No more typing reviews! Try our Samantha, our new voice AI agent.

KerioControl vs Sangfor NGAF comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

KerioControl
Ranking in Firewalls
27th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
58
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (13th), Unified Threat Management (UTM) (8th)
Sangfor NGAF
Ranking in Firewalls
23rd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Firewalls category, the mindshare of KerioControl is 1.2%, down from 1.3% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Sangfor NGAF1.1%
KerioControl1.2%
Other97.7%
Firewalls
 

Featured Reviews

Constantnos Achilleos - PeerSpot reviewer
Product manger at Asbis Mediteranean
Leveraging geo-tagging and web filtering for enhanced network security
The solution is used for site-to-site VPN connections and it is valued for its cost efficiency and easy connectivity. It is especially beneficial for multi-site VPNs and is used in about fifteen different components KerioControl has provided a financial benefit as it allows purchasing one license…
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"All of the features of Kerio Control are equally good. Most valuable to us are the firewall rules, the intrusion detection system, and IP address features."
"The product is affordable."
"Kerio is a lot clearer to set up to do particular things, whereas when I do it on a Cisco or a FortiGate I have to go fight with it per week sometimes to do something I can do in 20 minutes on Kerio."
"Kerio is user-friendly, it's flexible, and can be used on different kinds of infrastructure."
"From the old way we used to do things, it is night and day, and the efficiency has doubled."
"We also like the security. We can control what sites users can go to and we can make sure that where they're going is appropriate and that it's work-related."
"Its support is very good, and it is stable product.​"
"We went from a very secure, regulated on-prem environment to a diverse working from home environment overnight, and Kerio was key to that."
"The absolute best part of Sangfor NGAF is their support; it's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes and they helped solve the problem immediately."
"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."
"The product is very fast and reliable."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"It is a stable solution."
"I think the tool has the feature to detect and kill ransomware in three seconds."
"So far, the performance and reliability of the product have supported our company's critical network traffic."
"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."
 

Cons

"The GUI should be changed because it remains the same consistency across versions. However, those who have been using KerioControl for a long time may be accustomed to the current interface. Installing a new version in the same location makes it easy to find, but overall, there are no notable changes between versions."
"Improvements are needed to the Next Generation Firewall Protection, specifically with user-level protection."
"Filtering of pages and greater personalization in services need improvement."
"The logs could be improved for better clarity."
"They should add wireless features."
"The antivirus seemed to be a bit laggy on the connection so I disconnected that. It's definitely good. The only issue we've had with any sort of cyber attack seemed to be coming from a couple of distinct locations, people trying to get into known ports on remote desktops and stuff like that. The fact that we can block all that traffic is just great. It simplifies it."
"I would like to be able to inspect https packets for the purpose of virus scanning."
"If I would suggest anything, it would be to expand on its multifactor authentication to be a little bit more user-friendly."
"Scalability for any network device is not very easy in terms of vertical scalability."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"The tool's support is an area of concern where improvements are required."
"The product must provide more IPS features."
"The tool is expensive."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The user interface isn't user-friendly though."
 

Pricing and Cost Advice

"Licensing is easier with Kerio Control. With FortiGate, we realized the licensing is really hectic, because if you skip one year, you have to back pay that year. If you skip two years, you have to back pay two years. With Kerio Control, if a license expires, one year later you can just reactivate and go on."
"Its initial cost is less as compared to other products. It becomes a bit costly when you pay for the products that you don't use. We paid for almost all the products through subscription, but we are using only a few products. We use EndPointSecurity, Kerio Connect, WebMonitor, and LanGuard. We don't use the rest of the products."
"I pay approximately $50 for the solution on an annual basis."
"KerioControl's pricing is good."
"Our clients see ROI with Kerio Control, as they are saving bandwidth costs."
"I am living in Iran and we cannot buy the product from Kerio because of sanctions."
"It's very affordable."
"GFI has made a stupid decision regarding small office licensing. For offices where there are only three to five employees and had five years towards a five user product, they now force these customers to a 10-year user license. I really don't understand it. It's a stupid decision for the small offices who want a good solution for security because they'll probably decide to go to another product. Why should they buy something that they don't use?"
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"The price is unmatcheable."
"Sangfor is cheaper than competing vendors."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
909,948 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Comms Service Provider
11%
Computer Software Company
11%
Outsourcing Company
8%
Comms Service Provider
12%
Financial Services Firm
11%
Manufacturing Company
10%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise9
Large Enterprise3
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for KerioControl?
KerioControl offers good pricing as one license covers all features needed without extra payment. The price for the product is rated as ten out of ten.
What needs improvement with KerioControl?
Regarding KerioControl's application awareness and control feature, I have not used it much.
What is your primary use case for KerioControl?
With KerioControl, we usually use them for site-to-site VPNs for most of our clients. With multiple offices, we use KerioControl as our solution.
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Triton Technical, McDonald's
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about KerioControl vs. Sangfor NGAF and other solutions. Updated: August 2026.
909,948 professionals have used our research since 2012.