No more typing reviews! Try our Samantha, our new voice AI agent.

Palo Alto Networks PA-Series vs Sangfor NGAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Palo Alto Networks PA-Series
Ranking in Firewalls
18th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
37
Ranking in other categories
No ranking in other categories
Sangfor NGAF
Ranking in Firewalls
28th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Firewalls category, the mindshare of Palo Alto Networks PA-Series is 1.1%, up from 0.8% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Palo Alto Networks PA-Series1.1%
Sangfor NGAF1.2%
Other97.7%
Firewalls
 

Featured Reviews

Rohit Ghorpade - PeerSpot reviewer
Cloud Network Engineer at a insurance company with 5,001-10,000 employees
Identity-based perimeter control has improved security and supports reliable remote access
Currently, we are working with vendors such as Palo Alto Networks PA-Series, Cisco, Check Point, and Citrix. Palo Alto Networks PA-Series is a better firewall. Deep packet inspection and threat prevention basically comply with whatever traffic is incoming and outgoing through the firewall. I do not think anything improvement is required. The thing is that Palo Alto Networks PA-Series works mostly on a license-based model. If you want to utilize any feature, you have to purchase the license. For example, URL filtering requires a license purchase. It simplifies the implementation because LDAP server profile can be integrated. Basically, that simplifies the implementation of access rule or security policy.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Palo Alto Networks PA-Series is basically integrated with LDAP to fetch the identity of the users and we provide access based on the identity."
"Palo Alto blocks the new threats better than other tools."
"The most effective features for threat prevention in the PA-Series are its integration with Cortex and the use of machine learning AI for advanced threat detection."
"The tool's most valuable feature is WildFire."
"It is a stable solution. Stability-wise, I rate the solution a ten out of ten."
"The best features of the Palo Alto Networks PA-Series firewall include Global protector VPN workings, and content filtering is easy to manage and operate."
"It offers application-based policy enforcement. Palo Alto Networks firewalls help us recognize protocol anomalies, contrasting with other vendors that may require policies based on port numbers. With Palo Alto Networks, the port number isn't a constraint because their devices handle protocol traffic at Layer 7, allowing for accurate identification of protocol usage and port numbers. They can identify which protocol actually uses which port."
"I rate the stability as ten out of ten."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"SSL VPN is the best feature."
"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."
"This product is very user-friendly, and its Layer 7 security is very much improved."
"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"We are Sangfor Gold partners and I'd recommend this solution for the SMB market, as it is cost-effective and reliable."
 

Cons

"There are constant updates for the operating system. It is a nice thing also, but it has its own disadvantages. Continuous updates are there. The users face issues like, how often do I need to update that? Within a period of five months, I'm updating it two or three times. It gives them a feeling that they are not confident about their product and have to update it so frequently."
"I experienced some problems with AWS cloud parameters connected to Palo Alto firewall."
"The web interface is slow."
"There is room for improvement in streamlining this process for smoother transitions."
"Utilizing these features as a unified solution can require additional setup, particularly when incorporating Panorama for centralized management, which may involve extra costs."
"I encountered a slight issue with the application portal, which was not functioning correctly."
"The product's gateway services can be improved."
"Palo Alto should integrate artificial intelligence for security purposes in the background for well-known threats and new risks coming to the market."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"They need to increase the number of ports in the firewall."
"The solution should be able to work in a hybrid setup."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"The setup phase is quite complex."
"The GUI needs to be improved, lacks logic in some areas."
"The product must provide more IPS features."
 

Pricing and Cost Advice

"The cost varies depending on the device model, with entry-level firewalls priced around $1,300 to $1,500, while higher-end models can reach prices of several hundred thousand dollars."
"We have to pay a yearly licensing fee for the solution."
"The solution's pricing is high compared to that of Cisco and Fortinet."
"With Palo Alto, even when you enable all the modules, it still provides the exact throughput they advertise."
"The product is expensive."
"The prices are pretty high, definitely on the upper end."
"Palo Alto’s pricing is way higher than any other solution provider."
"This product has an affordable and reasonable price point."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"The price is unmatcheable."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"It is one of the cheapest tools in the market."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Comms Service Provider
9%
Government
7%
Manufacturing Company
7%
Comms Service Provider
12%
Manufacturing Company
11%
Financial Services Firm
9%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise6
Large Enterprise17
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for Palo Alto Networks PA-Series?
If we look at the features, then the price is good, but they do charge for the GlobalProtect VPNs. Overall, the pricing is good, but if they included GlobalProtect, it would be more valuable.
What needs improvement with Palo Alto Networks PA-Series?
There is room for improvement in Palo Alto Networks PA-Series in the areas where they can minimize applications and implement features that can be useful for us.
What is your primary use case for Palo Alto Networks PA-Series?
I am using Palo Alto Networks PA-Series to ensure protection and cybersecurity by preventing and implementing network security features to safeguard networks against threats and malware. I have to ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

No data available
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Information Not Available
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Palo Alto Networks PA-Series vs. Sangfor NGAF and other solutions. Updated: September 2026.
913,924 professionals have used our research since 2012.