No more typing reviews! Try our Samantha, our new voice AI agent.

Palo Alto Networks NG Firewalls vs Sangfor NGAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Palo Alto Networks NG Firew...
Ranking in Firewalls
5th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
200
Ranking in other categories
No ranking in other categories
Sangfor NGAF
Ranking in Firewalls
31st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Firewalls category, the mindshare of Palo Alto Networks NG Firewalls is 5.3%, up from 4.2% compared to the previous year. The mindshare of Sangfor NGAF is 1.4%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks NG Firewalls5.3%
Sangfor NGAF1.4%
Other93.3%
Firewalls
 

Featured Reviews

Nitin Yadav - PeerSpot reviewer
Network & Security Engineer at Arrow PC Network Pvt.Ltd.
Strong threat prevention has reduced phishing and malware while I monitor traffic in depth
Palo Alto Networks NG Firewalls offers application and user awareness, which allow me to control traffic based on threats. The product includes threat prevention, advanced threat prevention, and deep packet inspection that really helps prevent issues in our network. Deep packet inspection inspects full traffic content, even inside applications and encrypted sessions. Deep packet inspection makes a very practical difference day to day because it lets me see and control what is actually inside the traffic, not just the open port or IP. I have real visibility of which application is running instead of just seeing HTTPS. Palo Alto Networks NG Firewalls WildFire sandboxing is really good at detecting and blocking zero-day malware automatically, along with its GlobalProtect and DNS security features. Using Palo Alto Networks NG Firewalls positively impacts my organization by providing strong security, better visibility, faster response, and simplified operations. After deploying Palo Alto Networks NG Firewalls in our network, it blocks malicious traffic and prevents compromises that occurred before Palo Alto Networks NG Firewalls. I can now block outside IPs to prevent issues. After Palo Alto Networks NG Firewalls installation, I reduced 60 to 70 percent of malware and phishing attacks. Its threat prevention and DNS security features detect these attacks, block malicious domains, and reduce manual efforts for the security team.
AK
Network Administrator at GC University Lahore
Leverage detailed reporting for effective attack management
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications hosted there, websites, FTP portals, making it quite comprehensive. Essentially, it performs all the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The user experience is good and the configuration is very easy."
"It's a flexible solution and integrates well with apps and other security tools like SIEM, web applications."
"It is pretty important to have embedded machine learning in the core of the firewall to provide inline, real-time attack prevention, because all these different attacks and threats are constantly evolving. So, you want to have something beyond just hard pass rules. You want it to learn as it is going along. Its machine learning seems pretty good. It seems like it is catching quite a few things."
"We have complete visibility through the logs and the alerting."
"The most valuable features include the different security zones and the ability to identify applications not only by port numbers but by the applications themselves... And with the single-pass architecture, it provides a good trade-off between security and network performance. It provides good security and good network throughput."
"If you are looking for a great firewall that helps you stop attacks as well as giving you visibility with the administration, this firewall is the best choice."
"Prisma Access is the most valuable feature of Palo Alto Networks NG Firewalls."
"Compared with Check Point, it's excellent."
"I think the tool has the feature to detect and kill ransomware in three seconds."
"It offers application control features."
"The support from Sangfor NGAF here in Pakistan is great."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake, as it is cheaper than Fortinet, Sophos, Check Point and Palo Alto."
"The VPN connectivity feature is really nice."
"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
 

Cons

"The tech support was once great, but now it is poor. The tech support has gone south. It is really difficult. I had a Priority 1 case last a week in their queue, and after multiple complaints, I finally got somebody to take the case. These are things that are unacceptable in the business world. They could train their employees better."
"Palo Alto's various products need better integration to ensure they work harmoniously."
"The customer-facing side needs to be improved in terms of the engagement and involvement of support staff."
"As things are evolving, we want to make sure that Palo Alto is able to keep up with what is going on outside. They should continue to do more intelligence-related enhancements and integrate with some of the other security tools. We want to have a more intelligent toolset down the road."
"The only downside of Palo Alto Networks NG Firewalls, in my opinion, is the relatively higher price compared to Cisco FortiGate. This is especially noticeable when deploying basic configurations and considering the cost of licenses."
"Managing can be difficult."
"The solution has normal authentication, but does not have two-factor or multi-factor authentication. There is room for development there."
"There is room for improvement in the area of customer service."
"The web interface needs to be improved, making it more user-friendly."
"The GUI needs to be improved, lacks logic in some areas."
"Our experience with its customer support was quite challenging."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"They need to increase the number of ports in the firewall."
"The tool's support is an area of concern where improvements are required."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
 

Pricing and Cost Advice

"The solution is expensive."
"Don't buy a device with more power than you really need, because licensing depends on the cost of the box you have."
"Palo Alto Networks NG Firewalls are more expensive than Cisco firewalls, but slightly less expensive than Juniper firewalls."
"If someone doesn't have a security platform in their network, then the following licenses will be required: antivirus, anti-spyware, vulnerability, and Wildfire analysis. There are also licenses for GlobalProtect and support."
"The price of this product should be reduced."
"The tool's pricing is similar to that of Cisco. It's a security appliance; the cost depends on your network topology and specific requirements. The suitability of NG firewalls should be chosen based on your network and what you need. If a colleague from a different company asked for the cheapest and fastest firewall, I suggest they consider options like Sophos. Sophos took over Cyberoam, which was previously a leader in NG firewalls"
"The pricing is competitive."
"Palo Alto Networks NG Firewalls are expensive compared to other solutions."
"The price is unmatcheable."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"It is one of the cheapest tools in the market."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
921,148 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
11%
Manufacturing Company
11%
Financial Services Firm
8%
Computer Software Company
7%
Comms Service Provider
13%
Manufacturing Company
12%
Financial Services Firm
10%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business77
Midsize Enterprise56
Large Enterprise89
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firewall is easy to use and provides excellent support. Valuable features include int...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it kind of depends what you value most. PA is good at app control, web filtering a...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat signatures and updates. I also appreciate that I can just import addresses and URL...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Palo Alto Networks NG Firewalls vs. Sangfor NGAF and other solutions. Updated: November 2026.
921,148 professionals have used our research since 2012.