Sangfor NGAF vs Untangle NG Firewall comparison

Sangfor and Untangle are both solutions in the Firewalls category. Sangfor is ranked #19 with an average rating of 7.9, while Untangle is ranked #25 with an average rating of 8.0. Sangfor holds a 1.2% mindshare in Firewalls, compared to Untangle’s 1.3% mindshare. Additionally, 90% of Sangfor users are willing to recommend the solution, compared to 94% of Untangle users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Untangle NG Firewall and Sangfor NGAF are prominent contenders in the next-generation firewall category. Sangfor NGAF appears to have the upper hand due to its comprehensive feature set and competitive pricing.

Features: Untangle NG Firewall includes easy VPN setup, web filtering, application filtering, and SSL inspection, focusing on user-friendliness and flexible hardware deployment. Sangfor NGAF emphasizes application control, intrusion detection, and strong reporting capabilities, with additional features like endpoint security and SD-WAN integration.

Room for Improvement: Untangle NG Firewall requires advancements in its mobile application, processing power, security features, and support availability, especially locally. Sangfor NGAF can enhance its reporting efficiency, application control, and simplify deployment complexity while improving local support availability.

Ease of Deployment and Customer Service: Untangle NG Firewall supports on-premises and private cloud deployment and offers responsive customer service, though local support can be a challenge. Sangfor NGAF supports on-premises and hybrid cloud environments, providing 24-hour free technical support, though time zone differences can occasionally cause delays.

Pricing and ROI: Untangle NG Firewall offers a cost-effective entry price with open-source options, though its per-device licensing can become expensive as it scales. Sangfor NGAF is positioned as a more budget-friendly option, with competitive pricing that is generally lower than similar offerings from competitors like Fortinet.

To learn more, read our detailed Sangfor NGAF vs. Untangle NG Firewall Report (Updated: January 2025).

Buyer's Guide

Sangfor NGAF vs. Untangle NG Firewall

January 2025

Download the complete report

Helped 831,158 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortinet FortiGate

Mindshare comparison

As of January 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.3%, up from 17.4% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 0.8% compared to the previous year. The mindshare of Untangle NG Firewall is 1.3%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Firewalls

Featured Reviews

EhabAli

Sr. Cybersecurity Solutions Architect at BMB

Efficient, user-friendly, and affordable

In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.

Read full review

Zaid Farooqui

CIO at Indus Motor Company

Enhanced threat detection with integrated security features and good support

We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.

Read full review

Josh Evans

CEO at DragonTech IT Services, Inc

Its simplicity, variety of features, and low pricing have enabled us to improve the security for our small business clients at a price that they are happy to pay for

I've heard other people saying that other firewalls have better detection rates, so better security. If they can improve the security of the device, I'm always for that, but at the moment, we've been happy with the service that we're getting out of them. It does have multi-factor authentication in some areas, but I would love to see a more widely implemented version of that on the devices themselves. It could use some improvement for Azure Active Directory Connections. It does exist, and it is available, but it needs work to be able to fully authenticate. I know there are some advanced features that other firewalls have that aren't present in Untangle, but we've never noticed any feature that we need but isn't there. I also know a lot of people have complained about the cost per device because they license by device counts. So, once you get over a certain number of devices, it is not really a cost-effective solution.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Their proxy-based inspection is responsive and secure."

"The wireless control is helpful."

"The solution is highly scalable because they have devices that can handle a large amount of traffic."

"The VPN is the most valuable feature."

"The CLI and GUI do a good job of putting a lot at your fingertips."

"We were looking for the VPN feature and controlling the inflow and outflow of all the traffic within the site and across the sites. We are also using it for the VPN and VLANs."

"Our security improved from being able to put in rules and close off unwanted traffic."

"Fortinet FortiGate has many valuable features, such as IDS, and intrusion detection. It has security features that are in part with the technologies that are available in the market."

More Fortinet FortiGate pros

"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."

"We can utilize our own network rather than paying for a private one."

"I think the tool has the feature to detect and kill ransomware in three seconds."

"The stability of Sangfor NGAF is good."

"It offers application control features."

"The level of support provided to local companies is good. They transform their application control and other settings according to that country."

"It's a very simple to use product."

"The built-in features function as intended, providing exceptional value."

More Sangfor NGAF pros

"All features are useful. We are using premium features such as bandwidth sharing, failover, web filters, SSL controls, antivirus, and VPN. We use these features to the fullest. These features are available in the paid firewall license, not the free one."

"The product is easy to implement."

"The initial setup is very easy."

"It is very easy to deploy and monitor. "

"The web blocking for my clients and the application control are valuable."

"The solution's most valuable feature is the content filtering."

"The product helps small and medium enterprises secure their networks from intrusions. It also has features like DNS blocking."

"NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended."

More Untangle NG Firewall pros

Cons

"Some of the web policy reports could be improved."

"The customization could be improved. Cisco, for example, is much better at this. They need to work to be at least as good as they are."

"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."

"It is quite new for us, and we need to go more in-depth into the monitoring tools. It provides different features that we need to do what we want. So far, it is okay for us. In terms of improvement, in the future, they can provide a faster implementation of features. Some of the features are first available in other solutions. Fortinet sometimes takes a little bit longer than other solutions, such as Check Point, to implement new features."

"There are some cloud-based features that could be much more flexible than they currently are."

"Fortinet needs to overhaul its documentation."

"Some of the filtering is not robust, you can escape it with a VPN. Some of the users bypass some of the filters. It catches some but it also misses some, that area could be improved. It's functioning reasonably but there's room for improvement in that area."

"The captive portal could be improved."

More Fortinet FortiGate cons

"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."

"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."

"The reporting and log management could be improved."

"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."

"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."

"It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters."

"The product must provide more IPS features."

"Sangfor NGAF could improve the policies and default criteria. They could be much better."

More Sangfor NGAF cons

"The product needs to have a better support group for its online support, specifically for its help desk."

"The product must improve its reporting features."

"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."

"Web-filtering policies could be improved."

"The web content filtering needs improvement."

"The biggest challenge that we have with this solution is local support. The local support is a problem in our area."

"We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have."

"The pricing should be reduced because it is expensive."

More Untangle NG Firewall cons

Pricing and Cost Advice

"It's very affordable."

"FortiGate's pricing falls within the mid-range when compared to other leading firewall solutions."

"The price is really low. It's cheap in comparison to the cost of Cisco or CheckPoint, for example."

"Fortinet bundles FortiGate with other products and because of this, the price is a little expensive to some SMB enterprises."

"You need to pay a license for this solution. Our licensing is now done in our subsidiary."

"The price of the license and warranty can be better because it is very expensive."

"It is cost-effective, and provides a good value for your money. The pricing, and license renewal, is very reasonable for us."

"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."

More Fortinet FortiGate pricing and cost advice

"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."

"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."

"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."

"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."

"Sangfor is cheaper than competing vendors."

"-"

"The product is very cost-effective compared to other brands or vendors."

"The price falls in the mid-range, neither exceptionally low nor high."

More Sangfor NGAF pricing and cost advice

"This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in."

"The pricing model is better than with SonicWall."

"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."

"Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc. It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors."

"It is not expensive. It is cheaper than Fortinet."

"The solution is fairly priced."

"The tool's pricing is moderate, and licensing costs are yearly."

"For the home use, it's cheap."

More Untangle NG Firewall pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Firewalls solutions are best for your needs.

See recommendations

831,158 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

22%

Computer Software Company

14%

Comms Service Provider

Manufacturing Company

Computer Software Company

13%

Manufacturing Company

11%

Financial Services Firm

Educational Organization

Computer Software Company

14%

Comms Service Provider

10%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?

When you compare these firewalls you can identify them with different features, advantages, practices and usage a...

See all answers

What is the biggest difference between Sophos XG and FortiGate?

From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...

See all answers

What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?

As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...

See all answers

What do you like most about Sangfor NGAF?

I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...

See all answers

What is your experience regarding pricing and costs for Sangfor NGAF?

The licensing cost is quite high compared to other available firewalls in the market.

See all answers

What needs improvement with Sangfor NGAF?

The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...

See all answers

What do you like most about Untangle NG Firewall?

The product helps small and medium enterprises secure their networks from intrusions. It also has features like DNS b...

See all answers

What is your experience regarding pricing and costs for Untangle NG Firewall?

On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten.

See all answers

What needs improvement with Untangle NG Firewall?

I would recommend getting 2FA with an SSL VPN type of setup without having to go through a lot of hoops. The solution...

See all answers

Comparisons

Sophos XG vs Fortinet FortiGate

Compared 23% of the time

Netgate pfSense vs Fortinet FortiGate

Compared 13% of the time

Cisco Secure Firewall vs Fortinet FortiGate

Compared 11% of the time

WatchGuard Firebox vs Fortinet FortiGate

Compared 5% of the time

Juniper SRX Series Firewall vs Fortinet FortiGate

Compared 2% of the time

More Fortinet FortiGate Competitors

Sophos XG vs Sangfor NGAF

Compared 16% of the time

Netgate pfSense vs Sangfor NGAF

Compared 4% of the time

Palo Alto Networks NG Firewalls vs Sangfor NGAF

Compared 4% of the time

Check Point NGFW vs Sangfor NGAF

Compared 3% of the time

Sophos XGS vs Sangfor NGAF

Compared 3% of the time

More Sangfor NGAF Competitors

OPNsense vs Untangle NG Firewall

Compared 39% of the time

Netgate pfSense vs Untangle NG Firewall

Compared 15% of the time

Sophos XG vs Untangle NG Firewall

Compared 10% of the time

Sophos UTM vs Untangle NG Firewall

Compared 8% of the time

IPFire vs Untangle NG Firewall

Compared 4% of the time

More Untangle NG Firewall Competitors

Product Reports

Buyer's Guide

Fortinet FortiGate

January 2025

Download Fortinet FortiGate product report

Buyer's Guide

Sangfor NGAF

December 2024

Download Sangfor NGAF product report

Buyer's Guide

Untangle NG Firewall

December 2024

Download Untangle NG Firewall product report

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall

Sangfor NGAF Firewall Platform

No data available

Learn More

Fortinet

Sangfor

Untangle

Overview

Fortinet FortiGate offers comprehensive network security and firewall protection across multiple locations. It effectively manages data traffic and secures environments with features like VPN, intrusion prevention, and UTM controls.

Organizations rely on Fortinet FortiGate for its robust integration with advanced security policies, ensuring significant protection for enterprises, cloud environments, and educational sectors. It facilitates network segmentation, application-level security, and authentication management, securing communication within and between locations such as branches and data centers. Its efficient SD-WAN and UTM features enable streamlined data management and enhanced threat protection capabilities. Users appreciate its centralized management, facilitating seamless operations across diverse environments.

What are the key features of Fortinet FortiGate?

VPN Capabilities: Ensure secure remote access for users and seamless site-to-site connections.
Intrusion Prevention System (IPS): Detect and prevent security threats and vulnerabilities.
Advanced Firewall: Offers robust firewalling with application control and web filtering.
SD-WAN: Optimizes application performance and enhances bandwidth management.
SSL VPN: Provides reliable and secure access for remote workers.

What benefits should users expect from Fortinet FortiGate?

High-performance Security: Delivers effective threat mitigation with high availability.
Centralized Management: Simplifies network operations with cloud-based management tools.
Detailed Analytics: Provides comprehensive insights into network activity and security threats.
Load Balancing: Ensures optimal resource distribution and traffic management.

Fortinet FortiGate is crucial in sectors like education, offering robust networks for secure data flow between campuses and facilitating remote learning. In enterprise environments, it allows efficient management of application traffic and security across multiple branches, while in the cloud, it seamlessly integrates with diverse platforms to enhance security infrastructure.

Sangfor Next Generation Firewall (also known as NGAF) is a converged security solution providing protection against advanced threat, malware, viruses, ransomware and web-based attacks using integrated security features like firewall, IPS, anti-virus, anti-malware, APT, URL filtering, Cloud Sandbox, and WAF. As the world's first AI-enabled and fully integrated Next Generation Firewall & Web Application Firewall (WAF), NGAF offering the security visibility, real-time detection and response, simplified operation and maintenance and high-performance application layer security needed to operate an enterprise network in total security. Tested and proven to provide cutting-edge network security by ICSA Labs and endorsed by Gartner Inc., NGAF harnesses the power of Sangfor’s Neural-X threat intelligence and analytics platform and Engine Zero’s innovative malware detection to provide next-generation protection for today’s enterprise.

Untangle NG Firewall is an open-source firewall and gateway security platform that helps keep networks safe while accessing the internet. It offers a free core firewall platform with paid add-ons, and a cloud-based management platform with a variety of deployment options for smaller teams. The solution also has a cloud-based management console for remote management that can either be deployed on premises or as SaaS, and virtualized or cloud-based. It also has flexible deployment options, including third-party hardware, as a virtual machine, or as a turnkey appliance. Untangle NG Firewall is ideal for small IT teams with limited budgets.

Untangle NG Firewall Features

Untangle NG Firewall has many valuable key features. Some of the most useful ones include:

Intrusion protection
Threat prevention
Virus blocker
Virus scanner
App control
SSL inspection
Bandwidth control
Reporting
Logs
VPN
Web filter
IDS/IPS
Access controls
Location control
Proxy
Active Directory/LDAP connections

Untangle NG Firewall Benefits

There are many benefits to implementing Untangle NG Firewall. Some of the biggest advantages the solution offers include:

Simplified network security: Untangle NG Firewall has a single, modular, software platform which simplifies security for all networks and ensures every device is adequately protected.

Visibility: The solution provides a browser-based, responsive, and intuitive interface enabling users to gain visibility quickly into the traffic on the network.

Deep analysis and insights: With the solution, users can see a network’s status at a glance on the dashboard, ensure compliance with full event logs, and get notifications of network anomalies or unusual user behavior with alert rules. In addition, users can gain insights in real time from database-driven reports.

Next-generation filtering: Untangle NG Firewall makes it easy to manage every rogue application, encrypted web request, malware distribution point, and drive-by malvertising attempt.

Connectivity and performance: The solution helps your organization maintain visibility and control over remote workers, branch offices, and guest Wi-Fi to keep users connected and data safe regardless of location or level of access.

Policy creation: Users can create policies by user, group, device, and time in order to control access.

Additional apps: Untangle NG Firewall offers additional apps, allowing organizations to create complete configuration backups to protect against network disruptions.

Reviews from Real Users

Untangle NG Firewall is a solution that stands out when compared to many of its competitors. Some of its major advantages are that it is easy to use, has good features, including VPN, reporting, alerting, and filtering, and can be installed on existing hardware.

“It is very easy to use. The user interface is very straightforward. It may not be as fancy as some of the ones I've seen, but it's very straightforward. It's very easy to find what you need, and it's very easy to get things done,” says Josh E., CEO at DragonTech IT Services, Inc.

Barry A., Owner at ThinkEzIT, says, “It has good VPN features, helpful reporting and alerting, built-in content filtering, and excellent support.”

PeerSpot user Victor O., Director at Kisii County Government, explains, “What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration.”

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya

The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.

North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,

Buyer's Guide

Sangfor NGAF vs. Untangle NG Firewall

January 2025

Free Report: Sangfor NGAF vs. Untangle NG Firewall

Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: January 2025.

DOWNLOAD NOW

831,158 professionals have used our research since 2012.

See our Sangfor NGAF vs. Untangle NG Firewall report.

See our list of best Firewalls vendors.

We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.