No more typing reviews! Try our Samantha, our new voice AI agent.

Fortra's Tripwire Enterprise vs WatchGuard Firebox comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Intrusion Detection and Prevention Software (IDPS)
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Fortra's Tripwire Enterprise
Ranking in Intrusion Detection and Prevention Software (IDPS)
18th
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
8
Ranking in other categories
No ranking in other categories
WatchGuard Firebox
Ranking in Intrusion Detection and Prevention Software (IDPS)
5th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
134
Ranking in other categories
Data Loss Prevention (DLP) (11th), Firewalls (12th), Anti-Malware Tools (7th), Endpoint Detection and Response (EDR) (16th), Application Control (5th), Unified Threat Management (UTM) (3rd)
 

Mindshare comparison

As of May 2026, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Fortinet FortiGate is 10.3%, down from 18.5% compared to the previous year. The mindshare of Fortra's Tripwire Enterprise is 2.3%, up from 1.0% compared to the previous year. The mindshare of WatchGuard Firebox is 4.5%, down from 10.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate10.3%
WatchGuard Firebox4.5%
Fortra's Tripwire Enterprise2.3%
Other82.9%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at Arrow PC Network Pvt Ltd
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
reviewer2093205 - PeerSpot reviewer
Senior Cybersecurity Analyst at a energy/utilities company with 1,001-5,000 employees
It has excellent scalability and allows you to execute custom COCR rules, letting you fine-tune agent monitoring
I'm using Tripwire Enterprise version 9.0. In my company, thirty to forty people use Tripwire Enterprise, mainly different types of engineers, governance, risk, compliance, and cybersecurity personnel. I advise people planning to use Tripwire Enterprise to take the training because the solution has a fairly complex interface. You can do a lot of work with it, but it isn't very easy. Tripwire Enterprise is a sophisticated tool. I rate the tool an eight on a scale of one to ten because it does an excellent job of handling the unique challenges of maintaining NERC CIP compliance and monitoring industrial controls.
Abhishek Saini - PeerSpot reviewer
Professional Services Engineer at Nex7 IT
Centralized security management has improved VPN reliability and simplified daily operations
WatchGuard Firebox is a strong and reliable platform overall, but there are a few areas where improvements could make the experience even better. One area is the user interface and navigation in some management tools. While the platform is powerful, certain configurations and troubleshooting workflows can feel less intuitive compared to some newer cloud-native firewall platforms. Another point is reporting and log analysis. Although the logging features are very useful, deeper analytics and more customizable reporting dashboards would make security monitoring much more effective. Firmware upgrades and policy synchronization can sometimes require careful planning to avoid security interruptions. Overall, the core security and VPN functionality are very solid, but improving usability, reporting, and automation would make the platform even stronger. One area that could be improved is the learning curve for new administrators. While experienced engineers can work with the platform effectively, some advanced networking and security configurations can be a bit complex for junior technicians. More guided configuration workflows, smarter recommendations, and simplified troubleshooting tools would make onboarding easier. Another improvement would be more flexible reporting customization for executive-level and client-facing reports.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The IPS and the application control feature are the most valuable."
"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."
"Overall, I would rate Fortinet FortiGate a ten out of ten."
"Fortinet FortiGate has it all."
"Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network."
"Good anti-malware and web filtering features."
"Fortinet FortiGate offers several valuable features, particularly as an interface-based solution. Its design makes it easy to understand both incoming and outgoing network traffic through its interface."
"We have never stopped to calculate it, but we cannot describe how good we feel since we no longer face issues with the internet."
"File monitoring is the most valuable feature of the solution."
"We use Tripwire Enterprise as a tool to test the vulnerability of a network. That is the most valuable feature of the product for us."
"The most valuable feature is integrity management. I had some discussions with service providers, and they also agreed."
"The most valuable feature is the integrity, because if the file configuration has been modified this solution calculates a hash code of the file and, if someone has changed the file, the solution will recalculate the hash and the admin receives a notice that the file has been modified, by sending an email or an alert to the administrator that someone has modified, added, or deleted a line, not just in files but also in tables metadata and network device configurations."
"I would recommend to anybody to try out Tripwire Enterprise."
"Even if you change a single word in Notepad, it will let you know whether it was added, removed, or modified."
"The most valuable feature is the integrity."
"The product supports different platforms."
"WatchGuard Threat Detection and Response is a reliable solution."
"They've done a lot of work with their SD-WAN, which we do use, to have our old internet service with our new internet service. If anything goes down on a particular interface, I can have different rules applied. Most of my users don't even know when our primary internet goes down anymore... I don't have to be here to do anything to switch it to our backup internet or to switch it back."
"The way it saves me time is that there is no maintenance; once we set it up, there's nothing else for us to do on a regular basis."
"In terms of users within the campus, the policy-based usage helps us where we allow something during the daytime, something after school hours, and something during the night."
"We have witnessed an ROI as it has helped with security measures."
"Firebox is 10 out of 10 at what it does."
"It's very easy to use and provides good security."
"Firebox operates effectively in the background, blocking potential threats without a need for constant monitoring."
 

Cons

"We would like to see an upgrade to the VPN feature, we are using the VPN from outside of our office and there is a limitation to 10 connections, more connections would be suitable."
"With the standard support subscription, if the device goes down, the customer has to first ship the box, and then Fortinet sends the replacement. With the higher support, the customer has to ship the device after they have the replacement. It would be better for customers to get immediate replacements even with a standard subscription."
"The ease of use could be improved."
"I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security."
"Fortinet FortiGate could improve by having a frequent ask questions(FAQ) area for people to receive quick answers to popular questions. Additionally, it would be beneficial to have an SMS notification feature. For example, if you cannot access your email you could receive an SMS message."
"The reports provided by the equipment could be more detailed, and not so dependent on the FortiAnalyzer."
"We had a minor problem where there was a major system upgrade on the hardware platform and the Mac client was not available as soon as it might have been."
"A lack of integration between our data centers."
"The initial setup is complex."
"It needs more local support from the OEM side."
"The main way that it can be improved is through better reporting."
"The deployment with certain systems can be difficult and it needs to be simplified."
"The Windows online integration license needs to be improved."
"There are several errors when deploying this solution to AIX systems, but with the help of support, it can be done."
"A lot of network devices need a custom integration."
"An area for improvement in Tripwire Enterprise is stability, as my company had stability issues with the last few versions of the solution. Tripwire Enterprise has been a bit buggy."
"The product can improve in terms of layout to provide easier access and viewing to users, especially for the reports."
"What could use some significant improvement in WatchGuard Firebox would be its interface and policy management. An additional feature I'd like to see in the next release of WatchGuard Firebox is the ability to modify an existing policy instead of having to recreate a policy when changes are necessary. At the moment, there's no possibility to modify the policy. You have to delete the policy and recreate it."
"I would like to see faster automatation."
"There is no message displayed for the user on the desktop informing them that access to a web page has been blocked by Application Control."
"Due to their lack of investment in marketing, channel development, and certifications, WatchGuard faces challenges in gaining visibility and market share, especially in regions like Pakistan."
"WatchGuard technical support requires a license."
"This solution needs the option to add an external hard drive."
"We bought Firebox four or five years ago, and with the first version I had to reboot it every two or three months for no apparent reason. We upgraded last year to the M370 and it's been running, but it is rebooting from time to time. I don't know why."
 

Pricing and Cost Advice

"Compared to other firewall products, it's a little cheaper in terms of pricing."
"The license is too expensive to renew. The license renewal process is also complex."
"The solution requires a license annually, it is not a user license, you can have as many users as your want. I must renew the license regularly per device."
"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."
"When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."
"We pay for the license of Fortinet FortiGate IPS annually. There are not any extra costs."
"It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs. It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors."
"Fortinet Secure SD-WAN delivered the lowest total cost of ownership (TCO) per Mbps among all other vendors."
"The licensing depends on the equipment, how many devices and the types of devices."
"Cloud monitoring could be better. It could also be cheaper. It would be better if the company followed a pay-as-you-use model."
"Tripwire is more expensive than Netwrix."
"They have an annual subscription license. Initially, we had opted for three years. After that, we went for another three years, and after that, we have been doing it yearly. They also have a license for five years."
"The subscription that was purchased is for three years, but it is usually for one year at a time."
"I spent $600 or $800 on this product and I'm paying a couple of hundred dollars a year in a subscription service to keep the lights on, on it... It works out to $100 or $200 a year if you buy several years at once. It's fair."
"The price is comparable."
"WatchGuard Firebox is a cheap solution."
"Firebox is priced reasonably."
"We pay about $3,500 every three years."
"I think the larger firewall packages are much better because a normal firewall is not enough for these times. You need IPS, APT, and all the security features of a firewall that you can buy."
report
Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.
893,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
12%
Manufacturing Company
10%
Financial Services Firm
10%
Computer Software Company
7%
Comms Service Provider
12%
Computer Software Company
9%
Manufacturing Company
8%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business367
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business5
Large Enterprise3
By reviewers
Company SizeCount
Small Business101
Midsize Enterprise28
Large Enterprise15
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Ask a question
Earn 20 points
What is your primary use case for WatchGuard Firebox?
We are providing our services to all WatchGuard customers in the region.
What is your primary use case for WatchGuard Firebox?
We just use it as a secondary WiFi device. We're a small office and we needed to set up a WiFi device for a few of ou...
What is your primary use case for WatchGuard Firebox?
We're a hospital and we use it for developing our incoming and outgoing policies, and we also use it for VPN.
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
WatchGuard Threat Detection and Response, WatchGuard Application Control, WatchGuard Data Loss Prevention, WatchGuard Gateway AntiVirus, WatchGuard Intrusion Prevention Service
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
1. Aetna 2. Adobe 3. ADP 4. Airbus 5. Amazon 6. American Express 7. Aon 8. ATT 9. Bank of America 10. Barclays 11. Baxter International 12. Bechtel 13. Boeing 14. Cisco Systems 15. CocaCola 16. Comcast 17. Dell 18. ETRADE 19. ExxonMobil 20. Ford Motor Company 21. General Electric 22. General Motors 23. Google 24. JPMorgan Chase 25. Kraft Foods 26. Lockheed Martin 27. McDonald's 28. Merck 29. Microsoft 30. Morgan Stanley 31. Nike 32. Oracle
Ellips, Diecutstickers.com, Clarke Energy, NCR, Wrest Park, Homeslice Pizza, Fortessa Tableware Solutions, The Phoenix Residence
Find out what your peers are saying about Fortra's Tripwire Enterprise vs. WatchGuard Firebox and other solutions. Updated: April 2026.
893,164 professionals have used our research since 2012.