Sangfor NGAF Reviews

The system comprises three primary functionalities: defense solutions, detection solutions, and the ability to identify, block, and analyze network traffic. It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network.

We have observed numerous threats targeting our network from both internal and external sources. While we have reports detailing these incidents, we currently lack a clear method for prioritizing internal threats.

The information provided alerts us to the presence of threats from specific sources, which is highly beneficial.

It does not offer any recommendations on how to mitigate or control attacks.

I have been using it for three years.

We face occasional stability issues. I would rate it seven out of ten.

It doesn't offer significant scalability features.

In the event of a performance issue, such as users reporting slow access to specific websites, we conduct an internal investigation to identify the root cause. If it's determined to be a problem with the equipment, we escalate the issue to the vendor for resolution.

Neutral

When we installed the equipment, we depended on an external consulting party to guide us through the setup and functionality for approximately two weeks. The project team, consisting of both project members and experts in the field, were actively engaged during this period.

The pricing is reasonable. At the time of our decision to acquire the equipment, we were working with a constrained budget and it turned out to be the most suitable choice to meet our specific requirements

We considered FortiGate as an option but ultimately decided on Sangfor NGAF due to its more favorable pricing.

I hope that its distributor possesses a high level of product knowledge, and the same applies to Sangfor itself as the principal company. This would enable customers to have a more seamless and enriching experience with the product, eliminating any barriers or disconnect between our team, the customers, and the software. Overall, I would rate it seven out of ten.

This solution is our firewall. I'm a network administrator.

Sangfor serves most of the basic purposes of a firewall. It's particularly good in the DPI where we can inspect the inbound and outbound traffic on a very granular level. It gives a very good predictive measure as well as the current measure of things going on in our network. When it comes to the VPNs, it has a very good throughput when remote users connect, particularly when it comes to site-to-site VPNs, where it provides a good analysis module. You can analyze inbound traffic and different policies on this. It gives us value for money overall.

I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense. They have put the NAT in the policy section but at the same time the DPI is in the network pane. The placement of different options in the menu system of this firewall is not that logical and often doesn't make a lot of sense. The operational procedures are a little tricky and require some technical skills. A level one person will have problems. The compatibility needs to be improved. 

I've been using this solution for three years. 

We have been experiencing power failures but the solution has been very stable, both from the hardware and the software perspective. We have built a lot of VPN solutions for the firewalls including Cisco, Firewall 2, and pfSense, and it has been very good with that. 

We don't require a very highly scalable coefficient but I believe it's scalable. 

The technical support is very good. They have a local vendor they have hired for the technical support and if anything cannot be resolved remotely, they come to us. They are very agile and very technically supportive.

Positive

The initial setup was a little complex because we were previously dealing with command line scenarios and we were not very comfortable with the GUI which is a little complex. 

Our licensing costs are around $15,000 per year which is nominal compared to other solutions. 

Whether or not this solution is good for you depends on your network. If you have sufficient technical support, then you can go for an open-source solution. Without that and if you have the funds, then this is a good solution. If not, then most of what firewalls do these days can be handled by an open-source solution.

This is a new solution in our country where the price tag really matters. They have targeted the public sector and I'm seeing more and more people moving towards Sangfor because it's cheaper than other products, and the support is quite good. 

I rate the solution seven out of 10. 

Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware. This is the primary reason we purchased this solution, and we are currently negotiating to upgrade our appliances to volume M5200 Series. Additionally, Sangfor NGAF provides a web application for financial software.

We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware. Our desktop PCs have essential data, like word files and excel documents. 

We previously had a ransomware attack on our file server, and Sangfor NGAF protected us by alerting and disconnecting the server from the network.

The firewall system needs gradual improvements because there are more threats and challenges in the world every day. Sangfor NGAF has a comprehensive database for ransomware and viruses, but when we compare it to other solutions, the price could be more competitive.

Since we have a very comprehensive solution with Sangfor NGAF, it is hard to identify any additional features we want to add. It already provides good features for ransomware attacks and data recovery. In the past, we wanted encrypted data for a virus to be recoverable, and Sangfor offered the solution.

We have been using Sangfor NGAF for four years. We use it for overall IT infrastructure protection and are currently using version 1 of Model M5100.

We currently deploy a hybrid infrastructure of cloud and on-premises. We use the solution for our accounting and financial software, websites, internet blocking, and other features. Some clients are on the cloud, and others are on-premises. We also have a Sangfor solution that filters the in and out traffic.

The solution is relatively stable. Interestingly, we discontinued the updates and software licenses about a year ago, and the appliance and solutions are still working. In addition, there is no limitation on the license, so services won't stop if it expires. You can also update the license at any time for a partial cost.

This solution is scalable. We can add many features and lengths and expand according to our needs.

The IT specialists and engineers in my organization use this solution. Our whole organization is under the protection of Sangfor NGAF. The solution has footprints in India and Europe and many government agencies use Sangfor NGAF in Pakistan.

For deployment, we needed three people who were all IT specialists, and only one of them was from Sangfor. As a result, we deployed it with very few resources, and there were no recurring charges. Also, most people are very well-versed in technology and can multitask.

The technical support team was very helpful, provided support, and guided us during our initial deployment. We were good to go in 15 to 20 minutes.

We previously used Sophos and pfSense, an open-source firewall. 

The initial setup was very straightforward. The solution is out of the box, and the software and appliance can be quickly installed. It has a very nice AI feature, and we only needed to implement parameters and define some policies. The deployment took 15 to 20 minutes because we had to get familiar with the new system. 

We defined WAN and LAN networks for our implementation strategy and then defined the servers. Next, we identified the modes and decided the desktop would be the best. There were other considerations but it has been four years, so it is hard to remember all of them.

We completed our deployment in-house.

We have seen a return on investment. The systems are protected, and their operating systems are readily available. We are protected from ransomware attacks and the loss of data. This solution protects us, and it has benefits.

On a scale of one to ten, with one being the cheapest, I rate the price a six out of ten. There are no hidden or additional costs other than what we were provided. Therefore, we are happy with our initial decisions.

We evaluated other options and completed some financial comparisons but the IT specialists advised that Sangfor NGAF worked well. 

I rate this product an eight out of ten because we don't know what we may need from this solution in the future. We are satisfied and hope to upgrade to a new version soon. However, right now, our current version is working fine.

In terms of advice, we would recommend Sangfor NGAF. But, a company should first prepare an analysis, compare different products, and then decide what they want.

Sangfor is an on-prem firewall I use for my local infrastructure. It is used as an aggregated interface. Behind Sangfor, I have built a data center that is deployed on high availability using a model that is 5100 CV with 10 gig ports.

Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor.

Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput. 

I have used this solution for the last six months.

This is a scalable solution. We have approximately 1,000 users.

The technical support team are available 24/7 and if we need any assistance for Sangfor, FortiGate or Sophos, we can call their support number and they provide assistance from their L2 or L3 engineers. 

Positive

It's very easy to set up because Sangfor provided us with export and HCI capabilities. Deployment took almost one week.

The process starts with low level design for internal teams to make a design on network requirements. This contains all current and future requirements.

For four to five physical appliances for a licensed firewall, it costs approximately $4,000.

We have six people managing IT operations. We have not had any issues in the first six months of using this solution. 

If you want to deploy a firewall in your infrastructure, Fortinet, Sangfor and Sophos are the best solutions to protect traffic.

I would rate this solution an eight out of ten.

Sangfor NGAF offers built-in Web Application Firewall capabilities, making it a valuable choice for securing WAF servers. We have implemented this feature in numerous deployments, particularly in the fields of financial management and enterprise environments.

We have established an SD-WAN infrastructure with Sangfor NGAF, which has proven to be highly beneficial. The built-in features function as intended, providing exceptional value.

It is a relatively new product in the market, so we are dealing with challenges related to security and malware detection. It will need time to assess its strengths and weaknesses thoroughly. We discovered that the SD-WAN capability is available within this product. It also includes built-in Value-Added Security Technology, which can be cost-effective, but improvements are needed, particularly in enhancing malware detection. Another area for improvement is integrating with other third-party providers' solutions for a more seamless security ecosystem.

We have been working with it for two and a half years.

In terms of stability, there have been occasional issues, such as glitches and disruptions, leading to periods of downtime. Improvement in this area is necessary. I would rate it five out of ten.

Scalability is a key aspect, and we haven't thoroughly tested its compatibility with various other products yet. I would rate it five out of ten.

Our experience with its customer support was quite challenging. There's room for improvement in this aspect.

The initial setup is remarkably straightforward and user-friendly.

The price falls in the mid-range, neither exceptionally low nor high. I would rate it seven out of ten.

Deploying Sangfor NGAF proves highly advantageous for small and medium-sized businesses. Overall, I would rate it seven out of ten.

Sangfor NGAF is our gateway to the ISP. We also use it to filter the website that our employees deploy to the firewall and to access to our systems through the web. 

Sangfor reports on any intrusions in real-time so you can immediately whitelist or blacklist these reported intrusions. It makes our work easier because we previously only used MikroTIK which required significant manual effort. 

I really like the SSL VPN. Instead of paying for a virtual private network, we can utilize our own Internet service provider, and use our Internet connection to run access.

For some reason, Sangfor doesn't filter certain websites and applications. It should recognize them and utilize the bandwidth between applications. Also, if we try to block YouTube or Facebook videos, some users will use applications like Siphon for viewing so our bandwidth is still being utilized for non-work purposes. It might detect that somebody is using Siphon, but it cannot be blocked. It's inconsistent, sometimes one user can be blocked while another will have access. 

I've been using this solution for four years. 

The solution is stable and it really protects our systems and the data within our company.  

What we are using now doesn't have the SFP+, only the gigabit ethernet ports. We need to purchase a different model to accommodate the one with SFP+ because what we have now doesn't accommodate additional expansion slots for SFP+. We probably have 100 users who communicate with our head office from outside our region.

We don't encounter a lot of problems but if we do, there is access to 24/7 support, whether it's chat or email support. If there's an issue we make contact. 

Positive

We did not used any network security solutions before

The initial setup was very straightforward and deployment took less than a day. We had one in-house person responsible for deployment and we started using the solution immediately. 

I rate the implementation a nine out of ten.

The setup is a breeze and the pricing is definitely low when compared to the competition.

I looked into Sophos XG.

I rate this solution an eight out of ten. 

Sangfor NGAF is a complete firewall solution.

The most valuable feature of Sangfor NGAF is its integration.

Sangfor NGAF could improve the policies and default criteria. They could be much better.

I have been using Sangfor NGAF for approximately three years.

Sangfor NGAF is stable.

The scalability of Sangfor NGAF is good.

We are using the Sangfor NGAF as our firewall, we have approximately 6,000 to 8,000 end users who are passing through. We have approximately 10 to 15 people using the Sangfor SSL VPN feature remotely from home.

The support from Sangfor NGAF here in Pakistan is great. Whenever I have an issue the support helps me out efficiently.

I rate the support from Sangfor NGAF a five out of five.

Positive

The initial setup of Sangfor NGAF is straightforward. Sophos and Fortinet have more difficult initial setups.

I rate the initial setup of Sangfor NGAF a five out of five.

The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF. 

We have purchased the support for three years.

My advice to others is they should try the solution. I have experienced other solutions, such as Fortinet and I feel much better using this solution overall.

I rate Sangfor NGAF a nine out of ten.

We're using it more for VPN tunneling and security. We're integrating it with the SoundCloud platform to use it in our data center.

We're happily using the IP vSEC VPN. We will use some credentials to connect it to two different sites.

Sangfor's tech features and technologies are more powerful than those of the other solution providers in terms of security. They also have big solutions in terms of cybersecurity.

It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters. This could be a hindrance when presenting it to clients, especially since many of our clients prefer US-based products. We’re pitching Sangfor as part of our solutions, but the presence of Chinese characters might be a concern.

I have been using Sangfor NGAF as a partner for two to three years.

We've encountered various glitches or bugs with the firewall, particularly when trying to configure redundancy. We're facing challenges with setting up two ISPs on a single, stacked firewall.

We haven't encountered any issues scaling with Sangfor. It follows a more traditional approach to scaling, though we don’t yet fully understand all the scaling capabilities of Sangfor products. However, it does have the basic features needed for scaling.

We have some contacts here locally. We do contact them for support.

Sang four independently is easy to configure. It's very straightforward. However, we're having challenges with the interoperability matrix and other integration for other firewall brands. 

The standard configuration, with basic policies, can take a couple of hours to set up.

One guy in our company can do the configuration.

We achieved a lot of ROI since the competitive pricing is much better than the other brands.

Price is very competitive with other brands.

We encounter different glitches or bugs in the firewall. More likely, we're having a problem with two ISPs being cited in our firewall to have redundancy. We don't know the primary or best practice of configuring two ISPs in a single firewall.

Overall, I rate the solution an eight out of ten.