We performed a comparison between OPNsense and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Overall, the pricing of the solution is very good. The product offers good value."
"Fortinet FortiGate's reliability is valuable."
"You can create multiple Virtual Domains (VDOMs), which are treated as separate firewall instances."
"The main reason why I purchased the particular unit was that it had good reviews and what other people were saying as far as its completeness and its leading capabilities in terms of endpoint security was very good."
"The pricing is great and very reasonable."
"We can detect any attack of viruses or malware at the first point of contact."
"User-friendly and affordable security solution that's recommended for SMB customers. This solution has good technical support."
"The most valuable feature of Fortinet FortiGate is the simple configuration."
"It has an open license. It works very well, and there is an update every month."
"We have found pretty much all the features of the solution to be valuable."
"One of the most valuable features is the network checking. Additionally, the firewall and web filtering functionalities are highly useful."
"It's open source."
"The solution is good for a basic firewall for a small business or for home use."
"It's more secure and more reliable."
"The solution has high availability."
"The graphic user interface is very good and it is user-friendly which makes the product easy-to-use."
"It is a stable solution."
"It offers application control features."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."
"The VPN connectivity feature is really nice."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall."
"Technical support is very good."
"The logs need to be better. They need to be more visible and easier to access."
"Fortinet FortiGate can be integrated with different platforms. They have integrations in place, but I can't say they're 100%."
"One of the features that I would like to have is to do with endpoint production, it should be integrated. For example, the firewall gets notified of any kind of forensic event that needs to be done, such as if there is a ransomware attack and how it originated, all those records have to be available from the firewall, which is not."
"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."
"They can do more tests before they release new versions because I would like to be more assured. We had some experiences where they release something new and great, but some of the old features are disabled or they don't work well, which impacts the product satisfaction. The manufacturer should be able to prove that everything works or not only that it might work. This is applicable to most of the other services, software, and hardware companies. They all should work on this. We cannot trust every new release, such as a beta release, on the first day. We wait for some comments on the forums and from other companies that we know. We always wait a few weeks before we use the updated version. They should also extend the VPN client application, especially for Linux versions. Currently, it has an application for Linux devices, but it doesn't work the way we want to connect to the VPN. They use only the old connection, not the new one. They have VPN client applications for Windows and Mac, but they can add more useful features to better manage the devices and monitor the current health of each device. Such features would be helpful for our company."
"I think there could be more QoS features"
"The integration with third-party tools may be something that they should work on."
"Fortinet FortiGate needs to improve the protection, it did not prevent us from being attacked. Additionally, Fortinet FortiGate could provide more features for WAF devices. I should not have to purchase two solutions, it would be a benefit to combine these features into one solution."
"We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much."
"The reporting part could be better."
"Its interface should be a little bit better."
"The solution could be more secure."
"There are some add-ons that need enhancements to make management easier for users, especially the reporting features. Some reports don't show the level of detail I'm looking for, and I've had trouble installing certain add-ons, especially for Internet bandwidth shaping within my company."
"The user interface could be improved, and the DNS section should be more intuitive."
"There should be more technical documentation."
"The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform."
"An area of improvement for Sangfor NGAF could be in the field of reporting and logging."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"The product must provide more IPS features."
"The tool is expensive."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"The support for YouTube or the Internet is not enough."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"The solution has too many bugs and these slow down the implementation."
OPNsense is ranked 3rd in Firewalls with 36 reviews while Sangfor NGAF is ranked 20th in Firewalls with 31 reviews. OPNsense is rated 8.4, while Sangfor NGAF is rated 8.0. The top reviewer of OPNsense writes "Robust network security and management offering a user-friendly interface, open-source flexibility, and cost-effectiveness, with challenges regarding initial setup and the absence of official support". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". OPNsense is most compared with Netgate pfSense, Sophos XG, Untangle NG Firewall, Sophos UTM and IPFire, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and WatchGuard Firebox. See our OPNsense vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.