IPFire vs Palo Alto Networks NG Firewalls comparison

IPFire Project and Palo Alto Networks are both solutions in the Firewalls category. IPFire Project is ranked #35 with an average rating of 8.0, while Palo Alto Networks is ranked #6 with an average rating of 8.9. IPFire Project holds a 1.1% mindshare in Firewalls, compared to Palo Alto Networks’s 5.1% mindshare. Additionally, 100% of IPFire Project users are willing to recommend the solution, compared to 96% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 25, 2026

Palo Alto Networks NG Firewalls and IPFire compete in the network security domain. Palo Alto Networks NG Firewalls seem to have the upper hand in advanced security features and enterprise-level support, while IPFire benefits from open-source flexibility and cost-effectiveness.

Features: Palo Alto Networks NG Firewalls offer threat prevention, application control, and advanced security analytics, suitable for large enterprises. IPFire provides versatility, ease of use, and modularity, with features like intrusion detection and customizable firewalls.

Ease of Deployment and Customer Service: Palo Alto Networks NG Firewalls offer comprehensive customer support and detailed deployment guides suitable for extensive infrastructures. IPFire is praised for simplicity and easy installation, with community-driven support valuable for flexible setups.

Pricing and ROI: Palo Alto Networks NG Firewalls have higher setup costs, offering substantial ROI by improving security measures. IPFire, as an open-source solution, has lower setup costs, delivering high ROI through its cost-effective approach, ideal for small to medium-sized networks.

To learn more, read our detailed IPFire vs. Palo Alto Networks NG Firewalls Report (Updated: June 2026).

Buyer's Guide

IPFire vs. Palo Alto Networks NG Firewalls

June 2026

Download the complete report

Helped 902,417 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of IPFire is 1.1%, down from 1.8% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 5.1%, up from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Palo Alto Networks NG Firewalls	5.1%
IPFire	1.1%
Other	78.7%

Firewalls

Featured Reviews

Joseph Koomson

IP Network Security Specialist at MTN Ghana

Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.

Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.

Read full review

Agharinma Ehiedu

Chief Technology Officer at Agileware Limited

Firewall deployment has secured mission-critical public apps and simplifies Linux-based management

The best features IPFire offers include its very intuitive nature because, even though it has a Linux back-end, in terms of configuration, it has a very rich GUI interface. The GUI and configuration features of IPFire have made my work easier and more efficient because their positioning and the sequence with which I follow is easy. In terms of all the processes, what you need to do at first and the next thing that you need to do is clear. The GUI is well arranged in sequential order, so you can follow that from whatever you want to do until you get the target objective. IPFire includes features with a very robust and rich community that is very much valid in terms of content. IPFire has positively impacted my organization by giving us some mileage. At least, a lot of organizations now know that we have a solution that can deliver the same value.

Read full review

Nitin Yadav

Network & Security Engineer at Arrow PC Network Pvt.Ltd.

Strong threat prevention has reduced phishing and malware while I monitor traffic in depth

Palo Alto Networks NG Firewalls offers application and user awareness, which allow me to control traffic based on threats. The product includes threat prevention, advanced threat prevention, and deep packet inspection that really helps prevent issues in our network. Deep packet inspection inspects full traffic content, even inside applications and encrypted sessions. Deep packet inspection makes a very practical difference day to day because it lets me see and control what is actually inside the traffic, not just the open port or IP. I have real visibility of which application is running instead of just seeing HTTPS. Palo Alto Networks NG Firewalls WildFire sandboxing is really good at detecting and blocking zero-day malware automatically, along with its GlobalProtect and DNS security features. Using Palo Alto Networks NG Firewalls positively impacts my organization by providing strong security, better visibility, faster response, and simplified operations. After deploying Palo Alto Networks NG Firewalls in our network, it blocks malicious traffic and prevents compromises that occurred before Palo Alto Networks NG Firewalls. I can now block outside IPs to prevent issues. After Palo Alto Networks NG Firewalls installation, I reduced 60 to 70 percent of malware and phishing attacks. Its threat prevention and DNS security features detect these attacks, block malicious domains, and reduce manual efforts for the security team.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"This solution has helped us have control over our network."

"The scalability is good in Fortinet FortiGate."

"Anti-Spam web content filterinG."

"We have peace of mind; we do work in a very dangerous environment, the internet, and this device gives us alerts and the opportunity to know what is going on."

"With Fortinet FortiGate, we improved security significantly."

"Fortinet FortiGate is used to prevent security failures. Since implementing the solution, we have seen improvements in security and in the distribution of our network."

"The best feature of Fortinet FortiGate is the IPS or IDS implementation. I appreciate most the agility or the flexibility to create hashes to block incoming threats, and I can integrate with third-party threat intelligence with our FortiGate."

"It has improved our productivity because we can control the people who go on the internet, and we control their access to social networks."

More Fortinet FortiGate pros

"IPFire has prevented any kind of hacking and enables us to comply with customer requirements."

"Regarding IPFire's AI capabilities, I think they are quite focused; in all the deployments I have done, I have not had any incidents or breaches."

"I would rate the stability as ten out of ten for IPFire."

"The most valuable feature is advanced URL filtering. Its prevention capabilities and DNS security are also valuable. It pinpoints any suspicious activities and also prevents the users from doing certain things."

"The most valuable features are Wildfire, URL filtering, and IPS."

"Operationally, it is easier, and the manageability and their security features are good."

"The user experience is good and the configuration is very easy."

"I would rate Palo Alto Networks NG Firewalls a nine out of ten, as it is a very good and stable solution, and I recommend it over Check Point, Fortinet, and Cisco; it stands out as the leader."

"In addition to our environment being secure, we can monitor compliance of VPN users."

"Innovative, advanced threat protection is the most valuable feature."

"The DNS sync code in your filtering is the most valuable feature of the Palo Alto Networks NG Firewalls."

More Palo Alto Networks NG Firewalls pros

Cons

"The solution is quite expensive and I'd like to see the cost reduced."

"I don't like that anything more than very basic reporting is not included. You have to buy their cloud module that's an add-on for getting more customized reporting."

"Due to its higher cost, Fortinet FortiGate can lead to increased operational expenses."

"There are some complex administration tasks in their administration portal. That needs to be improved."

"The web interface could be made better."

"It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server."

"Fortinet FortiGate IPS could improve the configuration. In some use cases, there can be some configuration conflicts."

"I would like reporting to be improved and should offer a lot more tools to monitor the products."

More Fortinet FortiGate cons

"The graphical interface could be much better."

"Accessing the internet was a bit complicated."

"I would rate IPFire 8 out of 10 because I do not think there is any solution anywhere in the world that is 100 percent efficient."

"It is a complete product, but the SSL inspection feature requires some improvements. We need to deploy certificates at each end point to completely work out the UTM solutions. If you enable SSL encryption, it is a tedious process. It takes a lot of time to deploy the certificates to all endpoints. Without SSL inspection, UTM features will not work properly. So, we are forced to enable this SSL inspection feature."

"I would like to see better third-party orchestration so that it is easier for the team to work with different products."

"The price is expensive and should be reduced to make it more competitive."

"Palo Alto could do better with integrating the Palo Alto Next-Gen Firewall with SD-WAN. The biggest issue with Palo Alto is that they are expensive. They are very expensive for what they offer. They should improve their pricing."

"Configurations related to different operating systems can be complex, and we have encountered issues with Linux systems."

"The solution could offer better pricing. We'd like it if it could be a bit more affordable for us."

"Personally, I feel that their dashboards for reporting and things like that need some improvement."

"The advanced manual protection needs to be improved a little bit because they used to make a cloud manual analysis for the cloud."

More Palo Alto Networks NG Firewalls cons

Pricing and Cost Advice

"It is an expensive solution."

"It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price."

"The pricing is very reasonable."

"I give the pricing of the solution a six out of ten."

"FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions."

"The solution is more expensive than Sophos. It could be cheaper. The licensing is on a yearly basis. We have had it for about three years. We must only pay extra for the license, additional requirements, and the hardware box."

"If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it."

"The pricing for this solution is reasonable."

More Fortinet FortiGate pricing and cost advice

Information not available

"Its price should be improved."

"You pay based on the kind of license you require, but comparatively, it is not very expensive."

"Paul Alto is the most expensive solution in this category."

"The price of the solution is on the higher side compared to competitors."

"After the hardware and software are procured, it is the AMC support that has to be renewed yearly."

"Palo Alto Networks NG Firewalls are very expensive compared to other firewalls such as Fortinet. As a result, Palo Alto is losing some of its market share."

"While Palo Alto Networks Next-Generation Firewalls may be considered expensive, their quality justifies the cost."

"Palo Alto Networks NG Firewalls are the Cadillac standard, and you do pay Cadillac pricing. However, the protection is worth the steep price."

More Palo Alto Networks NG Firewalls pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,417 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Financial Services Firm

Comms Service Provider

21%

Computer Software Company

10%

University

Government

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	369
Midsize Enterprise	139
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	77
Midsize Enterprise	57
Large Enterprise	87

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What needs improvement with IPFire?

The graphical interface could be much better.

See all answers

What is your primary use case for IPFire?

I use IPFire ( /products/ipfire-reviews ) to protect my home.

See all answers

What advice do you have for others considering IPFire?

Sometimes configuring IPFire is challenging. Overall, I would rate this solution as eight out of ten.

See all answers

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

OPNsense vs IPFire

Compared 61% of the time

Netgate pfSense vs IPFire

Compared 8% of the time

Sophos Firewall vs IPFire

Compared 6% of the time

Untangle NG Firewall vs IPFire

Compared 4% of the time

KerioControl vs IPFire

Compared 3% of the time

More IPFire Competitors

Cisco Meraki MX vs Palo Alto Networks NG Firewalls

Compared 17% of the time

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 14% of the time

Check Point Quantum Force (NGFW) vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Palo Alto Networks NG Firewalls

Compared 5% of the time

Azure Firewall vs Palo Alto Networks NG Firewalls

Compared 4% of the time

More Palo Alto Networks NG Firewalls Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

June 2026

Download Fortinet FortiGate product report

Buyer's Guide

Firewalls

May 2026

Download IPFire product report

Buyer's Guide

Palo Alto Networks NG Firewalls

June 2026

Download Palo Alto Networks NG Firewalls product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

IPFire enhances network security and protects against cyber threats. It provides a secure firewall, secure remote access, and customizable options. Users praise its ease of use, flexibility, and reliability for network monitoring and traffic shaping. Its valuable features include efficient firewall capabilities, a user-friendly interface, and reliable network performance.

IPFire Project

Palo Alto Networks NG Firewalls deliver advanced threat protection with machine learning, enhancing security through real-time attack prevention. Known for application visibility and a user-friendly interface, they offer robust network protection and flexibility in rule creation.

Palo Alto Networks NG Firewalls are designed to secure environments with features like GlobalProtect VPN, WildFire malware detection, and unified platform integration. Their strong firewall capabilities and high-performance throughput make them suitable for perimeter and data center protection, VPN configurations, application control, and network segmentation. Users consistently highlight the ease of managing network security policies and integrating third-party tools, ensuring a comprehensive protection strategy. While enhancements in support, training resources, and configuration simplicity are needed, these firewalls are integral for securing both on-prem and cloud environments, aligning with platforms like Azure and AWS.

What are the key features of Palo Alto Networks NG Firewalls?

Application Visibility: Provides insight into network traffic for better control.
Threat Prevention: Uses machine learning for real-time attack prevention.
GlobalProtect VPN: Secures remote access efficiently.
WildFire Malware Detection: Detects and prevents advanced threats.
Unified Platform Integration: Enhances network security through seamless integration with other tools.

What benefits should be evaluated when considering Palo Alto Networks NG Firewalls?

Flexibility in Rule Creation: Allows customized security policies to meet specific needs.
High-Performance Throughput: Ensures efficient network operations under high load.
Comprehensive Policy Management: Simplifies overseeing and adjusting security policies.
Robust Endpoint Security: Protects endpoints against sophisticated threats.
Seamless Integration: Works well with third-party tools for a comprehensive solution.

Palo Alto Networks NG Firewalls are commonly implemented across industries for securing LAN environments, URL filtering, and ensuring Zero Trust security. They secure both on-premises and cloud infrastructures, often becoming integral parts of security frameworks within enterprises. Leveraging these firewalls in conjunction with Azure or AWS enhances the overall network protection strategies employed by organizations.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

1. Siemens 2. IBM 3. Cisco 4. Dell 5. HP 6. Intel 7. Oracle 8. Google 9. Microsoft 10. Amazon 11. Apple 12. Facebook 13. Twitter 14. Netflix 15. Adobe 16. SAP 17. VMware 18. Juniper Networks 19. Ericsson 20. Nokia 21. AT&T 22. Verizon 23. T-Mobile 24. Vodafone 25. Orange 26. Deutsche Telekom 27. British Telecom 28. Comcast 29. Time Warner 30. Sony 31. Samsung 32. LG

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

Buyer's Guide

IPFire vs. Palo Alto Networks NG Firewalls

June 2026

Free Report: IPFire vs. Palo Alto Networks NG Firewalls

Find out what your peers are saying about IPFire vs. Palo Alto Networks NG Firewalls and other solutions. Updated: June 2026.

DOWNLOAD NOW

902,417 professionals have used our research since 2012.

See our IPFire vs. Palo Alto Networks NG Firewalls report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.