Huawei NGFW vs Sangfor NGAF comparison

Huawei and Sangfor are both solutions in the Firewalls category. Huawei is ranked #30 with an average rating of 7.4, while Sangfor is ranked #18 with an average rating of 7.9. Huawei holds a 1.0% mindshare in Firewalls, compared to Sangfor’s 1.3% mindshare. Additionally, 66% of Huawei users are willing to recommend the solution, compared to 90% of Sangfor users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 6, 2025

Sangfor NGAF and Huawei NGFW compete in the network security technologies category. Sangfor NGAF appears to have the upper hand in ease of use and cost-effectiveness, making it appealing for budget-conscious organizations.

Features: Sangfor NGAF offers strong threat protection, ease of integration with other systems, and user-friendly management. It provides robust security features with comprehensive threat detection, all while being cost-effective. Huawei NGFW is equipped with a rich feature set that excels in networking operations. It is suitable for larger enterprises that need integrated solutions, bringing commendable antivirus and encryption capabilities.

Room for Improvement: Sangfor NGAF could enhance its user feedback mechanisms and strengthen its support capabilities. More competitive pricing along with enhanced SD-WAN features would bolster its offerings. Huawei NGFW requires improvement in integration and security updates, better threat intelligence, and delivering a more seamless support experience. Reporting and feature offering enhancements are areas both products can focus on to meet user expectations better.

Ease of Deployment and Customer Service: Sangfor NGAF supports on-premises and hybrid cloud environments with exceptional, locally available customer service, allowing quick issue resolutions. Huawei NGFW, although facilitating on-premises deployment, requires intricate configurations and lacks the agility in support seen in Sangfor. Its global support network can result in delayed service.

Pricing and ROI: Sangfor NGAF is priced competitively, offering an appealing ROI with lower initial costs, making it an ideal choice for budget-focused users. It is cheaper than competitors like Fortinet and Palo Alto. While Huawei NGFW is also competitively priced compared to brands like Cisco, its post-purchase support and licensing expenses impact the overall cost, affecting its value evaluation. Sangfor's pricing structure is particularly attractive for organizations facing budget constraints.

To learn more, read our detailed Huawei NGFW vs. Sangfor NGAF Report (Updated: April 2025).

Buyer's Guide

Huawei NGFW vs. Sangfor NGAF

April 2025

Download the complete report

Helped 850,671 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of May 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 21.4%, up from 17.7% compared to the previous year. The mindshare of Huawei NGFW is 1.0%, up from 0.5% compared to the previous year. The mindshare of Sangfor NGAF is 1.3%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Muhammad-Nadeem

Lead Network Security Engineer at PTA

A scalable and easy-to-setup product that can be used to configure different policies for specific users

In other next-generation firewalls, if you are creating virtual systems, they will create separate hardware resources for different virtual systems. Other products will create a different routing table when we create a routing protocol. In Huawei, the routing table, control plan, and data plan will share the resources. Every virtual system should have separate resources, routing tables, and hardware resources. We have created multiple segments and virtual systems, and we don't want one segment to communicate with another. The product must divide the virtual firewalls with different utilization systems. The hardware, routing switch, and security bundle should be separate and different. The solution does not have sandboxing features. It should provide a sandboxing solution. It should also work on zero-day attacks. The solution should be comparable with the products provided by Palo Alto, Check Point, and Cisco.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has improved our organization with control data."

"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable."

"This solution has helped our organization by having strong functions and a reliable firewall."

"Fortinet FortiGate is a stable solution."

"The security fabric is excellent."

"Whenever we raise a complaint with FortiGate, their response and resolution times are minimal."

"Security, SD-WAN, and Streetscape are valuable features."

"Fortinet has a very good solution for Secure SD-WAN. One very good feature is that they have robust and simple FortiOS through which they provide all solutions. That's their strength. There's not much complexity involved with the Secure SD-WAN solution of Fortinet as compared to Cisco's solution, which has a lot of flexibility but complexity also comes with that flexibility."

More Fortinet FortiGate pros

"Huawei support is excellent. I rate it 10 out of 10."

"The UI is quite good."

"We make use of the new data center, specifically the containerized data center which is built and reviewed by Huawei, including all the device's infrastructure."

"The user interface is very, very good."

"The most useful feature is the performance of the firewalls and networking operations."

"The stability is fine. I would rate the stability a nine out of ten."

"I like that the initial setup is straighforward. It's also a scalable solution."

"The security is good. It's as effective as anything else on the market."

More Huawei NGFW pros

"The most valuable feature of Sangfor NGAF is its integration."

"In four steps one can configure the entire firewall."

"You might try Sangfor if you are on a tight budget. The price is affordable, and Sangfor offers a lot of features. We don't have any complaints about Sangfor."

"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."

"We can utilize our own network rather than paying for a private one."

"The built-in features function as intended, providing exceptional value."

"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."

"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."

More Sangfor NGAF pros

Cons

"We would like to see better pricing."

"Fortinet FortiGate needs to improve to be on par with its competitors, such as Palo Alto and Sophos. They are the market leaders. Fortinet FortiGate needs to improve its capabilities. However, we are happy with Fortinet FortiGate."

"The reports are very basic."

"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."

"My only complaint about FortiGate is a lack of QinQ VLAN tunneling. I haven't found this feature in any Fortinet product. You can do this on all Cisco routers, including the smaller models. However, QinQ isn't available on the biggest, most expensive Fortinet units. They still don't have that. I think now we're on software version 6.0, and they still haven't found a solution for QinQ. It isn't a dealbreaker, but that's my main complaint."

"Its filtering is sometimes too precise or strict. We sometimes have to bypass and authorize some of the sites, but they get blocked. We know that they are trusted sites, but they are blocked, and we don't know why."

"It should have a better pricing plan. It is too expensive. It should also have a more granular view of the attack. I don't have FortiAnalyzer, and it is difficult for me to have a complete view when there is an attack on my server."

"One area for improvement is the performance on the bandwidth demands for smaller devices, as well as better web filtering."

More Fortinet FortiGate cons

"The solution doesn't seem to be very mature. Our networking team says they are experiencing a lot of issues in the firewalls and some routers."

"The solution requires a more interactive dashboard. That would make it easier than playing with configurations the way we have to now."

"One issue we've encountered with Huawei NGFW is that after using a firewall for two or three years, we need to replace it. The new firewalls often have more features and better memory or throughput. However, sometimes, they lack some features that the old ones had."

"Wi-Fi scanning and Wi-Fi analysis would be useful features to include in the future."

"The user interface could be more user-friendly."

"The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well."

"One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP, domain URL, and file hashes I get from Hackersworld into my blocklist."

"The tool does not have web functionality. It needs to also have high end firewalls."

More Huawei NGFW cons

"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."

"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."

"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."

"Sangfor NGAF could improve the policies and default criteria. They could be much better."

"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."

"Our experience with its customer support was quite challenging."

"Lacks consistency in terms of filtering certain websites and applications."

"It does not offer any recommendations on how to mitigate or control attacks."

More Sangfor NGAF cons

Pricing and Cost Advice

"This is not a cheap solution but it isn't expensive, either. It's a good solution for the right price."

"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."

"No comment."

"The price of FortiGate support is too expensive."

"Easy to understand licensing requirements."

"The license of Fortinet FortiGate should be reduced."

"When you look at these end security systems and firewalls, these firewalls even five years ago were $50,000 or perhaps $25,000 to implement in some types of customer sites. Now we're talking about tools that are $1,000. In this case, it might have been $500 or something like that."

"The solution requires a license annually, it is not a user license, you can have as many users as your want. I must renew the license regularly per device."

More Fortinet FortiGate pricing and cost advice

"Huawei is 30% cheaper than Arista."

"The solution is inexpensive."

"Huawei is priced lower than most competitors."

"The price of the license of this solution is high."

"Licensing fees are billed on an annual basis."

"I believe that we are entitled to a one-year extension on our licensing."

"The pricing is cheap."

"The solution isn't cheap. It's market price."

More Huawei NGFW pricing and cost advice

"The price falls in the mid-range, neither exceptionally low nor high."

"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."

"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."

"-"

"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."

"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."

"The price is unmatcheable."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

More Sangfor NGAF pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

850,671 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

20%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

Manufacturing Company

Comms Service Provider

Computer Software Company

13%

Manufacturing Company

10%

Financial Services Firm

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Huawei NGFW?

The solution's implementation is pretty easy.

See all answers

What is your experience regarding pricing and costs for Huawei NGFW?

The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.

See all answers

What needs improvement with Huawei NGFW?

Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously updat...

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 22% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

More Fortinet FortiGate Competitors

Cisco Secure Firewall vs Huawei NGFW

Compared 13% of the time

Palo Alto Networks NG Firewalls vs Huawei NGFW

Compared 6% of the time

Fortinet FortiOS vs Huawei NGFW

Compared 5% of the time

Check Point NGFW vs Huawei NGFW

Compared 5% of the time

Juniper SRX Series Firewall vs Huawei NGFW

Compared 2% of the time

More Huawei NGFW Competitors

Sophos XG vs Sangfor NGAF

Compared 16% of the time

Netgate pfSense vs Sangfor NGAF

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 4% of the time

Sophos XGS vs Sangfor NGAF

Compared 4% of the time

Zscaler Internet Access vs Sangfor NGAF

Compared 2% of the time

More Sangfor NGAF Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

May 2025

Download Fortinet FortiGate product report

Buyer's Guide

Huawei NGFW

April 2025

Download Huawei NGFW product report

Buyer's Guide

Sangfor NGAF

April 2025

Download Sangfor NGAF product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Huawei USG Firewalls, USG9500 Series, USG6600 Series, USG6300 Series

Sangfor NGAF Firewall Platform

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Fortinet

Huawei's Next-Generation Firewall (NGFW) is a cutting-edge security solution designed to protect networks from advanced threats. With its advanced threat detection and prevention capabilities, the Huawei NGFW ensures the highest level of network security.

The product offers comprehensive security features, including intrusion prevention, application control, and URL filtering, to safeguard against a wide range of cyber threats. The NGFW also provides deep packet inspection and advanced threat intelligence, enabling real-time threat detection and response.

With its high-performance architecture, the Huawei NGFW delivers fast and efficient security without compromising network performance. It is easy to deploy and manage, thanks to its intuitive user interface and centralized management platform.

The NGFW also supports flexible deployment options, including virtualization and cloud integration, making it suitable for various network environments.

Huawei

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Sangfor

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

KMITL, Peking University

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

Buyer's Guide

Huawei NGFW vs. Sangfor NGAF

April 2025

Free Report: Huawei NGFW vs. Sangfor NGAF

Find out what your peers are saying about Huawei NGFW vs. Sangfor NGAF and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,671 professionals have used our research since 2012.

See our Huawei NGFW vs. Sangfor NGAF report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.