Forcepoint Next Generation Firewall vs Sangfor NGAF comparison

Forcepoint Next Generation Firewall vs. Sangfor NGAF

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Forcepoint Next Generation Firewall is 0.9%, up from 0.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Mindshare Distribution
Product	Mindshare (%)
Fortinet FortiGate	15.1%
Sangfor NGAF	1.1%
Forcepoint Next Generation Firewall	0.9%
Other	82.9%

Firewalls

Featured Reviews

Mageshwaran S

Solution Architect at airtel

Enables customers to manage security effortlessly with intuitive features and easy integration

In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.

Read full review

Ajit Pratap Kundan

MANAGER SOLUTION CONSULTING at a manufacturing company with 201-500 employees

Unified security management has improved traffic control and simplified remote workforce access

Forcepoint Next Generation Firewall does help in vulnerability identification and response by providing a single unified console through which I am able to monitor and manage infrastructure. The URL filtering capability of Forcepoint Next Generation Firewall helps in blocking malicious sites. We have to take care of both known threats and unknown threats. The firewall takes care of known threats, and we protect ourselves from unknown threats such as malicious code and malware that we cannot create firewall rules for. With these routing capabilities and policies, only whitelisted things get processed or passed. The biggest advantages of Forcepoint Next Generation Firewall, especially as a partner, service provider, and integrator, are that it is very easy to integrate these APIs with our solution, and most of the features I am getting in the clientless mode. Even with the client mode, it is easy to integrate with our client, allowing the customer to get a single client to address all the features of the firewall as well as the GTNA perspective. The flexibility of deployment, especially for the government and defense sectors, is that they want an on-premises solution, while the rest of the PSUs or enterprise segment are comfortable with the cloud offering, which is the SaaS offering and the way to go in the future.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."

"The price-to-performance ratio for using Fortinet FortiGate is always better compared to any other competitor, so they are rated better than the likes of Check Point or Palo Alto."

"The product is easy to install since we only need to follow the user manual, documents, and articles provided by Fortinet to install the product."

"FortiGate is the most effective solution for us and it's a cheaper option to Check Point or Palo Alto which we looked at."

"The solution has improved my organization significantly, with impactful capabilities such as sandboxing and cloud solutions, such as XDR, MDR, and EDR."

"The next-generation firewall features are the solution's most valuable aspect."

"It's very good and very stable for businesses. It works very well."

"Technical support is acceptable, and they're good in terms of local support and global support."

More Fortinet FortiGate pros

"Forcepoint Next Generation Firewall is quite affordable, cheaper than other brands like Palo Alto or Check Point, with a lot of capabilities, very stable, and very well-made, making it a really good product for its price when compared to other vendors."

"The solution offers sandboxing, which can be integrated at any time."

"Technical support has been quite helpful in the past."

"The people we deal with is a local partner in Cambodia and we can get good support from them."

"The simplicity of the solution is its most valuable asset. It's very user-friendly."

"I have two offices, and I can route the internet of both offices using the same product. The connectivity is great."

"When comparing this solution to others this one has better reporting, user management, and is easy to use."

"I don't have anything bad to say about the product. I absolutely love it."

More Forcepoint Next Generation Firewall pros

"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."

"The support from Sangfor NGAF here in Pakistan is great."

"Particularly good in the DPI where we can inspect inbound and outbound traffic."

"In terms of the most valuable features, the IPS report is quick and updated, and performance is also valuable."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake, as it is cheaper than Fortinet, Sophos, Check Point and Palo Alto."

"We are Sangfor Gold partners and I'd recommend this solution for the SMB market, as it is cost-effective and reliable."

"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."

"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."

More Sangfor NGAF pros

Cons

"I am afraid I cannot say that I have seen a return on investment."

"FortiGate should have a better way of detecting and managing the system memory because otherwise if the memory is too low, a system restart is required."

"The most important feature to have is zero trust, which is lacking in Fortinet FortiGate IPS."

"There are some complex administration tasks in their administration portal. That needs to be improved."

"The product's data guard feature should support a USB port when the internet connection is unavailable."

"In our environment, we need multiple virtual firewalls to facilitate end users and customers. Fortinet doesn't provide that but they really should include that feature."

"Someone without certification and experience with other firewalls might find it a bit more challenging to grasp the FortiGate format and its platform layout."

"Lacks training for new features."

More Fortinet FortiGate cons

"You do need knowledge of the solution in order to set the product up properly."

"The network interface could be better, and it could be cheaper."

"Intel could ditch the Java-based GUI rendering and could use some serious revamp on the way they manage their GUI."

"The optimization is not really ready. If you want very good optimization, you have to add it to the network."

"However, we did have a horrible experience with Forcepoint in the past."

"The solution needs to add an antivirus profile and anti-spyware profile, not just policies and VPN."

"Forcepoint is a little difficult to configure compared to its competitors."

"I found one problem with Forcepoint Next Generation Firewall. They still do not have any VPN clients for Windows computers with ARM processors."

More Forcepoint Next Generation Firewall cons

"It does not offer any recommendations on how to mitigate or control attacks."

"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."

"However, the maintenance cost can be a bit high."

"Our experience with its customer support was quite challenging."

"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."

"They need to improve their research team and they need to study their data to analyze it and build the product."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

"The tool's support is an area of concern where improvements are required."

More Sangfor NGAF cons

Pricing and Cost Advice

"I give the pricing a nine out of ten."

"The solution is cheap."

"I rate FortiGate's pricing a five out of ten."

"Each feature costs money, so it is important to study your needs."

"Pricing is lower than Cisco."

"The pricing for this solution is good."

"Its pricing is fine. It is on a yearly basis. Other than the licensing fee, there is no extra fee."

"The price depends on the size of the company. From the beginning, you just want to know the internet bandwidths, speed, and the number of users to be able to offer the right product and model. They have a lot of products in FortiGate according to the size of the company, like 200D and 300D."

More Fortinet FortiGate pricing and cost advice

"Forcepoint is very expensive but it's really secure."

"The cost is fair, but it could be improved."

"Forcepoint Next Generation Firewall is reasonable, it is priced the same as other firewalls."

"The big advantage of this solution is that we can select the right model for our requirements, which is not too expensive."

"It is expensive."

"I consider Forcepoint Next Generation Firewall's price to be good."

"It could be cheaper like Fortinet."

"Next Generation Firewall is moderately priced."

More Forcepoint Next Generation Firewall pricing and cost advice

"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."

"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."

"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"The price falls in the mid-range, neither exceptionally low nor high."

"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."

"The price is unmatcheable."

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

10%

Computer Software Company

10%

Manufacturing Company

Financial Services Firm

11%

Construction Company

11%

Manufacturing Company

10%

Computer Software Company

Financial Services Firm

11%

Manufacturing Company

10%

Comms Service Provider

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	370
Midsize Enterprise	138
Large Enterprise	195

By reviewers
Company Size	Count
Small Business	29
Midsize Enterprise	11
Large Enterprise	14

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

What is your experience regarding pricing and costs for Forcepoint Next Generation Firewall?

In terms of price, I would say Forcepoint Next Generation Firewall is not expensive. It is very much comparable to ot...

What needs improvement with Forcepoint Next Generation Firewall?

The negative side of Forcepoint Next Generation Firewall is that the ZTNA part is missing. For that, we have to integ...

What is your primary use case for Forcepoint Next Generation Firewall?

The major use cases for Forcepoint Next Generation Firewall are in government turnkey projects where we require a lot...

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

What is your primary use case for Sangfor NGAF?

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...

Sophos Firewall vs Fortinet FortiGate

Comparisons

Compared 16% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Fortinet FortiGate

Compared 5% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 3% of the time

Check Point Quantum Force (NGFW) vs Fortinet FortiGate

Compared 3% of the time

More Fortinet FortiGate Competitors

Cisco Catalyst SD-WAN vs Forcepoint Next Generation Firewall

Compared 6% of the time

Sophos Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Commvault Cloud vs Forcepoint Next Generation Firewall

Compared 5% of the time

Cisco Secure Firewall vs Forcepoint Next Generation Firewall

Compared 5% of the time

Fortinet FortiOS vs Forcepoint Next Generation Firewall

Compared 4% of the time

More Forcepoint Next Generation Firewall Competitors

Sophos Firewall vs Sangfor NGAF

Compared 12% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 8% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 8% of the time

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF

Compared 7% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 6% of the time

More Sangfor NGAF Competitors

Product Reports

Fortinet FortiGate

Download Fortinet FortiGate product report

Forcepoint Next Generation Firewall

Download Forcepoint Next Generation Firewall product report

Forcepoint Next Generation Firewall report

Download Sangfor NGAF product report

Sangfor NGAF

May 2026

Also Known As

Fortinet FortiGate Next-Generation Firewall

Forcepoint NGFW, Stonesoft Next Generation Firewall, McAfee Network Security Platform, Intel Security Network Security Platform

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate is a versatile network security tool offering features like VPN, firewall, web filtering, intrusion prevention, and scalability. It is known for its performance and integration with other Fortinet products, making it a preferred choice for robust cybersecurity.

Fortinet FortiGate stands out as a comprehensive cybersecurity solution with strong performance and ease of configuration. It delivers unified threat management, integrating features such as dynamic routing, SD-WAN support, and centralized management. Despite its strengths, improvements in the web interface's stability, pricing structures, and reporting capabilities are needed. Users seek better integration with third-party tools and automation advancements to enhance the experience further. These enhancements, alongside improvements in bandwidth management and the reduction of licensing costs, are points of interest for users looking to capitalize on FortiGate's extensive capabilities.

What are Fortinet FortiGate's key features?

VPN: Ensures secure remote connections.
Firewall: Protects against unauthorized access.
Web Filtering: Blocks malicious sites and content.
Application Control: Manages and controls applications.
Intrusion Prevention: Detects and prevents vulnerabilities.
SSL Inspection: Enhances security by inspecting encrypted traffic.

What benefits should be considered when evaluating Fortinet FortiGate?

Affordability: Offers cost-effective security solutions.
Reliability: Known for consistent and stable performance.
Integration: Seamlessly integrates with other Fortinet products.
Comprehensive Protection: Provides broad threat protection capabilities.

Fortinet FortiGate is widely implemented across industries as a primary firewall system for securing internet gateways and safeguarding data centers. It supports businesses in achieving SD-WAN integration and enhances cybersecurity by providing essential features like antivirus, web filtering, and application control. Enterprises utilize FortiGate for securing remote connections and ensuring compliance with security standards, making it adaptable for different network sizes and industries.

Fortinet

Forcepoint Next Generation Firewall offers robust network protection with features like URL filtering and advanced threat protection, ensuring comprehensive security and operational efficiency across various infrastructures.

Forcepoint Next Generation Firewall integrates URL filtering and advanced threat protection, including intrusion prevention and DDoS prevention. The centralized management console provides application awareness, strong network segmentation, and SD-WAN capabilities. Its graphical interface enhances user experience, while efficient technical support and seamless integration offer stability and scalability. Companies use it for perimeter security, VPNs, and threat prevention, optimizing performance in diverse sectors.

What are the key features of Forcepoint Next Generation Firewall?

URL Filtering: Provides robust protection against malicious sites.
Advanced Threat Protection: Includes IPS and DDoS prevention.
Centralized Management: Simplifies control across multiple devices.
Application Awareness: Enhances security policies.
Network Segmentation: Ensures strong internal security structures.
SD-WAN Capabilities: Optimizes wide area network configurations.

What benefits should users expect when evaluating?

Operational Efficiency: Streamlined management with a centralized console.
Enhanced Security: Comprehensive threat protection and VPN solutions.
Scalability: Easily adapts to infrastructure growth.
Integration: Seamlessly works with existing architectures.

Forcepoint Next Generation Firewall is widely implemented in sectors including finance, education, and government, offering security for data centers and managing remote access with IPsec VPN tunnels, SSL VPNs, and site-to-site connectivity. Companies appreciate its use for Unified Threat Management and automatic optimization, ensuring data security and efficient network performance.

Forcepoint

Sangfor NGAF offers a user-friendly firewall solution with a strong virus database and competitive pricing. It supports SSL VPN connectivity, intrusion detection, and is known for easy deployment and integration capabilities.

Sangfor NGAF is a comprehensive security platform providing robust network protection through its application control and detailed threat insights. While effective in preventing threats and ensuring network security, it has areas needing improvement such as real-time reporting and system support. It delivers secure internet and VPN connections, proficiently handling malware threats. However, it faces challenges with user experience, reporting capabilities, hardware scalability, and needs better third-party integration. Licensing costs are noted to be high, and there are performance variations between versions.

What are the key features of Sangfor NGAF?

User-friendly deployment: Offers an uncomplicated setup process.
Robust virus database: Provides reliable threat detection.
SSL VPN connectivity: Ensures secure remote access.
Application control: Manages application usage for enhanced security.
Intrusion detection: Detects unauthorized access attempts.
URL filtering: Prevents access to malicious websites.

What benefits should users expect when evaluating Sangfor NGAF?

Affordability: Competitive pricing compared to peers.
Integration: Good capabilities with existing systems.
Support: Noted for providing reliable customer service.
Threat prevention: Effective in securing networks against various threats.

Sangfor NGAF is widely used across industries including education, healthcare, and finance for its reliable network security. It is favored for securing internal servers, offering robust threat protection, and managing bandwidth efficiently at a budget-friendly rate.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

California Department of Corrections and Rehabilitation (CDCR)

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Forcepoint Next Generation Firewall vs. Sangfor NGAF