No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor NGAF vs Zscaler Cloud Firewall comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Sangfor NGAF
Ranking in Firewalls
22nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Zscaler Cloud Firewall
Ranking in Firewalls
38th
Average Rating
8.2
Reviews Sentiment
6.3
Number of Reviews
20
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Firewalls category, the mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. The mindshare of Zscaler Cloud Firewall is 1.0%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Sangfor NGAF1.1%
Zscaler Cloud Firewall1.0%
Other97.9%
Firewalls
 

Featured Reviews

Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Carlos Snel - PeerSpot reviewer
Director at Aquila ICT Solutions
Has streamlined secure deployments across large enterprises while offering reliable protection and intuitive management
The centralized management console, also referred to as the Zscaler dashboard, impacts the ability of my customers to respond to security incidents significantly. I see it as user-friendly, and clients are really happy with using it, which motivates them to keep using Zscaler Cloud Firewall because they enjoy the GUI. It's very intuitive, making it easy to navigate alerts and incidents. My clients rarely have questions about where to find specific information once Zscaler Cloud Firewall is running. The interface speaks for itself, requiring little to no additional training, which is a major plus. Advanced threat protection features in Zscaler Cloud Firewall are practically the key component that every customer wants. Unfortunately, it is an option and not included in the basic package. Clients need to pay for the next higher bundle to access it, but practically all clients I have dealt with want this feature 100%. Regarding visibility, I can confirm that Zscaler Cloud Firewall indeed includes a feature for application layer visibility embedded in the service. It provides visibility into what you're doing, which is especially interesting nowadays when discussing AI tools, as companies do not want their employees to copy-paste sensitive information into AI systems. We have seen cases such as Samsung's chip design where sensitive info got exposed. The visibility of applications, including cloud applications and AI tools, is significant for compliance with data policies, and you can also run reports and alerts on it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is very fast and reliable."
"We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."
"Sangfor is a good solution that provides a WAF and firewall solution; most other vendors, like Sophos and Fortinet and Cisco, only provide one solution, and that's a valuable feature of Sangfor."
"The built-in features function as intended, providing exceptional value."
"In four steps one can configure the entire firewall."
"The top functionality is the reporting feature."
"Users are offered protection from anywhere on any device, with a full set of security features including firewall, IPS, web security, CASB, and DLP."
"It helps a lot of companies to reduce their downtime. Also, It helps businesses in terms of being secured and protected from any threats."
"Most of the features that Zscaler has to offer, we will deploy."
"Zscaler Cloud Firewall can be used for blocking all the malicious IPs, unauthorized IPs, unauthorized sites, and unsanctioned sites, such as when many users use PDF converters and can upload confidential data that we can detect and block."
"Zscaler is one of the leading vendors in the cloud space."
"It provides in-depth visibility into your network, ensuring that traffic flowing into your organization, be it from offices or individual users, is effectively filtered and secured through multiple layers of protection."
"The product’s firewall and VPN package are fantastic compared to any other solution."
"Zscaler is the Rolls Royce for this kind of solution."
 

Cons

"The setup phase is quite complex."
"They need to increase the number of ports in the firewall."
"It would be ideal if the solution offered SD-WAN capabilities."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"Lacks consistency in terms of filtering certain websites and applications."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"The issue right now is probably that Zscaler is not providing web browser isolation."
"Instead of the standard license, they should certainly provide customers with the visibility to access and view the logs."
"I don't have the visibility of a control dashboard or a network management system."
"When it comes to customer support, there is room for improvement in Zscaler's service."
"Its technical support services could be better."
"If I can get rid of Jetscaler, I will use Twingate for sure."
"We are having some issues with internet access being denied when organizational ID-based policies change. For example, a lower level employee ends up getting the same level of access as that of a higher level employee."
"One area for improvement lies in their customer service, which feels less ideal for a premium product. The response and support are sometimes inadequate, which detracts from the overall experience of an otherwise impressive solution."
 

Pricing and Cost Advice

"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight out of ten."
"The licensing is on a yearly basis. It is somewhere around 30 or 40 pounds per user for our organization."
"There are licensing costs, and I would not say that it's a cheap vendor."
"It is not the most budget-friendly solution, but it's important to consider its overall value."
"The product is a bit expensive compared to the solutions offered by its competitors, like Palo Alto. There is a need to make yearly payments towards the license in charges associated with the product."
"Zscaler is priced too high compared to the cost of Fortinet."
"It comes at a significantly reduced cost while ensuring control and effectiveness."
"It is expensive for small businesses."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Comms Service Provider
11%
Manufacturing Company
10%
Construction Company
7%
Construction Company
11%
Manufacturing Company
11%
Financial Services Firm
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise13
 

Questions from the Community

What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
Which lesser known firewall product has the best chance at unseating the market leaders?
Netscope, Zscaler if they continue route they are on now. FIrewalls needs great deal of automation on each end, datacenter and endpoint. In between you have branch office. So blending EPP and firew...
What is your experience regarding pricing and costs for Zscaler Cloud Firewall?
My experience with pricing, setup cost, and licensing was fine.
What needs improvement with Zscaler Cloud Firewall?
I think Zscaler Cloud Firewall can be improved by adding more features. The needed improvements involve scalability, which is something I wish they would address.
 

Also Known As

Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Zenith Live, Azure, Carlsberg Group
Find out what your peers are saying about Sangfor NGAF vs. Zscaler Cloud Firewall and other solutions. Updated: July 2026.
908,834 professionals have used our research since 2012.