Cisco Meraki MX vs Sangfor NGAF comparison

Cisco and Sangfor are both solutions in the Firewalls category. Additionally, 93% of Cisco users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Cisco Meraki MX and Sangfor NGAF based on real PeerSpot user reviews.

Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Cisco Meraki MX vs. Sangfor NGAF Report (Updated: July 2025).

Buyer's Guide

Cisco Meraki MX vs. Sangfor NGAF

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

MURALI NIDAMANURI

Managing Director at VIPUN COGNITIVE SOLUTIONS PVT LTD.

Experience improved network management with flexible and secure connections

I recommend that Meraki MX should improve to be a better solution for the next release by being more competent so that we can offer it as a primary solution among all other brands, although I don't have any specific feedback, while the competitors are also ahead of these solutions. Enhancing user experience is always required. Enhancing the seamless connectivity is crucial and user experience enhancement is needed daily, otherwise people find it outdated. New features should look and be dynamically connected, and users should not be bothered frequently when connectivity issues occur. It should automatically remediate and find out the issue and then resolve it on its own without interrupting the work of the employees.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I'm looking forward to FortiGate's dashboard features, insights, application oversight, and monitoring, which could help us significantly."

"The scalability is easy with switches and access points that are basically plug-and-play for the most part."

"The most valuable features of Fortinet FortiGate are the ability to work in proxy mode, which other solutions, such as Palo Alto cannot. There are some features that are better that come at no extra license or subscriptions cost, such as basic SD-WAN. The DLT is useful, other solutions have the same feature too, such as Palo Alto."

"Run Script is the best tool to use in Fortinet FortiGate with multiple environments."

"This solution has helped our organization by having strong functions and a reliable firewall."

"The most valuable feature is the web filter."

"The IPS is good. It protect my network from attackers."

"The SD-WAN feature of Fortinet FortiGate has been most impactful in maintaining our network's integrity."

More Fortinet FortiGate pros

"The initial setup for me was straightforward."

"In a week, we can make new policy and view what all our users did."

"The simplicity of configuration is the most valuable feature of the solution."

"WAN optimization is the best feature of the solution."

"Meraki makes it easy to be secure and know where the holes are to fix them. We have been fixing anything that we have ever found for 20 years. We keep up-to-date with firmware upgrades. We just try to stay on top of everything for security, like maintaining updates and getting rid of old systems. I feel like we're on top of it."

"Managed centrally over the web: You can manages all your Meraki devices in a single account."

"We switched to Meraki because it lets you see what's happening in your LAN and WAN in a graphic and web environment."

"I think cloud management is key. The cloud management and support are the two things that make the product great."

More Cisco Meraki MX pros

"SSL VPN is the best feature."

"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

"Particularly good in the DPI where we can inspect inbound and outbound traffic."

"The tool's performance is good."

"The capabilities are mostly within the box."

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

More Sangfor NGAF pros

Cons

"The main aspect of FortiGate that could be improved is load balancing. Our management team does not want to buy another appliance for only load balancing."

"We sometimes have issues with FortiGate's routing table in the latest firmware update. We had to downgrade the device because our customers complained about bugs."

"WAN load-balancing could be a lot better at detecting when a link is poor or inconsistent, and not just flat out dead."

"In the next release, maybe the documentation on how to use this solution could be improved."

"We faced difficulties with the configuration because there are many features we could optimize using Fortinet FortiGate, but our reseller didn't have a good understanding of it. So, we just use it on a basic level, not with the best practice for using FortiGate."

"FortiGate can only retain logs for 24 hours or 7 days. I'm not sure if it holds them for a longer period, such as for a month. It will be useful for assessing our strategy and monitoring our environment without investing in FortiGate Analyzer. It would be beneficial if Fortinet could enhance the FortiGate by providing more statistical and monitoring views for a longer timeframe, rather than requiring access to FortiGate Analyzer."

"They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company."

"With FortiGate, the main complaint that I have heard is about the technical support."

More Fortinet FortiGate cons

"Load balancing options and ability to manage a couple of Internet connections."

"Right now, you can postpone the update but eventually, if you don't do the update, it will install the updates automatically for you and that's something that is not working for me."

"FortiGate is cheaper than Meraki. Even the license renewal is less than Meraki."

"It would be great if the Meraki devices let us see, in real time, the internet demand on a single device."

"Meraki MX can come across as an expensive solution."

"The configuration options for firewall and IPS have limitations."

"Scalability is an obvious concern with Meraki MX. You can't scale beyond some value. They are not highly enterprise grade, when you have hundreds of thousands of people it is very difficult to scale in Meraki."

"The product doesn't support route summarization and BGP dynamic routing protocol."

More Cisco Meraki MX cons

"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."

"Scalability for any network device is not very easy in terms of vertical scalability."

"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."

"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."

"Our experience with its customer support was quite challenging."

"The product must provide more IPS features."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

More Sangfor NGAF cons

Pricing and Cost Advice

"We have the full version of Fortinet FortiGate and we are on a three-year contract with a commitment of five years."

"The pricing for the product is alright."

"It's one of the more expensive brands. The 100 series costs around $4,000. They are similar in pricing to what you might get from Cisco solutions and probably other similar ones. They're not more expensive than other similar solutions, but they're certainly not cheaper either."

"It was worth the money overall. It's good value."

"The price of FortiGate is reasonable as I plan to buy new switches. The initial gadgets are already booted, and the pricing seems normal on the market. As for additional costs, I haven't subscribed to many extra features, so I'm only using what I need. Last year, I renewed the support for three years, which can sometimes be expensive but depends on the security benefits and how it helps us."

"The Indian market is different than the European and American markets. When you compare they need to be a bit more aggressive on pricing."

"The price depends on the size of the company. From the beginning, you just want to know the internet bandwidths, speed, and the number of users to be able to offer the right product and model. They have a lot of products in FortiGate according to the size of the company, like 200D and 300D."

"Fortinet FortiGate's price can be reduced."

More Fortinet FortiGate pricing and cost advice

"capabilities" What is our primary use case? The solution is mainly based on the cloud which is highly adaptable to the needs of its users due to its large user base. By employing over fifty VPS, we strategically position these units where clients require them the most. Remarkably, the cost of this setup is notably more affordable compared to competing alternatives. The management dashboard allows users to oversee each branch within their network. This comprehensive view is unified within the dashboard, offering insights into the entire branch network. The system works mostly for financial institutions, particularly banking clients. What is most valuable? The cloud management system is really valuable. What needs improvement? Direct logging is something that can be introduced. In the absence of cloud management, the possibility of local configurations and on-premise logins becomes restricted. This limitation stands as a primary concern. When it comes to resolving issues, the inability to access login options hampers troubleshooting efforts. The stability is noteworthy; but when compared to alternative products, its stability is comparatively lower. Additionally, certain limitations are observed in terms of remote control. Price-wise, the solution stands out for its competitive and cost-effective nature compared to other alternatives. Operationally, it is user-friendly and requires minimal effort from administrators, making configuration hassle-free. For how long have I used the solution? I have been using Meraki MX for the last three years. What do I think about the stability of the solution? The solution is stable however there are issues and we need to reboot sometimes. I would rate it five out of ten. What do I think about the scalability of the solution? Considering the needs of medium-class clients, scalability proves to be highly advantageous. I would rate it nine out of ten. How was the initial setup? The initial setup is easy via the cloud portal, primarily because managed support is needed for internet access. Without this, the direct configuration of the box becomes unattainable.The duration required is significantly shorter compared to alternatives. Occasionally, when dealing with a larger number of branches, like fifty or more, we managed to complete the implementation within 14 days. In cases involving complex processes and discussions, additional time might be necessary. However, once the system is set up and connected to the cloud, other configurations can be done within an eight-hour timeframe. What's my experience with pricing, setup cost, and licensing? The solution has three licenses; enterprise, security, and SD WAN. This subscription-based method aligns with customer requirements. When procuring hardware, the minimum requirement is the enterprise license, granting access to cloud management and the portal. Customers can opt to acquire the security or SD-WAN licenses if needed. This adaptable pricing model offers great flexibility. All licenses are linked to the device count, proving advantageous for customers. If there's a future demand for additional devices, licenses can be expanded accordingly without any concerns. The flexibility of the licensing system is indeed valuable."

"Pricing varies as per the type of license."

"The larger MX products are on the expensive side."

"The license cost depends on the box. We acquired a different product line. We are dealing with MX appliance now, that is, MX6, MX54, MX100, MX250, MX450. Every box has got an identity, and it has got its own specification. Every box has got a different license fee. We deployed Meraki MX in UAE when it was not a mature product. We took a risk, but we were successful. We saved a huge amount of money after implementing and removing all the MPLS and leased lines. We got a broadband connection because Meraki MX could work on a broadband connection. We have drastically saved a very good amount of money, which was one of the successful things apart from the successful solution."

"The product is a little expensive."

"We just have to pay for the product and the license. We have a license for three years, and it is renewed every three years. It costs $1,200 for three years for one endpoint. Meraki had a good promotion for remote workers or remote workforce. The discount is very good. This promotion continues till the next fiscal year of Cisco."

"The product’s pricing depends on the discount Cisco gives to different people."

"Meraki MX's pricing is cheaper as compared to Cisco's standalone products."

More Cisco Meraki MX pricing and cost advice

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"The product is very cost-effective compared to other brands or vendors."

"The price could be more competitive."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Computer Software Company

18%

Comms Service Provider

Manufacturing Company

Construction Company

Computer Software Company

11%

Manufacturing Company

11%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

Fortigate 60d vs. Meraki MX67 for a small company without a dedicated IT Department

We have Meraki Mx devices now, we are looking to replace them. But that is because the Meraki MX platform lacks SSL I...

See all answers

Which is better - Meraki MX or Cisco ASA Firewall?

Cisco Adaptive Security Appliance (ASA) software is the operating software for the Cisco ASA suite. It supports netw...

See all answers

What do you like most about Meraki MX?

I am happy with the technical support for the solution. I rate the technical support a ten out of ten.

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 20% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 12% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 11% of the time

SonicWall TZ vs Fortinet FortiGate

Compared 4% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Palo Alto Networks NG Firewalls vs Cisco Meraki MX

Compared 12% of the time

Sophos XG vs Cisco Meraki MX

Compared 8% of the time

Cisco Secure Firewall vs Cisco Meraki MX

Compared 6% of the time

SonicWall TZ vs Cisco Meraki MX

Compared 5% of the time

Netgate pfSense vs Cisco Meraki MX

Compared 4% of the time

More Cisco Meraki MX Competitors

Sophos XG vs Sangfor NGAF

Compared 16% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 5% of the time

Sophos XGS vs Sangfor NGAF

Compared 5% of the time

Netgate pfSense vs Sangfor NGAF

Compared 4% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 4% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

August 2025

Download Fortinet FortiGate product report

Buyer's Guide

Cisco Meraki MX

August 2025

Download Cisco Meraki MX product report

Buyer's Guide

Sangfor NGAF

July 2025

Download Sangfor NGAF product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

MX64, MX64W, MX84, MX100, MX400, MX600

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Cisco Meraki MX offers cloud-managed security with user-friendly setup and efficient management, enhancing VPN and firewall functionalities for businesses.

Cisco Meraki MX is known for its robust cloud-based network management, featuring AutoVPN, SD-WAN, and advanced security. Its centralized control over firewall, traffic shaping, and monitoring ensures excellent connectivity and security. The interface allows easy management by non-technical staff, offering remote access and seamless network performance through real-time alerts and troubleshooting. It supports global connectivity with minimal effort, addressing needs across small to enterprise environments. Despite its strengths, users point out areas needing improvement like load balancing, VPN features, more flexible logging, and session capabilities. Pricing, integration limits, and licensing need enhancement.

What are the key features of Cisco Meraki MX?

AutoVPN: Enables automatic VPN configuration for secure, site-to-site connections.
SD-WAN: Optimizes traffic routes for increased performance and reliability.
Advanced Security: Offers unified threat management, intrusion prevention, and content filtering.
Centralized Management: Simplifies operations with remote monitoring and configuration.
Traffic Shaping: Prioritizes critical business applications to maximize performance.

What benefits should users consider?

Ease of Deployment: Simplified installation reduces setup time and cost.
Real-Time Alerts: Ensures proactive issue identification and resolution.
Scalability: Supports growth with seamless integration and management of multiple sites.
Global Connectivity: Maintains efficient connections across geographic locations with minimal effort.

In industries like retail, finance, and education, Cisco Meraki MX provides enhanced security and connectivity. Retail chains benefit from easy VPN setups for secure multi-site networking, while educational institutions find value in its ability to manage large campuses efficiently. Financial services leverage its robust security features to protect sensitive data, ensuring compliance and trust.

Cisco

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

Hyatt, ONS

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Cisco Meraki MX vs. Sangfor NGAF

July 2025

Free Report: Cisco Meraki MX vs. Sangfor NGAF

Find out what your peers are saying about Cisco Meraki MX vs. Sangfor NGAF and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Cisco Meraki MX vs. Sangfor NGAF report.

See our list of best Firewalls vendors and best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.