of creating more reports. We would like to be able to manipulate the reports or manage the way the reports are coming out."
"When I was going to upgrade the OS, the solution didn't accept certain USB devices."
"The GUI needs to be easier and more helpful for users who don't have security experience."
"It does have its nuances in terms of deployment. There are always areas to make something easier or more intuitive or make the system auto-negotiate more with existing hardware."
"Threat prevention could use improvement. Not just in malware exploits and C2 traffic; enhancing web traffic protection would be a great upgrade."
"They could improve by providing more features in the solution."
"Palo Alto releases a lot of bug fixes for their firewalls, which means it's necessary to do frequent upgrades. They should work on decreasing their bugs so that upgrades aren't needed so often."
"I'd like to see more data protection on the system."
"In the past, we've had trouble with Palo Alto's application filtering not getting it right. I would not be recommending layer 7 application filtering yet."
"The technical support, and how they provide it to the client, needs to be improved."
"The password function of the solution could be improved. Additionally, some of the processes take too long to complete."
"Sometimes there are interactions with support or the provider that are not ideal."
 

Pricing and Cost Advice

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall."
"The price of Fortinet FortiGate is reasonable for an SME."
"Its pricing is good. It's average or normal as compared to Palo Alto and Check Point firewalls."
"It is an inexpensive solution."
"The pricing of the solution is very competitive."
"I would rate the pricing a five out of ten"
"The price is high compared to some of the other solutions."
"I think the price of Fortinet FortiGate is very reasonable."
"The prices are very good as compared to other vendors."
"Small enterprises or telco have variant licenses, and this licensing should be improved."
"The direct support with Juniper is expensive. When you stop using the solution and miss one year of payments, if you want the support back on a specific node, they ask you to pay for the year that you haven't used the node."
"The pricing is perhaps half, probably forty percent, of Cisco."
"The pricing appears to be cost-effective, and the cost is quite reasonable within Bangladesh and other countries, though it may vary based on global currency fluctuations."
"For a medium-sized organization, the cost for the licensing and implementation of Juniper SRX for 10 users would be about $300-400."
"This is an expensive product."
"The product itself is costly and the price of migration is very high."
"This is an expensive solution, although you will get value for the price."
"Products by the leader in the field are justifiably a bit more expensive compared to other vendors."
"We are on an annual license to use Palo Alto Networks K2-Series."
"It would be nice if they lowered their prices for small businesses."
"Palo Alto firewalls are very expensive."
"Pricing is a sensitive issue because the cost is high in this market."
"The pricing is expensive."
"This solution is expensive compared to other, similar products."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
842,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Educational Organization
53%
Computer Software Company
8%
Financial Services Firm
4%
Comms Service Provider
4%
Computer Software Company
30%
Manufacturing Company
8%
Non Profit
8%
Energy/Utilities Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Juniper SRX?
Juniper SRX Series Firewall is a stable solution.
What is your experience regarding pricing and costs for Juniper SRX?
Customers always want cheaper solutions. Fortinet is a cheaper solution than Juniper.
What advice do you have for others considering Juniper SRX?
Overall, I would rate it an eight out of ten because of the complexity of configurations and the maintenance.
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Juniper SRX
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand
State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME
Find out what your peers are saying about Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series and other solutions. Updated: March 2025.
842,592 professionals have used our research since 2012.