Check Point Harmony SASE (formerly Perimeter 81) vs Sangfor NGAF comparison

Check Point Harmony SASE (formerly Perimeter 81) vs. Sangfor NGAF

Download the complete report

Helped 902,988 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Check Point Harmony SASE (f...

Ranking in Firewalls

22nd

Average Rating

8.8

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Secure Web Gateways (SWG) (9th), Anti-Malware Tools (14th), Enterprise Infrastructure VPN (8th), ZTNA as a Service (8th), ZTNA (3rd), Secure Access Service Edge (SASE) (8th)

Sangfor NGAF

Ranking in Firewalls

21st

Average Rating

8.0

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2026, in the Firewalls category, the mindshare of Check Point Harmony SASE (formerly Perimeter 81) is 1.0%, up from 0.1% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Sangfor NGAF	1.1%
Check Point Harmony SASE (formerly Perimeter 81)	1.0%
Other	97.9%

Firewalls

Featured Reviews

Nasseer Qureshi

Pre Sales Consultant at Redington Group

Delivers seamless and secure remote access while enhancing security posture

Check Point Harmony SASE (formerly Perimeter 81) offers strong features, but there are areas that could be improved. One area for improvement is integration with third-party identity providers. It works with standard SAML and SSO, but we would prefer deeper integrations with solutions such as Ping for more advanced identity-based policies. Additionally, a mobile-specific client or lightweight agent would be helpful for securing access from smartphones, especially in BYOD environments. We would appreciate more granular reporting and analytics, including better drill-down capabilities to investigate specific users or app activity. The logs are comprehensive, but filtering them can sometimes feel messy. The user interface on the management portal could be more intuitive, especially when managing multiple sites or remote offices. Some of the policy configuration steps are nested and could be streamlined.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Harmony SASE helps us to manage compliance by regulating the amount of access to each department and user. We control the relevant apps and websites, which can be accessed from company-owned devices. Harmony SASE uses its own threat intelligence data from the cloud for threat prevention, and detect and manage threats with their own threat intelligence data and SASE firewall features."

"The setup is really easy...I rate the support team a ten out of ten."

"HTTPS decryption is a valuable service and not always found in cloud-based secure web gateways."

"The scalability is good, and I'd give it an eight out of ten."

"Customer service is excellent."

"Perimeter81 allows us to develop software as a service (SaaS) collaboratively in a safe and efficient manner."

"Distributing the agent was very simple, allowing us to enforce security posture on our devices (i.e. S1, Disk-encryption, etc.)."

"The tool is easy to use and set up."

More Check Point Harmony SASE (formerly Perimeter 81) pros

"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."

"SSL VPN is the best feature."

"The capabilities are mostly within the box."

"In terms of the most valuable features, the IPS report is quick and updated, and performance is also valuable."

"We can utilize our own network rather than paying for a private one."

"We are Sangfor Gold partners and I'd recommend this solution for the SMB market, as it is cost-effective and reliable."

"So far, the performance and reliability of the product have supported our company's critical network traffic."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

More Sangfor NGAF pros

Cons

"My customers want more remote functionality. They need another routing option after they connect to the enterprise intranet. For example, let's say a user tries to connect to a remote branch office and headquarters through Harmony Connect. They need a local breakout after connecting to the headquarters, especially in China. They need to put local breakout in the Chinese internet. The current version cannot do something like this."

"They could improve on the available public documentation."

"Providing USB control in a Linux environment will give more control over data security."

"Check Point Harmony SASE (formerly Perimeter 81) could be improved as there's complexity during initial configuration, and there's a learning curve."

"The connectivity issue can be improved as at times it lags when connecting to their server."

"More report and alert options would be useful. The reports are not capable of giving important information from some parts of the system - like inventory details, etc."

"The tool could be more user-friendly."

"Branding could be better."

More Check Point Harmony SASE (formerly Perimeter 81) cons

"The interface and user experience are horrible."

"The tool is expensive."

"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."

"We have deployed many firewalls and have faced two or three faulty devices that we have to replace over a year because their power supply was faulty."

"It would be ideal if the solution offered SD-WAN capabilities."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

"The setup phase is quite complex."

"I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense."

More Sangfor NGAF cons

Pricing and Cost Advice

"Overall I am very happy with the solution’s flexibility and pricing."

"Annual licenses cost $30 to $40 each."

"I would rate Harmony Connect's pricing at six out of ten. It wasn't particularly expensive, but it wasn't super cheap either."

"I consider the product to be a medium-priced solution. There are no additional costs attached to the tool."

"The product is neither cheap nor expensive."

"The cost of the solution's licenses depends on the particular use cases."

"The pricing of Check Point is relatively high when compared to other competitors like Palo Alto and Fortinet. While Palo Alto may be on the higher side in terms of cost, Check Point's pricing is similar to that of Fortinet. In some cases, Check Point offers better value for the features it provides. We initially considered other options but ultimately decided to purchase hardware that came with three years of iOS. This approach eliminated the need for any additional costs associated with Check Point. I would rate it 10 out of 10."

"The solution is priced appropriately considering its uses. For an essential license, a user pays only 30 USD per month. For an enterprise version, the prices can be negotiated with the company."

More Check Point Harmony SASE (formerly Perimeter 81) pricing and cost advice

"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."

"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."

"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."

"It is one of the cheapest tools in the market."

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."

"The price is unmatcheable."

"The pricing is reasonable."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,988 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

12%

Financial Services Firm

Computer Software Company

Comms Service Provider

Financial Services Firm

11%

Manufacturing Company

11%

Comms Service Provider

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	53
Midsize Enterprise	19
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

What is your experience regarding pricing and costs for Harmony Connect?

I am not aware of the pricing, setup cost, and licensing, but I would say the setup cost is our resource, and we have invested many hours into this project.

What needs improvement with Harmony Connect?

When I'm raising a ticket for Check Point Harmony SASE (formerly Perimeter 81), it's a bit technical for non-technical people. It could have been clearer and easier for them to raise a ticket becau...

What is your primary use case for Harmony Connect?

I have experience with this product as a user. Currently, the Check Point product that I worked with mostly was the Firewall, the R81. I'm not working with Check Point WAF, Web Application Firewall...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...

Prisma Access by Palo Alto Networks vs Check Point Harmony SASE (formerly Perimeter 81)

Comparisons

Compared 8% of the time

Zscaler Zero Trust Exchange Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 6% of the time

Cato SASE Cloud Platform vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 4% of the time

OpenVPN Access Server vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 3% of the time

Netskope vs Check Point Harmony SASE (formerly Perimeter 81)

Compared 3% of the time

More Check Point Harmony SASE (formerly Perimeter 81) Competitors

Fortinet FortiGate vs Sangfor NGAF

Compared 11% of the time

Sophos Firewall vs Sangfor NGAF

Compared 10% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 9% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 8% of the time

More Sangfor NGAF Competitors

Product Reports

Check Point Harmony SASE (formerly Perimeter 81)

Download Check Point Harmony SASE (formerly Perimeter 81) product report

Check Point Harmony SASE (formerly Perimeter 81) report

Sangfor NGAF

Download Sangfor NGAF product report

Also Known As

Check Point Quantum SASE

Sangfor NGAF Firewall Platform

Overview

Check Point Harmony SASE, formerly Perimeter 81, offers robust security features like split tunneling, MFA, and Zero Trust Network Access focused on secure remote access and optimized connectivity for remote teams.

Check Point Harmony SASE delivers advanced security through a user-friendly interface, efficient VPN connections, and a centralized management console. It enhances security with real-time threat intelligence from ThreatCloud and traffic management via built-in optimization. Firewall as a Service and Secure Web Gateway safeguard against unauthorized access and phishing. While users seek enhanced networking customizations and better integration with identity providers, there's an emphasis on improving reporting, real-time analytics, and policy management. Requests also include a Chrome extension, traffic balancing, and simplified configuration to address some resource-intensive aspects.

What are the key features of Check Point Harmony SASE?

Split Tunneling: Manages internet traffic more efficiently by routing only necessary data through the VPN.
MFA: Provides an additional layer of security through multi-factor authentication.
Zero Trust Network Access: Ensures secure connections by validating every user and device.
ThreatCloud: Enhances protection with real-time threat intelligence.
Firewall as a Service: Protects against unauthorized access and threats.
Secure Web Gateway: Prevents phishing attacks and unauthorized internet access.

How can organizations benefit from using Check Point Harmony SASE?

Improved Security: Real-time threat intelligence and robust authentication minimize risks.
Centralized Management: Simplifies control over network security and policies.
Optimized Connectivity: Efficient traffic routing enhances user experience.
Flexible Integration: Seamlessly integrates with existing IT infrastructure, enhancing strategic security deployment.

Check Point Harmony SASE is used across industries for secure remote access and connectivity, protecting sensitive data, and managing access to corporate resources. It is ideal for those with hybrid cloud models and requires comprehensive security measures combined with existing IT infrastructures to meet specific industry demands.

Check Point Software Technologies

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Aqua Security, Cognito, Multipoint, Kustomer, Postman, Meredith

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Check Point Harmony SASE (formerly Perimeter 81) vs. Sangfor NGAF