Try our new research platform with insights from 80,000+ expert users

Juniper vSRX vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
381
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Juniper vSRX
Ranking in Firewalls
21st
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
36
Ranking in other categories
Virtualization Security (3rd), Unified Threat Management (UTM) (9th)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.2%, up from 17.7% compared to the previous year. The mindshare of Juniper vSRX is 0.3%, up from 0.2% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Stratos-Margaritis - PeerSpot reviewer
The ease of installation and licensing are also significant advantages
We use the application filtering, content filtering, and intrusion prevention system (IPS) features. These features are crucial for our network security. The ease of installation and licensing are also significant advantages, as it allows us to have one license for all products, which simplifies upgrading and maintenance. Additionally, the ease of deployment is critical for us.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Fortinet FortiGate has many valuable features, such as IDS, and intrusion detection. It has security features that are in part with the technologies that are available in the market."
"There are great templates, so you don't have to customize them if you don't want to. You do have the option to custom create some folders and some reports, however, with what is there, you don't really need to go through extra effort, as they already give you a lot of predefined views of reports and so forth."
"The most valuable feature of Fortinet FortiGate is URL filtering."
"Fortinet FortiGate is pretty robust. The updates and firmware releases are pretty timely. They have a good product revision and review system, so they are constantly reviewing their configuration and the different mechanisms that are used on Fortinet FortiGate."
"It is user friendly, and has all the features you need."
"The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback."
"I like Fortinet FortiGate's antispam filter, SPN, and clustering features."
"FortiGate is very simple to manage and easy to use."
"The pricing is reasonable."
"This solution works well. Their switches and firewall are good."
"There are a few valuable features that offer very good quality on the solution. Especially NetScreen. We used to use NetScreen for the the product line. It was a very mature solution, very robust, easy to configure, easy to manage, etc. It made it easy to do everything."
"Juniper is more flexible with the commit check and the commit confirmed command. The design of the forwarding and contract plan in the operating system is very important for the performance when we have very big traffic."
"The initial setup is pretty simple."
"One of Juniper vSRX's most valuable features is its integration with safety applications. It keeps the software secure from developers without relying on third-party solutions."
"The tool's most valuable features are routing features and service quality."
"It is easy for me to go in and update settings, make changes, or add/remove rules or security."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"We've found the technical support to be helpful."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"The tool's performance is good."
"The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall."
"In four steps one can configure the entire firewall."
 

Cons

"Its pricing can be better."
"I would like to see improvements in Fortinet FortiGate regarding the active-active scenario. The active-active scenario is supported but not recommended, whereas other vendors are implementing active-active without issues."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"There are some problems that support cannot give you a logical reason as to why it happened. For example, I had a case where I was dealing with a WhatsApp application that was giving issues. Technical support gave more than one reason it could be giving issues, but none of them solved the problem. Eventually I solved the problem, but it was far from the solutions that support had given."
"The area that Fortinet may improve is customer support. When you have an incident, situation, or open a case, the support is not as good as Cisco or other platforms I have tested."
"There are some tiny bugs that sometimes affect the operations. In the past revision of it, there was a bug. Because of the bug, we had to downgrade the version. It happened only with the last revision."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"The web-cache feature which was previously on the FortiGate device, but was deleted with the recent upgrade should be returned. It was a very valuable feature for us."
"It is pretty complex to manage and could be easier."
"The user interface could always be better. They could make it simpler and more intuitive."
"The biggest downside of Juniper vSRX is its pricing, which may be too high for smaller organizations. While it's a decent solution, the cost may limit its accessibility to smaller customers."
"The GUI needs to be faster."
"It should also support modern data technologies like zero-day protection and zero-trust network access."
"Right now, we are going through issues and problems where the product gets dropped with the connection or during the authentication initial phase. While it could be our problem, we would like to see more stability in this area."
"The GUI interface needs improvement."
"Juniper vSRX is expensive."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"The GUI needs to be improved, lacks logic in some areas."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
"They need to increase the number of ports in the firewall."
"The product must provide more IPS features."
"The cost of licensing is very high compared to other firewalls available here."
"The solution has too many bugs and these slow down the implementation."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
 

Pricing and Cost Advice

"Fortinet FortiGate has different licensing models, depending on what you're going to do. Services included would depend on the license model. Licenses can be renewed annually."
"The Fortinet FortiGate security features cost approximately $1,500 a year. The firewall itself doesn't have a recurring cost. It's the security features on top of that that you pay for."
"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."
"Pricing is good. They offer a lot of things, the most important is the support. Every time you upgrade your license, you also get insurance for the equipment. If you have any problem with equipment, they send in new equipment."
"The license is too expensive to renew. The license renewal process is also complex."
"The solution requires a license annually, it is not a user license, you can have as many users as your want. I must renew the license regularly per device."
"We find the most valuable aspect of this solution is the price. It is affordable, and cheaper than other firewalls."
"The beauty is the price performance ratio is great with FortiGate. It provides all the features we needed and the price is comparable with others' firewalls. The price is quite competitive with the firewalls with similar features."
"Our experience purchasing the solution through the AWS Marketplace was good."
"The solution is inexpensive."
"The solution could have been cheaper."
"The solution is pricey."
"We like pricing through the AWS Marketplace."
"The ongoing licensing cost seems to be pretty standard. There are no additional costs."
"I rate the tool's pricing a five out of ten."
"After some research, I think that the cost of Juniper is more than Check Point, Palo Alto, and Fortinet."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."
"The price falls in the mid-range, neither exceptionally low nor high."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
861,803 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
8%
Educational Organization
8%
Manufacturing Company
7%
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Comms Service Provider
7%
Computer Software Company
12%
Manufacturing Company
11%
Financial Services Firm
9%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Juniper vSRX?
One of Juniper vSRX's most valuable features is its integration with safety applications. It keeps the software secur...
What is your experience regarding pricing and costs for Juniper vSRX?
The pricing is competitive, being neither the most expensive nor the cheapest option. It falls within the medium to h...
What needs improvement with Juniper vSRX?
I would suggest improving the pricing, particularly the licensing model. Although it is currently quite reasonable, m...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Expedient Data Centers
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Juniper vSRX vs. Sangfor NGAF and other solutions. Updated: July 2025.
861,803 professionals have used our research since 2012.