Sangfor NGAF Reviews

I use Sangfor NGAF since it is a good firewall product with good threat protection. The product is very useful for IPSec VPNs and SD-WAN VPNs.

The most valuable features of the solution stem from the security center or SOC-related feature, which is very good since it detects threats in real time and quickly. The tool also reacts on a timely basis.

The setup phase is quite complex. The setup process could be easier.

I have been using Sangfor NGAF for six months.

It is a stable solution.

It is a very scalable solution. I can't say that the tool is as scalable as Fortinet FortiGate's latest version.

There are around 3,000 users of the tool in my company.

The solution's technical support was very good, cooperative, and responsive.

I am satisfied with the support team.

The product's initial setup phase was not as straightforward as Fortinet FortiGate. As a first-time user, if you get to see the setup phase for the first time, you can do it easily the second time. The setup phase is not very hard. The tool is very easy to use.

During the deployment, the first step is to upgrade and activate the license of the product and configure interfaces, zones, objects, and policies, along with NAC and DMZ policies. The tool also helps with static routing to ensure connectivity between the head office and stores. The aforementioned steps were taken to make the product operational.

Sangfor NGAF is a cheaply priced product, especially if I consider the previous product that was used in my company.

Firewall products function with licenses. Without licenses, the tool's main features, like intrusion prevention, web access firewall, DNS, or IDS, will not be activated if you don't buy the license.

Speaking about how Sangfor NGAF improved our company's network performance, I would say that I had installed the product at our head office, where we use it for internal policies and DMZ zones. It is a very useful firewall. Previously, we used Fortinet products, but now, Sangfor NGAF is fully operational in our network, and we use it to block ISPs and the internet and manage rules or traffic, like DMZ to LAN. Other VPNs like IPSec VPNs work in Sangfor, and it serves as a very good feature in the tool. I even loved the SD-WAN VPN feature of the tool.

The application control feature helps manage our company's network traffic in a very good manner. I have been using the tool for the last six months, and I am quite satisfied with the product's performance.

Speaking about the intrusion prevention system of the tool, I have some logs that can state the source of the attacks and which have been blocked in a timely manner by the product. The tool's threat management capabilities and ability to deal with DDoS attacks are good and very useful.

The deployment affected our company's team's workload since the team was available at the premises of the organization during the deployment phase.

I recommend the product to those who want to buy it to protect and manage their networks with the product. It is quite a useful product.

I can't speak much about the benefits of the tool since everyone uses the product for their own needs. In terms of benefits, Sangfor NGAF's price is better than Fortinet FortiGate.

I rate the tool an eight and a half out of ten.

We are using Sangfor NGAF for the prevention of attacks in our network through the use of IPS, IDS, and web filtering features.

There are currently over 1000 active nodes of the solution in use, and we do not have any plans to increase usage at this time.

Our primary need is to prevent our users from misusing the Internet, which we achieve through implementing traffic shifting and bandwidth restrictions, among other features offered by Sangfor NGAF

An area of improvement for Sangfor NGAF could be in the field of reporting and logging.

I have been using the Sangfor NGAF solution for three years now.

The stability of Sangfor NGAF is good, and I would rate it a seven out of ten. In fact, compared to its competitors, Sangfor is much better so far.

We get good support from customer service.

The initial setup is easy and it is user-friendly.

We have an annual subscription, which is not expensive. In fact, compared to Fortinet, Sangfor is much more cost-effective.

Although we have used different solutions such as Proofpoint, Gadget Control, and FortiNet, we find Sangfor NGAF to be much better due to its security inclusion prevention feature, which is why we introduced this product.

Overall, I would rate the solution a seven out of ten.

Sangfor is an on-prem firewall I use for my local infrastructure. It is used as an aggregated interface. Behind Sangfor, I have built a data center that is deployed on high availability using a model that is 5100 CV with 10 gig ports.

Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor.

Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput. 

I have used this solution for the last six months.

This is a scalable solution. We have approximately 1,000 users.

The technical support team are available 24/7 and if we need any assistance for Sangfor, FortiGate or Sophos, we can call their support number and they provide assistance from their L2 or L3 engineers. 

Positive

It's very easy to set up because Sangfor provided us with export and HCI capabilities. Deployment took almost one week.

The process starts with low level design for internal teams to make a design on network requirements. This contains all current and future requirements.

For four to five physical appliances for a licensed firewall, it costs approximately $4,000.

We have six people managing IT operations. We have not had any issues in the first six months of using this solution. 

If you want to deploy a firewall in your infrastructure, Fortinet, Sangfor and Sophos are the best solutions to protect traffic.

I would rate this solution an eight out of ten.

Sangfor NGAF offers the same features as any other firewall product in the market. In terms of the valuable feature, I would say that the low cost the product offers was one of the major deciding factors when choosing the product in our company.

There are some difficulties with the deployment of the LDAP part in Sangfor NDAF, making it an area of concern where improvements are required.

The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement.

I have been using Sangfor NGAF for three months. I am the head of the IT team in my company. My team members use Sangfor NGAF.

Considering that my company has been using the product for only a few months, I rate the product's stability a five out of ten.

The scalability offered by the product is neither bad nor good.

Around 150 users of the product, and it is double in number if you consider the handheld devices in my company.

The services from the solution's technical support have not been as satisfying as my company expected. I rate the technical support a three out of ten.

Negative

I have experience with Fortinet. My company chose Sangfor NGAF after Fortinet ran out of its capability to offer support, considering how the tool has become too old.

I rate the product's deployment phase a five on a scale of one to ten, where one means it is a difficult process and ten means it is an easy process. The deployment phase can be difficult to manage in certain places, while in some other areas, it can be easy.

The solution is deployed on an on-premises model.

I rate the product price as one on a scale of one to ten, where one is low price and ten is high price.

As there are some problems with the product partner, my company has not been able to fit in the web-filtering functionality of the product to meet our needs.

So far, the performance and reliability of the product have supported our company's critical network traffic.

I don't recommend the product to others who plan to use it, considering that the tool has problems in areas like support and deployment.

I rate the product a four out of ten.

Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware. This is the primary reason we purchased this solution, and we are currently negotiating to upgrade our appliances to volume M5200 Series. Additionally, Sangfor NGAF provides a web application for financial software.

We use Sangfor NGAF primarily for security, which has helped save our files from being encrypted by ransomware. Our desktop PCs have essential data, like word files and excel documents. 

We previously had a ransomware attack on our file server, and Sangfor NGAF protected us by alerting and disconnecting the server from the network.

The firewall system needs gradual improvements because there are more threats and challenges in the world every day. Sangfor NGAF has a comprehensive database for ransomware and viruses, but when we compare it to other solutions, the price could be more competitive.

Since we have a very comprehensive solution with Sangfor NGAF, it is hard to identify any additional features we want to add. It already provides good features for ransomware attacks and data recovery. In the past, we wanted encrypted data for a virus to be recoverable, and Sangfor offered the solution.

We have been using Sangfor NGAF for four years. We use it for overall IT infrastructure protection and are currently using version 1 of Model M5100.

We currently deploy a hybrid infrastructure of cloud and on-premises. We use the solution for our accounting and financial software, websites, internet blocking, and other features. Some clients are on the cloud, and others are on-premises. We also have a Sangfor solution that filters the in and out traffic.

The solution is relatively stable. Interestingly, we discontinued the updates and software licenses about a year ago, and the appliance and solutions are still working. In addition, there is no limitation on the license, so services won't stop if it expires. You can also update the license at any time for a partial cost.

This solution is scalable. We can add many features and lengths and expand according to our needs.

The IT specialists and engineers in my organization use this solution. Our whole organization is under the protection of Sangfor NGAF. The solution has footprints in India and Europe and many government agencies use Sangfor NGAF in Pakistan.

For deployment, we needed three people who were all IT specialists, and only one of them was from Sangfor. As a result, we deployed it with very few resources, and there were no recurring charges. Also, most people are very well-versed in technology and can multitask.

The technical support team was very helpful, provided support, and guided us during our initial deployment. We were good to go in 15 to 20 minutes.

We previously used Sophos and pfSense, an open-source firewall. 

The initial setup was very straightforward. The solution is out of the box, and the software and appliance can be quickly installed. It has a very nice AI feature, and we only needed to implement parameters and define some policies. The deployment took 15 to 20 minutes because we had to get familiar with the new system. 

We defined WAN and LAN networks for our implementation strategy and then defined the servers. Next, we identified the modes and decided the desktop would be the best. There were other considerations but it has been four years, so it is hard to remember all of them.

We completed our deployment in-house.

We have seen a return on investment. The systems are protected, and their operating systems are readily available. We are protected from ransomware attacks and the loss of data. This solution protects us, and it has benefits.

On a scale of one to ten, with one being the cheapest, I rate the price a six out of ten. There are no hidden or additional costs other than what we were provided. Therefore, we are happy with our initial decisions.

We evaluated other options and completed some financial comparisons but the IT specialists advised that Sangfor NGAF worked well. 

I rate this product an eight out of ten because we don't know what we may need from this solution in the future. We are satisfied and hope to upgrade to a new version soon. However, right now, our current version is working fine.

In terms of advice, we would recommend Sangfor NGAF. But, a company should first prepare an analysis, compare different products, and then decide what they want.

The system comprises three primary functionalities: defense solutions, detection solutions, and the ability to identify, block, and analyze network traffic. It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network.

We have observed numerous threats targeting our network from both internal and external sources. While we have reports detailing these incidents, we currently lack a clear method for prioritizing internal threats.

The information provided alerts us to the presence of threats from specific sources, which is highly beneficial.

It does not offer any recommendations on how to mitigate or control attacks.

I have been using it for three years.

We face occasional stability issues. I would rate it seven out of ten.

It doesn't offer significant scalability features.

In the event of a performance issue, such as users reporting slow access to specific websites, we conduct an internal investigation to identify the root cause. If it's determined to be a problem with the equipment, we escalate the issue to the vendor for resolution.

Neutral

When we installed the equipment, we depended on an external consulting party to guide us through the setup and functionality for approximately two weeks. The project team, consisting of both project members and experts in the field, were actively engaged during this period.

The pricing is reasonable. At the time of our decision to acquire the equipment, we were working with a constrained budget and it turned out to be the most suitable choice to meet our specific requirements

We considered FortiGate as an option but ultimately decided on Sangfor NGAF due to its more favorable pricing.

I hope that its distributor possesses a high level of product knowledge, and the same applies to Sangfor itself as the principal company. This would enable customers to have a more seamless and enriching experience with the product, eliminating any barriers or disconnect between our team, the customers, and the software. Overall, I would rate it seven out of ten.

Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications. The system's adept intrusion detection further fortifies our network, preventing potential threats.

Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications.

I have been using Sangfor NGAF for ten months.

So far, we have not had any issues with the stability of the solution.

We have approximately 250 users of Sangfor NGAF at our company, but around 400 users all around.

The support team is excellent. Very helpful and competent.

My company opted for Sangfor NGAF over other products because of its affordability, compact size, and easy management features. I like Sangfor more than Fortinet because it is cheaper, has a friendlier interface, and comes with great support. It just feels like a better fit for me.

The initial setup is very easy.

Sangfor NGAF is quite affordable.

Although Sangfor NGAF is a great product, I would rate it as a six out of ten just because I'm new in this field and still exploring other options and solutions.

We mainly use this solution as a firewall. A few years ago we had some data loss due to a virus, so this solution protects us from viruses, controls the track rate and detects these kinds of malware. We are very satisfied with the solution.

I try to convert the benefit into a dollar value so that I can tell my clients or my management that I'm saving money. So, since we have zero issues, no malware activity, and no viruses, I have peace of mind. Before we started using this solution, we had a huge data loss and we lost millions of dollars. 

If there is any activity on our servers, I get a report immediately. If anybody is trying to intrude, I am protected. So if somebody is trying to enter into our area, I get an alert. There are other standard safety measures too and it is linked to our backup, so everything is amazing. I think the value lies in not having a disaster in the healthcare industry. The cost of having a disaster here is multiplied by three if you compare it with any other industry.

Whenever there's an attack, your data is safe, and you can recover it after five hours and your patients' well-being isn't affected. I think this solution is a very good example of a proactive solution that can detect problems and immediately fix the problems or issues. 

I think the most important feature is the solution's user-friendliness. It's very easy to manage and its database is amazing. It has all the features you need. When we installed the solution, we had a virus that hacked even our airline data, but thanks to the solution, we were protected. So their virus database is very strong, and they keep on updating. The normal features of any application firewall are that you can control it from anywhere and you can manage it very easy. Those things are very simple, and all NGAF providers have it. But I prefer Sangfor because it's really protecting us and it is easy to manage. It doesn't require a lot of skill sets to manage it. And their database is very strong.

We're still evaluating the program, so there is no guarantee that we will always get this kind of protection. They need to improve their research team and they need to study their data to analyze it and build the product. I think the developers should sit with their clients to understand how they can improve their product. Although it's running very smooth, they need to collect data from their clients to improve the product. 

Cisco, for example, has forums where you can go and type in your question and get the answer. So the developers of Sangfor needs to get feedback from the users and adapt their product on the basis of that feedback.

It seems to be a durable, stable product. My impression about Chinese products was different before I started using this solution. I'm very impressed with their improvement and the hardware seems to be very stable.

It's easily scalable. They've got different models of the software upgrade, so if you want to move your product and version, it can be scaled. We are expanding soon as we are building a new hospital in the region so we will soon need to scale up and increase the capacity and capability of the NGAF. 

Whenever you have a problem, you'll get an answer in 30 minutes' time, maximum. Unless it is at a very awkward time, like in the middle of the night. They have a WeChat group on the cloud, so you can communicate there an get an answer within 30 minutes. The support is really good.

We used a normal firewall and antivirus solution - a combination of a hybrid system. 

The initial setup was very straightforward and simple. They created a WeChat group and they send the product to us, knowing the email came to us. There were about three to four sessions. The deployment was very straightforward and they shared a lot of reviews. We looked at that and everything was fine. It's a low-cost implementation. The deployment took about four to five days. You only need one staff member for deployment.

I think the ROI is very high and the turnaround is very fast.

It costs about 8 to 10 thousand dollars per year for 500 users, standard licensing fees included. 

Sangfor NGAF is a good product. People should try it, especially those who are not using the software. These firewalls are great and everything is becoming properly defined, even the network, the computer, the firewalls, storage, and everything is just waiting to be properly defined. It's a unique combination and people should try it. 

In the future, I would like to see it being controlled by an automatic, virtual orchestrator to control the firewall and all the data. 

One a scale of one to ten, I rate this solution a nine.