We performed a comparison between Check Point NGFW and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The feature I like most is the SD-WAN. It allows you to manage more than one ISP at the same time. And there is a high-availability mode, so if one of your ISPs is down, you still have a backup."
"The simplicity of the configuration and the stability of the product are most valuable. The VPN concentrator is very useful."
"FortiGate firewalls are easy to manage through a user-friendly web interface. They also have advanced features like DDoS and DLP. However, I wouldn't recommend enabling all of these features on one device because it can cause performance issues."
"We can use our devices to check all of the perimeters. It secures email websites."
"The web tutor and automatic rules by schedule are good features."
"The web filtering facility and application control are the most valuable features from the point of view of our clients. The VPN feature is also quite popular amongst our clients. Two-factor authentication is one of the good features in Fortinet. These features are important for the current scenario of security. Security has become a necessity nowadays. With cyber-attacks becoming more common, protecting an organization's data is one of the major tasks. It is also very stable and scalable, and it is very straightforward to configure. Their technical support is also good."
"The solution is extremely reliable."
"Overall, the pricing of the solution is very good. The product offers good value."
"Check Point has strong security features as well as some decent monitoring and management capabilities."
"The solution offers a good GUI."
"The most valuable feature is the highly integrated NGFW features such as the IPS or Check Point Identity Awareness, which makes Check Point the best choice on the market."
"By far, it's the best security solution one can adopt for their organization."
"The initial setup is very straightforward."
"The performance has been very good."
"We use Check Point to complete the network compliance rules."
"The most valuable features for us are identity awareness, IDS and IPS, and application control."
"SSL VPN is the best feature."
"In terms of the most valuable features, the IPS report is quick and updated. Performance is also valuable."
"The absolute best part of Sangfor NGAF is their support. It's a 24/7 support channel, and the last time I requested their assistance I got a reply within three minutes. They helped solve the problem immediately."
"It is a stable solution."
"Technical support is very good."
"Sangfor is a good solution that provides a WAF and firewall solution. Most other vendors, like Sophos and Fortinet and Cisco, only provide one solution. That's a valuable feature of Sangfor."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"The performance could be a bit better. Right now, I find it to be lacking. Having good performance is very important for our work."
"There is one big configuration file with no separations for the unique VDOMs. Maybe they could separate individual VDOM configuration files with the root VDOM configuration file referencing the individual VDOM config files."
"The solution could be more evenly structured."
"The inability to scale the FortiAnalyzer to match our growth necessitates the purchase of new hardware."
"Fortinet could improve the windows opener or the virtual IP solutions for opening windows. The virtual IP settings need improvement as firewalls are trending in new development directions."
"The solution lacks sufficient filtering."
"The setup is pretty complex and not easy to implement."
"Fortinet currently has many products bundled with FortiGate including the basic firewall and load balancer, and I think that that they need to have separate product portfolios for each of these specialized services."
"They need to offer quicker resolution and maintenance during downtime."
"The naming in the inline layers and ordered layers needs improvement. It makes things very complicated. I've seen quite a lot of people saying that. For audit policies, it is okay since it's very simple to see. However, this area is for very large organizations, which have too many policies, and they need to share all these policies. For small to medium-sized businesses, they don't need it. Even if somebody has 500 rules, if they try to use it, it can be very confusing."
"In the past year, we faced severe downtime that lasted many days due to a misconfiguration."
"The web UI for VSX could be better."
"The frequency of the antivirus updates which we get for Check Point firewalls should increase. They should be of good quality compared to the competitive firewalls on the market. They should give us stable antivirus signatures. That is an area in which they can improve."
"This solution requires management software that is sold separately; it's actually a different appliance altogether."
"There have been a few requests/issues about the Identity Awareness feature."
"For the next release, we would like to have better ruleset cleanup tools that are already included."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The interface and user experience are horrible."
"Sangfor has recently increased their prices."
"Sangfor could improve by providing better real-time reporting, as the current reports don't offer the level of detail we need, especially for runtime insights."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"The GUI needs to be improved, lacks logic in some areas."
"Our experience with its customer support was quite challenging."
Check Point NGFW is ranked 5th in Firewalls with 279 reviews while Sangfor NGAF is ranked 20th in Firewalls with 31 reviews. Check Point NGFW is rated 8.8, while Sangfor NGAF is rated 8.0. The top reviewer of Check Point NGFW writes "Good antivirus protection and URL filtering with very good user identification capabilities". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". Check Point NGFW is most compared with Palo Alto Networks NG Firewalls, Sophos XG, Cisco Secure Firewall, Netgate pfSense and KerioControl, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Fortinet FortiOS and Huawei NGFW. See our Check Point NGFW vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.