Ngaf M5100

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

SANGFOR NGAF

M5100-F-I

Sangfor Next Generation Application Firewall is the world first fully integrated
NGFW + NGWAF with pre-event, during-event and post-event defense for all
business assets.

A truly integrated firewall solution, providing holistic overview of the entire


organization security network, with ease of management for administration,
operation and maintenance.

NGAF-5100 is the ideal Converged Security solution for Small Enterprises. It


is also ideal for Branch Deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity NGAF M5100-F-I Hardware Specifications NGAF M5100-F-I


Generation # 1 2 RAM 4GB
Dimension 1U Storage HD Capacity 64G SSD
Firewall Throughput 2,3 2.8Gbps Power [Watt] Max 40W
NGFW Throughput 2,4 2.5Gbps Operating Temperature 0°C ~ 45°C
2
WAF Throughput 2.5Gbps Humidity 5% ~ 90% non-condensing
IPS & WAF Throughput 2 1.4Gbps System Weight 3.85 Kg
2,5
Threat Protection Throughput 1.8Gbps System Dimensions (L x W x H, mm) 300 x 430 x 45
2
IPSec VPN Throughput 250Mbps

Max IPSec VPN Tunnels 300 Network Interfaces NGAF M5100-F-I


Concurrent Connections (TCP) 750,000 Bypass (Copper) 1 pair
New Connections (TCP) 20,000 10/100/1000 Base-T 6

Dual Power Supply N/A SFP N/A

10G Fiber SFP+ N/A


Compliance NGAF M5100-F-I Network Modules (Total/Available) 1/1

Certifications CE, FCC Per network module can add one


of the NIC card below:
1). 2 x GE RJ45 6). 8 x GE SFP
1. Generation #2 of M5100-F-I accepts orders from June 2022. This new generation of hardware brings changes, Optional Interface 6
2). 2 x GE SFP 7). 2 x GE RJ45 & 2 x
including better performance, flexible interface options, and better stability.
3). 4 x GE RJ45 GE SFP
2. All throughput performance data is measured in the laboratory environment. The real-world performance may
4). 4 x GE SFP 8). 4 x GE RJ45 & 4 x
vary depending on the configuration & network environment.
5). 8 x GE RJ45 GE SFP
3. Firewall Throughput is measured with 1518 Bytes UDP packets.
4. NGFW Throughput is measured with Firewall, Application Control, Bandwidth Management and IPS enabled. Serial Port 1 x RJ45
5. Threat Prevention Throughput is measured with Firewall, Application Control, Bandwidth Management IPS,
and Anti-Virus enabled. USB Port 2
6. If you need the optional NIC card not listed, please consult with Sangfor local sales representatives.

Deployment Modes

1st-Tier Firewall 1st-Tier Firewall


Internet Internet Internet Internet

2nd-Tier
SANGFOR NGAF Firewall SANGFOR NGAF SANGFOR NGAF DMZ Network

Office Network Server Zone Office Network Server Zone Office Network Server Zone

End-to-End Protection Double Security (2nd-Tier Firewall) DMZ Protection


- End-to-end protection from endpoint to business system - Double protection which complement existing firewall - Dedicated business system protection for advance
- Total visibility of the entire organization security status security policies to ensure full protection protection, without impacting other networks
- Provides High Availability features with Multi-line HA - Providing regulatory compliance - Providing regulatory compliance
and Load Balancing - Simplified deployment, reducing downtime - Simplified deployment, reducing downtime
- Proactive early detection and prevention at the - Provides flexibility of security design and security - Minimize operation and maintenance works to monitor
gateway to prevent attacks from reaching the network policies for different business requirements and troubleshoot security incidents

sales@sangfor.com Make Your Digital Transformation


SANGFOR TECHNOLOGIES INC.
www.sangfor.com Simpler and Secure
Key Features Software Features

1 Lower TCO Converged Security Solutions Networking


01
Interface: Physical Interface, Sub Interface, VLAN Interface, Aggregated
Fully converged security solution from endpoint to business systems, without the
needs of manual integration & consolidation of each feature, as well as additional Interface
hardware, which results in lower operational and maintenance costs. Routing: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability
2 Comprehensive Business Systems Protection
Access Control
02
Comprehensive business systems protection with built-in Web Application Firewall and User: Import / export from external server
Vulnerability Scanners, which is critical for internal systems as well as "internet-facing" Authentication: SSO/LDAP/RADIUS
systems. Business systems protection is easily enabled via advanced license, without any
Application: ACL and application rules
integration or additional appliance required.
URL Filter: Supported
3 User Friendly VPN
03
SANGFOR VPN, IPSEC VPN and SSL VPN supported
A single simplified operation & maintenance with interactive GUI, which provides ease of
configuration, maintenance, troubleshooting and reporting for IT managers, administrators SDWAN auto path selection
and operations team.
Management
04
SNMP v1, v2c, v3
Security Features Syslog
Real-Time Vulnerability Scanner
1 Converged Security 2 Comprehensive WAF Central management

Integrated L2–L7 Security features:  Web Application Firewall (WAF)


Hardware Description
 DoS/DDoS: Inbound, Outbound, Attack Protection  Semantic Engine
 Content Security  Support OWASP Top 10 WAF 3
 IPS 8 1 24
requirements
 Anti-virus  Recommended by NSS
 Engine Zero: AI based anti-malware, anti-virus
 APT
 WAF
 Data Leakage Prevention
 Bandwidth Management
 Real-Time Vulnerability Scanner
5 6 7
 Security Reporter
 Neural-X: Cloud threat intelligence and analytics 1. Console Interface 4. Management Interface 7. Power outlet
2. USB ports 5. Fan Trays 8. LED Indicators
3. Line Interface 6. Switch
All Pictures shown are for illustration purpose only. Actual Product may vary.

NGAF M5100-F-I Ordering Guide


* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription

SKU Description

M5100-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
ESS-51-1/2/3/5Y Visibility, Basic Security Reporter)
M5100-F-I,Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security Visibility,
PM-51-1/2/3/5Y
Basic Security Reporter, Engine Zero, Neural-X)
M5100-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
ULT-51-1/2/3/5Y Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)

“A La Carte” Subscription License

SKU Description

FNX51-1/2/3/5Y M5100-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ51-1/2/3/5Y M5100-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

M5100-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
WAFL51-1/2/3/5Y Advanced Security Reporter

Hardware Support Services

SKU Description

STS51-1/2/3/5Y M5100-F-I, NGAF Software Upgrade, 24*7 Technical Support Services


HRTF51-1/2/3/5Y M5100-F-I, NGAF,Return to Factory (5 Business days ship after receipt)
HSDS-51-1/2/3/5Y M5100-F-I, NGAF, SDS Hardware Service
HNBD-51-1/2/3/5Y M5100-F-I, NGAF, NBD Hardware Service
H244G-51-1/2/3/5Y M5100-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative. NGAF_DS_P_NGAF51-Datasheet_202200530

sales@sangfor.com Make Your Digital Transformation


SANGFOR TECHNOLOGIES INC.
www.sangfor.com Simpler and Secure

You might also like