Try our new research platform with insights from 80,000+ expert users

Sangfor NGAF vs Sophos XGS comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
317
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Sangfor NGAF
Ranking in Firewalls
19th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
36
Ranking in other categories
No ranking in other categories
Sophos XGS
Ranking in Firewalls
14th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
82
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 0.8% compared to the previous year. The mindshare of Sophos XGS is 1.8%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Jaffar Ali - PeerSpot reviewer
Has provided stability, security, ease of management, and better reporting options
People use Sophos XGS because the overall channel support is very good, so they don't face issues. Additionally, it is competitive in pricing against Fortinet in some cases, especially when considering high availability, email subscriptions, and gateways Sophos XGS has provided stability,…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the SSL VPN, as it allows us to connect and it separates this product from other firewalls."
"Fortinet has a very good solution for Secure SD-WAN. One very good feature is that they have robust and simple FortiOS through which they provide all solutions. That's their strength. There's not much complexity involved with the Secure SD-WAN solution of Fortinet as compared to Cisco's solution, which has a lot of flexibility but complexity also comes with that flexibility."
"Overall, the pricing of the solution is very good. The product offers good value."
"FortiGate is more feature-rich and has a broader range of hardware. T"
"The most valuable feature of this solution is Quota."
"The user interface (UI) is very, very good."
"The response is very quick and they can visually resolve our problems in a short period."
"It's very fast and easy to configure."
"Technical support is very good."
"The built-in features function as intended, providing exceptional value."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"We can utilize our own network rather than paying for a private one."
"Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity."
"It offers application control features."
"So far, the performance and reliability of the product have supported our company's critical network traffic."
"The threat intelligence capabilities of the tool are good."
"It is extremely easy to deploy and fast to learn."
"Spam filtering is what I love most about XGS."
"It increases productivity in our company. Everything is protected."
"The product was easy for us to install."
"It is very stable. I have not heard of any issue where clients would have to replace hardware. It's been really stable for a long while."
"The policies are the greatest feature. They allow us to configure granular control over our network traffic."
"The stability of Sophos XGS is very high."
 

Cons

"With the addition of some features, it is possible that FortiGate can be used in all verticals."
"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."
"Sometimes you do need to know some CLI commands, so it's a bit harder for technicians or new people that don't know it."
"There are some license issues. Not every feature must have a separate license. There must be some of kind synergy between the license so we don't have to pay for every individual license that we would like to have."
"The non-error conserve mode has room for improvement."
"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."
"We would like to have the ability to disable some of the security functionalities."
"The solution could be more user friendly."
"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."
"The solution has too many bugs and these slow down the implementation."
"They need to increase the number of ports in the firewall."
"The product must provide more IPS features."
"The setup phase is quite complex."
"The reporting and log management could be improved."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"Sophos pricing is very high. The last instance I purchased was for three years, around $3,700 for SDG 125."
"The technical support could be improved as it is currently not competent and pretty slow."
"Sophos XGS could improve by having better integration with Active Directory."
"The stability could be a bit better."
"I would like to see a history of the monthly bandwidth utilization, the bandwidth consumption for a period of time."
"There is no option for right-clicking on any feature after logging into the firewall. I am unable to open a feature in a new tab. In FortiGate, I can do it; in Sophos, I cannot."
"Their marketing strategy is quite low, and they need to enhance engagement with partners."
"Sophos XGS could improve by having a Network Access Control(NAC). This feature is a basic function in other firewalls and should be added, such as Palo Alto."
 

Pricing and Cost Advice

"No comment."
"The pricing for the product is alright."
"The price for the Fortinet FortiGate is reasonable. Secure SD-WAN is free of charge. If you have their firewall, it's free of charge. It's very tempting."
"They need to be competitive with other solutions."
"​We saved a bundle by not needing all the past appliances from an NGFW.​"
"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."
"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."
"Fortinet FortiGate's price can be reduced."
"The price could be more competitive."
"-"
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"It is one of the cheapest tools in the market."
"The pricing is reasonable."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"Sangfor is cheaper than competing vendors."
"Sophos XGS is a cost-effective solution."
"I live in Bolivia and the price of Sophos XGS is high. However, they have adjusted their price a little over the past while but the price could still be less expensive to be affordable."
"We pay about $150."
"XGS' price could be lower, though it's moderately priced in the market."
"Once you pay for the Sophos XGS hardware there is no license required. There are additional costs if you want the support. We have purchased support for three years."
"Sophos XGS costs around $6,000 for a basic license."
"The price of Sophos XGS depends on the type of license. However, the licensing cost is approximately 60 percent of the total cost."
"Sophos XGS is competitively priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
831,071 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
6%
Manufacturing Company
6%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
8%
University
6%
Computer Software Company
17%
Manufacturing Company
8%
Comms Service Provider
7%
Educational Organization
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What do you like most about Sophos XGS?
The policies are the greatest feature. They allow us to configure granular control over our network traffic.
What is your experience regarding pricing and costs for Sophos XGS?
The pricing is justified, and the solution is considered budget-friendly compared to other vendors.
What needs improvement with Sophos XGS?
Hardware stability needs improvement. I have experienced multiple hardware complaints, particularly during firmware u...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Information Not Available
Find out what your peers are saying about Sangfor NGAF vs. Sophos XGS and other solutions. Updated: January 2025.
831,071 professionals have used our research since 2012.