Try our new research platform with insights from 80,000+ expert users

Netgate pfSense vs Palo Alto Networks PA-Series comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.8
Fortinet FortiGate offers cost-effective, robust security, reducing expenses, enhancing efficiency, easy implementation, quick ROI, and improved network management.
Sentiment score
5.5
Netgate pfSense provides high ROI by reducing hardware and licensing costs, enhancing reliability, and lowering support and maintenance expenses.
Sentiment score
6.6
Palo Alto Networks PA-Series reduces costs with advanced security features, offering a visible return within three to five years.
Clients are now comfortable and not wasting productive hours on IT support.
Managing Director at a manufacturing company with 10,001+ employees
The automation part is giving us a cost benefit and speed; we can react faster.
BDM Fortinet & BDM Teamlead at Exclusive Networks
It's a very useful tool to mitigate and protect your enterprise.
Staff Infrastructure & Security Engineer at Mozn Systems
Since the memory leak fixes, it's been incredibly stable and requires minimal maintenance.
Network Engineer at a media company with 51-200 employees
In four years of using it, that payment of 189 dollars per year has already paid off.
L2 Systems Administrator at a comms service provider with 201-500 employees
It's very favorable to have the inclusion of firewall, VPN, and router functionalities.
Owner at SimpleIT
The return on investment with this product is a hard question because security tends to be a cost center rather than a profit center.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
 

Customer Service

Sentiment score
6.6
Fortinet FortiGate's customer service is generally praised for responsiveness, though some users experience delays in critical situations.
Sentiment score
7.9
Netgate pfSense users often rely on forums, yet paid support is praised for its responsiveness and problem-solving expertise.
Sentiment score
7.4
Palo Alto Networks PA-Series support is praised for quick, helpful service, despite occasional initial contact difficulties.
The quick resolution of issues with Fortinet FortiGate is due to the support of the company and the fact that the equipment is easy to work with.
IT Manager at a consultancy with 10,001+ employees
I would rate the technical support for Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
As a solution provider, when I encounter problems, I connect directly with Fortinet support, and they provide solutions within a very short time.
Manager, Information Technology Operation/Presales at TechMonarch
When I provide detailed information about the problem, they've been able to reply quickly with a solution or go research the problem and get back to us quickly with a fix.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
They are highly responsive.
Network Administrator at a healthcare company with 51-200 employees
I couldn't imagine having better support.
Director of IT at Cutting Edge Hair Salon RSS
They're constantly following up after a case has been opened to ensure that it has been resolved properly.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
Initially, it took one or two hours to get a Palo Alto engineer, which is quite slow.
Operations Specialist - MX Operations at Bank Alfalah Limited
I am happy with the technical support from Palo Alto.
Asisstant Manager at Yaskawa America, Inc
 

Scalability Issues

Sentiment score
7.1
Fortinet FortiGate is scalable and popular for SMEs but requires careful design and may incur scaling costs and licensing constraints.
Sentiment score
6.5
Netgate pfSense offers exceptional scalability and performance, efficiently managing various environments with seamless hardware integration and virtualization.
Sentiment score
7.0
Palo Alto Networks PA-Series is scalable, adaptable for enterprises, but some hardware limitations may impact scalability options.
They scale up really well from smaller models like the FortiGate 40 and 50 to bigger sites with the FortiGate 100 for more throughput - up to enterprise datacenters.
IT Manager at Daltons Limited
The variation comes in terms of the interfaces and throughputs, but from a security perspective, you get the same benefit, irrespective of whether you have an entry-level unit or an enterprise.
Cewa Solutions Architect at a tech services company with 11-50 employees
We determine sizing based on multiple factors: number of users, available links, traffic types, server count, services in use, and whether services will be published.
General Surgery Specialist at Helwan University Cairo
If I put things into a certain context and say that we have a network that has around 100 people, then you don't put up a device that can manage 100 people. Instead, you need to get a device that can manage 150 to 200 people, and then you can create room for growth.
CTO at Vigon Business Solutions Limited
I don't think Netgate pfSense can offer much scalability for big enterprises.
Director at a tech vendor with 5,001-10,000 employees
Even with a jump from a 50 megabit to a 500 megabit internet connection and approximately 65 active VPN clients, our firewall operates smoothly without any strain.
IT Manager at a healthcare company with 11-50 employees
The solution can handle more than ten thousand users in my organization.
Operations Specialist - MX Operations at Bank Alfalah Limited
There are no restrictions in scalability.
Asisstant Manager at Yaskawa America, Inc
 

Stability Issues

Sentiment score
7.7
Fortinet FortiGate is praised for its stability, with effective long-term performance and improvements in newer firmware versions.
Sentiment score
7.0
Netgate pfSense is highly stable and reliable, with user-reported issues typically tied to hardware or outdated versions.
Sentiment score
8.2
Palo Alto Networks PA-Series is praised for its stability and reliability, with users recommending stable version adoption.
We're experiencing 99.999% availability consistently.
Manager, Information Technology at a consumer goods company with 11-50 employees
I would rate the stability of Fortinet FortiGate a ten out of ten.
NAC Support at Rah Infotech Pvt Ltd
Currently, we are experiencing a general outage of one of the main internet service providers of the Dominican Republic, and we have not been impacted in our operations because with SD-WAN, we have another internet service provider and we are working with the second WAN connection without any disruption.
CISO at a financial services firm with 1,001-5,000 employees
I rate the solution's stability a ten out of ten.
Infrastructure and integration Architect at CommunityForce
I've noticed a substantial improvement in stability and ease of use for upgrades and patching over the past year or two.
Technical Sales Specialist at a tech vendor with 10,001+ employees
When I replace consumer routers with pfSense for small businesses with two or three employees, they are often amazed to discover the router can run for a year without a reboot.
Partner and Owner at Free Range Geeks
 

Room For Improvement

Fortinet FortiGate needs enhanced UI, simplified licensing, improved performance, reporting, third-party integration, and expanded automation features.
Netgate pfSense users seek improvements in interface, management, features, reporting, and third-party integration for enhanced usability.
Palo Alto Networks PA-Series faces high costs, slow support, complex setup, steep learning, and needs improved threat detection and AI.
These sessions should be around five to ten minutes long, allowing users and partners to quickly grasp the information without disrupting their daily tasks.
Managing Director at a manufacturing company with 10,001+ employees
The solution should be able to implement machine learning and analytics of all the logs for threat detection and protection.
Senior Systems Engineer at Caribbean Development Company
It would be better for customers to get immediate replacements even with a standard subscription.
Director at a tech services company with 11-50 employees
If I need to go between different VLANs, I have VLAN 19.1 and VLAN 19.2, and I strictly use Netgate pfSense, but it doesn't route very efficiently and works quite slowly.
Information Security Manager at a tech services company with 11-50 employees
They should support the idea of configuration management as code from source code and provide a more robust API for managing the pfSense configuration.
Co-Owner at Steffi and Tim
Monitoring is crucial. The easier the monitoring and user interface, the simpler our team can work on and investigate issues.
Infrastructure and integration Architect at CommunityForce
You can buy cheaper products, but I believe in the value they're giving us.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
The interface of Palo Alto Networks PA-Series should be made much more user-friendly.
IT Coordinator at CSA Makati
For the next release of the Palo Alto Networks PA-Series firewall, I would like to see logs monitoring included.
Asisstant Manager at Yaskawa America, Inc
 

Setup Cost

Enterprise buyers find Fortinet FortiGate costly initially, but cheaper overall, despite some high renewal and setup costs.
Netgate pfSense offers enterprises cost-effective, open-source security with free software and optional, competitively-priced support subscriptions.
Palo Alto Networks PA-Series offers extensive features and support, with pricing justified by bundled licenses and long-term benefits.
Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us.
Network & System Admin at Invoke Studios
It offers cost savings as it is generally cheaper than the competition.
IT Infrastructure Architect at Apotek 1
It is about 20% cheaper.
Network Security Engineer at TD SYNNEX
The product is free of cost.
Director of Information Technology at MASFinancials
Opting for twenty-four-seven support significantly increases the price, reaching around ten thousand to thirteen hundred dollars.
IT Manager at Gandia Consulting Group
It is far cheaper than big brand names like FortiGate and Cisco while delivering a feature set that's nearly the same across the entire list.
NOC / Network Engineering Manager at a comms service provider with 51-200 employees
The firewall is expensive for every company, but the cost is worth it to ensure maximum security.
Operations Specialist - MX Operations at Bank Alfalah Limited
The price of Palo Alto Networks PA-Series is expensive.
IT Coordinator at CSA Makati
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to 3 year renewals.
Asisstant Manager at Yaskawa America, Inc
 

Valuable Features

Fortinet FortiGate provides robust, flexible security solutions with key features like web filtering, SSL VPN, SD-WAN, and centralized management.
Netgate pfSense is a cost-effective, scalable, customizable firewall offering security, VPNs, traffic management, and strong community support.
Palo Alto Networks PA-Series provides powerful security features with easy usability, robust integration, and effective threat protection capabilities.
These features help reduce our downtime, manage the ISPs, and deploy SLAs for all the website traffic.
Head IT at Burraq Cyber Security Solutions
The most valuable feature of FortiGate is FortiView which provides proactive monitoring.
General Manager Group IT at DART GLOBAL LOGISTICS PTE. LTD.
We got a firewall and gave an SSL VPN to my client to connect to their servers, after which, such kind of activities involving ransomware attacks stopped.
Owner at Mindware Computer Solutions
We had downtime before pfSense. We've never gone down using the solution.
Head of IT at a tech services company with 11-50 employees
It is very stable, and it works very well.
With pfSense, network configurations adhere to standard practices, facilitating troubleshooting without the need for complex overlays or policies.
IT Manager at Gandia Consulting Group
Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have.
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
The most effective features of the solution are its Magic Quadrant positioning, making it a leading firewall on perimeter areas and internet edges.
Operations Specialist - MX Operations at Bank Alfalah Limited
The most valuable feature of Palo Alto Networks PA-Series is that it is highly customizable.
IT Coordinator at CSA Makati
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
580
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Netgate pfSense
Ranking in Firewalls
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
220
Ranking in other categories
No ranking in other categories
Palo Alto Networks PA-Series
Ranking in Firewalls
17th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Netgate pfSense is 9.9%, down from 16.1% compared to the previous year. The mindshare of Palo Alto Networks PA-Series is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.8%
Netgate pfSense9.9%
Palo Alto Networks PA-Series1.0%
Other70.3%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
MC
Chief information security officer at Center for Information Management, Inc.
Provides visibility that enables users to make data-driven decisions
pfSense flexibility overall is pretty good. They are making some really big improvements. That said, they're a long way from enterprise. They advertise things that they don't have. I've worked for probably 30% of the Corporate 100, and they won't tolerate the high availability and it being as buggy as it is. The fact that if you configure it incorrectly without any visual indications that it's not done in the way Netscape does, then it will not only break the firewall, it will break both firewalls. The only way you can even try to recover is by getting new images from Netgate. You have to open up a tech support case, download the image for, then reimage the firewalls, and reapply your configuration. The fact that you can completely brick your firewalls just by having a configuration that they allow, and they don't even don't tell you there's a problem until they both go down. That's totally unacceptable in an enterprise. As a standalone firewall, they're excellent. As an enterprise, we're not touching it with a ten-foot pole. It’s difficult to configure and use add-on features. It's really easy to add them. On the website, they say “Oh, we do this, this, and this.” However, they do a lot through third-party add-ons. The problem is, if there's any problems at all, the very first thing they want you to do is disable those add-ons. So that's not really supporting anything. There are two ways that firewalls are viewed: talking to the firewall and talking through the firewall. If you're talking about “to the firewall,” then it's a very robust, very secure firewall. However, it doesn't have things that they claim helps with protecting data, most of it's third party. If you want to do all these things that are typically associated with enterprise-level firewalls, most of them are done by a third party. It's not actually cooked into their product. I like their OSPF. I wish it was more current. The only bugs that are in the OSPF are ones that have been known about for almost two years. Maybe they're they're victims of their own success. Their growth curve has outstripped their technical support and has outstripped their ability to develop. They're just growing so fast. They're trying to do everything. Updates from third parties can take too long. For example, if there's a problem with a package and no available update is available, you have to wait. Since it's via a third party, there's no definable schedule, as the update needs to come from a third-party open organization with no financial interest to make the process faster. Sometimes, there's more finger-pointing than resolution. In, OSPF, they give you lots of information. However, when it comes to hardcore troubleshooting of different routing zones or things like that, then you had to keep dropping down to the CLI in order to get it. And that's where your experience can change quite a bit. If you're running OSPF on Cumulus or some of the other big routing or switching solutions, then they're running much newer versions of it, which are all bug-patched and fixed. However, pfSense is running on an operating system that is not theirs. They don't necessarily have full control over it. When you get a real enterprise firewall, and when you hook up the redundancy, you expect redundancy to work and be predictable. And never ever will the redundancy crash your system. If you don't create the interfaces in the exact same order on both firewalls every single time, if so much as one interface is out of order, if the command line is different because of the way the operating system works, you will slowly corrupt your configuration to the point where it'll break.
Kevin Burgess - PeerSpot reviewer
Global Network Engineering Technical Lead at a healthcare company with 5,001-10,000 employees
Has provided strong edge protection and advanced threat visibility while reducing manual effort
Some of the best features of this firewall are flexibility, overall depth of security analysis, and ease of use. I use application-based traffic classification. It has helped reduce my attack surface considerably; it's much better than simply doing a port-based analysis. The usefulness of machine learning algorithms in identifying threats with Palo Alto Networks PA-Series is mostly behind the scenes; we subscribe to the threat analysis, so we don't see too much. It does perform some in-depth analysis, but most of the machine learning features operate on the back end, more than what we would see. Integrated threat intelligence has empowered my organization to adapt to threats by taking a lot of the burden off us; there's just no way we would see the same breadth of knowledge that a vendor or manufacturer would have. They're gathering data from all over the world, and we're going to see what we get hit with, but now we're seeing what everybody else is getting hit with.
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Comms Service Provider
14%
Computer Software Company
12%
Manufacturing Company
7%
Educational Organization
6%
Computer Software Company
10%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise188
By reviewers
Company SizeCount
Small Business168
Midsize Enterprise33
Large Enterprise29
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise5
Large Enterprise15
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Help me find the best open source router
You don't really specify what type of router you are looking for but if you are talking about a gateway router I reco...
How do I choose between Fortinet FortiGate and pfSense?
Fortinet’s Fortigate is a firewall solution we use and are very much satisfied with its performance. We find Fortigat...
What is the difference between PfSense and OPNsense?
Two of the most common and well recognized firewalls, PfSense and OPNsense both support site-to-site IPsec VPN and cl...
What do you like most about Palo Alto Networks PA-Series?
The reporting feature and application ID functionality within Palo Alto Networks PA-Series are incredibly valuable to...
What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
Regarding value for money, we brought this Palo Alto Networks PA-Series firewall last month, and we have taken up to ...
What needs improvement with Palo Alto Networks PA-Series?
The areas that could be improved with Palo Alto Networks PA-Series include price. My experience with the price of the...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Nerds On Site Inc., RKC Development Inc., Expertech, Fisher's Technology, Ncisive, Consulting, CPURX, Vaughn's Computer House Calls, Imeretech LLC, Digital Crisis, Carolina Digital Phone, Technigogo Technology Services, The Simple Solution, SwiftecITInc, Rocky Mountain Tech Team, Free Range Geeks, Alaska Computer Geeks, Lark Information Technology, Renaissance Systems Inc., Cutting Edge Computers, Caretech LLC, GoVanguard, Network Touch Ltd, P.C. Solutions.Net, Vision Voice and Data Systems LLC, Montgomery Technologies, Techforce, Concero Networks, ASONInc, CPS Electronics and Consulting, Darkwire.net LLC, IT Specialists, MBS-Net Inc., VOICE1 LLC, Advantage Networking Inc., Powerhouse Systems, Doxa Multimedia Inc., Pro Computer Service, Virtual IT Services, A&J Computers Inc., Envision IT LLC, CommunicaONE Inc., Bone Computer Inc., Amax Engineering Corporation, QPG Ltd. Co., IT 101 Inc., Perfect Cloud Solutions, Applied Technology Group Inc., The Digital Sun Group LLC, Firespring
Information Not Available
Find out what your peers are saying about Netgate pfSense vs. Palo Alto Networks PA-Series and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.