Try our new research platform with insights from 80,000+ expert users

Forcepoint Next Generation Firewall vs Netgate pfSense comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers a good ROI with enhanced security, cost savings, and efficient policy-deployment, valued by clients.
Sentiment score
5.0
Forcepoint Firewall reduces costs through centralized management, automation, and budget-friendly pricing, enhancing efficiency and minimizing labor needs.
Sentiment score
5.5
Netgate pfSense provides high ROI by reducing hardware and licensing costs, enhancing reliability, and lowering support and maintenance expenses.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
Cybersecurity ROI could be $1 or $100 million, depending on the risk of data behind it.
Sales Manager at Mega tech S.A
It is easy and offers different solutions for each solution type with small, mid, and large scale options available.
Senior Network Engineer at Anthology
I did see a return on investment with Forcepoint Next Generation Firewall, as mentioned by the efficiency improvements and the metrics related to how much I cut investigation time, the number of incidents, and the ease of making changes or pushing new configurations.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
Network Engineer at a media company with 51-200 employees
In four years of using it, that payment of 189 dollars per year has already paid off.
L2 Systems Administrator at a comms service provider with 201-500 employees
It's very favorable to have the inclusion of firewall, VPN, and router functionalities.
Owner at SimpleIT
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate support is mixed, praised for knowledge but criticized for delays, language issues, and varying regional experiences.
Sentiment score
5.8
Forcepoint Next Generation Firewall support is knowledgeable but often slow, with mixed user satisfaction due to logistical issues.
Sentiment score
7.9
Netgate pfSense users often rely on forums, yet paid support is praised for its responsiveness and problem-solving expertise.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
Unlike Fortinet where you can escalate an issue and quickly get responses from the development team, Forcepoint's process seems slow and challenging.
Sales Manager at Mega tech S.A
TAC engineers are very experienced and troubleshoot issues within the expected timeframe with no problems.
Senior Network Engineer at Anthology
Technical support is sometimes slow to respond, and it takes longer to resolve issues.
Head of IT Department at Mana
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
They are highly responsive.
Network Administrator at a healthcare company with 51-200 employees
I couldn't imagine having better support.
Director of IT at Cutting Edge Hair Salon RSS
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and adaptable, with virtual machines offering flexibility and seamless performance praised across industries.
Sentiment score
7.2
Forcepoint Next Generation Firewall is scalable and adaptable, efficiently supporting growing networks, despite some cloud deployment challenges.
Sentiment score
6.5
Netgate pfSense offers exceptional scalability and performance, efficiently managing various environments with seamless hardware integration and virtualization.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
I can have one management node similar to Palo Alto Panorama, with multiple nodes covering different sites, data centers, or zones.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
Even if you have some firewalls in the cluster, it is not necessary to have them on the same version.
IT Consultant at M-COM s.r.o
There are restrictions in the firewall manager and limitations when deploying for cloud environments.
Head of IT Department at Mana
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
CTO at Vigon Business Solutions Limited
I don't think Netgate pfSense can offer much scalability for big enterprises.
Director at a tech vendor with 5,001-10,000 employees
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
IT Manager at a healthcare company with 11-50 employees
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is generally stable, though firmware updates can cause issues; proper configuration is crucial for performance.
Sentiment score
7.7
Forcepoint NGFW is stable and reliable, with occasional issues under heavy load, but generally ensures consistent performance.
Sentiment score
7.0
Netgate pfSense is highly stable and reliable, with user-reported issues typically tied to hardware or outdated versions.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
It has many freezes for no reason.
Cyber Security Specialist at a comms service provider with 501-1,000 employees
Forcepoint Next Generation Firewall should make some improvements because there is some instability with their software.
System Engineer at a computer software company with 1,001-5,000 employees
I rate the solution's stability a ten out of ten.
Infrastructure and integration Architect at CommunityForce
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
Technical Sales Specialist at a tech vendor with 10,001+ employees
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
Partner and Owner at Free Range Geeks
 

Room For Improvement

Fortinet FortiGate faces high costs, technical and usability issues, complex licensing, and requires improved support, stability, and AI integration.
Forcepoint NGFW needs improvements in user interface, configuration, support response, and features like VPN, AI, and threat detection.
Netgate pfSense users seek improvements in interface, management, features, reporting, and third-party integration for enhanced usability.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
Fast response and efficient handling of issues, similar to how Fortinet responds, would be great.
Sales Manager at Mega tech S.A
AI improvements could be beneficial, as having AI capabilities has become an important checkmark feature.
CEO at a comms service provider with 11-50 employees
I recommend that additional features be included in a single license to avoid the need for extra licensing costs.
Head of IT Department at Mana
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
Information Security Manager at a tech services company with 11-50 employees
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
Co-Owner at Steffi and Tim
Monitoring is crucial. The easier the monitoring and user interface, the simpler our team can work on and investigate issues.
Infrastructure and integration Architect at CommunityForce
 

Setup Cost

Fortinet FortiGate offers competitive pricing with good value, but users highlight concerns about renewal costs and feature expenses.
Forcepoint Next Generation Firewall pricing is competitive but varies by license term, features, and client count.
Netgate pfSense offers enterprises cost-effective, open-source security with free software and optional, competitively-priced support subscriptions.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The costs can be high since additional features require separate licenses.
Head of IT Department at Mana
In terms of pricing, I would place Forcepoint in the middle when compared to other firewalls like Fortinet and Palo Alto.
Sales Manager at Mega tech S.A
It is far cheaper than big brand names like FortiGate and Cisco while delivering a feature set that's nearly the same across the entire list.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
Advanced features like Suricato or Snort require additional subscriptions for business use, but overall, pfSense remains a cost-effective solution.
Network Engineer at a media company with 51-200 employees
Netgate's maintenance contracts are significantly more affordable compared to other vendors, demonstrating their competitive pricing and commitment to customer value.
Infrastructure & network manager at a non-tech company with self employed
 

Valuable Features

Fortinet FortiGate excels in easy deployment, advanced security features, integration, scalability, user-friendly interface, and cost-effectiveness for robust network protection.
Forcepoint Next Generation Firewall offers comprehensive features, centralized management, strong security, and integration, enhancing efficiency and protection.
Netgate pfSense is a cost-effective, scalable, customizable firewall offering security, VPNs, traffic management, and strong community support.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
They put in a thing called the FortiCookbook, which is very easy to read with real-life scenarios that make networking tasks like joining networks very straightforward.
IT Manager at Daltons Limited
The firewall and VPN features are the most valuable in protecting our customers' networks.
Sales & Support at a tech services company with 1-10 employees
Forcepoint Next Generation Firewall has impacted my organization positively by making it very easy to work and offering a more competitive price compared to other vendors.
Cyber Security Specialist at a comms service provider with 501-1,000 employees
Forcepoint Next Generation Firewall has positively impacted my organization by providing always-on perimeter security.
Responsabile System and Security at a energy/utilities company with 501-1,000 employees
Strong network segmentation is my favorite feature that Forcepoint Next Generation Firewall offers.
Cybersecurity Engineer at a tech consulting company with 51-200 employees
We have multiple VLANs, and with assistance, it was easy to get everything set up and running in our organization the way we needed it to.
Director of IT at a religious institution with 51-200 employees
We had downtime before pfSense. We've never gone down using the solution.
Head of IT at a tech services company with 11-50 employees
It is very stable, and it works very well.
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
587
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Forcepoint Next Generation ...
Ranking in Firewalls
19th
Average Rating
7.6
Reviews Sentiment
6.4
Number of Reviews
51
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (8th), WAN Edge (8th)
Netgate pfSense
Ranking in Firewalls
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
220
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.3%, down from 21.1% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 0.6%, up from 0.4% compared to the previous year. The mindshare of Netgate pfSense is 9.1%, down from 14.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate18.3%
Netgate pfSense9.1%
Forcepoint Next Generation Firewall0.6%
Other72.0%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
reviewer2774055 - PeerSpot reviewer
Cybersecurity Engineer at a tech consulting company with 51-200 employees
Improved network segmentation has reduced lateral movement while the interface still needs modernization
For threat prevention, I noticed on another customer that there were repeated scanning and exploit attempts against some public-facing service running on HTTPS. I configured Forcepoint Next Generation Firewall to handle IPS by enabling it with critical and high severity signatures only to reduce false positives. I turned on IP reputation filtering to filter out known malicious networks, applied rate limiting on specific services in the DMZ, and logged events centrally for correlation. As a result, exploit attempts were much less than before, being blocked before reaching the back-end servers from the firewall itself, with no performance degradation on the applications. The security team received clear and actionable logs that were centralized, so they knew what was happening all the time. Strong network segmentation is my favorite feature that Forcepoint Next Generation Firewall offers. The policies are very deterministic and readable, and it has excellent east-west blocking and least privilege architecture. Application awareness identifies traffic beyond just the port itself; I can identify the application using a specific port and block risky applications even if they use allowed ports, which is great for environments with shadow IT. The integrated threat prevention is also very good, with IPS featuring well-tuned signatures and reputation-based filtering that blocks known bad actors before they can touch any applications. It supports both IPsec and SSL VPN tunnels, along with site-to-site, client-to-site, and hybrid cloud links, integrating well with Active Directory and LDAP. Additionally, centralized log management and reporting are very actionable and structured, with clarity in the policies for auditing. Overall, its stability and reliability are commendable. A real example of how Forcepoint Next Generation Firewall's readable policies and application awareness features made my work easier was fixing a flat network problem without breaking actual applications. I inherited an environment where users, application servers, and databases were loosely segmented, with port-based and messy firewall rules. Security audits flagged lateral movement risks, and application owners were scared of outages if I tightened security too much. Forcepoint Next Generation Firewall made it easy by providing very easy-to-read and logical policies. I built policies that are clear, showing communications from the user zone to the application zone to specific applications, or from the app zone to the database zone, using only required database protocols. By default, I applied a deny rule between zones unless explicitly allowed by the readable rules I implemented. The policy view clarified who talks to whom, which rules exist, why they exist, and the business function they support, effectively stopping port abuse. Security posture has definitely improved greatly since using Forcepoint Next Generation Firewall. From a flat or semi-flat network, I now have clear zone-based segmentation, with increased operational efficiency. The admins using the firewall have rules that are easy to read and intent-based, making changes easier to review and approve. There is less fear that one wrong rule could break production and fewer outages caused by security changes, without hidden matches or rule shadowing surprises. Clear hit count visibility helps me clean unused rules, leading to much fewer outages caused by changes on the firewalls. The centralized log management with supported log types provides better visibility for the SOC team and the SIEM team, as Forcepoint Next Generation Firewall sends very easy-to-parse and search clear logs to the SOC team. I did see measurable, defensible results after using Forcepoint Next Generation Firewall, including fewer security incidents reaching the back-end servers. This reduction is due to strong segmentation, application awareness, and IPS features, leading to a 60 to 70 percent reduction in security alerts that actually reach the servers. DMZ exploit attempts dropped to near zero, and no lateral movement incidents were detected post network segmentation. Additionally, overall SOC efficiency improved due to well-structured and contextual logs reflecting clear policy intent, resulting in a 35 to 40 percent reduction in mean time to triage. SOC analysts stopped chasing noise and false positives, as they had much clearer logs to use confidently.
JA
Principal Cloud Architect - Software Engineer at a consultancy with 11-50 employees
Rapid VPN setup has connected offices in minutes and brings live insights for proactive issue control
What I appreciate the most about Netgate pfSense is the ease and straightforward nature of the platform. I can set up a new office in less than 10 minutes. The benefits of using Netgate pfSense are that I can set up VPNs in less than two to three minutes, and then just deploy the file across my networks, where everybody would be connected in less than an hour. The dashboards of Netgate pfSense bring all the necessary information that I need at a glance, and it is actually a live update every three to five seconds. It is spotless, and I have been able to catch issues before they hit operations.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Comms Service Provider
10%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
10%
Manufacturing Company
10%
Financial Services Firm
8%
Government
7%
Comms Service Provider
13%
Computer Software Company
11%
Manufacturing Company
7%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business360
Midsize Enterprise135
Large Enterprise190
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise10
Large Enterprise12
By reviewers
Company SizeCount
Small Business168
Midsize Enterprise33
Large Enterprise29
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?
My experience with pricing, setup cost, and licensing is limited because I do not work with pricing, but I have exper...
What needs improvement with Forcepoint Next Generation Firewall?
I found one problem with Forcepoint Next Generation Firewall. They still do not have any VPN clients for Windows comp...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
California Department of Corrections and Rehabilitation (CDCR)
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Find out what your peers are saying about Forcepoint Next Generation Firewall vs. Netgate pfSense and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.