No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor NGAF vs Untangle NG Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Untangle NG Firewall
Ranking in Firewalls
32nd
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
26
Ranking in other categories
Unified Threat Management (UTM) (10th)
 

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. The mindshare of Untangle NG Firewall is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate15.1%
Sangfor NGAF1.1%
Untangle NG Firewall1.0%
Other82.8%
Firewalls
 

Featured Reviews

JK
IP Network Security Specialist at MTN Ghana
Process-Level CPU Visibility: Introduce detailed CPU-usage metrics per subsystem (e.g., IPS engine, logging) so administrators can quickly identify and address performance spikes.
Analytics with FortiAnalyzer. Being able to pull in logs not just from our FortiGates but from all our other firewalls and then get them in one view has been a game changer. Whether I’m building an executive dashboard or doing a deep dive forensics session, I get everything I need without navigating consoles.Straightforward Application Control. FortiGate spots and blocks unwanted apps (eq. like BitTorrent or streaming services) with accuracy. Segmentation with VDOMs. We’ve carved our data center into four logical ‘mini-firewalls’ enterprise, core, billing, and WAF—all on one box. Each has its own rules and logs, and any traffic between them still gets inspected. It’s like having multiple appliances without the extra hardware. Always-Up-to-Date Threat Feeds. Daily signature updates and AI-driven threat sensing mean we’re blocking the latest vulnerabilities almost as soon as they’re announced.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Gary-Downey - PeerSpot reviewer
Director of Information Technology at a consultancy with 11-50 employees
Has provided built-in VPN tools and reporting features that streamline remote access and monitoring tasks
We do an outside-sourced threat prevention regarding the Threat Prevention features. I haven't run into areas that could be improved or cons versus pros for Untangle NG Firewall. I haven't done anything too advanced when it comes to the filtering, so I'm not sure what can be improved or added. I haven't dug into the advanced features, but I think some of the advanced capabilities are probably where it lacks a little bit, with the filtering and firewall rules. These areas could be improved to make it a nine out of 10 or a 10 out of 10 for overall rating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The dashboard I have found the most valuable in Fortinet FortiGate."
"Some of the key features of the solution is that it has good reporting, you can receive many details from the connection, for example, clients and website information."
"You don't need to reinvent the wheel, as FortiGate is the best solution."
"The product has the most valuable configuration, offloading, and security features."
"It increases security posture and is helpful for firewall reporting, intrusion protection, web filtering, and SD-WAN implementation."
"Once installed it will do its job efficiently and effectively for several years."
"The most valuable features we found are the SD-WAN, FortiGate SD-WAN, and the standard UTM protection, among others."
"Fortinet FortiGate has improved our routing and made us more secure."
"It seems to be a durable, stable product."
"It offers application control features."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware."
"The solution is quite safe and good, and furthermore, it is very good for different environments."
"It is a stable solution."
"This product is very user-friendly, and its Layer 7 security is very much improved."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake, as it is cheaper than Fortinet, Sophos, Check Point and Palo Alto."
"Untangle NG Firewall is something that I recommend, although we have only tried the software version."
"The web blocking for my clients and the application control are valuable."
"Since it can be put on any box, the scalability is fantastic."
"Untangle is a much better buy for the money than SonicWall."
"The all-in-one gateway security functions and the ability to install it on generic equipment stand out."
"The solution's most valuable feature is the content filtering."
"We have scaled it from 10 users to 1,000 users without any issues."
"The reason we chose this solution is because of their support, which is hands down the best support that I have had with a firewall."
 

Cons

"The one concern I have with Fortinet FortiGate is the firmware versions, which often have many bugs when upgraded, leading us to revert back to older versions multiple times in my lifecycle."
"There could be more modifications."
"They should consider making some improvements regarding the pricing."
"It would be helpful to have a better tool for migrating all policy rules using an automatic script."
"I have found the support from Fortinet FortiGate very poor. I do not use them anymore because they are not very good."
"One of the most important areas for improvement for Fortinet FortiGate is the limited resources for tests. I was limited to a few interfaces for one month, and it would be great if Fortinet could improve these features in their test versions."
"There is a need for enhancement with the signature management, improving the datasheet numbers, and scalability issues."
"In an incident, after a restart, Fortinet FortiGate did not connect to FortiGuard servers. Due to that reason, on the customer end, all websites got blocked. I don't know why this happened. The firewall of a bank in Sri Lanka rebooted yesterday, and after that, FortiGuard servers did not connect properly, blocking all customer environment websites."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"It would be ideal if the solution offered SD-WAN capabilities."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."
"The support for YouTube or the Internet is not enough."
"Lacks consistency in terms of filtering certain websites and applications."
"The interface and user experience are horrible."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
"The solution's licensing count could be improved."
"Web-filtering policies could be improved."
"We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have."
"The biggest challenge that we have with this solution is local support. The local support is a problem in our area."
"The common center facility that Untangle provides should be available on-premises."
"The pricing should be reduced because it is expensive."
"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."
"The pricing is not as good as it was some time ago. They've since skipped offering a lot of individual features."
 

Pricing and Cost Advice

"It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles."
"We pay about $4,000 for a yearly license, and there aren't any additional fees."
"Each feature costs money, so it is important to study your needs."
"When comparing this solution to others, I would rate it a ten out of ten in terms of pricing. However, the issue of requiring a separate license for redundancy is a drawback, and I would rate it a nine out of ten."
"I would say that all things considered, the pricing is pretty good."
"The product is expensive."
"It was pretty affordable. We did go a little bit above MSRP, but the service pack that was included was quite worth the additional costs. It is competitively priced compared to other major players in the market. It is significantly cheaper than Check Point, which is a primary competitor. Additionally, its pricing is comparable to that of Cisco's ASA and a few other vendors."
"Setup cost may be not so low, as you expect, because it depends on different factors, but TCO for 5 years may pleasantly surprise you."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."
"It is one of the cheapest tools in the market."
"The pricing is reasonable."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"It is the most cost-effective to use."
"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
"The pricing model is better than with SonicWall."
"Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc. It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors."
"It is not expensive. The best part is that it is based on the pay-per-use kind of scenario. An increase or decrease in the number of people doesn't make any difference. We are really happy about using this particular scenario."
"It is not expensive. It is cheaper than Fortinet."
"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
902,495 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
7%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
10%
Construction Company
7%
Comms Service Provider
16%
Construction Company
9%
Manufacturing Company
8%
University
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business369
Midsize Enterprise139
Large Enterprise195
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise1
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...
What needs improvement with Untangle NG Firewall?
I would appreciate improvements to the ad blocker and SSL Inspector of Untangle NG Firewall.
What is your primary use case for Untangle NG Firewall?
My usual use cases for Untangle NG Firewall are just like a firewall and router. The main purpose is for firewall fun...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,
Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: June 2026.
902,495 professionals have used our research since 2012.