No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Sangfor NGAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

KerioControl
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (13th), Unified Threat Management (UTM) (8th)
Sangfor NGAF
Ranking in Firewalls
32nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Firewalls category, the mindshare of KerioControl is 1.2%, down from 1.3% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
KerioControl1.2%
Sangfor NGAF1.2%
Other97.6%
Firewalls
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
AK
Network Administrator at GC University Lahore
Leverage detailed reporting for effective attack management
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications hosted there, websites, FTP portals, making it quite comprehensive. Essentially, it performs all the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"Kerio has improved my organization's security."
"The firewall and intrusion detection features are good. It has blocked certain things. We have a lot of blocked sites that the staff or anyone using it, the public, etc., can't go on. It works for that. I get quite a few messages every now and again, saying that a virus has been detected and I can go in and block the user who's causing the problem."
"I find this solution to be rich in features and does all that I require, for example, it is easily manageable and has comprehensive virus detection."
"I use Kerio Control for user statistics, intrusion detection and prevention (IPS), web filtering, etc."
"This solution has improved my organization because we can access remotely."
"The firewall and the content filtering options are valuable."
"At the end of the day, our customers are being managed, looked after, and they're secure, so they're happy."
"Sangfor is a good solution that provides a WAF and firewall solution; most other vendors, like Sophos and Fortinet and Cisco, only provide one solution, and that's a valuable feature of Sangfor."
"In terms of the most valuable features, the IPS report is quick and updated, and performance is also valuable."
"The top functionality is the reporting feature."
"Sangfor serves most of the basic purposes of a firewall, is particularly good in the DPI where we can inspect the inbound and outbound traffic on a very granular level, gives a very good predictive measure as well as the current measure of things going on in our network, and gives us value for money overall."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake, as it is cheaper than Fortinet, Sophos, Check Point and Palo Alto."
"Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity."
"The most valuable feature of Sangfor NGAF is its integration."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
 

Cons

"The comprehensiveness of the security features could be improved upon. However, for the most part, it is pretty good. They could add more logs. I would like to see more detailed reporting, custom reporting from the logs, and more of a streamlined interface for certain aspects."
"When it comes to dealing with updates, there are often bugs on the solution. They should do a lot more testing before they release new versions."
"At the moment, our workaround is just to reboot the box every two weeks, which is inconvenient, but if they're going to solve this, then we just have to wait."
"We'd like to have more integrations Kerio Operator."
"The denial of service could also be improved. There recently was a big issue with denial of service attacks and it was a bit laborious."
"Because of Kerio Control, we failed to protect kids from such content, and we expected them to respond to it with the urgency it required, but their support was pathetic."
"There's also room for improvement in the Traffic Rules. We define networks to use a specific outgoing interface, say VSAT, shore, or marine WiFi, which is okay. But then all we have is a checkbox that says "Use other internet interfaces if this one is unavailable." What we would prefer would be to have a priority list. So if VSAT is unavailable, try to use 4G, etc. We haven't really found a reliable way of doing that in the current release."
"I would like to be able to automatically send email from Kerio Control and have it tell me what my external IPs are, because on one of my lines I have a fixed IP address and on the other it is variable. If there were a permanent way for me to figure out, "Okay, my current external VPN and my firm IP is this," it would help. I need to know the IP address to connect with the VPN and, at the moment, one of the lines sometimes changes its IP address without me knowing it. It's a hassle to figure out what it is."
"The setup phase is quite complex."
"Our experience with its customer support was quite challenging."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"The user interface isn't user-friendly though."
"The solution has too many bugs and these slow down the implementation."
"Scalability for any network device is not very easy in terms of vertical scalability."
"Lacks consistency in terms of filtering certain websites and applications."
 

Pricing and Cost Advice

"It is a good fit for SMBs because of its maintainability. When you want to keep your costs low, then Kerio Control is a very good solution. It's not an expensive product that is well integrated. It has a complete set of features within it that make it a very strong product."
"We have to pay approximately EUR 175 for the product."
"The price of Kerio Control could be better, it is a bit overpriced compared to other solutions."
"The pricing is in-line with our expectations in terms of the quality that we get for it."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"It is priced low enough for entry-level, but it has the power to grow with a company without them having to replace it."
"The price of the solution is reasonable. For additional costs, you can add on more features such as antivirus."
"I pay approximately $50 for the solution on an annual basis."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"Sangfor is cheaper than competing vendors."
"The price falls in the mid-range, neither exceptionally low nor high."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
10%
Manufacturing Company
13%
Comms Service Provider
13%
Financial Services Firm
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Triton Technical, McDonald's
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about KerioControl vs. Sangfor NGAF and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.