Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks K2-Series vs Palo Alto Networks NG Firewalls comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
318
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Palo Alto Networks K2-Series
Ranking in Firewalls
28th
Average Rating
8.4
Reviews Sentiment
7.6
Number of Reviews
33
Ranking in other categories
No ranking in other categories
Palo Alto Networks NG Firew...
Ranking in Firewalls
7th
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
192
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.0%, up from 0.0% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 3.3%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Q&A Highlights

DL
Mar 23, 2021
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Krishnakumar M - PeerSpot reviewer
One of the best tools for the prevention of evasive threats
There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.
AmjadKhan1 - PeerSpot reviewer
Provides inline protection with a unified view and anti-spyware capabilities
I would rate Palo Alto Networks NG Firewalls ten out of ten because it is the best. Our disaster recovery site utilizes Palo Alto Networks Next-Generation Firewalls. We are also in the process of upgrading the firewalls at our 365 sites in Pakistan to Palo Alto Networks firewalls. While budget firewalls may advertise comparable features, they often fall short of effectively detecting viruses, threats, and ransomware. In contrast, Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage. I recommend conducting a proof of concept before selecting a firewall. This will allow you to evaluate different options and determine which best suits your needs. While Palo Alto offers robust firewall solutions, it's essential to compare them with other vendors to ensure you make an informed decision.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Good performance, stability, and virtual domain ability."
"It's very good and very stable for businesses. It works very well."
"LinkGreat firewall capabilities"
"The most valuable feature is the ease of configuration."
"Security, SD-WAN, and Streetscape are valuable features."
"The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus."
"Their interface is very easy to use, it is without bugs."
"The VPN is the most valuable feature."
"The most valuable feature of Palo Alto Networks K2-Series is the performance which is above their competitors. The throughput they have delivered is good. When we used other solutions they failed the deployment when we were using different rules. They have a theory perform performance light and performance degradation. However, Palo Alto Networks K2-Series never fails in that scenario."
"The most valuable feature of Palo Alto Networks K2-Series is the configuration, it is very clear."
"The most valuable features are the intuitive user interface, ease of use, and reporting."
"I like the tool's WildFire feature."
"The scalability of the product is quite high."
"The IPS system is the best in the field."
"Palo Alto has a unique solution for DNS security, which is very good."
"Palo Alto has better and finer controls than, say, Cisco or Check Point."
"This is arguably the best security protection that you can buy."
"The solution is user-friendly. It's secure and easy to understand your network visibility, control the network, and prevent attacks."
"I like all the threat alerts and WildFire. I also like scanning because everything that comes into our network via customers is scanned. We're an electric company, so every one of the bills is scanned and emailed in and out of our network."
"Palo Alto Networks NG Firewalls saves us time."
"The machine learning in the core of the firewalls, for inline, real-time attack prevention, is very important to us. With the malware and ransomware threats that are out there, to keep abreast of and ahead of those types of attacks, it's important for our devices to be able to use AI to distinguish when there is malicious traffic or abnormal traffic within our environment, and then notify us."
"Operationally, it is easier, and the manageability and their security features are good."
"The GUI is simple and the solution is straightforward."
"The interface and dashboards are good."
 

Cons

"One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering."
"The stability of Fortinet FortiGate could improve."
"The search tool needs improvement. It's very difficult to search for policies right now."
"One area for improvement is the performance on the bandwidth demands for smaller devices, as well as better web filtering."
"When we cluster the two Fortinet FortiGate boxes together we have some issues."
"The security of Fortinet FortiGate could improve."
"It would be nice if backups could more easily migrate between different models."
"Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."
"It would be nice if it could easily be integrated with Elasticsearch or Nagios."
"I cannot think of anything specific to improve at the moment."
"They should implement the features that the other firewalls have."
"The product should get frequent updates allowing us to add new signatures."
"I'd like to see more data protection on the system."
"Palo Alto doesn't have extended visibility to the end point in their firewalls."
"The ease of management and configuration should be improved."
"Palo Alto releases a lot of bug fixes for their firewalls, which means it's necessary to do frequent upgrades. They should work on decreasing their bugs so that upgrades aren't needed so often."
"If you enable SSL you will face a problem. The throughput of the firewall will be degraded. SSL is a big issue on all firewalls. All products suffer from issues with SSL, but Palo Alto firewalls suffer more from it."
"Palo Alto could do better with integrating the Palo Alto Next-Gen Firewall with SD-WAN. The biggest issue with Palo Alto is that they are expensive. They are very expensive for what they offer. They should improve their pricing."
"The solution could be more cost-effective."
"It is probably as good as it can be in terms of being highly sophisticated but having a very small leap to learn the platform and deploy it. I do not have many complaints about the platform."
"Palo Alto Firewalls could improve by introducing more features, particularly in load balancing."
"The analytics could be improved."
"The technical support needs improvement."
"I would like integration with Evident.io and RedLock."
 

Pricing and Cost Advice

"The pricing depends on the FortiGate model we are using, ranging from $3,000 to $20,000 US dollars."
"The pricing is perfect."
"Fortinet is competitive price-wise."
"The license is too expensive to renew. The license renewal process is also complex."
"Each feature costs money, so it is important to study your needs."
"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."
"Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees."
"The pricing is flexible."
"When comparing Palo Alto Networks K2-Series with other solutions it is on the higher end of the price scale."
"If you compare K2-Series' quality with its price, I think it is reasonable."
"This is an expensive solution, although you will get value for the price."
"It would be nice if they lowered their prices for small businesses."
"This solution is expensive compared to other, similar products."
"This product is designed for large companies. The price would not be suitable for a small or medium size company."
"It is an expensive solution."
"The price of this solution is too high."
"While Palo Alto Networks Next-Generation Firewalls may be considered expensive, their quality justifies the cost."
"Its price is comparable to other companies. The license is on a one-year or three-year basis. It depends on the customers what they want to go for. There are some features that require an additional license, and there is also the cost of the support."
"I would assume that it's still within mid-range given its company structure and everything else. My guess is it's still okay."
"Palo Alto is a more expensive firewall solution than others."
"It will be worth your time to hire a contractor to set it up and configure it for you, especially if you are not very knowledgeable with PA firewalls."
"Palo Alto Networks NG Firewalls are expensive."
"The price is expensive, especially in Turkey, where I am located... Palo Alto is very expensive compared to other vendors, like Fortinet."
"The price of Palo Alto Networks NG Firewalls is high, but it is worth it if you have the budget for it."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
841,004 professionals have used our research since 2012.
 

Answers from the Community

DL
Mar 23, 2021
Mar 23, 2021
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most. PA is good at app control, web filtering and such like, they have always been top of the pile there. The GUI is very good, and their product is very user-focused. Fortinet is good for scalability and predictable high throughput (ASICs in the...
2 out of 4 answers
AT
Mar 20, 2021
Hi, Both FT and PA have compelling features for large Enterprises. I would like to add a few good points about Fortinetwhich might be helpful ( from my 13 years of engagement with them as Distributor and Partner) Fortinet:  Have higher throughput; which comes with competitive rates Wide range of models to select to meet your requirement, without spending heavliy Outstanding customer support and very active customer care team Easly available skilled resources from the channel for deployment and post-implementation support  Regards Abhilash
LD
Mar 22, 2021
Hi PaloAlto is better when working on app control feature and special virtual wire links. Execpt that specific point, Fortinet is above. Best Regards, Damien
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
31%
Energy/Utilities Company
10%
Manufacturing Company
8%
Non Profit
8%
Computer Software Company
15%
Financial Services Firm
9%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What do you like most about Palo Alto Networks NG Firewalls?
We utilize advanced threat prevention features like web filtering and SSL decryption, which haven't caused any issues.
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
Find out what your peers are saying about Palo Alto Networks K2-Series vs. Palo Alto Networks NG Firewalls and other solutions. Updated: March 2025.
841,004 professionals have used our research since 2012.