Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks VM-Series vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
357
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Palo Alto Networks VM-Series
Ranking in Firewalls
12th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
64
Ranking in other categories
Advanced Threat Protection (ATP) (9th)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.4%, up from 17.8% compared to the previous year. The mindshare of Palo Alto Networks VM-Series is 0.9%, up from 0.7% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Jorge Martínez - PeerSpot reviewer
Offers good SD-WAN capabilities and integrates easily with Fortinet devices
I am not part of the initial setup or deployment process since I work in presales. The setup or deployment is quite easy, as you can do a one-touch deployment that automatically connects to the FortiManager cloud when you connect it to a broadband or dynamic IP, allowing you to start the configuration from that point. We usually sell it for on-premises setups. It's on the cloud only when the client has virtual machines or their own service. Sometimes they have a service on the cloud like AWS, but it's more difficult to sell now because AWS has an e-commerce option where you can buy FortiGate directly. The only thing you need is someone to manage and configure.
RonnieYazdani - PeerSpot reviewer
User-friendly CLI and efficient dashboard streamline operations with robust security features
I find Palo Alto Networks VM-Series easy to deploy, and none of my customers have had significant complaints. My customers have high certifications provided by Palo Alto Networks. The friendly dashboard and the ability to easily command and use the CLI make Palo Alto Networks VM-Series a better product. It offers robust solutions, making it valuable to my customers.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution made it very easy to manage our bandwidth."
"The most valuable feature is the FortiManager for centralized management."
"Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities."
"I'm pretty happy with its reliability. It is also very scalable."
"I like Fortinet FortiGate's antispam filter, SPN, and clustering features."
"It is user friendly, and has all the features you need."
"The solution provides good threat intelligence feeds."
"The most valuable feature of Fortinet FortiGate is load balancing. It can provide central management and VPNA. Additionally, it has enhanced our security environment."
"It scales linearly with load and no issues."
"I have not actually called their support line, because we have a direct contact to a senior engineer in the company for any issues that we handle with them. I will say they are very responsive, and they do give you the information you need when you need it.​"
"Overall, I give Palo Alto Networks VM-Series a rating of nine out of ten."
"It helps in offering advanced protection against malware and anti-spyware, which is based on customer feedback stating the product has very good threat prevention capabilities."
"The most valuable feature is that you can control your traffic flowing out and coming it, allowing you to apply malware and threat protection, as well as vulnerability checks."
"In Palo Alto the most important feature is the App-ID."
"It has the ability to create Palo Alto VM-series using software."
"A solid operating system with all the necessary data center security features."
"It offers application control features."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"In four steps one can configure the entire firewall."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."
 

Cons

"The feature which gives us a lot of pain is ASIC architecture."
"Improvement is needed in the Web Filter quotas to restrict users with allocated quotas."
"Compared to some other products, the DLP is not at par for the moment."
"Fortinet FortiGate could improve by having more capabilities for troubleshooting VPN connections. For example, I do get some feedback about the current status, but I could use some history and logging of important events. The information is logged in our Syslog server, but I could use that information from the device. If they could provide a GUI to have some more insight on what's going with my VPN would be useful."
"At this moment, we believe that Fortinet FortiGate should be improved by injecting more AI because the kind of threats we are seeing are more ransomware threats. Fortinet FortiGate is able to ensure these threats do not enter, but we would prefer to see more proactive alerting mechanisms come out."
"The improvement is related to logs. Instead of the CLI, we should be able to have more insights into the logs of the firewall in the GUI."
"They should improve high CPU and memory usage that occurs."
"The people we are working with are not able to configure MFA. They are having some technical issues. Fortinet needs to ensure that its partners are well-trained."
"It'll help if Palo Alto Networks provided better documentation."
"They made only a halfhearted attempt to put in DLP (Data Loss Prevention)."
"I would like to see a more thorough QA process. We have had some difficulties from bugs in releases."
"The only minor issue we've faced is with the app's ID configuration, which requires specific matching for application filtering."
"The interface is all Java-based. I would prefer an HTML5 interface."
"I find it difficult to reach technical support at Palo Alto Networks."
"There could be dynamic DNS features similar to Fortinet in the product."
"When managing the firewall, it involves a Strata Cloud web browser that requires improvement to enhance deployment ease and call center efficiency."
"The cost of licensing is very high compared to other firewalls available here."
"Our experience with its customer support was quite challenging."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The tool is expensive."
"They need to increase the number of ports in the firewall."
"It does not offer any recommendations on how to mitigate or control attacks."
"The GUI needs to be improved, lacks logic in some areas."
"They need to improve their research team and they need to study their data to analyze it and build the product."
 

Pricing and Cost Advice

"The price of FortiGate is comparable to that of most other firewall solutions and is more affordable than Cisco."
"Fortigate's pricing is competitive."
"Compared to other firewall products, it's a little cheaper in terms of pricing."
"Its price is reasonable. They have a clear pricing policy. It is not complicated by the number of VPN users at a time. We know what the price is. The yearly subscription for the security license is rather high, but it is all included for whatever number of users you have and the kind of functions you need."
"The price of Fortinet FortiGate is the lowest in the market."
"In terms of the market, it's not a cheap product, but it's cost-effective."
"The license of Fortinet FortiGate should be reduced."
"Fortinet costs are 25% lower than the high-cost provider. There is an equipment cost and a recurring monthly cost for licenses and technical support."
"Purchasing on the AWS Marketplace was simple, effective, and easy."
"Because I work for a university and the URL is for the institution, it's a free license for us."
"For licensing, It depends how they want to use the firewall. The firewall can be used only for IPS purposes. If you only want that firewall IPSs, you will only need a license that is called threat prevention. That license, threat prevention, includes vulnerabilities, antivirus signatures and one additional measure (that I can't remember), but it includes three measures and security updates."
"I rate Palo Alto Networks VM-Series pricing an eight out of ten."
"The product is cheaper than the on-premise version."
"Some parts of purchasing through AWS Marketplace are good, such as this product was easy to find and launch. Some of the other parts could be clearer in the AWS Marketplace, e.g., how to properly do an annual subscription."
"The pricing was expensive but it was comparable to the competition."
"Sometimes, it's cheaper to buy a new firewall with licensing instead of renewing the licenses of an old firewall."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"Sangfor is cheaper than competing vendors."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"The pricing is reasonable."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
15%
Computer Software Company
15%
Comms Service Provider
8%
Manufacturing Company
6%
Computer Software Company
17%
Financial Services Firm
14%
Manufacturing Company
8%
Government
6%
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
9%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Warren Rogers Associates
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Palo Alto Networks VM-Series vs. Sangfor NGAF and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.