Palo Alto Networks NG Firewalls vs WatchGuard XTM [EOL] comparison

Why PeerSpot?

Palo Alto Networks and WatchGuard are both solutions in the Firewalls category. Additionally, 96% of Palo Alto Networks users are willing to recommend the solution, compared to 90% of WatchGuard users who would recommend it.

Palo Alto Networks NG Firew...

Read 200 Palo Alto Networks NG Firewalls reviews

25,898 Views
24,862 Comparison Views

96% willing to recommend

WatchGuard XTM [EOL]

Read 34 WatchGuard XTM [EOL] reviews

90% willing to recommend

Palo Alto Networks NG Firew...

WatchGuard XTM [EOL]

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 19, 2025

WatchGuard XTM [EOL] and Palo Alto Networks NG Firewalls are competing in the firewall technology space. While WatchGuard XTM [EOL] offers simple configurations and appeal to budget-conscious businesses, Palo Alto Networks NG Firewalls provide more advanced security features, making them preferable for enterprises prioritizing comprehensive protection despite higher costs.

Features: WatchGuard XTM [EOL] provides basic security features, ease of use in small environments, and straightforward rule configuration. It is known for robust VPN capabilities. Meanwhile, Palo Alto Networks NG Firewalls offer advanced threat prevention, application visibility, and cloud integration. These features emphasize Palo Alto’s focus on delivering a comprehensive security package with robust application control and detailed traffic visibility.

Room for Improvement: WatchGuard XTM [EOL] could enhance its feature set by integrating more advanced threat prevention tools and improving scalability for larger enterprises. Its application visibility and cloud integration also need enhancement. Palo Alto Networks NG Firewalls, on the other hand, might improve in simplifying their deployment process and reducing the technical expertise required, as well as enhancing their initial cost-effectiveness.

Ease of Deployment and Customer Service: WatchGuard XTM [EOL] is praised for its straightforward deployment, appealing to businesses seeking quick and simple implementations. It is suitable for administrators with varying experience levels, offering intuitive management interfaces. Palo Alto Networks NG Firewalls offer extensive support services, crucial for facilitating complex and large-scale deployments, despite requiring more technical know-how initially. Their customer service is comprehensive, helping users navigate through advanced configurations.

Pricing and ROI: WatchGuard XTM [EOL]'s lower cost attracts cost-sensitive organizations aiming for immediate savings. However, Palo Alto Networks NG Firewalls justify their higher prices through long-term security benefits and advanced features, leading to potentially higher ROI. Businesses prioritizing robust security over initial expenditures might find Palo Alto’s offerings more valuable despite their costly nature.

To learn more, read our detailed Firewalls Report (Updated: October 2026).

Buyer's Guide

Firewalls

October 2026

Download the complete report

Helped 917,433 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Palo Alto Networks NG Firew...

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

200

Ranking in other categories

Firewalls (5th)

WatchGuard XTM [EOL]

Average Rating

8.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Featured Reviews

Nitin Yadav

Network & Security Engineer at Arrow PC Network Pvt.Ltd.

Strong threat prevention has reduced phishing and malware while I monitor traffic in depth

Palo Alto Networks NG Firewalls offers application and user awareness, which allow me to control traffic based on threats. The product includes threat prevention, advanced threat prevention, and deep packet inspection that really helps prevent issues in our network. Deep packet inspection inspects full traffic content, even inside applications and encrypted sessions. Deep packet inspection makes a very practical difference day to day because it lets me see and control what is actually inside the traffic, not just the open port or IP. I have real visibility of which application is running instead of just seeing HTTPS. Palo Alto Networks NG Firewalls WildFire sandboxing is really good at detecting and blocking zero-day malware automatically, along with its GlobalProtect and DNS security features. Using Palo Alto Networks NG Firewalls positively impacts my organization by providing strong security, better visibility, faster response, and simplified operations. After deploying Palo Alto Networks NG Firewalls in our network, it blocks malicious traffic and prevents compromises that occurred before Palo Alto Networks NG Firewalls. I can now block outside IPs to prevent issues. After Palo Alto Networks NG Firewalls installation, I reduced 60 to 70 percent of malware and phishing attacks. Its threat prevention and DNS security features detect these attacks, block malicious domains, and reduce manual efforts for the security team.

Read full review

Generalm4545

General Manager- IT & Automation - Serum at a pharma/biotech company with 1,001-5,000 employees

Protects from attack software and hacking but it doesn't provide the reports in a readable format

In my opinion, image clarity is very important, because I don't get the proper image product on reports. This means that functionality is not there. My engineer does not know how he can replace an order. We attach a log after any kind of keys using a utility instead. For the internet policies that we are implementing, the policy should be based on proper protocols. We use the default policies and there are a number of third-party protocols that appear here. Management with WatchGuard XTM means that out of policy is the problem from our side. In this way, we can not do effective services for people with this one. The policy definition with WatchGuard XTM is not proper for all use case requirements. I've got weekly business reports that I am expecting attachments with from WatchGuard XTM that display data for all kinds of consideration which should be required. Main User Functionality Level Order must adhere to using the admin functionality on the registry, or else our users publish their own name. Maybe these recommendations are irrelevant, but I say that the issue to improve most with WatchGuard XTM is the Main User Function.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We found, based on the submissions, that Palo Alto seemed to be the one that had the most complete solution."

"The solution is very user-friendly and easy to manage and administrate."

"The user ID, Wildfire, UI, and management configuration are all great features."

"There are many valuable features within the solution. This includes security, a user-friendly firewall, antivirus, and global protection."

"The feature that I like the most is its IPS model, the WildFire model, and I really like how the whole threat protection model functions, including the vulnerability and anti-spyware aspects, which are really awesome."

"I find Palo Alto Networks NG Firewalls to be a stable product and very easy to manage from layer 4 to layer 7. They are also seamless for environments with high availability."

"The trackability is most valuable. When a port is open for a protocol, such as port 443 for HTTPS, it can look inside the traffic and identify or verify the applications that are using the port, which was previously not possible with traditional firewalls."

"The solution allows us to set parameters on where our users can go. We can block certain sites or ads if we want to."

More Palo Alto Networks NG Firewalls pros

"We now have the capability to manage traffic better by putting non-business critical traffic into the small bucket, while business critical traffic gets higher priority."

"This product is solid and has a great reputation behind it."

"XTM is more effective and friendly to use than our previous solution, and it also provides me with very good VPN tunnel stability."

"Reputation Enabled Defense indicates that some websites are so infested that it's not even worth visiting them, and therefore saving the bandwidth of going through the detection process."

"Today, however, with the 11.9.4 version, our environment is very stable."

"I would recommend this product, as it is a very flexible one with probably the most intuitive configuration."

"After it is installed, you will have plenty of time to do something else, because it is stable and does not require you to reboot all the time."

"This product has helped in securing my SQL database and web applications from DDoS attacks and SQL injections, improved my network speed, and helped me to set specific policies for specific applications which I couldn't do with other products."

More WatchGuard XTM [EOL] pros

Cons

"The scalability is not so good because if you want to upgrade, you have to change the service completely."

"When you delete and add a new rule, because of the one hundred rule limit, if the new rule has an ID that is greater than one hundred, even though you have fewer than that, it will not work."

"Palo Alto Networks NG Firewalls don't provide a unified platform that natively integrates all security capabilities. It's missing some features for geofencing and understanding locations."

"Surfacing actionable intelligence right away could be better. You have to dig far to get some of the information. If the solution could surface the two or three things out of the 10,000 a day that we really need to deal with, it would be helpful."

"Its stability can be better."

"Its price can be better. They should also provide some more examples of configurations online."

"Understanding the flow and application of securities can be complex, requiring navigation across different sections. Further integration into a unified system could improve usability."

"There is a tradeoff between security and network performance, as security is always top-notch, but performance can sometimes lag and has room for improvement."

More Palo Alto Networks NG Firewalls cons

"The support is poor and lazy."

"The initial setup is neither simple nor complex. If you know the base in networking and how the firewall works, you will be able to figure it out."

"Wireless throughput needs to be improved."

"Tech support is sometimes a little bit slow."

"Our device was not functioning properly, so we returned the product and as a result, our business was down for two days."

"Using the SSL VPN remote feature is great, but we additionally needed two-factor authentication, and employed a third-party product."

"WatchGuard doesn't have a product that allows them to get into the data center. And that's just because there is no hardware to do the job. The software could do it, but there's no hardware that allows that to happen at the moment. So it doesn't scale as well as some other products, that's for sure."

"VPN tunnel lost packet."

More WatchGuard XTM [EOL] cons

Pricing and Cost Advice

"Definitely look into a multi-year license, as opposed to a single-year. That will definitely be more beneficial in terms of cost... Palo Alto is definitely not the cheapest, but if you scale it the right way it will be very comparable to what's out there."

"The cost of the license is platform-dependent. It would be nice if they standardized that across the board to make the license a flat fee instead of based on scale and the platform you're using. Functionality shouldn't change based on the platform or the amount of data going through it. It's the same functionality on there. That's one aspect customers often raise. The platform's price is what it is, but the ongoing cost of the annual license is hard for some customers to wrap their heads around."

"Its price is comparable to other companies. The license is on a one-year or three-year basis. It depends on the customers what they want to go for. There are some features that require an additional license, and there is also the cost of the support."

"Its price is quite high but is justified for the features and capabilities provided, although I would prefer a lower price."

"It is an expensive solution."

"Active/Passive mode is very redundant, but they require you to buy all the associated licensing for both firewalls, which is kind of a waste of money because you are really only using the services on one firewall at a time."

"The pricing is competitive in the market."

"It's cheaper to replace the equipment every three years than to upgrade. We have done two refreshes of their appliances. What I have seen is that the initial hardware cost is low, but you need a subscription and you need maintenance plans. After every three years, if you're trying to renew your maintenance or subscription, that can be very costly. It's cheaper to just get a newer solution with a three-year subscription and maintenance. It's cheaper to replace your hardware completely with a new subscription plan and a new maintenance plan than to renew the maintenance subscription on existing hardware."

More Palo Alto Networks NG Firewalls pricing and cost advice

"It costs less than the SO works and others (like SonicWall, Cisco, and Barracuda) without increasing so much CPU use."

"Like all other manufacturers, there are a lot of features and different pricing. The best is to talk to a representative."

"The licensing and renewal is very expensive."

"Get at least a maintenance contract for the updates and take a larger WatchGuard than you need. A WatchGuard creates new ways to secure your network."

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

917,433 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

11%

Manufacturing Company

10%

Financial Services Firm

Computer Software Company

Construction Company

14%

Financial Services Firm

11%

Outsourcing Company

11%

Marketing Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	77
Midsize Enterprise	56
Large Enterprise	89

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	7
Large Enterprise	3

Questions from the Community

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?

Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include int...

See all answers

Features comparison between Palo Alto and Fortinet firewalls

In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most. PA is good at app control, web filtering a...

See all answers

Which is better - Palo Alto Networks NG Firewalls or Sophos XG?

Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat signatures and updates. I also appreciate that I can just import addresses and URL...

See all answers

Ask a question

Earn 20 points

Comparisons

Cisco Meraki MX vs Palo Alto Networks NG Firewalls

Compared 23% of the time

Fortinet FortiGate vs Palo Alto Networks NG Firewalls

Compared 22% of the time

Cisco Secure Firewall vs Palo Alto Networks NG Firewalls

Compared 11% of the time

Check Point Quantum Force (NGFW) vs Palo Alto Networks NG Firewalls

Compared 7% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Palo Alto Networks NG Firewalls

Compared 4% of the time

More Palo Alto Networks NG Firewalls Competitors

Fortinet FortiGate vs WatchGuard XTM [EOL]

Compared 18% of the time

Sophos UTM vs WatchGuard XTM [EOL]

Compared 17% of the time

Cisco Secure Firewall vs WatchGuard XTM [EOL]

Compared 15% of the time

Check Point Quantum Force (NGFW) vs WatchGuard XTM [EOL]

Compared 8% of the time

Palo Alto Networks WildFire vs WatchGuard XTM [EOL]

Compared 6% of the time

More WatchGuard XTM [EOL] Competitors

Product Reports

Buyer's Guide

Palo Alto Networks NG Firewalls

October 2026

Download Palo Alto Networks NG Firewalls product report

Buyer's Guide

WatchGuard XTM [EOL]

September 2026

Download WatchGuard XTM [EOL] product report

Also Known As

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall

No data available

Overview

Palo Alto Networks NG Firewalls deliver advanced threat protection with machine learning, enhancing security through real-time attack prevention. Known for application visibility and a user-friendly interface, they offer robust network protection and flexibility in rule creation.

Palo Alto Networks NG Firewalls are designed to secure environments with features like GlobalProtect VPN, WildFire malware detection, and unified platform integration. Their strong firewall capabilities and high-performance throughput make them suitable for perimeter and data center protection, VPN configurations, application control, and network segmentation. Users consistently highlight the ease of managing network security policies and integrating third-party tools, ensuring a comprehensive protection strategy. While enhancements in support, training resources, and configuration simplicity are needed, these firewalls are integral for securing both on-prem and cloud environments, aligning with platforms like Azure and AWS.

What are the key features of Palo Alto Networks NG Firewalls?

Application Visibility: Provides insight into network traffic for better control.
Threat Prevention: Uses machine learning for real-time attack prevention.
GlobalProtect VPN: Secures remote access efficiently.
WildFire Malware Detection: Detects and prevents advanced threats.
Unified Platform Integration: Enhances network security through seamless integration with other tools.

What benefits should be evaluated when considering Palo Alto Networks NG Firewalls?

Flexibility in Rule Creation: Allows customized security policies to meet specific needs.
High-Performance Throughput: Ensures efficient network operations under high load.
Comprehensive Policy Management: Simplifies overseeing and adjusting security policies.
Robust Endpoint Security: Protects endpoints against sophisticated threats.
Seamless Integration: Works well with third-party tools for a comprehensive solution.

Palo Alto Networks NG Firewalls are commonly implemented across industries for securing LAN environments, URL filtering, and ensuring Zero Trust security. They secure both on-premises and cloud infrastructures, often becoming integral parts of security frameworks within enterprises. Leveraging these firewalls in conjunction with Azure or AWS enhances the overall network protection strategies employed by organizations.

Palo Alto Networks

Small businesses need big security, too, and the WatchGuard XTM Series firewall/VPN appliances deliver that strong protection, but without the hefty price tag. Enterprise-grade security includes full HTTPS content inspection, VoIP support, and optional security subscriptions like Application Control and Intrusion Prevention Service.

WatchGuard

Sample Customers

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments

AVG, Cyren, Kaspersky Lab, Lastline, NCP engineering, Trend Micro, Websense

Find out what your peers are saying about Fortinet, Cisco, Netgate and others in Firewalls. Updated: October 2026.

DOWNLOAD NOW

917,433 professionals have used our research since 2012.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.