Meraki MX vs Sangfor NGAF comparison

Cisco and Sangfor are both solutions in the Firewalls category. Additionally, 93% of Cisco users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Meraki MX and Sangfor NGAF based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Meraki MX vs. Sangfor NGAF Report (Updated: April 2025).

Buyer's Guide

Meraki MX vs. Sangfor NGAF

April 2025

Download the complete report

Helped 850,349 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

David Fartouk

CTO at Trust-IT Solutions

Reliablity and simple management facilitates seamless solution integration

We are still using other solutions. We had solutions from HP Aruba and Juniper as well. Eventually, we plan to remove the Aruba and deploy something else, which is basically the Meraki and the Juniper Mist. We are migrating from Aruba to Meraki. We think the Aruba solution was complex despite being stable. Managing it is cumbersome. There were questions about the company's stability.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The interface is very good."

"The initial setup is straightforward."

"The most valuable feature of Fortinet FortiGate is load balancing. It can provide central management and VPNA. Additionally, it has enhanced our security environment."

"The application control features, such as Facebook blocking and Spotify blocking, are the most valuable."

"This solution has solid UTM features combined with a nice GUI."

"The security fabric is excellent."

"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."

"The features that I have found most valuable are the SD-WAN and their IP4 policy."

More Fortinet FortiGate pros

"Dual WAN connections are greatly simplified and point-to-point VPNs automatically connect regardless of what WAN connection is active."

"It is very easy to configure."

"You can use your web browser to do the configuration which is easier than Cisco CLI transcripts."

"It is very fast to implement."

"The solution is very well-rated."

"The initial setup for me was straightforward."

"In terms of WAN optimization, it's completely cloud-controlled. Anyone can manage their network environment from a mobile phone."

"They have very good technical support and I have relied heavily on them."

More Meraki MX pros

"The capabilities are mostly within the box."

"The top functionality is the reporting feature."

"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."

"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."

"The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately."

"It offers application control features."

"We can utilize our own network rather than paying for a private one."

"The product is very fast and reliable."

More Sangfor NGAF pros

Cons

"If they could extend their fabric towards other vendor environments for integration, that would be great."

"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."

"I would suggest that Fortinet add sandboxing to their solution."

"Fortinet FortiGate should improve the VPN tokens."

"The cloud management and automation capability could be improved."

"We would like to have the ability to disable some of the security functionalities."

"FortiGate can improve its token system, as it requires a purchase before use."

"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."

More Fortinet FortiGate cons

"What I would like to see in the next version is to have more interfaces for WAN links."

"They need to improve the link between Meraki and Active Directory."

"An area for improvement in Meraki MX is that it needs some provision, as supplying the unit through Cisco can be tedious at times, but as far as the product itself and its offerings, Meraki MX is five-star all the way."

"Could possibly use deeper configurations."

"Direct logging is something that can be introduced. In the absence of cloud management, the possibility of local configurations and on-premise logins becomes restricted. This limitation stands as a primary concern. When it comes to resolving issues, the inability to access login options hampers troubleshooting efforts. The stability is noteworthy; but when compared to alternative products, its stability is comparatively lower. Additionally, certain limitations are observed in terms of remote control. Price-wise, the solution stands out for its competitive and cost-effective nature compared to other alternatives. Operationally, it is user-friendly and requires minimal effort from administrators, making configuration hassle-free."

"I do not have the kind of feature I need for SSL decryption in Meraki MX. It would be great to see the SSL decryption feature in Meraki MX."

"MX can only be managed via a web interface, but I'm accustomed to using a CLI or a graphical interface. I would also like to see more reporting features. It doesn't provide enough information for me to know precisely about some clients."

"The solution's pricing should be reduced."

More Meraki MX cons

"The tool is expensive."

"The interface and user experience are horrible."

"The solution should be able to work in a hybrid setup."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."

"Scalability for any network device is not very easy in terms of vertical scalability."

"The setup phase is quite complex."

"Lacks consistency in terms of filtering certain websites and applications."

More Sangfor NGAF cons

Pricing and Cost Advice

"Its price is affordable and lesser than Cisco. Cisco is expensive. In terms of licensing, there is only one issue. If a customer's license has expired a month ago and they do the renewal after one month, Fortinet renews the license from the start of the previous month. The activation of the product is done from the previous month, not from the date of renewal. The customers usually shout and complain that because they are paying today, the renewal should start from today. The support contract renewals or licensing should be renewed from the date of renewal, but Fortinet starts from the day it had expired. It is a loss for customers. They might have had some problems because of which they did not take the license one month before. Fortinet should work on this. Cisco doesn't do this. Cisco always starts from the day they apply for the license."

"Its price could be better."

"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."

"It was probably about $2,500 per firewall. It was all included. It included support, services, threat management software, and 24/7 FortiCare on it. Cisco products are more expensive."

"Pricing and licensing is a little bit complicated in FortiGate. They are always on the higher side. This is one issue that we always raise with the company that they should reduce the price according to Indian market requirements. There are no costs in addition to the standard licensing fees."

"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."

"The pricing is perfect."

"The price is okay."

More Fortinet FortiGate pricing and cost advice

"The product is a little expensive."

"The larger MX products are on the expensive side."

"The product’s price is reasonable."

"The solution is expensive compared to other vendors but you can get good discounts if you know the account manager. The product is less expensive than a normal Cisco subscription. The tool's hardware warranty is a lifetime but you need to purchase support which comes in three, five, and seven years subscriptions."

"The solution is expensive."

"Meraki MX's pricing is cheaper as compared to Cisco's standalone products."

"capabilities" What is our primary use case? The solution is mainly based on the cloud which is highly adaptable to the needs of its users due to its large user base. By employing over fifty VPS, we strategically position these units where clients require them the most. Remarkably, the cost of this setup is notably more affordable compared to competing alternatives. The management dashboard allows users to oversee each branch within their network. This comprehensive view is unified within the dashboard, offering insights into the entire branch network. The system works mostly for financial institutions, particularly banking clients. What is most valuable? The cloud management system is really valuable. What needs improvement? Direct logging is something that can be introduced. In the absence of cloud management, the possibility of local configurations and on-premise logins becomes restricted. This limitation stands as a primary concern. When it comes to resolving issues, the inability to access login options hampers troubleshooting efforts. The stability is noteworthy; but when compared to alternative products, its stability is comparatively lower. Additionally, certain limitations are observed in terms of remote control. Price-wise, the solution stands out for its competitive and cost-effective nature compared to other alternatives. Operationally, it is user-friendly and requires minimal effort from administrators, making configuration hassle-free. For how long have I used the solution? I have been using Meraki MX for the last three years. What do I think about the stability of the solution? The solution is stable however there are issues and we need to reboot sometimes. I would rate it five out of ten. What do I think about the scalability of the solution? Considering the needs of medium-class clients, scalability proves to be highly advantageous. I would rate it nine out of ten. How was the initial setup? The initial setup is easy via the cloud portal, primarily because managed support is needed for internet access. Without this, the direct configuration of the box becomes unattainable.The duration required is significantly shorter compared to alternatives. Occasionally, when dealing with a larger number of branches, like fifty or more, we managed to complete the implementation within 14 days. In cases involving complex processes and discussions, additional time might be necessary. However, once the system is set up and connected to the cloud, other configurations can be done within an eight-hour timeframe. What's my experience with pricing, setup cost, and licensing? The solution has three licenses; enterprise, security, and SD WAN. This subscription-based method aligns with customer requirements. When procuring hardware, the minimum requirement is the enterprise license, granting access to cloud management and the portal. Customers can opt to acquire the security or SD-WAN licenses if needed. This adaptable pricing model offers great flexibility. All licenses are linked to the device count, proving advantageous for customers. If there's a future demand for additional devices, licenses can be expanded accordingly without any concerns. The flexibility of the licensing system is indeed valuable."

"The license cost depends on the box. We acquired a different product line. We are dealing with MX appliance now, that is, MX6, MX54, MX100, MX250, MX450. Every box has got an identity, and it has got its own specification. Every box has got a different license fee. We deployed Meraki MX in UAE when it was not a mature product. We took a risk, but we were successful. We saved a huge amount of money after implementing and removing all the MPLS and leased lines. We got a broadband connection because Meraki MX could work on a broadband connection. We have drastically saved a very good amount of money, which was one of the successful things apart from the successful solution."

More Meraki MX pricing and cost advice

"-"

"It is one of the cheapest tools in the market."

"The price could be more competitive."

"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."

"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"The price falls in the mid-range, neither exceptionally low nor high."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

850,349 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

20%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Educational Organization

22%

Computer Software Company

16%

Manufacturing Company

Comms Service Provider

Computer Software Company

13%

Manufacturing Company

10%

Financial Services Firm

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

Fortigate 60d vs. Meraki MX67 for a small company without a dedicated IT Department

We have Meraki Mx devices now, we are looking to replace them. But that is because the Meraki MX platform lacks SSL I...

See all answers

Which is better - Meraki MX or Cisco ASA Firewall?

Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...

See all answers

What do you like most about Meraki MX?

I am happy with the technical support for the solution. I rate the technical support a ten out of ten.

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks NG Firewalls vs Meraki MX

Compared 10% of the time

Sophos XG vs Meraki MX

Compared 9% of the time

Cisco Secure Firewall vs Meraki MX

Compared 6% of the time

SonicWall TZ vs Meraki MX

Compared 5% of the time

Netgate pfSense vs Meraki MX

Compared 5% of the time

More Meraki MX Competitors

Sophos XG vs Sangfor NGAF

Compared 16% of the time

Sophos XGS vs Sangfor NGAF

Compared 4% of the time

Netgate pfSense vs Sangfor NGAF

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 4% of the time

Check Point NGFW vs Sangfor NGAF

Compared 3% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2025

Download Fortinet FortiGate product report

Buyer's Guide

Meraki MX

April 2025

Download Meraki MX product report

Buyer's Guide

Sangfor NGAF

April 2025

Download Sangfor NGAF product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

MX64, MX64W, MX84, MX100, MX400, MX600

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Cisco Meraki MX appliances are next-generation firewalls with all the advanced security services needed for today’s IT security. The appliances are ideal for organizations considering a unified threat management (UTM) solution for branch offices, data centers, distributed sites, or campuses. Since Meraki MX is 100% cloud-managed, installation and remote management are simple and zero-touch.

Meraki MX’s hardware and virtual appliances are configurable in Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform, and private cloud support is offered through Cisco NFVIS and Alibaba Cloud.

Organizations of all sizes and across all industries rely on Meraki MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE) through advanced analytics with machine learning.

Cisco Meraki’s advanced QoE analytics offers:

End-to-end health of web applications at a glance across the LAN, WAN, and application server.

Autonomous machine-learned smart application thresholds applied to identify true anomalies that are based on past behavioral patterns.

Ability to monitor the health of all MX WAN links across an entire organization.

Ability to detail hop-by-hop VoIP performance analysis across all uplinks.

Cisco Meraki’s SD-WAN offers:

The Meraki MX’s SD-WAN is unique in that it can be easily extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances. Its SD-WAN lowers operational costs and improves the performance of remotely-accessed resources. Users can ensure the availability of the apps and services their employees use most through dynamic path selection, policy-based routing, support for application-layer profiles, and VPN.

Meraki MX offers industry-leading cloud management that has template-based settings which can scale easily from small deployments to tens of thousands of devices. It features an intuitive web-based dashboard for managing mobile devices, united firewalls, switching, and wireless LAN. Users can also benefit from role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs. Meraki MX is capable of producing summary reports with device, user, and application details archived in the cloud.

Meraki MX Key Features

MX has a robust suite of network services in an all-in-one device, which saves you money by eliminating the need for multiple appliances. These services include:

SD-WAN capabilities
SNORT®-based intrusion detection and prevention
Layer 7 fingerprinting
Web caching
Application-based firewalling
Anti-malware
Geo-based firewalling
Content filtering
Site-to-site auto VPN and client VPN
Web search filtering
Cisco Advanced Malware Protection (AMP)
4G cellular failover
Dynamic path selection
Web application health and VoIP health

Reviews from Real Users

Meraki MX stands out among its competitors for a number of reasons. Two major ones are its easy management and its ability to be accessed remotely. Below is some feedback from PeerSpot users who are currently using Meraki MX as their firewall security solution.

Craig B., a central services engineer at Liberty Technology, writes, “The web console for managing everything keeps everything on Meraki and keeps us from going somewhere else. It is why I think a lot of people like Meraki. Comparing it to SonicWall or even a different Cisco firewall, like traditional ASAs, managing Meraki is a thousand times easier because of fluidity. You don't have to rebuild a table just to change one rule. It's much more readable for a human.”

Edgardo C., an IT director, notes,”By using the VPN, we can connect remotely. We have two offices, and we could connect them through the VPN. We could establish a network between two sites, and that has improved and increased communication and productivity. Our remote site is able to access the server remotely.”

Cisco

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Hyatt, ONS

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Meraki MX vs. Sangfor NGAF

April 2025

Free Report: Meraki MX vs. Sangfor NGAF

Find out what your peers are saying about Meraki MX vs. Sangfor NGAF and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,349 professionals have used our research since 2012.

See our Meraki MX vs. Sangfor NGAF report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.