No more typing reviews! Try our Samantha, our new voice AI agent.

IPFire vs Palo Alto Networks PA-Series comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IPFire
Ranking in Firewalls
29th
Average Rating
8.0
Reviews Sentiment
8.3
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
18th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
37
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Firewalls category, the mindshare of IPFire is 0.9%, down from 2.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 1.1%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks PA-Series1.1%
IPFire0.9%
Other98.0%
Firewalls
 

Featured Reviews

AE
Chief Technology Officer at Agileware Limited
Firewall deployment has secured mission-critical public apps and simplifies Linux-based management
The best features IPFire offers include its very intuitive nature because, even though it has a Linux back-end, in terms of configuration, it has a very rich GUI interface. The GUI and configuration features of IPFire have made my work easier and more efficient because their positioning and the sequence with which I follow is easy. In terms of all the processes, what you need to do at first and the next thing that you need to do is clear. The GUI is well arranged in sequential order, so you can follow that from whatever you want to do until you get the target objective. IPFire includes features with a very robust and rich community that is very much valid in terms of content. IPFire has positively impacted my organization by giving us some mileage. At least, a lot of organizations now know that we have a solution that can deliver the same value.
Rohit Ghorpade - PeerSpot reviewer
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
Identity-based perimeter control has improved security and supports reliable remote access
Currently, we are working with vendors such as Palo Alto Networks PA-Series, Cisco, Check Point, and Citrix. Palo Alto Networks PA-Series is a better firewall. Deep packet inspection and threat prevention basically comply with whatever traffic is incoming and outgoing through the firewall. I do not think anything improvement is required. The thing is that Palo Alto Networks PA-Series works mostly on a license-based model. If you want to utilize any feature, you have to purchase the license. For example, URL filtering requires a license purchase. It simplifies the implementation because LDAP server profile can be integrated. Basically, that simplifies the implementation of access rule or security policy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Regarding IPFire's AI capabilities, I think they are quite focused; in all the deployments I have done, I have not had any incidents or breaches."
"IPFire has prevented any kind of hacking and enables us to comply with customer requirements."
"I would rate the stability as ten out of ten for IPFire."
"Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have."
"The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to us."
"The tool's most valuable feature is WildFire."
"A valuable feature that we can consider is the deployment time, which is significantly reduced. It is almost 90% faster compared to other solutions."
"It offers application-based policy enforcement. Palo Alto Networks firewalls help us recognize protocol anomalies, contrasting with other vendors that may require policies based on port numbers. With Palo Alto Networks, the port number isn't a constraint because their devices handle protocol traffic at Layer 7, allowing for accurate identification of protocol usage and port numbers. They can identify which protocol actually uses which port."
"The solution is robust."
"It functions very well in data centers."
"When I compare the tool with other firewalls, it’s the most powerful. It's the most powerful security engine. All the traffic going to the Internet passes through it as the first layer of protection. Because of its good performance, we also use it for decryption."
 

Cons

"The graphical interface could be much better."
"Accessing the internet was a bit complicated."
"I would rate IPFire 8 out of 10 because I do not think there is any solution anywhere in the world that is 100 percent efficient."
"Palo Alto Networks PA-Series is expensive. We would like to see additional threat hunting features."
"Utilizing these features as a unified solution can require additional setup, particularly when incorporating Panorama for centralized management, which may involve extra costs."
"I had opened a case before with the tool because I could not create a wildcard for the security address. We can create wildcards for security addresses in Fortinet, but this feature doesn't exist in the product."
"There is room for improvement in streamlining this process for smoother transitions."
"The SD-WAN feature of Palo Alto Networks is not good compared to FortiGate."
"The initial setup of Palo Alto Networks PA-Series is very complicated."
"The pricing of the solution needs improvement."
"The technical support offered by Palo Alto is an area of concern where improvements are required."
 

Pricing and Cost Advice

Information not available
"The pricing is fair."
"Compared to other vendors, Palo Alto Networks PA-Series is expensive."
"We have to pay a yearly licensing fee for the solution."
"Price-wise, Palo Alto offers high-price products."
"Palo Alto Networks PA-Series's price is much higher than other firewall brands."
"With Palo Alto, even when you enable all the modules, it still provides the exact throughput they advertise."
"The product is offered to users at high prices compared to the pricing model of the other vendors in the market."
"The product is expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
913,806 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
19%
Computer Software Company
9%
University
8%
Government
8%
Outsourcing Company
12%
Comms Service Provider
9%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise17
 

Questions from the Community

What needs improvement with IPFire?
IPFire can be improved, but so far, there are no functionalities that have not been able to meet my needs. I wish IPFire could do more, but so far, I am happy with the solution. If there are other ...
What is your primary use case for IPFire?
My main use case for IPFire is usually for security, functioning as a firewall for organizations that run public-facing applications. I will give you a typical example: there is an agency of the fe...
What advice do you have for others considering IPFire?
I would rate IPFire 8 out of 10 because I do not think there is any solution anywhere in the world that is 100 percent efficient. In elementary physics, we are told that no machine can be 100 perce...
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
If we look at the features, then the price is good, but they do charge for the GlobalProtect VPNs. Overall, the pricing is good, but if they included GlobalProtect, it would be more valuable.
What needs improvement with Palo Alto Networks PA-Series?
There is room for improvement in Palo Alto Networks PA-Series in the areas where they can minimize applications and implement features that can be useful for us.
What is your primary use case for Palo Alto Networks PA-Series?
I am using Palo Alto Networks PA-Series to ensure protection and cybersecurity by preventing and implementing network security features to safeguard networks against threats and malware. I have to ...
 

Overview

 

Sample Customers

1. Siemens 2. IBM 3. Cisco 4. Dell 5. HP 6. Intel 7. Oracle 8. Google 9. Microsoft 10. Amazon 11. Apple 12. Facebook 13. Twitter 14. Netflix 15. Adobe 16. SAP 17. VMware 18. Juniper Networks 19. Ericsson 20. Nokia 21. AT&T 22. Verizon 23. T-Mobile 24. Vodafone 25. Orange 26. Deutsche Telekom 27. British Telecom 28. Comcast 29. Time Warner 30. Sony 31. Samsung 32. LG
Information Not Available
Find out what your peers are saying about IPFire vs. Palo Alto Networks PA-Series and other solutions. Updated: September 2026.
913,806 professionals have used our research since 2012.