Palo Alto Networks CN-Series vs Zscaler Cloud Firewall comparison

Palo Alto Networks and Zscaler are both solutions in the Firewalls category. Palo Alto Networks is ranked #34 with an average rating of 9.5, while Zscaler is ranked #24 with an average rating of 8.6. Additionally, 100% of Palo Alto Networks users are willing to recommend the solution, compared to 92% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Palo Alto Networks CN-Series and Zscaler Cloud Firewall based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall Report (Updated: April 2025).

Buyer's Guide

Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

April 2025

Download the complete report

Helped 848,207 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Bhaskar Rao

Network manager admin at Yamaha

Though it helps deal with web traffic or any malicious traffic, it needs to work on its DC performance issues

The product's initial setup phase is moderate in level, so it is neither very complex nor very easy. For the deployment, my company first needs to gather all the requirements of the users and the domain names and consider how many users there are in the company. In the implementation and planning part, my company needs to consider what kind of policies we will create while ensuring that the policies are created based on the requirements of the users. There is a need to segregate the users' requirements since there are separate departments in the company, like the HR department, sales department, IT department, and manufacturing department, so that our company can create policies depending on their requirements. On-site, if you want a GRE tunnel, our company can handle GRE tunnel traffic routing and Zscaler Cloud Firewall, after which Zscaler will take action based on the policies created by our organization. For the deployments and maintenance, a team of five members consisting of two managers and three engineers is required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The features I find most useful in Fortinet FortiGate are its simplicity of utilization, which is very important, and its provision of interfaces to see the alerts and other things."

"It's quite comfortable to handle the FortiGate firewall."

"It's very good and very stable for businesses. It works very well."

"The security features that they have are quite good. On top of that, their licensing model is quite nice where they don't charge you anything for the SD-WAN functionality for the firewall."

"From the firewall perspective, the rules and policies are very sufficient and easy to use."

"I like that they have given me a solution at a fair price."

"Overall, the pricing of the solution is very good. The product offers good value."

"The most valuable feature is the FortiManager for centralized management."

More Fortinet FortiGate pros

"The app inspection is very helpful for network security."

"The stability of Palo Alto Networks CN-Series is excellent."

"Includes advanced tech protection."

"Zscaler Cloud Firewall understands the applications in the current generation and adapts to the present generation cloud applications."

"The technical support from Zscaler was excellent."

"The solution offers good sandboxing."

"It provides in-depth visibility into your network, ensuring that traffic flowing into your organization, be it from offices or individual users, is effectively filtered and secured through multiple layers of protection."

"The solution is scalable."

"The product’s firewall and VPN package are fantastic compared to any other solution."

"I like the ease of deployment and its flexibility. We don't need to deal with license, quotes, procurement, delivery, and installation. Everything is software-based, and it's very easy to operate."

More Zscaler Cloud Firewall pros

Cons

"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."

"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."

"The room for improvement is about the global delivery time period. Usually I need to wait for almost one month to deliver it overseas. So if you can shorten the deliver time it'd be great."

"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."

"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."

"In my opinion, Fortinet FortiGate could be improved by making the appliance smaller than what we have here, as it is pretty big."

"I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security."

"I use the FortiGate 60D model and realized the 300Mbps bandwidth limitation. Because it is a product that offers many services, I think it could have greater bandwidth capacity."

More Fortinet FortiGate cons

"I'd like to see more IOPs features."

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"They do not provide a few components that are fundamental to differentiate the products"

"It would be better if they improved their policy, package visibility, and flexibility while we're creating rules for inspection. It could also be cheaper or more things could be included in the basic package. In the next release, I would like better coverage in the Asia Pacific region and better quality of service."

"Its technical support services could be better."

"It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing."

"There are several areas for improvement. Firstly, the GUI is outdated, with noticeable lags and delays, especially when generating reports for past transactions."

"Pricing is a challenge."

"The product could improve its integration with some legacy systems."

"Apart from the issues associated with the product in areas like the DC performance issues and DC failover, Zscaler Cloud Firewall's IP should not have a proxy IP."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."

"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."

"I would rate the pricing a five out of ten"

"You need to pay a license for this solution. Our licensing is now done in our subsidiary."

"The license of Fortinet FortiGate should be reduced."

"The price is highly competitive when compared to other brands that offer similar functionality."

"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."

"I think that the pricing is fair."

More Fortinet FortiGate pricing and cost advice

Information not available

"It is not the most budget-friendly solution, but it's important to consider its overall value."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

"There are different subscription models available."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."

"It comes at a significantly reduced cost while ensuring control and effectiveness."

"There are licensing costs, and I would not say that it's a cheap vendor."

"It is expensive for small businesses."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

848,207 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

21%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

No data available

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

What do you like most about Zscaler Cloud Firewall?

The product’s firewall and VPN package are fantastic compared to any other solution.

See all answers

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need ...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 100% of the time

More Palo Alto Networks CN-Series Competitors

Azure Firewall vs Zscaler Cloud Firewall

Compared 18% of the time

OPNsense vs Zscaler Cloud Firewall

Compared 11% of the time

Check Point NGFW vs Zscaler Cloud Firewall

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 7% of the time

Cisco Multicloud Defense vs Zscaler Cloud Firewall

Compared 6% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

April 2025

Download Fortinet FortiGate product report

Buyer's Guide

Firewalls

March 2025

Download Palo Alto Networks CN-Series product report

Buyer's Guide

Zscaler Cloud Firewall

March 2025

Download Zscaler Cloud Firewall product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

No data available

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Zscaler enables the world’s leading organizations to securely transform their networks and applications for a mobile and cloud first world. Its flagship services, Zscaler Internet Access and Zscaler Private Access, create fast, secure connections between users and applications, regardless of device, location, or network. Zscaler services are 100% cloud-delivered and offer the simplicity, enhanced security, and improved user experience that traditional appliances or hybrid solutions are unable to match. Used in more than 185 countries, Zscaler operates the world’s largest cloud security platform, protecting thousands of enterprises and government agencies from cyberattacks and data loss.

Check more details: https://www.zscaler.com/produc...

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Zenith Live, Azure, Carlsberg Group

Buyer's Guide

Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

April 2025

Free Report: Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

Find out what your peers are saying about Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall and other solutions. Updated: April 2025.

DOWNLOAD NOW

848,207 professionals have used our research since 2012.

See our Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.