IPFire vs Palo Alto Networks NG Firewalls comparison

IPFire Project and Palo Alto Networks are both solutions in the Firewalls category. IPFire Project is ranked #35 with an average rating of 8.0, while Palo Alto Networks is ranked #6 with an average rating of 8.9. IPFire Project holds a 2.1% mindshare in Firewalls, compared to Palo Alto Networks’s 4.2% mindshare. Additionally, 100% of IPFire Project users are willing to recommend the solution, compared to 96% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 13, 2025

Palo Alto Networks NG Firewalls and IPFire are contenders in the cybersecurity field focusing on network protection. Palo Alto Networks NG Firewalls lead in performance and advanced security, while IPFire is recognized for affordability and configurability, appealing to budget-conscious organizations.

Features: Palo Alto Networks NG Firewalls provide advanced threat prevention, deep visibility into traffic, and robust application control. In contrast, IPFire offers intrusion detection and prevention as well as firewall and VPN functionalities, allowing for greater flexibility and customization due to its open-source nature.

Ease of Deployment and Customer Service: Palo Alto Networks NG Firewalls require specialized technical expertise for deployment but include strong customer support for deployment challenges. IPFire offers a flexible and easier deployment model, suitable for smaller teams or environments less complex, though its support may not match larger enterprise solutions.

Pricing and ROI: Palo Alto Networks NG Firewalls have higher setup costs reflecting their advanced technology and service offerings, delivering significant ROI for businesses needing high security. IPFire provides a cost-effective solution with low setup costs, offering good ROI for smaller organizations or those with limited budgets, attracting businesses seeking cost efficiency.

To learn more, read our detailed IPFire vs. Palo Alto Networks NG Firewalls Report (Updated: September 2025).

Buyer's Guide

IPFire vs. Palo Alto Networks NG Firewalls

September 2025

Download the complete report

Helped 868,787 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of IPFire is 2.1%, up from 0.6% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 4.2%, up from 3.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
Palo Alto Networks NG Firewalls	4.2%
IPFire	2.1%
Other	73.3%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Amr Fouad

Vice President of Technology Development at SCADA Innovations

Prevented any kind of hacking and enables us to comply with customer requirements

We use the solution for firewall, intrusion prevention and detection. We installed it in order to comply with customers requirements IPFire has prevented any kind of hacking and enables us to comply with customer requirements. Accessing the internet was a bit complicated. We opted for this…

Read full review

AmjadKhan1

Head of data centers at a non-profit with 10,001+ employees

Provides inline protection with a unified view and anti-spyware capabilities

I would rate Palo Alto Networks NG Firewalls ten out of ten because it is the best. Our disaster recovery site utilizes Palo Alto Networks Next-Generation Firewalls. We are also in the process of upgrading the firewalls at our 365 sites in Pakistan to Palo Alto Networks firewalls. While budget firewalls may advertise comparable features, they often fall short of effectively detecting viruses, threats, and ransomware. In contrast, Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage. I recommend conducting a proof of concept before selecting a firewall. This will allow you to evaluate different options and determine which best suits your needs. While Palo Alto offers robust firewall solutions, it's essential to compare them with other vendors to ensure you make an informed decision.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The SD-WAN feature of Fortinet FortiGate has been most impactful in maintaining our network's integrity."

"The scalability is good in Fortinet FortiGate."

"The most valuable features of Fortinet FortiGate SWG are IPS and scanning."

"The most valuable feature of Fortinet FortiGate SWG is inspection."

"Fortinet FortiGate is a simple solution, and the integration with other solutions in the Fortinet portfolio, such as the Security Fabric integration, is competitive."

"I haven't configured or experienced any stability issues."

"The configuration possibilities that Fortinet FortiGate provides are extensive, and the task configuration activity is fast and efficient for me."

"The features that we have found most valuable are the SSL VPN and the User Portal."

More Fortinet FortiGate pros

"I would rate the stability as ten out of ten for IPFire."

"IPFire has prevented any kind of hacking and enables us to comply with customer requirements."

"The user experience is good and the configuration is very easy."

"Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage."

"The technical support is great."

"The effectiveness of this technology improves with each release, bolstering confidence in the product's ability to provide robust security."

"We like the fact that this product can provide multiple layers of protection depending on our clients requirements, and can be configured to whatever level of protection and the specific protocols that they want."

"Palo Alto Networks NG Firewalls offer a comprehensive suite of security features, with Intrusion Prevention System and certificate inspection being among the most valuable."

"The structure is much faster and more sophisticated than Cisco."

"When we put it on the border, it was blocking everything that we were getting ahead of time, and we weren't getting any hits. This includes URL filtering, spam prevention, and anti-virus."

More Palo Alto Networks NG Firewalls pros

Cons

"We would like to see a better training platform implemented."

"It should come integrated or have its own type of network monitor tool in a module. There should just be one package, and you are good to go."

"Fortinet FortiGate SWG could improve the price, it is expensive."

"The pricing of the solution is expensive, so it could be cheaper."

"Some of the software stability could improve."

"During a recent upgrade from old devices to the latest ones, corporate IT faced challenges as there was no straightforward migration process, requiring many manual steps."

"WAN load-balancing could be a lot better at detecting when a link is poor or inconsistent, and not just flat out dead."

"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."

More Fortinet FortiGate cons

"Accessing the internet was a bit complicated."

"The graphical interface could be much better."

"The solution is not straightforward."

"The support could be improved. Palo Alto does not have a support team located in Bangladesh, and their support team operates from another location. Therefore, when we raise a ticket, it takes some time for them to respond, which can be problematic for us."

"The only area I can see for improvement is that Palo Alto should do more marketing."

"Over the past one or two years, Palo Alto Networks has added a lot of features into the NG Firewall products. I think this is becoming more complicated for our customers. Therefore, we could use some best practices, best practice tools, and implementation guides for some of the complicated features."

"The solution has normal authentication, but does not have two-factor or multi-factor authentication. There is room for development there."

"There are some advanced features that we aren't able to use, which include active IP authentication and app ID. We are facing challenges with implementing those two features."

"Palo Alto Networks NG Firewalls offer best-in-breed security but could improve by reducing their pricing."

"Palo Alto needs to provide more support during the design phase and with proposals. They need to be more proactive, try to anticipate issues, and then help us to implement the transformation quickly."

More Palo Alto Networks NG Firewalls cons

Pricing and Cost Advice

"Here in Brazil, we're going through difficult economic times and the tax on the dollar is high. All the solutions from minor competitors are growing in the market. The prices have come more competitive."

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."

"We are currently evaluating a Palo Alto solution, and the pricing could be a reason for going for Palo Alto."

"It was worth the money overall. It's good value."

"The licensing costs are very competitive."

"There is a license required to use Fortinet FortiGate with all the features. It has to be updated with the threats on an ongoing basis for the signatures to prevent threats and a license is needed to receive those security updates."

"In terms of the market, it's not a cheap product, but it's cost-effective."

"FortiGate Next Generation Firewall is an expensive solution with a yearly subscription."

More Fortinet FortiGate pricing and cost advice

Information not available

"Compared to other products, the pricing is flexible and reasonable."

"Palo Alto Networks offers more cost efficiency compared to Cisco, with better operational and maintenance ease."

"It could be less expensive."

"It's too expensive."

"In terms of price, the user finds it expensive, rating it around nine."

"Palo Alto is like Mercedes-Benz. It is quite expensive, but the price is definitely justified."

"On the lower end, it's likely to cost $15,000 for renovation and support."

"The Palo Alto solution is actually not expensive. It was comparable to the old firewall manufacturers that we were using. From the benefits that we have gotten out of the Palo Alto products, it is well worth the difference in cost, even though the difference in cost is not much at all."

More Palo Alto Networks NG Firewalls pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

868,787 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Comms Service Provider

21%

Computer Software Company

14%

Government

Educational Organization

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

No data available

By reviewers
Company Size	Count
Small Business	74
Midsize Enterprise	56
Large Enterprise	84

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What needs improvement with IPFire?

The graphical interface could be much better.

See all answers

What is your primary use case for IPFire?

I use IPFire ( /products/ipfire-reviews ) to protect my home.

See all answers

What advice do you have for others considering IPFire?

Sometimes configuring IPFire is challenging. Overall, I would rate this solution as eight out of ten.

See all answers

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

OPNsense vs IPFire

Compared 82% of the time

Netgate pfSense vs IPFire

Compared 5% of the time

Smoothwall Firewall vs IPFire

Compared 3% of the time

Untangle NG Firewall vs IPFire

Compared 2% of the time

More IPFire Competitors

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 13% of the time

Cisco Meraki MX vs Palo Alto Networks NG Firewalls

Compared 11% of the time

Azure Firewall vs Palo Alto Networks NG Firewalls

Compared 10% of the time

Sophos XG vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Check Point Quantum Force (NGFW) vs Palo Alto Networks NG Firewalls

Compared 7% of the time

More Palo Alto Networks NG Firewalls Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

October 2025

Download Fortinet FortiGate product report

Buyer's Guide

Firewalls

September 2025

Download IPFire product report

Buyer's Guide

Palo Alto Networks NG Firewalls

September 2025

Download Palo Alto Networks NG Firewalls product report

Also Known As

No data available

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

IPFire enhances network security and protects against cyber threats. It provides a secure firewall, secure remote access, and customizable options. Users praise its ease of use, flexibility, and reliability for network monitoring and traffic shaping. Its valuable features include efficient firewall capabilities, a user-friendly interface, and reliable network performance.

IPFire Project

Palo Alto Networks NG Firewalls deliver advanced threat protection with machine learning, enhancing security through real-time attack prevention. Known for application visibility and a user-friendly interface, they offer robust network protection and flexibility in rule creation.

Palo Alto Networks NG Firewalls are designed to secure environments with features like GlobalProtect VPN, WildFire malware detection, and unified platform integration. Their strong firewall capabilities and high-performance throughput make them suitable for perimeter and data center protection, VPN configurations, application control, and network segmentation. Users consistently highlight the ease of managing network security policies and integrating third-party tools, ensuring a comprehensive protection strategy. While enhancements in support, training resources, and configuration simplicity are needed, these firewalls are integral for securing both on-prem and cloud environments, aligning with platforms like Azure and AWS.

What are the key features of Palo Alto Networks NG Firewalls?

Application Visibility: Provides insight into network traffic for better control.
Threat Prevention: Uses machine learning for real-time attack prevention.
GlobalProtect VPN: Secures remote access efficiently.
WildFire Malware Detection: Detects and prevents advanced threats.
Unified Platform Integration: Enhances network security through seamless integration with other tools.

What benefits should be evaluated when considering Palo Alto Networks NG Firewalls?

Flexibility in Rule Creation: Allows customized security policies to meet specific needs.
High-Performance Throughput: Ensures efficient network operations under high load.
Comprehensive Policy Management: Simplifies overseeing and adjusting security policies.
Robust Endpoint Security: Protects endpoints against sophisticated threats.
Seamless Integration: Works well with third-party tools for a comprehensive solution.

Palo Alto Networks NG Firewalls are commonly implemented across industries for securing LAN environments, URL filtering, and ensuring Zero Trust security. They secure both on-premises and cloud infrastructures, often becoming integral parts of security frameworks within enterprises. Leveraging these firewalls in conjunction with Azure or AWS enhances the overall network protection strategies employed by organizations.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

1. Siemens 2. IBM 3. Cisco 4. Dell 5. HP 6. Intel 7. Oracle 8. Google 9. Microsoft 10. Amazon 11. Apple 12. Facebook 13. Twitter 14. Netflix 15. Adobe 16. SAP 17. VMware 18. Juniper Networks 19. Ericsson 20. Nokia 21. AT&T 22. Verizon 23. T-Mobile 24. Vodafone 25. Orange 26. Deutsche Telekom 27. British Telecom 28. Comcast 29. Time Warner 30. Sony 31. Samsung 32. LG

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

Buyer's Guide

IPFire vs. Palo Alto Networks NG Firewalls

September 2025

Free Report: IPFire vs. Palo Alto Networks NG Firewalls

Find out what your peers are saying about IPFire vs. Palo Alto Networks NG Firewalls and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,787 professionals have used our research since 2012.

See our IPFire vs. Palo Alto Networks NG Firewalls report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.