We performed a comparison between Sangfor NGAF and Sophos UTM based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."We find all of its features very useful. Its main features are policies and access lists. We use both of them, and we also use routing."
"I have integrated it for incidence response. If there is a security event, the Cisco firewall will automatically block the traffic, which is valuable."
"This solution made our organization more secure and gave us better control."
"The clusters in data centers are great."
"With Cisco, there are a lot of features such as the network map. Cisco builds the whole network map of the machines you have behind your firewall and gives you insight into the vulnerabilities and attributes that the host has. Checkpoint and Fortinet don't have that functionality directly on the firewall."
"Cisco's technical support is the best and that's why everybody implements their products."
"The most important feature is the VPN connection."
"The feature set is fine and is rarely a problem."
"The most valuable feature of Sangfor NGAF is its integration."
"The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"We can utilize our own network rather than paying for a private one."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"The packet filtering's great. You get out what you put into it. It works great as long as you know your security and configure everything adequately. If you just pop one in and it's not configured, then it's basically wide open. It kind of depends on the admin skill, but it's an excellent product."
"Sophos UTM is the simplest of these products to setup."
"The stability of Sophos UTM is very good. The solution has been stable since Sophos took over Cyberoam which was the original company providing this solution."
"An easy solution to learn because the graphics are very intuitive."
"With Sophos, we have not had any incidents this year. The security provided has been good. It has proven to be okay for our needs."
"The stability, overall, is excellent. I haven't had a problem in the last two years."
"The initial setup is pretty easy."
"It's a stable solution."
"It can probably provide a holistic view of different appliances because many customers do not have only one brand, besides the traditional SNMP protocols, to cover all their devices. There are some specific requirements in terms of configurations or actions that sometimes have to be done in a very manual way because of the different versions or brands in a customer's infrastructure. It could also have some additional analytics capabilities. It has some very interesting ways to monitor the traffic and identify false positives from the architecture and the environment. It would be good if there is a way to patch with some other industry-specific solutions and synchronize some of the information, such as what other customers experience in their operations and probably share some additional information that could be leveraged or shared among the industry. Such information would be something interesting to see. It could have AI capabilities related to how the appliances could benefit from learning the current environment and different exposures."
"We're getting support but there's a big delay until we get a response from their technical team. They're in the USA and we're in Africa, so that's the difficulty. When they're in the office, they respond."
"Comparing Cisco solution to others, it is expensive, it would be better for it to be cheaper."
"Cisco Firepower NGFW Firewall can be more secure."
"The maturity needs to be better."
"An area of improvement for this solution is the console visualization."
"It would be good if Cisco made sure that the solution supports all routing protocols. Sometimes it doesn't."
"Other products are becoming easier to access and configure. They are providing UI interfaces to configure, take backup, synchronize redundant machines, and so on. It is very easy to take backup and upgrade the images in those products. Cisco ASA should have such features. If one redundant machine is getting upgraded, the technology and support should be there to upgrade other redundant machines. In a single window, we should be able to do more in terms of backups, restores, and upgrades."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"They need to increase the number of ports in the firewall."
"The GUI needs to be improved, lacks logic in some areas."
"The solution has too many bugs and these slow down the implementation."
"Lacks consistency in terms of filtering certain websites and applications."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"Anti-phishing functionality should be improved."
"Sophos customer support could use some improvement."
"Sophos UTM could be simplified, and they can improve on the many other features, like SD-WAN and load balancing. Sophos UTM is missing a few features that their competitors have. For example, if you have multiple branches you would like to connect, the load balancing features aren't available on multilink. If we create a VPM for multiple LAN links, we cannot load balance the traffic."
"I would like this solution to support ICAP. Also, they no longer support on-premises management, and are forcing clients to use centralized management via the cloud, which I don't agree with."
"We need a better VPN client for the customers."
"In Sophos UTM there is always a problem with the routing tables. If you want to see the routing table, you have to use the UI. You can't do it via a web browser. The routing table is better in Fortinet."
"They could use more SSL VPN support."
"The reporting system needs to allow for customizations because many reports do not include details that we expect."
Sangfor NGAF is ranked 16th in Firewalls with 13 reviews while Sophos UTM is ranked 1st in Unified Threat Management (UTM) with 38 reviews. Sangfor NGAF is rated 8.2, while Sophos UTM is rated 8.2. The top reviewer of Sangfor NGAF writes "A scalable and comprehensive solution that specializes in ransomware detection". On the other hand, the top reviewer of Sophos UTM writes "Great web and email filtering with reasonable pricing". Sangfor NGAF is most compared with Fortinet FortiGate, Sophos XG, Fortinet FortiOS, Palo Alto Networks NG Firewalls and pfSense, whereas Sophos UTM is most compared with pfSense, Fortinet FortiGate, Sophos XG, OPNsense and Untangle NG Firewall. See our Sangfor NGAF vs. Sophos UTM report.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
