Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks VM-Series vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
410
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Palo Alto Networks VM-Series
Ranking in Firewalls
12th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
65
Ranking in other categories
Advanced Threat Protection (ATP) (9th)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Palo Alto Networks VM-Series is 1.0%, up from 0.7% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
RonnieYazdani - PeerSpot reviewer
User-friendly CLI and efficient dashboard streamline operations with robust security features
I find Palo Alto Networks VM-Series easy to deploy, and none of my customers have had significant complaints. My customers have high certifications provided by Palo Alto Networks. The friendly dashboard and the ability to easily command and use the CLI make Palo Alto Networks VM-Series a better product. It offers robust solutions, making it valuable to my customers.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"User-friendly and affordable security solution that's recommended for SMB customers. This solution has good technical support."
"Easy to use support and licensing portal as well as activation process."
"The most valuable features are the possibility of having one fabric for switching on security."
"Fortinet FortiGate provides superior protection compared to other firewalls, with high processing capabilities."
"Previously, we were using another firewall device, Sophos. Compared to that, Fortinet FortiGate provides more features and better security."
"The initial setup is straightforward."
"The payment function for applications is good."
"Its stability is the most valuable."
"I like the UI. Most things are accessible from the user interface and it is quite user-friendly. With respect to both VM-based firewalls and physical firewalls, it's easy to create updates."
"The VM-Series scalability is fast and easy to implement, improving our security posture as our Azure network grows."
"Palo Alto Networks VM-Series is easy to maintain...From a security point of view, I find Palo Alto Networks VM-Series to be a better product compared to the other solutions in the market."
"It is nice to have a rock solid security platform that we can count on."
"Scalability is a strength of Palo Alto VM-Series."
"You already can scale it if you put it in Auto Scaling groups. If you put it in a load balancer, it should already be able to scale."
"The additional visibility, which was lacking with cloud-native tools, has improved the organization's cloud security posture. Advanced enforcement and granular security controls help manage potential threats."
"The most valuable features are the DNS security and threat prevention capabilities."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"We can utilize our own network rather than paying for a private one."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"It is a stable solution."
"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."
"The VPN connectivity feature is really nice."
 

Cons

"The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer."
"I want some additional features. For example, I want something to ensure that when we are using Google email or Microsoft email, or Google Workspace, emails can only be accessed on designated machines given to our employees. I would like them to access data from designated machines, not from any machine. It should work for designated mobiles and laptops. I don't know if Fortinet provides something like that out of the box."
"The solution needs to improve its integration with cybersecurity."
"We haven't tapped into most of the functionalities that Fortinet FortiGate offers because we're using it just for gateway security. One of the things that I would prefer is a more expansive use of their analyzer. They could do more work on FortiAnalyzer in terms of the data and the information coming from it."
"The room for improvement is about the global delivery time period. Usually I need to wait for almost one month to deliver it overseas. So if you can shorten the deliver time it'd be great."
"Fortinet FortiGate needs to improve the protection, it did not prevent us from being attacked. Additionally, Fortinet FortiGate could provide more features for WAF devices. I should not have to purchase two solutions, it would be a benefit to combine these features into one solution."
"The captive portal could be improved."
"I think Fortinet FortiGate is stable because previously it had a hiccup around a bug within the authentication VPN due to the firmware, but after updating, it's easier to control."
"It would be helpful if we had a direct number for the support manager or the supporting engineer. That would be better than having to email every time because there would be less wait."
"The command-line interface is something that some people struggle with and I think that they should have an option to go straight to the GUI."
"The solution needs to have more easily searchable details or documentation about it online, so it's easier to Google if you have queries."
"When managing the firewall, it involves a Strata Cloud web browser that requires improvement to enhance deployment ease and call center efficiency."
"The utilization monitoring and GUI have room for improvement."
"People are less aware of Palo Alto."
"With Palo Alto Networks VM-Series, it is hard for me to manage its network configuration part."
"There is no proper support channel to follow up on cases."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"The interface and user experience are horrible."
"Lacks consistency in terms of filtering certain websites and applications."
"The cost of licensing is very high compared to other firewalls available here."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The web interface needs to be improved, making it more user-friendly."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
"The tool is expensive."
 

Pricing and Cost Advice

"It's not the cheapest, but it's value for money. Given everything we've got out of it: the DMZ port, the VPN, and the high availability, it's a pretty reasonable price."
"Some of our customers are using Sophos and SonicWall due to price concerns, as they can't manage the pricing of Fortinet FortiGate."
"Fortinet FortiGate gives you most of the features in one license."
"Its pricing is good. The advantages of Fortinet FortiGate over its competitors include good pricing and meeting our requirements at a lower cost."
"The pricing is flexible."
"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."
"If the price of the license in Fortinet FortiGate was less expensive it would be better."
"I do not have first-hand experience with the rice of Fortinet FortiGate, but I have heard the price was reasonable."
"Palo Alto Networks VM-Series is an expensive product but the best one in the market."
"Because the solution was getting deployed on AWS, it was the best place to go and it was available there."
"The cost of this product varies from customer to customer and the relationship with IBM, including how many offerings from IBM are already being used."
"Palo Alto Networks VM-Series is the most expensive tool among competitors"
"Palo Alto can be as much as two times the price of competing products that have twice the capabilities."
"Because I work for a university and the URL is for the institution, it's a free license for us."
"For licensing, It depends how they want to use the firewall. The firewall can be used only for IPS purposes. If you only want that firewall IPSs, you will only need a license that is called threat prevention. That license, threat prevention, includes vulnerabilities, antivirus signatures and one additional measure (that I can't remember), but it includes three measures and security updates."
"The product's most valuable feature is pricing."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"It is one of the cheapest tools in the market."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
865,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
9%
Manufacturing Company
7%
Financial Services Firm
6%
Computer Software Company
15%
Financial Services Firm
11%
Manufacturing Company
9%
University
6%
Computer Software Company
11%
Manufacturing Company
11%
Financial Services Firm
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
How does Azure Firewall compare with Palo Alto Networks VM Series?
Both products are very stable and easily scalable. The setup of Azure Firewall is easy and very user-friendly and the...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Warren Rogers Associates
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Palo Alto Networks VM-Series vs. Sangfor NGAF and other solutions. Updated: July 2025.
865,164 professionals have used our research since 2012.