Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

FortiGate Secure SD-WANCisco Secure FirewallPalo Alto NGFW3 of 3 products

You can compare up to 3 products. Remove one to add another.

Side-by-side comparison of FortiGate Secure SD-WAN, Cisco Secure Firewall, Palo Alto NGFW
Product	FortiGate Secure SD-WAN by Fortinet View product	Cisco Secure Firewall by Cisco View product	Palo Alto NGFW by Palo Alto Networks View product
Overview
What it is	Shortlisting SD-WAN tools? FortiGate Secure SD-WAN by Fortinet brings application-aware routing and SD-WAN rules, with cloud deployment. See strengths and alternatives.	Cisco Secure Firewall from Cisco focuses on perimeter threat defense. Key capabilities: URL filtering. Compare it with the leading Firewall alternatives.	Palo Alto Networks built Palo Alto NGFW for SSL/TLS inspection. Explore automated policy optimizer, review appliance deployment and compare similar Firewall products.
Product type	Secure software-defined wide area networking solution	Next-Generation Firewall (NGFW) & Threat Defense	Next-Generation Firewall (NGFW) Hardware Appliance
Best for	Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers	Cross-industry, Government, Financial Services, Healthcare, Energy, Manufacturing, Retail	Cross-industry, Government, Financial Services, Healthcare, Retail, Education
Pricing
Pricing model	Contact Vendor	Contact Vendor	Contact Vendor
Free trial	Free trial: no	Free trial: no	Free trial: no
Deployment
Deployment options	Cloud	CloudOn-Premise	On-Premise
Deployment details	FortiGate physical, virtual and cloud deployments using FortiOS; FortiGate physical, virtual and cloud deployments using FortiOS	Hardware appliance; Virtual appliance; Cloud-native; Hardware appliances (Firewall 1000/3100/4200 series); Virtual FTDv (AWS, Azure, GCP, OCI); Containerized CNF	Hardware appliance; Physical appliance family (PA-400, PA-1400, PA-3400, PA-5400, PA-7000 series)
Data residency	Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region	On-premises data retention / Cloud control region-specific hosting	On-premises hardware data processing
Key features
What it offers	Application-aware routing SD-WAN rules Link steering Performance monitoring Secure overlays Integrated firewall IPS VPN	Snort 3 deep packet inspection Application visibility and control Hardware-accelerated crypto Encrypted traffic analytics Advanced malware defense URL filtering Dynamic network segmentation Perimeter threat defense	App-ID application identification User-ID identity integration Content-ID single-pass threat scanning Hardware-accelerated decryption WildFire sandboxing integration Automated policy optimizer High-availability clustering Perimeter enterprise security
Platform & access
API access	API access: yes	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no	Mobile app: no
Supported platforms	Hardware applianceVMware ESXiMicrosoft Hyper-VKVMNutanix AHVAWSMicrosoft AzureGoogle Cloud+2 more	On-premises hardwareAWSMicrosoft AzureGoogle CloudVMware ESXiKVM	Enterprise perimetercampus networkdata center aggregation
Compliance	Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment	FIPS 140-2/3, Common Criteria (NDcPP), USGv6, SOC 2, ISO 27001	FIPS 140-2/3, Common Criteria (EAL4+), USGv6, SOC 2
Integrations & coverage
Integrations	FortiGateFortiManagerFortiAnalyzerFortiSASEFortiAuthenticatorFortiAPFortiSwitch	Cisco Security Cloud ControlCisco ISECisco Secure WorkloadCisco XDRCisco TalosSplunkMicrosoft Sentinel	PanoramaStrata Cloud ManagerActive DirectoryOktaCisco ISESplunkQRadar
Industries	EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more	Cross-industryGovernmentFinancial ServicesHealthcareEnergyManufacturing+1 more	Cross-industryGovernmentFinancial ServicesHealthcareRetailEducation
Regions	GlobalAvailability varies by product, deployment and service region	Global	Global
Vendor
Company	Fortinet	Cisco	Palo Alto Networks
Headquarters	Sunnyvale, California, USA	San Jose, California, USA	Santa Clara, California, USA
Company size	10,000+	80,000+	15,000+
Founded	2000	1984	2005

FortiGate Secure SD-WAN

by Fortinet

View product

Cisco Secure Firewall

by Cisco

View product

Palo Alto NGFW

by Palo Alto Networks

View product

Overview

What it is

FortiGate Secure SD-WAN

Shortlisting SD-WAN tools? FortiGate Secure SD-WAN by Fortinet brings application-aware routing and SD-WAN rules, with cloud deployment. See strengths and alternatives.

Cisco Secure Firewall

Cisco Secure Firewall from Cisco focuses on perimeter threat defense. Key capabilities: URL filtering. Compare it with the leading Firewall alternatives.

Palo Alto NGFW

Palo Alto Networks built Palo Alto NGFW for SSL/TLS inspection. Explore automated policy optimizer, review appliance deployment and compare similar Firewall products.

Product type

FortiGate Secure SD-WAN

Secure software-defined wide area networking solution

Cisco Secure Firewall

Next-Generation Firewall (NGFW) & Threat Defense

Palo Alto NGFW

Next-Generation Firewall (NGFW) Hardware Appliance

Best for

FortiGate Secure SD-WAN

Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers

Cisco Secure Firewall

Cross-industry, Government, Financial Services, Healthcare, Energy, Manufacturing, Retail

Palo Alto NGFW

Cross-industry, Government, Financial Services, Healthcare, Retail, Education

Pricing

Pricing model

FortiGate Secure SD-WAN

Contact Vendor

Cisco Secure Firewall

Contact Vendor

Palo Alto NGFW

Contact Vendor

Free trial

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Deployment

Deployment options

FortiGate Secure SD-WAN

Cloud

Cisco Secure Firewall

CloudOn-Premise

Palo Alto NGFW

On-Premise

Deployment details

FortiGate Secure SD-WAN

FortiGate physical, virtual and cloud deployments using FortiOS; FortiGate physical, virtual and cloud deployments using FortiOS

Cisco Secure Firewall

Hardware appliance; Virtual appliance; Cloud-native; Hardware appliances (Firewall 1000/3100/4200 series); Virtual FTDv (AWS, Azure, GCP, OCI); Containerized CNF

Palo Alto NGFW

Hardware appliance; Physical appliance family (PA-400, PA-1400, PA-3400, PA-5400, PA-7000 series)

Data residency

FortiGate Secure SD-WAN

Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region

Cisco Secure Firewall

On-premises data retention / Cloud control region-specific hosting

Palo Alto NGFW

On-premises hardware data processing

Key features

What it offers

FortiGate Secure SD-WAN

Application-aware routing
SD-WAN rules
Link steering
Performance monitoring
Secure overlays
Integrated firewall
IPS
VPN

Cisco Secure Firewall

Snort 3 deep packet inspection
Application visibility and control
Hardware-accelerated crypto
Encrypted traffic analytics
Advanced malware defense
URL filtering
Dynamic network segmentation
Perimeter threat defense

Palo Alto NGFW

App-ID application identification
User-ID identity integration
Content-ID single-pass threat scanning
Hardware-accelerated decryption
WildFire sandboxing integration
Automated policy optimizer
High-availability clustering
Perimeter enterprise security

Platform & access

API access

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Single sign-on (SSO)

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Role-based access (RBAC)

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Multi-tenant

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Mobile app

FortiGate Secure SD-WAN

Cisco Secure Firewall

Palo Alto NGFW

Supported platforms

FortiGate Secure SD-WAN

Hardware applianceVMware ESXiMicrosoft Hyper-VKVMNutanix AHVAWSMicrosoft AzureGoogle Cloud+2 more

Cisco Secure Firewall

On-premises hardwareAWSMicrosoft AzureGoogle CloudVMware ESXiKVM

Palo Alto NGFW

Enterprise perimetercampus networkdata center aggregation

Compliance

FortiGate Secure SD-WAN

Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment

Cisco Secure Firewall

FIPS 140-2/3, Common Criteria (NDcPP), USGv6, SOC 2, ISO 27001

Palo Alto NGFW

FIPS 140-2/3, Common Criteria (EAL4+), USGv6, SOC 2

Integrations & coverage

Integrations

FortiGate Secure SD-WAN

FortiGateFortiManagerFortiAnalyzerFortiSASEFortiAuthenticatorFortiAPFortiSwitch

Cisco Secure Firewall

Cisco Security Cloud ControlCisco ISECisco Secure WorkloadCisco XDRCisco TalosSplunkMicrosoft Sentinel

Palo Alto NGFW

PanoramaStrata Cloud ManagerActive DirectoryOktaCisco ISESplunkQRadar

Industries

FortiGate Secure SD-WAN

EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more

Cisco Secure Firewall

Cross-industryGovernmentFinancial ServicesHealthcareEnergyManufacturing+1 more

Palo Alto NGFW

Cross-industryGovernmentFinancial ServicesHealthcareRetailEducation

Regions

FortiGate Secure SD-WAN

GlobalAvailability varies by product, deployment and service region

Cisco Secure Firewall

Global

Palo Alto NGFW

Global

Vendor

Company

FortiGate Secure SD-WAN

Fortinet

Cisco Secure Firewall

Cisco

Palo Alto NGFW

Palo Alto Networks

Headquarters

FortiGate Secure SD-WAN

Sunnyvale, California, USA

Cisco Secure Firewall

San Jose, California, USA

Palo Alto NGFW

Santa Clara, California, USA

Company size

FortiGate Secure SD-WAN

10,000+

Cisco Secure Firewall

80,000+

Palo Alto NGFW

15,000+

Founded

FortiGate Secure SD-WAN

2000

Cisco Secure Firewall

1984

Palo Alto NGFW

2005