We performed a comparison between Cisco Secure Firewall and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Fortinet FortiGate appears to be scalable."
"The most useful functionality of Fortinet FortiGate is the user interface, multiple engines, and their cloud with the latest integrations. Additionally, the Security Fabric tool is very good."
"FortiGate improved our security. It's one of the best hardware firewalls."
"The most valuable features of Fortinet FortiGate are the APIs. They are the most widely known."
"The most valuable feature is the VDOM, which allows the customer to have multiple firewalls in a single campus."
"Provides good firewall security and has great VPN features."
"The most valuable features of the solution are SD-WAN, filtering testing applications, web filtering, and the new VPN."
"The user interface is relatively easy. The devices are easy to deploy and figure out when you have experience with other security appliances."
"It has a good security level. It is a next-generation firewall. It can protect from different types of attacks. We have enabled IPS and IDS."
"The most important feature is the VPN connection."
"The firewall power that comes with Cisco ASAv is the most valuable asset. They are are very easy to manage."
"VPN, firewall, and IDS/IPS allow us to deliver services to meet client needs across various industry verticals."
"It's got the capabilities of amassing a lot of throughput with remote access and VPNs."
"One of the most valuable features of Firepower 7.0 is the "live log" type feature called Unified Event Viewer. That view has been really good in helping me get to data faster, decreasing the amount of time it takes to find information, and allowing me to fix problems faster. I've found that to be incredibly valuable because it's a lot easier to get to some points of data now."
"Cisco Secure Firewall has improved our customers' security posture because it offers Next-Gen features, granularity, and reporting on the back of it. You can see the amount of users accessing Office 365, for example, and whether they're having a good or bad experience. You can see the threats that are coming into your network. You can see anyone who is compromised from within your network."
"It brings us the ability to work from anywhere and has allowed us to work remotely without having to incur a lot of other costs. If we didn't have this type of solution, since we have so many on-prem services that are required, we would have likely lost money and been unable to deliver. We have a video services team who helped build the content for our sporting events. When you are watching a Leaf game and those swipes come by as well as the clips and things, those are all generated in-house. Without the ability to access our on-premise resources, we would have been dead in the water. So, the return on that is pretty impressive."
"We've found the technical support to be helpful."
"Sangfor has the best capabilities for securing connections, securing web browsers, securing servers, and general threat protection."
"The built-in features function as intended, providing exceptional value."
"In four steps one can configure the entire firewall."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"It is a stable solution."
"The level of support provided to local companies is good. They transform their application control and other settings according to that country."
"Sangfor NGAF specializes in ransomware detection and helps to protect our network from ransomware threats and malware."
"Performance and technical support are the main issues with this solution."
"We had some issues in the beginning while setting it up, but after doing the firmware update, it is working fine."
"I don't really have anything negative to say as far as Fortinet firewalls are concerned. If anything, they can support a user a little bit better. They can stop being so time-sensitive about how much time the support call has taken, and they can help you do it yourself."
"The support team for Fortinet FortiGate needs to be more customer friendly."
"Fortinet FortiGate should improve the VPN tokens."
"Fortinet needs to overhaul its documentation."
"MTBF: Hardware failure is more common when compared to SonicWall or Cisco ASA."
"I feel that the reporting needs to be improved."
"One of the problems that we have had is the solution requires Java to work. This has caused some problems with the application visibility and control. When the Java works, it is good, but Java wasn't a good choice. I don't like the Java implementation. It can be difficult to work with sometimes."
"I'm not a big fan of the FDM (Firepower Device Manager) that comes with Firepower. I found out that you need to use the Firepower Management Center, the FMC, to manage the firewalls a lot better. You can get a lot more granular with the configuration in the FMC, versus the FDM that comes out-of-the-box with it. FDM is like Firepower for dummies."
"We use the FTD management platform for the boxes. The GUI that manages multiple Firepower boxes could be improved so that the user experience is better."
"The performance should be improved."
"The management of the firewalls could be improved because there are a lot of bugs."
"We had an event recently where we had inbound traffic for SIP and we experienced an attack against our SIP endpoint, such that they were able to successfully make calls out... Both CTR, which is gathering data from multiple solutions that the vendor provides, as well as the FMC events connection, did not show any of those connections because there was not a NAT inbound which said either allow it or deny it."
"The solution has not had any layer upgrades. It does not have layer five and upwards, it only has up to layer four. This has caused some problems for us."
"Cisco wasn't first-to-market with NGFWs... they should look at what other vendors are doing and try not only to be on the same wavelength but a little bit better."
"Our experience with its customer support was quite challenging."
"The setup phase is quite complex."
"It does not offer any recommendations on how to mitigate or control attacks."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
"The reporting and log management could be improved."
"I would be happy if Sangfor developed a firewall designed specifically for home use, as well as for small businesses such as clinics and so on. A household version of the Sangfor firewall for your personal computer or laptop would be ideal, in my opinion."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Sangfor NGAF is ranked 20th in Firewalls with 31 reviews. Cisco Secure Firewall is rated 8.2, while Sangfor NGAF is rated 8.0. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and OPNsense. See our Cisco Secure Firewall vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.