Palo Alto Networks CN-Series vs Zscaler Cloud Firewall comparison

Palo Alto Networks and Zscaler are both solutions in the Firewalls category. Palo Alto Networks is ranked #33 with an average rating of 9.5, while Zscaler is ranked #27 with an average rating of 7.6. Palo Alto Networks holds a 0.4% mindshare in Firewalls, compared to Zscaler’s 1.0% mindshare. Additionally, 100% of Palo Alto Networks users are willing to recommend the solution, compared to 93% of Zscaler users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Palo Alto Networks CN-Series and Zscaler Cloud Firewall based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall Report (Updated: June 2026).

Buyer's Guide

Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

June 2026

Download the complete report

Helped 900,644 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Palo Alto Networks CN-Series is 0.4%, up from 0.0% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Zscaler Cloud Firewall	1.0%
Palo Alto Networks CN-Series	0.4%
Other	83.5%

Firewalls

Featured Reviews

Mageshwaran S

Solution Architect at airtel

Enables customers to manage security effortlessly with intuitive features and easy integration

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

Read full review

Ahmed_Shalaby

Senior Cyber Security Engineer at Beta Information Technology

Application control excels and integration with monitoring system boosts efficiency

I am an integrator working with Palo Alto Networks CN-Series and Panorama. I have been involved with the implementation of Palo Alto Networks CN-Series The stability of Palo Alto Networks CN-Series is excellent. Application control is one of the most valuable features. Its monitoring capability…

Read full review

Carlos Snel

Director at Aquila ICT Solutions

Has streamlined secure deployments across large enterprises while offering reliable protection and intuitive management

The centralized management console, also referred to as the Zscaler dashboard, impacts the ability of my customers to respond to security incidents significantly. I see it as user-friendly, and clients are really happy with using it, which motivates them to keep using Zscaler Cloud Firewall because they enjoy the GUI. It's very intuitive, making it easy to navigate alerts and incidents. My clients rarely have questions about where to find specific information once Zscaler Cloud Firewall is running. The interface speaks for itself, requiring little to no additional training, which is a major plus. Advanced threat protection features in Zscaler Cloud Firewall are practically the key component that every customer wants. Unfortunately, it is an option and not included in the basic package. Clients need to pay for the next higher bundle to access it, but practically all clients I have dealt with want this feature 100%. Regarding visibility, I can confirm that Zscaler Cloud Firewall indeed includes a feature for application layer visibility embedded in the service. It provides visibility into what you're doing, which is especially interesting nowadays when discussing AI tools, as companies do not want their employees to copy-paste sensitive information into AI systems. We have seen cases such as Samsung's chip design where sensitive info got exposed. The visibility of applications, including cloud applications and AI tools, is significant for compliance with data policies, and you can also run reports and alerts on it.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of Fortinet FortiGate IPS are firewall and filtering."

"The most valuable features of Fortinet FortiGate IPS are the dashboard and reporting which give us very good visibility."

"Its usability is good. We can easily navigate the system, and we have a very good user experience."

"I have found most of the features to be good with excellent functionality."

"FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering."

"It increases security posture and is helpful for firewall reporting, intrusion protection, web filtering, and SD-WAN implementation."

"We have found it to be very reliable and that's why our teams and various users in our company use it as our main firewall every day."

"The solution is pretty expensive, but it provides great value to our organization."

More Fortinet FortiGate pros

"The stability of Palo Alto Networks CN-Series is excellent."

"The app inspection is very helpful for network security."

"Includes advanced tech protection."

"Zscaler Cloud Firewall understands the applications in the current generation and adapts to the present generation cloud applications."

"It is a stable solution."

"Zscaler is still a very good product."

"I like the advanced tech protection Cloud Sandbox, it's a nice feature."

"With regards to ease, with regards to scalability, with regards to performance and support, those are the kind of top features that I would always look at and I have had a great experience in general."

"It helps a lot of companies to reduce their downtime. Also, It helps businesses in terms of being secured and protected from any threats."

"Users are offered protection from anywhere on any device, with a full set of security features including firewall, IPS, web security, CASB, and DLP."

More Zscaler Cloud Firewall pros

Cons

"I feel they need to work on the alert and event logs."

"Its reporting capabilities can be improved. It should have some out-of-the-box reporting capabilities and some degree of customization."

"We haven't tapped into most of the functionalities that Fortinet FortiGate offers because we're using it just for gateway security. One of the things that I would prefer is a more expansive use of their analyzer. They could do more work on FortiAnalyzer in terms of the data and the information coming from it."

"They should make the product user-friendly and enhance the security features."

"The solution needs to improve its integration with cybersecurity."

"The price of the solution could be cheaper."

"It should be more stable."

"Fortinet should focus on enhancing the capabilities of FortiGate by consolidating its various products, such as FortiGate Cloud, FortiManager, and FortiAnalyzer."

More Fortinet FortiGate cons

"Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive."

"I'd like to see more IOPs features."

"Its technical support services could be better."

"The product could improve its integration with some legacy systems."

"Apart from the issues associated with the product in areas like the DC performance issues and DC failover, Zscaler Cloud Firewall's IP should not have a proxy IP."

"Pricing is a challenge."

"Because it's on cloud, it doesn't allow application of extra settings."

"It would be nice to have some sort of a form factor, a physical form factor perhaps, or virtual machine that you could install on devices or on a cloud, and have some cloud computing."

"We are having some issues with internet access being denied when organizational ID-based policies change. For example, a lower level employee ends up getting the same level of access as that of a higher level employee."

"There are some areas it could improve when it comes to blocking, we have to block some things manually. For example, if we block a top-level domain we have seen that the new IPs come through, the IPs are not blocked. There should be some more granular way of doing it. My only request is if you're blocking something at a top level, the sub-level sub-domains and all those other IPs should be blocked too automatically."

More Zscaler Cloud Firewall cons

Pricing and Cost Advice

"The price is high compared to some of the other solutions."

"There is no challenge in Fortinet FortiGate pricing."

"The pricing is better compared to other solutions like Check Point, Arista, or Cisco."

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall."

"While Fortinet FortiGate has a higher price point compared to Sophos XG, its user-friendly interface justifies the cost."

"It is very cost-effective. You get features similar to other firewalls, such as Palo Alto, but at a lower price."

"We have the full license that included all of the features and support."

"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."

More Fortinet FortiGate pricing and cost advice

Information not available

"It is expensive for small businesses."

"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."

"It comes at a significantly reduced cost while ensuring control and effectiveness."

"Zscaler is priced too high compared to the cost of Fortinet."

"There are licensing costs, and I would not say that it's a cheap vendor."

"There is an annual license required for the use of the Zscaler Cloud Firewall."

"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."

"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."

More Zscaler Cloud Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

900,644 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

No data available

Construction Company

12%

Manufacturing Company

12%

Financial Services Firm

Marketing Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	370
Midsize Enterprise	138
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	13

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for Palo Alto Networks CN-Series?

The pricing of Palo Alto Networks CN-Series is quite expensive, rating around eight on a scale of one to ten for cost.

See all answers

What needs improvement with Palo Alto Networks CN-Series?

Palo Alto Networks CN-Series could improve on its pricing as it is quite expensive. The SD-WAN implementation using P...

See all answers

What is your primary use case for Palo Alto Networks CN-Series?

I am an integrator working with Palo Alto Networks CN-Series ( /products/palo-alto-networks-cn-series-reviews ) and P...

See all answers

Which lesser known firewall product has the best chance at unseating the market leaders?

Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datac...

See all answers

What is your experience regarding pricing and costs for Zscaler Cloud Firewall?

My experience with pricing, setup cost, and licensing was fine.

See all answers

What needs improvement with Zscaler Cloud Firewall?

I think Zscaler Cloud Firewall can be improved by adding more features. The needed improvements involve scalability, ...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks VM-Series vs Palo Alto Networks CN-Series

Compared 25% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Palo Alto Networks CN-Series

Compared 21% of the time

Cisco Secure Firewall vs Palo Alto Networks CN-Series

Compared 10% of the time

Azure Firewall vs Palo Alto Networks CN-Series

Compared 10% of the time

More Palo Alto Networks CN-Series Competitors

Check Point Quantum Force vs Zscaler Cloud Firewall

Compared 19% of the time

Palo Alto Networks NG Firewalls vs Zscaler Cloud Firewall

Compared 8% of the time

Azure Firewall vs Zscaler Cloud Firewall

Compared 7% of the time

Cisco Multicloud Defense vs Zscaler Cloud Firewall

Compared 6% of the time

Cisco Secure Firewall Threat Defense Virtual vs Zscaler Cloud Firewall

Compared 6% of the time

More Zscaler Cloud Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

June 2026

Download Fortinet FortiGate product report

Buyer's Guide

Firewalls

May 2026

Download Palo Alto Networks CN-Series product report

Buyer's Guide

Zscaler Cloud Firewall

May 2026

Download Zscaler Cloud Firewall product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Palo Alto Networks CN-Series offers advanced container security and micro-segmentation for Kubernetes environments, known for robust threat prevention, ease of deployment, and seamless integration with existing security infrastructure.

Palo Alto Networks CN-Series enables application-level visibility and control, providing comprehensive protection for dynamic workloads. Its scalable architecture suits modern cloud-native applications, making it a top choice for securing containerized environments and microservices. Users appreciate its automated policy creation, granular micro-segmentation, and enhanced container security. Although it offers great features, users suggest improvement in integration with other security tools, better scalability for larger environments, and enhanced documentation. Performance in high-traffic scenarios and intuitive configuration processes are areas for potential enhancement, along with improved customer support.

What are the key features of Palo Alto Networks CN-Series?

Advanced Threat Protection: Addresses and mitigates security threats efficiently.
Seamless Kubernetes Integration: Integrates easily within Kubernetes environments.
Comprehensive Visibility: Offers visibility across multi-cloud environments.
Automated Policy Creation: Simplifies the policy creation process.
Granular Micro-segmentation: Provides detailed network traffic segmentation.
Enhanced Container Security: Strengthens security measures for containerized applications.
Ease of Deployment: Simplifies overall deployment process.
Scalability: Adapts to growing needs of cloud-native applications.

What benefits or ROI can users expect from Palo Alto Networks CN-Series?

Increased Security: Effective protection against sophisticated threats.
Improved Operational Efficiency: Streamlined deployment and policy management.
Greater Visibility: Enhanced insight into network traffic and potential vulnerabilities.
Cost Savings: Reduced costs through automation and integration of security processes.
Enhanced Compliance: Helps meet regulatory requirements with strong security controls.

Palo Alto Networks CN-Series is implemented across diverse industries including finance, healthcare, and technology. In financial institutions, it addresses stringent security and compliance requirements. In healthcare, it ensures patient data protection within dynamic cloud environments. In tech, it supports innovative cloud-native applications with robust security measures.

Palo Alto Networks

Zscaler Cloud Firewall enhances network security through seamless integration, configuration management, and comprehensive visibility. With real-time threat detection and centralized control, it provides exceptional protection without hardware investments.

Zscaler Cloud Firewall is designed for efficient network traffic management and secure internet access. It allows granular policy setting, blocking malicious IPs and domains, and access control. This cloud-based service offers smooth integration with security platforms, replacing traditional firewalls and VPNs to ensure data protection and network integrity. The intuitive dashboard facilitates policy enforcement, while advanced features like SSL inspection, URL filtering, and sandboxing add layers of security. Its cloud operation supports scalability and cost-effectiveness with an OpEx model.

What are the key features of Zscaler Cloud Firewall?

Seamless integration: Connects smoothly with existing security tools.
Intuitive dashboard: Simplifies policy enforcement and configuration.
Granular rule-setting: Allows detailed policy customization.
Real-time threat detection: Identifies and mitigates risks instantly.
Centralized control: Manages firewall settings from one location.

What benefits should users expect from Zscaler Cloud Firewall?

Cost savings: Operates fully in the cloud, eliminating hardware needs.
Scalability: Adjusts to business requirements without additional investments.
Enhanced security: Provides advanced SSL inspection and sandboxing.
Flexibility: Blocks malicious traffic and secures various devices.
Integration: Works with other platforms for comprehensive security.

Zscaler Cloud Firewall is widely used by organizations needing to secure network communications for remote and office environments. It facilitates policy implementation to block unauthorized access and is integral in protecting data and network operations across sectors like finance, healthcare, and technology. Its ability to integrate with other platforms supports a multifaceted security approach, ensuring extensive coverage and adaptability.

Zscaler

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

Zenith Live, Azure, Carlsberg Group

Buyer's Guide

Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

June 2026

Free Report: Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall

Find out what your peers are saying about Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall and other solutions. Updated: June 2026.

DOWNLOAD NOW

900,644 professionals have used our research since 2012.

See our Palo Alto Networks CN-Series vs. Zscaler Cloud Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.