Detail Product

Sangfor Network Secure


Smarter AI-Powered Defense


Smarter AI-Powered Defense

Sangfor Network Secure (previously known as NGAF) takes Next Generation Firewall technology to the next level to meet the evolving security needs of modern enterprises. Through market foresight and technical prowess, Sangfor Network Secure holds several “world’s first” titles.

  • The world’s 1st AI-enabled NGFW with intelligent detection, eliminating over 99% of external threats at the network perimeter.

  • The world's 1st NGFW integrated with Web Application Firewall (WAF) to provide network and web application security in one appliance.

  • The world's 1st NGFW integrated with deception technology to provide proactive detection and mitigation of malicious actors. 

  • The world's 1st NGFW with built-in SOC Lite that helps security teams rapidly determine the security status of threats and respond.  

  • The world's 1st NGFW that truly integrates with endpoint security and NDR solutions to create a holistic security system.

Sangfor Network Secure Advantages


Sangfor Network Secure Key Features & Capabilities

Malware Detection

Sangfor Network Secure integrates with Sangfor Engine Zero, an AI powered malware detection engine. Engine Zero is developed using machine learning models and AI algorithms. This enables Network Secure to deliver 99.76% detection rate of known and unknown malware across the internet.

Threat Intelligence

Sangfor Network Secure integrates with Sangfor Neural-X, a cloud-based AI powered threat intelligence and analytics platform.

Neural-X is constantly updated to protect against the latest indicators of compromise (IOC) and adversary tactics, techniques, and procedures (TTPs). For example, Network Secure can send a suspicious DNS address to Neural-X for verification. If Neural-X classifies this DNS as a known C&C server, Network Secure automatically blocks these communications so that no further damage is caused.

Cloud Deception

Sangfor Network Secure is the first NGFW with built-in deception technology. It takes administrators just 5 minutes to set up decoys that proactively locate and stop malicious actors and lateral movement.

Web Application Firewall (WAF)

Sangfor Network Secure is integrated with Sangfor NG-WAF, a next generation web application firewall designed to offer robust protection to web applications.

Using semantic analysis and the industry’s first WAF with a built-in virtual execution system (VES), Sangfor WAF protects web applications from the most advanced web application attacks, such as SQL injection and cross-site scripting.

SOC Lite

Sangfor believes the firewall should make life easier for security administrators. Sangfor Network Secure integrates a SOC Lite feature to simplify security operations and incident response.

Instead of analyzing tons of security logs, security administrators can intuitively determine the current threat level of users and hosts via the Network Secure GUI. What's more, Network Secure provides users with essential guidance on how to respond to security threats.


Sangfor Network Secure integrates with Sangfor Endpoint Secure (Endpoint Detection and Response - EDR) and Cyber Command (Network Detection and Response – NDR) as part of Sangfor’s Anti-Ransomware solution.

Forensic threat intelligence data, collected from the network and endpoints, visualizes the hidden ransomware process through the GUI and provides "one-click quarantine" to eradicate the encryption-controlling application from all infected hosts.

Sangfor Network Secure Use Cases

Network Secure Next Generation Firewall Product Models

Datasheet NSF-1050A-I : pdf file

Datasheet NSF-1100A-I : pdf file

Datasheet NSF-3100A-I : pdf file

Datasheet NSF-7100A-I : pdf file


  1. All throughput performance data is measured in the laboratory. The performance may vary depending on the actual configuration & network environment.

  2. Firewall Throughput is measured with 1518 Bytes UDP packets.

  3. Application Control throughput is measured with firewall and Application Control enabled. 64K HTTP packets

  4. NGFW Throughput is measured with Firewall, Application Control, Bandwidth Management and IPS enabled. 64K HTTP packets

  5. Threat Prevention Throughput is measured with Firewall, Application Control, Bandwidth Management, IPS, and Anti-Virus enabled. 64K HTTP packets

  6. Web Application Protect Throughput is measured with Firewall, Application Control, Bandwidth Management, IPS and WAF enabled. 64K HTTP packets.

  7. IPsec VPN Throughput include Sangfor to Sangfor device connection scenario and Sangfor to 3rd party device scenario. 

NGAF Product Models

Model Datasheets Click to Download

M4500 : pdf file

M5100 : pdf file

M5200 : pdf file

M5300 : pdf file

M5400 : pdf file

M5500 : pdf file

M5600 : pdf file

M5800 : pdf file

M6000 : pdf file

About Sangfor

Sangfor Technologies is a leading global vendor of IT infrastructure solutions, specializing in Cloud Computing & Network Security with a wide range of products & services including Hyper-Converged Infrastructure, Virtual Desktop Infrastructure, Next-Generation Firewall, Internet Access Management, Endpoint Protection, Ransomware Protection, Managed Detection and Response, WAN Optimization, SD-WAN, and many others.