Palo Alto Networks NG Firewalls vs WatchGuard XTM [EOL] comparison

Palo Alto Networks and WatchGuard are both solutions in the Firewalls category. Additionally, 96% of Palo Alto Networks users are willing to recommend the solution, compared to 90% of WatchGuard users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 19, 2025

WatchGuard XTM [EOL] and Palo Alto Networks NG Firewalls are competing in the firewall technology space. While WatchGuard XTM [EOL] offers simple configurations and appeal to budget-conscious businesses, Palo Alto Networks NG Firewalls provide more advanced security features, making them preferable for enterprises prioritizing comprehensive protection despite higher costs.

Features: WatchGuard XTM [EOL] provides basic security features, ease of use in small environments, and straightforward rule configuration. It is known for robust VPN capabilities. Meanwhile, Palo Alto Networks NG Firewalls offer advanced threat prevention, application visibility, and cloud integration. These features emphasize Palo Alto’s focus on delivering a comprehensive security package with robust application control and detailed traffic visibility.

Room for Improvement: WatchGuard XTM [EOL] could enhance its feature set by integrating more advanced threat prevention tools and improving scalability for larger enterprises. Its application visibility and cloud integration also need enhancement. Palo Alto Networks NG Firewalls, on the other hand, might improve in simplifying their deployment process and reducing the technical expertise required, as well as enhancing their initial cost-effectiveness.

Ease of Deployment and Customer Service: WatchGuard XTM [EOL] is praised for its straightforward deployment, appealing to businesses seeking quick and simple implementations. It is suitable for administrators with varying experience levels, offering intuitive management interfaces. Palo Alto Networks NG Firewalls offer extensive support services, crucial for facilitating complex and large-scale deployments, despite requiring more technical know-how initially. Their customer service is comprehensive, helping users navigate through advanced configurations.

Pricing and ROI: WatchGuard XTM [EOL]'s lower cost attracts cost-sensitive organizations aiming for immediate savings. However, Palo Alto Networks NG Firewalls justify their higher prices through long-term security benefits and advanced features, leading to potentially higher ROI. Businesses prioritizing robust security over initial expenditures might find Palo Alto’s offerings more valuable despite their costly nature.

To learn more, read our detailed Firewalls Report (Updated: November 2025).

Buyer's Guide

Firewalls

November 2025

Download the complete report

Helped 872,846 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

AmjadKhan1

Head of data centers at a non-profit with 10,001+ employees

Provides inline protection with a unified view and anti-spyware capabilities

I would rate Palo Alto Networks NG Firewalls ten out of ten because it is the best. Our disaster recovery site utilizes Palo Alto Networks Next-Generation Firewalls. We are also in the process of upgrading the firewalls at our 365 sites in Pakistan to Palo Alto Networks firewalls. While budget firewalls may advertise comparable features, they often fall short of effectively detecting viruses, threats, and ransomware. In contrast, Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage. I recommend conducting a proof of concept before selecting a firewall. This will allow you to evaluate different options and determine which best suits your needs. While Palo Alto offers robust firewall solutions, it's essential to compare them with other vendors to ensure you make an informed decision.

Read full review

Alexander Padilla

Global Director MSS with 11-50 employees

Based on WG, we can deploy 30 offices in a few days, and maintain an excellent visibility of the network traffic for the entire network, using a single console.

Security is a requirement for any organization, using WG products you can deploy faster solutions to big problems with a fair price. Based on WG, we can deploy 30 offices in a few days, and maintain an excellent visibility of the network traffic for the entire network, using a single console.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortinet FortiGate's most valuable features are ease of use, flexibility, and most of the configuration we can be done using the GUI. When we compare Fortinet FortiGate with other solutions the firewall policy are very easy to understand."

"Their reliability and their policy of pre-shipping replacements when a unit has failed."

"It has improved our security capabilities."

"There are great templates, so you don't have to customize them if you don't want to. You do have the option to custom create some folders and some reports, however, with what is there, you don't really need to go through extra effort, as they already give you a lot of predefined views of reports and so forth."

"It is easy to use and update the software version. It is also useful for integration with other Fortinet products, because my office and company use Fortinet solutions."

"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."

"It's a flexible solution."

"The best features of Fortinet FortiGate include its easy configuration and user interface."

More Fortinet FortiGate pros

"Palo Alto offers better Layer 7 protection than competing solutions by Cisco and Fortinet. I also like the VPN client more. The interface is simple, so administrators can deploy and configure it much faster than other firewalls"

"It worked fine normally."

"The most valuable feature is WildFire, which blocks sophisticated attacks and distinguishes it from other traditional firewall functions."

"The solution is scalable"

"When we put it on the border, it was blocking everything that we were getting ahead of time, and we weren't getting any hits. This includes URL filtering, spam prevention, and anti-virus."

"Overall, it is a good solution. It is stable. We use URL filtering, which is useful for blocking undesired URLs."

"Identifying applications is very easy with this solution."

"The App-ID, Content-ID, User-ID, and encryption and decryption are valuable features."

More Palo Alto Networks NG Firewalls pros

"There is a site-to-site VPN configuration between others people."

"SNMP status monitoring and the Central Management Software."

"It is stable and does not require you to reboot all the time."

"WatchGuard XTM is fairly basic. We use it as the perimeter firewall. The main point is to protect from attack software and hacking."

"After installing the product, we achieved awareness of our data protection needs and email misuse."

"It configures in all-in-one place."

"Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process."

"They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time."

More WatchGuard XTM [EOL] pros

Cons

"The logs need to be better. They need to be more visible and easier to access."

"Fortinet FortiGate IPS could improve the configuration. In some use cases, there can be some configuration conflicts."

"The solution could have licensing fees reduced in the future."

"There are problems with the custom reporting of the unique traffic. The data is there, but it is too difficult for us to extract."

"FortiGate's logging and reporting could be improved. I would also like to see Fortinet add a guest management portal."

"The solution's GUI is not very appealing."

"The initial setup is medium complex and takes between five days and a week."

"The pricing could be reduced or include the first year warranty."

More Fortinet FortiGate cons

"I would like them to bring in some features that would encourage traffic shaping or bandwidth routing, like other UTM firewalls, because the solution should be capable of limiting the bandwidth for rules."

"Its price can be improved. It is expensive. Other vendors have pre-configured policies for the protection of web servers. Palo Alto has an official procedure for protecting the web servers. Many people prefer pre-configured policies, but for me, it is not an issue."

"People sometimes find it more expensive as compared to other solutions. There are also fewer training opportunities for Palo Alto than Cisco and other vendors."

"I don't deal with it from a day-to-day perspective, but I can say that the evidence that I typically need is there, but sometimes, it's a task to actually get it and pull it out. They can make it easier to gather that evidence."

"Support should be improved, wait times can be long."

"The whole performance takes a long time. It takes a long time to configure."

"This solution cannot be implemented on-premises; it's only a cloud solution. The price is high as well."

"Its software updates can be improved. It sometimes becomes very slow with the software updates for different features. It should have an External Dynamic List of data. The malicious IP is not frequently getting updated in Palo Alto, and this should be done."

More Palo Alto Networks NG Firewalls cons

"The VPN errors are not helpful when troubleshooting."

"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."

"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."

"The setting policies need improvement. It needs an easier way to do static NAT and check on what policy is being used for that specific traffic."

"One huge issue with WatchGuard XTM is that I'm not getting reports in a readable format. Readable means, I don't want Excel online. We repeat auditing when we trigger the report or setup calendar. That functionality is what we are looking for from WatchGuard XTM here."

"Sometimes we have had issues with stability of the product."

"Syslog (Dimension) is focused on presentation, but needs more focus on utility like SonicWall syslog (GMS/Analyzer)."

"I would like them to improve the product's overall protections. This would be good for all product users."

Pricing and Cost Advice

"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."

"The pricing is based on a licensing model for each IPS in your environment."

"We pay for the license of Fortinet FortiGate IPS annually. There are not any extra costs."

"We pay about $4,000 for a yearly license, and there aren't any additional fees."

"It's one of the more expensive brands. The 100 series costs around $4,000. They are similar in pricing to what you might get from Cisco solutions and probably other similar ones. They're not more expensive than other similar solutions, but they're certainly not cheaper either."

"Fortinet FortiGate IPS is cheaper than other solutions like Cisco or Check Point."

"Fortinet FortiGate's price can be reduced."

"The product is expensive. I rate its pricing a six out of ten."

More Fortinet FortiGate pricing and cost advice

"We are on an annual license for this solution. I am happy with the price and when comparing it to other solutions it is priced competitively."

"Unfortunately, Palo Alto Networks products aren't cheap, but you have to pay the price for good security technology. I don't know the exact price, but it's about $10,000 to $15,000 without a subscription. Cisco is priced similarly. FortiGate is inexpensive in Poland, so a lot of customers prefer that. Though it's pricey, customers ultimately realize Palo Alto is the best security solution because it's stable and the network security functions are practical. Cisco has some problems from time to time, but I feel comfortable with Palo Alto Networks."

"Cost-wise, I don't see much difference in network-related costs, but this is a premium-grade firewall. There is a cost involved, and you must pay for that to get the most out of it. Its licensing costs are straightforward. There aren't any hidden costs."

"The price is based on that selected package, with the lowest starting at $3,000 annually."

"Annually, the licensing costs are too much."

"The NG firewall is an expensive solution."

"Palo Alto Networks offers more cost efficiency compared to Cisco, with better operational and maintenance ease."

"I am not sure about the specific licensing costs of Palo Alto Networks NG Firewalls, but FortiGate and Palo Alto are generally cheaper than some high-end Cisco devices."

More Palo Alto Networks NG Firewalls pricing and cost advice

"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative."

"The licensing and renewal is very expensive."

"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."

"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

872,846 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

Educational Organization

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	74
Midsize Enterprise	56
Large Enterprise	84

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	7
Large Enterprise	3

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

See all answers

Ask a question

Earn 20 points

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 8% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 14% of the time

Cisco Meraki MX vs Palo Alto Networks NG Firewalls

Compared 11% of the time

Azure Firewall vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Sophos XG vs Palo Alto Networks NG Firewalls

Compared 8% of the time

Check Point Quantum Force (NGFW) vs Palo Alto Networks NG Firewalls

Compared 7% of the time

More Palo Alto Networks NG Firewalls Competitors

No data available

Product Reports

Buyer's Guide

Fortinet FortiGate

November 2025

Download Fortinet FortiGate product report

Buyer's Guide

Palo Alto Networks NG Firewalls

October 2025

Download Palo Alto Networks NG Firewalls product report

Buyer's Guide

WatchGuard XTM [EOL]

October 2025

Download WatchGuard XTM [EOL] product report

Also Known As

No data available

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

No data available

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Palo Alto Networks NG Firewalls deliver advanced threat protection with machine learning, enhancing security through real-time attack prevention. Known for application visibility and a user-friendly interface, they offer robust network protection and flexibility in rule creation.

Palo Alto Networks NG Firewalls are designed to secure environments with features like GlobalProtect VPN, WildFire malware detection, and unified platform integration. Their strong firewall capabilities and high-performance throughput make them suitable for perimeter and data center protection, VPN configurations, application control, and network segmentation. Users consistently highlight the ease of managing network security policies and integrating third-party tools, ensuring a comprehensive protection strategy. While enhancements in support, training resources, and configuration simplicity are needed, these firewalls are integral for securing both on-prem and cloud environments, aligning with platforms like Azure and AWS.

What are the key features of Palo Alto Networks NG Firewalls?

Application Visibility: Provides insight into network traffic for better control.
Threat Prevention: Uses machine learning for real-time attack prevention.
GlobalProtect VPN: Secures remote access efficiently.
WildFire Malware Detection: Detects and prevents advanced threats.
Unified Platform Integration: Enhances network security through seamless integration with other tools.

What benefits should be evaluated when considering Palo Alto Networks NG Firewalls?

Flexibility in Rule Creation: Allows customized security policies to meet specific needs.
High-Performance Throughput: Ensures efficient network operations under high load.
Comprehensive Policy Management: Simplifies overseeing and adjusting security policies.
Robust Endpoint Security: Protects endpoints against sophisticated threats.
Seamless Integration: Works well with third-party tools for a comprehensive solution.

Palo Alto Networks NG Firewalls are commonly implemented across industries for securing LAN environments, URL filtering, and ensuring Zero Trust security. They secure both on-premises and cloud infrastructures, often becoming integral parts of security frameworks within enterprises. Leveraging these firewalls in conjunction with Azure or AWS enhances the overall network protection strategies employed by organizations.

Palo Alto Networks

Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection, but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.

WatchGuard

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense

Find out what your peers are saying about Fortinet, Netgate, OPNsense and others in Firewalls. Updated: November 2025.

DOWNLOAD NOW

872,846 professionals have used our research since 2012.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.