[RKearney]

I've used Palo Alto, Fortinet, and Cisco firewalls.

Cisco is the worst by far, the Fortinet are not fun to use but have an incredible $/performance ratio, and the Palo Alto ones are by far the most expensive but also the most enjoyable to use.

They're certainly not without their faults, and we've had issues with them that took time to remedy, but I wouldn't trade them for anything else I've seen so far from competitors.

[canarypilot]

Did you just publish the result of a benchmark or performance comparison test you ran to establish the difference in $/performance ratio between competitors?

If so, I have bad news for your license compliance...

[RKearney]

Nope, I read the manufacturers published specifications for their equipment and looked up the pricing on publicly accessible websites.

https://www.paloaltonetworks.com/products/product-selection

https://www.fortinet.com/products/product-compare?cat=ngfw

And you can get pricing from any VARs website such as CDW.com

Good try though.

[thaumasiotes]

That is a performance comparison test; it's just not one that requires access to the hardware.

[RKearney]

Their performance test, not mine. I'm going off the numbers they cited.

[MereInterest]

That's a good thing to warn people of, but feels like a complete red flag in a license. If a company isn't willing to stand by their product in reviews, then that should be a reason to disqualify their product from consideration.

[pmart123]

Have you ever worked with Check Point's firewall?

[guardiangod]

Check out https://www.reddit.com/r/networking/ and search for the firewall/company names, sorted by Newest.

(I don't subscribe to the sub nor have I posted anything in it. I do read it from time to time and find the comments alright from an end-user (ie. sysadmin) point of view.)

[pmart123]

Thanks.

[bnjms]

FWIW, I know a Checkpoint guy and he swears they’re the best. I haven’t had a chance to do a comparison with him yet but the impression I get is that Checkpoint gets overlooked more than anything so they don’t do great on r/networking.

There is another guy in this thread who gives a good review saying Checkpoint got good in response to competition. Forti is the value option. And, FTD is looked down upon while ASA has some niches. So, PAN, Checkpoint, and Fortinet appears to be the leaders.