No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 15, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point Cloud Firewall ...
Ranking in Firewalls
8th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
166
Ranking in other categories
Managed Security Services Providers (MSSP) (1st), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (5th), WAN Edge (3rd), Unified Threat Management (UTM) (4th)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Firewalls category, the mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.6%, up from 0.5% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)2.6%
Sangfor NGAF1.1%
Other96.3%
Firewalls
 

Featured Reviews

Viral Shaa - PeerSpot reviewer
IT Security Analyst at Eos Energy Enterprises, Inc.
Cloud security has unified hybrid policies and now protects critical energy workloads continuously
I would say Check Point Cloud Firewall (formerly CloudGuard Network Security) is valuable due to its hybrid cloud security features. It offers granular policy management across the on-premises and cloud environments, giving administrators consistent control for configuration drift. We need to change the policy and the inbound and outbound traffic settings, indicating what traffic must be blocked or allowed, and this capability with Check Point provides significant input into our security strategy. Check Point Cloud Firewall (formerly CloudGuard Network Security) provides unified security management across both hybrid clouds and on-premises environments. Unified security management affects my security operations positively, as we maintain critical systems on the cloud that require strong security and air gap networks. This cloud-native routing and policy installation helps close gaps in protecting critical applications and environments from exposure to the public cloud. From an administrator's perspective, Check Point Cloud Firewall (formerly CloudGuard Network Security) enhances our organization with clearer and more intuitive logging, making decisions easier to understand without deep investigation. In the CloudGuard UI, I can see which threats have triggered alerts, and this information is available on the unified dashboard that provides details of the threat analysis upon alert. As a small team, we log into the console to check specific alerts for high or low network usage or machine shutdowns. If needed, I tune the configuration policy, and the visualizing tools with reporting functionality simplify tracking changes made on the firewall, including the relevant source IP or device names. We ingest logs into our SIEM for detailed oversight, which allows us to monitor any administrative changes. Check Point Cloud Firewall (formerly CloudGuard Network Security) has significantly reduced our organizational risk. We clearly understand our threat landscape and the associated risks. Onboarding the CloudGuard solution directly into our cloud environment has significantly lowered the risks throughout the network and it is easy to launch. When we assess our security posture with third-party assessments, we gain granular visibility into our network pre- and post-CloudGuard installation, showing how we have addressed significant risks and secured vulnerabilities.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Monitoring using SmartConsole and all its features is extremely easy, and I find SmartEvent an excellent monitoring tool for spotting threats and user behaviour."
"I would recommend Check Point as it's an effective tool, and implementation is very easy."
"My advice to others is the solution is very stable, and reliable, and they should ensure that they invest in Check Point."
"Check Point CloudGuard Network Security provides us with unified security management across hybrid clouds as well as on-premise."
"The solution is easier to manage than an on-premise firewall. It is easy to manage. The use of dynamic objects for these gateways made it easy to create the right rules and the right policies. Integration with Azure is also easy where we have to just add the subnets. In an on-premise setup, we have to add everything from scratch. We can automate a lot of actions."
"The most valuable feature is the monitoring. We can easily monitor what kind of stuff comes over to our network and we can then check the dashboard and work accordingly."
"It is dynamic and agile, and its features and utilities continuously improve and evolve."
"The initial setup is pretty easy."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"The most valuable feature of Sangfor NGAF is its integration."
"The solution is quite safe and good, and furthermore, it is very good for different environments."
"The support from Sangfor NGAF here in Pakistan is great."
"The capabilities are mostly within the box."
"The VPN connectivity feature is really nice."
 

Cons

"The initial setup was a bit complex. Is take two or three months to implement and we have to continuously work on it."
"We faced issues while upgrading our CloudGuard Network Gateway. When we tried to use the template that Check Point offers on their site, it was not available for the second to the latest version, so I was forced to upgrade my management server. That was very challenging for us."
"The reporting needs enhancement. Currently, we are not always aware of the gateways' status, like CPU and RAM usage."
"The pricing is sometimes more expensive than some vendors."
"The memory and hard disk capability could be strengthened."
"They can improve their security features to the next advanced level so that their efficiency in catching the malware can become 100%, and there is no scope for any data loss or leakage from the system due to any issue."
"We are having issues with updatable objects in the Scale Set solution. It needs to be fixed by Check Point."
"The pricing is too high."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"It would be ideal if the solution offered SD-WAN capabilities."
"The solution has too many bugs and these slow down the implementation."
"The product must provide more IPS features."
"They need to increase the number of ports in the firewall."
"Our experience with its customer support was quite challenging."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense."
 

Pricing and Cost Advice

"It's not very expensive. It isn't very cheap either. Its price is okay. It depends on how much money you have. It might be expensive for some companies. Its licensing is on a yearly basis."
"The tool's pricing is reasonable."
"The tool's pricing is not cheap."
"Pricing of CloudGuard is pretty fair when you have a single account. It's comparable with other cloud providers. But for our use case, it got really pricey when we had to deploy multiple CloudGuards on multiple accounts in different regions, because you can't have CloudGuard protecting multiple regions. That's the big thing."
"The price of Check Point CloudGuard Network Security is very high compared to other solutions, such as Fortinet FortiMail. For the over 2,000 mailboxes we use with the solution it is very expensive."
"They're a little high in price. The price could be lower."
"Handling costs is not my department. Licensing has been quite acceptable. It is a bit easier now, but when I began working with CloudGuard, it was a bit too technical."
"It is not expensive."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"It is one of the cheapest tools in the market."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"Sangfor is cheaper than competing vendors."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
904,146 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
16%
Financial Services Firm
10%
Outsourcing Company
10%
Manufacturing Company
7%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
10%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business72
Midsize Enterprise39
Large Enterprise80
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is comparatively conservative in terms of pricing; it is not a very expensive product. If you are a Check Point shop with multiple ...
What needs improvement with Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is definitely lagging behind its peers. I am not sure what the reason is. Compared to Palo Alto, they are not there in terms of cap...
What is your primary use case for Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is a cloud-native application protection platform and a suite of multiple products. We primarily use it for our hybrid multi-cloud ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Physicians Choice Laboratory Services, Helvetica Insurance
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Sangfor NGAF and other solutions. Updated: June 2026.
904,146 professionals have used our research since 2012.