SSL VPN
Sangfor provides fine-grained access authority control based on URL authorization, restricts users to only access specific pages, and prevents attacks such as SQL injection. They provide the master-slave account binding function to bind the SSL VPN with the business system account to prevent unauthorized access by internal users. Sangfor supports a variety of encryption algorithm options, including AES, 3DES, RSA, RC4, MD5 and national secret algorithms to ensure data security. They provide a variety of identity authentication methods, such as combinations of user name/password, terminal feature code, and SMS verification code, to increase the counterfeiting cost of hackers. In addition, Sangfor provides a security inspection mechanism for PC terminals and mobile terminals. Terminals that do not comply with security regulations will be prohibited from accessing the corporate network. It also provides mobile terminal management solutions to realize remote locking and data erasure functions to prevent hackers from controlling terminals .
Firewall AF
Sangfor provides a business-based full-process visualized protection solution, including 200+ web application protection identification libraries and a multi-layer web attack detection engine, to deal with security risks of external businesses. They provide a lightweight mining protection solution to identify and defend against mining behavior through mining virus rule base and pure IP audit + cloud distributed active detection technology. Sangfor also provides Internet egress protection, including a vulnerability attack signature identification library and a botnet virus protection library, and intercepts attacks and compromised host behaviors through an intelligent protection engine. In addition, their data center security protection solution uses next-generation firewalls to detect threats to data center traffic, and innovates technologies such as automatic application server detection, vulnerability self-inspection, and user account special detection to protect the security of the data center.
Network-wide behavior management AC
Sangfor provides online behavior management and control solutions to comprehensively identify and control risky applications in the network, ensure employees’ online safety, and meet national compliance requirements. They improve bandwidth utilization through a number of professional traffic management functions, and record online risk behaviors as a traceability basis. Sangfor also provides terminal security access control, which implements access control for all terminals on the entire network to ensure credible identities and meet security baseline requirements to avoid the risk of violations. In addition, they provide data leakage prevention control, monitor illegal outreach and illegal network transmission behaviors, comprehensively identify visible data outgoing channels, detect data leakage in a timely manner, and perform retrospective processing.