


Darktrace and WatchGuard Firebox compete in the cybersecurity category, offering solutions for threat detection and protection. Darktrace seems to have the upper hand due to its advanced AI-driven capabilities and comprehensive network visibility.
Features: Darktrace offers advanced AI-driven anomaly detection, Antigena technology for immediate response, and machine learning capabilities that create actionable alerts and reduce false positives. WatchGuard Firebox provides a user-friendly management interface, VPN, intrusion prevention, and application control, making it versatile for various network environments with its layered security approach and active directory integration.
Room for Improvement: Darktrace could improve integration with endpoint solutions, enhance reporting capabilities, and simplify the user interface. WatchGuard Firebox needs better detailed traffic visibility and reporting and enhanced integration with third-party services to expand its operational scope.
Ease of Deployment and Customer Service: Darktrace deployment is effective across on-premises, hybrid, and cloud environments, with generally positive technical support. WatchGuard Firebox provides extensive on-premises and cloud deployment options; users note its simplicity and effective customer service even for less technical users.
Pricing and ROI: Darktrace is known for its higher price point, justified by its advanced capabilities, offering high ROI through effective threat prevention. WatchGuard Firebox offers competitive pricing, especially for small to medium-sized enterprises, providing solid value with cost-effective licensing models, although it may be seen as expensive compared to some competitors. Both offer significant ROI with Darktrace often chosen for advanced threat detection and WatchGuard for practical security features at a reasonable cost.
Clients are now comfortable and not wasting productive hours on IT support.
The automation part is giving us a cost benefit and speed; we can react faster.
It's a very useful tool to mitigate and protect your enterprise.
Other NDR solutions provide virtual appliances that can be deployed on virtualization servers to get up and running quickly.
Using this solution provides financial benefits by securing from server attacks, which offers indirect savings.
From a security standpoint, preventing even a single major security incident or prolonged outage can represent significant cost savings.
I do not see any return on investment after WatchGuard Firebox implementation in terms of cost reductions.
Reduced incidents and easier management helped lower operational cost.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
I would rate the technical support for Fortinet FortiGate a ten out of ten.
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
The technical support from Darktrace is of high quality.
Darktrace provides excellent technical support with a monthly meeting to review platform incidents, ensuring the system functions as expected.
The challenge lies in waiting for a response after logging a ticket.
On a scale of one to 10, I would rate the technical support of the WatchGuard Firebox a 10.
When comparing WatchGuard Firebox with other vendors such as Fortinet, SonicWall, Palo Alto, and Sophos, WatchGuard Firebox performs competitively.
Most of the time, support engineers are knowledgeable and able to assist effectively with firewall configuration issues, VPN troubleshooting, firmware updates, and security-related concerns.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
Darktrace has high scalability, and I would rate it a nine out of ten.
Since it's cloud-based, it expands easily.
There is still a gap in terms of storage, and we are trying to figure out how to increase that capacity for regulated environments, which require data retention for 5 to 6 years.
Overall, WatchGuard Firebox offers strong scalability for SMBs, MSPs, branch offices, and hybrid environments while keeping deployment and management relatively straightforward.
The user interface and features compared to newer firewalls are not up to the mark, which includes functionalities such as filtering, web filtering, threat protection, user identity, and UTM features that need improvement.
You can choose different models based on throughput and features, which makes it easy to support growing environments.
We're experiencing 99.999% availability consistently.
I would rate the stability of Fortinet FortiGate a ten out of ten.
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
The stability of Darktrace is excellent, rated ten out of ten.
The appliance itself has never let me down.
For stability, I would rate Darktrace an eight out of ten.
I have just one WatchGuard Firebox unit that is licensed, and I have no bugs on it, so I am happy with that.
Once properly configured, the platform handles VPN connectivity, traffic inspection, and security services constantly, even in multi-site environments with remote users.
There are issues with traffic hitting the firewall, which could indicate performance problems related to throughput.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
It would be better for customers to get immediate replacements even with a standard subscription.
There is no dedicated salesperson in Egypt, and having one would help to improve focus on this market.
They say they can integrate with most firewalls, but when we did an integration with Meraki MX firewalls, that integration didn't work and still doesn't work to this day.
We need Darktrace on each branch to get the data out, and I suggest having some kind of a centralized product that gets data from multiple sources to aggregate and provide the data.
It gives good visibility and control over the traffic, and the UI makes it easy to manage policies and respond quickly when something comes up.
The cost for renewal after three years is 75% of the hardware cost, which is a significant problem.
When implementing a rule using a group of IPs, it is not possible to do that directly.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
It offers cost savings as it is generally cheaper than the competition.
It is about 20% cheaper.
The product is considered expensive compared to others.
The pricing is costly in USD, and they charge based on device counts.
The licensing cost is approximately eight dollars a year.
When we tried to renew the Palo Alto license, the cost was beyond any reasonable range.
Fortinet is more expensive than WatchGuard.
I find WatchGuard Firebox to be cost-effective.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
The firewall and VPN features are the most valuable in protecting our customers' networks.
It is capable of responding to lateral movement and ransomware deployment within environments where there is data exfiltration.
I do not need to manually process incidents as Darktrace provides an incident summary, potential detection paths, and other details, all exportable with just a click.
If I am in a data center where I don't have layer two, it becomes an issue because the autonomous response is reliant on sending spoofed TCP resets to my core switch to block traffic, which is a major issue.
The Firebox offers valuable features such as network security, URL filtering, UTM features, intrusion prevention and detection, and authentication.
The features of WatchGuard Firebox are most valuable for maintaining network security.
Some of the best features of WatchGuard Firebox in my experience are its ease of management, strong VPN capabilities, and integrated security services.
| Product | Mindshare (%) |
|---|---|
| Fortinet FortiGate | 10.3% |
| Darktrace | 10.5% |
| WatchGuard Firebox | 4.5% |
| Other | 74.7% |


| Company Size | Count |
|---|---|
| Small Business | 367 |
| Midsize Enterprise | 135 |
| Large Enterprise | 193 |
| Company Size | Count |
|---|---|
| Small Business | 45 |
| Midsize Enterprise | 19 |
| Large Enterprise | 29 |
| Company Size | Count |
|---|---|
| Small Business | 101 |
| Midsize Enterprise | 28 |
| Large Enterprise | 15 |
Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.
Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.
What are Fortinet FortiGate's key features?Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.
Darktrace revolutionizes network security with AI-driven alerts, anomaly detection, and robust visibility across networks. It autonomously detects threats, minimizing the need for human oversight, and offers efficient IP identification with minimal false positives.
Darktrace uses advanced AI analytics to enhance network protection. Its powerful real-time threat response capabilities and self-learning enable thorough monitoring and insightful analysis of network activities. While providing scalable and reliable security, users seek improvements in false positive reduction, user-friendly interfaces, and pricing. Enhanced third-party integration, more effective dashboards, and centralized automation features remain top priorities. Users benefit greatly from its Antigena feature, offering automated responses like blocking suspicious connections for robust network defense.
What Are Darktrace's Key Features?In industries employing Darktrace, it is pivotal in securing LAN networks, analyzing behavioral patterns, and detecting internal and external threats. Adoption alongside platforms like F5 and SAP enhances incident response, traffic analysis, and threat identification, utilizing Antigena for proactive security measures.
WatchGuard Firebox is a high-performance firewall known for its ease of setup, offering robust security with layered protection and centralized management capabilities.
WatchGuard Firebox stands out for its intuitive management and high throughput, addressing security needs with features like VPN, web filtering, and threat detection. Its centralized control and reporting abilities, along with Active Directory integration, make it popular among varied organizations. Its user-friendly interface and ongoing updates enhance usability and reliability. However, there's a call for better cloud-based administration, scalability, and improved integration with third-party vendors.
What are the key features of WatchGuard Firebox?WatchGuard Firebox is implemented across industries to secure internet gateways and protect data in multi-site businesses. Its applications span from Unified Threat Management (UTM) and intrusion prevention to compliance support in business environments requiring secure connectivity through VPNs.
We monitor all Intrusion Detection and Prevention Software (IDPS) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.