Cisco Secure Access vs Sangfor NGAF comparison

Cisco and Sangfor are both solutions in the Firewalls category. Cisco is ranked #16 with an average rating of 8.3, while Sangfor is ranked #23 with an average rating of 8.1. Cisco holds a 0.2% mindshare in Firewalls, compared to Sangfor’s 1.1% mindshare. Additionally, 100% of Cisco users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco Secure Access and Sangfor NGAF based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cisco Secure Access vs. Sangfor NGAF Report (Updated: December 2025).

Buyer's Guide

Cisco Secure Access vs. Sangfor NGAF

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Cisco Secure Access is 0.2%, up from 0.0% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	18.8%
Cisco Secure Access	0.2%
Sangfor NGAF	1.1%
Other	79.9%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Kartik Amin

Network Operations Engineer at Astreya Partners, Inc.

Secure access has unified zero trust and web protection while AI assistance automates tasks

From a feature perspective, I have not experienced any issues, drawbacks, or shortcomings. However, the cost of Cisco's products and licensing is high. My clients usually prefer cheaper options if possible. Mid-size or smaller businesses typically cannot afford Cisco Secure Access. Additionally, there is a steep learning curve, as it is very intensive. Someone with significant knowledge can work on it, but a new professional would have to spend considerable time to get accustomed to it. It is hard to find engineers who can work on it. Overall, we get what we pay for, as it is a pretty good feature and service. The pricing of Cisco's products and licensing is higher than competitors. If they could be more reasonable, that would help. The support offered for two years also has higher costs. Overall, the client's IT budget gets affected. It was challenging to learn because, as mentioned, it has a significant learning curve and requires considerable training to become proficient.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortinet FortiGate has positively impacted my organization by allowing us to replace all the firewalls in other locations, as around 90% of our company operates on Fortinet."

"FortiAnalyzer's capability to provide detailed reporting based on various criteria is highly valuable."

"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."

"Fortinet FortiGate provides excellent security against ransomware attacks."

"The IPsec tunnels are very easily created, and quite interoperable with devices from other vendors."

"The solution's application control is very powerful."

"FortiGate improved our security. It's one of the best hardware firewalls."

"It is a good source for firewall protection."

More Fortinet FortiGate pros

"The integrated capabilities of Cisco Secure Access deliver significant ROI through reduced mean time to detect (MTTD) and mean time to respond (MTTR), with resource efficiency notably improved as fewer personnel are needed for triage and system management."

"Cisco Secure Access provides application-level access, removes the dependency of VPN, and user authentications are continuously based on identity, device, and risk, which is an add-on there."

"I find the zero trust approach helpful and beneficial in securing standard applications, which means you are accessing the applications directly instead of giving privilege to access the network itself."

"The impact Cisco Secure Access has on protecting my company from threats such as phishing and ransomware is significant."

"Any tool that provides telemetry through logging is a particularly good fit for us because we have to really automate our monitoring."

"From my experience, Cisco Secure Access is very stable and has not crashed."

"The main feature of interest to me and the customers is DNS security and Integrated Secure Web Control (ISWC)."

"I find the posture checking feature of Cisco Secure Access the most valuable."

More Cisco Secure Access pros

"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."

"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."

"The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately."

"We've found the technical support to be helpful."

"The level of support provided to local companies is good. They transform their application control and other settings according to that country."

"It offers application control features."

"The VPN connectivity feature is really nice."

"SSL VPN is the best feature."

More Sangfor NGAF pros

Cons

"I would like to see improvements made to the dashboard and UI, as well as to the reporting."

"It's one of the more expensive brands."

"Technical support for this solution can be improved."

"Vulnerability scanning could be improved."

"To some degree, it's almost a question as to why some of this stuff isn't simpler. For example, for an AP deployment, while it's integrated, the number of steps that you have to go through in order to get the AP up, seems like a lot."

"FortiGate can only retain logs for 24 hours or 7 days. I'm not sure if it holds them for a longer period, such as for a month. It will be useful for assessing our strategy and monitoring our environment without investing in FortiGate Analyzer. It would be beneficial if Fortinet could enhance the FortiGate by providing more statistical and monitoring views for a longer timeframe, rather than requiring access to FortiGate Analyzer."

"I would like the deployment and integration of this product to be easier. We should be able to deploy the features more easily and have different types of access. It should be easier to integrate. Currently, we need to develop APIs to use this interface."

"We can't identify which users are causing challenges when we have issues."

More Fortinet FortiGate cons

"Having been associated with Cisco for more than fifteen to twenty years, I find it increasingly difficult to get tech support these days. Although Cisco is reliable, the process to raise a support ticket has become more complex, requiring specific user accounts and access to specialized platforms."

"From a licensing perspective, Cisco can improve."

"It is confusing. When you look at the prices, you have different licensing and years of licensing that you have to purchase. Additionally, it's unclear what service you get from those licenses regarding end-user support. We have a representative who has to walk me through it every time."

"Cisco is not well accepted in the market since they are somewhat behind their competitors."

"It is expensive."

"The way that we're using Cisco Secure Access today, it doesn't scale with the growing needs of our organization, however, if we leveraged more of the cloud services, it would fit better."

"The licensing is confusing."

"This is my first time in healthcare after being in commercial space for a long time. It's always a challenge because we can't just turn stuff off as we could in the commercial space, since it may interfere with patient care. It takes longer to understand what's going on, so anything that could help give us a faster understanding of what's happening, why it's there, and if it's a risk to us would be helpful."

More Cisco Secure Access cons

"The tool's support is an area of concern where improvements are required."

"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."

"The product must provide more IPS features."

"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."

"Our experience with its customer support was quite challenging."

"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."

"Scalability for any network device is not very easy in terms of vertical scalability."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

More Sangfor NGAF cons

Pricing and Cost Advice

"It is cheaper and more competitive compared to other options. For example, when comparing Palo Alto products to others, Palo Alto tends to be more expensive. If you compare Cisco's platform, including Cisco Meraki, with Fortinet products, you'll notice that Cisco's offerings are generally higher priced than Fortinet's firewall solutions."

"Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate."

"I think the price of Fortinet FortiGate is very reasonable."

"The pricing is reasonable."

"The price depends on the size of the company. From the beginning, you just want to know the internet bandwidths, speed, and the number of users to be able to offer the right product and model. They have a lot of products in FortiGate according to the size of the company, like 200D and 300D."

"We pay about $4,000 for a yearly license, and there aren't any additional fees."

"We find the most valuable aspect of this solution is the price. It is affordable, and cheaper than other firewalls."

"Work through partners for the best pricing."

More Fortinet FortiGate pricing and cost advice

"For what you get, it's a fair price in comparison to other products."

"The pricing, setup costs, and licensing for Cisco Secure Access have been very competitive compared to other platforms. I believe that if Cisco continues to improve costs or offers something similar to a Cisco credit, it would attract more customers."

"The price falls in the mid-range, neither exceptionally low nor high."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"It is one of the cheapest tools in the market."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

"The product is very cost-effective compared to other brands or vendors."

"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"The pricing is reasonable."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Manufacturing Company

12%

Computer Software Company

11%

Financial Services Firm

Construction Company

Manufacturing Company

11%

Financial Services Firm

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	188

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What is your experience regarding pricing and costs for Cisco Secure Access?

Cisco Secure Access regularly requires patches that need to be installed. During downtime or after hours, patches nee...

See all answers

What is your primary use case for Cisco Secure Access?

I use Cisco Secure Access for Secure Access Service Edge (SASE), which provides me with secure identity-based access ...

See all answers

What advice do you have for others considering Cisco Secure Access?

Multi-organization might be a feature on Cisco Secure Access, but my clients are private companies that haven't merge...

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 6% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Umbrella vs Cisco Secure Access

Compared 38% of the time

Netskope vs Cisco Secure Access

Compared 10% of the time

FortiSASE vs Cisco Secure Access

Compared 10% of the time

Prisma Access by Palo Alto Networks vs Cisco Secure Access

Compared 7% of the time

More Cisco Secure Access Competitors

Sophos Firewall vs Sangfor NGAF

Compared 19% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 6% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 5% of the time

Netgate pfSense vs Sangfor NGAF

Compared 5% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 5% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2026

Download Fortinet FortiGate product report

Buyer's Guide

Cisco Secure Access

January 2026

Download Cisco Secure Access product report

Buyer's Guide

Sangfor NGAF

January 2026

Download Sangfor NGAF product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Cisco Secure Access is a comprehensive Security Service Edge (SSE) solution (a key component of a SASE solution) that addresses the complexities of securing a hybrid enterprise. Cloud-delivered and grounded in zero trust, it delivers a unique blend of user simplicity and IT efficiency for frictionless, secure access to all applications—SaaS (with gen AI), private apps, and the internet—regardless of user location or device. Secure Access protects users, data, and devices against relentless, sophisticated, and constantly evolving threats including AI-driven attacks and identity breaches.

Provides all core SSE components (ZTNA, SWG, CASB, and FWaaS) plus extended capabilities.

Includes VPN-as-a-Service (VPNaaS), data loss prevention (DLP), AI Assistant, visibility/control/guardrails for generative AI use, digital experience monitoring (DEM), reserved IP, remote browser isolation (RBI), DNS-layer security, flexible security enforcement (in cloud or on-premises), policy verification, and more.
Protects users as they seamlessly access resources and apps with no extra steps needed, regardless of protocol, port, or level of customization
Simplifies IT operations through a single client, single dashboard, single license, and unified policies.
Lowers risk with least privilege, granular controls backed with unmatched threat intelligence of Cisco Talos.
Eases interoperability with other products from Cisco and third-party vendors with common administrative controls, data structures, and policy management.

Robust integrations

Integrates with Cisco Identity Intelligence to protect against the startling increase in identity-based attacks.
Integrates with many SAML Identity Providers (IDPs) such as AD, Azure AD, Okta, Ping, etc.
Integrates with Cisco offerings including SD-WAN, Splunk, XDR, Thousand Eyes, third party technologies such as Menlo RBI, Chrome Enterprise Browser, and AppOmni for SSPM.

Cisco

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

1. IBM 2. Microsoft 3. Amazon 4. Google 5. Apple 6. Cisco Systems 7. Oracle 8. Intel 9. HP Inc. 10. Dell Technologies 11. Verizon Communications 12. AT&T 13. Comcast 14. T-Mobile 15. Sprint 16. Vodafone 17. Orange 18. BT Group 19. Deutsche Telekom 20. Telefonica 21. Nokia 22. Ericsson 23. Samsung Electronics 24. Sony 25. Panasonic 26. LG Electronics 27. Siemens 28. General Electric 29. Ford Motor Company 30. General Motors 31. Toyota Motor Corporation 32. Volkswagen Group

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Cisco Secure Access vs. Sangfor NGAF

December 2025

Free Report: Cisco Secure Access vs. Sangfor NGAF

Find out what your peers are saying about Cisco Secure Access vs. Sangfor NGAF and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Cisco Secure Access vs. Sangfor NGAF report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.