No more typing reviews! Try our Samantha, our new voice AI agent.

Juniper vSRX vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
592
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Juniper vSRX
Ranking in Firewalls
36th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
36
Ranking in other categories
Virtualization Security (3rd), Unified Threat Management (UTM) (11th)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 15.1%, down from 21.7% compared to the previous year. The mindshare of Juniper vSRX is 0.9%, up from 0.3% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate15.1%
Sangfor NGAF1.1%
Juniper vSRX0.9%
Other82.9%
Firewalls
 

Featured Reviews

Mageshwaran S - PeerSpot reviewer
Solution Architect at airtel
Enables customers to manage security effortlessly with intuitive features and easy integration
In terms of improvements for Fortinet FortiGate, they could offer evaluation licenses, as compared to Meraki, which provides a 90-day evaluation. In Fortinet FortiGate, they do not provide standard evaluation licenses; instead, we need to request them from the OEM through the account manager for POCs. If we want to conduct a demo, we need to work with real hardware. In comparison to Cisco, we have DCloud, which helps with providing demos to customers, but in Meraki, I need to reach out to them, book a lab, and they need to provide all the hardware. I need remote access and L3 engineers to program it; only then can I offer a real-time demo to the customer.
Stratos-Margaritis - PeerSpot reviewer
Solutions Architect at Navarino SA
The ease of installation and licensing are also significant advantages
We use the application filtering, content filtering, and intrusion prevention system (IPS) features. These features are crucial for our network security. The ease of installation and licensing are also significant advantages, as it allows us to have one license for all products, which simplifies upgrading and maintenance. Additionally, the ease of deployment is critical for us.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best features of Fortinet FortiGate are UTM, web filtering, and IPS."
"The reporting and monitoring are very good."
"What I like the most is the configuration and that it's simple, and straightforward to maintain."
"We have knowledge of other firewall products but FortiGate is the best."
"FortiGate is easy to use, and I also like its VPN."
"We went from being terrified about our firewalls screwing up to completely forgetting we had firewalls."
"It's an easy solution to set up."
"The security features are valuable, particularly the ransomware attack protection features. Fortinet FortiGate provides excellent security against ransomware attacks."
"The support is excellent."
"The features we found most valuable are using the IDS and IPS during protection. The application filtering feature is great."
"The hardware is stable."
"Juniper vSRX has everything at the moment; they are covering it all and getting into automation, which is great."
"The technical support services are excellent."
"One of Juniper vSRX's most valuable features is its integration with safety applications. It keeps the software secure from developers without relying on third-party solutions."
"The pricing is reasonable."
"It is used on-premise at the customer site, and it is useful for management, and the configuration is rather easy as well."
"In four steps one can configure the entire firewall."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"In terms of the most valuable features, the IPS report is quick and updated, and performance is also valuable."
"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."
"The solution is quite safe and good, and furthermore, it is very good for different environments."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"The capabilities are mostly within the box."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
 

Cons

"Another issue is how deduplication services don't work reliably after enabling deduplication on Fortinet."
"FortiGate IPS is somewhat pricey compared to other solutions. There is also room for improvement in terms of the radio signals. The FortiGate WiFi has a relatively short range. I've found there is a lag in its zero-day malware response that could be better, and FortiGate could integrate better with other brands of equipment or identity management solutions."
"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."
"They should improve the interface to make it more user-friendly."
"There could be improvements in the mathematical algorithms used for behavior analytics of traffic."
"One area for improvement is the performance on bandwidth demands for smaller devices, as well as better web filtering."
"Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."
"User experience for the administrator is basically not good as it needs to be more proficient."
"I've talked to people that say Juniper now, as a device, can be a solution for a data center, but in the past, I have not seen this as being possible."
"I would suggest improving the pricing, particularly the licensing model."
"The stability could be improved."
"When we started with vSRX we came over from NetScreen. With vSRX we had a lot of problems and management was very hard to work with."
"The GUI is really bad."
"Juniper vSRX is expensive."
"We experienced some technical issues during implementation; if they were corrected, I would give this solution a rating of nine or ten."
"The solution can be improved by allowing automatic updates for the OS devices."
"The solution has too many bugs and these slow down the implementation."
"The tool's support is an area of concern where improvements are required."
"Our experience with its customer support was quite challenging."
"The support for YouTube or the Internet is not enough."
"I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense."
"The web interface needs to be improved, making it more user-friendly."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"It does not offer any recommendations on how to mitigate or control attacks."
 

Pricing and Cost Advice

"It is affordable. Palo Alto is much more expensive than Fortinet."
"There is a subscription-based model to use Fortinet FortiGate. We pay annually for the solution along with the support. If you want to have all the updates, and security patches you will need to renew your support."
"There is a license required to use Fortinet FortiGate with all the features. It has to be updated with the threats on an ongoing basis for the signatures to prevent threats and a license is needed to receive those security updates."
"It's an expensive solution"
"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."
"The price depends on the size of the company. From the beginning, you just want to know the internet bandwidths, speed, and the number of users to be able to offer the right product and model. They have a lot of products in FortiGate according to the size of the company, like 200D and 300D."
"Fortinet FortiGate gives you most of the features in one license."
"The pricing is perfect."
"It is not that costly."
"As a customer, the pricing is good for us."
"I rate the tool's pricing a five out of ten."
"The solution is inexpensive."
"The solution is pricey."
"The solution could have been cheaper."
"After some research, I think that the cost of Juniper is more than Check Point, Palo Alto, and Fortinet."
"Our experience purchasing the solution through the AWS Marketplace was good."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"The price falls in the mid-range, neither exceptionally low nor high."
"It is one of the cheapest tools in the market."
"The price is unmatcheable."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"The pricing is reasonable."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
7%
Construction Company
13%
Outsourcing Company
9%
Manufacturing Company
9%
Comms Service Provider
8%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business370
Midsize Enterprise138
Large Enterprise195
By reviewers
Company SizeCount
Small Business23
Midsize Enterprise8
Large Enterprise9
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Juniper vSRX?
The pricing is competitive, being neither the most expensive nor the cheapest option. It falls within the medium to h...
What needs improvement with Juniper vSRX?
I would suggest improving the pricing, particularly the licensing model. Although it is currently quite reasonable, m...
What is your primary use case for Juniper vSRX?
We are consultants and integrators using Juniper vSRX for a range of shipping companies, which can be both small and ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
Expedient Data Centers
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Juniper vSRX vs. Sangfor NGAF and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.