No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Sangfor NGAF comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

KerioControl
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (14th), Unified Threat Management (UTM) (8th)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Firewalls category, the mindshare of KerioControl is 1.2%, down from 1.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Sangfor NGAF1.1%
KerioControl1.2%
Other97.7%
Firewalls
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One very good thing about the Kerio device is its authentication. I don't have a Windows domain for authentication. Instead, I use the Kerio product because it can separate users by Mac addresses and give them IP addresses based on their usernames, automatically logging them in. This makes for a very simple authentication system."
"The solution’s firewall and intrusion detection features are quite good because you can see exactly who is attacking you and who is getting blocked."
"With Kerio, everything is just a bit more cohesive; everything fits together, and with Kerio, of course, everything is already there."
"The solution provides feasibility regarding cyber privacy."
"One thing we always tell our customers is that we have never had a client using Kerio Control and the antivirus tools that we suggest who has been infected with any type of ransomware."
"It just works, it does what it is meant to do."
"I am impressed with the tool's firewall filtering capacity."
"It is very comprehensive and simple. It has all the active protections. It's updated. We love that you can set how often it is updated so you can work what is right for you. A large company with a lot of bandwidth can update the virus definitions and security definitions hourly, if they want. A smaller site that's remote, where maybe updating the definitions will eat into the bandwidth, we can schedule those more to go later at night. It's very flexible and works for us in all types of situations. This is great because then we don't have to learn seven different products to be able to work with seven different scenarios."
"The absolute best part of Sangfor NGAF is their support; it's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes and they helped solve the problem immediately."
"It seems to be a durable, stable product."
"The solution is quite safe and good, and furthermore, it is very good for different environments."
"The support from Sangfor NGAF here in Pakistan is great."
"It offers good value for money and is much cheaper compared to other firewalls."
"The stability of Sangfor NGAF is good."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"It offers application control features."
 

Cons

"I find it a bit costly to pay for the products that I am not using. They need to change their model in such a way that you don't have to pay for the products that you are not using. Its local support and scalability are also not good. I am looking forward to a more scalable product that will be able to grow with time and technology."
"I can no longer renew my subscription directly with GFI but we have to go through third-party resellers like CDW. The first time I did it with CDW. I went to CDW and it was almost like they didn't even know anything. They didn't know what package I was supposed to get. Then after I got it, it took almost five days to get everything working."
"The VPN features are the ones that we really like, but we are using a VPN client to be able to use them. We would like to have an SSL implementation for this same feature so we don't need to install anything on the client side. That's a feature I really miss and that should really be embedded in the product. We really would love to use it via a web browser."
"They don't provide content filtering when it comes to search engine results. We had an incident on the network where a blocked site was showing up in search results. We are in a school environment, so we have blocked a site with some of the explicit content so that kids wouldn't see it. When one of them did a search, the results came on the search engine part. When you try to drill down to the website, it blocks, but when you search by image, it brings up all the images. That's one of the reasons why we are looking at Juniper."
"Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs."
"The stability is pretty good. I've only had one issue with it before. It was set to update on its own, and it didn't update and the update failed, so it didn't come back on for some reason."
"One area that confused me a bit when I was building my current network. I use VLANs to have separate functionality on the network, and the appliance I got was the WiFi model, but I discovered that you can't assign WiFi channels to the VLAN. So, you can have WiFi, but its own subnet. You can't run that over the VLAN. Effectively, I can't use the WiFi facility in the appliance and had to purchase a separate web that supports VLANs. In the end, I had to go to GFI support. They confirmed this is just a limited functionality of that device, as it is a low-end device. I don't know if any of their high-end models have a better facility or not."
"If you put the appliance in Fail-Over mode it will simply FAIL, and will bypass your routing rules."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"The GUI needs to be improved, lacks logic in some areas."
"Scalability for any network device is not very easy in terms of vertical scalability."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"The tool is expensive."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"The support for YouTube or the Internet is not enough."
 

Pricing and Cost Advice

"The price is fine."
"It's pretty expensive in licensing costs, especially if you use the product longer than one or two years. The licensing costs are still high, which I don't think is reasonable for a product like this."
"I think it is a bit on the pricey side, but it's okay. I've got 50 licenses which I think is $250 a year or something like that."
"Its licensing is yearly. You renew every year. Its price is all-inclusive."
"KerioControl's pricing is reasonable. The license for KerioControl is annual. It's difficult to specify an exact cost since it varies depending on the number of users and additional software combined with it. For example, a basic box might cover 25 users, but licenses can be purchased starting from 10 users."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"It gives us a lot. It does prove to be a very robust product for the cost."
"Search and compare."
"The price could be more competitive."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"The pricing is reasonable."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"The price is unmatcheable."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"Sangfor is cheaper than competing vendors."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
11%
Construction Company
11%
Financial Services Firm
9%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
10%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Triton Technical, McDonald's
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about KerioControl vs. Sangfor NGAF and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.