Try our new research platform with insights from 80,000+ expert users

Sangfor NGAF vs Untangle NG Firewall comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 5, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiGate
Sponsored
Ranking in Firewalls
2nd
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
318
Ranking in other categories
Software Defined WAN (SD-WAN) Solutions (1st), WAN Edge (1st)
Sangfor NGAF
Ranking in Firewalls
21st
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
36
Ranking in other categories
No ranking in other categories
Untangle NG Firewall
Ranking in Firewalls
27th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
24
Ranking in other categories
Unified Threat Management (UTM) (8th)
 

Mindshare comparison

As of March 2025, in the Firewalls category, the mindshare of Fortinet FortiGate is 20.8%, up from 17.8% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 0.8% compared to the previous year. The mindshare of Untangle NG Firewall is 1.1%, down from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls
 

Featured Reviews

EhabAli - PeerSpot reviewer
Efficient, user-friendly, and affordable
In the past, NSS Labs was utilized to test files and verify the numbers and datasheets. It would be beneficial to have an organization or testing lab that can verify the numbers in our datasheets since changes are frequently made, which can be inconvenient for review. For instance, when comparing different competitors such as Forcepoint, Palo Alto, and Check Point, the throughput or numbers in the datasheet may be lower than the actual numbers. Conversely, Fortinet typically reports very high numbers, but they cannot be replicated in the real world. Therefore, it would be advantageous for them to partner with a neutral testing organization such as NSS Labs to validate these numbers, thus providing more credibility and comfort to everyone regarding the accuracy of the datasheets. For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial. This tool shows a lot of promise and is very good. Making it free would help many companies deliver their products in a more efficient and integrated way. It would also be more valuable to include the tool with the firewall package or license instead of having to pay extra for it. Paying extra puts more pressure on small companies to deliver the firewall and complete the configuration, especially if they have hundreds or thousands of policies. It's very painful to move through these policies line by line. The stability has room for improvement. When it comes to Secure SD-WAN, everything is fine. They are going the right way. SD-WAN is very promising. They can provide the SD-WAN solution separately, but they will not take this approach because even the smallest firewall can support the features, so there is no need to have a separate service or appliance. They are following the right steps, and there is nothing to be improved. Feature-wise, I'm really satisfied with the new release, and the features they have added. For now, it's fine.
Zaid Farooqui - PeerSpot reviewer
Enhanced threat detection with integrated security features and good support
We are using application firewalling, WAF, and SD-WAN. The capabilities are mostly within the box. For example, you will get web application firewall WAF as part and parcel of this. SD-WAN is also bundled. It integrates with their SIEM and SOAR solutions very nicely. Lastly, the pricing point is very cost-efficient as well.
MatthewSmith3 - PeerSpot reviewer
Thorough with all-in-one security functions and good affordability
The all-in-one gateway security functions and the ability to install it on generic equipment stand out. The centralized management console is great. I can template my installations and configurations. My ability to monetize it as a gateway security appliance to offer enhanced service offerings allows me to increase our price point. I provide it as a managed device to many of our clients. I take on the initial costs and charge them a monthly fee. They have threat detection.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are the enterprise modeling and the simple interface."
"The most valuable features of Fortinet FortiGate are it is one of the most mature firewalls in the UTM bundle."
"Unified Threat Management (UTM) features."
"Fortinet FortiGate is a scalable solution."
"The technical support is great."
"The integration with Active Directory is one of the good features. Most of the customers are now looking for the Single Sign-on feature. So, being able to integrate Active Directory with the firewall is useful. It is also easy."
"We use the FortiGate Sandbox to detect zero-day vulnerabilities, such as anomalies or malware, that are unknown and have not yet been discovered."
"The most valuable features of Fortinet FortiGate are remote access, web filtering, and IPS."
"The stability of Sangfor NGAF is good."
"It's a very simple to use product."
"The built-in features function as intended, providing exceptional value."
"It is a stable solution."
"It offers application control features."
"In four steps one can configure the entire firewall."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
"So far, the performance and reliability of the product have supported our company's critical network traffic."
"Easy to set up and easy to integrate."
"The product’s most valuable features are endpoint protection management, load balancing, and connectivity with Active Directory."
"NG Firewalls allow us to permit or deny applications we don't want to run. We also use content filtering, SSL inspection, and all the other things we run on the firewall to keep our clients protected and ensure they're not going where they shouldn't. It's a great firewall that works as intended."
"Since it can be put on any box, the scalability is fantastic."
"What I like about this product, which is the reason that we continue to use it, is that you can install the software version on your own hardware. In case there is a problem with the hardware, we can just install the firewall in another machine and restore the configuration."
"All features are useful. We are using premium features such as bandwidth sharing, failover, web filters, SSL controls, antivirus, and VPN. We use these features to the fullest. These features are available in the paid firewall license, not the free one."
"None of my clients has had a ransom or breach using Untangle."
"The product is easy to implement."
 

Cons

"Fortinet FortiGate can improve the integration with Active Directory. Additionally, I would like to have a Cloud Controller, such as they do in the Cisco Meraki solution."
"I would like to see improvements with the antivirus and IPS as they are not working properly all the time."
"I would like to see improvements in the support from Fortinet. Here in the Philippines, whenever we have problems with a Fortinet product, we mostly ask for support from distributors and resellers and not directly from Fortinet."
"This product needs to have an analysis feature, rather than having the analysis done through the integration of a different product."
"It would be nice if backups could more easily migrate between different models."
"We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine."
"Fortinet FortiGate could improve by having better visibility. Palo Alto has better visibility."
"FortiGate is really good. We have been using it for quite some time. Initially, when we started off, we had around 70 plus devices of FortiGate, but then Check Point and Palo Alto took over the place. From the product perspective, there are no issues, but from the account perspective, we have had issues. Fortinet's presence in our company is very less. I don't see any Fortinet account managers talking to us, and that presence has diluted in the last two and a half or three years. We have close to 1,500 firewalls. Out of these, 60% of firewalls are from Palo Alto, and a few firewalls are from Check Point. FortiGate firewalls are very less now. It is not because of the product; it is because of the relationship. I don't think they had a good relationship with us, and there was some kind of disconnect for a very long time. The relationship between their accounts team and my leadership team seems to be the reason for phasing out FortiGate."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"I feel Sangfor should follow the hierarchy and close deals via resellers instead of closing it all with their own team."
"The web interface needs to be improved, making it more user-friendly."
"The cost of licensing is very high compared to other firewalls available here."
"Scalability for any network device is not very easy in terms of vertical scalability."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."
"The hardware can be improved."
"The web content filtering needs improvement."
"For the web filter, I think they can do better especially on the free model."
"The product needs to improve its mobile application."
"On their low-end appliance, they could have more memory and the largest storage space. The low-end appliance comes with a too-small hard drive, and it could use a little extra room. It only comes with about 4 gigs or 8 gigs of memory, and the hardware space is only 40 gigs, which is really small."
"There is room for improvement in the logs. Like with Cisco, I can do almost everything and know almost anything about what's running. Untangle works very much out of the box. It's very user-friendly, but it's not engineer-friendly. So, it's good for a home user. For something fairly easy, but at the same time, with good technology to have at home, because at home, I'm not a millionaire or anything like that. So it's not like I'm worried to get hacked. I didn't want something like a Cisco firewall; it would be a bit overkill to have at home. So that's why I went for Untangle. But it lacks a few features. It's just a tick-box kind of thing. So they have apps and turn on and off the apps. The VPN's configuration is all very ticked. They have a few custom configurations, but it's not that much."
"The solution's licensing count could be improved."
"The pricing should be reduced because it is expensive."
 

Pricing and Cost Advice

"Pricing for this product is comparatively lower than other products. It's an affordable solution, but when expanding the number of users, they'll ask you to replace the model, so that's an added cost."
"There is a subscription-based model to use Fortinet FortiGate. We pay annually for the solution along with the support. If you want to have all the updates, and security patches you will need to renew your support."
"Compared to other firewall products, it's a little cheaper in terms of pricing."
"It has been two years. I don't remember the actual price, but it was affordable. We buy the boxes and then use the license for three years."
"The price is fine."
"I think that the pricing is fair."
"By default, they give SD-WAN along with the firewall. They don't have separate licensing for the SD-WAN functionality. However, they have security licenses that are sold separately on a subscription basis. Customers can consume these security features to protect their users from internet traffic."
"These boxes are not that expensive compared to what they can do, their functionality, and the reporting you receive. Fortinet licensing is straightforward and less confusing compared to Cisco."
"-"
"For over 2000 users, the cost is around 5000 to 6000 USD. If you want a web application firewall, you have to purchase an additional license for it."
"It is one of the cheapest tools in the market."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"The price could be more competitive."
"The product is very cost-effective compared to other brands or vendors."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"Price-wise, I would not consider Sangfor NGAF to be a cheap product. It is an expensive firewall solution, though not as expensive as something like Palo Alto, which is costly. However, the higher price point is justifiable given the feature set the tool provides that other firewalls may not offer in a single dedicated appliance."
"It is the most cost-effective to use."
"The tool's pricing is moderate, and licensing costs are yearly."
"This is not an expensive product. It is affordable and there are different packages available depending on the features that you need, or the sector that you are in."
"For the home use, it's cheap."
"The pricing model is better than with SonicWall."
"We pay $350 USD per year for the solution. There are no additional costs. As long as you're not using a physical appliance, that's all you need."
"It is not expensive. It is cheaper than Fortinet."
"Usually, it's about $350 a year for 12 users, and it's about $600 for 50 users. It's very reasonable as compared to the others. One of the reasons is that they're all open-source. You just buy their appliance and put it in until it dies. Because it's run under open platforms, mine seems to always work on older equipment. I've taken old equipment and put a new hard disk in it. I have taken about nine-year-old computers and put their operating system on them, and ran them like a champ. The only thing that changed was the hard drive because I don't trust a hard drive that's more than three to four years old."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
22%
Computer Software Company
14%
Comms Service Provider
7%
Manufacturing Company
6%
Computer Software Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Educational Organization
7%
Computer Software Company
14%
Comms Service Provider
11%
Government
7%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Which is the better NGFW: Fortinet Fortigate or Cisco Firepower?
When you compare these firewalls you can identify them with different features, advantages, practices and usage a...
What is the biggest difference between Sophos XG and FortiGate?
From my experience regarding both the Sophos and FortiGate firewalls, I personally would rather use FortiGate. I know...
What are the biggest technical differences between Sophos UTM and Fortinet FortiGate?
As a solution, Sophos UTM offers a lot of functionality, it scales well, and the stability and performance are quite ...
What do you like most about Sangfor NGAF?
I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I comp...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardwa...
What do you like most about Untangle NG Firewall?
The product helps small and medium enterprises secure their networks from intrusions. It also has features like DNS b...
What needs improvement with Untangle NG Firewall?
The user interface, training, and general product innovation need improvement. Enhancements could also be made to the...
 

Also Known As

FortiGate 60b, FortiGate 60c, FortiGate 80c, FortiGate 50b, FortiGate 200b, FortiGate 110c, FortiGate, Fortinet Firewall
Sangfor NGAF Firewall Platform
No data available
 

Overview

 

Sample Customers

Amazon Web Services, Microsoft, IBM, Cisco, Dell, HP, Oracle, Verizon, AT&T, T-Mobile, Sprint, Vodafone, Orange, BT Group, Telstra, Deutsche Telekom, Comcast, Time Warner Cable, CenturyLink, NTT Communications, Tata Communications, SoftBank, China Mobile, Singtel, Telus, Rogers Communications, Bell Canada, Telkom Indonesia, Telkom South Africa, Telmex, Telia Company, Telkom Kenya
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
North American Stamping Group, Cerebral Palsy of North Jersey (CPNJ), Brown County Schools, IN, City of Bridgeton, MO, Lancaster County, SC, Vision Charter School, Clay County Sheriff’s Department, NC, Breakwater School, Boys & Girls Club of Manchester, NH, Admiral Farragut Academy, Flow Companies, No Ordinary Hotel, KECdesign,
Find out what your peers are saying about Sangfor NGAF vs. Untangle NG Firewall and other solutions. Updated: March 2025.
842,296 professionals have used our research since 2012.