No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor NGAF vs Untangle NG Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Sangfor NGAF
Ranking in Firewalls
22nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Untangle NG Firewall
Ranking in Firewalls
31st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
26
Ranking in other categories
Unified Threat Management (UTM) (9th)
 

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. The mindshare of Untangle NG Firewall is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate16.0%
Sangfor NGAF1.1%
Untangle NG Firewall1.0%
Other81.9%
Firewalls
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at a consultancy with 51-200 employees
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Gary-Downey - PeerSpot reviewer
Director of Information Technology at a consultancy with 11-50 employees
Has provided built-in VPN tools and reporting features that streamline remote access and monitoring tasks
We do an outside-sourced threat prevention regarding the Threat Prevention features. I haven't run into areas that could be improved or cons versus pros for Untangle NG Firewall. I haven't done anything too advanced when it comes to the filtering, so I'm not sure what can be improved or added. I haven't dug into the advanced features, but I think some of the advanced capabilities are probably where it lacks a little bit, with the filtering and firewall rules. These areas could be improved to make it a nine out of 10 or a 10 out of 10 for overall rating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Throughout the last six years we have been using Fortigate firewalls, and the experience we gained is only positive."
"The scalability is easy with switches and access points that are basically plug-and-play for the most part."
"You have access to CLI in case you have no web access."
"The next-gen features, the unified threat management capabilities are something that just about everybody is interested in at this point."
"The solution is very, very easy to use, the user interface is very nice, the product offers pretty good customization, configuration has been straightforward and simple, the reporting is quite good, the initial setup is straightforward as well, and we've found the pricing to be pretty good."
"Regionally, we are well covered. Technical support is good in this area."
"It is a one box solution, which covers most of the edge device’s requirements."
"It's an easy solution to set up."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"Sangfor serves most of the basic purposes of a firewall, is particularly good in the DPI where we can inspect the inbound and outbound traffic on a very granular level, gives a very good predictive measure as well as the current measure of things going on in our network, and gives us value for money overall."
"We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"We have had incredibly good results with all of its features."
"The web blocking for my clients and the application control are valuable."
"The features I have found the most useful are the web filter, the captive portal, the SSL inspector, and the ad-blocker; they're awesome."
"Its detection, antivirus, and filtering features are the most valuable. The facility to connect by using the VPN connection is also a very valuable feature. It is very strong, secure, and reliable. We have implemented the Untangle solution in all hardware. It is also a user-friendly solution. It is easy to learn and easy to configure."
"The majority of our clients are very small businesses, and Untangle devices have been fantastic for these small clients. We've basically standardized our stack to just simply use Untangle. We include the hardware and the service option, which makes it very easy and affordable for us to just simply push that into the monthly per-user costing that we provide as a managed services provider. It's really a no-brainer. They're easy to use, and they're easy to set up and configure. Support is generally good about resolving any issues that we have. We haven't had any real complaints."
"The Untangle firewall is a software firewall, so it runs on generic hardware, and we found that was probably the best feature, and it's why we chose it when we started using it three years ago."
"NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended."
"The product is easy to implement."
 

Cons

"Scalability is one of the disadvantages. When it comes to scalability, you have to actually change the box."
"The things we require are already sorted out, so there isn't any scope for improvement as far as our requirements go. However, its price can be better."
"The only problem that we have here in China is that the whole subscription process on Fortinet is a little bit difficult if you are doing it from China."
"The configuration part was challenging, especially converting configurations from another OEM to FortiGate."
"The solution isn't exactly scalable, especially when it comes to the public cloud environment."
"We have experienced a number of failures when trying to upgrade firmware and the process takes a long time."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"IPs are not handled well and the process is unnecessarily complicated."
"The cost of licensing is very high compared to other firewalls available here."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"The reporting and log management could be improved."
"An area for improvement would be the number of ports defined on the box."
"The solution should be able to work in a hybrid setup."
"I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense."
"For the web filter, I think they can do better especially on the free model."
"The ability to setup a DDNS for each WAN independently would be a very handy feature."
"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."
"They don't have any feature that allows you to drop the session."
"They don't have any feature that allows you to drop the session."
"For the web filter, I think they can do better especially on the free model."
"On their low-end appliance, they could have more memory and the largest storage space. The low-end appliance comes with a too-small hard drive, and it could use a little extra room."
"It does have multi-factor authentication in some areas, but I would love to see a more widely implemented version of that on the devices themselves."
 

Pricing and Cost Advice

"We pay for the license of Fortinet FortiGate IPS annually. There are not any extra costs."
"The price of FortiGate is comparable to that of most other firewall solutions and is more affordable than Cisco."
"It's not the cheapest, but it's value for money. Given everything we've got out of it: the DMZ port, the VPN, and the high availability, it's a pretty reasonable price."
"You need to pay a license for this solution. Our licensing is now done in our subsidiary."
"The product is expensive. I rate its pricing a six out of ten."
"Before choosing a piece of equipment you have to take into account the cost-benefit offered by each one. Sometimes it is not worth paying a very cheap price to have a minimum level of security."
"If the customer is looking for SD-WAN, it comes free with FortiGate."
"It is an expensive solution."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"Sangfor NGAF price is reasonable and there is an annual license. However, the maintenance cost can be a bit high."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company."
"The product is very cost-effective compared to other brands or vendors."
"The price could be more competitive."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
"The pricing model is better than with SonicWall."
"It is not expensive. It is cheaper than Fortinet."
"This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in."
"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."
"The tool's pricing is moderate, and licensing costs are yearly."
"Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc. It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors."
"The solution is fairly priced."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
896,510 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Manufacturing Company
11%
Comms Service Provider
10%
Financial Services Firm
10%
Computer Software Company
7%
Comms Service Provider
15%
Manufacturing Company
9%
Construction Company
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business368
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise1
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...
What needs improvement with Untangle NG Firewall?
I would appreciate improvements to the ad blocker and SSL Inspector of Untangle NG Firewall.
What is your primary use case for Untangle NG Firewall?
My usual use cases for Untangle NG Firewall are just like a firewall and router. The main purpose is for firewall fun...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,
Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: April 2026.
896,510 professionals have used our research since 2012.