Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF comparison

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Sangfor NGAF

Download the complete report

Helped 911,493 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Check Point Cloud Firewall ...

Ranking in Firewalls

8th

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

243

Ranking in other categories

Managed Security Services Providers (MSSP) (1st), Vulnerability Management (5th), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (3rd), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (5th), WAN Edge (3rd), Unified Threat Management (UTM) (4th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (5th), Data Security Posture Management (DSPM) (4th), Compliance Management (5th)

Sangfor NGAF

Ranking in Firewalls

23rd

Average Rating

8.0

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2026, in the Firewalls category, the mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.7%, up from 0.6% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)	2.7%
Sangfor NGAF	1.1%
Other	96.2%

Firewalls

Featured Reviews

Oscar Nunez

Ingeniero en redes y Telecomunicaciones at K-IT

Centralized management has reduced policy time and provides reliable multitenant protection

What I would like, what I think they should improve a little is the management of objects at large scale. When you work with multiple domains, there are thousands of network objects. Detecting duplicates and consistency across domains is a very manual process that should be more automated. Another thing: the SmartConsole interface is very powerful and very good, but the learning curve, compared to other solutions in the market from other manufacturers, could be modernized. I think it does not necessarily have to be done from a client application; it could be done via web, because via web I know that not all the options you have in SmartConsole are available. So it would be good if it could also be done from the web and all the options were available. Another thing that I would really like is more automation with Ansible or Terraform. I know it has improved in recent versions, but I think it is still not mature enough. Compared to other manufacturers that do have a bit more in terms of automation capabilities in integration flows with Ansible or Terraform, Check Point Cloud Firewall (formerly CloudGuard Network Security) could improve. Another thing that could be improved a little would be the TAC response time, because when there are very complex cases, I think there should be more speed initially, more ownership of those urgent cases, and not leave the customer waiting. This has happened to me: when I have cases open with Check Point Cloud Firewall (formerly CloudGuard Network Security) TAC, sometimes they do not respond and I have to keep insisting, and I think that part should improve. I do not know if it depends on who takes the ticket or on the severity of the ticket, but sometimes I have had to insist a lot, and that would be the only problem. Once they attend to me and become involved in the case, the responses they give are very professional and really help directly resolve the problems when there is a bug or troubleshooting to do. As I said, I would like to see a specific improvement in SmartConsole. I think if they improved it—how to say it—gave it a facelift so you could access all the options directly from a browser, that would be great, because sometimes, for one reason or another, you cannot download SmartConsole or, for some reason, the SmartConsole client does not start correctly, and you could do it directly from the browser. I think that would be a good option to improve. Another thing would be that in multidomain environments, I would like a global search function for objects and rules. That is, you could enter and search across all domains at once, because right now you have to go domain by domain, and in environments with many customers, you spend quite a bit of time; you have to exit one domain and enter another. So those would be the improvements I would like to see.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The security configuration features have enhanced the reliable coordination of programs and data safety."

"The solution is scalable."

"The network security has positively affected our confidence in secure cloud deployments and mitigation."

"The reporting is quite good; it is the most powerful aspect of this solution and it's user-friendly."

"The most valuable feature for us is the scale set, which allows us to scale horizontally, vertically and dynamically depending on the traffic load."

"It offers advanced detection of threats that can harm data from the cloud database."

"The feature that I value the most about Check Point CloudGuard CNAPP is the possibility of checking compliance with different standards. This compliance check can be performed for each subscription or service that we have on all the different cloud providers that we use."

"Cloud security posture management is the feature we've been using the longest."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pros

"The capabilities are mostly within the box."

"Sangfor serves most of the basic purposes of a firewall, is particularly good in the DPI where we can inspect the inbound and outbound traffic on a very granular level, gives a very good predictive measure as well as the current measure of things going on in our network, and gives us value for money overall."

"The support from Sangfor NGAF here in Pakistan is great."

"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."

"The product is very fast and reliable."

"The solution is quite safe and good, and furthermore, it is very good for different environments."

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

More Sangfor NGAF pros

Cons

"Compliance checks on cloud resources against various industry standards and compliance framework templates need to be improved."

"We have done a lot of automation with the firewall, but sometimes, there are some failures because of some bugs. The fixes for them are still not available. We have daily or weekly communication with the Check Point people giving support in the India region, but we have not seen much improvement or response to our requests for some additional features."

"Down the road, we would like to see automation. That is probably a feature that most people want. If they can automate patching a vulnerability, it will be much easier."

"The software configurations theory is complicated, and without proper planning and a well-skilled technical team, it cannot perform its tasks properly."

"The documentation has been rough. Being able to do it yourself can be hit or miss given the constraints of the documentation."

"The thick client, SmartConsole, is not maximally stable; it often freezes and requires a lot of resources."

"Check Point Virtual Systems is a complete solution, but pricing can be better."

"If you compare the GUI with the Palo Alto and Forcepoint in the Cisco, they're very easy. Check Point, due to its design, is a little bit complex. They should make the GUI easy to use so that anyone can understand it easily, like Fortinet's GUI. Many companies end up using Fortinet because the GUI is very easy, and there's no need for training. They just deploy the box and do the configuration."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) cons

"We have deployed many firewalls and have faced two or three faulty devices that we have to replace over a year because their power supply was faulty."

"The user interface isn't user-friendly though."

"The tool is expensive."

"The tool's support is an area of concern where improvements are required."

"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."

"They need to improve their research team and they need to study their data to analyze it and build the product."

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

"It does not offer any recommendations on how to mitigate or control attacks."

More Sangfor NGAF cons

Pricing and Cost Advice

"They're a little high in price. The price could be lower."

"Everything in this field is very expensive."

"The licensing model has since transitioned to a cluster-based variant."

"The solution's licensing is based on the number of users of the VMs. We follow a pay-as-you-go model. Its pricing is competitive."

"The pricing is tremendous and super cheap. It is shockingly cheap for what you get out of it. I am happy with that. I hope that doesn't get reported back and they increase the prices. I love the pricing and the licensing makes sense. It is just assets: The more stuff that you have, the more you pay."

"The licesning has some good features. For example, the scaling feature is free of charge, allowing multiple scale-ups and scale-downs over a two-week period, which is pretty good."

"Although I am not in sales and cannot comment extensively on pricing, it is known that Check Point’s licensing can be complex. However, it is a similar experience to other gateways and not particularly unique for cloud protection."

"Its price is very fair."

More Check Point Cloud Firewall (formerly CloudGuard Network Security) pricing and cost advice

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

"It is one of the cheapest tools in the market."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"The pricing is reasonable."

"Sangfor is cheaper than competing vendors."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

911,493 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

14%

Outsourcing Company

14%

Financial Services Firm

Manufacturing Company

Comms Service Provider

12%

Financial Services Firm

11%

Manufacturing Company

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	132
Midsize Enterprise	53
Large Enterprise	142

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Network Security), we can clearly plan which modules we need to activate on a parti...

What needs improvement with Check Point CloudGuard Network Security?

The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds ha...

What is your primary use case for Check Point CloudGuard Network Security?

Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security in different forms in my organization. The primary task that Check Point solves ...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...

Prisma Cloud by Palo Alto Networks vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Comparisons

Compared 7% of the time

Azure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Fortinet FortiGate vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 3% of the time

Cisco Secure Firewall vs Check Point Cloud Firewall (formerly CloudGuard Network Security)

Compared 2% of the time

More Check Point Cloud Firewall (formerly CloudGuard Network Security) Competitors

Cisco Secure Firewall vs Sangfor NGAF

Compared 10% of the time

Fortinet FortiGate vs Sangfor NGAF

Compared 10% of the time

Sophos Firewall vs Sangfor NGAF

Compared 9% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 9% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 5% of the time

More Sangfor NGAF Competitors

Product Reports

Check Point Cloud Firewall (formerly CloudGuard Network Security)

Download Check Point Cloud Firewall (formerly CloudGuard Network Security) product report

Check Point Cloud Firewall (formerly CloudGuard Network Security) report

Sangfor NGAF

Download Sangfor NGAF product report

Also Known As

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP

Sangfor NGAF Firewall Platform

Overview

Check Point Cloud Firewall, previously known as CloudGuard Network Security, provides advanced threat prevention, centralized management, and VPN capabilities, enabling robust cloud security across various platforms including Azure and AWS.

Check Point Cloud Firewall delivers seamless cloud integration with advanced automated threat prevention and centralized management to enhance security posture. It offers auto-scaling for dynamic environments and a comprehensive policy enforcement framework in hybrid settings. The unified interface streamlines administration across cloud infrastructures, ensuring consistent protection and reducing risk.

What important features does it offer?

Advanced Threat Prevention: Safeguards against sophisticated threats.
Centralized Management: Simplifies control for cloud infrastructures.
Auto-scaling: Adapts to changing workloads seamlessly.
VPN Capabilities: Enables secure connections across environments.
Integration with Azure and AWS: Ensures compatibility with leading cloud services.
Visibility Tools: Enhanced monitoring and management for security enforcement.

What benefits can users expect?

Enhanced Security: Comprehensive threat management reduces risk.
Operational Efficiency: Automation capabilities streamline processes.
Cost Management: Efficient resource usage with auto-scaling reduces expenses.
Integration Flexibility: Adapts easily into existing cloud platforms.
Simplified Administration: Unified management reduces complexity.

In manufacturing and conglomerate sectors, Check Point Cloud Firewall is utilized for protecting cloud environments and implementing network segmentation. It supports secure cloud migration on AWS, Azure, and GCP, ensuring compliance, perimeter defense, and traffic inspection, facilitating sophisticated threat prevention strategies.

Check Point Software Technologies

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Physicians Choice Laboratory Services, Helvetica Insurance

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Sangfor NGAF