SANGFOR NGAFM5500-F-I
Sangfor Next Generation Application Firewall is the world first fully integrated NGFW +NGWAF with pre-event, during-event and post-event defense for all business assets. A truly
integrated firewall solution, providing holistic overview of the entire organization security
network, with ease of management for administration, operation and maintenance.
NGAF M5500-F-I is the ideal Converged Security solution for medium enterprise and data
center deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity

NGAF M5500-F-I

Hardware SpecificationsNGAF M5500-F-I

Dimension

2URAM

8GB

Firewall Throughput

25GbpsStorage HD Capacity 3

64GB SSD + 480G SSD

NGFW Throughput

112.6Gbps

Power [Watt] Max

150W

WAF Throughput

12.6Gbps

Operating Temperature

0 - 45°C

IPS & WAF Throughput

8.4Gbps

Humidity

5% - 90%, non-condensing

Threat Protection Throughput

29.1Gbps

System Weight

12.95 Kg

IPSec VPN Throughput

2Gbps

System Dimensions (L* W * H, mm)

600 x 440 x 90

Max IPSec VPN Tunnels

3,000

Concurrent Connections (TCP)

3,000,000

Network Interfaces

NGAF M5500-F-I

New Connections (TCP)

220,000

Bypass (Copper)

3 pairs

Supported

10/100/1000 Base-T

6SFP

4Power Redundancy

1Compliance

NGAF M5500-F-I

10G Fiber SFP

2Certifications

CE, FCC

Network Modules (Total/Available)

2/1
Per network module can add oneof the NICs below:

NGFW is measured with Firewall,
Bandwidth Management, IPS,
Application Control①. 2 x GE RJ45②. 2 x GE SFP③. 4 x GE RJ45④. 4 x GE SFP⑤. 8 x GE RJ45⑥. 8 x GE SFP

Optional Interface

2Threat Prevention is measured withFirewall, Bandwidth Management IPS,
Application Control, Anti Virus

3Other storage options; 64GB SSD +960G SSD, 64GB SSD + 2TB SATA

Serial Port

1 x RJ45

USB Port

2⑦. 2 x GE RJ45 & 2 x
GE SFP⑧. 4 x GE RJ45 & 4 x
GE SFP⑨. 2 x 10GE SFP+⑩. 4 x 10GE SFP+
. 2 x 40GE QSFP+Deployment Modes
1st-Tier Firewall

Internet

1st-Tier Firewall

InternetInternet

2nd-TierFirewall

SANGFOR NGAFInternet

SANGFOR NGAFSANGFOR NGAFDMZ Network

Server Zone
Office Network

Server Zone

Office Network

Server Zone

Office Network

End-to-End Protection

Double Security (2nd-Tier Firewall)

DMZ Protection- End-to-end protection from endpoint to business system- Total visibility of the entire organization security status- Provides High Availability features with Multi-line HAand Load Balancing- Proactive early detection and prevention at thegateway to prevent attacks from reaching the network- Double protection which complement existing firewall
security policies to ensure full protection- Providing regulatory compliance- Simplified deployment, reducing downtime- Provides flexibility of security design and security
policies for different business requirements- Dedicated business system protection for advance
protection, without impacting other networks- Providing regulatory compliance- Simplified deployment, reducing downtime- Minimize operation and maintenance works to monitor
and troubleshoot security incidents

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

Make IT Simpler,
More Secure and Valuable

Key Features
1

Software Features

Lower TCO Converged Security Solutions

01

Fully converged security solution from endpoint to business systems, without theneeds of manual integration & consolidation of each feature, as well as additional
hardware, which results in lower operational and maintenance costs.

NetworkingInterface: Physical Interface, Sub Interface, VLAN Interface, AggregatedInterfaceRouting: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability

2Comprehensive Business Systems Protection

Comprehensive business systems protection with built-in Web Application Firewall andVulnerability Scanners, which is critical for internal systems as well as "internet-facing"systems. Business systems protection is easily enabled via advanced license, without any
integration or additional appliance required.

02Access Control
User: Import / export from external server
Authentication: SSO/LDAP/RADIUSApplication: ACL and application rules
URL Filter: Supported

3 User Friendly
03

A single simplified operation & maintenance with interactive GUI, which provides ease ofconfiguration, maintenance, troubleshooting and reporting for IT managers, administratorsand operations team.

VPN
SANGFOR VPN, IPSEC VPN and SSL VPN supported
SDWAN auto path selection

04

Security Features

Management
SNMP v1, v2c, v3
SyslogReal-Time Vulnerability Scanner

12

Converged Security

Comprehensive WAF

Integrated L2–L7 Security features:

Web Application Firewall (WAF)

DoS/DDoS: Inbound, Outbound, Attack
ProtectionSemantic EngineSupport OWASP Top 10 WAF

Content Security

IPS



Central management

Hardware Description
81requirements
Anti-virus

Recommended by NSS

Engine Zero: AI based anti-malware,anti-virus





APT

WAF



Data Leakage Prevention

Bandwidth ManagementReal-Time Vulnerability Scanner

Security Reporter

2347

1. Management Console
2. USB ports
3. Default Interface

Neural-X: Cloud threat intelligence andanalytics

6

4. Line Interface
5. Power outlet
6. Switch5

7. Fan Trays
8. LED Indicators

All Pictures shown are for illustration purpose only. Actual Product may vary.

NGAF M5500-F-I Ordering Guide* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription
SKU

Description

ESS-55-1/2/3/5Y

M5500-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter)

PM-55-1/2/3/5Y

M5500-F-I, Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter, Engine Zero, Neural-X)

ULT-55-1/2/3/5Y

M5500-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)“A La Carte” Subscription License
SKU

Description

FNX55-1/2/3/5Y

M5500-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ55-1/2/3/5Y

M5500-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

WAFL55-1/2/3/5Y

M5500-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
Advanced Security Reporter

Sangfor Support Services
SKU

Description

STS55-1/2/3/5Y

M5500-F-I, NGAF Software Upgrade, 24*7 Technical Support Services

HRTF55-1/2/3/5Y

M5500-F-I, NGAF,Return to Factory (5 Business days ship after receipt)

HSDS-55-1/2/3/5Y

M5500-F-I, NGAF, SDS Hardware Service

HNBD-55-1/2/3/5Y

M5500-F-I, NGAF, NBD Hardware Service

H244G-55-1/2/3/5Y

M5500-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative.

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

NGAF_DS_P_NGAF55-Datasheet_20210923

Make IT Simpler,More Secure and Valuable