Netgate pfSense Plus Firewall/VPN/Router vs Sangfor NGAF comparison

Netgate pfSense Plus Firewall/VPN/Router vs. Sangfor NGAF

Download the complete report

Helped 902,495 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Joseph Koomson

IP Network Security Specialist at MTN Ghana

Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.

Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.

Read full review

Jim Voige

Site Manager at a consultancy with 11-50 employees

High availability routing has secured our network and delivers reliable support every day

One downside of Netgate pfSense Plus Firewall_VPN_Router is the need for a better understanding of what hardware it would run on. Right now, we're using Netgate's hardware, but I'm interested in knowing if there are other hardware options available, particularly heavier duty hardware, because the Supermicro 1537 version we have only has a single power supply, which is a shortcoming in an IT environment where dual power supplies are ideal. The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options. I'm familiar with the costs of Supermicro servers, and I believe Netgate charges a premium for their server hardware without enough upside to justify it. The pricing is not justified.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The ability to set up remote systems is the most valuable feature."

"We are very satisfied with this product."

"Fortinet FortiGate's reliability is valuable."

"The most significant aspect of IPS is self-explanatory as it primarily focuses on intrusion prevention, which is crucial for Fortinet's internal outbreak prevention efforts and ensuring compliance on endpoint devices."

"If companies are thinking about the security of their network, they should consider FortiGate as a gate to the internet."

"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."

"The application control features, such as Facebook blocking and Spotify blocking, are the most valuable."

"The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good."

More Fortinet FortiGate pros

"My experience with the product is that it is a stable and good product that is easy to use."

"It's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"Overall, the entire Netgate pfSense Plus Firewall_VPN_Router product has been reliable, though some of their smaller gear aimed at remote offices hasn't been cost-effective."

"We use pfSense and Netgate pfSense Plus Firewall/VPN/Router to establish a VPN tunnel between our client and our headquarters to transfer data between client and our equipment; it's very simple to use, efficient, up to date, and the hardware is very available; it's very safe."

"They are more satisfied with Netgate pfSense Plus Firewall_VPN_Router in terms of its flexibility and customer support."

"I do not have complaints about Netgate pfSense Plus Firewall_VPN_Router with Firewall, VPN, and Router; it is really comfortable for use, and it does a pretty good job."

"So far, the performance and reliability of the product have supported our company's critical network traffic."

"It offers application control features."

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."

"We are Sangfor Gold partners and I'd recommend this solution for the SMB market, as it is cost-effective and reliable."

"It seems to be a durable, stable product."

"Sangfor is a good solution that provides a WAF and firewall solution; most other vendors, like Sophos and Fortinet and Cisco, only provide one solution, and that's a valuable feature of Sangfor."

"We've found the technical support to be helpful."

More Sangfor NGAF pros

Cons

"An area for improvement for Fortinet FortiGate is that their support needs to be more customer friendly."

"One of the weaknesses of the solution is something we noticed, especially after comparing the tool with SD-WAN features, since, unfortunately, in a massive scale size environment, the solution is not good. I"

"The main issue we have dealt with in the last few months is the number of vulnerabilities, which has caused concerns for both customers and integrators regarding whether Fortinet is a secure product; this has affected my rating, as it is why I do not give a ten, instead rating it an eight."

"Areas that have room for improvement in Fortinet FortiGate include support and GUI enhancement."

"Performance and technical support are the main issues with this solution."

"Fortinet renewal prices for all models are too high, so they should offer discounts for customers on renewal."

"Monitoring and reporting could be better."

"I would like to see improvements made to the dashboard and UI, as well as to the reporting."

More Fortinet FortiGate cons

"The pricing for the hardware of Netgate pfSense Plus Firewall_VPN_Router is steep, which is one reason I'd explore other options."

"The effectiveness of Netgate pfSense Plus Firewall_VPN_Router traffic shaping is quite good, but I am not very satisfied with the interface for control."

"They have to learn something more from FortiGate."

"The most significant drawback in recent years has been the cessation of firmware release downloads."

"I would assess the effectiveness of Netgate pfSense Plus Firewall_VPN_Router's traffic shaping as good, but I would give a six marks only for that compared to others because in the past few years, there has been a stop of improvement or lack of improvement showing in Netgate pfSense Plus Firewall_VPN_Router."

"Scalability for any network device is not very easy in terms of vertical scalability."

"The support for YouTube or the Internet is not enough."

"They need to increase the number of ports in the firewall."

"The product must provide more IPS features."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

"The setup phase is quite complex."

"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."

"The firewall system needs gradual improvements because there are more threats and challenges in the world every day."

More Sangfor NGAF cons

Pricing and Cost Advice

"The platform offers a reasonable price point compared to its competitors."

"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."

"Its licenses cost the same for different subscription plans."

"The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone."

"FortiGate SWG is reasonably priced."

"The pricing is reasonable."

"There is a license required to use Fortinet FortiGate with all the features. It has to be updated with the threats on an ongoing basis for the signatures to prevent threats and a license is needed to receive those security updates."

"Our licensing costs are on a yearly basis."

More Fortinet FortiGate pricing and cost advice

Information not available

"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."

"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"The price falls in the mid-range, neither exceptionally low nor high."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

902,495 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

Manufacturing Company

Financial Services Firm

Construction Company

38%

Comms Service Provider

10%

Healthcare Company

Manufacturing Company

Financial Services Firm

11%

Manufacturing Company

11%

Comms Service Provider

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	369
Midsize Enterprise	139
Large Enterprise	195

No data available

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What needs improvement with Netgate pfSense Plus Firewall/VPN/Router?

Netgate pfSense Plus Firewall/VPN/Router regularly provides updates. One aspect they can improve is that most people ...

What is your primary use case for Netgate pfSense Plus Firewall/VPN/Router?

We work with Netgate products. We are a reseller and consultant. We have been working with Netgate and Fortinet for a...

What advice do you have for others considering Netgate pfSense Plus Firewall/VPN/Router?

For metrics to measure its impact, we do not measure in a formal way. We use bandwidth monitoring to check how effect...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

OPNsense vs Netgate pfSense Plus Firewall/VPN/Router

Compared 58% of the time

VyOS Platform vs Netgate pfSense Plus Firewall/VPN/Router

Compared 42% of the time

More Netgate pfSense Plus Firewall/VPN/Router Competitors

Sophos Firewall vs Sangfor NGAF

Compared 11% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 9% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 6% of the time

More Sangfor NGAF Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Netgate pfSense Plus Firewall/VPN/Router

Download Netgate pfSense Plus Firewall/VPN/Router product report

Netgate pfSense Plus Firewall/VPN/Router report

Sangfor NGAF

Download Sangfor NGAF product report

Also Known As

Fortinet FortiGate Next-Generation Firewall

No data available

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Netgate pfSense Plus Firewall/VPN/Router offers open-source, license-free software with strong VPN options and robust networking capabilities, supporting secure, scalable, and reliable IT infrastructure integration.

Netgate pfSense Plus Firewall/VPN/Router stands out with its open-source framework, providing organizations the freedom from annual license renewals and enabling focus on CAPEX. It integrates seamlessly within IT environments, offering extensive package availability for broad functionality. Equipped with WireGuard, OpenVPN, and IPsec, it ensures robust VPN configurations. Its traffic shaping, load balancing, and failover functionalities enhance network performance, while Multi-WAN connections boost uptime. Users benefit from its affordability, scalability, VLAN support, and consistent secure operations. However, clearer communication on antivirus capabilities and interface improvements for speed is needed. The equipment's transition to cloud-based firmware updates has seen mixed reception.

What are the key features of Netgate pfSense Plus Firewall/VPN/Router?

License-Free Software: Avoid annual renewals, allowing financial focus on CAPEX.
Strong VPN Options: Supports WireGuard, OpenVPN, and IPsec for secure connections.
Traffic Shaping and Load Balancing: Optimizes network performance and reliability.
Multi-WAN Capability: Enhances connectivity and ensures consistent uptime.
VLAN Support: Allows efficient network segmentation and management.
Open-Source Nature: Provides transparency and continuous community-driven enhancements.

What benefits and ROI should users look for in reviews?

Cost Efficiency: Reduces expenditure with license-free, open-source software.
Scalability: Grows with organizational demands without added costs.
Reliability: Ensures secure, stable connections with minimal downtime.
Ease of Use: Simplified configuration and management for technical teams.
Community Support: Backed by a knowledgeable user community for ongoing support.

In educational settings, such as universities and engineering colleges, Netgate pfSense Plus Firewall/VPN/Router facilitates secure VPN tunnels for data transfer. It sees application as a high-availability BGP setup among consultants and resellers, ensuring reliability and network efficiency.

Netgate

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Information Not Available

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Netgate pfSense Plus Firewall/VPN/Router vs. Sangfor NGAF