This site uses cookies to enhance your experience. By continuing to visit this website, you consent to the use of these cookies. Click here to learn more about our privacy policy.

Sangfor NGAF - Next Generation Firewall

The World's First Security Solution

NGFW + WAF with Full Security Coverage

Introduction
Features & Capabilities
Use Cases
Product Models
Success Stories
Videos
Downloads
Contact Us

Sangfor NGAF Next-Generation Firewall

The NGFW that Eliminates 99% of Malware at the Perimeter

Sangfor NGAF is the world's first AI-enabled NGFW Next Generation Firewall, fully integrated with WAF (Web Application Firewall) and Endpoint Secure (Next-Generation Endpoint Security), providing all-around protection from all threats and powered by the malware detection and protection of Neural-X and Engine Zero.

Sangfor NGAF Enterprise Hardware Firewall is an easy-to-use, converged security solution designed to protect organizations from internal, external, existing, and future threats. In addition, NGAF databases are proactively updated regularly to keep your network safe from new, unknown, and zero-day attacks.

Click Here to Watch the Video

Why Sangfor NGAF Firewall

Sangfor NGFW is Nothing Less than No.1 as IT Security Protection

"Excellent Sangfor NGFW equipment and the vendor support is outstanding especially during the Covid-19 Pandemic period where users work at home using the integrated SSL VPN connection & fully protected by Neural-X & Engine Zero."

Source: Gartner Peer Insights Reviews

contact sangfor FIREWALL TEAM FOR business inquiries

Features and Capabilities

Endpoint Secure: The Industry’s First All-in-One Endpoint Security Management on Firewall

Sangfor NGAF Network Firewall offers the world’s first native integrated endpoint security with Endpoint Secure, providing simplified management through a Firewall GUI dashboard to help small to mid-size enterprises (10-300 employees) simplify network & endpoint security operations with a single pane of glass management.

Integrated NGAF & Endpoint Secure go beyond traditional anti-virus and EDR to provide:

More advanced malware protection against all malicious files, known, unknown, or zero-day
60% cost savings versus EDR deployment (based on 300 agent annual price)
40% faster deployment with security event correlation & response

Engine Zero: Cutting Edge AI-Powered Malware Protection

AV-TEST determined that approximately 370,000 new malware variants are deployed daily. Traditional detection technologies, primarily focused on MD5, virus signatures, rule matching, virtual execution, and sandboxing are becoming increasingly ineffective at protecting against new malware and it’s ever-changing, unique signatures.
NGAF in conjunction with Sangfor AI-powered Engine Zero, provide powerful and intelligent malware detection capabilities.
Sangfor’s R&D, Security team, and white hat researchers designed Engine Zero to utilizes machine learning technology to analyze and synthesize input data. Engine Zero’s unique, multi-dimensional features are able to detect and classify malicious files, sight unseen, and allow Sangfor NGAF to deliver 99.76% detection of known and unknown malware.

Simplified Security Operation & Maintenance

Sangfor believes IT should be reliable and simple, with easy deployment and O&M as the keys to an effective & productive IT environment.

Many small & medium-sized organizations without a specialized IT security team and using traditional hardware firewall as a security solutions without intelligent & automated reporting tools find managing network security especially complex. Searching and analyzing thousands of alerts to identify individual issues creates a high potential for human error and a waste of time and resources.

Sangfor NGAF uses an intuitive configuration wizard to make security policy deployment and modification simple and fast. High visibility and real-time detection features provide IT teams the ability to determine the security status of the network before the system even goes online, ensuring that no vulnerabilities exist in the network.

Use Cases

01 / 00

Internet Gateway: Advanced Threat Prevention with Visible Reporting

The Sangfor NGAF Network Firewall Appliance has combined deep content inspection and attack behavior analysis technologies to go a step beyond traditional hardware firewall appliances. Graphical reporting tools (free-of-charge) help IT professionals identify business risks and take immediate action to mitigate damage. Sangfor NGAF also effectively detects advanced threats with built-in network security features like the Neural-X family.

DMZ: One-Stop Security Solution for Web Applications

This solution protects user's public-facing applications against various types of network & application layer threats and resolves the issues of web-page tampering, Trojans and information leakage, even if defenses are bypassed. Sangfor NGAF Network Firewall goes beyond traditional Enterprise Firewall protection solutions to provide more comprehensive protection against most types of web attacks and effectively secure web business applications.

Branch Benefits: Visual, Controllable & Manageable Distributed Enterprise Networking

Branches are no longer the weak link in the security chain with their notoriously poor security construction. Sangfor Platform-X, a cloud-based SOC (Security Operation Center) helps truly realize centralized management and automatic operation and maintenance for branches through enhanced security protection capabilities for your WAN and helping to identify branch security risks in real-time.

2nd-Tier Firewall: Enterprise Firewall Protection & Attack Prevention

Continuously evolving cyber threats drive the evolution of security devices and the creation of new security infrastructure, as threats are increasingly able to evade traditional defenses. Malicious software, having bypassed the defense perimeter, can take advantage of a flat internal network to cause serious infection, data theft, or even APT attacks. To mitigate business risk from cyber threats, Sangfor NGAF employs an additional defensive layer to the perimeter firewall, providing total threat protection, risk mitigation capability, easy deployment and cost-effectiveness.

NGAF Firewall Product Models

Models	AF-1000-B1080*	AF-1000-B1120*	M4500	M5100	M5150	M5200	M5250	M5300	M5400
Profile	Desktop	1U	Desktop	1U	1U	1U	1U	1U	1U
Firewall Throughput (1)	1.05 Gbps	1.75 Gbps	2 Gbps	2.8 Gbps	3.5 Gbps	4.9 Gbps	5.5 Gbps	12 Gbps	20 Gbps
IPS + WAF Throughput	N/A	700 Mbps	1.2 Gbps	1.4 Gbps	1.4 Gbps	2.1 Gbps	2.1 Gbps	3.85 Gbps	5.6 Gbps
Threat Protection Throughput (3)	600 Mbps	800 Mbps	1 Gbps	1.8 Gbps	1.8 Gbps	2.1 Gbps	2.1 Gbps	4.2 Gbps	5.6 Gbps
NGFW Throughput (2)	800 Mbps	1 Gbps	1.4 Gbps	2.5 Gbps	2.5 Gbps	2.8 Gbps	2.8 Gbps	5 Gbps	8.4 Gbps
IPsec VPN Throughput	100 Mbps	100 Mbps	250 Mbps	250 Mbps	250 Mbps	375 Mbps	375 Mbps	1 Gbps	1.25 Gbps
Max IPsec VPN Tunnels	100	100	300	300	300	500	500	1000	1500
Concurrent Connections (TCP)	800,000	800,000	250,000	750,000	1,000,000	1,200,000	1,800,000	2,000,000	2,500,000
New Connections (TCP)	15,000	18,000	10,000	20,000	25,000	30,000	50,000	80,000	110,000
Power and Hardware Specifications
Support Dual Power Supplies	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A	N/A
Power [Watt] Max	60W	40W	60W	60W	40W	40W	40W	60W	150W
Model Datasheets
Click to Download	N/A	N/A

1. 1518 Bytes UDP Packets.

2. NGFW is measured with Firewall, Bandwidth Management, IPS, Application Control.

3. Threat prevention is measured with Firewall, Bandwidth Management IPS, Application Control, Anti Virus.

Models	M5500	M5600	M5800	M5900	M6000	AF-2000-B3100*	AF-2000-B3200*	AF-2000-B3300*
Profile	2U	2U	2U	2U	2U	2U	2U	2U
Firewall Throughput (1)	25 Gbps	50 Gbps	67 Gpbs	105 Gbps	140 Gbps	140 Gbps	180 Gbps	240 Gbps
IPS + WAF Throughput	8.4 Gbps	14 Gbps	21 Gbps	42 Gbps	56 Gbps	63 Gbps	84 Gbps	126 Gbps
Threat Protection Throughput (3)	9.1 Gbps	18 Gbps	26.5 Gbps	50.4 Gbps	67.2 Gbps	79.4 Gbps	91.2 Gbps	105 Gbps
NGFW Throughput (2)	12.6 Gbps	23 Gbps	31 Gbps	56 Gbps	84 Gbps	90 Gbps	120 Gbps	140 Gbps
IPsec VPN Throughput	2 Gbps	3 Gbps	3.75 Gbps	5 Gbps	5 Gbps	7 Gbps	10 Gbps	15 Gbps
Max IPsec VPN Tunnels	3,000	4,000	5,000	10,000	10,000	15,000	20,000	30,000
Concurrent Connections (TCP)	3,000,000	4,000,000	8,000,000	12,000,000	16,000,000	20,000,000	32,000,000	35,000,000
New Connections (TCP)	220,000	300,000	330,000	450,000	600,000	650,000	800,000	900,000
Power and Hardware Specifications
Support Dual Power Supplies	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Power [Watt] Max	150W	150W	150W	500W	500W	860W	860W	860W
Model Datasheets
Click to Download						N/A	N/A	N/A