Sangfor NGAF Reviews

I use Sangfor NGAF since it is a good firewall product with good threat protection. The product is very useful for IPSec VPNs and SD-WAN VPNs.

The most valuable features of the solution stem from the security center or SOC-related feature, which is very good since it detects threats in real time and quickly. The tool also reacts on a timely basis.

The setup phase is quite complex. The setup process could be easier.

I have been using Sangfor NGAF for six months.

It is a stable solution.

It is a very scalable solution. I can't say that the tool is as scalable as Fortinet FortiGate's latest version.

There are around 3,000 users of the tool in my company.

The solution's technical support was very good, cooperative, and responsive.

I am satisfied with the support team.

The product's initial setup phase was not as straightforward as Fortinet FortiGate. As a first-time user, if you get to see the setup phase for the first time, you can do it easily the second time. The setup phase is not very hard. The tool is very easy to use.

During the deployment, the first step is to upgrade and activate the license of the product and configure interfaces, zones, objects, and policies, along with NAC and DMZ policies. The tool also helps with static routing to ensure connectivity between the head office and stores. The aforementioned steps were taken to make the product operational.

Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company.

Firewall products function with licenses. Without licenses, the tool's main features, like intrusion prevention, web access firewall, DNS, or IDS, will not be activated if you don't buy the license.

Speaking about how Sangfor NGAF improved our company's network performance, I would say that I had installed the product at our head office, where we use it for internal policies and DMZ zones. It is a very useful firewall. Previously, we used Fortinet products, but now, Sangfor NGAF is fully operational in our network, and we use it to block ISPs and the internet and manage rules or traffic, like DMZ to LAN. Other VPNs like IPSec VPNs work in Sangfor, and it serves as a very good feature in the tool. I even loved the SD-WAN VPN feature of the tool.

The application control feature helps manage our company's network traffic in a very good manner. I have been using the tool for the last six months, and I am quite satisfied with the product's performance.

Speaking about the intrusion prevention system of the tool, I have some logs that can state the source of the attacks and which have been blocked in a timely manner by the product. The tool's threat management capabilities and ability to deal with DDoS attacks are good and very useful.

The deployment affected our company's team's workload since the team was available at the premises of the organization during the deployment phase.

I recommend the product to those who want to buy it to protect and manage their networks with the product. It is quite a useful product.

I can't speak much about the benefits of the tool since everyone uses the product for their own needs. In terms of benefits, Sangfor NGAF's price is better than Fortinet FortiGate.

I rate the tool an eight and a half out of ten.

Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware. This is the primary reason we purchased this solution, and we are currently negotiating to upgrade our appliances to volume M5200 Series. Additionally, Sangfor NGAF provides a web application for financial software.

We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware. Our desktop PCs have essential data, like word files and excel documents. 

We previously had a ransomware attack on our file server, and Sangfor NGAF protected us by alerting and disconnecting the server from the network.

The firewall system needs gradual improvements because there are more threats and challenges in the world every day. Sangfor NGAF has a comprehensive database for ransomware and viruses, but when we compare it to other solutions, the price could be more competitive.

Since we have a very comprehensive solution with Sangfor NGAF, it is hard to identify any additional features we want to add. It already provides good features for ransomware attacks and data recovery. In the past, we wanted encrypted data for a virus to be recoverable, and Sangfor offered the solution.

We have been using Sangfor NGAF for four years. We use it for overall IT infrastructure protection and are currently using version 1 of Model M5100.

We currently deploy a hybrid infrastructure of cloud and on-premises. We use the solution for our accounting and financial software, websites, internet blocking, and other features. Some clients are on the cloud, and others are on-premises. We also have a Sangfor solution that filters the in and out traffic.

The solution is relatively stable. Interestingly, we discontinued the updates and software licenses about a year ago, and the appliance and solutions are still working. In addition, there is no limitation on the license, so services won't stop if it expires. You can also update the license at any time for a partial cost.

This solution is scalable. We can add many features and lengths and expand according to our needs.

The IT specialists and engineers in my organization use this solution. Our whole organization is under the protection of Sangfor NGAF. The solution has footprints in India and Europe and many government agencies use Sangfor NGAF in Pakistan.

For deployment, we needed three people who were all IT specialists, and only one of them was from Sangfor. As a result, we deployed it with very few resources, and there were no recurring charges. Also, most people are very well-versed in technology and can multitask.

The technical support team was very helpful, provided support, and guided us during our initial deployment. We were good to go in 15 to 20 minutes.

We previously used Sophos and pfSense, an open-source firewall. 

The initial setup was very straightforward. The solution is out of the box, and the software and appliance can be quickly installed. It has a very nice AI feature, and we only needed to implement parameters and define some policies. The deployment took 15 to 20 minutes because we had to get familiar with the new system. 

We defined WAN and LAN networks for our implementation strategy and then defined the servers. Next, we identified the modes and decided the desktop would be the best. There were other considerations but it has been four years, so it is hard to remember all of them.

We completed our deployment in-house.

We have seen a return on investment. The systems are protected, and their operating systems are readily available. We are protected from ransomware attacks and the loss of data. This solution protects us, and it has benefits.

On a scale of one to ten, with one being the cheapest, I rate the price a six out of ten. There are no hidden or additional costs other than what we were provided. Therefore, we are happy with our initial decisions.

We evaluated other options and completed some financial comparisons but the IT specialists advised that Sangfor NGAF worked well. 

I rate this product an eight out of ten because we don't know what we may need from this solution in the future. We are satisfied and hope to upgrade to a new version soon. However, right now, our current version is working fine.

In terms of advice, we would recommend Sangfor NGAF. But, a company should first prepare an analysis, compare different products, and then decide what they want.

Sangfor NGAF offers the same features as any other firewall product in the market. In terms of the valuable feature, I would say that the low cost the product offers was one of the major deciding factors when choosing the product in our company.

There are some difficulties with the deployment of the LDAP part in Sangfor NDAF, making it an area of concern where improvements are required.

The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement.

I have been using Sangfor NGAF for three months. I am the head of the IT team in my company. My team members use Sangfor NGAF.

Considering that my company has been using the product for only a few months, I rate the product's stability a five out of ten.

The scalability offered by the product is neither bad nor good.

Around 150 users of the product, and it is double in number if you consider the handheld devices in my company.

The services from the solution's technical support have not been as satisfying as my company expected. I rate the technical support a three out of ten.

Negative

I have experience with Fortinet. My company chose Sangfor NGAF after Fortinet ran out of its capability to offer support, considering how the tool has become too old.

I rate the product's deployment phase a five on a scale of one to ten, where one means it is a difficult process and ten means it is an easy process. The deployment phase can be difficult to manage in certain places, while in some other areas, it can be easy.

The solution is deployed on an on-premises model.

I rate the product price as one on a scale of one to ten, where one is low price and ten is high price.

As there are some problems with the product partner, my company has not been able to fit in the web-filtering functionality of the product to meet our needs.

So far, the performance and reliability of the product have supported our company's critical network traffic.

I don't recommend the product to others who plan to use it, considering that the tool has problems in areas like support and deployment.

I rate the product a four out of ten.

As a hospital with 500 users, we use Sangfor NGAF for secure internet connections, VPN access, and protecting our cloud applications. It also helps manage our in-house applications, includes WAF for added security, and ensures email security for our communication needs.

In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry.

Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights. We find ourselves relying on other applications for this purpose. While performance is okay for our healthcare setup with 500 desktops, it might need closer consideration for industries like finance with more specific requirements.

I have been working with Sangfor NGAF for two years.

It is a stable solution.

Sangfor is not highly scalable. If we need better performance or additional features, we have to replace the entire unit with a higher-capacity model. It has limitations, like only four available WAN ports, and expanding requires adding cards. Currently, we use another router for internal DMZ.

I'm not entirely satisfied with Sangfor's technical support. There have been instances where the local partners lacked the required expertise, and I had to reach out directly to Sangfor for assistance. The limited number of experts in the market and the availability issues contribute to the challenges. While the principal company has good resources, they are often engaged with other customers. Overall, I would rate the support as a five out of ten.

Neutral

While I have experience with Fortinet and find its feature set superior, Sangfor is a good solution for organizations with budget considerations. For high-security industries like finance, I would still recommend Fortinet or other top-tier options. 

The initial setup was simple. Deployment of Sangfor typically takes a week, depending on the policies and nature of the business. We usually involve two to three people—a network administrator and an expert in the specific firewall. The vendor's expertise is also essential for a smooth deployment. Maintaining the solution is quite easy.

Sangfor falls into the mid-range for pricing, between more affordable options and pricier alternatives like Fortinet. The pricing is slightly higher than the support costs but remains reasonable, with yearly licensing.

Overall, I would rate Sangfor NGAF as a six out of ten.

We use SSL VPN and other networking features. Our organization is not very big.

SSL VPN is the best feature.

The product must provide more IPS features. It should also provide more VPN and security features.

I have been using the solution for almost four years.

The tool is very stable. We have not faced any issues in the past four years. We never had to reboot or restart it. It never got stuck. We did not see a single fault in four years. I rate the stability a ten out of ten.

The tool is very scalable and customizable. It fulfills all our requirements. I rate the scalability a ten out of ten. More than 200 people in our organization use the solution. We plan to increase the usage as our company and its requirements grow.

The technical support is very good. Sangfor’s local partners are very friendly.

Positive

Previously, we used software-based firewalls.

We faced some problems initially due to some technical issues and configurations. The product has been working fine for four years. We’re happy with it. The initial setup is moderately difficult. I rate the ease of setup a five out of ten. 

The configuration and customization took seven to ten days. We have a Sangfor engineer working remotely and a Sangfor partner on-premise who coordinates with the engineer for configuration and testing purposes.

The product is very cost-effective compared to other brands or vendors. I rate the pricing a five out of ten.

I recommend the solution to friends. We are very happy with it. Overall, I rate the tool a nine out of ten.

We are using Sangfor NGAF for the prevention of attacks in our network through the use of IPS, IDS, and web filtering features.

There are currently over 1000 active nodes of the solution in use, and we do not have any plans to increase usage at this time.

Our primary need is to prevent our users from misusing the Internet, which we achieve through implementing traffic shifting and bandwidth restrictions, among other features offered by Sangfor NGAF

An area of improvement for Sangfor NGAF could be in the field of reporting and logging.

I have been using the Sangfor NGAF solution for three years now.

The stability of Sangfor NGAF is good, and I would rate it a seven out of ten. In fact, compared to its competitors, Sangfor is much better so far.

We get good support from customer service.

The initial setup is easy and it is user-friendly.

We have an annual subscription, which is not expensive. In fact, compared to Fortinet, Sangfor is much more cost-effective.

Although we have used different solutions such as Proofpoint, Gadget Control, and FortiNet, we find Sangfor NGAF to be much better due to its security inclusion prevention feature, which is why we introduced this product.

Overall, I would rate the solution a seven out of ten.

Sangfor NGAF is a complete firewall solution.

The most valuable feature of Sangfor NGAF is its integration.

Sangfor NGAF could improve the policies and default criteria. They could be much better.

I have been using Sangfor NGAF for approximately three years.

Sangfor NGAF is stable.

The scalability of Sangfor NGAF is good.

We are using the Sangfor NGAF as our firewall, we have approximately 6,000 to 8,000 end users who are passing through. We have approximately 10 to 15 people using the Sangfor SSL VPN feature remotely from home.

The support from Sangfor NGAF here in Pakistan is great. Whenever I have an issue the support helps me out efficiently.

I rate the support from Sangfor NGAF a five out of five.

Positive

The initial setup of Sangfor NGAF is straightforward. Sophos and Fortinet have more difficult initial setups.

I rate the initial setup of Sangfor NGAF a five out of five.

The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF. 

We have purchased the support for three years.

My advice to others is they should try the solution. I have experienced other solutions, such as Fortinet and I feel much better using this solution overall.

I rate Sangfor NGAF a nine out of ten.

Wherever we have pitched these solutions, the customer is very satisfied with their capability and the security, which Sangfor takes care of.

Sangfor has recently increased their prices, which is not a good thing. Six months back, the price was very competitive for other principals, but they have increased it now, which is disappointing.

It's almost been five years since I started working with this solution.

NGAF is a very stable product. We never experience any complaint from customers that it is down due to the power supply or other hardware components. Normally, we don't get many complaints about Sangfor appliances or products.

Our clients are a mix of small, medium, and enterprise clients. In Pakistan, if a customer has 500 plus users or an endpoint, we consider it medium. However, we consider more than 1,000 users as a large enterprise.

Technical support is very good. It's instant. As a gold partner, we normally bring up the case with Sangfor whenever we receive a call. In parallel, our engineer goes to the customer to see the problem and takes the backend support from Sangfor. If a replacement is required, which is very rare, we normally get it within the time frame in the SLA.

Positive

The initial setup is not difficult. When it comes to the customer policies, we have to customize them, but that's not a big thing. It is almost the same with other firewalls.

The time taken to deploy the solution depends on whether the customer installs the base or what they want to secure.

Sangfor has recently increased their prices, which is not a good thing. Six months back, the price was very competitive when it came to other principals, but they have increased the price now which is a bit disappointing.

Sangfor is a security company, and whenever we pitch their complete solution to security, the customer normally takes it case by case. First, they normally get the firewalls, then the rest of the solution's offerings to get 360-degree security for their organization.

Sangfor is always coming up with something new to add value to their products. In their Internet access gateway, they are introducing a new feature called data leak prevention and stuff like that. When it comes to security, people are very touchy, especially customers. They want good security parameters when it comes to security. If any principal comes up with new technologies and offerings within the same bundle, customers see that it adds value.

My clients wanted to have an appliance or a virtual firewall on-premises. The rest of the collaboration comes with Neural-X, which needs the Internet so that customers can get information about new threats and malicious viruses so that it can get updated on the fly.

Regarding the sizing, we keep providing the growth factor for the customer. For example, if the customer has 1,000 users, we oversize it, considering a growth factor of 10% to 15% per year. If the customer grows, they won't have to rip and replace their appliances. They have the provision to have peace of mind for three to five years.

The Pakistani market is tricky, where people are very conscious of prices. You need to add value by having good pricing and technical capabilities. Rating Sangfor NGAF technically and financially, I rate it a nine out of ten. Rating it financially, it was a ten out of ten six months back. But not now.