Menlo Secure vs Sangfor NGAF comparison

Menlo Security and Sangfor are both solutions in the Firewalls category. Menlo Security is ranked #52, while Sangfor is ranked #23 with an average rating of 8.1. Menlo Security holds a 0.1% mindshare in Firewalls, compared to Sangfor’s 1.1% mindshare. Additionally, 100% of Menlo Security users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 25, 2026

Menlo Secure and Sangfor NGAF are key players in network security. Sangfor NGAF has an edge with its comprehensive security features, whereas Menlo Secure is noted for its favorable pricing and support.

Features: Menlo Secure provides zero trust browsing, isolation technology, and robust web threat protection. Sangfor NGAF includes integrated security capabilities such as firewall, Intrusion Prevention System (IPS), and WAN optimization, offering comprehensive network defense.

Room for Improvement: Menlo Secure could improve logging capabilities, better exclude certain sites from isolation, and enhance current user tracking. Sangfor NGAF can benefit from simplified configurations, improved feature documentation for advanced settings, and optimized adaptive learning for threat detection.

Ease of Deployment and Customer Service: Menlo Secure is praised for its straightforward deployment and strong customer service. Sangfor NGAF involves a complex setup due to its extensive functionality, but is supported by responsive troubleshooting services.

Pricing and ROI: Menlo Secure offers cost-effective solutions with a favorable ROI adaptable to various budgets. Sangfor NGAF's setup costs are higher, yet its expansive features ensure a long-term ROI by effectively mitigating risks.

To learn more, read our detailed Menlo Secure vs. Sangfor NGAF Report (Updated: December 2025).

Buyer's Guide

Menlo Secure vs. Sangfor NGAF

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.8%, down from 20.7% compared to the previous year. The mindshare of Menlo Secure is 0.1%, up from 0.0% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	18.8%
Sangfor NGAF	1.1%
Menlo Secure	0.1%
Other	80.0%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Some of the best features of Fortinet FortiGate include the next-generation firewall features."

"The best features of Fortinet FortiGate include its easy configuration and user interface."

"The solution is extremely reliable."

"I find that Fortinet FortiGate is pretty easy to use and integrated, offering many features in one box at a decent price compared to other enterprise vendors."

"Fortinet FortiGate has a threat detection capacity compared to other vendors."

"The combined license for the network, the next-generation firewall, and the integration with SD-WAN for all branches are what I consider to be the best features. It's effective for multi-branch customers."

"I like that you are able to manage FortiGate from the FortiManager to create a more centralized environment."

"We have used multiple WAN ASPs and set up SD-WAN; it's quite interesting and user-friendly; essentially, anyone can configure it—just go through the documentation and you'll be able to set it up directly."

More Fortinet FortiGate pros

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"The stability of Sangfor NGAF is good."

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."

"The most valuable feature of Sangfor NGAF is its integration."

"The capabilities are mostly within the box."

"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

More Sangfor NGAF pros

Cons

"There is a lot of improvement needed with SSL-VPN."

"A disadvantage exists when we are collecting the logs, as it sometimes becomes very difficult to interpret the logs that are generated from the firewall."

"In FortiGate Next Generation Firewall (NGFW), my concern regarding improvements is the licensing model."

"The only challenge with Fortinet FortiGate is the pricing model."

"The area that Fortinet may improve is customer support. When you have an incident, situation, or open a case, the support is not as good as Cisco or other platforms I have tested."

"It would be helpful to have a better tool for migrating all policy rules using an automatic script."

"In terms of what could be improved, the SD-WAN is quite difficult, because if you install the new box, 15 is okay, but if you change from an old configuration, if there is already configuration and a policy when you change to SD-WAN, you must change the whole policy that you see in the interface."

"The area that Fortinet may improve is customer support."

More Fortinet FortiGate cons

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

"The user monitoring could still be improved."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"They need to increase the number of ports in the firewall."

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

"Sangfor NGAF could improve the policies and default criteria. They could be much better."

"The interface and user experience are horrible."

"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."

More Sangfor NGAF cons

Pricing and Cost Advice

"I give the pricing a nine out of ten."

"Pricing is lower than Cisco."

"It's one of the more expensive brands. The 100 series costs around $4,000. They are similar in pricing to what you might get from Cisco solutions and probably other similar ones. They're not more expensive than other similar solutions, but they're certainly not cheaper either."

"It scales well if you know what to buy from a physical box standpoint. They seem to offer something for every level."

"For our organization, the licensing costs are approximately $7,000 per year."

"Fortinet FortiGate gives you most of the features in one license."

"FortiGate Next Generation Firewall is an expensive solution with a yearly subscription."

"If you are looking for a quality product, it will come at a higher price. Expecting them to be significantly cheaper is unrealistic. In terms of pricing, it is a bit costly. However, the functionality and support offered are worth it."

More Fortinet FortiGate pricing and cost advice

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"The product is very cost-effective compared to other brands or vendors."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"The price falls in the mid-range, neither exceptionally low nor high."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"Sangfor is cheaper than competing vendors."

"The pricing is reasonable."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Manufacturing Company

14%

Retailer

12%

Computer Software Company

12%

Financial Services Firm

Manufacturing Company

11%

Financial Services Firm

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	357
Midsize Enterprise	133
Large Enterprise	188

No data available

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

See all answers

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

See all answers

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 6% of the time

OPNsense vs Fortinet FortiGate

Compared 3% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Prisma Access Browser vs Menlo Secure

Compared 32% of the time

Prisma Access by Palo Alto Networks vs Menlo Secure

Compared 11% of the time

Cisco Umbrella vs Menlo Secure

Compared 10% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 9% of the time

Cloudflare One vs Menlo Secure

Compared 6% of the time

More Menlo Secure Competitors

Sophos Firewall vs Sangfor NGAF

Compared 19% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 6% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 5% of the time

Netgate pfSense vs Sangfor NGAF

Compared 5% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 5% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2026

Download Fortinet FortiGate product report

Buyer's Guide

Menlo Secure

January 2026

Download Menlo Secure product report

Buyer's Guide

Sangfor NGAF

January 2026

Download Sangfor NGAF product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Menlo Security Web Security, Menlo Web Security

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Menlo Secure vs. Sangfor NGAF

December 2025

Free Report: Menlo Secure vs. Sangfor NGAF

Find out what your peers are saying about Menlo Secure vs. Sangfor NGAF and other solutions. Updated: December 2025.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Menlo Secure vs. Sangfor NGAF report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.