We use Sangfor NGAF for security and bandwidth management. It blocks websites and applications.
Network Administrator at Lyceum of the philppines University
It's an affordable, feature-rich solution for blocking threats
Pros and Cons
- "You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."
- "The reporting and log management could be improved."
What is our primary use case?
How has it helped my organization?
Sangfor NGAF blocks incoming security threats.
What needs improvement?
The reporting and log management could be improved.
For how long have I used the solution?
I have used Sangfor NGAF for four or five years.
Buyer's Guide
Sangfor NGAF
August 2026
Learn what your peers think about Sangfor NGAF. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
913,806 professionals have used our research since 2012.
What do I think about the stability of the solution?
I rate Sangfor 10 out of 10 for stability. We haven't had any problems so far.
What do I think about the scalability of the solution?
I rate Sangfor NGAF nine out of 10 for scalability.
How was the initial setup?
A partner helped us set Sangfor up initially. It's complicated at first but it gets easier.
What was our ROI?
I rate Sangfor NGAF nine out of 10 for ROI.
What's my experience with pricing, setup cost, and licensing?
I rate Sangfor NGAF eight out of 10 for affordability. We have an advanced security license that we renew every three years.
Which other solutions did I evaluate?
We considered other solutions but ultimately went with Sangfor NGAF because of the price and value.
What other advice do I have?
I rate Sangfor NGAF nine out of 10. You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Enterprise System Engineer at Innolytix Pakistan Pvt Ltd
Scalable security solution deployed across multiple industries and is well priced compared to competitors
Pros and Cons
- "The level of support provided to local companies is good. They transform their application control and other settings according to that country."
- "It offers good value for money and is much cheaper compared to other firewalls."
- "Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
- "We have deployed many firewalls and have faced two or three faulty devices that we have to replace over a year because their power supply was faulty."
What is our primary use case?
We have this solution deployed across multiple industries including education, pharmaceutical and different textile industries. This is a good product for network security and is popular right now. Sangfor is cheaper than well-known products like Fortinet and Palo Alto Firewall NGFS.
What is most valuable?
The level of support provided to local companies is good. They transform their application control and other settings according to that country.
What needs improvement?
Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it.
What do I think about the stability of the solution?
We have deployed many firewalls and have faced two or three faulty devices that we have to replace over a year because their power supply was faulty. Some customers use the device for over five years and they have worked fine but got slower with the time.
What do I think about the scalability of the solution?
This is a scalable solution.
How are customer service and support?
I can vouch for the local support team. They are more than competitive in the market. They are always available for small and big customers. They are onsite whenever we need it and assist with any problem or deployment scenario and are willing to discuss it at any time. I would rate them a three out of five.
Which solution did I use previously and why did I switch?
I have previously used Fortinet. Fortinet is quite a mature product and offers so many features. Sangfor lack a bit in that area. Sangfor include a local database for URLs and other applications. When using Fortinet, you cannot block a local website by default.
How was the initial setup?
The simple deployment of a network on NGF is quite simple and their guides are quite simple as well. The do lack visual guides that are easier for some customers to follow. It's easy to configure a normal deployment scenario for networking and ET. When it comes to high level security and highly advanced features, you need to have some experience in that area to actually apply that on this firewall.
If you're experienced, it would take two or three hour maximum, depending on how many customers are using the policy and how much detailed configuration is needed. I would rate our experience with the setup an eight out of ten.
We have faced some of the issues after deployment with URL filtering which we have logged a ticket for. Our customers are unable to access certain websites. We have diagnosed the problem but we are unable to identify the URL signature or what is blocking the IAM and preventing access to that site.
What's my experience with pricing, setup cost, and licensing?
For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it. By default, they provide you with 10 SSL and a VPN. If you want more than 10, you have to pay more. From a pricing perspective, I would rate them a four out of five.
What other advice do I have?
They have a huge product line for large companies and we have deployed a firewall for over 5000 to 10000 users. It is suitable for all type of environments. I would advise others to spend one to two months after deployment on Sangfor to configure the many settings for security services. You have to work on it, keep looking at the logs and make changes as you go. You need this time to analyze, make future risk assessments and reconfigure the work from time to time. Only once this is done, can you consider deployment complete.
It offers good value for money and is much cheaper compared to other firewalls. I would suggest Sangfor to those who are cost conscious.
I would rate this solution a seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Sangfor NGAF
August 2026
Learn what your peers think about Sangfor NGAF. Get advice and tips from experienced pros sharing their opinions. Updated: August 2026.
913,806 professionals have used our research since 2012.
Network Administrator at Shaheed Zulfiqar Ali Bhutto Institute of Science and Technology
Integrates well, reliable, and different pricing models available
Pros and Cons
- "The most valuable feature of Sangfor NGAF is its integration."
- "The support from Sangfor NGAF here in Pakistan is great."
- "Sangfor NGAF could improve the policies and default criteria. They could be much better."
What is our primary use case?
What is most valuable?
The most valuable feature of Sangfor NGAF is its integration.
What needs improvement?
Sangfor NGAF could improve the policies and default criteria. They could be much better.
For how long have I used the solution?
I have been using Sangfor NGAF for approximately three years.
What do I think about the stability of the solution?
Sangfor NGAF is stable.
What do I think about the scalability of the solution?
The scalability of Sangfor NGAF is good.
We are using the Sangfor NGAF as our firewall, we have approximately 6,000 to 8,000 end users who are passing through. We have approximately 10 to 15 people using the Sangfor SSL VPN feature remotely from home.
How are customer service and support?
The support from Sangfor NGAF here in Pakistan is great. Whenever I have an issue the support helps me out efficiently.
I rate the support from Sangfor NGAF a five out of five.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup of Sangfor NGAF is straightforward. Sophos and Fortinet have more difficult initial setups.
I rate the initial setup of Sangfor NGAF a five out of five.
What's my experience with pricing, setup cost, and licensing?
The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF.
We have purchased the support for three years.
What other advice do I have?
My advice to others is they should try the solution. I have experienced other solutions, such as Fortinet and I feel much better using this solution overall.
I rate Sangfor NGAF a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
A scalable and comprehensive solution that specializes in ransomware detection
Pros and Cons
- "Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
- "We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware."
- "The firewall system needs gradual improvements because there are more threats and challenges in the world every day."
What is our primary use case?
Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware. This is the primary reason we purchased this solution, and we are currently negotiating to upgrade our appliances to volume M5200 Series. Additionally, Sangfor NGAF provides a web application for financial software.
How has it helped my organization?
We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware. Our desktop PCs have essential data, like word files and excel documents.
We previously had a ransomware attack on our file server, and Sangfor NGAF protected us by alerting and disconnecting the server from the network.
What needs improvement?
The firewall system needs gradual improvements because there are more threats and challenges in the world every day. Sangfor NGAF has a comprehensive database for ransomware and viruses, but when we compare it to other solutions, the price could be more competitive.
Since we have a very comprehensive solution with Sangfor NGAF, it is hard to identify any additional features we want to add. It already provides good features for ransomware attacks and data recovery. In the past, we wanted encrypted data for a virus to be recoverable, and Sangfor offered the solution.
For how long have I used the solution?
We have been using Sangfor NGAF for four years. We use it for overall IT infrastructure protection and are currently using version 1 of Model M5100.
We currently deploy a hybrid infrastructure of cloud and on-premises. We use the solution for our accounting and financial software, websites, internet blocking, and other features. Some clients are on the cloud, and others are on-premises. We also have a Sangfor solution that filters the in and out traffic.
What do I think about the stability of the solution?
The solution is relatively stable. Interestingly, we discontinued the updates and software licenses about a year ago, and the appliance and solutions are still working. In addition, there is no limitation on the license, so services won't stop if it expires. You can also update the license at any time for a partial cost.
What do I think about the scalability of the solution?
This solution is scalable. We can add many features and lengths and expand according to our needs.
The IT specialists and engineers in my organization use this solution. Our whole organization is under the protection of Sangfor NGAF. The solution has footprints in India and Europe and many government agencies use Sangfor NGAF in Pakistan.
For deployment, we needed three people who were all IT specialists, and only one of them was from Sangfor. As a result, we deployed it with very few resources, and there were no recurring charges. Also, most people are very well-versed in technology and can multitask.
How are customer service and support?
The technical support team was very helpful, provided support, and guided us during our initial deployment. We were good to go in 15 to 20 minutes.
Which solution did I use previously and why did I switch?
We previously used Sophos and pfSense, an open-source firewall.
How was the initial setup?
The initial setup was very straightforward. The solution is out of the box, and the software and appliance can be quickly installed. It has a very nice AI feature, and we only needed to implement parameters and define some policies. The deployment took 15 to 20 minutes because we had to get familiar with the new system.
We defined WAN and LAN networks for our implementation strategy and then defined the servers. Next, we identified the modes and decided the desktop would be the best. There were other considerations but it has been four years, so it is hard to remember all of them.
What about the implementation team?
We completed our deployment in-house.
What was our ROI?
We have seen a return on investment. The systems are protected, and their operating systems are readily available. We are protected from ransomware attacks and the loss of data. This solution protects us, and it has benefits.
What's my experience with pricing, setup cost, and licensing?
On a scale of one to ten, with one being the cheapest, I rate the price a six out of ten. There are no hidden or additional costs other than what we were provided. Therefore, we are happy with our initial decisions.
Which other solutions did I evaluate?
We evaluated other options and completed some financial comparisons but the IT specialists advised that Sangfor NGAF worked well.
What other advice do I have?
I rate this product an eight out of ten because we don't know what we may need from this solution in the future. We are satisfied and hope to upgrade to a new version soon. However, right now, our current version is working fine.
In terms of advice, we would recommend Sangfor NGAF. But, a company should first prepare an analysis, compare different products, and then decide what they want.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Teamlead IT Core at SoloInsight Inc.
Next generation firewall that is scalable and one of the best on the market
Pros and Cons
- "Sangfor is a good solution that provides a WAF and firewall solution; most other vendors, like Sophos and Fortinet and Cisco, only provide one solution, and that's a valuable feature of Sangfor."
- "Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
What is our primary use case?
Sangfor is an on-prem firewall I use for my local infrastructure. It is used as an aggregated interface. Behind Sangfor, I have built a data center that is deployed on high availability using a model that is 5100 CV with 10 gig ports.
What is most valuable?
Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor.
What needs improvement?
Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput.
For how long have I used the solution?
I have used this solution for the last six months.
What do I think about the scalability of the solution?
This is a scalable solution. We have approximately 1,000 users.
How are customer service and support?
The technical support team are available 24/7 and if we need any assistance for Sangfor, FortiGate or Sophos, we can call their support number and they provide assistance from their L2 or L3 engineers.
How would you rate customer service and support?
Positive
How was the initial setup?
It's very easy to set up because Sangfor provided us with export and HCI capabilities. Deployment took almost one week.
The process starts with low level design for internal teams to make a design on network requirements. This contains all current and future requirements.
What's my experience with pricing, setup cost, and licensing?
For four to five physical appliances for a licensed firewall, it costs approximately $4,000.
What other advice do I have?
We have six people managing IT operations. We have not had any issues in the first six months of using this solution.
If you want to deploy a firewall in your infrastructure, Fortinet, Sangfor and Sophos are the best solutions to protect traffic.
I would rate this solution an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Owner at InternetWorld Solutions Sdn Bhd
Integrates well, high performance, and responsive support
Pros and Cons
- "Sangfor NGAF works accordingly with our customers, the solution has good performance, is easy to use, and integrates well with the endpoints."
- "However, the maintenance cost can be a bit high."
What is our primary use case?
Sangfor NGAF can be used as a firewall for protecting servers, data, users, and access to the internet.
What is most valuable?
Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints.
For how long have I used the solution?
I have been using Sangfor NGAF for approximately one year.
What do I think about the stability of the solution?
We have sold a few units to our customers and we have not had an issue with the stability.
What do I think about the scalability of the solution?
We have customers in small to medium-sized companies.
We have less than 110 customers that are using this solution.
How are customer service and support?
Their technical support is good, they are responsive. They have been able to resolve all of the issues that we faced.
How was the initial setup?
The installation is easy, and the time it takes depends on the customer's environment. Doing the policies could take additional time.
What about the implementation team?
We have approximately four people that support the solution. We have experience in deploying and maintaining the solution. Though the company could offer better training to us.
What's my experience with pricing, setup cost, and licensing?
Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high.
Fortinet solutions sell at a very cheap price upfront, but after that maintenance fees, which they keep increasing it can become expensive. I hope Sangfor does not follow that model.
Which other solutions did I evaluate?
I have evaluated other solutions, such as Fortinet.
What other advice do I have?
I would recommend this solution to others.
I have clients that are switching from Fortinet to Sangfor NGAF because the price of Fortinet's service is increasing. Sangfor NGAF has good integration with their endpoints which makes it a very attractive offering.
Sangfor is arranging much-needed training for resellers. There needs to be better marketing awareness not for the reseller, but for the consumer here in Malaysia. Sangfor needs to do some advertisements to attract more market awareness. Relying on resellers can be difficult when the market is very large. However, resellers do focus on their product, they also try to engage, and hire more.
I rate Sangfor NGAF an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Project Manager at Novu
Provides VPN tunneling and security at competitive pricing
Pros and Cons
- "Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity."
- "It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters."
What is our primary use case?
We're using it more for VPN tunneling and security. We're integrating it with the SoundCloud platform to use it in our data center.
How has it helped my organization?
We're happily using the IP vSEC VPN. We will use some credentials to connect it to two different sites.
What is most valuable?
Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity.
What needs improvement?
It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters. This could be a hindrance when presenting it to clients, especially since many of our clients prefer US-based products. We’re pitching Sangfor as part of our solutions, but the presence of Chinese characters might be a concern.
For how long have I used the solution?
I have been using Sangfor NGAF as a partner for two to three years.
What do I think about the stability of the solution?
We've encountered various glitches or bugs with the firewall, particularly when trying to configure redundancy. We're facing challenges with setting up two ISPs on a single, stacked firewall.
What do I think about the scalability of the solution?
We haven't encountered any issues scaling with Sangfor. It follows a more traditional approach to scaling, though we don’t yet fully understand all the scaling capabilities of Sangfor products. However, it does have the basic features needed for scaling.
How are customer service and support?
We have some contacts here locally. We do contact them for support.
How was the initial setup?
Sang four independently is easy to configure. It's very straightforward. However, we're having challenges with the interoperability matrix and other integration for other firewall brands.
The standard configuration, with basic policies, can take a couple of hours to set up.
One guy in our company can do the configuration.
What was our ROI?
We achieved a lot of ROI since the competitive pricing is much better than the other brands.
What's my experience with pricing, setup cost, and licensing?
Price is very competitive with other brands.
What other advice do I have?
We encounter different glitches or bugs in the firewall. More likely, we're having a problem with two ISPs being cited in our firewall to have redundancy. We don't know the primary or best practice of configuring two ISPs in a single firewall.
Overall, I rate the solution an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Head - Enterprise Solutions Architect at NGXESS
Highly customizable and competitively priced
Pros and Cons
- "The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
- "This product is very user-friendly, and its Layer 7 security is very much improved."
- "An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
What is most valuable?
The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall.
What needs improvement?
An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices.
For how long have I used the solution?
I have been working with this solution for three months.
What do I think about the stability of the solution?
The stability is good.
How are customer service and support?
The technical support is good - they are very supportive and friendly and are available even on the weekends.
Which solution did I use previously and why did I switch?
Previously, I have worked with Palo Alto, Fortinet, Sophos, and Endpoint Kaspersky. I would recommend Sangfor over these due to its ability to implement user restrictions.
How was the initial setup?
The initial setup was not complex.
What's my experience with pricing, setup cost, and licensing?
Sangfor's pricing is competitive.
What other advice do I have?
This product is very user-friendly, and its Layer 7 security is very much improved. It can be customized to a very deep level. I would give this solution a score of eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Product Manger at a manufacturing company with 11-50 employees
A most cost-effective solution
Pros and Cons
- "While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
- "When it comes to the price of firewall solutions, Sangfor NGAF takes the cake, as it is cheaper than Fortinet, Sophos, Check Point and Palo Alto."
- "The solution has too many bugs and these slow down the implementation."
What is our primary use case?
Our customers purchase Sangfor NGAF primarily out of budgetary considerations. Sangfor enables high power internet access. Indonesia has a big market, not only as concerns the firewall.
What is most valuable?
While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people.
What needs improvement?
The solution has too many bugs and these slow down the implementation. The software should be updated to account for this.
What do I think about the stability of the solution?
We have not received complaints from our customers about the solution's stability.
What do I think about the scalability of the solution?
We have not received complaints from our customers about the solution's scalability.
How are customer service and technical support?
So far, we have not had occasion to contact tech support.
What about the implementation team?
As we are a distributor, we have our own maintenance team.
What's my experience with pricing, setup cost, and licensing?
When it comes to the price of firewall solutions, Sangfor NGAF takes the cake. It is cheaper than Fortinet, Sophos, Check Point and Palo Alto.
What other advice do I have?
I would no longer offer Sangfor, as I have ceased to be its distributor. I am now a distributor for Check Point.
I rate Sangfor NGAF as an eight out of ten, owing to its bugs.
Disclosure: My company has a business relationship with this vendor other than being a customer. Distributor
Senior Presales Consultant at Megaplus
Great bandwidth management and vulnerability assessment
Pros and Cons
- "In four steps one can configure the entire firewall."
- "The solution is quite safe and good, and furthermore, it is very good for different environments."
- "I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
What is our primary use case?
I believe I am using the recently updated firmware of version 4.0.
What is most valuable?
User-wise, the bandwidth management is one of the most valuable features. Also, certain features are available in the NGFW.
The solution self-diagnoses everything, which we refer to as vulnerability assessment. It automatically runs on one's network and lists the pros and cons. I consider it to be very catchy.
What needs improvement?
I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions.
For how long have I used the solution?
I have been working with Sangfor NGAF for around three years.
What do I think about the stability of the solution?
So far, the solution has shown itself to be very stable.
What do I think about the scalability of the solution?
The solution is scalable and I can upgrade it to 40, which I consider to be a good thing.
How are customer service and technical support?
Technical support is very good. In a single call, the support person can come on site or address ones needs remotely within minutes.
Which solution did I use previously and why did I switch?
Prior to Sangfor NGAF we worked with Fortinet.
We switched because the previous solution did not readily make available support personnel. Also, while we considered the product to be stable, we felt the support to be very slow.
How was the initial setup?
The setup was easy from the get go. In four steps one can configure the entire firewall.
Give or take, it took no more than two or three hours.
What's my experience with pricing, setup cost, and licensing?
The price is very cheap. It cannot be matched.
Which other solutions did I evaluate?
While Palo Alto claims to be pioneers in vulnerability assessment and risk management, I could not find references on the website to support this. Only Sangfor firewall has the requisite vulnerability assessment.
Moreover, Palo Alto and Sangfor are pretty much equal in terms of technology and interfaces. I was doing research to verify the vulnerability and risk assessments claims promoted on the website, as I was unable to find these.
What other advice do I have?
I am a customer and use Sangfor NGAF 5600 in my premises.
There are more than 2,000 users making use of the solution in my company.
The solution is quite safe and good. Furthermore, it is very good for different environments.
I rate Sangfor NGAF as a nine-point-five out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Sangfor NGAF Report and get advice and tips from experienced pros
sharing their opinions.
Updated: August 2026
Product Categories
FirewallsPopular Comparisons
Fortinet FortiGate
Cisco Secure Firewall
Netgate pfSense
OPNsense
Sophos Firewall
Check Point Cloud Firewall (formerly CloudGuard Network Security)
Palo Alto Networks NG Firewalls
WatchGuard Firebox
Cisco Meraki MX
Check Point Quantum Force (NGFW)
Azure Firewall
Palo Alto Networks VM-Series
Cisco Secure Access
Fortinet FortiGate-VM
Juniper SRX Series Firewall
Buyer's Guide
Download our free Sangfor NGAF Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What do you recommend for a corporate firewall implementation?
- Comparison of Barracuda F800, SonicWall 5600 and Fortinet
- Sophos XG 210 vs Fortigate FG 100E
- Which is the best network firewall for a small retailer?
- When evaluating Firewalls, what aspect do you think is the most important to look for?
- Cyberoam or Fortinet?
- Fortinet, Palo Alto or Check Point?
- If you could go back, would you change your decision to buy that firewall and why?
- Sophos XG vs Fortigate UTM
- Can you recommend a solution to replace Cyberoam 200ing Firewall?














