Sangfor Next Generation Application Firewall is the world first fully integrated NGFW + WAF with pre-event, during-event and post-event defense for all business assets. A truly integrated firewall solution, providing holistic overview of the entire organization security network, with ease of management for administration, operation and maintenance.
NGAF-5250 is the ideal Converged Security solution for Small & Medium Enterprises. It is also ideal for Branch Deployment.
Key Features
- Lower TCO Converged Security Solutions
Fully converged security solution from endpoint to business systems, without the needs of manual integration & consolidation of each feature, as well as additional hardware, which results in lower operational and maintenance costs.
- Comprehensive Business Systems Protection
Comprehensive business systems protection with built-in Web Application Firewall and Vulnerability Scanners, which is critical for internal systems as well as “internet-facing” systems. Business systems protection is easily enabled via advanced license, without any integration or additional appliance required.
- User Friendly
A single simplified operation & maintenance with interactive GUI, which provides ease of configuration, maintenance, troubleshooting and reporting for IT managers, administrators and operations team.
Security Features
Converged Security
Integrated L2–L7 Security features:
- DoS/DDoS: Inbound, Outbound, Attack Protection
- Content Security
- IPS
- Anti-virus
- Engine Zero: AI based anti-malware, anti-virus
- APT
- WAF
- Data Leakage Prevention
- Bandwidth Management
- Web Scanner
- Real-Time Vulnerability Scanner
- Security Reporter
- Neural-X: Cloud threat intelligence and analytics
Comprehensive WAF
- Web Application Firewall (WAF).
- Semantic Engine
- Support OWASP Top 10 WAF requirements.
- Recommended by NSS.
Software Features
- Networking
Interface: Physical Interface, Sub Interface, VLAN Interface, Aggregated Interface
Routing: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability - Access Control
User: Import / export from external server
Authentication: SSO/LDAP/RADIUS
Application: ACL and application rules
URL Filter: Supported
- VPN
SANGFOR VPN, IPSEC VPN and SSL VPN supported
SDWAN auto path selection - Management
SNMP v1, v2c, v3
Syslog
Real-Time Vulnerability Scanner
Central management
Hardware Description
-
-
-
- Default Interface
- USB ports
- Management Console
- Line Interface
- Power outlet
- Switch
- Fan Trays
- LED Indicators
-
-
All Pictures shown are for illustration purpose only. Actual Product may vary.
Specifications
| Performance & Capacity | |
| Dimension | 1U |
| Firewall Throughput | 3.5 Gbps |
| NGFW Throughput | 2.45 Gbps |
| WAF Throughput | 2.45 Gbps |
| IPS & WAF Throughput | 2.1 Gbps |
| Threat Protection Throughput | 1.75 Gbps |
| IPSec VPN Throughput | 375 Mbps |
| Max IPSec VPN Tunnels | 500 |
| Concurrent Connections (TCP) | 1,000,000 |
| New Connections (TCP) | 60,000 |
| Dual Power Supply | N/A |
| Hardware Specifications | |
| RAM | 4 Gb |
| Storage HD Capacity | 64G SSD (Customizable up to 2T) |
| Power [Watt] Max | 100W |
| Operating Temperature | 0°C ~ 40°C |
| Humidity | 5% ~ 95% non-condensing |
| System Weight | 3.85 Kg |
| System Dimensions | 300 x 430 x 44.5 mm (W x L x H) |
| Certifications | CE, FCC |
| Network Interfaces | |
| Bypass (Copper) | 1 pair |
| 10/100/1000 Base-T | 6 |
| SFP | 2 |
| 10G Fiber SFP | N/A |
| Optional Interface & 10G Fiber SFP | N/A |
| Serial Port | 1 x RJ45 |
| USB Port | 2 |
For more information, please read product’s datasheet: M5250 Datasheet PDF
