SANGFOR NGAF

M5200-F-I

Sangfor Next Generation Application Firewall is the world first fully integrated
NGFW + NGWAF with pre-event, during-event and post-event defense for all
business assets.

A truly integrated firewall solution, providing holistic overview of the entire

organization security network, with ease of management for administration,
operation and maintenance.

NGAF-5200 is the ideal Converged Security solution for Small & Medium
Enterprises. It is also ideal for Branch Deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity NGAF M5200-F-I Hardware Specifications NGAF M5200-F-I

1
Generation # 2 RAM 4GB
Dimension 1U Storage HD Capacity 64G SSD
2,3
Firewall Throughput 4.9Gbps Power [Watt] Max 40W
2,4
NGFW Throughput 2.8Gbps Operating Temperature 0°C ~ 45°C
2
WAF Throughput 2.8Gbps Humidity 5% ~ 90% non-condensing
2
IPS & WAF Throughput 2.1Gbps System Weight 3.85 Kg

Threat Protection Throughput 2,5 2.1Gbps System Dimensions (L x W x H, mm) 300 x 430 x 45
2
IPSec VPN Throughput 375Mbps

Max IPSec VPN Tunnels 500 Network Interfaces NGAF M5200-F-I

Concurrent Connections (TCP) 1,200,000 Bypass (Copper) 1 pair
New Connections (TCP) 30,000 10/100/1000 Base-T 6

Dual Power Supply N/A SFP N/A

10G Fiber SFP+ N/A

Compliance NGAF M5200-F-I Network Modules (Total/Available) 1/1

Certifications CE, FCC Per network module can add one of

the NIC card below:
1. Generation #2 of M5200-F-I accepts orders from June 2022. This new generation of hardware brings changes, 1). 2 x GE RJ45 6). 8 x GE SFP
including better performance, flexible interface options, and better stability.
Optional Interface
6 2). 2 x GE SFP 7). 2 x GE RJ45
2. All throughput performance data is measured in the laboratory environment. The real-world performance may 3). 4 x GE RJ45 & 2 x GE SFP
vary depending on the configuration & network environment. 4). 4 x GE SFP 8). 4 x GE RJ45
3. Firewall Throughput is measured with 1518 Bytes UDP packets. 5). 8 x GE RJ45 & 4 x GE SFP
4. NGFW Throughput is measured with Firewall, Application Control, Bandwidth Management and IPS enabled.
5. Threat Prevention Throughput is measured with Firewall, Application Control, Bandwidth Management, IPS and Serial Port 1 x RJ45
Anti-Virus enabled.
6. If you need the optional NIC card not listed, please consult with Sangfor local sales representatives. USB Port 2

Deployment Modes

1st-Tier Firewall 1st-Tier Firewall

Internet Internet Internet Internet

2nd-Tier
SANGFOR NGAF Firewall SANGFOR NGAF SANGFOR NGAF DMZ Network

Office Network Server Zone Office Network Server Zone Office Network Server Zone

End-to-End Protection Double Security (2nd-Tier Firewall) DMZ Protection

- End-to-end protection from endpoint to business system - Double protection which complement existing firewall - Dedicated business system protection for advance
- Total visibility of the entire organization security status security policies to ensure full protection protection, without impacting other networks
- Provides High Availability features with Multi-line HA - Providing regulatory compliance - Providing regulatory compliance
and Load Balancing - Simplified deployment, reducing downtime - Simplified deployment, reducing downtime
- Proactive early detection and prevention at the - Provides flexibility of security design and security - Minimize operation and maintenance works to monitor
gateway to prevent attacks from reaching the network policies for different business requirements and troubleshoot security incidents

[email protected] Make Your Digital Transformation

SANGFOR TECHNOLOGIES INC.
www.sangfor.com Simpler and Secure
 Key Features Software Features

1 Lower TCO Converged Security Solutions Networking

01
Interface: Physical Interface, Sub Interface, VLAN Interface, Aggregated
Fully converged security solution from endpoint to business systems, without the
needs of manual integration & consolidation of each feature, as well as additional Interface
hardware, which results in lower operational and maintenance costs. Routing: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability
2 Comprehensive Business Systems Protection
Access Control
02
Comprehensive business systems protection with built-in Web Application Firewall and User: Import / export from external server
Vulnerability Scanners, which is critical for internal systems as well as "internet-facing" Authentication: SSO/LDAP/RADIUS
systems. Business systems protection is easily enabled via advanced license, without any
Application: ACL and application rules
integration or additional appliance required.
URL Filter: Supported
3 User Friendly VPN
03
SANGFOR VPN, IPSEC VPN and SSL VPN supported
A single simplified operation & maintenance with interactive GUI, which provides ease of
configuration, maintenance, troubleshooting and reporting for IT managers, administrators SDWAN auto path selection
and operations team.
Management
04
SNMP v1, v2c, v3
Security Features Syslog
Real-Time Vulnerability Scanner
1 Converged Security 2 Comprehensive WAF Central management

Integrated L2–L7 Security features:  Web Application Firewall (WAF) Hardware Description
 DoS/DDoS: Inbound, Outbound, Attack Protection  Semantic Engine 3
 Content Security 8 21 4
 Support OWASP Top 10 WAF
 IPS requirements
 Anti-virus  Recommended by NSS
 Engine Zero: AI based anti-malware, anti-virus
 APT 5
 WAF
 Data Leakage Prevention
 Bandwidth Management
 Real-Time Vulnerability Scanner 7 6
 Security Reporter
1. USB ports 4. Management Interface 7. Fan Trays
 Neural-X: Cloud threat intelligence and analytics
2. Console Interface 5. Power outlet 8. LED Indicators
3. Line Interface 6. Switch
All Pictures shown are for illustration purpose only. Actual Product may vary.

NGAF M5200-F-I Ordering Guide

* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription

SKU Description

M5200-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
ESS-52-1/2/3/5Y Visibility, Basic Security Reporter)
M5200-F-I, Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
PM-52-1/2/3/5Y Visibility, Basic Security Reporter, Engine Zero, Neural-X)
M5200-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
ULT-52-1/2/3/5Y Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)

“A La Carte” Subscription License

SKU Description

FNX52-1/2/3/5Y M5200-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ52-1/2/3/5Y M5200-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

M5200-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
WAFL52-1/2/3/5Y Advanced Security Reporter

Hardware Support Services

SKU Description

STS52-1/2/3/5Y M5200-F-I, NGAF Software Upgrade, 24*7 Technical Support Services

HRTF52-1/2/3/5Y M5200-F-I, NGAF,Return to Factory (5 Business days ship after receipt)
HSDS-52-1/2/3/5Y M5200-F-I, NGAF, SDS Hardware Service
HNBD-52-1/2/3/5Y M5200-F-I, NGAF, NBD Hardware Service
H244G-52-1/2/3/5Y M5200-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative. NGAF_DS_P_NGAF52-Datasheet_20220530

[email protected] Make Your Digital Transformation

SANGFOR TECHNOLOGIES INC.
www.sangfor.com Simpler and Secure