This site uses cookies to enhance your experience. By continuing to visit this website, you consent to the use of these cookies. Click here to learn more about our privacy policy.

Sangfor NGAF - Next Generation Firewall

The World First Fully Integrated NGFW + NGWAF
+ Security Visibility

Introduction
Features & Capabilities
Use Cases
Product Models
Success Stories
Videos
Downloads
Contact Us

Sangfor NGAF Next-Generation Firewall meets all your firewall security needs

Sangfor’s Next-Generation Firewall eliminates 99% of malware at the perimeter

Sangfor’s Next Generation Firewall (NGFW) is a network firewall security device designed to filter and inspect network and application traffic for threats, secure the network environment from intrusion, and bring in security intelligence from outside the network. Sangfor NGAF is a truly secure, integrated and simplified solution, providing a holistic view of the entire organizational security network, with ease of operation & maintenance for administration.

NGAF is the world's first AI-enabled Next-Generation Firewall, fully integrated with NGWAF (Web Application Firewall) and Endpoint Secure (Next-Generation Endpoint Security), providing all-around protection from all threats and powered by the malware detection and protection of Neural-X and Engine Zero.

Sangfor NGAF Enterprise Hardware Firewall is easy-to-use, and converged security solution designed to protect organizations from internal, external, existing, and future threats. NGAF databases are automaticlly updated regularly to keep your network safe from new, unknown, and zero-day attacks.

Sangfor NGAF is available both in hardware and software (virtual) form, which works with Sangfor HCI & VMware ESXi.

Click Here to Watch the Video

Why do enterprises choose Sangfor NGAF?

Hardware Firewall for Enterprise Security

NGAF software firewall, hardware firewall, or virtual firewall, take the stress out of network security, allowing administrators to focus on making your business profitable. NGFWs’ excellent performance, stable operation, intrusion prevention functions, integration with security devices and reporting functions, make it the solution of choice for companies that require best-in-class security.
Software Firewall for Best-in Class Visibility

Sangfor NGAF network firewall security is equipped with an AI-powered, automated threat detection mechanism, which automatically identifies internal server issues, open ports, existing vulnerabilities, weak passwords and any other existing risks to the servers. Sangfor’s Next Generation hardware firewall is known globally for its convenience, risk identification capabilities, and easy operation and maintenance.
Protection from all Cyber Threats

Sangfor NGAF is a best-in-class hardware firewall that detects and prevents a variety of malicious network attacks and virus invasions. Detection and prevention of ransomware attacks is achieved by monitoring all traffic, access logs and deploying traceability functions, to provide better visibility and control for your security team. Sangfor’s next-generation firewall effectively deals with vulnerability scanning, SQL injection attacks, website defacement, brute force attacks and even weak passwords, quickly identifying and interpreting high-risk user behavior.
Easy Deployment of Network Firewall

Sangfor’s professional service team use their vast technical knowledge to assist with hardware firewall deployment or virtual software firewall migration. After installation, Sangfor’s Security Team will use NGAF to perform ransomware attack mockup drills, followed by troubleshooting and network optimization training, and finally, the integration of Sangfor next generation firewall with other security solutions like Endpoint Secure for endpoint security management, and Engine Zero for malware protection.

Why Sangfor Next-Generation Firewall?

Sangfor NGFW is nothing less than No.1 in IT security protection!

""Excellent Sangfor NGFW equipment and the vendor support is outstanding especially during the Covid-19 Pandemic period where users work at home using the integrated SSL VPN connection & fully protected by Neural-X & Engine Zero." "

NGAF Software Firewall Customer Reviews Gartner

Source: Gartner Peer Insights Reviews

contact sangfor FIREWALL TEAM FOR business inquiries

NGFW Features and Capabilities

Endpoint Secure: All-in-One Endpoint Security Management

Sangfor NGAF Network Firewall offers the world’s first native, integrated endpoint security with Endpoint Secure, providing simplified management through a firewall GUI dashboard, to help small to mid-size enterprises (10-300 employees) simplify network & endpoint security operations, with single-pane-of-glass management.

Integrated NGAF & Endpoint Secure go beyond traditional anti-virus and EDR to provide:

More advanced malware protection against all malicious files, known, unknown, or zero-day
60% cost savings versus EDR deployment (based on 300 agent annual price)
40% faster deployment with security event correlation & response

Engine Zero: Cutting-Edge AI-Powered Malware Protection

Approximately 370,000 new malware variants are deployed daily. Traditional detection technology, primarily focused on MD5, virus signatures, rule matching, virtual execution, and sandboxing, are becoming increasingly ineffective at protecting enterprise from new malware and it’s ever-changing, unique signatures.
NGAF, in conjunction with Sangfor AI-powered Engine Zero, provides powerful and intelligent malware detection capabilities.
Sangfor’s R&D, Security Team, and white hat researchers designed Engine Zero to utilize machine learning technology to analyze and synthesize input data. Engine Zero’s unique, multi-dimensional features detect and classify malicious 54files, sight unseen, and allow Sangfor NGAF to deliver 99.76% detection of known and unknown malware.

Simplified Security Operation & Maintenance

Sangfor believes IT should be reliable and simple, with easy deployment and O&M as the keys to an effective and productive IT environment.

Small and medium-sized organizations without a specialized IT security team, using traditional hardware firewall without intelligent & automated reporting tools, find managing network security especially complex. Searching and analyzing thousands of alerts to identify individual issues creates a high potential for human error, and is often a waste of time and resources.

Sangfor NGAF uses an intuitive configuration wizard to make security policy deployment and modification simple and fast. High visibility and real-time detection features provide IT teams with the ability to determine the network security status before the system even goes online, ensuring that no vulnerabilities exist in the network.

NGAF Use Cases

01 / 00

Internet Gateway: Advanced Threat Prevention with Visible Reporting

Sangfor NGAF Network Firewall Security has both deep content inspection and attack behavior analysis technologies, going a step beyond traditional hardware firewall appliances. Graphical reporting tools (free-of-charge) help IT professionals identify business risks, and take immediate action to mitigate damage. Sangfor NGAF also effectively detects advanced threat, with built-in network security features like Neural-X.

DMZ: One-Stop Security Solution for Web Applications

This solution protects user's public-facing applications against various types of network & application layer threats and resolves the issues of web-page tampering, Trojans and information leakage, even if defenses are bypassed. Sangfor NGAF Network Firewall goes beyond traditional Enterprise Firewall protection solutions to provide more comprehensive protection against most types of web attacks and effectively secure web business applications.

Secure SD-WAN: Visual, Controllable & Manageable Distributed Enterprise Networking

Branches are no longer the weak link in the security chain with their notoriously poor security construction. Sangfor Platform-X, a cloud-based SOC (Security Operation Center) helps truly realize centralized management and automatic operation and maintenance for branches through enhanced security protection capabilities for your WAN and helping to identify branch security risks in real-time.

2nd-Tier Firewall: Enterprise Firewall Protection & Attack Prevention

Continuously evolving cyber threats drive the evolution of security devices and the creation of new security infrastructure, as threats are increasingly able to evade traditional defenses. Malicious software, having bypassed the defense perimeter, can take advantage of a flat internal network to cause serious infection, data theft, or even APT attacks. To mitigate business risk from cyber threats, Sangfor NGAF employs an additional defensive layer to the perimeter firewall, providing total threat protection, risk mitigation capability, easy deployment and cost-effectiveness.

NGAF Firewall Product Models

Models	AF-1000-B1080*	AF-1000-B1120*	M4500	M5100	M5150	M5200	M5250	M5300	M5400
Profile	Desktop	1U	Desktop	1U	1U	1U	1U	1U	1U
Firewall Throughput (1)	1.05 Gbps	1.75 Gbps	2 Gbps	2.8 Gbps	3.5 Gbps	4.9 Gbps	5.5 Gbps	12 Gbps	20 Gbps
IPS + WAF Throughput	N/A	700 Mbps	1.2 Gbps	1.4 Gbps	1.4 Gbps	2.1 Gbps	2.1 Gbps	3.85 Gbps	5.6 Gbps
Threat Protection Throughput (3)	600 Mbps	800 Mbps	1 Gbps	1.8 Gbps	1.8 Gbps	2.1 Gbps	2.1 Gbps	4.2 Gbps	5.6 Gbps
NGFW Throughput (2)	800 Mbps	1 Gbps	1.4 Gbps	2.5 Gbps	2.5 Gbps	2.8 Gbps	2.8 Gbps	5 Gbps	8.4 Gbps
IPsec VPN Throughput	100 Mbps	100 Mbps	250 Mbps	250 Mbps	250 Mbps	375 Mbps	375 Mbps	1 Gbps	1.25 Gbps
Max IPsec VPN Tunnels	100	100	300	300	300	500	500	1000	1500
Concurrent Connections (TCP)	800,000	800,000	250,000	750,000	1,000,000	1,200,000	1,800,000	2,000,000	2,500,000
New Connections (TCP)	15,000	18,000	10,000	20,000	25,000	30,000	50,000	80,000	110,000
Power and Hardware Specifications
Support Dual Power Supplies	N/A	N/A	N/A	N/A	N/A	N/A	N/A	Customizable	Customizable
Power [Watt] Max	60W	40W	60W	60W	40W	40W	40W	60W	150W
Model Datasheets
Click to Download	N/A	N/A

1. 1518 Bytes UDP Packets.

2. NGFW is measured with Firewall, Bandwidth Management, IPS, Application Control.

3. Threat prevention is measured with Firewall, Bandwidth Management IPS, Application Control, Anti Virus.

Models	M5500	M5600	M5800	M5900	M6000	AF-2000-B3100*	AF-2000-B3200*	AF-2000-B3300*
Profile	2U	2U	2U	2U	2U	2U	2U	2U
Firewall Throughput (1)	25 Gbps	50 Gbps	67 Gpbs	105 Gbps	140 Gbps	140 Gbps	180 Gbps	240 Gbps
IPS + WAF Throughput	8.4 Gbps	14 Gbps	21 Gbps	42 Gbps	56 Gbps	63 Gbps	84 Gbps	126 Gbps
Threat Protection Throughput (3)	9.1 Gbps	18 Gbps	26.5 Gbps	50.4 Gbps	67.2 Gbps	79.4 Gbps	91.2 Gbps	105 Gbps
NGFW Throughput (2)	12.6 Gbps	23 Gbps	31 Gbps	56 Gbps	84 Gbps	90 Gbps	120 Gbps	140 Gbps
IPsec VPN Throughput	2 Gbps	3 Gbps	3.75 Gbps	5 Gbps	5 Gbps	7 Gbps	10 Gbps	15 Gbps
Max IPsec VPN Tunnels	3,000	4,000	5,000	10,000	10,000	15,000	20,000	30,000
Concurrent Connections (TCP)	3,000,000	4,000,000	8,000,000	12,000,000	16,000,000	20,000,000	32,000,000	35,000,000
New Connections (TCP)	220,000	300,000	330,000	450,000	600,000	650,000	800,000	900,000
Power and Hardware Specifications
Support Dual Power Supplies	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Power [Watt] Max	150W	150W	150W	760W	760W	860W	860W	860W
Model Datasheets
Click to Download						N/A	N/A	N/A