Menlo Secure vs Sangfor NGAF comparison

Menlo Security and Sangfor are both solutions in the Firewalls category. Menlo Security is ranked #51, while Sangfor is ranked #21 with an average rating of 8.4. Menlo Security holds a 0.3% mindshare in Firewalls, compared to Sangfor’s 1.1% mindshare. Additionally, 100% of Menlo Security users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 25, 2026

Menlo Secure and Sangfor NGAF are key players in network security. Sangfor NGAF has an edge with its comprehensive security features, whereas Menlo Secure is noted for its favorable pricing and support.

Features: Menlo Secure provides zero trust browsing, isolation technology, and robust web threat protection. Sangfor NGAF includes integrated security capabilities such as firewall, Intrusion Prevention System (IPS), and WAN optimization, offering comprehensive network defense.

Room for Improvement: Menlo Secure could improve logging capabilities, better exclude certain sites from isolation, and enhance current user tracking. Sangfor NGAF can benefit from simplified configurations, improved feature documentation for advanced settings, and optimized adaptive learning for threat detection.

Ease of Deployment and Customer Service: Menlo Secure is praised for its straightforward deployment and strong customer service. Sangfor NGAF involves a complex setup due to its extensive functionality, but is supported by responsive troubleshooting services.

Pricing and ROI: Menlo Secure offers cost-effective solutions with a favorable ROI adaptable to various budgets. Sangfor NGAF's setup costs are higher, yet its expansive features ensure a long-term ROI by effectively mitigating risks.

To learn more, read our detailed Menlo Secure vs. Sangfor NGAF Report (Updated: June 2026).

Buyer's Guide

Menlo Secure vs. Sangfor NGAF

June 2026

Download the complete report

Helped 902,495 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Menlo Secure is 0.3%, up from 0.1% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Sangfor NGAF	1.1%
Menlo Secure	0.3%
Other	83.5%

Firewalls

Featured Reviews

Joseph Koomson

IP Network Security Specialist at MTN Ghana

Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.

Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.

Read full review

reviewer2701794

Head Of Bluechip Enterprise at a manufacturing company with 51-200 employees

Provides strong protection and multiple use cases but struggles with market recognition

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto. Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco. What can be improved is market awareness and adoption of the technology. When selling it in the channel, regardless of how good the technology might be, success depends more on market adoption and awareness.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You have access to CLI in case you have no web access."

"FortiGate has threat protection, antivirus, and even SSL encryption and decryption, and a few customers also use this firewall for web filtering and application control."

"All the features of Fortinet FortiGate are good; when customers have issues, it's very easy to talk them through the interface, and when they've got any support issues and they want to figure them out themselves, it's very easy for them to contact the FortiGate support."

"I found the upgrades valuable."

"It is easy to set up."

"The Fortinet product provides enterprise capabilities in a small footprint at a price point that is more attainable for a small business."

"Having IPS helps in ensuring that our network is protected from potential threats, which is crucial as we implement our payment gateway."

"It's features are highly customizable."

More Fortinet FortiGate pros

"This security technology addresses risk and enables people to conduct business without that risk, which is where the ROI is realized."

"The fact that it is a cloud proxy solution is another feature we like. For example, if you acquire a new company, you can use it to protect that new company without the need to install anything physically on their networks."

"For us, the primary goal is protection on the web, and that's extremely important. We're not using any of the other services at this time. The web part is key to the success of the organization. It gives us the ability to protect. It can isolate. It opens the session in an isolated format so that the code isn't running locally. It is running over in the Menlo environment, not in ours. It is not running on the local computer, whereas if you were to go to a normal website, it would run Java or something else on the local machine and potentially execute the malicious code locally. So, it does give us that level of protection."

"The solution is invisible to our end users, so it doesn't have any impact on their work or performance."

"It has reduced security events to follow up on. While it is not 100%, there has been probably a 90% or more reduction. We were getting hit left, right, and center constantly from people browsing the Internet and hitting bad websites. It was not just bad websites that were stood up to be malicious, but good sites that were compromised."

"Either you have access to something or don't have access to it, and if you do, we can ensure, 100 percent of the time, that there is nothing malicious that is going to impact our system in any way."

"Accessing the internet with a proxy from anywhere is the most valuable feature. It ensures that users are only able to browse legitimate websites. If they happen to go to a legitimate website with a malicious payload, the isolation feature will take care of that."

"We are not aware of a single compromise from the web since implementing the solution."

More Menlo Secure pros

"Sangfor NGAF works accordingly with our customers, the solution has good performance, is easy to use, and integrates well with the endpoints."

"The support from Sangfor NGAF here in Pakistan is great."

"The stability of Sangfor NGAF is good."

"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."

"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."

"SSL VPN is the best feature."

"The product is very fast and reliable."

"The top functionality is the reporting feature."

More Sangfor NGAF pros

Cons

"The biggest problem we have is the way they handle virtual IPs. It's not handled well at all and even pfSense handles that better."

"I would evaluate customer support from Fortinet FortiGate as seven or eight out of ten. The reason I do not give 10 out of 10 for customer support is that while they follow the SLA and there is no issue with that, for them it might be P3, but for us, it might be P1 or P2 case."

"Lacks sufficient security options."

"There are mainly two areas of improvement in Fortinet FortiGate— the licensing cost and the timing of upgrading licenses for boxes."

"The solution could improve the configuration, there are times the configuration is missing."

"The only problem that we have here in China is that the whole subscription process on Fortinet is a little bit difficult if you are doing it from China."

"One area for improvement is the IPS engine."

"In most cases, the IPS engine uses too many resources, which makes Fortinet FortiGate devices unstable."

More Fortinet FortiGate cons

"We are now transitioning to another solution. The main reason for that is that managing all of the exceptions and troubleshooting all of the issues our users have had connecting to the internet has become too significant in terms of workload, compared to what we hope we will have with another solution."

"Menlo Secure is a smaller company with limited resources and funding, which makes it challenging to compete with larger companies such as Palo and Cisco."

"The user monitoring could still be improved."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists."

"In the best of all worlds, we wouldn't have to make any exceptions. However, that is a big ask because a lot of that depends on how websites are constructed. For example, there are some very complex, application-oriented sites that we end up making exceptions for. It is really not that big an issue for us to make the exceptions. We feel like we are doing that without a huge impact on our security posture, but we do have to make some exceptions for complex sites, e.g., mostly SaaS-type sites and applications."

"Currently, I don't have a good way to see which of my rules are being used in the access control lists. I have numerous entries, but are they all still needed? A report that would show me my list of who is allowed and whether we're actually using it would be useful because I can then go clean up my list. It would be easier to manage. We would eliminate the vulnerability of unused services."

"Lacks consistency in terms of filtering certain websites and applications."

"The tool's support is an area of concern where improvements are required."

"Our experience with its customer support was quite challenging."

"The user interface isn't user-friendly though."

"Scalability for any network device is not very easy in terms of vertical scalability."

"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."

"The firewall system needs gradual improvements because there are more threats and challenges in the world every day."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

More Sangfor NGAF cons

Pricing and Cost Advice

"The pricing is based on a licensing model for each IPS in your environment."

"The price of Fortinet FortiGate is better than Cisco, Check Point, and Palo Alto. In terms of pricing, it's probably a better-priced firewall solution overall."

"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."

"For the performance that we get, the price is reasonable. There are cheaper options, but they may not deliver the same kind of performance that we want. For the performance they provide, the price is acceptable."

"I give the pricing of the solution a six out of ten."

"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."

"The licensing scheme of Fortinet is better than Cisco. It is more logical."

"Fortinet FortiGate IPS is cheaper than other solutions like Cisco or Check Point."

More Fortinet FortiGate pricing and cost advice

"We save a ton of money and time. Previously, the numerous hits that we were receiving from our security tools, prior to implementing them, had to all be chased down, dispositioned, and endpoints had to be reimaged. It was just a ton of effort to do all that. That is where the savings from time and money come in."

"It is appropriately priced for what they're doing for us. Considering the protection provided, I feel their pricing is spot-on."

"The solution is expensive. It's more expensive than the solution I previously used. Compared with the other cloud-based solutions, it's very competitive."

"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."

"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"The price falls in the mid-range, neither exceptionally low nor high."

"Sangfor is cheaper than competing vendors."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,495 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Financial Services Firm

Manufacturing Company

14%

Construction Company

Retailer

Financial Services Firm

11%

Manufacturing Company

11%

Comms Service Provider

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	369
Midsize Enterprise	139
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What needs improvement with Menlo Security Secure Web Gateway?

There aren't specific areas for improvement; however, they're not as well known as the big vendors such as Palo Alto....

See all answers

What is your primary use case for Menlo Security Secure Web Gateway?

People are mainly using it for zero trust web access. Menlo Secure is built from the ground up to provide zero basic ...

See all answers

What advice do you have for others considering Menlo Security Secure Web Gateway?

Secure file sharing and data protection is not exactly what Menlo Secure is designed to do. While it can handle some ...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...

See all answers

Comparisons

Sophos Firewall vs Fortinet FortiGate

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Prisma Access Browser vs Menlo Secure

Compared 18% of the time

Check Point Harmony SASE (formerly Perimeter 81) vs Menlo Secure

Compared 13% of the time

Netskope Next Gen Secure Web Gateway vs Menlo Secure

Compared 10% of the time

Cloudflare One vs Menlo Secure

Compared 9% of the time

Silo by Authentic8 vs Menlo Secure

Compared 7% of the time

More Menlo Secure Competitors

Sophos Firewall vs Sangfor NGAF

Compared 11% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 9% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 6% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

June 2026

Download Fortinet FortiGate product report

Buyer's Guide

Menlo Secure

June 2026

Download Menlo Secure product report

Buyer's Guide

Sangfor NGAF

June 2026

Download Sangfor NGAF product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

Menlo Security Web Security, Menlo Web Security

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Menlo Security Secure Application Access

Menlo Security Secure Application Access makes zero trust access easy, giving users secure connectivity to private applications, including web and legacy applications. At the core of Secure Application Access is the Menlo Secure Cloud Browser, which fetches, secures and delivers the content for users.

In addition to providing simple-to-deploy, clientless ZTA, Secure Application Access and the Menlo Secure Cloud Browser protect applications from attacks such as session hijacking, cookie manipulation, and other tactics that employ protocol manipulation.

Secure Application Access protects applications from Internet threats and provides granular controls for added protection of the application and associated data. These security controls include Read-only/Read-write, Upload/download, Copy/paste, AV scanning, Sandboxing, and Data Loss Prevention.

Last Mile Data Protection

Menlo Last-Mile Data Protection identifies and prevents sensitive data from leaving your company by meticulously inspecting all file uploads and user input across browsing sessions. Leveraging the Secure Cloud Browser, users are protected from the internet and you can protect your organization from data loss with comprehensive traffic monitoring and controls. This approach addresses the growing concerns surrounding data leakage in the age of AI tools like ChatGPT.

By identifying sensitive data through file types, regular expressions, or predefined libraries, Menlo Last-Mile Data Protection empowers security teams to regulate data input into AI platforms and prevent unauthorized uploads. This capability provides crucial protection for intellectual property, PII, and other confidential information.

The solution leverages the Menlo Cloud Security Platform's visibility and control over traffic to reliably detect and prevent data leaks originating from both browser submission forms and non-browser traffic. With the ability to inspect encrypted web traffic, Menlo Last-Mile Data Protection enforces DLP policies consistently across all users and devices, ensuring comprehensive data protection.

Menlo Security

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Menlo Secure vs. Sangfor NGAF

June 2026

Free Report: Menlo Secure vs. Sangfor NGAF

Find out what your peers are saying about Menlo Secure vs. Sangfor NGAF and other solutions. Updated: June 2026.

DOWNLOAD NOW

902,495 professionals have used our research since 2012.

See our Menlo Secure vs. Sangfor NGAF report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.