Try our new research platform with insights from 80,000+ expert users

Sangfor NGAF vs Untangle NG Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
1st
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
581
Ranking in other categories
Secure Web Gateways (SWG) (2nd), Intrusion Detection and Prevention Software (IDPS) (1st), Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st), ZTNA (1st), Unified Threat Management (UTM) (1st)
Sangfor NGAF
Ranking in Firewalls
23rd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
Untangle NG Firewall
Ranking in Firewalls
30th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
Unified Threat Management (UTM) (11th)
 

Mindshare comparison

As of February 2026, in the Firewalls category, the mindshare of Fortinet FortiGate is 18.7%, down from 20.9% compared to the previous year. The mindshare of Sangfor NGAF is 1.1%, down from 1.2% compared to the previous year. The mindshare of Untangle NG Firewall is 0.9%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Market Share Distribution
ProductMarket Share (%)
Fortinet FortiGate18.7%
Sangfor NGAF1.1%
Untangle NG Firewall0.9%
Other79.3%
Firewalls
 

Featured Reviews

Vasu Gala - PeerSpot reviewer
Manager, Information Technology Operation/Presales at TechMonarch
A stable solution with an intuitive interface and quick customer service
I have been working with Fortinet FortiGate, WatchGuard, Sophos, and SonicWall. I'm not as comfortable with SonicWall because of their UI and limitations. I prefer Fortinet above all other options. When it comes to configuration, I am confident in my ability to handle various tasks, including creating policies such as firewall rules, web policies, and application policies. Additionally, I can configure VPNs and implement load balancing, among other tasks. Overall, I feel much more comfortable working with Fortinet. Fortinet has made significant improvements by integrating AI with firewalls for threat analysis and prevention. In the past 2-3 years, they have launched FortiSASE and SIEM, and they also provide SOC services. Both Palo Alto and Fortinet FortiGate are excellent. While Fortinet FortiGate comes at higher prices, the functionality and support justify the cost. They promptly resolve firmware issues and inform all support providers about configuration changes.
Zaid Farooqui - PeerSpot reviewer
CIO at Indus Motor Company
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
Gary-Downey - PeerSpot reviewer
Director of Information Technology at a consultancy with 11-50 employees
Has provided built-in VPN tools and reporting features that streamline remote access and monitoring tasks
We do an outside-sourced threat prevention regarding the Threat Prevention features. I haven't run into areas that could be improved or cons versus pros for Untangle NG Firewall. I haven't done anything too advanced when it comes to the filtering, so I'm not sure what can be improved or added. I haven't dug into the advanced features, but I think some of the advanced capabilities are probably where it lacks a little bit, with the filtering and firewall rules. These areas could be improved to make it a nine out of 10 or a 10 out of 10 for overall rating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main reason why I purchased the particular unit was that it had good reviews and what other people were saying as far as its completeness and its leading capabilities in terms of endpoint security was very good."
"There are great templates, so you don't have to customize them if you don't want to. You do have the option to custom create some folders and some reports, however, with what is there, you don't really need to go through extra effort, as they already give you a lot of predefined views of reports and so forth."
"The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good."
"The initial setup is straightforward."
"The main benefits that Fortinet FortiGate brings to customers include that if you're going for a single fabric with core switches, access switches, and APs, compared to legacy Cisco or Aruba, the Fortinet FortiGate does not require a controller for the access points."
"My clients appreciate it for its features. It is easy to install and manage, and it offers all-around protection, including web filtering, content filtering, IPS, and IDS."
"The VPN is the most valuable feature."
"The reliability of Fortinet FortiGate is through the roof, we're experiencing 99.999% availability consistently."
"It offers application control features."
"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
"We can utilize our own network rather than paying for a private one."
"The tool's performance is good."
"The top functionality is the reporting feature."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."
"In four steps one can configure the entire firewall."
"The product is easy to implement."
"None of my clients has had a ransom or breach using Untangle."
"The majority of our clients are very small businesses, and Untangle devices have been fantastic for these small clients. We've basically standardized our stack to just simply use Untangle. We include the hardware and the service option, which makes it very easy and affordable for us to just simply push that into the monthly per-user costing that we provide as a managed services provider. It's really a no-brainer. They're easy to use, and they're easy to set up and configure. Support is generally good about resolving any issues that we have. We haven't had any real complaints."
"The solution's most valuable feature is the content filtering."
"The interface is very good."
"The most valuable features are IPS, MAPI, NAT, and VPN."
"NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended."
"Web Filter is effective, Web Cache offers bandwidth savings, and the VPN setup is easy."
 

Cons

"The logging details need to be improved."
"The license renewal process, annual renewal price, and the web application firewall features should be improved."
"FortiLink is the interface on the firewall that allows you to extend switch management across all of your switches in the network. The problem with it is that you can't use multiple interfaces unless you set them up in a lag. Only then you can run them. So, it forces you to use a core type of switch to propagate that management out to the rest of the switches, and then it is running the case at 200. It leaves you with 18 ports on the firewall because it is also a layer-three router that could also be used as a switch, but as soon as you do that, you can't really use them. They could do a little bit more clean up in the way the stacking interface works. Some use cases and the documentation on the FortiLink checking interface are a little outdated. I can find stuff on version 5 or more, but it is hard to find information on some of the newer firmware. The biggest thing I would like to see is some improvement in the switch management feature. I would like to be able to relegate some of the ports, which are on the firewall itself, to act as a switch to take advantage of those ports. Some of these firewalls have clarity ports on them. If I can use those, it would mean that I need to buy two less switches, which saves time. I get why they don't, but I would still like to see it because it would save a little bit of space in the server rack."
"The scalability could be better."
"FortiGate can improve its token system, as it requires a purchase before use."
"I would like to be able to generate reports about the protections that we have. I would like a report feature."
"I believe there is room for improvement in machine learning and AI in Fortinet FortiGate. I would like to see more automation regarding AI and machine learning in Fortinet FortiGate."
"One area for improvement is the IPS engine."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"The GUI needs to be improved, lacks logic in some areas."
"Our experience with its customer support was quite challenging."
"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"We have a minor issue when assigning IP addresses in the ARP tables. You should be able to go into the ARP tables, look at the IP address and say, "Nope, they need to be on this side on this IP address." The ability to set a DHP reservation from the ARP tables would be great. It's no big deal, but it would be nice to have."
"The product needs to have a better support group for its online support, specifically for its help desk."
"We seek the availability of the hardware in our region. The hardware-based firewall from Untangle is currently not available in our region. It should have threat protection on a real-time basis. This feature, available in Check Point and Sandstorm kind of scenario, is currently missing in Untangle NG Firewall."
"It would be much easier if there was a mobile app."
"There is room for improvement in the logs. Like with Cisco, I can do almost everything and know almost anything about what's running. Untangle works very much out of the box. It's very user-friendly, but it's not engineer-friendly. So, it's good for a home user. For something fairly easy, but at the same time, with good technology to have at home, because at home, I'm not a millionaire or anything like that. So it's not like I'm worried to get hacked. I didn't want something like a Cisco firewall; it would be a bit overkill to have at home. So that's why I went for Untangle. But it lacks a few features. It's just a tick-box kind of thing. So they have apps and turn on and off the apps. The VPN's configuration is all very ticked. They have a few custom configurations, but it's not that much."
"The pricing should be reduced because it is expensive."
"The product needs to improve its mobile application."
"The product should improve reporting."
 

Pricing and Cost Advice

"The pricing or licensing of Fortinet FortiGate is quite effective as it offers different bundles that aggregate most required features, while also allowing clients the option to select specific components alone."
"The setup cost was good. The Egyptian pound is declining, and upgrading Fortinet FortiGate yearly costs about $2000 USD, which equals one hundred Egyptian pounds. I maintain a business relationship with the vendor and receive support from them."
"​We saved a bundle by not needing all the past appliances from an NGFW.​"
"The product pricing is reasonable."
"The price of FortiGate is comparable to that of most other firewall solutions and is more affordable than Cisco."
"The price of Fortinet FortiGate is the lowest in the market."
"The pricing is based on a licensing model for each IPS in your environment."
"My experience with the pricing, setup cost, and licensing for Fortinet FortiGate is quite good. I don't have a public site, such as in Azure, where I can see the pricing. I always have to go through the distributor, and that could take some time to get the real price for each appliance."
"I rate the product price as one on a scale of one to ten, where one is low price and ten is high price."
"It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included."
"Sangfor is cheaper than competing vendors."
"The pricing is reasonable."
"In my opinion, the price of the tool is good in the Pakistani market. We can easily get discounts if needed."
"The price could be more competitive."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"The price is unmatcheable."
"This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in."
"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing an eight out of ten."
"It is the most cost-effective to use."
"Untangle is open-source software. So, you can get it for free. That has been a benefit, especially for the residential users because it is free. The license costs start at $25 a month for some additional features, including higher tiers of security intrusion prevention. The free version comes with intrusion detection, and then the license version has intrusion prevention. It also has some additional things for active directory connectors, etc. It starts at $25 a month to cover 12 devices. Then it goes up from $25 to $50 a month for 12 to 25 devices. That's where it really doesn't scale out per site. If you have a site that has more than 50 devices on it, then Untangle quickly becomes cost prohibitive in comparison to several other competitors."
"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."
"It is not expensive. The best part is that it is based on the pay-per-use kind of scenario. An increase or decrease in the number of people doesn't make any difference. We are really happy about using this particular scenario."
"For the home use, it's cheap."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
882,160 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Manufacturing Company
11%
Financial Services Firm
8%
Comms Service Provider
8%
Computer Software Company
8%
Comms Service Provider
16%
Manufacturing Company
9%
Computer Software Company
7%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business357
Midsize Enterprise133
Large Enterprise189
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
By reviewers
Company SizeCount
Small Business25
Midsize Enterprise1
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What is your experience regarding pricing and costs for Untangle NG Firewall?
Based on my experience, the pricing for Untangle NG Firewall is pretty comparable. I haven't bought a new one in a wh...
What needs improvement with Untangle NG Firewall?
We do an outside-sourced threat prevention regarding the Threat Prevention features. I haven't run into areas that co...
What is your primary use case for Untangle NG Firewall?
I just get on and monitor the interfaces, the networking, and the basics of it for this product.
 

Also Known As

Fortinet FortiGate Next-Generation Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,
Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: February 2026.
882,160 professionals have used our research since 2012.