Try our new research platform with insights from 80,000+ expert users

Huawei NGFW vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
403
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Huawei NGFW
Ranking in Firewalls
27th
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
22
Ranking in other categories
Unified Threat Management (UTM) (12th)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Huawei NGFW is 1.0%, up from 0.5% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Haseeb Mehdi - PeerSpot reviewer
Provides very little difference between NGFW throughput and switching, but needs WAF included
The solution's performance is good with IPSec. IPSec's capacity for Huawei Firewalls was much better than most of the vendors. What happens in Fortinet is when we see the overall switching capacity and the next-generation firewall throughput, there is a big gap. Maybe the overall switching capacity is 20 gigs, but the NGFW throughput is only two gigs. With Huawei, this difference is very little. Many of the features are implemented in the hardware. When we enable it, the firewall capacity does not go down by a big margin. This is something we look forward to, which is better. Huawei also has better core density, so we see a lot of 100G ports and 10G ports available with us. The solution is easy and convenient, and we don't need extra switches to deploy the solution in the network.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortinet FortiGate has very good support."
"The performance is good."
"The interface is very good."
"The GUI is very simple, and what is very good is that every product, regardless of size, has the same interface."
"On a scale of one to ten, I rate this solution 10 out of 10."
"The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup."
"FortiGate is on the cheaper end, and it offers good value."
"What I like the most is the configuration and that it's simple, and straightforward to maintain."
"It enables us to configure different policies and restrictions for specific users within the same subnet."
"The mapping features and traffic logging are good."
"The operational management dashboard is easy to use for the customers."
"The UI is quite good."
"The user interface is very, very good."
"Huawei was able to assist us in the installation of their product. The installation was very fast."
"The tool helps us to integrate with other brands."
"The solution's implementation is pretty easy."
"I think the tool has the feature to detect and kill ransomware in three seconds."
"The built-in features function as intended, providing exceptional value."
"The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall."
"We can utilize our own network rather than paying for a private one."
"We've found the technical support to be helpful."
"The VPN connectivity feature is really nice."
"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
"The tool's performance is good."
 

Cons

"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"They could do more work on FortiAnalyzer in terms of the data and the information coming from it."
"The technical support that Fortinet provides is not satisfactory. When we call Fortinet technical support, it takes too much time to connect with them."
"FortiOS is not simple."
"Its reporting capabilities can be improved. It should have some out-of-the-box reporting capabilities and some degree of customization. The basic reporting that it currently has is not sufficient to create more usable reports. It needs some sort of out-of-the-box reporting. They try to make customers purchase FortiAnalyzer for this kind of reporting, which is an additional cost. Other firewall vendors, such as SonicWall and Sophos, provide this sort of reporting without any additional cost."
"We faced difficulties with the configuration because there are many features we could optimize using Fortinet FortiGate, but our reseller didn't have a good understanding of it. So, we just use it on a basic level, not with the best practice for using FortiGate."
"In my case, the 101F is not scalable. I faced problems with scalability related to memory. When we hit 100% memory usage, it stops the internet connection, so we need to control the traffic. We cannot increase the memory."
"Application management can be improved."
"One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had."
"The solution does not have sandboxing features."
"There needs to be more security equipment for the solution."
"The IPS feature must be improved."
"The solution requires a more interactive dashboard. That would make it easier than playing with configurations the way we have to now."
"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."
"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."
"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."
"The GUI needs to be improved, lacks logic in some areas."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"Lacks consistency in terms of filtering certain websites and applications."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"The solution has too many bugs and these slow down the implementation."
 

Pricing and Cost Advice

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."
"Fortinet FortiGate is expensive."
"The price of the license and warranty can be better because it is very expensive."
"It scales well if you know what to buy from a physical box standpoint. They seem to offer something for every level."
"Cost-wise, there is not much difference from Sophos, but feature-wise, we get more features."
"We pay for the solution annually."
"They need to be competitive with other solutions."
"The price of FortiGate is comparable to that of most other firewall solutions and is more affordable than Cisco."
"The solution is inexpensive."
"Licensing fees are billed on an annual basis."
"The pricing is cheap."
"Huawei is priced lower than most competitors."
"The price of the license of this solution is high."
"I believe that we are entitled to a one-year extension on our licensing."
"Huawei is 30% cheaper than Arista."
"The solution isn't cheap. It's market price."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"The price is unmatcheable."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"The product is very cost-effective compared to other brands or vendors."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
864,221 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
8%
Manufacturing Company
7%
Financial Services Firm
6%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
8%
Educational Organization
7%
Computer Software Company
12%
Manufacturing Company
11%
Financial Services Firm
9%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Huawei NGFW?
The solution's implementation is pretty easy.
What is your experience regarding pricing and costs for Huawei NGFW?
The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.
What needs improvement with Huawei NGFW?
Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
KMITL, Peking University
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Huawei NGFW vs. Sangfor NGAF and other solutions. Updated: July 2025.
864,221 professionals have used our research since 2012.