Try our new research platform with insights from 80,000+ expert users

Cisco IOS Security vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
373
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Cisco IOS Security
Ranking in Firewalls
20th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
48
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.2%, up from 17.7% compared to the previous year. The mindshare of Cisco IOS Security is 0.3%, up from 0.2% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Binoob John - PeerSpot reviewer
Rrobust network security and device authentication with advanced access control features
This solution should be implemented for most enterprise-level customers. It ensures that users accessing the corporate network or wireless network with their own devices are authenticated and authorized. As a network administrator, I can track who is accessing the network, what devices they are…
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortigate's most valuable feature is that it doesn't need a push policy when writing rules."
"We use the FortiGate Sandbox to detect zero-day vulnerabilities, such as anomalies or malware, that are unknown and have not yet been discovered."
"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"Virtual Domains (VDOMs) are a feature that we found valuable."
"Fortinet FortiGate offers several valuable features, particularly as an interface-based solution. Its design makes it easy to understand both incoming and outgoing network traffic through its interface."
"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."
"The application control features, such as Facebook blocking and Spotify blocking, are the most valuable."
"The product is very stable, easy to troubleshoot, and configure, so it has reduced the time it takes for support."
"The hardware is pretty stable. It's also a very good product performance-wise. Initially, it wasn't mature like a firewall and there were other leaders, but now they have included almost all the features of next-generation security. Basically, it's a good product to work with."
"The VPN is the most valuable feature."
"The most valuable features of Cisco IOS Security are the plenty of functionality it provides, many people are IT certified the usage, and the user interface is good."
"The most valuable features are DNS service and shell self-service within a network."
"Completely integrates branch offices with perimeter security."
"Cisco Technical Assistance Center works on a follow-the-sun concept and gives real 24x7 customer support, which is a great advantage when you have a service contract with them."
"Cisco is head-and-shoulders above all of the competition when it comes to technical support."
"One of the main features is that the hardware is extremely reliable."
"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."
"SSL VPN is the best feature."
"I think the tool has the feature to detect and kill ransomware in three seconds."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"In four steps one can configure the entire firewall."
"The capabilities are mostly within the box."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
 

Cons

"Reporting is limited to providing an external appliance for improving the reporting capabilities of the FortiAnalyzer. It does not offer a central management and is also sold separably as an appliance."
"The initial setup and configuration are not intuitive and require training."
"It does not have key authentication for admin access."
"The platform's interface could improve."
"Bandwidth usage in reporting could be improved for Fortinet FortiGate."
"We sometimes have issues with FortiGate's routing table in the latest firmware update. We had to downgrade the device because our customers complained about bugs."
"This product could be improved with Active directory integration and better handling in IPsec and GRE Tunnels."
"We would like to see a better training platform implemented."
"There's a technology called SD-WAN that we would like to see. We are unable to handle multiple connections or to automatically load balance. I would like to have a feature that enables us to automatically prepare for load balancing."
"Most of their features are meant for Cisco. You cannot integrate them with any other vendor."
"We cannot directly upgrade the system. The tool's deployment is also very difficult in legacy environments. The tool needs to have bigger ports as well."
"I would like to see much more embedded security that works and that isn't a bolt-on."
"Cisco is a scalable product, but it is expensive compared to other vendors."
"In the security portfolio from Cisco, the issue is marketing. Cisco is still seen primarily as an enterprise network player rather than being acknowledged as a security vendor."
"The user interface needs to be improved."
"Sometimes I find it difficult to manage. Some configurations are difficult for new engineers, for example."
"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The firewall system needs gradual improvements because there are more threats and challenges every day."
"The solution has too many bugs and these slow down the implementation."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"They need to increase the number of ports in the firewall."
"It does not offer any recommendations on how to mitigate or control attacks."
 

Pricing and Cost Advice

"The price of Fortinet FortiGate is reasonable."
"The license of Fortinet FortiGate should be reduced."
"Fortinet FortiGate is reasonably priced."
"It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs. It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors."
"Setup costs and pricing depends on many variables, but it's mostly affordable."
"It's expensive, but compared to the competition it's okay."
"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."
"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."
"It is an expensive solution."
"You can get a better price if you commit to a longer-term license. Three years, five years, or even seven or ten years will be cheaper than a three-month or one-year term."
"The pricing is expensive."
"The tool could be priced lower. If you want advanced services, then you need to purchase them."
"It is necessary to pay for a license in order to use the solution. It is on a yearly basis and the price is high."
"They have smart licenses that can be provided for one year, two years, three years, five years, and seven years. Alternatively, they have perpetual licenses available."
"The licensing is on a subscription basis, and it is fairly costly. I would prefer a one-time payment."
"Cisco IOS Security is not very expensive, and pricing depends on where you live. It's affordable for both individuals and institutions. On a scale from one to five, I would give Cisco's pricing a four."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"Sangfor is cheaper than competing vendors."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"The product is very cost-effective compared to other brands or vendors."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
860,168 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Educational Organization
12%
Comms Service Provider
8%
Manufacturing Company
7%
Computer Software Company
26%
Financial Services Firm
12%
Manufacturing Company
9%
Government
8%
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
9%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Cisco IOS Security?
Cisco IOS Security is a mature product with extensive capabilities, serving as the base for the defense layer. It off...
What is your experience regarding pricing and costs for Cisco IOS Security?
Pricing can be reduced. I rate the current price for the product a four out of ten.
What needs improvement with Cisco IOS Security?
While I do not have specific recommendations for improvement, pricing can be reduced.
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
IOS Security
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Arup Group, Brunel University London, City of Biel, Gobierno de Castilla-La Mancha, K&L Gates , New South Wales Rural Fire Service, Offshore Northern Seas, Transplace
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Cisco IOS Security vs. Sangfor NGAF and other solutions. Updated: June 2025.
860,168 professionals have used our research since 2012.