No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Quantum Force (NGFW) vs Fortinet FortiGate vs Sangfor NGAF comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Check Point Quantum Force (NGFW) is 3.0%, up from 2.9% compared to the previous year. The mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate16.0%
Check Point Quantum Force (NGFW)3.0%
Sangfor NGAF1.1%
Other79.9%
Firewalls
 

Featured Reviews

San Naing Htun - PeerSpot reviewer
Network Engineer at a tech services company with 51-200 employees
Has improved threat prevention and protection but presents deployment and licensing challenges
The best features Check Point Quantum Force (NGFW) offers are AI-powered threat prevention, zero-day protection, unified management, and scalability. These features have helped me in my daily work or my organization by allowing us, as a SAAS company operating across AWS, Azure, and handling external partner access or a multi-tenant model, to preemptively stop unknown attacks, which is critical. Check Point Quantum Force (NGFW) has positively impacted my organization as it is a high-end enterprise grade firewall. I have noticed that it is very good if your SAAS business has high traffic volume, serious threat prevention requirements, and you are ready for the investment.
Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at a consultancy with 51-200 employees
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Check Point Quantum Force (NGFW) has positively impacted our organization by notably reducing intrusion prevention attempts, as we see a reduction in phishing-related malware that were previously bypassed but now are blocked, leading to reduced security incidents."
"The detection rate for any cyberattacks/suspicious activity is very high (more than 90%)."
"Having a hardware solution that allows our remote users to connect securely to our business is extremely valuable."
"The solution's most valuable feature is its adaptability and configurable nature."
"It creates granular security policies based on users or groups to identify, block or limit the usage of web applications."
"The most valuable feature of the solution is its efficiency."
"The most valuable feature is that we are protected against zero-day threats."
"Check Point NGFW is a fantastic product, and it is also easy to integrate with third-party devices."
"Fortinet FortiGate is a firewall that protects all network data."
"The scalability is good in Fortinet FortiGate."
"It's quite comfortable to handle the FortiGate firewall."
"We are using this solution to filter communication to and from the website or our site, and we also use it to create a VPN connection for all of our sites in the world."
"We never had any issues or problems related to stability."
"The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, the Fortinet FortiGate does not require a controller for the access points."
"SD-WAN has had a positive impact by reducing the operational costs in terms of headcount and management."
"The IPsec tunnels are very easily created, and quite interoperable with devices from other vendors."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"The solution is quite safe and good, and furthermore, it is very good for different environments."
"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"It is a stable solution."
"SSL VPN is the best feature."
"It offers application control features."
"It seems to be a durable, stable product."
 

Cons

"If you are working within a big organization, you may have some CPU and memory utilization problems."
"All the advanced features of automation, especially the first installation of tunnels, need improvement."
"Something worth mentioning is the need for Spanish support and better representation for teams in the Latin American area."
"In our particular case, we have different web applications developed by the same organization, however, that requires a specialized protection element such as a WAF. Having this service or feature within the same solution would be very valuable."
"Check Point would benefit from having a single console for both basic and policy configurations."
"We need east/west Check Point firewalls in order to do micro-segmentation."
"My customers complain that the interface isn't user-friendly."
"Check Point should include additional management choices; for example, Check Point does not offer full management support via browser."
"I think that the infrastructure for the VPN could be improved. The way that it is bundled also made it difficult to use and sell as it is too expensive."
"The support costs and licensing are sometimes so expensive."
"When we cluster the two Fortinet FortiGate boxes together we have some issues."
"It would be helpful to have a better tool for migrating all policy rules using an automatic script."
"There are some issues with the scalability of Fortinet FortiGate. Certain products and models need to be scalable, but they're not."
"There is room for improvement related to the logging and reporting aspect."
"This product could be improved with active directory integration and better handling in IPsec and GRE Tunnels."
"Overall it is not scalable."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
"The user interface isn't user-friendly though."
"Lacks consistency in terms of filtering certain websites and applications."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
 

Pricing and Cost Advice

"An annual technical support fee is paid to maintain the equipment with the most updated licenses and versions and thus avoid vulnerabilities"
"It falls in a moderate price range, not as inexpensive as some alternatives but not as costly as Palo Alto."
"It comes with a significant price."
"It is quite an expensive product, although security is a top priority."
"The prices are good for its features. The benefit of its license is we get timely security prevention updates. The price is good for the technology that we get."
"Licensing is pretty straightforward and is based on the blades available, such as NGFW, NGTP, and NGTX."
"Check Point Firewall costs more compared to the other firewalls in the markets, as pricing is little high. However, it is easy to take the license and use it in the firewall."
"Check Point NGFW is a little expensive."
"Work through partners for the best pricing."
"The price is high compared to some of the other solutions."
"The price is relatively expensive compared to other solutions which are providing similar features."
"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."
"The solution's pricing is competitive."
"The price is fair compared to the other competitors."
"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."
"Fortigate's pricing is competitive."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"The price could be more competitive."
"The pricing is reasonable."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."
"The product is very cost-effective compared to other brands or vendors."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
896,298 professionals have used our research since 2012.
 

Comparison Review

it_user216600 - PeerSpot reviewer
Senior Technical Consultant with 51-200 employees
Jan 3, 2016
Sophos UTM vs. Fortinet FortiGate
I have used both Sophos and Fortinet products in production and I have found the Sophos UTM appliances (hardware and virtual) to be a better fit most of the time -- with a few caveats which I will touch on below. In both instances, the transition from TMG will be mostly straightforward. The main…
 

Top Industries

By visitors reading reviews
Outsourcing Company
13%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
5%
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Manufacturing Company
11%
Comms Service Provider
10%
Financial Services Firm
10%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business163
Midsize Enterprise94
Large Enterprise199
By reviewers
Company SizeCount
Small Business367
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

How does Check Point NGFW compare with Fortinet Fortigate?
I have experience on both from Disti and channel experience. Please find below my comments (nothing new as such). -Ch...
Which would you recommend - Azure Firewall or Check Point NGFW?
Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall ...
What is your experience regarding pricing and costs for Check Point NGFW?
Our experience with pricing for Check Point Quantum Force (NGFW) has been mixed. The initial setup costs were fairly ...
Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...
 

Also Known As

Check Point NG Firewall, Check Point Next Generation Firewall
Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Control Southern, Optimal Media
Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Fortinet, Netgate, Sophos and others in Firewalls. Updated: April 2026.
896,298 professionals have used our research since 2012.