Try our new research platform with insights from 80,000+ expert users

FortiGate Next Generation Firewall (NGFW) vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
411
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
FortiGate Next Generation F...
Ranking in Firewalls
15th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
55
Ranking in other categories
ZTNA (4th), Unified Threat Management (UTM) (8th)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.1%, up from 18.4% compared to the previous year. The mindshare of FortiGate Next Generation Firewall (NGFW) is 0.8%, up from 0.2% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate20.1%
FortiGate Next Generation Firewall (NGFW)0.8%
Sangfor NGAF1.2%
Other77.9%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Juan Solano - PeerSpot reviewer
Implementation improves efficiency and provides greater visibility over issues
One of the most valuable features of FortiGate Next Generation Firewall (NGFW) is the ease of usability it offers. It is quite easy for me to learn to use. Additionally, FortiGate Next Generation Firewall (NGFW) has improved our efficiency in setting up security and provided us with more visibility over some issues and incidents we previously faced.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"Fortinet FortiGate is scalable for our users. Right now, we have almost 70 users. We do not have any plan to increase our usage of FortiGate. For maintaining the firewall solution, one staff member is enough."
"This is a quality product with ok support, and it is better than the competition we've tried."
"Application control and the web filter are the best features of Fortinet FortiGate."
"This solution has solid UTM features combined with a nice GUI."
"It's very similar to a Cisco firewall, yet less expensive."
"LinkGreat firewall capabilities"
"The solution is stable."
"Fortinet offers comprehensive security solutions for various purposes."
"It is a very user-friendly solution. Moreover, Foritgate offers good performance."
"FortiGate Next Generation Firewall can be described as the most complete solution."
"When I survey FortiGate products, I see that they have a good performance, especially in terms of next generation firewalls."
"The multi-threat protection feature helps us secure our organization."
"The usability of the solution is its best feature."
"It is a stable solution compared to other vendors."
"The firewall and VPN features are the most valuable in protecting our customers' networks."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"We've found the technical support to be helpful."
"It is a stable solution."
"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."
"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."
"The stability of Sangfor NGAF is good."
"It offers application control features."
 

Cons

"There are just some services that aren't available. For example, the Ethernet or point-to-point protocols. They could add these services to their product offering - especially services for ISPs."
"The user interface could be improved."
"Some configuration elements cannot be easily altered once created."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"There could be more integration between the logging and analytical platforms to make it more seamless and integrated."
"We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine."
"There were quite a few problems with the stability of the system."
"The firmware needs improvement because there are bugs when a new release comes through. Sometimes, the configuration changes, and it's a bit harder to see where the fail is. The first time that you have the firmware, it tends to have some issues, and it's better to wait a bit to update the equipment."
"One of the weaknesses of the solution is something we noticed, especially after comparing the tool with SD-WAN features, since, unfortunately, in a massive scale size environment, the solution is not good. I"
"I would like to have SD-WAN as a part of the Next Generation Firewall. It would enhance high availability."
"I would like to see improvements in the IPS/IDS feature to enhance protection against attacks from attackers, including ransomware protection."
"There should be more testing before releasing software since it can be a little buggy sometimes when new features come out after updates."
"I see problems with the licensing. If I have to add a new feature, we need to add a license."
"Improvements could be made when companies expand and need better equipment and more licenses."
"The web process often has a memory leak."
"There's a limitation wherein you can only have about 30 virtual or secondary IPs on a particular interface."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"The solution has too many bugs and these slow down the implementation."
"The reporting and log management could be improved."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"The setup phase is quite complex."
"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
 

Pricing and Cost Advice

"We pay for the solution annually."
"The price is fine."
"​We saved a bundle by not needing all the past appliances from an NGFW.​"
"We purchased a five-year bundle package, which worked out cheaper than competing solutions."
"Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees."
"The initial setup is super straight forward and as far as the licensing goes for the small product that we have, the pricing was pretty competitive. It wasn't as simple and as cheap as a SonicWall but for the service we would get it was a good price."
"I do not have first-hand experience with the rice of Fortinet FortiGate, but I have heard the price was reasonable."
"I give the pricing a nine out of ten."
"I rate FortiGate Next Generation Firewall a five out of ten for pricing."
"Although the solution's pricing is high, compared with other products, it may be cheap."
"I would rate the pricing a seven out of ten"
"I think price-wise, the solution is totally reasonable since it has many products to serve, starting from small homes to massive scale sites."
"It is an expensive solution."
"FortiGate Next Generation Firewall costs our company around $12000 per year."
"The product is a little bit expensive."
"FortiGate Next Generation Firewall is an expensive solution."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"Sangfor is cheaper than competing vendors."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"The pricing is reasonable."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
14%
Financial Services Firm
9%
Comms Service Provider
9%
University
7%
Manufacturing Company
11%
Computer Software Company
10%
Financial Services Firm
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business261
Midsize Enterprise99
Large Enterprise143
By reviewers
Company SizeCount
Small Business38
Midsize Enterprise11
Large Enterprise7
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about FortiGate Next Generation Firewall (NGFW)?
The tool's most valuable feature is IPS. In my experience, I haven't encountered any issues with integration. It easi...
What needs improvement with FortiGate Next Generation Firewall (NGFW)?
The FortiGate Next Generation Firewall (NGFW) could be improved in application control if they can have a bigger base...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Information Not Available
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about FortiGate Next Generation Firewall (NGFW) vs. Sangfor NGAF and other solutions. Updated: September 2025.
867,370 professionals have used our research since 2012.