Try our new research platform with insights from 80,000+ expert users

Forcepoint Next Generation Firewall vs Netgate pfSense comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
6.0
Forcepoint Next Generation Firewall is praised for cost-efficiency, reducing expenses, staffing needs, and enhancing overall cybersecurity management.
Sentiment score
5.5
Netgate pfSense provides high ROI by reducing hardware and licensing costs, enhancing reliability, and lowering support and maintenance expenses.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
Cybersecurity ROI could be $1 or $100 million, depending on the risk of data behind it.
Sales Manager at Mega tech S.A
It is easy and offers different solutions for each solution type with small, mid, and large scale options available.
Senior Network Engineer at Anthology
I did see a return on investment with Forcepoint Next Generation Firewall, as mentioned by the efficiency improvements and the metrics related to how much I cut investigation time, the number of incidents, and the ease of making changes or pushing new configurations.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
Network Engineer at a media company with 51-200 employees
In four years of using it, that payment of 189 dollars per year has already paid off.
L2 Systems Administrator at a comms service provider with 201-500 employees
It's very favorable to have the inclusion of firewall, VPN, and router functionalities.
Owner at SimpleIT
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
5.9
Forcepoint Next Generation Firewall support faces delays and mixed reviews, with appreciated expertise but needs improvement in speed.
Sentiment score
7.9
Netgate pfSense users often rely on forums, yet paid support is praised for its responsiveness and problem-solving expertise.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
Unlike Fortinet where you can escalate an issue and quickly get responses from the development team, Forcepoint's process seems slow and challenging.
Sales Manager at Mega tech S.A
TAC engineers are very experienced and troubleshoot issues within the expected timeframe with no problems.
Senior Network Engineer at Anthology
Technical support is sometimes slow to respond, and it takes longer to resolve issues.
Head of IT Department at Mana
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
They are highly responsive.
Network Administrator at a healthcare company with 51-200 employees
I couldn't imagine having better support.
Director of IT at Cutting Edge Hair Salon RSS
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
7.3
Forcepoint NGFW excels in scalability, supporting diverse enterprises with seamless expansion, SD-WAN capabilities, and efficient traffic management.
Sentiment score
6.5
Netgate pfSense offers exceptional scalability and performance, efficiently managing various environments with seamless hardware integration and virtualization.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
I can have one management node similar to Palo Alto Panorama, with multiple nodes covering different sites, data centers, or zones.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
There are restrictions in the firewall manager and limitations when deploying for cloud environments.
Head of IT Department at Mana
Forcepoint Next Generation Firewall is scalable and can grow with my organization's needs.
Cyber Security Specialist at a comms service provider with 501-1,000 employees
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
CTO at Vigon Business Solutions Limited
I don't think Netgate pfSense can offer much scalability for big enterprises.
Director at a tech vendor with 5,001-10,000 employees
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
IT Manager at a healthcare company with 11-50 employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.9
Forcepoint Next Generation Firewall is stable and reliable, but complex deployments may face occasional instability requiring configuration adjustments.
Sentiment score
7.0
Netgate pfSense is highly stable and reliable, with user-reported issues typically tied to hardware or outdated versions.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
It has many freezes for no reason.
Cyber Security Specialist at a comms service provider with 501-1,000 employees
I rate the solution's stability a ten out of ten.
Infrastructure and integration Architect at CommunityForce
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
Technical Sales Specialist at a tech vendor with 10,001+ employees
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
Partner and Owner at Free Range Geeks
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
Forcepoint Next Generation Firewall requires a friendlier interface, better support, flexible licensing, and enhanced integration with comprehensive documentation.
Netgate pfSense users seek improvements in interface, management, features, reporting, and third-party integration for enhanced usability.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
Fast response and efficient handling of issues, similar to how Fortinet responds, would be great.
Sales Manager at Mega tech S.A
AI improvements could be beneficial, as having AI capabilities has become an important checkmark feature.
CEO at a comms service provider with 11-50 employees
I recommend that additional features be included in a single license to avoid the need for extra licensing costs.
Head of IT Department at Mana
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
Information Security Manager at a tech services company with 11-50 employees
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
Co-Owner at Steffi and Tim
Monitoring is crucial. The easier the monitoring and user interface, the simpler our team can work on and investigate issues.
Infrastructure and integration Architect at CommunityForce
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
Forcepoint Next Generation Firewall offers varied, competitive pricing, with costs influenced by licensing models, support, and selected features.
Netgate pfSense offers enterprises cost-effective, open-source security with free software and optional, competitively-priced support subscriptions.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The costs can be high since additional features require separate licenses.
Head of IT Department at Mana
In terms of pricing, I would place Forcepoint in the middle when compared to other firewalls like Fortinet and Palo Alto.
Sales Manager at Mega tech S.A
The product is free of cost.
Director of Information Technology at MASFinancials
Opting for twenty-four-seven support significantly increases the price, reaching around ten thousand to thirteen hundred dollars.
IT Manager at Gandia Consulting Group
It is far cheaper than big brand names like FortiGate and Cisco while delivering a feature set that's nearly the same across the entire list.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
Forcepoint Next Generation Firewall provides robust security features, scalability, and user-friendly management for efficient threat prevention and network segmentation.
Netgate pfSense is a cost-effective, scalable, customizable firewall offering security, VPNs, traffic management, and strong community support.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
Forcepoint Next Generation Firewall has impacted my organization positively by making it very easy to work and offering a more competitive price compared to other vendors.
Cyber Security Specialist at a comms service provider with 501-1,000 employees
Forcepoint Next Generation Firewall has positively impacted my organization by providing always-on perimeter security.
Responsabile System and Security at a energy/utilities company with 501-1,000 employees
Strong network segmentation is my favorite feature that Forcepoint Next Generation Firewall offers.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
We have multiple VLANs, and with assistance, it was easy to get everything set up and running in our organization the way we needed it to.
Director of IT at a religious institution with 51-200 employees
We had downtime before pfSense. We've never gone down using the solution.
Head of IT at a tech services company with 11-50 employees
It is very stable, and it works very well.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Forcepoint Next Generation ...
Ranking in Firewalls
21st
Average Rating
7.6
Reviews Sentiment
6.6
Number of Reviews
49
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (9th), WAN Edge (8th)
Netgate pfSense
Ranking in Firewalls
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
220
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 0.6%, up from 0.3% compared to the previous year. The mindshare of Netgate pfSense is 9.9%, down from 16.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.8%
Netgate pfSense9.9%
Forcepoint Next Generation Firewall0.6%
Other70.69999999999999%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
reviewer2774055 - PeerSpot reviewer
Cybersecurity Engineer at a tech consulting company with 51-200 employees
Improved network segmentation has reduced lateral movement while the interface still needs modernization
For threat prevention, I noticed on another customer that there were repeated scanning and exploit attempts against some public-facing service running on HTTPS. I configured Forcepoint Next Generation Firewall to handle IPS by enabling it with critical and high severity signatures only to reduce false positives. I turned on IP reputation filtering to filter out known malicious networks, applied rate limiting on specific services in the DMZ, and logged events centrally for correlation. As a result, exploit attempts were much less than before, being blocked before reaching the back-end servers from the firewall itself, with no performance degradation on the applications. The security team received clear and actionable logs that were centralized, so they knew what was happening all the time. Strong network segmentation is my favorite feature that Forcepoint Next Generation Firewall offers. The policies are very deterministic and readable, and it has excellent east-west blocking and least privilege architecture. Application awareness identifies traffic beyond just the port itself; I can identify the application using a specific port and block risky applications even if they use allowed ports, which is great for environments with shadow IT. The integrated threat prevention is also very good, with IPS featuring well-tuned signatures and reputation-based filtering that blocks known bad actors before they can touch any applications. It supports both IPsec and SSL VPN tunnels, along with site-to-site, client-to-site, and hybrid cloud links, integrating well with Active Directory and LDAP. Additionally, centralized log management and reporting are very actionable and structured, with clarity in the policies for auditing. Overall, its stability and reliability are commendable. A real example of how Forcepoint Next Generation Firewall's readable policies and application awareness features made my work easier was fixing a flat network problem without breaking actual applications. I inherited an environment where users, application servers, and databases were loosely segmented, with port-based and messy firewall rules. Security audits flagged lateral movement risks, and application owners were scared of outages if I tightened security too much. Forcepoint Next Generation Firewall made it easy by providing very easy-to-read and logical policies. I built policies that are clear, showing communications from the user zone to the application zone to specific applications, or from the app zone to the database zone, using only required database protocols. By default, I applied a deny rule between zones unless explicitly allowed by the readable rules I implemented. The policy view clarified who talks to whom, which rules exist, why they exist, and the business function they support, effectively stopping port abuse. Security posture has definitely improved greatly since using Forcepoint Next Generation Firewall. From a flat or semi-flat network, I now have clear zone-based segmentation, with increased operational efficiency. The admins using the firewall have rules that are easy to read and intent-based, making changes easier to review and approve. There is less fear that one wrong rule could break production and fewer outages caused by security changes, without hidden matches or rule shadowing surprises. Clear hit count visibility helps me clean unused rules, leading to much fewer outages caused by changes on the firewalls. The centralized log management with supported log types provides better visibility for the SOC team and the SIEM team, as Forcepoint Next Generation Firewall sends very easy-to-parse and search clear logs to the SOC team. I did see measurable, defensible results after using Forcepoint Next Generation Firewall, including fewer security incidents reaching the back-end servers. This reduction is due to strong segmentation, application awareness, and IPS features, leading to a 60 to 70 percent reduction in security alerts that actually reach the servers. DMZ exploit attempts dropped to near zero, and no lateral movement incidents were detected post network segmentation. Additionally, overall SOC efficiency improved due to well-structured and contextual logs reflecting clear policy intent, resulting in a 35 to 40 percent reduction in mean time to triage. SOC analysts stopped chasing noise and false positives, as they had much clearer logs to use confidently.
MC
Chief information security officer at Center for Information Management, Inc.
Provides visibility that enables users to make data-driven decisions
pfSense flexibility overall is pretty good. They are making some really big improvements. That said, they're a long way from enterprise. They advertise things that they don't have. I've worked for probably 30% of the Corporate 100, and they won't tolerate the high availability and it being as buggy as it is. The fact that if you configure it incorrectly without any visual indications that it's not done in the way Netscape does, then it will not only break the firewall, it will break both firewalls. The only way you can even try to recover is by getting new images from Netgate. You have to open up a tech support case, download the image for, then reimage the firewalls, and reapply your configuration. The fact that you can completely brick your firewalls just by having a configuration that they allow, and they don't even don't tell you there's a problem until they both go down. That's totally unacceptable in an enterprise. As a standalone firewall, they're excellent. As an enterprise, we're not touching it with a ten-foot pole. It’s difficult to configure and use add-on features. It's really easy to add them. On the website, they say “Oh, we do this, this, and this.” However, they do a lot through third-party add-ons. The problem is, if there's any problems at all, the very first thing they want you to do is disable those add-ons. So that's not really supporting anything. There are two ways that firewalls are viewed: talking to the firewall and talking through the firewall. If you're talking about “to the firewall,” then it's a very robust, very secure firewall. However, it doesn't have things that they claim helps with protecting data, most of it's third party. If you want to do all these things that are typically associated with enterprise-level firewalls, most of them are done by a third party. It's not actually cooked into their product. I like their OSPF. I wish it was more current. The only bugs that are in the OSPF are ones that have been known about for almost two years. Maybe they're they're victims of their own success. Their growth curve has outstripped their technical support and has outstripped their ability to develop. They're just growing so fast. They're trying to do everything. Updates from third parties can take too long. For example, if there's a problem with a package and no available update is available, you have to wait. Since it's via a third party, there's no definable schedule, as the update needs to come from a third-party open organization with no financial interest to make the process faster. Sometimes, there's more finger-pointing than resolution. In, OSPF, they give you lots of information. However, when it comes to hardcore troubleshooting of different routing zones or things like that, then you had to keep dropping down to the CLI in order to get it. And that's where your experience can change quite a bit. If you're running OSPF on Cumulus or some of the other big routing or switching solutions, then they're running much newer versions of it, which are all bug-patched and fixed. However, pfSense is running on an operating system that is not theirs. They don't necessarily have full control over it. When you get a real enterprise firewall, and when you hook up the redundancy, you expect redundancy to work and be predictable. And never ever will the redundancy crash your system. If you don't create the interfaces in the exact same order on both firewalls every single time, if so much as one interface is out of order, if the command line is different because of the way the operating system works, you will slowly corrupt your configuration to the point where it'll break.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Manufacturing Company
11%
Computer Software Company
9%
Financial Services Firm
9%
Government
8%
Comms Service Provider
14%
Computer Software Company
12%
Manufacturing Company
7%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business28
Midsize Enterprise10
Large Enterprise11
By reviewers
Company SizeCount
Small Business168
Midsize Enterprise33
Large Enterprise29
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
My experience with pricing, setup cost, and licensing is limited because I do not work with pricing, but I have exper...
What needs improvement with Forcepoint Next Generation Firewall?
Forcepoint Next Generation Firewall is overall good, but AI enabled features are not available. Many templates and AI...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
California Department of Corrections and Rehabilitation (CDCR)
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Find out what your peers are saying about Forcepoint Next Generation Firewall vs. Netgate pfSense and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.