We performed a comparison between Cisco Secure Firewall and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature of Fortinet FortiGate is URL filtering."
"I have found Fortinet FortiGate to be scalable."
"The features that prevent internet connections, the filtering are the most valuable because we did not have any internet protection before."
"Advanced routing (RIP, OSPF, BGP, PBR). It gives you a seamless and simple integration into a large network."
"Customers are more inclined towards FortiGate because of application control, web filtering, and anti-spam features. The support from the FortiGate team is good, and price-wise, it is affordable."
"The network security and cloud security are most valuable."
"The inspection and web security features are most valuable."
"This solution has solid UTM features combined with a nice GUI."
"The solution is excellent for enterprise-level networks."
"The user interface is very easy to manage and find rules. You can do object searches, which are very easy. Also, the logging is very simple to use. So, it is a lot easier to troubleshoot and find items inside the firewall."
"We are using the Cisco AnyConnect for our end-user VPN with the ASA."
"For our very specific use case, for remote access for VPN, ASAs are very good."
"The stability is very good; there's no vagueness. Either it works or it doesn't, and it's also very easy to find out why."
"Manageability of Cisco ASA. It has a GUI interface, unlike the most of Cisco IOS. For beginners they can "sneak in" and apply the command and see the actual commands that the GUI launches. In addition, Cisco has the reputation regarding security."
"The Firepower IPS, based on Snort technology, has an amazing detection engine and historical analysis capability of files that eases threat investigations a lot."
"I like the IPS feature, it is the most valuable."
"The stability of Sangfor NGAF is good."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"It offers application control features."
"We've found the technical support to be helpful."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately."
"It is a stable solution."
"The pricing could be a bit better, especially when you consider how they have the most basic offering priced."
"We have an issue with hotel guest vouchers."
"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"If I had any criticism that I would give FortiGate, it would be that they need to stop changing their logging format. Every time we do a firmware upgrade, it is a massive issue on the SIM. Parsers have to be rebuilt. Even the FortiGate guys came in and said that they don't play well in the sandbox."
"The scalability could be better."
"The biggest "gotcha" is that if the client purchases what they call the UTM shared bundle, which has unified threat management on both, it's not as easy to manage if you have more than one firewall."
"Stability and technical support are the two major issues I have found with Fortinet."
"Fortinet FortiGate can improve by integrating the web application firewall and the DDoS protection part of the solution. Having a WAF feature, web application firewall, and proxy together would be a good benefit."
"The application detection feature of this solution could be improved as well as its integration with other solutions."
"The solution's deployment is time-consuming, which should be minimized and made more user-friendly for us."
"A major area of improvement would be to have more functionality in public clouds, especially in terms of simplifying it. The high availability doesn't work right now because of the limitations in the cloud."
"I believe that the current feature set of the device is very good and the only thing that Cisco should work on is improving the user experience with the device."
"Sometimes my customers say that Cisco Firewalls are a bit more difficult compared to Fortigate or Palo Alto. There is complexity in the configuration and the GUI could be improved."
"One thing that Cisco could improve is the GUI. The graphic user interface should be more user-friendly."
"Recently, we have been having an issue with the ASA firewall. We haven't found the root cause yet and are still working on it. We failed over the firewall from active to passive and suddenly that resolved the issue. We are now working to find the root cause."
"Changes you make in the GUI sometimes do not reflect in the command line and vice versa."
"The firewall system needs gradual improvements because there are more threats and challenges every day."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"Lacks consistency in terms of filtering certain websites and applications."
"The web interface needs to be improved, making it more user-friendly."
"The setup phase is quite complex."
"The solution has too many bugs and these slow down the implementation."
"The reporting and log management could be improved."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Sangfor NGAF is ranked 21st in Firewalls with 31 reviews. Cisco Secure Firewall is rated 8.2, while Sangfor NGAF is rated 8.0. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and OPNsense. See our Cisco Secure Firewall vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.