The article focuses on analyzing, comparing, and evaluating the performance of the next-generation firewalls, case of Palo Alto Firewall and Fortinet Firewall in practice through the deployment of simulated situations and experimental scenarios that are: using network attacks such as TCP, UDP Flood; evaluate the function of SSL/TLS Inspection, Application Control; Check traffic, latency, packet response time and average throughput values on each network system with each separate firewall. The result shows that both types of firewalls have outstanding performance compared with older generation firewalls and Fortinet Firewall has more outstanding points than Palo Alto Firewall in particular. The research results will be necessary documents for designers, ensuring network safety and security of the network system, and for students and students majoring in Information Technology and Information Security as a reference to make appropriate decisions when using these two types of next-generation firewalls.