Juniper SRX Series Firewall vs Palo Alto Networks K2-Series comparison

Juniper and Palo Alto Networks are both solutions in the Firewalls category. Juniper is ranked #23 with an average rating of 8.0, while Palo Alto Networks is ranked #28 with an average rating of 8.5. Juniper holds a 1.5% mindshare in Firewalls, compared to Palo Alto Networks’s 0.0% mindshare. Additionally, 85% of Juniper users are willing to recommend the solution, compared to 96% of Palo Alto Networks users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Juniper SRX Series Firewall and Palo Alto Networks K2-Series compete in the firewall market. Despite users being happier with Juniper's pricing and support, the K2-Series has the upper hand due to its advanced features.

Features:Juniper SRX Series Firewall offers robust networking capabilities, flexible security policies, and strong VPN performance. Palo Alto Networks K2-Series is known for advanced threat prevention, application intelligence, and deep packet inspection features. It also integrates well with cloud environments and supports automation capabilities.

Room for Improvement:Juniper SRX Series Firewall needs a more intuitive setup process, better reporting tools, and enhanced support for newer protocols. Palo Alto Networks K2-Series could improve system performance under high traffic, reduce false positives, and provide better documentation.

Ease of Deployment and Customer Service:Juniper SRX Series Firewall has straightforward hardware deployment but mixed reviews on software deployment and initial configurations, often requiring professional services. Customer service is responsive but could be more proactive. Palo Alto Networks K2-Series offers smoother deployment with comprehensive guides and a helpful support team, making it easier to get started with better documentation and slightly superior customer service.

Pricing and ROI:Juniper SRX Series Firewall is praised for being cost-effective with quicker setup cost recovery, offering good value for the investment with lower upfront costs. Palo Alto Networks K2-Series, although more expensive initially, delivers higher ROI over time through advanced security features and better long-term performance. Users believe the K2-Series justifies the investment with its superior capabilities.

To learn more, read our detailed Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series Report (Updated: April 2025).

Buyer's Guide

Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series

April 2025

Download the complete report

Helped 845,712 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of April 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.1%, up from 17.7% compared to the previous year. The mindshare of Juniper SRX Series Firewall is 1.5%, down from 1.5% compared to the previous year. The mindshare of Palo Alto Networks K2-Series is 0.0%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

MURALI NIDAMANURI

Managing Director at VIPUN COGNITIVE SOLUTIONS PVT LTD.

Highly scalable, user-friendly UI, and easy to maintain

We have used Juniper SRX Series Firewall in airports and multiple other industries The most valuable features of the Juniper SRX Series Firewall are the user-friendly UI, and accessing the solution is simple. The pricing strategy of the vendor could improve. I have been using Juniper SRX Series…

Read full review

Krishnakumar M

enterprise architect at CloudStar Technologies

One of the best tools for the prevention of evasive threats

There is a feature called granular application controls, which I liked. Instead of relying on ports and IP addresses, they use AMP ID. This kind of solution is very good. Another valuable feature is the prevention of evasive threats, which is one of the best tools I've encountered. SSL decryption and app ID-based SSL decryption are also impressive, along with the integration with user ID. Identity-based policies ensuring only authorized users can access specific resources are excellent features. Normally, there is something called SIM or SCIM in IDA IDM, but this feature is provided on the box, which is exemplary.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use a lot of function on the IPS and it works well for us."

"The technical support is great."

"The simplicity of the configuration and the stability of the product are most valuable. The VPN concentrator is very useful."

"Our security improved from being able to put in rules and close off unwanted traffic."

"The initial setup of Fortinet FortiGate was straightforward."

"The scalability of Fortinet FortiGate is good."

"Fortinet FortiGate meets all the security demands of my industry. It covers endpoint security, including web interface, DNS security, and ELP. I'm currently using the latest version. The features that have most improved our network security are Web Control, filtering, application control, IDS, IPS policies, and Deep SSL inspection."

"We can use our devices to check all of the perimeters. It secures email websites."

More Fortinet FortiGate pros

"It helps us perform our daily jobs."

"The scalability is fine."

"The solution is relatively easy and inexpensive to maintain."

"The solution is stable, inexpensive, and works well for medium size companies."

"CLI: Junos CLI is very easy to use, and it is also very easy to find back items in the configuration and to change them."

"Great as an inter-segmentation firewall or border or arch-firewall."

"vSRX is easy to deploy to any virtual infrastructure, such as OpenStack, VMware, and even Docker (cSRX)."

"We think they have a good interface, the operating system is good, it's robust. It has plenty of great features, and the relation between the cost and benefits works for our business."

More Juniper SRX Series Firewall pros

"Prevention of evasive threats is one of the best tools I've encountered."

"It's easy to configure."

"I have found the threat profile feature valuable."

"The most valuable feature of Palo Alto Networks K2-Series is the configuration, it is very clear."

"The most valuable features are the intuitive user interface, ease of use, and reporting."

"Simple integrations with the domain controllers and other inventories"

"Mainly, it is very easy to understand, and the logs are very good."

"The company is inventive and always adds a lot of great features."

More Palo Alto Networks K2-Series pros

Cons

"The solution's framework needs to be frequently updated in order to have a stable solution."

"It could use better throughput on some of the smaller boxes for the branch offices."

"The performance and speed are aspects of the solution that could always be improved upon."

"A lack of integration between our data centers."

"Fortinet doesn't provide multiple virtual firewalls which would facilitate end users and customers."

"Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit."

"With the addition of some features, it is possible that FortiGate can be used in all verticals."

"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."

More Fortinet FortiGate cons

"There are a lot of features that customers do not know about and I think that better documentation would help when it comes to learning how to use the product."

"We'd like to improve the stability and the kill rate."

"It's a good stable firewall, but it's nowhere near what it needs to be for a next-generation type firewall."

"In some cases, customers encounter issues related to network interfaces, while others prioritize security concerns."

"The solution could cost less. It's a bit expensive right now."

"The web interface on Juniper SRX is just a short conversion from Junos OS CLI; this is not very suitable for users with little expertise/"

"It needs better interoperability with Cisco gear."

"Improvements can be made to the GUI. The GUI can be improved by creating policies to handle IPS requirements. The configuration should be a one-step process. This would make it easier to complete the setup to register the time of operation."

More Juniper SRX Series Firewall cons

"Palo Alto has many other products. It would be nice for these products to be centralized under one tool"

"The licensing cost is a typical complaint with many clients. The solution is expensive."

"Its networking features could be better."

"The scalability for on-premises version is limited as it depends on the model."

"It would be really helpful to have dashboards that provide information on IOC blockings such as where and how many. It will also be good to know how many hashing files have been reported. It would also be nice to have easy access to this information. Otherwise, it's a painful, manual task."

"The solution's commitment time could be reduced as it often takes a lot of time to execute."

"The technical support, and how they provide it to the client, needs to be improved."

"The ease of management and configuration should be improved."

More Palo Alto Networks K2-Series cons

Pricing and Cost Advice

"We have the full license that included all of the features and support."

"Its price could be better."

"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."

"If the customer is looking for SD-WAN, it comes free with FortiGate."

"This is not a cheap solution but it isn't expensive, either. It's a good solution for the right price."

"Each feature costs money, so it is important to study your needs."

"They are very competitive, but we like to have the factory warranty taken care of."

"Go for long term pricing negotiated at the time of purchase."

More Fortinet FortiGate pricing and cost advice

"I rate the solution's pricing as a four."

"There is a licensing fee."

"Juniper SRX Series Firewall is worth its money."

"Its price is reasonable. In India, most of the products have a similar price. There is only a 5% to 10% variation in the price of different brands."

"The price could improve, it is a bit expensive."

"I find the price to be reasonable for an enterprise-level solution."

"Palo Alto was nice, but much more expensive."

"The prices are very good as compared to other vendors."

More Juniper SRX Series Firewall pricing and cost advice

"If you compare K2-Series' quality with its price, I think it is reasonable."

"This is an expensive solution, although you will get value for the price."

"The pricing is expensive."

"Products by the leader in the field are justifiably a bit more expensive compared to other vendors."

"Pricing is a sensitive issue because the cost is high in this market."

"Palo Alto Networks K2-Series is an expensive solution, the price could be reduced. They are more expensive than some of their competitors."

"The overall price of Palo Alto Networks K2-Series could be reduced."

"This product is designed for large companies. The price would not be suitable for a small or medium size company."

More Palo Alto Networks K2-Series pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

845,712 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Educational Organization

53%

Computer Software Company

Comms Service Provider

Financial Services Firm

Computer Software Company

31%

Energy/Utilities Company

Manufacturing Company

Non Profit

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Juniper SRX?

Juniper SRX Series Firewall is a stable solution.

See all answers

What is your experience regarding pricing and costs for Juniper SRX?

Customers always want cheaper solutions. Fortinet is a cheaper solution than Juniper.

See all answers

What advice do you have for others considering Juniper SRX?

Overall, I would rate it an eight out of ten because of the complexity of configurations and the maintenance.

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

What do you like most about Palo Alto Networks K2-Series?

It is a stable solution.

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks K2-Series?

The pricing for the Palo Alto Networks K2-Series solution is affordable and there are no complaints about the licensing.

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 23% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 10% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Netgate pfSense vs Juniper SRX Series Firewall

Compared 9% of the time

Palo Alto Networks WildFire vs Juniper SRX Series Firewall

Compared 8% of the time

Meraki MX vs Juniper SRX Series Firewall

Compared 7% of the time

Check Point NGFW vs Juniper SRX Series Firewall

Compared 7% of the time

Cisco Secure Firewall vs Juniper SRX Series Firewall

Compared 7% of the time

More Juniper SRX Series Firewall Competitors

Cisco Secure Firewall vs Palo Alto Networks K2-Series

Compared 100% of the time

More Palo Alto Networks K2-Series Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

April 2025

Download Fortinet FortiGate product report

Buyer's Guide

Juniper SRX Series Firewall

March 2025

Download Juniper SRX Series Firewall product report

Buyer's Guide

Palo Alto Networks K2-Series

March 2025

Download Palo Alto Networks K2-Series product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Juniper SRX

No data available

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Juniper SRX is a next-generation security solution that enables users to expand and secure their networks without incurring heavy costs or sacrificing performance.

Benefits of Juniper SRX

Some of the benefits of using Juniper SRX include:

Easily manage and view every aspect of your system’s security. Juniper SRX enables users to manage their security from a centralized location. The central control center can control and view every Juniper connected device in a user’s network. Once a device meets the desired security requirements, an administrator can configure the device’s policy to match the other machines in their network. This both simplifies the way that the network operations run and decreases the number of resources that are needed to ensure that operations run smoothly.

Secure your system with a flexible and comprehensive security suite. Juniper SRX’s firewalls are flexible enough that they always match the type of applications that they are supposed to be protecting. Its security features uniformly protect your applications. This is true regardless of how your application is deployed. It can integrate with everything from cloud-based applications to those stored on physical servers in a data center. This makes it easy for administrators to maintain consistency across their systems.

Protect yourself from advanced threats. Juniper SRX is equipped with powerful security automation features. They can detect a wide range of known and unknown threats as soon as they appear. Once malware is detected, Juniper SRX begins to analyze it and determines what response fits the situation. Additionally, the threats are prioritized according to their severity. Administrators are then given a selection of response options from which they can choose. This enables users to prevent the spread of these threats.

Increase your ability to scale your security. Juniper SRX makes it easy for users to scale up their security to meet their specific needs. Its service processing cards (SPC) are designed to enable a user to meet all of their needs. Administrators do not need to buy specific hardware every time that they need to get something done. Their SPCs can be quickly and easily customized. The addition of SPCs enables users to scale up according to the particular project that they are working on at that time.

Reduce the number of resources that you need to expend. Juniper SRX enables users to add expansion modules to their network without expanding the cost to run their network. They accommodate growth without adding to the overall cost. Administrators will not need to spend money on more space, cooling power, or maintenance. Additionally, they will not have to dedicate more time to maintaining the network. Your network may grow, but the cost of running your system will not.

Reviews from Real Users

Juniper SRX stands out among their competitors for a number of reasons. Two major ones are their central management capabilities and the robustness of their suite of security features. Juniper SRX is designed to make it easy for users to take control of their network’s security. From one location, administrators can manage all aspects of their infrastructure’s security. The many features that it offers allows users to tailor their security to meet their specific needs.

Shashidhara N., director of technology solutions & services at Connectivity IT Services Private Limited, writes, “On the SRX box, it has what I call a one model concept for security. I work especially with hybrid environments. With an SRX we have a single management dashboard. We can manage the internal framework easily with the centralized management component. You can work with threat prevention, you can work with integration, you can work with traffic management. Another good part about SRX is that you have opportunities for automation. Another thing that is very good is that all the operating systems for all Juniper boxes are the same. You do not work on different operating systems using different boxes.”

Pradip J., the owner of Shree Atharva Sales Corporation, writes, “It is a complete security bundle. The cloud-based Sky Advanced Threat Prevention feature is very valuable. I am 100% satisfied with the performance of the Juniper firewall. It has a very good throughput. It works very fine. We use our firewall as a site-to-site VPN or Software-Defined Wide Area Network (SD-WAN). In both cases, it has a very good and optimum performance.Their service support is very good in India. I get really good support from the Juniper team."

Juniper

Designed to handle growing throughput needs due to increasing amounts of application-, user-, and device-generated data, the K2-Series offers amazing performance and threat prevention capabilities to stop advanced cyberattacks and secure mobile network infrastructure, subscribers, and services.

Palo Alto Networks

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

7-Eleven, AARNet Pty Ltd, Allegro Networks, alltours GmbH, Apollo Hotel Papendrecht, Armstrong Atlantic State University, Atlantech Online, Availity, Bajaj Capital, Baloise Insurance, BancABC, BAS Group, Black Lotus, Blue Box, Borealis, Carilion Clinic, Catholic Health System, CATV, Champlain College, Chinas Ministry of Railways, China University of Mining and Technology (CUMT), Cloud Dynamics, CloudSeeds, Cloudwatt, CODONiS, Colt Technology Services, Cork Internet Exchange, CSS Versicherung AG, CyrusOne, Danish Crown, Deloitte Belgium, Department of Energy, Divona Telecom, DQE Communications, DreamHost, European Government Agency, Expedient, Financial Market Information Services Provider, Fluidata, Fonality, Fox Sports, Global Financial Institution, Global Investment Bank, Global Investment Company, Energy Sciences Network (ESnet), Goethe University, HEAnet, High Performance Networks Inc., Hillenbrand

State of North Dakota, SEGA, Alameda County Office of Education, Temple University, VERGE, CAME

Buyer's Guide

Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series

April 2025

Free Report: Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series

Find out what your peers are saying about Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series and other solutions. Updated: April 2025.

DOWNLOAD NOW

845,712 professionals have used our research since 2012.

See our Juniper SRX Series Firewall vs. Palo Alto Networks K2-Series report.

See our list of best Firewalls vendors and best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.