Try our new research platform with insights from 80,000+ expert users

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks PA-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers a good ROI with enhanced security, cost savings, and efficient policy-deployment, valued by clients.
Sentiment score
6.1
Check Point Harmony SASE users see cost savings, productivity boosts, and security improvements, though some find returns complex to quantify.
Sentiment score
5.9
Palo Alto Networks PA-Series integrates advanced features for cost savings and offers enhanced security controls with long-term financial benefits.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
Check Point Harmony SASE (formerly Perimeter 81) blocked access to those URLs at the network level before users could click through.
Pre Sales Consultant at Redington Group
We are saving 40% of our time, which is good.
Cloud Security Engineer at Punch Powertrain nv
The return on investment with this product is a hard question because security tends to be a cost center rather than a profit center.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
Palo Alto Networks PA-Series will be more reliable and will save money, time, and multiple resources.
Project Engineer at IT Solution
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is mixed, praised for knowledge but criticized for delays, language issues, and varying regional experiences.
Sentiment score
7.0
Check Point Harmony SASE provides responsive, knowledgeable, and professional support, with most users expressing high satisfaction despite occasional delays.
Sentiment score
7.0
Palo Alto Networks PA-Series offers strong support with knowledgeable staff, though response speed can vary, particularly in complex cases.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
I would rate support 10 out of 10.
Pre Sales Consultant at Redington Group
People working really hard, listening to every issue and request, and replying within hours.
Security Support Engineer at a tech vendor with 51-200 employees
They're constantly following up after a case has been opened to ensure that it has been resolved properly.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
Cisco TAC support comes within five to ten minutes on the call.
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
Operations Specialist - MX Operations at Bank Alfalah Limited
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and adaptable, with virtual machines offering flexibility and seamless performance praised across industries.
Sentiment score
7.8
Check Point Harmony SASE offers impressive scalability and flexibility, smoothly adapting to growing user bases and organizational needs.
Sentiment score
7.1
Palo Alto Networks PA-Series offers scalable, robust firewall solutions suitable for diverse business sizes, with easy virtual upgrades.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
The cloud-native model ensures we are not tied to any specific location or hardware, which has been a great game changer in terms of agility.
Pre Sales Consultant at Redington Group
I would rate it nine out of ten for scalability.
Cloud Security Engineer at Punch Powertrain nv
Check Point Harmony SASE's scalability is good; it can handle growth easily, allowing me to easily add another region and gateway to have more people join in.
Security Support Engineer at a tech vendor with 51-200 employees
If you talk about virtual firewall, it is easy to autoscale.
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
The solution can handle more than ten thousand users in my organization.
Operations Specialist - MX Operations at Bank Alfalah Limited
There are no restrictions in scalability.
Asisstant Manager at Yaskawa America, Inc
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is generally stable, though firmware updates can cause issues; proper configuration is crucial for performance.
Sentiment score
7.7
Check Point Harmony SASE is praised for stability, reliability, and minimal issues, with high uptime and efficient performance.
Sentiment score
8.2
Palo Alto Networks PA-Series is praised for its high stability and reliability, with careful OS updates enhancing performance.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
There are some lags and glitches with connectivity, so I would rate the stability as between seven or eight out of ten.
Cloud Security Engineer at Punch Powertrain nv
After the last improvement, I can say it is much more stable now.
Technical Lead at Netsmart
Check Point Harmony SASE is stable most of the time, but there are still some issues that are hard to troubleshoot.
Security Support Engineer at a tech vendor with 51-200 employees
I am giving stability a rating of 10 out of 10 because since implementation, we have not observed any issues with Palo Alto Networks PA-Series related to version, vulnerabilities, or anything else.
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
If the data plane hangs or gets stuck, then we can troubleshoot using the management plane.
Project Engineer at IT Solution
 

Room For Improvement

Fortinet FortiGate faces high costs, technical and usability issues, complex licensing, and requires improved support, stability, and AI integration.
Check Point Harmony SASE needs improvements in performance, user interface, integration, documentation, scalability, and features like SD-WAN and firewalls.
Palo Alto Networks PA-Series is criticized for high costs, complex interface, slow support, and lacking AI and VPN integration.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
A local data center in Turkey would enhance the product, as currently, our Internet traffic goes to another country, which is problematic for us.
Technical Lead at Netsmart
One area for improvement is integration with third-party identity providers.
Pre Sales Consultant at Redington Group
The product is lacking features that other competitors have, making it quite challenging to migrate customers to this solution because it feels very much unfinished.
Security Support Engineer at a tech vendor with 51-200 employees
You can buy cheaper products, but I believe in the value they're giving us.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
IT Coordinator at CSA Makati
For the next release of the Palo Alto Networks PA-Series firewall, I would like to see logs monitoring included.
Asisstant Manager at Yaskawa America, Inc
 

Setup Cost

Fortinet FortiGate offers competitive pricing with good value, but users highlight concerns about renewal costs and feature expenses.
Check Point Harmony SASE offers competitive value for large enterprises, though its pricing isn't the cheapest for smaller firms.
Palo Alto's PA-Series offers advanced features and flexible licensing, balancing higher cost with exceptional long-term support and value.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
Cost efficiency is a consideration, as SASE products are not the cheapest security products.
Technical Lead at Netsmart
The cost is a bit expensive for most users.
Security Engineer at a tech vendor with 51-200 employees
It is a bit expensive.
Cloud Security Engineer at Punch Powertrain nv
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
Operations Specialist - MX Operations at Bank Alfalah Limited
The price of Palo Alto Networks PA-Series is expensive.
IT Coordinator at CSA Makati
Overall, the pricing is good, but if they included GlobalProtect, it would be more valuable.
Project Engineer at IT Solution
 

Valuable Features

Fortinet FortiGate excels in easy deployment, advanced security features, integration, scalability, user-friendly interface, and cost-effectiveness for robust network protection.
Check Point Harmony SASE offers secure, efficient, and centralized network management with real-time threat intelligence and zero trust access.
Palo Alto Networks PA-Series delivers robust security features, seamless management, and advanced threat prevention with appreciated stability and comprehensive logging.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The firewall and VPN features are the most valuable in protecting our customers' networks.
Sales & Support at a tech services company with 1-10 employees
The firewall management is the most valuable feature for me.
Cloud Security Engineer at Punch Powertrain nv
The Zero Trust Network Access (ZTNA) feature is a major highlight as it gives users seamless and secure access to internal resources without requiring a full-blown VPN, which improves both security and user experience.
Pre Sales Consultant at Redington Group
The Zero Trust and segmentation have helped my team and our customers significantly because we are able to protect every scope and allow the work-from-home users to access internal resources while passing through a threat prevention gateway, ensuring that everything is safe.
Security Support Engineer at a tech vendor with 51-200 employees
Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
Palo Alto Networks PA-Series has multiple security features, including antivirus, IPS, and behavior-based analysis.
Project Engineer at IT Solution
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
Operations Specialist - MX Operations at Bank Alfalah Limited
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
587
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Check Point Harmony SASE (f...
Ranking in Firewalls
16th
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
62
Ranking in other categories
Secure Web Gateways (SWG) (7th), Anti-Malware Tools (7th), Enterprise Infrastructure VPN (7th), ZTNA as a Service (5th), ZTNA (2nd), Secure Access Service Edge (SASE) (7th)
Palo Alto Networks PA-Series
Ranking in Firewalls
21st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
36
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.3%, down from 21.1% compared to the previous year. The mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 0.6%, up from 0.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 1.2%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate18.3%
Check Point Harmony SASE (formerly Perimeter 81)0.6%
Palo Alto Networks PA-Series1.2%
Other79.9%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Nasseer Qureshi - PeerSpot reviewer
Pre Sales Consultant at Redington Group
Delivers seamless and secure remote access while enhancing security posture
Check Point Harmony SASE (formerly Perimeter 81) offers strong features, but there are areas that could be improved. One area for improvement is integration with third-party identity providers. It works with standard SAML and SSO, but we would prefer deeper integrations with solutions such as Ping for more advanced identity-based policies. Additionally, a mobile-specific client or lightweight agent would be helpful for securing access from smartphones, especially in BYOD environments. We would appreciate more granular reporting and analytics, including better drill-down capabilities to investigate specific users or app activity. The logs are comprehensive, but filtering them can sometimes feel messy. The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices. Some of the policy configuration steps are nested and could be streamlined.
Rohit Ghorpade - PeerSpot reviewer
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
Identity-based perimeter control has improved security and supports reliable remote access
Currently, we are working with vendors such as Palo Alto Networks PA-Series, Cisco, Check Point, and Citrix. Palo Alto Networks PA-Series is a better firewall. Deep packet inspection and threat prevention basically comply with whatever traffic is incoming and outgoing through the firewall. I do not think anything improvement is required. The thing is that Palo Alto Networks PA-Series works mostly on a license-based model. If you want to utilize any feature, you have to purchase the license. For example, URL filtering requires a license purchase. It simplifies the implementation because LDAP server profile can be integrated. Basically, that simplifies the implementation of access rule or security policy.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
885,264 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
10%
Comms Service Provider
6%
Financial Services Firm
6%
Manufacturing Company
6%
Manufacturing Company
10%
Computer Software Company
9%
Comms Service Provider
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business361
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business53
Midsize Enterprise20
Large Enterprise13
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise5
Large Enterprise16
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Harmony Connect?
The product's initial setup phase is very simple.
What is your experience regarding pricing and costs for Harmony Connect?
I am not aware of the pricing, setup cost, and licensing, but I would say the setup cost is our resource, and we have...
What needs improvement with Harmony Connect?
When I'm raising a ticket for Check Point Harmony SASE (formerly Perimeter 81), it's a bit technical for non-technica...
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to ...
What needs improvement with Palo Alto Networks PA-Series?
The areas that could be improved with Palo Alto Networks PA-Series include price. My experience with the price of the...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Check Point Quantum SASE
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith
Information Not Available
Find out what your peers are saying about Check Point Harmony SASE (formerly Perimeter 81) vs. Palo Alto Networks PA-Series and other solutions. Updated: March 2026.
885,264 professionals have used our research since 2012.