We performed a comparison between Cisco Secure Firewall and Sangfor NGAF based on real PeerSpot user reviews.
Find out in this report how the two Firewalls solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The simplicity of the product is great. It's very easy to use, which is a compliment we get all the time in terms of feedback."
"LinkGreat firewall capabilities"
"The stability and scalability of this solution are satisfactory. Its SD-WAN, VPN, and URL filtering features are very useful."
"FortiGate's web and URL filtering are unlike any other firewall I've used. The functionality of URL filtering in those solutions is problematic because everything is encrypted, and firewalls can't break that encryption protocol. Fortinet has an SSL proxy, so the encryption is done before the packet ever leaves the FortiGate. The URL filter is definitely one of the most helpful features."
"FortiGate firewalls are user-friendly, and I like the security profiling features."
"The features that I have found most valuable are that it is good to use, and most importantly, the pricing. The customer especially likes the discount when they trade up or something like that."
"The Fortinet FortiGate local partners were good. I did not have direct contact with Fortinet support."
"The UTM feature is quite good. FortiAP is easy to deploy because both Fortigate and FortiAP are under the same brand. Otherwise, you need to do more work on the configuration."
"I think that the firewall feature is the most valuable to me as it is one of the oldest features for this solution. We also appreciate how stable the VPN is."
"Cisco offers a great educational series to train users on their devices."
"The information coming from Talos does a good job... I like the fact that Cisco is working with them and getting the information from them and updating the firewall."
"Cisco Secure Firewall made it easier so that more than one person can handle things. We are able to have a bigger team that can handle simple tasks and have a smaller team focus on the deep-dive needs."
"Cisco ASA provides us with very good application visibility and control."
"ASA is stable and with a low level of work required on the maintenance side."
"Feature-wise, we mostly use IPS because it is a security requirement to protect against attacks from outside and inside. This is where IPS helps us out a bunch."
"The product is quite robust and durable."
"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."
"It's a very simple to use product."
"While the features are not dissimilar to other brands, configuration is much more simple, which works out great for Indonesian people."
"It offers application control features."
"The built-in features function as intended, providing exceptional value."
"We've found the technical support to be helpful."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"Particularly good in the DPI where we can inspect inbound and outbound traffic."
"Backup can be improved."
"A lack of integration between our data centers."
"For the migration, everyone has a firewall in use and I am selling Fortinet. Typically, I am replacing another firewall. Previously, there was a tool available to convert configurations from one firewall, such as Palo Alto, to Fortinet, but this tool is no longer free. If it could be made free again, it would be very beneficial."
"The solution could be more evenly structured."
"Fortinet Fortigate could benefit by simplifying some of their processes."
"The Wi-Fi controller needs a lot of improvement."
"I haven't had a single issue since using Fortinet."
"Scalability for Fortinet FortiGate needs to be improved. SD-WAN security for this solution also needs some improvement."
"It would be good if Cisco made sure that the solution supports all routing protocols. Sometimes it doesn't."
"The solution could offer better control that would allow the ability to restrictions certain features from a website."
"Its implementation was not straightforward. It was mainly because we were running two projects together."
"The graphical interface could be improved. From what I have seen, Fortinet, for example, has a nicer GUI."
"The solution’s GUI could be better."
"The integration between the on-prem proxy world and the cloud proxy would benefit us. One single policy setting would make sense."
"It would be nice if you didn't have to configure using a command-line interface. It's a bit technical that way."
"When you make any changes, irrespective of whether they are big or small, Firepower takes too much time. It is very time-consuming. Even for small changes, you have to wait for 60 seconds or maybe more, which is not good. Similarly, when you have many IPS rules and policies, it slows down, and there is an impact on its performance."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"Sangfor could improve their interface capacity on the 5100 series model and upgrade their hardware from one gig to 10 gig. This would improve the overall throughput."
"The setup phase is quite complex."
"There is room for improvement in dependency on certain infrastructure, like the DNS dependency on the current DNS server that the company has. It should be standalone. It should not depend on any other DNS server."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"The solution should be able to work in a hybrid setup."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
Cisco Secure Firewall is ranked 4th in Firewalls with 404 reviews while Sangfor NGAF is ranked 21st in Firewalls with 31 reviews. Cisco Secure Firewall is rated 8.2, while Sangfor NGAF is rated 8.0. The top reviewer of Cisco Secure Firewall writes "Highlights and helps us catch Zero-day vulnerabilities traveling across our network". On the other hand, the top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". Cisco Secure Firewall is most compared with Palo Alto Networks WildFire, Netgate pfSense, Meraki MX, Sophos XG and Palo Alto Networks NG Firewalls, whereas Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and H3C SecPath Firewalls. See our Cisco Secure Firewall vs. Sangfor NGAF report.
See our list of best Firewalls vendors.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.