Palo Alto Networks NG Firewalls vs WatchGuard XTM [EOL] comparison

Palo Alto Networks and WatchGuard are both solutions in the Firewalls category. Additionally, 96% of Palo Alto Networks users are willing to recommend the solution, compared to 90% of WatchGuard users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 19, 2025

WatchGuard XTM [EOL] and Palo Alto Networks NG Firewalls are competing in the firewall technology space. While WatchGuard XTM [EOL] offers simple configurations and appeal to budget-conscious businesses, Palo Alto Networks NG Firewalls provide more advanced security features, making them preferable for enterprises prioritizing comprehensive protection despite higher costs.

Features: WatchGuard XTM [EOL] provides basic security features, ease of use in small environments, and straightforward rule configuration. It is known for robust VPN capabilities. Meanwhile, Palo Alto Networks NG Firewalls offer advanced threat prevention, application visibility, and cloud integration. These features emphasize Palo Alto’s focus on delivering a comprehensive security package with robust application control and detailed traffic visibility.

Room for Improvement: WatchGuard XTM [EOL] could enhance its feature set by integrating more advanced threat prevention tools and improving scalability for larger enterprises. Its application visibility and cloud integration also need enhancement. Palo Alto Networks NG Firewalls, on the other hand, might improve in simplifying their deployment process and reducing the technical expertise required, as well as enhancing their initial cost-effectiveness.

Ease of Deployment and Customer Service: WatchGuard XTM [EOL] is praised for its straightforward deployment, appealing to businesses seeking quick and simple implementations. It is suitable for administrators with varying experience levels, offering intuitive management interfaces. Palo Alto Networks NG Firewalls offer extensive support services, crucial for facilitating complex and large-scale deployments, despite requiring more technical know-how initially. Their customer service is comprehensive, helping users navigate through advanced configurations.

Pricing and ROI: WatchGuard XTM [EOL]'s lower cost attracts cost-sensitive organizations aiming for immediate savings. However, Palo Alto Networks NG Firewalls justify their higher prices through long-term security benefits and advanced features, leading to potentially higher ROI. Businesses prioritizing robust security over initial expenditures might find Palo Alto’s offerings more valuable despite their costly nature.

To learn more, read our detailed Firewalls Report (Updated: April 2026).

Buyer's Guide

Firewalls

April 2026

Download the complete report

Helped 893,915 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Abhinandan Yadav

Network Security Engineer at a retailer with 11-50 employees

Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches

Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.

Read full review

Abhinandan Yadav

Network Security Engineer at a retailer with 11-50 employees

Advanced visibility has transformed security policies and provides proactive threat prevention

Palo Alto Networks NG Firewalls are powerful, but there are areas for improvement that could enhance their effectiveness, such as cost and licensing models. One of the main challenges we face is the high cost, especially for small to mid-sized businesses (SMBs), with licensing for features such as threat prevention, URL filtering, and WildFire being quite expensive. Additionally, centralized management with Panorama is a dependency for managing multiple firewalls, leading to added costs and complexity, and the built-in centralized management features could be made more user-friendly. Moreover, the learning curve associated with the initial setup and advanced configuration including NAT, decryption, and routing can be complex for new users, and enhancements in logging and reporting could also improve the user experience. There are a few more areas where improvements could streamline operations, such as optimizing commit times. Sometimes committing changes takes a noticeable amount of time, particularly for larger configurations, so a faster commit option would significantly help during urgent troubleshooting. Easier policy troubleshooting is necessary as well. Even though logs are detailed, finding the exact rule match and issue can still be time-consuming in complex environments, so having automated policy simulation and a recommendation tool would expedite troubleshooting. Additionally, better default templates and best practices for SMB data centers and branch offices would speed up deployment and reduce errors. Enhancing integration visibility through a unified dashboard would simplify monitoring, and improving the firmware upgrade process to allow for a more seamless zero downtime upgrade would also enhance operations, as upgrades are stable but typically require careful planning and downtime.

Read full review

Generalm4545

General Manager- IT & Automation - Serum at a pharma/biotech company with 1,001-5,000 employees

Protects from attack software and hacking but it doesn't provide the reports in a readable format

In my opinion, image clarity is very important, because I don't get the proper image product on reports. This means that functionality is not there. My engineer does not know how he can replace an order. We attach a log after any kind of keys using a utility instead. For the internet policies that we are implementing, the policy should be based on proper protocols. We use the default policies and there are a number of third-party protocols that appear here. Management with WatchGuard XTM means that out of policy is the problem from our side. In this way, we can not do effective services for people with this one. The policy definition with WatchGuard XTM is not proper for all use case requirements. I've got weekly business reports that I am expecting attachments with from WatchGuard XTM that display data for all kinds of consideration which should be required. Main User Functionality Level Order must adhere to using the admin functionality on the registry, or else our users publish their own name. Maybe these recommendations are irrelevant, but I say that the issue to improve most with WatchGuard XTM is the Main User Function.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's a firewall that secures our internal network. I have been using it since 2013, and I find that most of the features are advanced, and very user friendly."

"The most useful features of Fortinet FortiGate IPS are you can create a virtual firewall within it, most other firewalls do not have this feature. You are able to manage your network and have network segmentation within your firewall. Additionally, you can create virtual switches within the firewall and have policy management, such as firewall and access policy."

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto."

"In terms of ROI, they're inexpensive, and because they're inexpensive, they're just everywhere, in the Federal Government, schools, everywhere where budgets are fairly tight, and it is a very good product."

"The antivirus, malware, anti-malware, anti-spam, IP VPN connections, and firewall rules bring the most value for me and my clients."

"The stability is great; there are no issues with crashing or freezing, and there are no bugs or glitches."

"Fortinet FortiGate has been a Perimeter Security which defends our network from Internet attackers, armed with zero-day exploits of common Internet services like HTTP and SMTP."

"We like signature-based anomaly detection and zero-day protection features."

More Fortinet FortiGate pros

"URL filtering and WildFire features are most valuable. It is very user-friendly. It is a very solid product, and it definitely works."

"Decryption is one of Palo Alto Networks NG Firewalls' best features because we can decrypt by category. For instance, we can decrypt everything except for bank traffic so that we don't interfere with the passwords and two-factor authentication of those checking their bank accounts at work. We can still monitor for malware and other threats that come through a secure channel. It's seamless for users. The URL filtering and IPS are both great as well."

"I find Palo Alto Networks NG Firewalls to be a stable product and very easy to manage from layer 4 to layer 7. They are also seamless for environments with high availability."

"Flexible and integrates well with apps and other security tools."

"The interface is very nice. We generally like the UI the product offers."

"The GUI is very simple in Palo Alto and I like that."

"The most valuable aspect of this solution is pre-sales and post-sales because of the support and relationship building."

"Everything is easy in Palo Alto Networks NG Firewall. It is very stable, easy to configure, and easy to upgrade. It is also very easy to create custom policies and applications. Everything can be done with the click of a button. It is also good for the protection of web services. Nowadays, they have a rather new DNS security feature, which is pretty good and functional. We did a one-month trial, and it is the best product for the firewall network."

More Palo Alto Networks NG Firewalls pros

"Application Control is fantastic with over 2,500 applications and the granularity that we can either allow people to view but not be able to log on to Facebook; or view it and log onto it if they're in the marketing department, but not play Facebook games. There are all sorts of different options like that. So it's highly granular."

"Setup and configuration is straightforward with excellent management interface."

"I would recommend this product, as it is a very flexible one with probably the most intuitive configuration."

"After installing the product, we achieved awareness of our data protection needs and email misuse."

"Simply, give this tool a try; it will generate great benefits in terms of the scalability and environment."

"The multi-WAN feature allows us to configure multiple external interfaces."

"They have a reporting system which can store data over a very long period of time. Not many other firewall vendors provide a reporting system, but if they do, like Fortinet does, then you've got buy that as an additional product and that can be more than twice as expensive as the initial investment in the firewall. And without reporting over a long-term period, you're just about wasting your time."

"Flawless. I have had my firebox for 3 years now and never had an issue with it."

More WatchGuard XTM [EOL] pros

Cons

"Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services."

"I find the management console not very straightforward, so that's an area where Fortinet FortiGate can improve. They should simplify it and make it more user-friendly."

"There are a lot of bugs I have found in the solution and it is difficult to upgrade. These areas need improvement."

"The solution needs to improve its support."

"It's difficult to add or define, and it's not that easy to configure and manage."

"For improving sectors, they need to focus on technical support and work on the technical part."

"The user interface needs a bit of upgrading."

"They really need to work on their support."

More Fortinet FortiGate cons

"We're working with the entry-level appliances, so I don't know what the higher-end ones are like, however, on the entry-level models I would say commit speeds need to be improved."

"This solution is definitely not scalable."

"Need improvement with their logs, especially the command line interface."

"The price is expensive and should be reduced to make it more competitive."

"The price could be more friendly, which would be good for Palo Alto and us. If the price were a little lower, then it would be a viable option for mid-level businesses, who may not be able to deploy at the current price point."

"The manufacturer can improve the product by improving the configuration."

"Palo Alto is like Microsoft. It has varied features, but it's too technical."

"PA-220 Next-Generation Firewall would be perfect if it has spam filtering."

More Palo Alto Networks NG Firewalls cons

"The problem is the high cost."

"The WatchGuard gateway wireless functionality for managing access points leaves much to be desired."

"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."

"The technical support is very bad. The price is very high, the response time is very long, and technical support does not provide a general solution."

"I would like them to improve the product's overall protections. This would be good for all product users."

"Sometimes we have had issues with stability of the product."

"The support is poor and lazy."

"We had some problems of instability with older versions of the software."

More WatchGuard XTM [EOL] cons

Pricing and Cost Advice

"When I look around at other products, such as Sophos, Fortinet FortiGate is 20% to 30% more expensive with our current cost."

"They are more expensive than others."

"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."

"The product pricing is reasonable."

"I would rate the pricing a seven out of ten"

"I do not have first-hand experience with the rice of Fortinet FortiGate, but I have heard the price was reasonable."

"FortiGate SWG is a cost-effective solution well-suited for organisations of all sizes."

"I rate the pricing an eight and a half on a scale of one to ten, where one is low, and ten is high."

More Fortinet FortiGate pricing and cost advice

"The pricing is straightforward with no hidden costs."

"We were very happy when they released the PA-440s. Previously, we had been looking at the PA-820s, which were a bit of overkill for us. Price-wise and capability-wise, the PA-820s hit the nail on the head for us."

"I am not sure about the specific licensing costs of Palo Alto Networks NG Firewalls, but FortiGate and Palo Alto are generally cheaper than some high-end Cisco devices."

"I don't know about the price of the platform or the license fees, as the finance department deals with that. I only bill for the materials involved in the design."

"Don't buy a device with more power than you really need, because licensing depends on the cost of the box you have."

"The cost of the license is platform-dependent. It would be nice if they standardized that across the board to make the license a flat fee instead of based on scale and the platform you're using. Functionality shouldn't change based on the platform or the amount of data going through it. It's the same functionality on there. That's one aspect customers often raise. The platform's price is what it is, but the ongoing cost of the annual license is hard for some customers to wrap their heads around."

"It's too expensive."

"The pricing is competitive in the market."

More Palo Alto Networks NG Firewalls pricing and cost advice

"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."

"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."

"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative."

"The licensing and renewal is very expensive."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

893,915 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

10%

Comms Service Provider

10%

Manufacturing Company

Financial Services Firm

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Marketing Services Firm

14%

Financial Services Firm

14%

Performing Arts

13%

Manufacturing Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	367
Midsize Enterprise	135
Large Enterprise	193

By reviewers
Company Size	Count
Small Business	77
Midsize Enterprise	56
Large Enterprise	85

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	7
Large Enterprise	3

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...

See all answers

Ask a question

Earn 20 points

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 18% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 16% of the time

Cisco Meraki MX vs Palo Alto Networks NG Firewalls

Compared 14% of the time

Check Point Quantum Force (NGFW) vs Palo Alto Networks NG Firewalls

Compared 9% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Palo Alto Networks NG Firewalls

Compared 5% of the time

Azure Firewall vs Palo Alto Networks NG Firewalls

Compared 4% of the time

More Palo Alto Networks NG Firewalls Competitors

Cisco Secure Firewall vs WatchGuard XTM [EOL]

Compared 24% of the time

Check Point Quantum Force (NGFW) vs WatchGuard XTM [EOL]

Compared 14% of the time

Sophos UTM vs WatchGuard XTM [EOL]

Compared 14% of the time

Netgate pfSense vs WatchGuard XTM [EOL]

Compared 8% of the time

Fortinet FortiGate-VM vs WatchGuard XTM [EOL]

Compared 8% of the time

More WatchGuard XTM [EOL] Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2026

Download Fortinet FortiGate product report

Buyer's Guide

Palo Alto Networks NG Firewalls

April 2026

Download Palo Alto Networks NG Firewalls product report

Buyer's Guide

WatchGuard XTM [EOL]

April 2026

Download WatchGuard XTM [EOL] product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

No data available

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Palo Alto Networks NG Firewalls deliver advanced threat protection with machine learning, enhancing security through real-time attack prevention. Known for application visibility and a user-friendly interface, they offer robust network protection and flexibility in rule creation.

Palo Alto Networks NG Firewalls are designed to secure environments with features like GlobalProtect VPN, WildFire malware detection, and unified platform integration. Their strong firewall capabilities and high-performance throughput make them suitable for perimeter and data center protection, VPN configurations, application control, and network segmentation. Users consistently highlight the ease of managing network security policies and integrating third-party tools, ensuring a comprehensive protection strategy. While enhancements in support, training resources, and configuration simplicity are needed, these firewalls are integral for securing both on-prem and cloud environments, aligning with platforms like Azure and AWS.

What are the key features of Palo Alto Networks NG Firewalls?

Application Visibility: Provides insight into network traffic for better control.
Threat Prevention: Uses machine learning for real-time attack prevention.
GlobalProtect VPN: Secures remote access efficiently.
WildFire Malware Detection: Detects and prevents advanced threats.
Unified Platform Integration: Enhances network security through seamless integration with other tools.

What benefits should be evaluated when considering Palo Alto Networks NG Firewalls?

Flexibility in Rule Creation: Allows customized security policies to meet specific needs.
High-Performance Throughput: Ensures efficient network operations under high load.
Comprehensive Policy Management: Simplifies overseeing and adjusting security policies.
Robust Endpoint Security: Protects endpoints against sophisticated threats.
Seamless Integration: Works well with third-party tools for a comprehensive solution.

Palo Alto Networks NG Firewalls are commonly implemented across industries for securing LAN environments, URL filtering, and ensuring Zero Trust security. They secure both on-premises and cloud infrastructures, often becoming integral parts of security frameworks within enterprises. Leveraging these firewalls in conjunction with Azure or AWS enhances the overall network protection strategies employed by organizations.

Palo Alto Networks

Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection, but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.

WatchGuard

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense

Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: April 2026.

DOWNLOAD NOW

893,915 professionals have used our research since 2012.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.