Try our new research platform with insights from 80,000+ expert users

Palo Alto Networks NG Firewalls vs Sangfor NGAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 13, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
574
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (2nd), Unified Threat Management (UTM) (1st)
Palo Alto Networks NG Firew...
Ranking in Firewalls
6th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
196
Ranking in other categories
No ranking in other categories
Sangfor NGAF
Ranking in Firewalls
20th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Palo Alto Networks NG Firewalls is 4.2%, up from 3.1% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate20.4%
Palo Alto Networks NG Firewalls4.2%
Sangfor NGAF1.2%
Other74.2%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
AmjadKhan1 - PeerSpot reviewer
Provides inline protection with a unified view and anti-spyware capabilities
I would rate Palo Alto Networks NG Firewalls ten out of ten because it is the best. Our disaster recovery site utilizes Palo Alto Networks Next-Generation Firewalls. We are also in the process of upgrading the firewalls at our 365 sites in Pakistan to Palo Alto Networks firewalls. While budget firewalls may advertise comparable features, they often fall short of effectively detecting viruses, threats, and ransomware. In contrast, Palo Alto Networks NG Firewalls, combined with Cortex XDR, provide comprehensive threat intelligence and detection capabilities, ensuring superior security coverage. I recommend conducting a proof of concept before selecting a firewall. This will allow you to evaluate different options and determine which best suits your needs. While Palo Alto offers robust firewall solutions, it's essential to compare them with other vendors to ensure you make an informed decision.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best features of Fortinet FortiGate are UTM, web filtering, and IPS."
"The GUI is very simple, and what is very good is that every product, regardless of size, has the same interface."
"We use a southern institution that's audited for IT security and the reporting that automatically comes off the unit makes it much easier to meet compliance standards and makes it easier as far as the amount of time that has to be spent to compile that information. If you get your reporting set up correctly when you initially set it up, you just select the one you want and hit print. The auditing trail on it is the best feature."
"The reliability of Fortinet FortiGate is through the roof, we're experiencing 99.999% availability consistently."
"This solution has a unique range of features that are not available with any other product."
"The setup is easy."
"The solution’s initial setup is very easy."
"Using this product makes the VPN seamless and almost invisible to me in the sense that I don't have to think about it."
"I can enable the features I want and configure the policies based on the user and not all users and network traffic, making firewall management much easier."
"You can easily integrate it with Active Directory, and you can use the GlobalProtect VPN for internal and external purposes. The URL Filtering is also clear and the application filtering is a plus. The application filtering is much better when you compare it to FortiGate or other firewall vendors."
"I like all the functions and features."
"Palo Alto Networks NG Firewalls have a very nice interface for logging and monitoring. I find it easy to navigate and use, and the interface is organized as well. I can find answers within a couple of hours and have seen time savings."
"The solution is scalable"
"GlobalProtect and App-ID features are very good."
"Prisma Access is the most valuable feature of Palo Alto Networks NG Firewalls."
"Technical support is proactive in letting us know when there are updates that need to be made to the system."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"The stability of Sangfor NGAF is good."
"It offers application control features."
"The VPN connectivity feature is really nice."
"We can utilize our own network rather than paying for a private one."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
 

Cons

"It is very expensive, and their support is not very good. I hope that their technical support will be better in the future."
"The monitor and the visibility, in this proxy, is very weak."
"In most cases, the IPS engine uses too many resources, which makes Fortinet FortiGate devices unstable."
"I want some additional features. For example, I want something to ensure that when we are using Google email or Microsoft email, or Google Workspace, emails can only be accessed on designated machines given to our employees. I would like them to access data from designated machines, not from any machine. It should work for designated mobiles and laptops. I don't know if Fortinet provides something like that out of the box."
"I face difficulties integrating Fortinet FortiGate with Active Directory."
"Maybe they could make some features more accessible, such as a way to translate directions between two networks that share the same subnets."
"Fortinet FortiGate is not very easy to use. The navigation could be improved to make it easier to use."
"The security of Fortinet FortiGate could improve."
"Palo Alto Networks NG Firewalls work slowly for vulnerability management. Its performance could be faster."
"We use ACC which is a tool for verifying the activity or traffic within your network. Currently, in ACC, the time of the samples that they offer is about five minutes. When you try to go down to a shorter duration, you can't. You only have five minutes. They can provide samples for shorter durations, such as one minute."
"The solution doesn't support routing in virtual firewall creation, and we want that to be enabled."
"The initial configuration is complicated to set up."
"They can improve the handling and management of User-ID. They should also improve its price. Their technical support can also be improved."
"I would like to see more integration."
"The price is high and has room for improvement."
"There is room for improvement in the area of customer service."
"Lacks consistency in terms of filtering certain websites and applications."
"The product must provide more IPS features."
"The solution has too many bugs and these slow down the implementation."
"The cost of licensing is very high compared to other firewalls available here."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"The tool's support is an area of concern where improvements are required."
"Scalability for any network device is not very easy in terms of vertical scalability."
 

Pricing and Cost Advice

"Fortinet FortiGate is cheaper than Palo Alto. It is about 20% cheaper."
"The price of FortiGate support is too expensive."
"Although the solution's pricing is high, compared with other products, it may be cheap."
"I would rate the pricing a five out of ten"
"We have the full version of Fortinet FortiGate and we are on a three-year contract with a commitment of five years."
"The license of Fortinet FortiGate should be reduced."
"We are on an annual license to use Fortinet FortiGate."
"When comparing the price of Fortinet FortiGate SWG to other solutions it is expensive. The price could be better."
"While Palo Alto Networks NG Firewalls come at a premium, exceeding the cost of most competitors by 45 percent, their advanced security features, superior performance, and comprehensive threat prevention capabilities justify the investment."
"The tool is expensive, especially considering all the necessary licenses for centrally managing firewalls. For medium-sized companies like ours, it's often not feasible within our budget constraints. We pay around €200k yearly for all our firewalls. Additionally, we received a quote of over €1 million per year for Prisma Access. There is a significant cost difference compared to other options, where it's around €200k per year."
"I am not involved in the commercial side, but I believe that Palo Alto is quite expensive compared to others."
"Palo Alto Networks NG Firewalls are affordable, and we get what we pay for."
"In terms of price, the user finds it expensive, rating it around nine."
"You get what you pay for."
"The price is high."
"The solution’s cost is a little high compared to other products."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"The product is very cost-effective compared to other brands or vendors."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"It is one of the cheapest tools in the market."
"The price is unmatcheable."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
Educational Organization
6%
Manufacturing Company
11%
Computer Software Company
10%
Financial Services Firm
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business350
Midsize Enterprise130
Large Enterprise187
By reviewers
Company SizeCount
Small Business74
Midsize Enterprise56
Large Enterprise84
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is a better choice, Azure Firewall or Palo Alto Networks NG Firewalls?
Azure Firewall Vs. Palo Alto Network NG Firewalls Both solutions provide stellar stability and security. Azure Firew...
Features comparison between Palo Alto and Fortinet firewalls
In the best tradition of these questions, Feature-wise both are quite similar, but each has things it's better at, it...
Which is better - Palo Alto Networks NG Firewalls or Sophos XG?
Palo Alto Networks NG Firewalls have both great features and performance. I like that Palo Alto has regular threat si...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
 

Also Known As

No data available
Palo Alto NGFW, Palo Alto Networks Next-Generation Firewall
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
SkiStar AB, Ada County, Global IT Services PSF, Southern Cross Hospitals, Verge Health, University of Portsmouth, Austrian Airlines, The Heinz Endowments
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Palo Alto Networks NG Firewalls vs. Sangfor NGAF and other solutions. Updated: September 2025.
868,759 professionals have used our research since 2012.