No more typing reviews! Try our Samantha, our new voice AI agent.

Forcepoint ONE vs Sangfor Internet Access Gateway (IAG) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 4, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Forcepoint ONE
Ranking in Secure Web Gateways (SWG)
13th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
20
Ranking in other categories
Cloud Access Security Brokers (CASB) (13th), Secure Access Service Edge (SASE) (14th)
Sangfor Internet Access Gat...
Ranking in Secure Web Gateways (SWG)
31st
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
3
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Secure Web Gateways (SWG) category, the mindshare of Forcepoint ONE is 1.7%, up from 1.6% compared to the previous year. The mindshare of Sangfor Internet Access Gateway (IAG) is 0.8%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Secure Web Gateways (SWG) Mindshare Distribution
ProductMindshare (%)
Forcepoint ONE1.7%
Sangfor Internet Access Gateway (IAG)0.8%
Other97.5%
Secure Web Gateways (SWG)
 

Featured Reviews

reviewer2765397 - PeerSpot reviewer
Security Engineer at a tech services company with 201-500 employees
Delivers reliable policy control and improves data protection across cloud and endpoints
The best features Forcepoint ONE offers include the DLP engine with predefined policies for common data types that help us determine and use it directly, as well as cloud app control to protect SaaS platforms like Microsoft 365 and Google Workspace. We are also helped by the Incident Management Dashboard for quick review and policy tuning, along with integration with Forcepoint Endpoint DLP, allowing us consistent enforcement across devices. The DLP engine and Incident Management Dashboard have made our work much more efficient in daily operations, as detection accuracy reduces the need for manual review, and the centralized dashboard helps us quickly identify which incidents need escalation or policy adjustment. It shortens response time for our clients, allowing their security team to view incidents in real-time, classify them easily, and focus on genuine risks instead of sorting through false positives, and it simplifies reporting and audit preparation since all the relevant data is consolidated in one place. One feature that really stands out for us and our client is the seamless integration between Forcepoint ONE and the on-premise Forcepoint DLP, as it allows consistent data protection policy across both cloud and endpoint environments, making it much easier to manage. Forcepoint ONE has positively impacted our organization by streamlining DLP policy management and reducing time spent on troubleshooting and manual reviews, providing faster compliance reporting for internal needs and compliance with local regulation, and improving visibility into how sensitive data moves across cloud and endpoint environments. Overall, it helps our customers operate more efficiently and confidently in enforcing data protection controls.
Muhammad Asif Shaikh - PeerSpot reviewer
Deputy GM - IT at a manufacturing company with 1,001-5,000 employees
Designed to provide comprehensive and secure internet access with high visibility into users
After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with its own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The biggest thing that I like about this product is that it's easy to use and teach. When we have somebody new starting to work with the product, it's easy to teach them. It's also easy to use the product as it does so much."
"We are able to verify what is getting saved out onto the cloud. It allows us to have some DLP rules, since we have to be HIPAA compliant. If some personal health information has been uploaded to Office 365, then we are able to detect that sort of thing and account for it. We have set up rules to prevent people from doing that."
"The initial setup was straightforward, which was a huge win. That mostly goes to the fact that they are agentless. We didn't have to sit there deploying thousands of agents and all the things that go along with that type of deployment. We were up and running very quickly."
"It is overall a good solution for securing against data breaches and attacks, but there is no 100 percent guarantee in software."
"It has been a tremendous partnership working with Bitglass."
"The core CASB solution is the most valuable part. It allows us to put policies in place around which devices can log into our cloud applications. We have a policy that states that only company devices can access these cloud applications."
"Forcepoint ONE has positively impacted our organization by streamlining DLP policy management and reducing time spent on troubleshooting and manual reviews, providing faster compliance reporting for internal needs and compliance with local regulation, and improving visibility into how sensitive data moves across cloud and endpoint environments."
"It allows a window into who is sharing what types of data internally and externally."
"Stability-wise, I rate the solution a ten out of ten."
"The most significant aspect is the control it offers over internet traffic, like managing computer access to specific sites such as Facebook. I find particular value in its ability to control the depth of internal traffic, enabling actions like blocking specific file extensions on social media or specific IPs. This control by categories is a standout feature for us in Sangfor Internet Access Gateway (IAG)."
"The solution is interoperable and has centralized management."
 

Cons

"Forcepoint ONE could be improved."
"I believe that Forcepoint ONE could be improved when configuring certain policies; for content filtering, when trying to whitelist or blacklist certain domains, you can only do up to about 50 domains or URLs, which is a limitation that could be addressed."
"In our environment, when an Active Directory password changes, we tend to have some latency issues with access. It takes about 15 minutes before that password is accessible through Bitglass after the change. That would be the major thing I see as a negative."
"The solution's integration with other products needs improvement."
"I wish they would advance more into the endpoint DLP solution. Currently they do not do anything around endpoint, they're still strictly cloud-based. The forward proxy is really the only thing they do. What I would like to see them do is to scan machines, workstations and servers, for information we might not want on those machines. That would be huge."
"A few minor items for consideration: Enhanced reporting (e.g. a report to find out how many users are in specific Bitglass group). MFA Enhancement: Perhaps adding an MFA Application."
"Forcepoint ONE can be improved in scalability to handle more hybrid environments."
"Initially, we had some challenges that Bitglass resolved quickly. The challenges were around communication. There didn't seem like there was the right level of communication within the Bitglass organization. Once we brought the issues up at a higher level, then they were resolved."
"In Sangfor Internet Access Gateway (IAG), its speed is an area of concern where improvements are required."
"After my purchase, I noticed a need for improvements, particularly in the area of identifying the source user of the device, which can sometimes roll back to the base. Additionally, there were challenges with SSL gate traffic, which wasn't functioning as effectively as expected. Even though there have been fixes to these issues, they should be inherent to the product and need further attention. These aspects, especially sub-features, aren't very robust and seem complex. Regarding integration, while Sangfor Internet Access Gateway (IAG) integrates well with their own products, its compatibility with third-party tools like QB is limited. There's room for improvement in making protocols compatible with various third-party products."
"The solution's logging system should be improved because its logs are not precise and are a little confusing."
 

Pricing and Cost Advice

"The licensing cost for Forcepoint ONE would depend on the features, but the pricing is very competitive here in Brazil. The solution offers a good price, and I would rate it a three or a four in terms of pricing. I don't have information on whether there are additional costs apart from the standard licensing fees for Forcepoint ONE."
"The product is reasonably priced compared to other vendors. I rate the pricing a two or three."
"When considering only the cost, the solution may appear to be costly; however, when evaluated in terms of commercial value, Bitglass is not expensive."
"There is training involved. If you're going to add more people to it, such as cross train more of your group, there's a cost. Other than that, that's it. We have paid exactly what the invoices have said. We signed a three-year contract and not gone above it."
"We have our pricing by user. We do our pricing agreements annually. There are also additional costs for maintenance."
"Typically, the longer you price forward, the better off you're going to be. They have been very willing to work with us on pricing."
"I rate the product pricing a five or six out of ten on a scale of one to ten."
"The solution’s pricing is cheaper than any other solution."
"It is one of the reason for choosing it over other available products. However, recently, this year, there have been recurring concerns. I believe we might consider migrating to another solution."
report
Use our free recommendation engine to learn which Secure Web Gateways (SWG) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Outsourcing Company
9%
Computer Software Company
8%
Construction Company
7%
Construction Company
18%
Financial Services Firm
8%
Outsourcing Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise12
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Forcepoint ONE?
The aspects of pricing, setup cost, and licensing are managed by our sales team, as I handle the technical side.
What needs improvement with Forcepoint ONE?
Forcepoint ONE could be improved in terms of scalability to better support hybrid environments, as many organizations still operate partially on-premises while gradually moving to the cloud. Enhanc...
What advice do you have for others considering Forcepoint ONE?
I advise others looking into using Forcepoint ONE to study its features, as it covers many of the use cases usually associated with customers looking into solutions like this. I would rate this pro...
Ask a question
Earn 20 points
 

Also Known As

Bitglass
No data available
 

Overview

 

Sample Customers

UNC-Charlotte
Information Not Available
Find out what your peers are saying about Forcepoint ONE vs. Sangfor Internet Access Gateway (IAG) and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.