Citrix SD-WAN [EOL] vs Prisma SD-WAN comparison

Citrix and Palo Alto Networks are both solutions in the Software Defined WAN (SD-WAN) Solutions category. Additionally, 90% of Citrix users are willing to recommend the solution, compared to 100% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 30, 2025

Citrix SD-WAN and Prisma SD-WAN are competitors in the network optimization and management category. Prisma SD-WAN appears to have an edge due to its robust application visibility and integration with Palo Alto Networks hardware.

Features: Citrix SD-WAN offers HDX WAN Optimization, Application Acceleration, and excellent connectivity between branches, enhanced by user-friendly management and customization capabilities. Prisma SD-WAN provides deep application visibility, Layer 7 intelligence, and strong analytics capabilities, with zero-touch provisioning.

Room for Improvement: Citrix SD-WAN needs improvements in reporting features, better pricing models, and enhanced technical support. Prisma SD-WAN users note a need for better traffic handling documentation, refined alert systems, and improved training resources.

Ease of Deployment and Customer Service: Citrix SD-WAN focuses on on-premises and public cloud scenarios, often requiring external consultants for deployment, with varied support experiences. Prisma SD-WAN offers flexibility across hybrid and public cloud environments, though its complexity necessitates expert resources.

Pricing and ROI: Citrix SD-WAN is expensive, but its perpetual licenses offer cost management benefits, providing a strong ROI through MPLS savings. Prisma SD-WAN is a premium solution with high costs and a subscription-based model, appealing to larger enterprises despite its higher price point.

To learn more, read our detailed Software Defined WAN (SD-WAN) Solutions Report (Updated: April 2025).

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

April 2025

Download the complete report

Helped 851,604 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Rohit Ghorpade

Cloud network engineer at Bajaj Allianz General Insurance Co. Ltd.

A scalable solution for MCN controller but lacks technical supports, upgrades

There are a few things that can be improved, are domain-based routing and the slowness of virtual parts, and it may be due to the wrong configuration, which we have been unable to find out. Previously, we faced some issues with the slowness part. Apart from that, feature like end gateway level antivirus. We are currently using a NetFlow proxy to establish a virtual position for the NetFlow. Our current environment has many use cases, but we are not using them on the Citrix SD-WAN. When I navigate the NCL part, it involves configuration. I want to highlight this disadvantage. Sometimes, when we push the configuration, it tries to push it to all branch locations. This process takes a lot of time, nearly 30 minutes, to push a single change from the NCL. Overall, I don't think Citrix meets our use cases what we have. This is based on my feedback after using it for the past year and working on this Citrix SD-WAN. However, from my experience, it is the worst solution I have seen. There's no domain-based routing, which is horrible. That's why we are moving to other products. We have checked our use case requirements with Fortinet, Palo Alto, and they meet them. I will consider the PoC or another OEM. There are many things in the area you need to be prompt, like the automation part. If any link or device goes down, alerting notification, etc. We need to perform and highlight so many things to your management. This should be improved.

Read full review

Engineerinfosec67

Senior Information Security Engineer at Westcon-Comstor

Centralized management streamlines global network traffic control

Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access. Although there has been improvement, further steps can be taken. Additionally, it would be beneficial if the solution integrated the SD-WAN features of Prisma SD-WAN with the security features of Palo Alto's next-generation firewalls, as they currently do not align.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortinet FortiGate brings numerous benefits to my company."

"FortiGate is very simple to manage and easy to use."

"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."

"It works very well. It has a lot of different functionalities. Its cost is also fine for our customers."

"The security features are about the best that I've seen anywhere."

"The most valuable feature is the ease of use."

"The solution provides good threat intelligence feeds."

"The next-generation firewall is great."

More Fortinet FortiGate pros

"The main advantage of Citrix SD-WAN is that it enables fast communication between our branches and data centers. And, with its cloud management features, it also makes the process of adding new branches into our company network much easier."

"The most valuable feature is its reliability."

"It allows us to use additional VPNs, offering more options compared to other VPN solutions."

"The VPN and the load balancing are the most valuable features."

"The best feature is the backup capability, where all of the users' computers are tied into a central data repository."

"Downtime for branch offices is now almost zero. We have 100% real-time visibility into all of our lines. MPLS links have been replaced with lower-cost links, saving a larger percentage of line costs. Overall, I see SD-WAN as a must. And the Citrix SD-WAN product has delivered on expectations and exceeded them. (With later firmware updates we now have good firewall capabilities in the product too)."

"The solution is brilliant, the way it calculates its paths and trails is great."

"The stability is the main feature of Citrix SD-WAN. You can also upgrade the data packages or have less transmission."

More Citrix SD-WAN [EOL] pros

"I like the link monitoring and analytics. These are the features that set Prisma apart from other products. Prisma works well with large, complex networks. One of my clients is a top bank in the United States, and Prisma has performed well for that customer."

"The solution allows our network to be self-healing in the event of a loss of connectivity between different locations."

"Prisma SD-WAN is intuitive. We have a better idea of the different tools we can use and jump between the menus quickly."

"Overall, I would rate Prisma SD-WAN an eight out of ten."

"The solution's most valuable feature is the visibility of the logs."

"Prisma SD-WAN offers capabilities such as path selection based on Layer 7 attributes and application quality of service at the application level."

"I like that the integration with Palo Alto is easy."

"Prisma SD-WAN is an absolutely stable solution."

More Prisma SD-WAN pros

Cons

"Its filtering is sometimes too precise or strict. We sometimes have to bypass and authorize some of the sites, but they get blocked. We know that they are trusted sites, but they are blocked, and we don't know why."

"At first glance, the interface for the device is very confusing."

"It would be a benefit if Fortinet would release a one-stop solution that is better integrated with other products and an automated emergency response system."

"FortiGate is really good. We have been using it for quite some time. Initially, when we started off, we had around 70 plus devices of FortiGate, but then Check Point and Palo Alto took over the place. From the product perspective, there are no issues, but from the account perspective, we have had issues. Fortinet's presence in our company is very less. I don't see any Fortinet account managers talking to us, and that presence has diluted in the last two and a half or three years. We have close to 1,500 firewalls. Out of these, 60% of firewalls are from Palo Alto, and a few firewalls are from Check Point. FortiGate firewalls are very less now. It is not because of the product; it is because of the relationship. I don't think they had a good relationship with us, and there was some kind of disconnect for a very long time. The relationship between their accounts team and my leadership team seems to be the reason for phasing out FortiGate."

"We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine."

"A lack of integration between our data centers."

"They should improve high CPU and memory usage that occurs."

"There could be more integration between the logging and analytical platforms to make it more seamless and integrated."

More Fortinet FortiGate cons

"I would like to either see the price reduced or have it packaged with other products to give better value for the money."

"I would like to see support for additional reporting."

"I am happy with this product. If anything, its price can be reduced. It is a bit expensive."

"Citrix should continue to offer a perpetual licensing model because it is very important to us."

"Enhancements are needed to improve the stability."

"The solution's licensing model could be improved."

"Given that Citrix SD-WAN solved all our problems by providing us with everything we needed to unify communications with our branches and data centers, I cannot suggest anything further in terms of improvements."

"The communication around the life cycle would have been really helpful. The main issue we have had is related to the life cycle because some of the things that we are using were discontinued. They were discontinued within a year after we had purchased it, which is a bit painful. If we had known that, we would've made some other decisions."

More Citrix SD-WAN [EOL] cons

"Sometimes, during the product's initial setup phase, bypass pair or couple ports don't come up normally, and it requires an hour and a half to troubleshoot to reset the box from Prisma SD-WAN to factory default."

"If Palo Alto could open the platform to manage other SD-WANs, it would be beneficial."

"They could add more advanced security features to the product."

"Event correlation and analysis capabilities do not help minimize the number of alarms from a single event. That is the problem. We are getting a lot of incidents, and there is some issue with the correlation. That is still a drawback."

"Prisma SD-WAN requires a more seamless integration with other Palo Alto solutions, like Prisma Access."

"The product could be a bit cheaper for the services it provides."

"We initially had challenges with AIOps, which was overwhelming, and could benefit from simplification or improved training."

"I would also like to see improvement in the product training for customers. Palo Alto has not initiated very much training but they have to do so because this is a new product. If you have experience in a legacy environment, and you are moving to Prisma SD-WAN, you don't have a training framework. That is one of the disadvantages."

More Prisma SD-WAN cons

Pricing and Cost Advice

"The licensing costs are very low."

"It is more affordable than Check Point and Palo Alto. Another thing is that all the features and the OS remain the same irrespective of the size of the device. Pricing-wise, Fortinet typically provides one-year support with the firewall appliance. There is also an option for three years which is how their licensing works."

"Fortinet FortiGate is reasonably priced."

"Compared to other firewall products, it's a little cheaper in terms of pricing."

"It has been two years. I don't remember the actual price, but it was affordable. We buy the boxes and then use the license for three years."

"Its price could be better."

"Licensing for Fortinet FortiGate is on a yearly basis. Pricing for it is a bit high. It could be cheaper."

"The pricing is fair."

More Fortinet FortiGate pricing and cost advice

"The price is relatively expensive."

"It would be helpful to have a demo license available for customers who want to prove the concept and conduct a proof of concept (POC) before committing to the solution. This is particularly important for customers in Egypt who often require a demonstration of the solution's features and compatibility with their needs before making any investment or incurring costs. Providing a demo license would allow customers to assess whether the solution would meet their needs or not."

"It depends on the scale. In our case, it would have been better if we had known about the life cycling steps, but otherwise, it is worth the money."

"It's a little bit on the high side compared to the other products."

"I believe that Citrix SD-WAN is a good investment, but I do not have the information to be more specific."

"I'm not quite sure of the price ranges. Roughly, the hidden devices can scale up to $20K for one appliance. However, the branch CPs are USD $1,000 to $2,500."

"The license was a one-time purchase. It's expensive."

"As NetScaler is now, I find it quite pricey."

More Citrix SD-WAN [EOL] pricing and cost advice

"Prisma SD-WAN is a pretty expensive solution."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

"If you're already invested in a Palo Alto product, it would be logical to use this solution. If not, there might be some other solutions that are more viable in terms of pricing."

"This solution stood out because it cost considerably less than the other SD-WAN solutions out there from Cisco."

"It is more expensive than Fortinet."

See which vendors are best for you

Use our free recommendation engine to learn which Software Defined WAN (SD-WAN) Solutions solutions are best for your needs.

See recommendations

851,604 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

19%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

27%

Real Estate/Law Firm

10%

Financial Services Firm

Government

Educational Organization

20%

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Citrix SD-WAN?

It lowered our Internet costs and gave me the flexibility to choose providers based on each location's connectivity.

See all answers

What is your experience regarding pricing and costs for Citrix SD-WAN?

It is on the expensive side. I would give it an eight out of ten in terms of costliness. In my region, the approximat...

See all answers

What needs improvement with Citrix SD-WAN?

The solution's licensing model could be improved. Citrix SD-WAN is a good product from a technical point of view. How...

See all answers

What do you like most about Prisma SD-WAN?

The product's initial setup phase is straightforward.

See all answers

What is your experience regarding pricing and costs for Prisma SD-WAN?

The pricing through AT&T is not a pain point, though direct pricing from Palo Alto appeared more expensive. Compa...

See all answers

What needs improvement with Prisma SD-WAN?

We initially had challenges with AIOps ( /categories/aiops ), which was overwhelming, and could benefit from simplifi...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 21% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Cisco Catalyst SD-WAN vs Citrix SD-WAN [EOL]

Compared 34% of the time

Aruba EdgeConnect SD-WAN Platform vs Citrix SD-WAN [EOL]

Compared 32% of the time

More Citrix SD-WAN [EOL] Competitors

Prisma Access by Palo Alto Networks vs Prisma SD-WAN

Compared 21% of the time

Cisco Catalyst SD-WAN vs Prisma SD-WAN

Compared 20% of the time

Meraki SD-WAN vs Prisma SD-WAN

Compared 14% of the time

Aruba EdgeConnect SD-WAN Platform vs Prisma SD-WAN

Compared 10% of the time

VMware VeloCloud SD-WAN vs Prisma SD-WAN

Compared 7% of the time

More Prisma SD-WAN Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2025

Download Fortinet FortiGate product report

Buyer's Guide

Citrix SD-WAN [EOL]

May 2025

Download Citrix SD-WAN [EOL] product report

Buyer's Guide

Prisma SD-WAN

May 2025

Download Prisma SD-WAN product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Citrix CloudBridge, WOC, NetScaler SD-WAN

CloudGenix

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Citrix SD-WAN [EOL] enhances network stability, redundancy, and reliability, supporting connectivity between branches, optimizing internet access, and enabling secure, redundant networks, both on-premises and cloud-based.

Corporations utilize Citrix SD-WAN [EOL] to improve network performance, minimize downtime, and ensure high availability. Combining communication methods and supporting interbranch internet routing, it assists businesses in transitioning from MPLS, centralizing monitoring, and optimizing bandwidth use. Its functionality includes secure connections, cost reductions, and effective management of internet access. The support for multiple communication methods, application reliability, and ease of implementation make it a valuable tool for modern network management.

What key features does Citrix SD-WAN [EOL] offer?

Security: Enhanced protection to safeguard network data
IPv6 layering over IPv4: Ensures compatibility and future-proofing
Active-Active bandwidth use: Maximizes bandwidth utilization
Zero downtime failover: Maintains continuous operation during failures
Zero-touch deployment: Simplifies the installation process
Application reliability: Ensures high performance for critical applications
Cost-effectiveness: Reduces overall networking expenses
Central deployment: Facilitates easy configuration updates and management

What benefits should users look for in Citrix SD-WAN [EOL] reviews?

Enhanced performance: Improved application and connectivity speed
Increased reliability: Minimized network downtime and interruptions
Centralized monitoring: Streamlined network oversight and control
Scalable security: Adaptable protection for evolving network needs
Cost savings: Lower operational costs compared to traditional MPLS
Flexibility: Ability to handle multiple network functions effectively

Industries implement Citrix SD-WAN [EOL] to replace costly MPLS setups with more flexible VPN and NetScaler options, benefiting sectors like finance, healthcare, and retail that require robust, secure, and scalable network solutions. Organizations achieve better device management and efficient connectivity across multiple branches, enhancing their operational effectiveness.

Citrix

Simplify management, enable app-defined SD-WAN policies and deliver a secure, cloud-delivered branch today with the Industry’s first next-generation SD-WAN.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

AIDS Healthcare Foundation, Cornerstone Home Lending Inc., Dallara, ecVision, Essar, Eurofred, Groupe Promutuel, HMSHost Corporation, Royal Caribbean Cruise Lines Ltd, Royal Caribbean International

Open Networking User Group, Columbia Sportswear Company, Coca Cola

Buyer's Guide

Software Defined WAN (SD-WAN) Solutions

April 2025

Download Free Report

Find out what your peers are saying about Fortinet, Cisco, VMware and others in Software Defined WAN (SD-WAN) Solutions. Updated: April 2025.

DOWNLOAD NOW

851,604 professionals have used our research since 2012.

See our list of best Software Defined WAN (SD-WAN) Solutions vendors and best WAN Edge vendors.

We monitor all Software Defined WAN (SD-WAN) Solutions reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.