Sangfor NGAF vs Untangle NG Firewall comparison

Sangfor and Arista are both solutions in the Firewalls category. Sangfor is ranked #20 with an average rating of 7.8, while Arista is ranked #29 with an average rating of 8.3. Sangfor holds a 1.2% mindshare in Firewalls, compared to Arista’s 1.0% mindshare. Additionally, 90% of Sangfor users are willing to recommend the solution, compared to 94% of Arista users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 13, 2025

Untangle NG Firewall and Sangfor NGAF compete in the network security category. Untangle NG Firewall has the upper hand in ease of use and flexibility for small businesses, while Sangfor NGAF leads in comprehensive security features.

Features: Untangle NG Firewall is lauded for its ease of use, web filtering, and VPN setup. Its flexibility in running on generic hardware attracts small businesses. Sangfor NGAF offers exceptional security with real-time threat detection and application control, making it suitable for larger organizations seeking advanced protection.

Room for Improvement: Untangle NG Firewall could enhance online support, develop mobile applications, and improve advanced security features. Sangfor NGAF needs to improve reporting and logging, simplify its UI, and expand hardware options.

Ease of Deployment and Customer Service: Untangle NG Firewall stands out for its straightforward on-premises deployment, fitting for small businesses. Sangfor NGAF offers versatile deployment options, including hybrid cloud solutions, and receives praise for its 24-hour support, though regional support could be enhanced.

Pricing and ROI: Untangle NG Firewall provides a modular pricing model, with an affordable open-source entry point but potentially higher costs for additional features. Sangfor NGAF appeals with competitive pricing offering significant ROI, especially in budget-conscious regions.

To learn more, read our detailed Sangfor NGAF vs. Untangle NG Firewall Report (Updated: September 2025).

Buyer's Guide

Sangfor NGAF vs. Untangle NG Firewall

September 2025

Download the complete report

Helped 868,787 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of October 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.4%, up from 19.1% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.0% compared to the previous year. The mindshare of Untangle NG Firewall is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls Market Share Distribution
Product	Market Share (%)
Fortinet FortiGate	20.4%
Sangfor NGAF	1.2%
Untangle NG Firewall	1.0%
Other	77.4%

Firewalls

Featured Reviews

Vasu Gala

Manager, Information Technology Operation/Presales at TechMonarch

A stable solution with an intuitive interface and quick customer service

I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

MatthewSmith3

Service Delivery Manager at CasCom

Thorough with all-in-one security functions and good affordability

The all-in-one gateway security functions and the ability to install it on generic equipment stand out. The centralized management console is great. I can template my installations and configurations. My ability to monetize it as a gateway security appliance to offer enhanced service offerings allows me to increase our price point. I provide it as a managed device to many of our clients. I take on the initial costs and charge them a monthly fee. They have threat detection.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The impact of SD-WAN on the network performance has been significant."

"From the firewall perspective, the rules and policies are very sufficient and easy to use."

"The web controls are what I appreciate about Fortinet FortiGate. We have extensive controls over areas where we could block external-facing IPs, external URLs. We can do geo-fencing with the firewalls, which is a good feature."

"The solution’s interface is pretty user-friendly."

"The most valuable feature of FortiGate is FortiView which provides proactive monitoring."

"The best features of Fortinet FortiGate include everything about networking, such as routing and VPNs."

"It's quite comfortable to handle the FortiGate firewall."

"FortiGate is easy to use, and I also like its VPN."

More Fortinet FortiGate pros

"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."

"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

"So far, the performance and reliability of the product have supported our company's critical network traffic."

"The stability of Sangfor NGAF is good."

"The product is very fast and reliable."

"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."

"It is a stable solution."

More Sangfor NGAF pros

"All features are useful. We are using premium features such as bandwidth sharing, failover, web filters, SSL controls, antivirus, and VPN. We use these features to the fullest. These features are available in the paid firewall license, not the free one."

"The Untangle firewall is a software firewall, so it runs on generic hardware. We found that was probably the best feature, and it's why we chose it when we started using it three years ago."

"None of my clients has had a ransom or breach using Untangle."

"They have a command center that makes it easy to log into and see all of your appliances nationwide."

"Application Control and filtering features are valuable."

"The product’s most valuable features are endpoint protection management, load balancing, and connectivity with Active Directory."

"Easy to set up and easy to integrate."

"What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration."

More Untangle NG Firewall pros

Cons

"We sometimes have issues with FortiGate's routing table in the latest firmware update. We had to downgrade the device because our customers complained about bugs."

"The system can slow down when inspections are carried out."

"In my opinion, Fortinet FortiGate could be improved by making the appliance smaller than what we have here, as it is pretty big."

"One drawback of Fortinet FortiGate is that they provide two types of models: one with a hard disk and another without. The model without a hard disk has very low ROM where you can store very few logs, after which you need to upload it to the cloud or purchase a firewall with SSD."

"I believe there is room for improvement in machine learning and AI in Fortinet FortiGate."

"The support is not good because I generally search for solutions online. When I open a case, they usually identify it as a bug they are working on."

"The solution could maybe use more integration with artificial intelligence to be more proactive."

"One issue is that they have retired SSL VPN for existing devices. This causes significant effort for us to change customer setups."

More Fortinet FortiGate cons

"Lacks consistency in terms of filtering certain websites and applications."

"The firewall system needs gradual improvements because there are more threats and challenges every day."

"The support for YouTube or the Internet is not enough."

"The solution should be able to work in a hybrid setup."

"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."

"The cost of licensing is very high compared to other firewalls available here."

"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."

"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."

More Sangfor NGAF cons

"The common center facility that Untangle provides should be available on-premises. There are great corporations here in Mexico that like the Untangle solution, but they don't like the fact that the monitoring and access to the appliance are in the cloud. They request for the common center facility to be available and installed on-premises."

"Web-filtering policies could be improved."

"The biggest challenge that we have with this solution is local support. The local support is a problem in our area."

"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."

"On their low-end appliance, they could have more memory and the largest storage space. The low-end appliance comes with a too-small hard drive, and it could use a little extra room. It only comes with about 4 gigs or 8 gigs of memory, and the hardware space is only 40 gigs, which is really small."

"The user interface, training, and general product innovation need improvement."

"The web content filtering needs improvement."

"The management console for partners is a bit tricky (buggy)."

More Untangle NG Firewall cons

Pricing and Cost Advice

"I think price-wise, the solution is totally reasonable since it has many products to serve, starting from small homes to massive scale sites."

"On a scale of one being cheap and ten being expensive, I rate the tool's price as an eight."

"The pricing is justified. It's a little pricey, but what you pay for is what you get."

"I had to pay for the license for the firewall, but it is guaranteed to have updates. I expect a good service for it. It was about €1000 for a year, and there was no additional cost."

"It's a year based license."

"Pricing is lower than Cisco."

"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."

"It is a good product from a price perspective versus functionality."

More Fortinet FortiGate pricing and cost advice

"The price is unmatcheable."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"The price falls in the mid-range, neither exceptionally low nor high."

"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"It is one of the cheapest tools in the market."

"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."

"The price could be more competitive."

More Sangfor NGAF pricing and cost advice

"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."

"It is not expensive. The best part is that it is based on the pay-per-use kind of scenario. An increase or decrease in the number of people doesn't make any difference. We are really happy about using this particular scenario."

"The tool's pricing is moderate, and licensing costs are yearly."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."

"Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc. It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors."

"It is not expensive. It is cheaper than Fortinet."

"The pricing model is better than with SonicWall."

"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."

More Untangle NG Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

868,787 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

Manufacturing Company

Financial Services Firm

Manufacturing Company

11%

Computer Software Company

10%

Financial Services Firm

Comms Service Provider

14%

Computer Software Company

13%

Manufacturing Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	350
Midsize Enterprise	130
Large Enterprise	187

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	24
Midsize Enterprise	1

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

What do you like most about Untangle NG Firewall?

The product helps small and medium enterprises secure their networks from intrusions. It also has features like DNS b...

See all answers

What is your experience regarding pricing and costs for Untangle NG Firewall?

The setup cost is about $2000 to $3000 per year.

See all answers

What needs improvement with Untangle NG Firewall?

The user interface, training, and general product innovation need improvement. Enhancements could also be made to the...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 17% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 9% of the time

OPNsense vs Fortinet FortiGate

Compared 4% of the time

Cisco Meraki MX vs Fortinet FortiGate

Compared 4% of the time

More Fortinet FortiGate Competitors

Sophos XG vs Sangfor NGAF

Compared 17% of the time

Cisco Secure Firewall vs Sangfor NGAF

Compared 6% of the time

Sophos XGS vs Sangfor NGAF

Compared 6% of the time

H3C SecPath Firewalls vs Sangfor NGAF

Compared 5% of the time

Netgate pfSense vs Sangfor NGAF

Compared 5% of the time

More Sangfor NGAF Competitors

OPNsense vs Untangle NG Firewall

Compared 40% of the time

Netgate pfSense vs Untangle NG Firewall

Compared 11% of the time

Sophos UTM vs Untangle NG Firewall

Compared 11% of the time

Sophos XG vs Untangle NG Firewall

Compared 8% of the time

IPFire vs Untangle NG Firewall

Compared 5% of the time

More Untangle NG Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

September 2025

Download Fortinet FortiGate product report

Buyer's Guide

Sangfor NGAF

September 2025

Download Sangfor NGAF product report

Buyer's Guide

Untangle NG Firewall

September 2025

Download Untangle NG Firewall product report

Also Known As

No data available

Sangfor NGAF Firewall Platform

No data available

Overview

Fortinet FortiGate excels in providing integrated VPN, firewalling, and Unified Threat Management (UTM) with centralized management and high availability. It supports remote access and comprehensive threat protection, making it a preferred choice for securing networks.

Fortinet FortiGate offers a robust security platform with features such as strong intrusion prevention, application control, and web filtering. Its integration with Active Directory and SD-WAN functionality provides scalable solutions for large networks. Users appreciate its ease of use through centralized management interfaces, ensuring robust security with flexible configurations. However, FortiGate could enhance its graphical interface and technical support responsiveness, address firmware bugs and costly licensing, improve logging, integrate better with third-party tools, and strengthen scalability and memory for log storage. Complexity in configuration and the need for intuitive features are noted challenges, and there's a demand for advanced security, zero-trust capabilities, and AI integration.

What are the key features of Fortinet FortiGate?

VPN: Secure remote access and connectivity.
Firewalling: Protects networks from unauthorized access and attacks.
UTM: Offers a comprehensive approach to threat management.
SD-WAN: Optimizes traffic routing for efficient network performance.
Web Filtering: Controls and monitors web access and ensures Internet security.

What benefits or ROI should be considered?

Centralized Management: Simplifies administration and monitoring.
High Availability: Ensures consistent security and network availability.
Scalability: Adapts to the needs of growing networks.
Comprehensive Threat Protection: Provides robust security measures.
Ease of Use: Minimizes the complexity of security management.

Fortinet FortiGate is widely implemented across industries like education, finance, and government. Companies use it for firewall protection, VPN, and SD-WAN capabilities, ensuring secure perimeter and data center security. It facilitates remote access management and traffic routing optimization, offering reliable security and connectivity solutions.

Fortinet

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Untangle NG Firewall is an open-source firewall and gateway security platform that helps keep networks safe while accessing the internet. It offers a free core firewall platform with paid add-ons, and a cloud-based management platform with a variety of deployment options for smaller teams. The solution also has a cloud-based management console for remote management that can either be deployed on premises or as SaaS, and virtualized or cloud-based. It also has flexible deployment options, including third-party hardware, as a virtual machine, or as a turnkey appliance. Untangle NG Firewall is ideal for small IT teams with limited budgets.

Untangle NG Firewall Features

Untangle NG Firewall has many valuable key features. Some of the most useful ones include:

Intrusion protection
Threat prevention
Virus blocker
Virus scanner
App control
SSL inspection
Bandwidth control
Reporting
Logs
VPN
Web filter
IDS/IPS
Access controls
Location control
Proxy
Active Directory/LDAP connections

Untangle NG Firewall Benefits

There are many benefits to implementing Untangle NG Firewall. Some of the biggest advantages the solution offers include:

Simplified network security: Untangle NG Firewall has a single, modular, software platform which simplifies security for all networks and ensures every device is adequately protected.

Visibility: The solution provides a browser-based, responsive, and intuitive interface enabling users to gain visibility quickly into the traffic on the network.

Deep analysis and insights: With the solution, users can see a network’s status at a glance on the dashboard, ensure compliance with full event logs, and get notifications of network anomalies or unusual user behavior with alert rules. In addition, users can gain insights in real time from database-driven reports.

Next-generation filtering: Untangle NG Firewall makes it easy to manage every rogue application, encrypted web request, malware distribution point, and drive-by malvertising attempt.

Connectivity and performance: The solution helps your organization maintain visibility and control over remote workers, branch offices, and guest Wi-Fi to keep users connected and data safe regardless of location or level of access.

Policy creation: Users can create policies by user, group, device, and time in order to control access.

Additional apps: Untangle NG Firewall offers additional apps, allowing organizations to create complete configuration backups to protect against network disruptions.

Reviews from Real Users

Untangle NG Firewall is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it is easy to use, has good features, including VPN, reporting, alerting, and filtering, and can be installed on existing hardware.

“It is very easy to use. The user interface is very straightforward. It may not be as fancy as some of the ones I've seen, but it's very straightforward. It's very easy to find what you need, and it's very easy to get things done,” says Josh E., CEO at DragonTech IT Services, Inc.

Barry A., Owner at ThinkEzIT, says, “It has good VPN features, helpful reporting and alerting, built-in content filtering, and excellent support.”

PeerSpot user Victor O., Director at Kisii County Government, explains, “What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration.”

Arista

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,

Buyer's Guide

Sangfor NGAF vs. Untangle NG Firewall

September 2025

Free Report: Sangfor NGAF vs. Untangle NG Firewall

Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,787 professionals have used our research since 2012.

See our Sangfor NGAF vs. Untangle NG Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.