We performed a comparison between Cisco Secure Firewall and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Valuable features include the Web Application Firewall, and it even has DLP (data leak prevention)."
"It is a one box solution, which covers most of the edge device’s requirements."
"The main benefit is the grouping of our security monitoring."
"It's user-friendly and easy to operate."
"The security on offer is very good."
"Customers want to load balance more than eight lines or six internet lines. FortiGate is the only solution that can accomplish this."
"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"Fortinet FortiGate's most valuable features are ease of use, flexibility, and most of the configuration we can be done using the GUI. When we compare Fortinet FortiGate with other solutions the firewall policy are very easy to understand."
"Signature-based detection; user-defined signatures with regular expressions; integrated URL and content filtering; custom URL categories filtering."
"I like the firewall features, Snort, and the Intrusion Prevention System (IPS)."
"It's a flexible solution and is well-known in the community."
"The stability of the product is good."
"A good intrusion prevention system and filtering."
"An eight because it's a good security solution. It's more mature than its competitors."
"IPSec Tunnel and AnyConnect (of course), the context awareness was a good feature, but clumsy at the beginning. I think it's better now."
"Sourcefire has been a great addition. The visibility and control have been nice."
"We can utilize our own network rather than paying for a private one."
"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"It is a stable solution."
"So far, the performance and reliability of the product have supported our company's critical network traffic."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"It offers application control features."
"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."
"There are problems with the custom reporting of the unique traffic. The data is there, but it is too difficult for us to extract."
"There aren't really any negative aspects to discuss."
"It should be more stable. There should be full integration within Fortinet products themselves as well as with other third-party products. Especially when you're not dealing with SIEM and the correlation of the security box, we want Fortinet to be able to share that information with as many other products as it can."
"I would prefer to have more detailed logs within the FortiGate products themselves rather than relying on a separate tool."
"We'd like more management across other integrations."
"Fortinet doesn't provide multiple virtual firewalls which would facilitate end users and customers."
"It needs more available central management."
"If Cisco could stop rebranding, combine all the CLIs/GUIs, and give a consistent experience, this would be great."
"The most valuable features of the product are the VPN and the NextGen firewall features such as application control, URL filtering, etc."
"Managing various product integrations, such as Umbrella, is challenging."
"Its implementation was not straightforward. It was mainly because we were running two projects together."
"When we're looking at full-stack visibility, it can be difficult to get the right information out of Firepower."
"Make the IPS baked-in."
"On firewall features, Fortinet is better. Cisco needs to become more competitive and add more features or meet Fortinet's offering."
"The GUI interface could be improved when compared to other solutions."
"It does not offer any recommendations on how to mitigate or control attacks."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"They need to increase the number of ports in the firewall."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"The web interface needs to be improved, making it more user-friendly."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"Our experience with its customer support was quite challenging."
"The firewall system needs gradual improvements because there are more threats and challenges every day."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Sangfor NGAF is ranked 20th in Firewalls with 31 reviews. Cisco Secure Firewall is rated 8.2, while Sangfor NGAF is rated 8.0. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and OPNsense. See our Cisco Secure Firewall vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.