Check Point CloudGuard Network Security vs Sangfor NGAF comparison

Check Point CloudGuard Network Security vs. Sangfor NGAF

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Check Point CloudGuard Network Security is 0.7%, up from 0.2% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
Check Point CloudGuard Network Security	0.7%
Sangfor NGAF	1.2%
Other	77.7%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Martin Raška

Senior Security Engineer & Instructor at Arrow Electronics

Unification of security features strengthens network protection

The overall network security is good. It's big-picture, all in one bundle. It's valuable to have everything in one place instead of spreading across different products. Unified security management positively affects a company's security operations. They have one unified view of the security. I can connect multiple gateways to the management and have it in one place. I can have reporting and views in a single pane of glass on the consolidated platform. It's easy to use. The management is the best on the market. It's very easy to work with, read, understand, and navigate. It helps increase our customer's security posture. We can see in some cases CloudGuard improves our customers' posture overall.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use it to avoid unwanted traffic."

"I really like the captive portal feature for our guest network. It has nice VLAN features in terms of separating our network. The anti-virus is also good."

"Its stability is the most valuable."

"The web filtering feature and the intrusion protection system are the most valuable. It is a resilient appliance. I never had an issue with it in terms of any security breaches."

"Fortinet FortiGate has very good support."

"I would rate the scalability of this product a nine out of ten because it is highly scalable. We have not had problems with customers in terms of scalability."

"The response from the technical support team has always been excellent."

"We receive substantial help from Fortinet, which is very valuable as they assist us in choosing the right solutions. If we need configuration assistance, they can send specialists who help design the solution."

More Fortinet FortiGate pros

"The installation process doesn't take very long."

"It enabled us to move to cloud workloads safely while having the same level of security as we have on-prem."

"Auto Scaling is one of the features that make me want to choose CloudGuard over actual HW."

"We get good insights into security, and we are more secure because we have more insights than we would get from other products."

"Check Point, in general, provides ease of day-to-day use, management, and log review, which is a significant advantage."

"Scale Set is highly beneficial. It is easy to upgrade and maintain."

"It really is a pretty complete solution."

"It matches what we have on-prem. We kept the same management and the same functionality that we were having on-prem. It has simplified things for us because there is no new dashboard to touch."

More Check Point CloudGuard Network Security pros

"The top functionality is the reporting feature."

"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

"The most valuable feature of Sangfor NGAF is its integration."

"The product is very fast and reliable."

"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."

"It offers application control features."

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

More Sangfor NGAF pros

Cons

"They sometimes hide some features and if you want to enable them, you have to go in the CLI, enable the feature and configure it through the CLI. Customers, typically, like everything to be done by the GUI."

"Some features in Fortinet FortiGate need improvement as we discover when calling support that certain actions must be done from the command line."

"They could continuously focus their improvements on network perimeter security, as that's what they're best at."

"A disadvantage exists when we are collecting the logs, as it sometimes becomes very difficult to interpret the logs that are generated from the firewall."

"The only issue that I have is with FortiNAC. The firewall is fine, but the FortiNAC interface is a little bit too jumbled or too complicated, not as straightforward as it is on the Fortinet FortiGate firewall and FortiAnalyzer."

"Areas of improvement for Fortinet FortiGate include the need for more training and certification, especially when dealing with distributors globally, which presents challenges in product availability and delivery timelines."

"The solution could maybe use more integration with artificial intelligence to be more proactive."

"Fortinet already improved FortiGate, but in the current market, many brands of security devices have improved together. Fortinet still needs to catch up with market standards. Fortinet is lacking in features in comparison to competitors."

More Fortinet FortiGate cons

"More integration into one solution with increased automation would be beneficial."

"Improvement is needed in the deployment models."

"While Check Point does offer some VWAN offerings, they appear to be more static and less tailored to cloud-native environments compared to Palo Alto's dynamic and flexible approach."

"What I would like for future updates would be faster updates to apply, and perhaps a greater presence in the local language for the regions of Latin America."

"Integration could be easier, especially with Scale Set and related features."

"Ease of management and reporting would be crucial for capacity planning and budgeting. If I see capacity increasing, I want to be able to plan appropriately."

"Improvements needed include better integration with Azure features to match on-premises capabilities."

"Lacks the ability to integrate with other security solutions."

More Check Point CloudGuard Network Security cons

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

"The reporting and log management could be improved."

"The solution should be able to work in a hybrid setup."

"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."

"They need to improve their research team and they need to study their data to analyze it and build the product."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

"The interface and user experience are horrible."

"Sangfor NGAF could improve the policies and default criteria. They could be much better."

More Sangfor NGAF cons

Pricing and Cost Advice

"The price of Fortinet FortiGate is affordable. Most of our customers are on a three-year license to use the solution. All the features and support are included in the price."

"We pay for the solution annually."

"Fortinet FortiGate is cost-efficient. Palo Alto is expensive, but Fortinet FortiGate is not."

"It's a very full-featured and it's priced well solution."

"It is less expensive than a Cisco solution."

"There is only a standard license cost to use the solution."

"FortiGate Next Generation Firewall is an expensive solution."

"The pricing for this solution is good."

More Fortinet FortiGate pricing and cost advice

"The product's licensing costs are yearly."

"The tool's pricing is been higher than other solutions, but it seems like it's turning downwards."

"We pay approximately ‎€150,000 ($166,000 USD) per year."

"There is flexibility in the different licensing models that are offered."

"The tool's pricing is reasonable."

"As a partner and solution provider for the last fifteen years, I have distanced myself from specific numbers. However, customer trust in the product is evident due to its comprehensive protective capabilities."

"The tool's monthly costs have undergone a significant reduction, dropping from approximately 12,000 euros to around 4,000. This represents a cost reduction of over 60 percent. However, it's essential to note that while costs decreased in some areas, they increased in others due to shifts in our environment. As our overall environment has grown, currently connecting 50 accounts to the cloud, it's challenging to directly compare costs with the state of our setup three years ago."

"The tool's pricing is not cheap."

More Check Point CloudGuard Network Security pricing and cost advice

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"The price is unmatcheable."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

21%

Manufacturing Company

Performing Arts

Financial Services Firm

Manufacturing Company

11%

Computer Software Company

10%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	59
Midsize Enterprise	38
Large Enterprise	75

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What do you like most about Check Point CloudGuard Network Security?

The tool's most valuable feature is its management console.

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?

My experience with the pricing, setup cost, and licensing for Check Point CloudGuard Network Security is that it was ...

What needs improvement with Check Point CloudGuard Network Security?

I think Check Point CloudGuard Network Security is an ideal product, so I see no improvements needed. If I had to thi...

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

Sophos XG vs Fortinet FortiGate

Comparisons

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Check Point CloudGuard Network Security

Compared 13% of the time

Azure Firewall vs Check Point CloudGuard Network Security

Compared 10% of the time

Trend Micro Deep Security vs Check Point CloudGuard Network Security

Compared 7% of the time

VMware NSX vs Check Point CloudGuard Network Security

Compared 5% of the time

Juniper SRX Series Firewall vs Check Point CloudGuard Network Security

Compared 3% of the time

More Check Point CloudGuard Network Security Competitors

Sophos XG vs Sangfor NGAF

Compared 17% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 6% of the time

Sophos XGS vs Sangfor NGAF

Compared 6% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 5% of the time

Check Point Quantum Force (NGFW) vs Sangfor NGAF

Compared 3% of the time

More Sangfor NGAF Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Check Point CloudGuard Network Security

Download Check Point CloudGuard Network Security product report

Check Point CloudGuard Network Security report

Sangfor NGAF

Download Sangfor NGAF product report

Also Known As

No data available

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Check Point CloudGuard Network Security offers centralized management, robust threat prevention, and seamless integration with major public clouds, ensuring consistent security for cloud and on-premises environments. It combines ease of use with flexibility across diverse IT infrastructure.

Check Point CloudGuard Network Security provides comprehensive protection for IT infrastructures in AWS, Azure, and hybrid environments. It ensures firewall security, managing traffic and securing cloud infrastructures while maintaining network protection and compliance enforcement. Organizations benefit from its centralized security governance, enhanced visibility, and threat prevention for both perimeter and internal security. It offers seamless integration with leading cloud platforms, allowing for efficient deployment and scalability, aligning with modern cloud requirements.

What are the key features of Check Point CloudGuard Network Security?

Ease of Setup and Use: Provides a user-friendly setup process and intuitive operation.
Robust Threat Prevention: Offers advanced capabilities to safeguard against potential threats.
Auto-Scaling: Adjusts resources dynamically to meet demand without manual intervention.
Centralized Management: Ensures uniform security policies across cloud and on-premises environments.
Integration with Major Public Clouds: Seamlessly works with AWS, Azure, and other leading platforms.
Intuitive ACL Menu: Simplifies access control list management with an easy-to-navigate interface.
Customizable Policy Options: Allows for personalized security settings suited to specific requirements.

What benefits should companies look for in Check Point CloudGuard Network Security?

Enhanced Operational Efficiency: Through automation and comprehensive reporting, organizations streamline operations.
Consistent Security Management: Offers uniform policies across different environments, reducing complexity.
Improved Threat Detection: Increases the ability to identify and respond to threats quickly.
Scalability: Easily adapts to growing or changing infrastructure needs without compromising security.

In industries such as finance, healthcare, and tech, Check Point CloudGuard Network Security is vital for protecting sensitive data, managing compliance, and safeguarding daily operations. Its robust integration capabilities support diverse infrastructure setups, assisting companies in maintaining high-security standards efficiently.

Check Point Software Technologies

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Physicians Choice Laboratory Services, Helvetica Insurance

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Check Point CloudGuard Network Security vs. Sangfor NGAF