Sangfor NGAF Reviews

We are using their product for Internet filtering as the Internet gateway. Previously, we were using FortiGate for this purpose and replaced it with Sangfor IAM. We are also using their firewall, NGAF, for core firewalling.

Threat detection in my previous organization, it was amazing because right after we implemented Sangfor NGAF Cyber Command, we started getting a lot of alerts that we were unaware of.

We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications hosted there, websites, FTP portals, making it quite comprehensive. Essentially, it performs all the tasks that a firewall does.

The top functionality is the reporting feature. It effectively describes attacks, categorizes them, and recommends mitigation actions. It's crucial for security administrators when dealing with attacks. This aspect is very user-friendly and easy to understand. It adds significant value to our data center operations.

It is primarily used for providing secure Internet connectivity to devices, to endpoints, and to provide secure VPN connectivity to the network for remote users. That's the primary usage right now.

The VPN connectivity feature is really nice. The SSL VPN feature is really nice, and the URL filtering for Internet connectivity is really nice. That's one of the best features for us.

We use Sangfor NGAF's next-generation firewall as a security firewall which includes a web application firewall, web app filtering, and URL filtering. It also helps us defend against botnet attacks and similar threats.

In my office, there are about three people who are involved in the direct use of it, although not too many others know about the firewall yet because it's a new product.

The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately.

Sangfor also gives you a warranty for any issues or defects with their hardware. If you find any issue, they will replace the hardware within five working days. We send any hardware that is faulty to our local country partner and they will do the RMA. 

When it comes to deployment environments, I like that you have options. If you want a hardware firewall, then you can use their hardware. Conversely, if you want a cloud firewall, then they can provide that, too.

We use the solution for filtering.

The solution protects against ransomware and firewall attacks. It also offers application control features. It protects different ports for endpoints and different threats. Its interface is very good.

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical.

I think Sangfor NGAF is very strong in the reporting area compared to Palo Alto and Cisco. It has much better reporting capabilities. The tool has a good web application firewall feature. Cisco and Fortinet products don't provide such rich WAF features.

The tool is expensive. 

Our company uses the solution for perimeter security. We are distributors in the Middle East and Africa. We look for competitive analysis against Fortinet and Sophos. 

The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall. 

Sangfor is an on-prem firewall I use for my local infrastructure. It is used as an aggregated interface. Behind Sangfor, I have built a data center that is deployed on high availability using a model that is 5100 CV with 10 gig ports.

Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor.