No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor NGAF vs Untangle NG Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
591
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Sangfor NGAF
Ranking in Firewalls
22nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Untangle NG Firewall
Ranking in Firewalls
31st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
26
Ranking in other categories
Unified Threat Management (UTM) (9th)
 

Mindshare comparison

As of May 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 16.0%, down from 21.6% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. The mindshare of Untangle NG Firewall is 1.0%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Fortinet FortiGate16.0%
Sangfor NGAF1.1%
Untangle NG Firewall1.0%
Other81.9%
Firewalls
 

Featured Reviews

Abhinandan Yadav - PeerSpot reviewer
Network Security Engineer at a consultancy with 51-200 employees
Unified security and sd-wan have improved uptime and cut wan costs for multi-site branches
Users report stability issues in certain versions, which requires regular updates. Real-world attacks have also highlighted the need for urgent patching of vulnerabilities.Fortinet FortiGate, while a powerful and feature-rich web firewall, could improve in areas like firmware stability, documentation, and ease of use. The learning curve can be steep for some users. For beginners, support quality can vary, and frequent updates with occasional vulnerabilities call for careful patch management. However, once Fortinet FortiGate is configured, it remains highly reliable and efficient. Customer support needs improvement, as I find it very slow, with reports from other users reflecting that customer support is inadequate.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Gary-Downey - PeerSpot reviewer
Director of Information Technology at a consultancy with 11-50 employees
Has provided built-in VPN tools and reporting features that streamline remote access and monitoring tasks
We do an outside-sourced threat prevention regarding the Threat Prevention features. I haven't run into areas that could be improved or cons versus pros for Untangle NG Firewall. I haven't done anything too advanced when it comes to the filtering, so I'm not sure what can be improved or added. I haven't dug into the advanced features, but I think some of the advanced capabilities are probably where it lacks a little bit, with the filtering and firewall rules. These areas could be improved to make it a nine out of 10 or a 10 out of 10 for overall rating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Integrated management would probably be the most valuable feature."
"The solution is very user-friendly."
"Their reliability and their policy of pre-shipping replacements when a unit has failed."
"The firewall and VPN features are the most valuable in protecting our customers' networks."
"Fortinet FortiGate IPS is a very good firewall; we don't have any complaints, it is doing its job correctly."
"We have used many other solutions, such as Check Point and Cisco Firepower, and I have found Fortinet FortiGate is much easier to configure."
"Onboarded three times more customers without adding firewall hardware, cut network expansion capital expenses by roughly 40 percent through VDOM consolidation, reduced vulnerability remediation costs by about 60 percent thanks to automated FortiGuard updates, shortened policy-deployment time by over 50 percent, freeing up 10 plus hours of engineering effort weekly, and achieved payback on the initial FortiGate investment within 9 months via increased tenancy revenue and lower OPEX."
"Finally there is a UTM Fortinet. It has given me complete oversight of my network in a centralized fashion, so I know what is going on at all times."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"In terms of the most valuable features, the IPS report is quick and updated, and performance is also valuable."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"SSL VPN is the best feature."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."
"The stability of Sangfor NGAF is good."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"The web blocking for my clients and the application control are valuable."
"The ease of use and the built-in and integrated features, including the apps that include OpenVPN, IPsec, and WireGuard VPN, are all built straight into Untangle NG Firewall."
"We find the web filter very valuable."
"Since it can be put on any box, the scalability is fantastic."
"Easy to set up and easy to integrate."
"It is not attached to an appliance, meaning if you get a good PC/server, then you can already run a firewall."
"The majority of our clients are very small businesses, and Untangle devices have been fantastic for these small clients. We've basically standardized our stack to just simply use Untangle. We include the hardware and the service option, which makes it very easy and affordable for us to just simply push that into the monthly per-user costing that we provide as a managed services provider. It's really a no-brainer. They're easy to use, and they're easy to set up and configure. Support is generally good about resolving any issues that we have. We haven't had any real complaints."
"The solution's most valuable feature is the content filtering."
 

Cons

"Improvement is needed in the Web Filter quotas to restrict users with allocated quotas."
"The interface and product support could use improvement."
"I'd like to see an improvement in the Bandwidth Management and Traffic limit control. Also, the licenses are expensive, turning off some users."
"FortiGate's reporting features could provide a better picture of what is happening in the box."
"The renewal price and the availability could be improved."
"I'm not sure if it's something that they already have or are developing something, however, we need some dedicated features for container security."
"Its performance can be better. We have had performance issues in the past, but we sometimes tend to find that it is more related to what we do in our network than anything else."
"The big license options have web filtering, IDS, and a lot of other things, but it's not like they are all good."
"It has an issue with the Sangfor Cloud Platform rather than the firewall. When we run a virtual machine, the window tabs display Chinese characters."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"It would be ideal if the solution offered SD-WAN capabilities."
"Sangfor NGAF could improve the policies and default criteria. They could be much better."
"The cost of licensing is very high compared to other firewalls available here."
"The product needs to have a better support group for its online support, specifically for its help desk."
"The web content filtering needs improvement."
"The hardware can be improved."
"We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have."
"The common center facility that Untangle provides should be available on-premises."
"The pricing should be reduced because it is expensive."
"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."
"It does have multi-factor authentication in some areas, but I would love to see a more widely implemented version of that on the devices themselves."
 

Pricing and Cost Advice

"The pricing is flexible."
"Pricing for Fortinet FortiGate SWG is more suitable for enterprise or large-sized organizations because they are the ones who can afford it versus small and medium-sized organizations."
"It's a year based license."
"I would rate the pricing a seven out of ten"
"The value is the capability of having multiple services with one unique license, not having the limitation per user licensing schema, like other vendors."
"The pricing is justified. It's a little pricey, but what you pay for is what you get."
"The tool is a bit pricey for small businesses, but it is still bearable in terms of cost."
"It is more expensive than Sophos. Fortinet is overall more expensive than Sophos. The small range of Fortinet, such as 60F and 80F, is more expensive than the small range of Sophos. Sophos is cheaper. In addition, if you jump from 80F Series to 100F Series, the price doubles."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"The product is very cost-effective compared to other brands or vendors."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"For four to five physical appliances for a licensed firewall, it costs approximately $4,000."
"The price could be more competitive."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
"This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in."
"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."
"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."
"The pricing model is better than with SonicWall."
"The solution is fairly priced."
"The tool's pricing is moderate, and licensing costs are yearly."
"The setup cost is about $2000 to $3000 per year."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
896,387 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Comms Service Provider
10%
Manufacturing Company
9%
Financial Services Firm
7%
Manufacturing Company
11%
Comms Service Provider
10%
Financial Services Firm
10%
Computer Software Company
7%
Comms Service Provider
15%
Manufacturing Company
9%
Construction Company
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business367
Midsize Enterprise135
Large Enterprise193
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise1
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deploye...
What needs improvement with Untangle NG Firewall?
I would appreciate improvements to the ad blocker and SSL Inspector of Untangle NG Firewall.
What is your primary use case for Untangle NG Firewall?
My usual use cases for Untangle NG Firewall are just like a firewall and router. The main purpose is for firewall fun...
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,
Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: April 2026.
896,387 professionals have used our research since 2012.