Feature Comparison Matrix
NetBird vs. GlobalProtect Feature Matrix
Section titled “NetBird vs. GlobalProtect Feature Matrix”| Feature | GlobalProtect (PA-2020) | NetBird |
|---|---|---|
| Encryption protocol | IPsec/SSL | WireGuard |
| Cipher suites | RSA, 3DES, AES-CBC/GCM | ChaCha20-Poly1305 |
| Key exchange | RSA (no PFS) | Curve25519 (ECDH) |
| Formal verification | None | Tamarin, CryptoVerif, ProVerif, eCK |
| Network topology | Hub-and-spoke | Peer-to-peer mesh |
| Login portal exposed | Yes (vpn.gsisg.com:443) | No |
| Client platforms | Win, macOS, Linux, iOS, Android | Win, macOS, Linux, iOS, Android, pfSense, OPNsense, Docker, browser |
| SSO integration | SAML/RADIUS (complex) | OIDC (Entra ID native) |
| Access control | PA CLI/GUI | Web dashboard, visual policies |
| Self-hosted | N/A (proprietary) | Yes (open source, Docker) |
| HA routing peers | Requires multiple PA appliances | Built-in (free) |
| Post-quantum | No | Rosenpass (experimental) |
| License | Proprietary | BSD-3 (client) / AGPLv3 (server) |