We performed a comparison between Sangfor NGAF and Zscaler Internet Access based on real PeerSpot user reviews.
Find out what your peers are saying about Netgate, Fortinet, OPNsense and others in Firewalls."The customization potential is quite impressive."
"From the firewall perspective, the rules and policies are very sufficient and easy to use."
"Fortinet offers the latest versions to cater to the needs of enterprises."
"It has very easy management and an amazing ETM configuration."
"Virtual Domains (VDOMs) are a feature that we found valuable."
"The technical support in our region is excellent."
"Its administrative panel is very intuitive and simple. It is simpler than the other solutions that we had. As an administrator, we are always looking for the easiest solution to manage network policies. We are able to filter everything on our network and also use the VPN feature, which is important these days when people are working remotely during COVID."
"It increases security posture and is helpful for firewall reporting, intrusion protection, web filtering, and SD-WAN implementation."
"It is a stable solution."
"The stability of Sangfor NGAF is good."
"The price versus value is good because the solution is less expensive than Sophos, Fortinet, or SonicWall."
"Sangfor NGAF works accordingly with our customers. The solution has good performance, easy to use, and integrates well with the endpoints."
"The most valuable feature of Sangfor NGAF is its integration."
"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."
"Sangfor NGAF's standout feature is its powerful application control, enabling precise restrictions on mobile user access to approved applications."
"We've found the technical support to be helpful."
"The solution offers a distributed organization to master and to control all of the endpoints."
"For our needs, the cloud-native proxy architecture is a very good solution. We are moving away from on-prem appliances and moving more toward cloud-based solutions. Zscaler is a good fit for our strategy. This architecture helps with cyber threats because we inspect most of the traffic and we can see that a lot of threats are stopped directly in the secure web gateway."
"Zscaler excels in security protection and the cloud is always up-to-date. It does not matter if you are a small or big organisation, you will receive the same security quality."
"Zscaler Internet Access's best feature is the granular policy controls."
"I like the granularity of the control of all the traffic, including SSL inspection. I also like the fact that the user interface is intuitive. The latencies with Zscaler are minimal compared to those of any other competitor. Other competitors do not really have the global scale that Zscaler has and cannot promise low latencies."
"Zscaler Internet Access protects using data loss prevention. If you have a CASB exposing your cloud out into the network, then Zscaler Internet Access will go ahead and control that unknown cloud application in the CASB, protecting it. There is also data detection with exact data match. This improves the data coming into your cloud so you are protecting it."
"Tech support is good."
"The policies are very intuitive and easy to configure, with very little possibility of messing things up."
"The cloud features can be improved."
"Fortinet FortiGate is a firewall solution and once it's deployed, you can rest assured that your system is secure."
"There aren't really any negative aspects to discuss."
"I would like to have logs, monitoring, and reporting for a month without extra fees."
"There are a lot of bugs I have found in the solution and it is difficult to upgrade. These areas need improvement."
"Fortinet FortiGate could improve the user interface. There should be more functionality and options through the GUI."
"Security is a continuous process. In every product, there is a requirement for improvement. Its pricing should also be improved according to Indian market requirements. They must also improve on the reporting part. Its reporting can be more precise. If we can get a real-time report in a specific format, it will be helpful for customers to know about the current status of their security."
"Tunnel flapping was one of the major things I had seen wherein your internet link remains but your VPN tunnel is down. However, since I got a fix from the TAC team, I have not noticed it, but the customer complained a few times that they couldn't access the internet because of this problem."
"The support offered by the product has certain shortcomings where improvements are required. The knowledge levels and response time of the support team need improvement."
"The interface and user experience are horrible."
"The solution should be able to work in a hybrid setup."
"It does not offer any recommendations on how to mitigate or control attacks."
"I believe that IAM and NGFW need to merge into a single box, instead of there being two separate box solutions."
"They need to improve their research team and they need to study their data to analyze it and build the product."
"The setup phase is quite complex."
"The GUI needs to be improved, lacks logic in some areas."
"Zscaler Internet Access can improve by adding traffic filtering based on the DNS."
"Zscaler Internet Access needs to integrate more ISPs. It is good to have more than three ISPs."
"They could provide more time for the onboarding the training of an IT person."
"An improvement would be if they could provide an out-of-the-box experience, like 20 to 30 features all ready to go. In comparison, LogRhythm offers out-of-the-box features. With Zscaler Internet Access, there is firewall IPS, multiple security services, filtering, DLP, and CASB browser isolation. These are things that all users are going to be using. However, when an administrator or architect would start building this, I would definitely need to engage professional services to help clients do it."
"The pricing is an issue. It is expensive if you have all of your users in the same location. It is expensive compared to other firewalls on the market."
"Zscaler does not provide dedicated IPs to each customer. Hence, they share a pool of IPs provided by Zscaler. There is a chance of blacklisting these IPs. I also do not like the multi-management portal."
"The price of the solution could be improved."
"I don't know whether it's Zscaler or not, however, sometimes I can't access my time management. I need to wait and try again a few hours later. Typically, if I let some time pass, I can access it again."
Sangfor NGAF is ranked 21st in Firewalls with 31 reviews while Zscaler Internet Access is ranked 2nd in Secure Web Gateways (SWG) with 46 reviews. Sangfor NGAF is rated 8.0, while Zscaler Internet Access is rated 8.2. The top reviewer of Sangfor NGAF writes "Affordable, easy to configure firewall with fast, responsive support". On the other hand, the top reviewer of Zscaler Internet Access writes "Provides integrated CASB and file sandboxing but could be less expensive ". Sangfor NGAF is most compared with Sophos XG, Palo Alto Networks NG Firewalls, Netgate pfSense, Check Point NGFW and Fortinet FortiOS, whereas Zscaler Internet Access is most compared with Cisco Umbrella, Microsoft Defender for Cloud Apps, Netskope , Prisma Access by Palo Alto Networks and Appgate SDP.
We monitor all Firewalls reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.