Try our new research platform with insights from 80,000+ expert users

OPNsense vs Palo Alto Networks PA-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.9
Fortinet FortiGate offers strong security, cost efficiency, and easy integration, saving organizations up to 30% on data costs.
Sentiment score
3.8
OPNsense offers quick ROI, annual savings, improved network protection, efficiency, but faces challenges like market disruptions and cyber threats.
Sentiment score
6.6
Palo Alto Networks PA-Series reduces costs with advanced security features, offering a visible return within three to five years.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
The network attacks reduced by approximately 60% after using that, even without customizing the custom configuration yet.
For a very little investment, I was able to increase the security of my network.
The return on investment with this product is a hard question because security tends to be a cost center rather than a profit center.
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is generally effective, but some users report delays and issues with complex problem resolution and communication.
Sentiment score
4.9
Users often solve issues using online resources, valuing community help, but suggest OPNsense centralize and improve support options.
Sentiment score
7.4
Palo Alto Networks PA-Series support is praised for quick, helpful service, despite occasional initial contact difficulties.
They offer very accurate solutions.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
Compared to some open-source projects with weak support, OPNsense stands out for having both a strong community and commercial backing options.
I mainly rely on community support since the solution is open source.
If you say you do not have one, it is finished. This is where the monopoly starts.
They're constantly following up after a case has been opened to ensure that it has been resolved properly.
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
I am happy with the technical support from Palo Alto.
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate efficiently scales for SMEs, though hardware upgrades can be challenging, with virtual deployments offering flexibility.
Sentiment score
6.6
OPNsense is scalable and adaptable, supporting small to large deployments with flexibility in hardware upgrades and virtual machines.
Sentiment score
7.0
Palo Alto Networks PA-Series is scalable, adaptable for enterprises, but some hardware limitations may impact scalability options.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Aside from these aspects, it demonstrated good scalability.
It supports routing, VPN setups, and traffic monitoring with additional packages like Snort and Suricata.
OPNsense is an extremely scalable solution.
The solution can handle more than ten thousand users in my organization.
There are no restrictions in scalability.
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its dependable stability, minimal downtime, and robust performance, especially with regular firmware updates.
Sentiment score
7.5
OPNsense is highly stable and reliable, excelling in security and usability, but occasionally faces VPN and update issues.
Sentiment score
8.2
Palo Alto Networks PA-Series is praised for its stability and reliability, with users recommending stable version adoption.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
For home and small network use, OPNsense is also reliable, providing enterprise-grade security at no cost.
OPNsense is the same, but it does have a way of installing the Realtek drivers, which gives you a lot more stability overall on the system.
The only challenge faced was its inadequacy to manage large voice traffic effectively, even with dedicated hardware.
 

Room For Improvement

Users seek improvements in FortiGate's performance, web interface, reporting, documentation, licensing, and training resources.
OPNsense's challenges include interface usability, integration issues, and the need for improved VPN, analytics, and virtualization support.
Palo Alto Networks PA-Series faces high costs, slow support, complex setup, steep learning, and needs improved threat detection and AI.
Investing in a solution that can accommodate such growth would be more cost-effective than repeatedly purchasing new hardware.
While Fortinet claims to offer a comprehensive network solution, it falls short in addressing computer application issues, particularly server security.
When considering Sophos XG, which we also use, the logging and reporting functionality is notably more efficient.
For high availability, it's crucial to have a method in place where a designated component oversees the entire process.
Improved guidance on package usage and integration beyond relying on external tutorials or community support would be beneficial.
I would like the APIs to be more mature and more developed and have more options to automate threat hunting.
You can buy cheaper products, but I believe in the value they're giving us.
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
For the next release of the Palo Alto Networks PA-Series firewall, I would like to see logs monitoring included.
 

Setup Cost

Fortinet FortiGate offers robust features at a competitive price but can be costly, especially with licenses; long-term pricing negotiation advised.
OPNsense is a cost-effective, open-source firewall solution offering affordability compared to commercial firewalls, appealing to enterprises.
Palo Alto Networks PA-Series offers extensive features and support, with pricing justified by bundled licenses and long-term benefits.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
It is a free solution, and when you compare it to alternatives like FortiGate, which is quite powerful but also costly, the value becomes evident.
I would rate the pricing a nine out of ten, especially considering the availability of a free community edition.
It is free.
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
The price of Palo Alto Networks PA-Series is expensive.
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to 3 year renewals.
 

Valuable Features

Fortinet FortiGate provides robust security, seamless integration, user-friendly interface, and cost-effective advanced threat management for diverse network environments.
OPNsense is user-friendly and cost-effective, offering extensive VPN, firewall features, and easy scalability with strong community support.
Palo Alto Networks PA-Series provides powerful security features with easy usability, robust integration, and effective threat protection capabilities.
In terms of security, we have not experienced any security flaws or loopholes, and it has proven to be quite stable.
FortiGate has helped reduce the risk of cyberattacks that might disrupt our client's production.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
The most valuable features include the basic firewall functionality and the GeoIP location services.
I can have a Wi-Fi VLAN and feel secure that the server network or the VM network that I have on a different VLAN are isolated, and they cannot talk to one another, which adds a great level of security.
It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost.
Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have.
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
The most valuable feature of Palo Alto Networks PA-Series is that it is highly customizable.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
574
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (2nd), Unified Threat Management (UTM) (1st)
OPNsense
Ranking in Firewalls
3rd
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
44
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
14th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of OPNsense is 11.0%, down from 15.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate20.4%
OPNsense11.0%
Palo Alto Networks PA-Series0.8%
Other67.80000000000001%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Moutaz Sheikh Alard - PeerSpot reviewer
Has helped simulate enterprise security setups and strengthens network segmentation practices
For my capstone, I use OPNsense for my project and its broader benefits for enterprise and cybersecurity context. OPNsense is an open source based firewall and routing platform. It offers enterprise-grade features such as intrusion detection and prevention system, VPN support, traffic shaping, and web filtering, all without license cost. This platform has a modular design, a clean web-based GUI, and frequent updates that prioritize security and usability. It competes with commercial firewalls such as Cisco ASA, FortiGate, and Palo Alto, but stands out because it's community-driven, cost-effective, and transparent. I find OPNsense's feature of acting as a central firewall and gateway most valuable, providing robust point segmentation between the internal network and DMZs in my capstone project, intrusion detection to monitor malicious traffic, VPN services for secure remote access, and logging and monitoring for compliance and auditing. This allows me to simulate a real-world enterprise environment on a smaller scale, demonstrating both security hardening and network efficiency. OPNsense impacts my projects and home network positively because its cost-effectiveness is perfect for lab and enterprise setup without expensive licensing. The flexibility, easy VLAN and DMZ configuration supports different zones such as web servers, mail servers, and log servers. The security-first design for IDS/IPS integration helps me showcase modern defense-in-depth strategies. The user-friendly management through the web GUI makes it possible to manage complex firewall rules clearly, which is critical when documenting and presenting a capstone. Scalability is also an advantage. Although my project is lab-based, OPNsense can scale into production deployments in SMBs and enterprise.
Kevin Burgess - PeerSpot reviewer
Has provided strong edge protection and advanced threat visibility while reducing manual effort
Some of the best features of this firewall are flexibility, overall depth of security analysis, and ease of use. I use application-based traffic classification. It has helped reduce my attack surface considerably; it's much better than simply doing a port-based analysis. The usefulness of machine learning algorithms in identifying threats with Palo Alto Networks PA-Series is mostly behind the scenes; we subscribe to the threat analysis, so we don't see too much. It does perform some in-depth analysis, but most of the machine learning features operate on the back end, more than what we would see. Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have. They're gathering data from all over the world, and we're going to see what we get hit with, but now we're seeing what everybody else is getting hit with.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
872,019 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Comms Service Provider
16%
Computer Software Company
16%
University
6%
Manufacturing Company
6%
Computer Software Company
12%
Manufacturing Company
10%
Comms Service Provider
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business350
Midsize Enterprise130
Large Enterprise187
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise5
Large Enterprise8
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise5
Large Enterprise15
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about OPNsense?
What I like the most about OPNsense is that it offers an easy-to-use dashboard for device management and control.
What is your experience regarding pricing and costs for OPNsense?
My experience with pricing, setup cost, and licensing is that since OPNsense is free, the licensing and setup was eas...
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to ...
What needs improvement with Palo Alto Networks PA-Series?
I do not have any challenges or areas for improvement with Palo Alto Networks PA-Series. There are no AI integrations...
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
1. Deciso B.V. 2. iXsystems, Inc.  3. EuroBSDCon  4. Netgate  5. Claranet  6. Voleatech  7. Open Systems AG  8. Securebit AG  9. Proxmox Server Solutions GmbH  10. AVM Computersysteme Vertriebs GmbH  Additional customers include: T-Systems International GmbH, Deutsche Telekom AG, Vodafone GmbH, 1&1 IONOS SE, OVHcloud, Hetzner Online GmbH, Strato AG, PlusServer GmbH, Host Europe GmbH, United Internet AG, 1&1 Versatel Deutschland GmbH, QSC AG, Bechtle AG, Cancom SE, Computacenter AG & Co. oHG, T-Systems Multimedia Solutions GmbH, Atos SE, Capgemini SE, Accenture plc, IBM Corporation, Hewlett Packard Enterprise Company, Cisco Systems, Inc.
Information Not Available
Find out what your peers are saying about OPNsense vs. Palo Alto Networks PA-Series and other solutions. Updated: September 2025.
872,019 professionals have used our research since 2012.