


Sophos XG and Sangfor NGAF are both leading contenders in the firewall solutions arena. Based on the feature set, integration capabilities, and overall performance, Sophos XG appears to take the lead, particularly with its advanced threat detection and integration with Sophos Cloud.
Features: Sophos XG offers synchronized security, comprehensive application control, and advanced sandboxing with Sophos Sandstorm. It includes detailed reporting with customizable dashboards and dual anti-malware engines, enhancing threat detection. Sangfor NGAF provides strong WAN optimization, advanced intrusion detection, and a reliable VPN solution, but lacks certain integration features found in Sophos XG.
Room for Improvement: Sophos XG users suggest enhanced link load balancing, improved RAM, and better email protection. The user support library needs better organization, and scalability features could be improved. Sangfor NGAF users highlight the need for improved real-time reporting, simplified deployment, and more robust application control. Better integration with third-party solutions and interface speed are also desired.
Ease of Deployment and Customer Service:Sophos XG supports hybrid deployment, allowing versatile setups in on-premises and cloud environments. Customer service experiences vary, with some regions reporting delays. Sangfor NGAF, primarily on-premises, is noted for cost-effective deployments but faces criticism for slower technical support response compared to Sophos.
Pricing and ROI: Sophos XG is competitively priced, offering a favorable ROI through reduced IT costs and efficient threat protection. It is seen as affordable and valuable for larger organizations with its comprehensive feature set. Sangfor NGAF is priced lower than other major competitors like Fortinet and is considered economical for smaller businesses, but the mandatory licensing model is less popular. Both solutions provide a solid ROI, yet Sophos XG's extensive features might warrant its higher cost for larger operations.
| Product | Market Share (%) |
|---|---|
| Fortinet FortiGate | 19.9% |
| Sophos XG | 9.3% |
| Sangfor NGAF | 1.1% |
| Other | 69.7% |



| Company Size | Count |
|---|---|
| Small Business | 350 |
| Midsize Enterprise | 130 |
| Large Enterprise | 187 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 10 |
| Large Enterprise | 10 |
| Company Size | Count |
|---|---|
| Small Business | 140 |
| Midsize Enterprise | 52 |
| Large Enterprise | 35 |
Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.
Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.
What are the key features of Fortinet FortiGate?Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.
Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.
Sophos XG provides robust security capabilities, offering features like web filtering, VPN, and user-friendly management. Its intuitive setup and policy adjustments enhance security while synchronized endpoint protection ensures comprehensive defense.
Sophos XG is a network security solution with web and application filtering, VPN features, and a management interface that simplifies configuration. It offers email protection, threat prevention, and reporting capabilities, all contributing to a comprehensive defense strategy. Synchronized security with endpoints enhances protection, and advanced threat protection with efficient bandwidth management supports secure remote work environments. However, users suggest improvements in log interfaces for real-time actions and better email protection. Enhancements in link load balancing, RAM, VPN stability, and central management are needed. HTTPS filtering, certificate management, technical support, and scalability of the SD-WAN feature can see advances.
What are the key features of Sophos XG?In industries such as healthcare, education, and financial services, Sophos XG acts as a mainline defense for network security, VPN connectivity, and web filtering. It supports secure remote access, intrusion prevention, antivirus scanning, and secure web gateways integrated with endpoint systems, tailoring its extensive security capabilities to meet specific industry requirements.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.