Forcepoint Next Generation Firewall vs Sangfor NGAF comparison

Forcepoint Next Generation Firewall vs. Sangfor NGAF

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 0.9%, up from 0.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Sangfor NGAF	1.1%
Forcepoint Next Generation Firewall	0.9%
Other	82.9%

Firewalls

Featured Reviews

Mageshwaran S

Solution Architect at airtel

Enables customers to manage security effortlessly with intuitive features and easy integration

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

Read full review

Ajit Pratap Kundan

MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees

Unified security management has improved traffic control and simplified remote workforce access

Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"From the firewall perspective, the rules and policies are very sufficient and easy to use."

"The wireless control is helpful."

"The internet filtering feature has really benefited my organization because we have a lot of things that go on illegal sites like auto torrents sites and a lot of streaming and downloads."

"For application filtration, I really appreciate many features of Fortinet FortiGate because it is more reliable, easy to use, and the reports are easy to read and understand."

"The features that prevent internet connections, the filtering are the most valuable because we did not have any internet protection before."

"It is a UTM firewall with many features, helping me control users and public multi-servers easily while providing seamless, simple integration into a large network."

"Apart from the fact that they should just include everything in their offering, everything else works fine for me."

"The interface is user-friendly, so it's easy to add policies and block traffic."

More Fortinet FortiGate pros

"The security management center is one of the best parts of the product."

"This is a good product and I have already recommended it to one of my friends that is now implementing it in the educational sector."

"The VPN is great."

"It provides decent protection for the LAN, especially in run mode."

"Forcepoint is stable and we plan to continue using it in the future."

"The most valuable feature is controlling the traffic and the logging. They have real-time logins for traffic logs. Troubleshooting was very easy for me."

"Forcepoint is my favorite enterprise firewall."

"It is stable and scalable. In addition, their support is great. When you ask them for something, they provide support, and if required, they also involve the R&D team to help you to resolve the issues in your configuration."

More Forcepoint Next Generation Firewall pros

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."

"I think the tool has the feature to detect and kill ransomware in three seconds."

"The most valuable feature of Sangfor NGAF is its integration."

"The level of support provided to local companies is good. They transform their application control and other settings according to that country."

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

"The solution is quite safe and good, and furthermore, it is very good for different environments."

"So far, the performance and reliability of the product have supported our company's critical network traffic."

More Sangfor NGAF pros

Cons

"One area of improvement I've noticed is the lack of built-in monitoring capabilities in the firewall. Currently, we rely on third-party solutions for monitoring purposes. However, I believe the firewall itself has the potential to do a better job in this aspect. Another aspect of Fortinet that concerns me is related to redundancy. We have a setup with two firewalls working in parallel, which requires a highly adaptable configuration. However, it feels unfair that clients need to purchase two licenses, especially when one of the firewalls serves as a backup. We have noticed that other manufacturers have different policies on this matter."

"Fortinet's support team consists of a huge networking team, because of which there is a delay in response at times."

"Fortinet FortiGate could improve by adding enhancements to FortiMail, FortiSOAR, and FortiDeceptor."

"The cloud features and integration could be improved."

"The speed of synchronization between FortiManager and FortiGate could be improved, but that could be because we host them in Azure."

"Small models (up to FG-90) are build on SoC (System on a Chip), so they need to be mounted in places with enough airflow and right temperature, otherwise they could hang, slow down traffic processing, but more often you just can't log in to the device's web-interface (reboot won't help you until it cools down)."

"A lack of integration between our data centers."

"One area for improvement is the licensing policy. If support licenses are not renewed, the product's functionality ceases, which can be disruptive."

More Fortinet FortiGate cons

"They need to improve their alerts."

"When it comes to a complex deployment, the rules, firewall features, SD-WAN core features, and auto-scaling can cause the device to be not quite stable."

"We would love to take another solution from Forcepoint, but unfortunately, the price is too high."

"Management could be better. They can improve the management."

"While the policies are easy to read, the UI feels a bit dated and sometimes clunky on certain pages."

"The capacity for reading the users in a domain and the capacity to integrate the solution with the active directory or any kind of directory services need improvement."

"It is a helpful feature, but it is not a user-friendly solution as a whole."

"The initial setup of the Forcepoint Next Generation Firewall has areas that are difficult."

More Forcepoint Next Generation Firewall cons

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

"Sangfor NGAF could improve the policies and default criteria. They could be much better."

"The solution has too many bugs and these slow down the implementation."

"It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters."

"Lacks consistency in terms of filtering certain websites and applications."

"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."

"The support for YouTube or the Internet is not enough."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

More Sangfor NGAF cons

Pricing and Cost Advice

"There is only a standard license cost to use the solution."

"I rate FortiGate's pricing a five out of ten."

"Currently, we are paying about $1,500 a month for three sites."

"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."

"Before choosing a piece of equipment you have to take into account the cost-benefit offered by each one. Sometimes it is not worth paying a very cheap price to have a minimum level of security."

"For our organization, the licensing costs are approximately $7,000 per year."

"The price of FortiGate is average and I would say that based on the top five products available on the market, it is in the affordable range."

"It is not a very costly product if you compare it with other products. The return on investment is also good. If you compare the return of investment and money that you are spending on this product with Palo Alto, Cisco, Check Point, and other solutions, the investment is very less. We are happy with this solution. The optional licenses are there, and you can choose which one you want and which one to avoid."

More Fortinet FortiGate pricing and cost advice

"We have just a subscription for the cloud, and this license is great. The license is so good."

"The solution is expensive."

"I believe the licensing fee is for one year, three years, and five years, or something like that. If you wants to increase the support level from a simpler level to platinum, I think that there's a cost. There are differences between every kind of support, but I don't know the numbers."

"It requires a yearly subscription."

"It is an affordable product. We purchase its yearly license."

"The training that they offer to their end-customers. It's quite expensive, I believe it costs roughly $11,000"

"It is expensive."

"Next Generation Firewall is moderately priced."

More Forcepoint Next Generation Firewall pricing and cost advice

"The pricing is reasonable."

"The price could be more competitive."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"The price is unmatcheable."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

11%

Construction Company

11%

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	370
Midsize Enterprise	138
Large Enterprise	195

By reviewers
Company Size	Count
Small Business	29
Midsize Enterprise	11
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?

In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...

What needs improvement with Forcepoint Next Generation Firewall?

The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...

What is your primary use case for Forcepoint Next Generation Firewall?

The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Catalyst SD-WAN vs Forcepoint Next Generation Firewall

Compared 6% of the time

Sophos Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Commvault Cloud vs Forcepoint Next Generation Firewall

Compared 5% of the time

Cisco Secure Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Fortinet FortiOS vs Forcepoint Next Generation Firewall

Compared 4% of the time

More Forcepoint Next Generation Firewall Competitors

Sophos Firewall vs Sangfor NGAF

Compared 12% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 8% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 6% of the time

More Sangfor NGAF Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Forcepoint Next Generation Firewall

Download Forcepoint Next Generation Firewall product report

Forcepoint Next Generation Firewall report

Download Sangfor NGAF product report

Sangfor NGAF

May 2026

Also Known As

Fortinet FortiGate Next-Generation Firewall

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Forcepoint Next Generation Firewall offers robust network protection with features like URL filtering and advanced threat protection, ensuring comprehensive security and operational efficiency across various infrastructures.

Forcepoint Next Generation Firewall integrates URL filtering and advanced threat protection, including intrusion prevention and DDoS prevention. The centralized management console provides application awareness, strong network segmentation, and SD-WAN capabilities. Its graphical interface enhances user experience, while efficient technical support and seamless integration offer stability and scalability. Companies use it for perimeter security, VPNs, and threat prevention, optimizing performance in diverse sectors.

What are the key features of Forcepoint Next Generation Firewall?

URL Filtering: Provides robust protection against malicious sites.
Advanced Threat Protection: Includes IPS and DDoS prevention.
Centralized Management: Simplifies control across multiple devices.
Application Awareness: Enhances security policies.
Network Segmentation: Ensures strong internal security structures.
SD-WAN Capabilities: Optimizes wide area network configurations.

What benefits should users expect when evaluating?

Operational Efficiency: Streamlined management with a centralized console.
Enhanced Security: Comprehensive threat protection and VPN solutions.
Scalability: Easily adapts to infrastructure growth.
Integration: Seamlessly works with existing architectures.

Forcepoint Next Generation Firewall is widely implemented in sectors including finance, education, and government, offering security for data centers and managing remote access with IPsec VPN tunnels, SSL VPNs, and site-to-site connectivity. Companies appreciate its use for Unified Threat Management and automatic optimization, ensuring data security and efficient network performance.

Forcepoint

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

California Department of Corrections and Rehabilitation (CDCR)

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Forcepoint Next Generation Firewall vs. Sangfor NGAF