Web filters are commonly used by the organization to restrict user internet access to certain web applications content and it has increasingly become non-effective against proxy avoidance applications. Athena SWG collaborates with Athena EPP to enforce Proxy Avoidance Protection on any user attempt to use this application for bypassing the security perimeter more effectively. R&D team within Sangfor employs a dedicated team of application signatures security experts who are continuously categorizing and adding the latest proxy avoidance applications to ensure that detection rate and blocking capabilities are current and up to date.
Sangfor Athena SWG - Secure Web Gateway & Web Filtering Solution
Accelerating modern trends such as cloud applications adoption, the move of the hybrid workplace and increased use of mobile and personal devices for work have all constantly put more pressure on the organization to ensure a secure workforce environment. At the same time, a rise in encrypted applications, proxy avoidance applications, and increasingly affordable availability of third-party VPN applications have imposed further liability for the organization where it can easily bypass your security perimeter undetected without any protection. You need an extensive secure web gateway not only to protect your organization against these common threats but also as a critical asset for safeguarding user internet access behavior.
Why Athena SWG?
Athena SWG enables you to identify, analyze and take immediate action upon user internet access behavior.
Athena SWG Key Features and Capabilities
Proxy Avoidance Protection
Intelligent Traffic Management
Athena SWG improves bandwidth utilization by more than 30% using three unique major traffic management solutions. Dynamic Traffic Control automatically adjusts traffic control policies and intelligently allocates idle bandwidth resources. Intelligent Flow Control precisely manages both up-link and down-link P2P traffic and can customize traffic "packages" for different users, allocating specific traffic quotas and limiting bandwidth for heavier users.
Gateway and Client Decryption to Uncover Encrypted Traffic
Typically, a majority of internet traffic is protected by SSL/TLS encryption. While encryption helps to keep user and corporate data protected and private, it also creates security challenges when it comes to the rapid growth of malware infections and other malicious content. Athena SWG offers both decryption methods including gateway and client decryption to overcome these challenges. This enables an organization to have the flexibility to run either one or both in parallel to uncover encrypted traffic according to your corporate IT strategy and planning.
Unified Network-wide Management of all Clients
Athena SWG provides Unified Management and effectively controls both Wired and Wireless networks for the entire network. With intuitive and flexible authentication methods, it fully guarantees the security of access control, supporting a variety of traditional authentication methods such as username/password, IP/MAC binding, and a wide array of value-added marketing authentication methods (QR code, SMS, WeChat, Social media, OA account, SAML 2.0, third-party system, etc.). Permissions are controlled based on user, application, location, and client types while using Athena SWG or third-party wireless controller as a unified authentication server, building a faster and more cost-effective wireless network.
Precise and Accurate Application Control
Athena SWG manages and controls network applications more comprehensively, accurately, and conveniently with the largest application signature database in Asia, which can identify more than 6,000+ applications in its database including 700+ cloud applications, 1,000+ mobile applications, 300+ web applications, and is updated every 2 weeks. In addition, it precisely controls applications according to their specific functions, such as distinguishing upload, download, and other actions in the network. Finally, bulk management mode for large enterprises greatly improves management efficiency.
Offloading Performance When Using ICAP Integration With Third Party System
Athena SWG can act as an ICAP client to be used with any ICAP server-enabled network appliance by offloading threat protection or other value-added services. In addition, Athena SWG provides request and response inspection mode while enabling the ICAP server group to run on a round-robin or concurrent condition.
Secure Onboarding Devices With Endpoint Security Posture
Athena SWG identifies and secure endpoint devices with or without agents, it helps to ensure these devices are connected with compliant and secure. You gain visibility and control what is on your environment without impacting your network performance.
Proxy Avoidance Protection
Web filters are commonly used by the organization to restrict user internet access to certain web applications content and it has increasingly become non-effective against proxy avoidance applications. Athena SWG collaborates with Athena EPP to enforce Proxy Avoidance Protection on any user attempt to use this application for bypassing the security perimeter more effectively. R&D team within Sangfor employs a dedicated team of application signatures security experts who are continuously categorizing and adding the latest proxy avoidance applications to ensure that detection rate and blocking capabilities are current and up to date.
Intelligent Traffic Management
Athena SWG improves bandwidth utilization by more than 30% using three unique major traffic management solutions. Dynamic Traffic Control automatically adjusts traffic control policies and intelligently allocates idle bandwidth resources. Intelligent Flow Control precisely manages both up-link and down-link P2P traffic and can customize traffic "packages" for different users, allocating specific traffic quotas and limiting bandwidth for heavier users.
Gateway and Client Decryption to Uncover Encrypted Traffic
Typically, a majority of internet traffic is protected by SSL/TLS encryption. While encryption helps to keep user and corporate data protected and private, it also creates security challenges when it comes to the rapid growth of malware infections and other malicious content. Athena SWG offers both decryption methods including gateway and client decryption to overcome these challenges. This enables an organization to have the flexibility to run either one or both in parallel to uncover encrypted traffic according to your corporate IT strategy and planning.
Unified Network-wide Management of all Clients
Athena SWG provides Unified Management and effectively controls both Wired and Wireless networks for the entire network. With intuitive and flexible authentication methods, it fully guarantees the security of access control, supporting a variety of traditional authentication methods such as username/password, IP/MAC binding, and a wide array of value-added marketing authentication methods (QR code, SMS, WeChat, Social media, OA account, SAML 2.0, third-party system, etc.). Permissions are controlled based on user, application, location, and client types while using Athena SWG or third-party wireless controller as a unified authentication server, building a faster and more cost-effective wireless network.
Precise and Accurate Application Control
Athena SWG manages and controls network applications more comprehensively, accurately, and conveniently with the largest application signature database in Asia, which can identify more than 6,000+ applications in its database including 700+ cloud applications, 1,000+ mobile applications, 300+ web applications, and is updated every 2 weeks. In addition, it precisely controls applications according to their specific functions, such as distinguishing upload, download, and other actions in the network. Finally, bulk management mode for large enterprises greatly improves management efficiency.
Offloading Performance When Using ICAP Integration With Third Party System
Athena SWG can act as an ICAP client to be used with any ICAP server-enabled network appliance by offloading threat protection or other value-added services. In addition, Athena SWG provides request and response inspection mode while enabling the ICAP server group to run on a round-robin or concurrent condition.
Secure Onboarding Devices With Endpoint Security Posture
Athena SWG identifies and secure endpoint devices with or without agents, it helps to ensure these devices are connected with compliant and secure. You gain visibility and control what is on your environment without impacting your network performance.
| Models | M5100 | M5200 | M5400 | M5500 | M5600 |
|---|---|---|---|---|---|
| Profile | 1U | 1U | 1U | 1U | 1U |
| HD Capacity | 256 GB SSD | 128 GB SSD + 960 GB SSD | 128 GB SSD + 960 GB SSD | 128 GB SSD + 960 GB SSD | 128 GB SSD + 960 GB SSD |
| Application Layer Throughput Options | 160 Mbps | 400 Mbps | 600 Mbps | 1 Gbps | 1.2 Gbps |
| Recommended Concurrent Users | 600 Users | 2,000 Users | 3,000 Users | 5,000 Users | 6,000 Users |
Model Datasheets | |||||
| Click to Download |  | | | | |
| Models | M6000 | M6000-UPG¹ | M9000 | M10000 | M12000 | M14000 |
|---|---|---|---|---|---|---|
| Profile | 2U | 2U | 2U | 2U | 2U | 2U |
| HD Capacity | 128 GB SSD + 960 GB SSD | 128 GB SSD + 960 GB SSD | 480 GB SSD + 960 GB SSD | 480 GB SSD + 960 GB SSD | 480 GB SSD + 960 GB SSD | 480 GB SSD + 1.92 TB SSD |
| Application Layer Throughput Options | 2 Gbps | 4 Gbps | 10 Gbps | 20 Gbps | 40 Gbps | 60 Gbps (Bypass) / 50Gbps (Bridge) |
| Recommended Concurrent Users | 15,000 Users | 20,000 Users | 50,000 Users | 100,000 Users | 200,000 Users | 200,000 Users |
Model Datasheets | ||||||
| Click to Download | | | | | | |
| Models | M5500-SK | M5800-SK | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Profile | 1U | 1U | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| HD Capacity | 128 GB MSATA | 128 GB MSATA + 480 GB SSD | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Application Layer Throughput Options | 750 Mbps | 1.5 Gbps | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Recommended Concurrent Users | 1,000 Users | 2,000 Users | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Model Datasheets | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Click to Download | | | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
¹ M6000-UPG is a license upgrade from M6000 with application layer bandwidth increased from 1G to 2G.
Partner Success with Sangfor: Global Sapphire's Growth Partnership & Development
Partner Success with Sangfor: Global Sapphire's Growth Partnership & Development
Customer Success with Sangfor: EBM Enhances IT Infrastructure and Support
Unveiling IT Transformation at PT. CJ Indonesia | Sangfor Tech Talk
Innovation and Success: Sangfor x Universitas Pelita Harapan's Story
Interview with IBA Karachi's Head of ICT Wajeeh Zaidi - Customer Testimonial
Interview with Shahid Khan Jadoon, Manager IT | National Information Technology Board NITB, Pakistan
Ramsay Sime Darby Healthcare x Sangfor: Success Story
PT Bank Victoria International Tbk x Sangfor: Success Story
Athena SWG Use Cases
Without Athena SWG the office environment is comparable to an internet cafe where users and staff can freely access video, social media, and endless entertainment. IT administrators are hard-pressed to identify exactly which users are consuming excess bandwidth, preventing effective control over user browsing behavior. Athena SWG can identify and control non-work-related applications in the network while allowing companies to keep a close eye on their bandwidth management, whereby they allocate all available bandwidth for key business needs, and improving business efficiency and productivity. Numerous professional traffic management features allow Athena SWG to rationally allocate bandwidth resources and maximize bandwidth usage. For organizations with multiple branches, Athena SWG provides a unified management platform and supports 3G link backup, making network management more efficient and reliable.
Because customers have vastly different authentication procedures, each internal network requires user authentication integration with AD, Radius to achieve SSO. Athena SWG guest authentication provides convenient access through Facebook, WeChat, SMS and offers a unified authentication solution, which manages both the wired and wireless connected users within a single SWG platform. Athena SWG also offers a switch based user access control capability to help control LAN user access. Finally, Sangfor IAG can be integrated with WLAN vendors like Cisco, Aruba to allow the Unified Authentication Center to drastically simplify the process of network integration and management.
To protect the user from web threats, a secure web gateway is an effective defense over web-based threats and enabling secure internet access. Athena SWG can work with your on-premise applications and internet traffic. With the accelerated SSL decryption performance, all HTTP and HTTPS traffic will be monitored and analyzed with Athena SWG, which is the huge bottleneck of other solutions like NGFW or UTM. The AI-based threat intelligence platform provides web filtering services and improves the capability of identifying known and unknown threats. It also keeps users protected while ensuring they enjoy a safe and secure web experience.
As unauthorized use of networks becomes more common, many countries and regions are developing and enforcing laws governing user internet access behavior. The Athena SWG internal application database comprehensively logs malicious user activity including file uploads, BBS posting, email, browsing history, and applications accessed. This audit solution assists in customer compliance with local legal regulations and serves as a valuable investigative resource in the event of illegal network usage incidents.
Secure Internet Gateway Frequently Asked Questions
Please perform it following:
- Step 1. Add a new LDAP Server under the External Auth Server.
- Step 2. Enter the details such as Server Name, IP Address of the external authentication server, the admin account username and password and select the BaseDN. After entered all the details, click the Test Validity to check whether able to connect the external authentication server or not.
- Step 3. After tested the validity, a message will prompt out to show the result.
- Step 4. Click the Sync with all LDAP servers to sync all the data. Now, the configuration is successfully set.
In a typical environment, Secure Web Gateway (SWG) is used to block access to inappropriate websites or applications, prevent malware infections, and enforce corporate internet compliance. SWG is similar to a firewall in that both prevent malicious activities and provide necessary network security protections. However, the main difference is that SWG emphasizes securing user onboarding and promoting productivity. It is common for an enterprise to use both SWG and firewall to fortify their defense as both of them usually complement each other. For more info on using both Athena SWG and Athena NGFW, please refer to this blog webpage.
The main difference is Premium Bundle will have all the Essential Bundle components with the addition of Anti-malware protection (Engine Zero) and threat intelligence (Neural-X).
Latest Events
Live Event
Sangfor International Roadshow 2025 – Lahore, Pakistan
We’re delighted to announce that the Sangfor Technologies Pakistan team successfully wrapped up the Sangfor International Roadshow on July 10th in Lahore, marking a perfect conclusion to our 2025 Global Tour.
Date
:
10 Jul 2025
Live Event
Sangfor International Roadshow 2025 – Vietnam
What an Unforgettable Day in Ho Chi Minh City! The Sangfor International Roadshow 2025 made its dynamic stop in Vietnam on June 27th, concluding our APAC tour with a spectacular showcase of innovation.
Date
:
27 Jun 2025
Live Event
Sangfor International Roadshow 2025 – Thailand
Sangfor's Bangkok Roadshow united 400+ attendees for a day of tech insights, cybersecurity trends, and cloud innovation under "Digital Plus | IT Minus".
Date
:
19 Jun 2025
Latest Blog
Cyber Security
Sangfor Athena EPP vs. Sophos Intercept X Endpoint: Endpoint Security Comparison for 2025
Compare Sangfor Athena EPP and Sophos Intercept X for 2025. Explore ransomware defense, EDR, licensing, integration, and deployment flexibility.
Date
:
16 Jul 2025
Cyber Security
Sangfor vs Sophos: Enterprise Firewall Comparison for 2025
Compare Sangfor Athena NGFW and Sophos firewalls in 2025. See differences in features, security, support, and model mapping to choose the right solution.
Date
:
08 Jul 2025
Cyber Security
AI-Powered Cyber Threats: From Zero-Day Exploits to Deepfakes and Beyond
Explore how AI is fueling next-gen cyberattacks—from zero-day exploits to deepfake scams—and how organizations can build resilience against intelligent threats.
Date
:
03 Jul 2025
Latest News
News
Sangfor Technologies Receives Frost & Sullivan’s 2025 Asia-Pacific Competitive Strategy Leadership Recognition in Cybersecurity Services
Sangfor Technologies earns the 2025 Asia-Pacific Competitive Strategy Leadership Award from Frost & Sullivan for excellence in cybersecurity services.
Date
:
22 Jul 2025
Press Release
Sangfor Technologies Strengthens Athena MDR with New UAE Point of Presence to Support Regional Cyber Resilience
Sangfor Technologies unveils a new UAE Point of Presence for Athena MDR, advancing regional cyber resilience and supporting digital transformation.
Date
:
07 Jul 2025
Press Release
Sangfor Technologies Unveils Sangfor Athena: A Bold New Brand for Its Cybersecurity Business
Sangfor Athena unifies advanced security solutions under one brand, powered by SynergyAI for proactive cyber defense. Discover intelligent, integrated protection today!
Date
:
18 Jun 2025