Try our new research platform with insights from 80,000+ expert users

Cisco Catalyst SD-WAN vs Juniper Session Smart Router comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Software Defined WAN (SD-WAN) Solutions
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
581
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Cisco Catalyst SD-WAN
Ranking in Software Defined WAN (SD-WAN) Solutions
2nd
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
Network Management Applications (5th), WAN Edge (2nd)
Juniper Session Smart Router
Ranking in Software Defined WAN (SD-WAN) Solutions
12th
Average Rating
8.6
Reviews Sentiment
5.6
Number of Reviews
4
Ranking in other categories
Routers (7th)
 

Mindshare comparison

As of February 2026, in the Software Defined WAN (SD-WAN) Solutions category, the mindshare of Fortinet FortiGate is 13.2%, down from 19.9% compared to the previous year. The mindshare of Cisco Catalyst SD-WAN is 10.5%, down from 15.6% compared to the previous year. The mindshare of Juniper Session Smart Router is 2.4%, down from 3.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Defined WAN (SD-WAN) Solutions Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate13.2%
Cisco Catalyst SD-WAN10.5%
Juniper Session Smart Router2.4%
Other73.9%
Software Defined WAN (SD-WAN) Solutions
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
ND
Network Manager at HPCL
Faced complex visibility and policy challenges but have improved basic traffic routing control
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the basic SD-WAN functionality is good enough. I am using it only because it was done as a pilot project, specifically for my 60 to 70 sites. For the majority of the sites, I am using Fortinet's Secure SD-WAN solution and I found that more viable and more in alignment with my requirements. For example, there is not any Internet Service Database available in Cisco Catalyst SD-WAN intrinsically. If I want to write a policy based on applications, I am not able to write it, at least in Cisco Catalyst SD-WAN Viptela deployment that we have done, and that is fairly easy to do in Fortinet. The second issue is the logging capability. I think the visibility that Fortinet Secure SD-WAN has is not even comparable. Cisco Catalyst SD-WAN does not provide that sort of insight or control as far as traffic steering is concerned. With respect to the SLAs, I barely know which sort of SLAs are violated in Cisco Catalyst SD-WAN, so I do not have clear visibility on where the traffic is moving from at my spoke or hub locations. I believe Fortinet gives me a very clear picture of where the traffic is going. Overall visibility, whether it is data traffic or logs, is much better in Fortinet compared to Cisco Catalyst SD-WAN. The complexity of Cisco Catalyst SD-WAN Viptela is noticeable and quite complicated to configure. If something breaks, you have to involve TAC and others to fix it. On the contrary, you can work with underlays. Even if your IPsec overlay tunnel is down, it does not impact your production. Thus, we find Fortinet's solution significantly better than Cisco Catalyst SD-WAN solution. I have used Application-aware Routing in Cisco Catalyst SD-WAN. However, I found it to be very complicated, especially regarding policy writing. For my breakout of VC traffic, we had to write a bunch of IP addresses for Zoom, Webex, and others. Presently, it can only identify Webex as an application, and I highly doubt whether there is any application identification for Zoom and other platforms, as we were not able to find it during our implementation. It is done through static whitelisting of the IPs, which is not a scalable solution since IPs can change at any time. Overall, the application-aware routing policies are not as flexible and scalable as the Internet Service Database feature of Fortinet provides. The struggles encompass policy writing, logging capabilities, traffic visibility, and complex configuration. There is also the issue of load balancing. We have faced considerable challenges with traffic load balancing between the links. Although the SLA targets are configurable, understanding how traffic flows is challenging, making troubleshooting exceedingly difficult. Overall, I find it a quite complicated solution with not that much operational usability.
SRI GANESH  PHANIYAPPA - PeerSpot reviewer
Sub Divisional Engineer NOC Bangalore at Bharat Sanchar Nigam Limited
Delivered tailored features and meets requirements effectively
We are using it as a DNG. This means all subscriber PPPoE sessions or ILS Smart VPN connections are terminated through the access network to this BNG, Uniphore BNG. From there, they are managed Everything has been fine. Although we did not explore much about the solution, they provided us with a…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortinet FortiGate is a scalable solution."
"FortiGate's ability to perform as expected and fulfil our needs has been the most compelling feature for network security."
"We have a redundant setup for failover, however, it has not had to fail over ever and we have not had a capacity issue."
"The solution is easy to configure and maintain remotely."
"The solution is very user friendly. The user interface in particular is quite nice."
"The signature database and zero-day detection are Fortinet FortiGate's most valuable features."
"The email protection and VPN features are the most valuable."
"I would advise others considering or evaluating the Fortinet FortiGate to buy it."
"The most valuable features of Cisco SD-WAN are reliability and scalability."
"I would recommend Cisco Catalyst SD-WAN as it is a good product."
"The deployment is quite simple and straightforward."
"Initial setup is easy."
"It is very stable."
"Overall, I rate Cisco SD-WAN as nine out of ten."
"When we have had power outages for a few hours we have had no issue with Cisco SD-WAN coming back online and functioning."
"It is a very scalable solution."
"They provided us with a customized product according to our requirements."
"The solution is especially Session's smart, application-aware, AI-based."
"The most valuable feature of Juniper Session Smart Router is its unique SDR channel."
"Customer service is very prompt."
"As compared to the other major vendors in the SD-WAN market, such as VeloCloud, Cisco, and others, the tunnel-free and secure vector routing technology is its major USP, which gives plenty of room to discuss with the customer why IPSec from 1998 is a bit outdated."
 

Cons

"I would like to see improvements in the IPS/IDS feature to enhance protection against attacks from attackers, including ransomware protection."
"The solution must improve the support provided for customers around the globe, considering the time differences in different places."
"FortiGate NGFW can improve technical support. The engineer who answers the technical support call, email, or phone call, whatever the medium may be. The response time is very bad."
"However, one feature that I cannot rely on is the application filter, which requires tedious steps compared to other solutions like Check Point and Palo Alto, where creating the application filter rule is simpler."
"Improvements for Fortinet FortiGate could be made by making it easier to implement on networks and simpler to add users and accounts that utilize this solution. That's basically the only challenge that I see."
"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."
"I wish Fortinet FortiGate's UI updates would be done in a more simplified way to improve it."
"They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company."
"The solution should not be so bound to ISPs."
"Cisco products are a little bit complicated, so making them a little bit easier would be an improvement."
"The solution is very costly."
"They should enhance the reporting because, as it is today, they need more executive-level reports."
"The solution could be more secure. Security is always a priority for us."
"The technical support is a bit slow."
"Cisco SD-WAN is not as easy to deploy as the Meraki and FortiGate solutions. The zero-touch deployment could be a lot better. The deployment and initial setup are complicated and could be better."
"The initial setup is really complex."
"Regarding improvement, we still need to see what it can do."
"Juniper Session Smart Router can improve the integration for Wi-Fi devices and add additional Sassy deployments."
"Juniper Session Smart Router could be better in terms of software performance."
"The UI of the SSR conductor is the main part where improvements can be done. Today, for every configuration step, you have to do a series of clicks. What we are missing there are wizards. For example, I have two applications, and I want one application to be prioritized against the other. In such a case, a wizard for assigning policies to a service without configuring each step by hand would be very helpful. There should be an overhaul of the GUI of the conductor. The functionality they have got in the Mist portal should be baked into the conductor itself. It would be really great, but as we all know, that won't happen."
 

Pricing and Cost Advice

"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."
"A year or two years back, its price was competitive and reasonable. That was one of the reasons that people easily switched to Fortinet. Over the last two years, the prices have increased drastically. However, the prices of others have also increased. An advantage is there from the price point but not as much as it was previously."
"The beauty is the price performance ratio is great with FortiGate. It provides all the features we needed and the price is comparable with others' firewalls. The price is quite competitive with the firewalls with similar features."
"At the time we bought them, I was satisfied with their pricing; I don't know how the new pricing will be."
"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."
"The price could be lower."
"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."
"Their licensing costs are annual. The UTM feature license along with their support is called FortiCare. We include that as a part of the annual maintenance cost. Palo Alto or Juniper also have an annual subscription charge for UTM. Price, of course, can always be more competitive, but it is not the most expensive product. The price-performance ratio is quite high for FortiGate."
"SD-WAN as a service is probably something in the neighborhood of $100 to $200 a month per location."
"When purchasing, there are so many features available that it's quite confusing deciding which to choose. And some of the devices force you to buy licenses you don't want."
"The pricing of this solution is very expensive."
"It is expensive."
"I give the price a seven out of ten."
"Cisco's pricing is not entirely satisfactory when you compare the SD-WAN solutions in Asian markets — like the South Asian market in Sri Lanka — because there are several competing brands including Fortinet and Citrix, who provide much the same product for a generally lower price. And when it comes to firewall vendors like Palo Alto and SonicWall, they're also selling here. It's the same with VMware, too; they have much the same features."
"Cost-wise, Cisco SD-WAN is comparatively high."
"The initial cost is quite significant, but the investment is worthwhile."
"We are currently renegotiating the offer for the licenses and the license bundle model. The license for an ISP has to be different from the license for an end customer. This is something we are currently renegotiating with Juniper, but, of course, the pricing for the licensing is always an issue when you want to get more customers."
"It is a simple bandwidth-based license and the orchestration comes bundled with the solution by default."
report
Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
8%
Comms Service Provider
7%
Manufacturing Company
19%
Comms Service Provider
11%
Financial Services Firm
8%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise189
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise15
Large Enterprise44
No data available
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Cisco SD-WAN?
When considering the most valuable features of Cisco SD-WAN, the decoupling of self-monitoring stands out significant...
What is your experience regarding pricing and costs for Cisco SD-WAN?
The pricing of Cisco Catalyst SD-WAN is rated between eight and nine out of ten, where ten is the most expensive.
What needs improvement with Cisco SD-WAN?
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the bas...
What needs improvement with Juniper Session Smart Router?
I did not find any problem with Juniper. Regarding improvement, we still need to see what it can do.
What is your primary use case for Juniper Session Smart Router?
We are using it as a DNG. This means all subscriber PPPoE sessions or ILS Smart VPN connections are terminated throug...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Cisco SD-WAN
128T Networking Platform, 128 Technology SD-WAN, Juniper SSR Series
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Doyle Research, Ashton Metzler & Associates
Revation Systems
Find out what your peers are saying about Cisco Catalyst SD-WAN vs. Juniper Session Smart Router and other solutions. Updated: February 2026.
881,733 professionals have used our research since 2012.