Sangfor NGAF Reviews

This solution is our firewall. I'm a network administrator.

Sangfor serves most of the basic purposes of a firewall. It's particularly good in the DPI where we can inspect the inbound and outbound traffic on a very granular level. It gives a very good predictive measure as well as the current measure of things going on in our network. When it comes to the VPNs, it has a very good throughput when remote users connect, particularly when it comes to site-to-site VPNs, where it provides a good analysis module. You can analyze inbound traffic and different policies on this. It gives us value for money overall.

I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense. They have put the NAT in the policy section but at the same time the DPI is in the network pane. The placement of different options in the menu system of this firewall is not that logical and often doesn't make a lot of sense. The operational procedures are a little tricky and require some technical skills. A level one person will have problems. The compatibility needs to be improved. 

I've been using this solution for three years. 

We have been experiencing power failures but the solution has been very stable, both from the hardware and the software perspective. We have built a lot of VPN solutions for the firewalls including Cisco, Firewall 2, and pfSense, and it has been very good with that. 

We don't require a very highly scalable coefficient but I believe it's scalable. 

The technical support is very good. They have a local vendor they have hired for the technical support and if anything cannot be resolved remotely, they come to us. They are very agile and very technically supportive.

Positive

The initial setup was a little complex because we were previously dealing with command line scenarios and we were not very comfortable with the GUI which is a little complex. 

Our licensing costs are around $15,000 per year which is nominal compared to other solutions. 

Whether or not this solution is good for you depends on your network. If you have sufficient technical support, then you can go for an open-source solution. Without that and if you have the funds, then this is a good solution. If not, then most of what firewalls do these days can be handled by an open-source solution.

This is a new solution in our country where the price tag really matters. They have targeted the public sector and I'm seeing more and more people moving towards Sangfor because it's cheaper than other products, and the support is quite good. 

I rate the solution seven out of 10. 

We have this solution deployed across multiple industries including education, pharmaceutical and different textile industries. This is a good product for network security and is popular right now. Sangfor is cheaper than well-known products like Fortinet and Palo Alto Firewall NGFS.

The level of support provided to local companies is good. They transform their application control and other settings according to that country. 

Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it. 

We have deployed many firewalls and have faced two or three faulty devices that we have to replace over a year because their power supply was faulty. Some customers use the device for over five years and they have worked fine but got slower with the time.

This is a scalable solution. 

I can vouch for the local support team. They are more than competitive in the market. They are always available for small and big customers. They are onsite whenever we need it and assist with any problem or deployment scenario and are willing to discuss it at any time. I would rate them a three out of five. 

I have previously used Fortinet. Fortinet is quite a mature product and offers so many features. Sangfor lack a bit in that area. Sangfor include a local database for URLs and other applications. When using Fortinet, you cannot block a local website by default. 

The simple deployment of a network on NGF is quite simple and their guides are quite simple as well. The do lack visual guides that are easier for some customers to follow. It's easy to configure a normal deployment scenario for networking and ET. When it comes to high level security and highly advanced features, you need to have some experience in that area to actually apply that on this firewall.

If you're experienced, it would take two or three hour maximum, depending on how many customers are using the policy and how much detailed configuration is needed. I would rate our experience with the setup an eight out of ten. 

We have faced some of the issues after deployment with URL filtering which we have logged a ticket for. Our customers are unable to access certain websites. We have diagnosed the problem but we are unable to identify the URL signature or what is blocking the IAM and preventing access to that site. 

For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it. By default, they provide you with 10 SSL and a VPN. If you want more than 10, you have to pay more. From a pricing perspective, I would rate them a four out of five.

They have a huge product line for large companies and we have deployed a firewall for over 5000 to 10000 users. It is suitable for all type of environments. I would advise others to spend one to two months after deployment on Sangfor to configure the many settings for security services. You have to work on it, keep looking at the logs and make changes as you go. You need this time to analyze, make future risk assessments and reconfigure the work from time to time. Only once this is done, can you consider deployment complete. 

It offers good value for money and is much cheaper compared to other firewalls. I would suggest Sangfor to those who are cost conscious. 

I would rate this solution a seven out of ten.

Sangfor NGAF can be used as a firewall for protecting servers, data, users, and access to the internet.

Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints.

I have been using Sangfor NGAF for approximately one year.

We have sold a few units to our customers and we have not had an issue with the stability.

We have customers in small to medium-sized companies.

We have less than 110 customers that are using this solution.

Their technical support is good, they are responsive. They have been able to resolve all of the issues that we faced.

The installation is easy, and the time it takes depends on the customer's environment. Doing the policies could take additional time.

We have approximately four people that support the solution. We have experience in deploying and maintaining the solution. Though the company could offer better training to us.

Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high.

Fortinet solutions sell at a very cheap price upfront, but after that maintenance fees, which they keep increasing it can become expensive. I hope Sangfor does not follow that model.

I have evaluated other solutions, such as Fortinet.

I would recommend this solution to others.

I have clients that are switching from Fortinet to Sangfor NGAF because the price of Fortinet's service is increasing. Sangfor NGAF has good integration with their endpoints which makes it a very attractive offering.

Sangfor is arranging much-needed training for resellers. There needs to be better marketing awareness not for the reseller, but for the consumer here in Malaysia. Sangfor needs to do some advertisements to attract more market awareness. Relying on resellers can be difficult when the market is very large. However, resellers do focus on their product, they also try to engage, and hire more.

I rate Sangfor NGAF an eight out of ten.

I believe I am using the recently updated firmware of version 4.0.

User-wise, the bandwidth management is one of the most valuable features. Also, certain features are available in the NGFW. 

The solution self-diagnoses everything, which we refer to as vulnerability assessment. It automatically runs on one's network and lists the pros and cons. I consider it to be very catchy. 

I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions.

I have been working with Sangfor NGAF for around three years.

So far, the solution has shown itself to be very stable. 

The solution is scalable and I can upgrade it to 40, which I consider to be a good thing. 

Technical support is very good. In a single call, the support person can come on site or address ones needs remotely within minutes. 

Prior to Sangfor NGAF we worked with Fortinet.

We switched because the previous solution did not readily make available support personnel. Also, while we considered the product to be stable, we felt the support to be very slow.

The setup was easy from the get go. In four steps one can configure the entire firewall. 

Give or take, it took no more than two or three hours. 

The price is very cheap. It cannot be matched. 

While Palo Alto claims to be pioneers in vulnerability assessment and risk management, I could not find references on the website to support this. Only Sangfor firewall has the requisite vulnerability assessment.

Moreover, Palo Alto and Sangfor are pretty much equal in terms of technology and interfaces. I was doing research to verify the vulnerability and risk assessments claims promoted on the website, as I was unable to find these. 

I am a customer and use Sangfor NGAF 5600 in my premises.

There are more than 2,000 users making use of the solution in my company.

The solution is quite safe and good. Furthermore, it is very good for different environments.

I rate Sangfor NGAF as a nine-point-five out of ten. 

The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall. 

An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices.

I have been working with this solution for three months.

The stability is good.

The technical support is good - they are very supportive and friendly and are available even on the weekends.

Previously, I have worked with Palo Alto, Fortinet, Sophos, and Endpoint Kaspersky. I would recommend Sangfor over these due to its ability to implement user restrictions.

The initial setup was not complex.

Sangfor's pricing is competitive.

This product is very user-friendly, and its Layer 7 security is very much improved. It can be customized to a very deep level. I would give this solution a score of eight out of ten.

Our customers purchase Sangfor NGAF primarily out of budgetary considerations. Sangfor enables high power internet access. Indonesia has a big market, not only as concerns the firewall. 

While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people. 

The solution has too many bugs and these slow down the implementation. The software should be updated to account for this. 

We have not received complaints from our customers about the solution's stability.

We have not received complaints from our customers about the solution's scalability. 

So far, we have not had occasion to contact tech support. 

As we are a distributor, we have our own maintenance team. 

When it comes to the price of firewall solutions, Sangfor NGAF takes the cake. It is cheaper than Fortinet, Sophos, Check Point and Palo Alto. 

I would no longer offer Sangfor, as I have ceased to be its distributor. I am now a distributor for Check Point. 

I rate Sangfor NGAF as an eight out of ten, owing to its bugs. 

We primarily provide this solution to our clients. We are providing services at financial institutions. We provide features based on customer requirements.

The solution offers some decent features. The assessment feature, for example, is a highly rated feature in Sangfor. It has options that aren't available on other products. 

It's a very reliable solution.

The deployment process is very straightforward. 

The stability is excellent.

We've found the technical support to be helpful.

The pricing is very good.

All the next-generation firewalls are providing the features Sangfor is already providing. It offers a good vulnerability assessment. This feature is not available on other devices. This feature allows for access to the endpoints and gives visibility to the vulnerabilities in Sangfor.

It would be ideal if the solution offered SD-WAN capabilities. It's not as good as what is offered by Fortinet, for example.

They need to increase the number of ports in the firewall. Both Fortinet and Sophos, for example, provide many more than what Sangfor provides. 

I've been working with the solution since about 2018. It's been a few years at this point.

The solution is very stable. We haven't had any issues with any of our customers. There are no bugs or glitches. It doesn't crash or freeze. It's extremely reliable. 

We have about 50 different customers who have used the solution.

The technical support is very good. Many products don't offer technical support in Pakistan. However, Sangfor does, which gives them an advantage. Their technical experts are right here and not in some other time zone or speaking some other language. If any customer faces any issues, they can go directly to the customer site. If a partner cannot rectify the situation, the customer has the option of going right to Sangfor. I would say that our clients have been satisfied so far.

I've previously worked with other solutions, such as Sophos and Fortinet. They are better for enterprise-sized organizations. Sangfor is better for smaller businesses. It's much more cost-effective.

We did not have an issue with the initial setup. The solution has a Wizard that basically walks you through the process. It's easy. It's not overly complex or difficult to execute.

The pricing is good. It's an affordable option for smaller companies. 

We are Sangfor Gold partners.

I'd recommend this solution for the SMB market, as it is cost-effective and reliable. If a company is enterprise-sized, something like Sophos may be more suitable. 

I'd rate the solution at a nine out of ten.

We primarily use this product as an intrusion prevention system.

Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection.

The most valuable part of this product is the set of end-user security features.

The web interface needs to be improved, making it more user-friendly.

I have been working Sangfor for the last 20 years. I have only recently installed the NGAF, so I am still learning about it.

The initial set was easy.

I installed it myself.

Sangfor is cheaper than competing vendors.

I evaluated several other options and found that Palo Alto and Sangfor were the best two. Ultimately, I chose Sangfor.

Price-wise, Sangfor was cheaper than the others and Palo Alto was more expensive than Fortinet.

My advice is that if you have a large enough budget then implement Palo Alto. Alternatively, with a lesser budget, I recommend using Sangfor.

I would rate this solution a seven out of ten.