Clicky

PAN vs Fortinet | Comparison review of PAN vs. Fortinet

Comparing PAN and Fortinet Firewalls

Both Fortinet and Palo Alto Networks provide next generation firewalls. Both provide similar, but substantially different feature sets. Both provide additional licenses for IDP, Anti-Virus, URL filtering and sandboxing solutions. Either can be viable for traditional firewall needs.

In the case of Fortinet, there is a bundle that contains all of the available protection features, it tends to add about 55% of the hardware list price. That ends up providing a good value when combining multiple protection features. The FortiGuard bundle includes: application control, IPS, AV, IP reputation/anti-bot, web filtering, anti-spam and vulnerability scanning. FortiSandbox integration is available with an additional purchase of a cloud or an on-premise private sandbox appliance. Virtual appliances are available as well. Centralized management for multiple units is available with optional FortiManager. Centralized logging is available via optional FortiAnalyzer.

Both companies have the similar concept of security zones, although Fortinet still has a more interface centric concept when doing policies.

NOTE: While both solutions are good for traditional firewall applications and port security, there are substantial differences, these include:
- Recurring costs
- Tracking configuration changes over time
- Applying per user changes
- Commit on demand versus immediate configuration changes for every GUI change
- Different feature sets, different performance impacts when enabling certain features
- Sophistication of user GUI and ability to use GUI versus the command line

The units mentioned for Palo Alto Networks are now older units. During the earlier part of 2017, Palo Alto Networks augmented the product line to include:
- A much improved and lower cost PA-220 versus the PA-200. It even has dual power source option!
- A much improved and similar cost PA-820 (compared to the PA-500) along with a PA-850 with redundant power supply option and improved performance
- Three new models in the PA-52xx product family filling the previous high end gap below the previous upper end chassis line
- Check our link for the complete product suite


In terms of converting from one platform to the other, at Altaware, Inc. we have the tools and expertise to make it happen.

Fortinet alternatives to PAN firewalls

PA200 
NOTE: This is an older unit, consider the PA-220 series instead

PA200 Fortinet Alternatives

FortiGate 60D - Great IPSec throughput
FortiGate 80D - Good AV inspection, local storage
FortiGate 100D - Rackmount with more ports and throughput
  • FortiGate 60D
    Alt image
    Stacks Image 17186
    FortiGate 60D Specifications
    - 1.5 Gbps firewall throughput
    - 200 Mbps IPS (HTTP) protection
    - 35 Mbps AntiVirus (proxy based)
    - 1 Gbps IPSec VPN throughput
    - 500,000 max sessions
    - 4,000 connections per second
    - Physical: Desktop
    - Power: Single
    - Interfaces: 10 x Gigabit
    - Storage: None
  • FortiGate 80D
    Alt image
    Stacks Image 17188
    FortiGate 80D Specifications
    - .17 - 1.3 Gbps firewall throughput
    - 800 Mbps IPS (HTTP) protection
    - 250 Mbps AntiVirus (proxy based)
    - 1 Gbps IPSec VPN throughput
    - 1.5 million max sessions
    - 22,000 connections per second
    - Physical: Desktop
    - Power: Single
    - Interfaces: 4 x Gigabit
    - Storage: 16 GB
  • FortiGate 100D
    Alt image
    Stacks Image 17200
    FortiGate 100D Specifications
    - .2 - 2.5 Gbps firewall throughput (depending upon byte size)
    - 950 Mbps IPS (HTTP) protection
    - 300 Mbps AntiVirus (proxy based)
    - 450 Mbps IPSec VPN throughput
    - 3 million max sessions
    - 22,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 20 x Gigabit, 2 Gigabit SFP
    - Storage: 32 GB
    - USD List Price: $2,000
    - USD List HW, FortiGuard bundle and 24x7: $ 3,297
  • PAN PA-220
    Stacks Image 38823
    Compared to PA200:
    - More ports
    - More performance
    - HALF the hardware price
    - Redundant power input option!
    - HA capable
    - USB port for larger deployments
    - Still quiet/fanless
    - Better throughput than PA500
    • 500 Mbps firewall throughput (App-ID enabled)
    • 150 Mbps threat prevention throughput
    • 100 Mbps IPSec VPN throughput
    • 64,000 max sessions
    • 4,200 new sessions per second
    • 250 IPSec VPN tunnels/tunnel interfaces
    • 3 virtual routers
    • 15 security zones
    • 250 max number of policies
Open all Close all
PA500 
NOTE: This is an older unit, consider different units instead

PA500 Fortinet Alternatives

FortiGate 100D - $2,000
FortiGate 200D - $3,000 Improved IPS, VPN, more ports
FortiGate 300D - $5,000 Improved sessions, AV and IDP

Prices are in USD for the firewall chassis only and subject to change. Fortinet offers the FortiGuard bundle including either 8x5 or 24x7 support at a reasonable all in price.
  • FortiGate 100D
    Alt image
    Stacks Image 17246
    NOTE: Consider the PA-8xx series as well
    FortiGate 100D Specifications
    - .2 - 2.5 Gbps firewall throughput (depending upon byte size)
    - 950 Mbps IPS (HTTP) protection
    - 300 Mbps AntiVirus (proxy based)
    - 450 Mbps IPSec VPN throughput
    - 3 million max sessions
    - 22,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 20 x Gigabit, 2 Gigabit SFP
    - Storage: 32 GB
    - USD List Price: $2,000
    - USD List HW, FortiGuard bundle and 24x7: $ 3,297
  • FortiGate 200D
    Alt image
    Stacks Image 17288
    NOTE: Consider the PA-8xx series as well
    FortiGate 200D Specifications
    - 3 Gbps firewall throughput
    - 1.7 Gbps IPS (HTTP) protection
    - 600 Mbps AntiVirus (proxy based)
    - 450 Mbps IPSec VPN throughput
    - 3.2 million max sessions
    - 77,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 18 x Gigabit, 2 Gigabit SFP
    - Storage: 64 GB
    - USD List Price: $3,000
    - USD List HW, FortiGuard bundle and 24x7: $ 4,947
  • FortiGate 300D
    Alt image
    Stacks Image 17334
    NOTE: Consider the PA-8xx series as well
    FortiGate 300D Specifications
    - 8 Gbps firewall throughput
    - 2.8 Gbps IPS (HTTP) protection
    - 1.4 Gbps AntiVirus (proxy based)
    - 7 Gbps IPSec VPN throughput
    - 6 million max sessions
    - 200,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 6 x Gigabit, 4 Gigabit SFP
    - Storage: 120 GB
    - USD List Price: $5,000
    - USD List HW, FortiGuard bundle and 24x7: $ 8,247
  • PAN PA-8xx

    PA220 - New Model

    Stacks Image 38839
    Stacks Image 38841

    PA8xx - New Models

    Stacks Image 38846
    Stacks Image 38848

    PA850 - New Model

    Stacks Image 38853
    • 1.9 Gbps firewall throughput (App-ID enabled)
    • 780 Mbps threat prevention throughput
    • 500 Mbps IPSec VPN throughput
    • 192,000 max sessions
    • 9,500 new sessions per second
    • 1000 IPSec VPN tunnels/tunnel interfaces
    • 5 virtual routers
    • 40 security zones
    • 1,500 max number of policies
Open all Close all
PA3020 
NOTE: This is a slightly older unit, consider different units instead

PA3020 Fortinet Alternatives

FortiGate 200D - $3,000
FortiGate 300D - $5,000
FortiGate 500D - $7,000 Excellent IPSec throughput

Prices are in USD for the firewall chassis only and subject to change. Fortinet offers the FortiGuard bundle including either 8x5 or 24x7 support at a reasonable all in price.
  • FortiGate 200D
    Alt image
    Stacks Image 19285
    NOTE: Consider the PA-52xx series as well
    FortiGate 200D Specifications
    - 3 Gbps firewall throughput
    - 1.7 Gbps IPS (HTTP) protection
    - 600 Mbps AntiVirus (proxy based)
    - 450 Mbps IPSec VPN throughput
    - 3.2 million max sessions
    - 77,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 18 x Gigabit, 2 Gigabit SFP
    - Storage: 64 GB
    - USD List Price: $3,000
    - USD List HW, FortiGuard bundle and 24x7: $ 4,947
  • FortiGate 300D
    Alt image
    Stacks Image 19547
    NOTE: Consider the PA-52xx series as well
    FortiGate 300D Specifications
    - 8 Gbps firewall throughput
    - 2.8 Gbps IPS (HTTP) protection
    - 1.4 Gbps AntiVirus (proxy based)
    - 7 Gbps IPSec VPN throughput
    - 6 million max sessions
    - 200,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 6 x Gigabit, 4 Gigabit SFP
    - Storage: 120 GB
    - USD List Price: $5,000
    - USD List HW, FortiGuard bundle and 24x7: $ 8,247
  • FortiGate 500D
    Alt image
    Stacks Image 17518
    NOTE: Consider the PA-52xx series as well
    FortiGate 500D Specifications
    - 16 Gbps firewall throughput
    - 4 Gbps IPS (HTTP) protection
    - 1.7 Gbps AntiVirus (proxy based)
    - 14 Gbps IPSec VPN throughput
    - 6 million max sessions
    - 280,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 10 x Gigabit, 8 Gigabit SFP
    - Storage: 120 GB
    - USD List Price: $7,000
    - USD List HW, FortiGuard bundle and 24x7: $ 11,547
  • PAN PA-52xx
    Stacks Image 38862
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38867
Open all Close all
PA3050 
NOTE: This is a slightly older unit, consider different units instead

PA3050 Fortinet Alternatives

FortiGate 300D - $5,000
FortiGate 500D - $7,000 Excellent IPSec throughput

Prices are in USD for the firewall chassis only and subject to change. Fortinet offers the FortiGuard bundle including either 8x5 or 24x7 support at a reasonable all in price.
  • FortiGate 300D
    Alt image
    Stacks Image 19954
    NOTE: Consider the PA-52xx series as well
    FortiGate 300D Specifications
    - 8 Gbps firewall throughput
    - 2.8 Gbps IPS (HTTP) protection
    - 1.4 Gbps AntiVirus (proxy based)
    - 7 Gbps IPSec VPN throughput
    - 6 million max sessions
    - 200,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 6 x Gigabit, 4 Gigabit SFP
    - Storage: 120 GB
    - USD List Price: $5,000
    - USD List HW, FortiGuard bundle and 24x7: $ 8,247
  • FortiGate 500D
    Alt image
    Stacks Image 19970
    NOTE: Consider the PA-52xx series as well
    FortiGate 500D Specifications
    - 16 Gbps firewall throughput
    - 4 Gbps IPS (HTTP) protection
    - 1.7 Gbps AntiVirus (proxy based)
    - 14 Gbps IPSec VPN throughput
    - 6 million max sessions
    - 280,000 connections per second
    - Physical: 1u rackmount
    - Power: Single
    - Interfaces: 10 x Gigabit, 8 Gigabit SFP
    - Storage: 120 GB
    - USD List Price: $7,000
    - USD List HW, FortiGuard bundle and 24x7: $ 11,547
  • PAN PA-52xx
    Stacks Image 38875
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38880
Open all Close all
PA3060 
NOTE: This is a slightly older unit, consider different units instead

PA3060 Fortinet Alternatives

The following models are recommended if the 10 Gb is the interest in the PA3060:

FortiGate 1000D - $18,000
FortiGate 1200D - $25,000

Prices are in USD for the firewall chassis only and subject to change. Fortinet offers the FortiGuard bundle including either 8x5 or 24x7 support at a reasonable all in price.
  • FortiGate 1000D
    Alt image
    Stacks Image 17849
    NOTE: Consider the PA-52xx series as well
    FortiGate 1000D Specifications
    - 33-52 Gbps firewall throughput
    - 8 Gbps IPS (HTTP) protection
    - 3.5 Gbps AntiVirus (proxy based)
    - 25 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 2 x 10 Gb SFP+
    - Storage: 120 GB
    - USD List Price: $18,000
    - USD List HW, FortiGuard bundle and 24x7: $ 29,700
  • FortiGate 1200D
    Alt image
    Stacks Image 17932
    NOTE: Consider the PA-52xx series as well
    FortiGate 1200D Specifications
    - 55-72 Gbps firewall throughput
    - 11 Gbps IPS (HTTP) protection
    - 4.3 Gbps AntiVirus (proxy based)
    - 48 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit,16 Gigabit SFP, 4 x 10 Gb SFP+
    - Storage: 240 GB
    - USD List Price: $25,000
    - USD List HW, FortiGuard bundle and 24x7: $ 41,250
  • PAN PA-52xx
    Stacks Image 38888
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38893
Open all Close all
PA5020 
NOTE: This is a slightly older unit, consider different units instead

PA5020 Fortinet Alternatives

FortiGate 900D - $ 14,000 Redundant power, 1U
FortiGate 1000D - $ 18,000 Hot-swap power, 2U, PLUS 10 Gb

Prices are in USD for the firewall chassis only and subject to change. Fortinet offers the FortiGuard bundle including either 8x5 or 24x7 support at a reasonable all in price.
  • FortiGate 900D
    Alt image
    Stacks Image 38147
    NOTE: Consider the PA-52xx as well
    FortiGate 900D Specifications
    - 33-52 Gbps firewall throughput
    - 8 Gbps IPS (HTTP) protection
    - 3.5 Gbps AntiVirus (proxy based)
    - 25 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 1u rackmount
    - Power: Redundant
    - Interfaces: 16 x Gigabit,16 Gigabit SFP, 2 x 10 Gb SFP+
    - Storage: 256 GB
    - USD List Price: $14,000
    - USD List HW, FortiGuard bundle and 24x7: $23,100
  • FortiGate 1000D
    Alt image
    Stacks Image 20282
    NOTE: Consider the PA-52xx series as well
    FortiGate 1000D Specifications
    - 33-52 Gbps firewall throughput
    - 8 Gbps IPS (HTTP) protection
    - 3.5 Gbps AntiVirus (proxy based)
    - 25 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 2 x 10 Gb SFP+
    - Storage: 120 GB
    - USD List Price: $18,000
    - USD List HW, FortiGuard bundle and 24x7: $ 29,700
  • PAN PA-52xx
    Stacks Image 38901
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38906
Open all Close all
PA5050 
NOTE: This is a slightly older unit, consider different units instead

PA5050 Fortinet Alternatives

FortiGate 1000D: USD List pricing: $29,700 for firewall, FortiGuard bundle and 24x7 support
FortiGate 1200D: USD List pricing: $41,250 for firewall, FortiGuard bundle and 24x7 support
FortiGate 1500D: USD List pricing: $49,500 for firewall, FortiGuard bundle and 24x7 support

Prices are in USD and subject to change.
  • FortiGate 1000D
    Alt image
    Stacks Image 20648
    NOTE: Consider the PA-52xx series as well
    FortiGate 1000D Specifications
    - 33-52 Gbps firewall throughput
    - 8 Gbps IPS (HTTP) protection
    - 3.5 Gbps AntiVirus (proxy based)
    - 25 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 2 x 10 Gb SFP+
    - Storage: 120 GB
    - USD List Price: $18,000
    - USD List HW, FortiGuard bundle and 24x7: $ 29,700
  • FortiGate 1200D
    Alt image
    Stacks Image 38284
    NOTE: Consider the PA-52xx series instead
    FortiGate 1200D Specifications
    - 55-72 Gbps firewall throughput
    - 11 Gbps IPS (HTTP) protection
    - 4.3 Gbps AntiVirus (proxy based)
    - 48 Gbps IPSec VPN throughput
    - 11 million max sessions
    - 240,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 4 x 10 Gb SFP+
    - Storage: 240 GB
    - USD List Price: $25,000
    - USD List HW, FortiGuard bundle and 24x7: $ 41,250
  • FortiGate 1500D
    Alt image
    Stacks Image 38339
    NOTE: Consider the PA-52xx series instead
    FortiGate 1500D Specifications
    - 55-80 Gbps firewall throughput
    - 11 Gbps IPS (HTTP) protection
    - 4.3 Gbps AntiVirus (proxy based)
    - 50 Gbps IPSec VPN throughput
    - 12 million max sessions
    - 250,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 8 x 10 Gb SFP+
    - Storage: 240 GB
    - USD List Price: $30,000
    - USD List HW, FortiGuard bundle and 24x7: $ 49,500
  • PAN PA-52xx
    Stacks Image 38914
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38919
Open all Close all
PA5060 
NOTE: This is a slightly older unit, consider different units instead

PA5060 Fortinet Alternatives

FortiGate 1500D: 2U, USD List pricing: $49,500 for firewall, FortiGuard bundle and 24x7 support
FortiGate 3200D: 2U, Lots of 10 Gb SFP+
FortiGate 3700D: 3U, 40 Gb interfaces
FortiGate 3810D: 3U, 100 Gb interfaces

Prices are in USD and subject to change.
  • FortiGate 1500D
    Alt image
    Stacks Image 21387
    NOTE: Consider the PA-52xx series as well
    FortiGate 1500D Specifications
    - 55-80 Gbps firewall throughput
    - 11 Gbps IPS (HTTP) protection
    - 4.3 Gbps AntiVirus (proxy based)
    - 50 Gbps IPSec VPN throughput
    - 12 million max sessions
    - 250,000 connections per second
    - Physical: 2u rackmount
    - Power: Dual, hot-swap
    - Interfaces: 16 x Gigabit, 16 Gigabit SFP, 8 x 10 Gb SFP+
    - Storage: 240 GB
    - USD List Price: $30,000
    - USD List HW, FortiGuard bundle and 24x7: $ 49,500
  • FortiGate 3200D
    NOTE: Consider the PA-52xx series as well

    FG 3200D Specifications

    Alt image
    Stacks Image 38575
  • FortiGate 3700D
    NOTE: Consider the PA-52xx series instead

    FG 3700D Specifications

    Alt image
    Stacks Image 38727
  • FortiGate 3810D
    NOTE: Consider the PA-52xx series as well

    FG 3810D Specifications

    Alt image
    Stacks Image 38759
  • PAN PA-52xx
    Stacks Image 38930
    - 5220: 100/1000/10G copper, 10Gig SFP+ and 40G (QSFP+) ports
    - 5250/5260: 100/1000/10G copper, 16 Gig/10Gib SFP/SFP+ and 4 40G/100G QSP28
    - Dual SSD drives and 2 TB HDD, RAID1, log storage
    Stacks Image 38935
Open all Close all
All prices are in USD and subject to change. Specifications are from manufacturer datasheets and may be tied to specific versions of their operating systems. We’re not perfect, there may be typos, please contact us before making your final decision.
© 2017 Altaware, Inc. All rights reserved. | Cyber security reseller/VAR Orange County, CA | 866-833-4070