Forcepoint Next Generation Firewall vs Sangfor NGAF comparison

Forcepoint Next Generation Firewall vs. Sangfor NGAF

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 0.9%, up from 0.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Sangfor NGAF	1.1%
Forcepoint Next Generation Firewall	0.9%
Other	82.9%

Firewalls

Featured Reviews

Mageshwaran S

Solution Architect at airtel

Enables customers to manage security effortlessly with intuitive features and easy integration

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

Read full review

Ajit Pratap Kundan

MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees

Unified security management has improved traffic control and simplified remote workforce access

Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The Fortinet FortiGate IPS has a good interface and integration."

"This solution has a very friendly GUI and CLI as compared to other vendors."

"The solution is stable."

"In almost every case, I've experienced (or had customers experience) an ROI within 12 months, based on better performance for the same price or increased functionality for the same (or less) price."

"The most valuable features of Fortinet FortiGate are the different types of profiling. It has been the most effective for me. The WAF and the antivirus profile are the most effective in network protection."

"On a scale of one to ten, I rate this solution 10 out of 10."

"Fortinet solutions are very easy to implement, proven, certified and tested."

"Integrated management would probably be the most valuable feature."

More Fortinet FortiGate pros

"Technical support has been quite helpful in the past."

"When our customer needs some optimization, along with performance and security. If they want everything in one package, I recommend Forcepoint because they have everything."

"I have two offices, and I can route the internet of both offices using the same product. The connectivity is great."

"Previously, it was very difficult to handle all traffic because multiple locations experienced downtime, firewalls went down, and internet connectivity issues occurred, but after Forcepoint SD-WAN solutions were deployed across different locations, all traffic goes through Wi-Fi solutions, which are directly connected to Forcepoint Next Generation Firewall, making it very easy, time-saving, and improving security."

"The VPN is great."

"It is a scalable product. I know a customer who has deployed more than 4,000 firewalls in a single deployment."

"With Forcepoint, this process is simplified compared to others like Fortinet."

"The URL filtering is the most valuable aspect of the product."

More Forcepoint Next Generation Firewall pros

"The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall."

"SSL VPN is the best feature."

"The capabilities are mostly within the box."

"Sangfor is a good solution that provides a WAF and firewall solution; most other vendors, like Sophos and Fortinet and Cisco, only provide one solution, and that's a valuable feature of Sangfor."

"This product is very user-friendly, and its Layer 7 security is very much improved."

"The tool's performance is good."

"The support from Sangfor NGAF here in Pakistan is great."

"Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity."

More Sangfor NGAF pros

Cons

"The non-error conserve mode has room for improvement."

"It is complicated to manage different kinds of on-premise boxes."

"FortiWAN was supposed to help in doing intersite linking, but we've realized that most of the ISPs use BGP."

"Fortinet FortiGate SWG can be expensive for some customers."

"I think there could be more QoS features"

"The major problem with Fortinet is the support. We have often hardware malfunctions and software bugs and the support is slow."

"Its reporting can be improved. Sometimes, I don't get proper reports."

"The search tool needs improvement."

More Fortinet FortiGate cons

"Something that I've noticed that Forcepoint lacks, is the training that they offer to their end-customers"

"The initial setup of the Forcepoint Next Generation Firewall has areas that are difficult."

"Management could be better. They can improve the management. I think all our customers can't accept firewalls that have standalone management. So, they prefer Fortinet or Palo Alto. But overall, inspection and other features are working fine."

"The solution isn't scalable."

"They need to increase the local support here. There are also some bugs or fixes on which they need to work. They very well know about these bugs. In terms of licensing, I would like them to either increase the number of features in a single license or make licensing more flexible."

"However, we did have a horrible experience with Forcepoint in the past."

"The interface is complicated. It's difficult to locate all the necessary menus and functions."

"The optimization is not really ready. If you want very good optimization, you have to add it to the network."

More Forcepoint Next Generation Firewall cons

"It would be ideal if the solution offered SD-WAN capabilities."

"It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters."

"The reporting and log management could be improved."

"However, the maintenance cost can be a bit high."

"Our experience with its customer support was quite challenging."

"The tool's support is an area of concern where improvements are required."

"The product must provide more IPS features."

"The firewall system needs gradual improvements because there are more threats and challenges in the world every day."

More Sangfor NGAF cons

Pricing and Cost Advice

"In my opinion, the pricing of the product is reasonable."

"The licensing scheme of Fortinet is better than Cisco. It is more logical."

"The price is highly competitive when compared to other brands that offer similar functionality."

"The tool is a bit pricey for small businesses, but it is still bearable in terms of cost."

"The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone."

"The pricing is comprehensive and clear. You can easily understand what you are purchasing, including which features correspond to each license and maintenance contract. Overall, the information is straightforward. Additionally, compared to other vendors, their prices are competitive."

"Fortinet is competitive price-wise."

"There is a license required to use Fortinet FortiGate with all the features. It has to be updated with the threats on an ongoing basis for the signatures to prevent threats and a license is needed to receive those security updates."

More Fortinet FortiGate pricing and cost advice

"Forcepoint is very expensive but it's really secure."

"The pricing should be more competitive against other vendors in the market."

"The pricing of the solution is normally competitive with other products."

"We have just a subscription for the cloud, and this license is great. The license is so good."

"Forcepoint Next Generation Firewall is reasonable, it is priced the same as other firewalls."

"It is an affordable product. We purchase its yearly license."

"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."

"It is expensive."

More Forcepoint Next Generation Firewall pricing and cost advice

"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."

"It is one of the cheapest tools in the market."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"The price falls in the mid-range, neither exceptionally low nor high."

"The price is unmatcheable."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

11%

Construction Company

11%

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	370
Midsize Enterprise	138
Large Enterprise	195

By reviewers
Company Size	Count
Small Business	29
Midsize Enterprise	11
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?

In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...

What needs improvement with Forcepoint Next Generation Firewall?

The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...

What is your primary use case for Forcepoint Next Generation Firewall?

The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Catalyst SD-WAN vs Forcepoint Next Generation Firewall

Compared 6% of the time

Sophos Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Commvault Cloud vs Forcepoint Next Generation Firewall

Compared 5% of the time

Cisco Secure Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Fortinet FortiOS vs Forcepoint Next Generation Firewall

Compared 4% of the time

More Forcepoint Next Generation Firewall Competitors

Sophos Firewall vs Sangfor NGAF

Compared 12% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 8% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 6% of the time

More Sangfor NGAF Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Forcepoint Next Generation Firewall

Download Forcepoint Next Generation Firewall product report

Forcepoint Next Generation Firewall report

Download Sangfor NGAF product report

Sangfor NGAF

May 2026

Also Known As

Fortinet FortiGate Next-Generation Firewall

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Forcepoint Next Generation Firewall offers robust network protection with features like URL filtering and advanced threat protection, ensuring comprehensive security and operational efficiency across various infrastructures.

Forcepoint Next Generation Firewall integrates URL filtering and advanced threat protection, including intrusion prevention and DDoS prevention. The centralized management console provides application awareness, strong network segmentation, and SD-WAN capabilities. Its graphical interface enhances user experience, while efficient technical support and seamless integration offer stability and scalability. Companies use it for perimeter security, VPNs, and threat prevention, optimizing performance in diverse sectors.

What are the key features of Forcepoint Next Generation Firewall?

URL Filtering: Provides robust protection against malicious sites.
Advanced Threat Protection: Includes IPS and DDoS prevention.
Centralized Management: Simplifies control across multiple devices.
Application Awareness: Enhances security policies.
Network Segmentation: Ensures strong internal security structures.
SD-WAN Capabilities: Optimizes wide area network configurations.

What benefits should users expect when evaluating?

Operational Efficiency: Streamlined management with a centralized console.
Enhanced Security: Comprehensive threat protection and VPN solutions.
Scalability: Easily adapts to infrastructure growth.
Integration: Seamlessly works with existing architectures.

Forcepoint Next Generation Firewall is widely implemented in sectors including finance, education, and government, offering security for data centers and managing remote access with IPsec VPN tunnels, SSL VPNs, and site-to-site connectivity. Companies appreciate its use for Unified Threat Management and automatic optimization, ensuring data security and efficient network performance.

Forcepoint

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

California Department of Corrections and Rehabilitation (CDCR)

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Forcepoint Next Generation Firewall vs. Sangfor NGAF