Try our new research platform with insights from 80,000+ expert users

Cisco Catalyst SD-WAN vs Citrix SD-WAN [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco Catalyst SD-WAN
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
Network Management Applications (5th), Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (2nd)
Citrix SD-WAN [EOL]
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
22
Ranking in other categories
No ranking in other categories
 

Q&A Highlights

OT
Assistant Vice President - IT at Au small finance bank
May 08, 2020
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
ND
Network Manager at HPCL
Faced complex visibility and policy challenges but have improved basic traffic routing control
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the basic SD-WAN functionality is good enough. I am using it only because it was done as a pilot project, specifically for my 60 to 70 sites. For the majority of the sites, I am using Fortinet's Secure SD-WAN solution and I found that more viable and more in alignment with my requirements. For example, there is not any Internet Service Database available in Cisco Catalyst SD-WAN intrinsically. If I want to write a policy based on applications, I am not able to write it, at least in Cisco Catalyst SD-WAN Viptela deployment that we have done, and that is fairly easy to do in Fortinet. The second issue is the logging capability. I think the visibility that Fortinet Secure SD-WAN has is not even comparable. Cisco Catalyst SD-WAN does not provide that sort of insight or control as far as traffic steering is concerned. With respect to the SLAs, I barely know which sort of SLAs are violated in Cisco Catalyst SD-WAN, so I do not have clear visibility on where the traffic is moving from at my spoke or hub locations. I believe Fortinet gives me a very clear picture of where the traffic is going. Overall visibility, whether it is data traffic or logs, is much better in Fortinet compared to Cisco Catalyst SD-WAN. The complexity of Cisco Catalyst SD-WAN Viptela is noticeable and quite complicated to configure. If something breaks, you have to involve TAC and others to fix it. On the contrary, you can work with underlays. Even if your IPsec overlay tunnel is down, it does not impact your production. Thus, we find Fortinet's solution significantly better than Cisco Catalyst SD-WAN solution. I have used Application-aware Routing in Cisco Catalyst SD-WAN. However, I found it to be very complicated, especially regarding policy writing. For my breakout of VC traffic, we had to write a bunch of IP addresses for Zoom, Webex, and others. Presently, it can only identify Webex as an application, and I highly doubt whether there is any application identification for Zoom and other platforms, as we were not able to find it during our implementation. It is done through static whitelisting of the IPs, which is not a scalable solution since IPs can change at any time. Overall, the application-aware routing policies are not as flexible and scalable as the Internet Service Database feature of Fortinet provides. The struggles encompass policy writing, logging capabilities, traffic visibility, and complex configuration. There is also the issue of load balancing. We have faced considerable challenges with traffic load balancing between the links. Although the SLA targets are configurable, understanding how traffic flows is challenging, making troubleshooting exceedingly difficult. Overall, I find it a quite complicated solution with not that much operational usability.
Rohit Ghorpade - PeerSpot reviewer
Cloud network engineer at Bajaj Allianz General Insurance Co. Ltd.
A scalable solution for MCN controller but lacks technical supports, upgrades
There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"FortiGate IPS is really easy to use. I don't have any problems with this."
"I like Fortinet's cloud management. It allows me to manage all my devices in different branches for three cloud accounts. Even though I use on-prem devices, I can manage everything on the cloud."
"The most valuable features we found are the SD-WAN, FortiGate SD-WAN, and the standard UTM protection, among others."
"Fortinet FortiGate helps improve my organization since it's quick and easy to install, and we don't have to call support frequently."
"The product is highly stable."
"My clients appreciate it for its features. It is easy to install and manage, and it offers all-around protection, including web filtering, content filtering, IPS, and IDS."
"Its stability is the most valuable."
"This version is stable. I don't have any issues with this solution, in our environment, it works well."
"Cisco SD-WAN is a stable solution."
"The integration of Layer 3 and application routing is great."
"Cisco SD-WAN is a highly stable solution."
"I would rate the overall solution as a ten out of ten."
"This solution comes with comprehensive technical support."
"I like the feature that lets you transfer from old devices to new devices without changing the hardware and subscription."
"It's a scalable solution."
"This solution can scale from SMB to the enterprise level. It is very impressive."
"The most valuable feature is security, as it gives me the port bindings that cannot be accomplished using other solutions."
"The tool is quite cost-effective because it replaces the need for MPLS, which is a bit expensive...Citrix SD-WAN doesn't need much maintenance."
"The main advantage of Citrix SD-WAN is that it enables fast communication between our branches and data centers. And, with its cloud management features, it also makes the process of adding new branches into our company network much easier."
"Downtime for branch offices is now almost zero. We have 100% real-time visibility into all of our lines. MPLS links have been replaced with lower-cost links, saving a larger percentage of line costs. Overall, I see SD-WAN as a must. And the Citrix SD-WAN product has delivered on expectations and exceeded them. (With later firmware updates we now have good firewall capabilities in the product too)."
"The VPN and the load balancing are the most valuable features."
"The scalability and stability are quite good in general."
"The best feature is the backup capability, where all of the users' computers are tied into a central data repository."
"The reliability of connectivity is most valuable."
 

Cons

"There could be improvements in the mathematical algorithms used for behavior analytics of traffic."
"It could always be more secure."
"A sandbox would be good in order to be able to inspect the emails containing spam and be able to validate the emails that contain malware, prior to delivering to the customer."
"The solution's GUI is not very appealing."
"Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful."
"I would like the deployment and integration of this product to be easier. We should be able to deploy the features more easily and have different types of access. It should be easier to integrate. Currently, we need to develop APIs to use this interface."
"Fortinet FortiGate SWG's SSL offloading features need improvement."
"At the moment, the main concern is the pricing and the type of licensing."
"The solution should be more user-friendly."
"The licensing model needs to be improved."
"Some configurations or procedures could be more user-friendly. Adding a bandwidth management feature would make Cisco SD-WAN more scalable and less resource-intensive."
"This solution could be improved with a simpler implementation process and licensing model."
"The user interface needs to be more friendly."
"They should enhance the reporting because, as it is today, they need more executive-level reports."
"Overall, I find it a quite complicated solution with not that much operational usability."
"The solution should not be so bound to ISPs."
"I would like to see support for additional reporting."
"The firewall reporting could be easier to use and filter. (It works well enough, but if I need to give an area for improvement, I think this would be it.). The built-in reporting on the product in this regard is not great."
"I would like to either see the price reduced or have it packaged with other products to give better value for the money."
"The price could be improved, it's an expensive solution."
"Enhancements are needed to improve the stability."
"The reports need to be improved. We need to have them customized but they don't have that right now. I would like for them to have better system predictions. We don't have that right now. My system may be working fine right now but after making some changes, that can change."
"Overall, network security and next-generation firewall features are areas that they can improve on."
"Citrix SD-WAN does not have the SD-WAN with one optimization in a single license. Other competitors have this option and it should be added to this solution."
 

Pricing and Cost Advice

"It's not the cheapest, but it's value for money. Given everything we've got out of it: the DMZ port, the VPN, and the high availability, it's a pretty reasonable price."
"The pricing is better compared to other solutions like Check Point, Arista, or Cisco."
"Setup costs and pricing depends on many variables, but it's mostly affordable."
"It is an expensive solution."
"You need to pay a license for this solution. Our licensing is now done in our subsidiary."
"Easy to understand licensing requirements."
"The solution requires a license annually, it is not a user license, you can have as many users as your want. I must renew the license regularly per device."
"The cost has increased since the update so I would rate it eight out of ten."
"The product is not too expensive."
"The price of Cisco SD-WAN is expensive. We pay approximately $50 monthly for the use of the solution."
"On a scale of one to five, I would rate Cisco's pricing as a three."
"The pricing for Cisco SD-WAN is more expensive than other brands or solutions, such as Fortinet and Palo Alto Networks, so it's one out of ten."
"The initial cost is quite significant, but the investment is worthwhile."
"The Cisco SD-WAN licensing model needs to be simplified. There are currently three types of licenses: enterprise agreements, individual licenses, and DNA subscriptions. This can confuse customers, requiring a dedicated person to determine which type of license is right for their organization."
"Cisco's pricing is not entirely satisfactory when you compare the SD-WAN solutions in Asian markets — like the South Asian market in Sri Lanka — because there are several competing brands including Fortinet and Citrix, who provide much the same product for a generally lower price. And when it comes to firewall vendors like Palo Alto and SonicWall, they're also selling here. It's the same with VMware, too; they have much the same features."
"The license consists of an annual fee."
"The price of the subscription should be cheaper."
"It's a little bit on the high side compared to the other products."
"The price is relatively expensive."
"Citrix SD-WAN is quite an affordable product."
"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."
"I believe that Citrix SD-WAN is a good investment, but I do not have the information to be more specific."
"I'm not quite sure of the price ranges. Roughly, the hidden devices can scale up to $20K for one appliance. However, the branch CPs are USD $1,000 to $2,500."
"As NetScaler is now, I find it quite pricey."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Financial Services Firm
11%
Computer Software Company
11%
Manufacturing Company
8%
Comms Service Provider
7%
Computer Software Company
12%
Government
8%
Educational Organization
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise15
Large Enterprise44
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise10
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Cisco SD-WAN?
When considering the most valuable features of Cisco SD-WAN, the decoupling of self-monitoring stands out significant...
What is your experience regarding pricing and costs for Cisco SD-WAN?
The pricing of Cisco Catalyst SD-WAN is rated between eight and nine out of ten, where ten is the most expensive.
What needs improvement with Cisco SD-WAN?
More or less, it's the same with Cisco in terms of complexity and pricing, so there's not much of a difference. They ...
What needs improvement with Citrix SD-WAN?
The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...
What advice do you have for others considering Citrix SD-WAN?
If a customer already has Citrix NetScaler and is not looking to change anything in their existing environment, we pr...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Cisco SD-WAN
Citrix CloudBridge, WOC, NetScaler SD-WAN
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Doyle Research, Ashton Metzler & Associates
AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International
Find out what your peers are saying about Fortinet, Cisco, Check Point Software Technologies and others in Software Defined WAN (SD-WAN) Solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.