Try our new research platform with insights from 80,000+ expert users

Sangfor NGAF vs Stormshield Network Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
581
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Firewalls (1st), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Sangfor NGAF
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
Firewalls (23rd)
Stormshield Network Security
Average Rating
7.8
Reviews Sentiment
6.0
Number of Reviews
17
Ranking in other categories
Unified Threat Management (UTM) (12th)
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Benjamin - PeerSpot reviewer
Network Engineer at ACS2I
The intrusion detection system helps our organization by automatically detecting and responding to potential threats
The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page. The intrusion detection system helps our organization by automatically detecting and responding to potential threats. It operates similarly to Darktrace, which detects and responds automatically based on the security rules you apply. Initially, you configure everything to block, and then you can whitelist specific items as needed.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The pricing is great and very reasonable."
"We use it to avoid unwanted traffic."
"It is pretty straightforward to manage and has robust capabilities. I appreciate that Fortinet FortiGate can be a central controller for other Fortinet products, such as switches and access points."
"It has improved our organization with control data."
"The product is easy to use and is stable. The SV1 functionality is a benefit."
"Some of the valuable features are the firewall, IPS, web filter, and gateway capabilities. Additionally, it is easy to use and flexible."
"The most valuable feature is the bundled subscription, which is IPS, TV and web filtering."
"The solution can scale."
"SSL VPN is the best feature."
"So far, the performance and reliability of the product have supported our company's critical network traffic."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"The stability of Sangfor NGAF is good."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"The scalability of the solution is good."
"The tool's most valuable feature is its dashboard, which helps you manage different aspects of a single page."
"Ease of use is the best feature of the product."
"I can see what traffic is going on. I can easily block any programs from attacks."
"I like how you can configure the rules. There is the task for the rules and a task for the network configuration. It also provides SMD filtering, and it can be integrated with the active directory for the users, their mission, and the VPN configuration. We are here in Sudan, and Stormshield didn't work in Sudan for more than a decade. Stormshield is a very strong firewall and very easy to configure and maintain. I am just working with the firewall solution, and we don't have any other solutions like endpoint solutions or something like that."
"It's an easy, straightforward management platform to use."
"Our organization's main concern is stability, and this is a stable solution."
"This solution is quick and easy to configure."
 

Cons

"There are some license issues. Not every feature must have a separate license. There must be some of kind synergy between the license so we don't have to pay for every individual license that we would like to have."
"The solution has many heightened points which we cannot get to without working on CLI."
"Usually, we sell the bundle with the UTM or threat management piece with IPS, IDS. Other providers, such as Palo Alto, are ahead in terms of safe functionality. So, for me, delivering truly safe service is probably something that still needs to be improved."
"I mostly do administration, and I found Cisco to be the hardest major firewall manufacturer to deal with, with Fortinet FortiGate being the second hardest for me."
"The security of Fortinet FortiGate could improve."
"IPs are not handled well and the process is unnecessarily complicated."
"They have recently acquired a CNAP solution which should be integrated into FortiGate boxes natively for protection at any application layer. Since Fortinet FortiGate has Layer 7 protection, they should integrate that as soon as they can for threat detection and network detection."
"They should do a better job in testing when they put out a new release because when a new software version is released, it is not always stable or does not always have all the previous features working correctly."
"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"They need to increase the number of ports in the firewall."
"It does not offer any recommendations on how to mitigate or control attacks."
"The solution should be able to work in a hybrid setup."
"It could be better if it were more user-friendly. It's too complicated for us to use it. The price could be better as well."
"A more user-friendly interface would be helpful."
"This is not a next-generation firewall."
"With Stormshield, there are difficulties joining things, and it can be complex depending on the architecture."
"The biggest issue was their support department was not able to help us, then everything stops. This is a no-go area for me."
"The SD card could be more secure."
"Not all the fields are activated yet and we were informed that it will take at least one month."
"The product must improve its pricing."
 

Pricing and Cost Advice

"The solution is very expensive so pricing is rated a one out of ten."
"Fortinet prices are around $600 for the small 40F model, and for licenses, the simplest option is about $300 for a year. They sell licenses that can last for 1, 2, 3, or 5 years."
"The price is okay, so far so good."
"Fortinet FortiGate has different licensing models, depending on what you're going to do. Services included would depend on the license model. Licenses can be renewed annually."
"It is a cost-effective solution that meets the user's needs."
"You need to pay a license for this solution. Our licensing is now done in our subsidiary."
"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."
"The price is okay."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"The price could be more competitive."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"The product is very cost-effective compared to other brands or vendors."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"The pricing could be better."
"The price of this solution and the price of support are ok."
"For mid-sized companies, they sell their appliances for good prices."
"I think the price is good."
"We chose Stormshield for its price, as the Azure firewall was too expensive."
"The SN200 series costs between $500 USD and $600 USD per year, whereas the SN700 series costs approximately $1,000 annually."
"We bought a three-year license, and we renew it whenever it expires. The price could be better. It's always very expensive."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
882,813 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Manufacturing Company
11%
Financial Services Firm
8%
Comms Service Provider
8%
Computer Software Company
7%
Comms Service Provider
17%
Computer Software Company
15%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise189
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise2
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What advice do you have for others considering Stormshield Network Security?
The tool is like a firewall and works well. I don't have any issue with it. I rate it an eight out of ten.
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
NETASQ Firewalls
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
ACESUR group, Ministry of Education Oman, Anios Laboratories, Zain, DLM Location
Find out what your peers are saying about Sangfor NGAF vs. Stormshield Network Security and other solutions. Updated: February 2026.
882,813 professionals have used our research since 2012.