Powerful recognition ability  
Recognition is the basis of effective management. Without recognition, there is no management. SANGFOR IAM product has an enriched application recognition base, which can recognize more than 500 Internet applications. 
As one of the industry’s most edge-leading technologies, its smart webpage classification technologies can automatically learn and can conduct human training and revision, so as to smartly classify unknown webpage, easily trillions of diversified webpage on Internet. 
Powerful SSL traffic recognition technologies can filter SSL-encrypted BBS and mail behaviors and can effectively recognize and control encryption proxy software.  

 

Full on-line protection
SANGFOR IAM products can automatically filter the webpage that virus, Trojan and other malicious scripts and plug-ins, so to deal with potential risks in advance. 
When intranet has been attacked, SANGFOR IAM products can still block and alarm the intranet virus, Trojan and others, so as to protect intranet security from many aspects. Besides, SANGFOR IAM products’ network accessing rules can detect terminal computers to prevent security strategy incompliant computers from going on line, maximizing avoidance of security risks.  

 

Position management strategy
SANGFOR IAM products’ smart risk reports can deeply mine logs, so as to help organizations identify in advance the situations of quitting, secret disclosure, low work efficiency and etc., which have troubled enterprises for long; they can automatically pop up a dialog box to remind employees to reasonably control their own on-line behaviors.

 

Networking manners:
The main benefits to deploy and use gateway modes as above include: to realize NAT, routing and other network functions, and to provide proxy for intranet employees to go online.
The main benefits to deploy and use bridge modes as above include: deployment and installation of devices generally do not affect original network structure.
The main benefits to deploy and use bypass modes as above include: device installation will not affect existing network structure at all, with easy deployment. The disadvantages are: because it gets “mirrored” data flow, some of devices’ control functions cannot be realized: bandwidth limitation, network accessing rules, and no control over some applications that use UDP protocols.