SANGFOR NGAF
M5400-F-I
Sangfor Next Generation Application Firewall is the world first fully integrated
NGFW + NGWAF with pre-event, during-event and post-event defense for all
business assets.
A truly integrated firewall solution, providing holistic overview of the entire
organization security network, with ease of management for administration,
operation and maintenance.
NGAF-5400 is the ideal Converged Security solution for Medium Corporate
Enterprises. NGAF-5400 is also ideal for Medium - Large Branch Deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity

NGAF M5400-F-I

Hardware Specifications

NGAF M5400-F-I

Generation # 12RAM8GB1U

Storage HD Capacity

SSD 128G20Gbps

Power [Watt] Max

150W

8.4GbpsOperating Temperature

0°C ~ 45°C

WAF Throughput 2

8.4Gbps

Humidity

5% ~ 90% non-condensing

IPS & WAF Throughput 2

5.6Gbps

System Weight

6.1 Kg

5.6Gbps

System Dimensions (L x W x H, mm)

400 x 430 x 45

Dimension
Firewall Throughput
NGFW Throughput

2,3

2,4

Threat Protection Throughput

2,5IPSec VPN Throughput 2

1.25Gbps

Max IPSec VPN Tunnels

1,500

Network InterfacesNGAF M5400-F-I

Concurrent Connections (TCP)

2,500,000

Bypass (Copper)

3 pairs

New Connections (TCP)

110,000

10/100/1000 Base-T

6SupportedSFP

N/ADual Power Supply

Compliance

NGAF M5400-F-I

Certifications

CE, FCC

10G Fiber SFP+

2

Network Modules (Total/Available)

2/2
Per network module can add
one of the NICs below:

1. Generation #2 of M5400-F-I accepts orders from June 2022. This new generation of hardware brings morestability.
2. All throughput performance data is measured in the laboratory environment. The performance may varydepending on the configuration & network environment.
3. Firewall Throughput is measured with 1518 Bytes UDP packets.
4. NGFW Throughput is measured with Firewall, Application Control, Bandwidth Management, and IPS enabled.
5. Threat Prevention Throughput is measured with Firewall, Application Control, Bandwidth Management, IPS, andAnti-Virus enabled.
6. If you need the optional NIC card not listed, please consult with Sangfor local sales representatives.

1). 2 x GE RJ45 6). 8 x GE SFP
2). 2 x GE SFP 7). 2 x GE RJ45 & 2 x GE SFP
3). 4 x GE RJ45 8). 4 x GE RJ45 & 4 x GE SFP
4). 4 x GE SFP 9). 2 x 10GE SFP+5). 8 x GE RJ45 10). 2 x 40GE QSFP+Optional Interface 6Serial Port

1 x RJ45USB Port

2Deployment Modes
1st-Tier Firewall

Internet

1st-Tier Firewall

InternetInternet

2nd-TierFirewall

SANGFOR NGAFInternet

SANGFOR NGAFSANGFOR NGAFDMZ NetworkServer Zone
Office Network

Server Zone

Office Network

Server Zone

Office Network

End-to-End Protection

Double Security (2nd-Tier Firewall)

DMZ Protection- End-to-end protection from endpoint to business system- Total visibility of the entire organization security status- Provides High Availability features with Multi-line HAand Load Balancing- Proactive early detection and prevention at thegateway to prevent attacks from reaching the network- Double protection which complement existing firewall
security policies to ensure full protection- Providing regulatory compliance- Simplified deployment, reducing downtime- Provides flexibility of security design and security
policies for different business requirements- Dedicated business system protection for advance
protection, without impacting other networks- Providing regulatory compliance- Simplified deployment, reducing downtime- Minimize operation and maintenance works to monitor
and troubleshoot security incidents

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

Make Your Digital Transformation
Simpler and SecureKey Features
1Software Features

Lower TCO Converged Security Solutions

01

Fully converged security solution from endpoint to business systems, without theneeds of manual integration & consolidation of each feature, as well as additional
hardware, which results in lower operational and maintenance costs.

Networking
Interface: Physical Interface, Sub Interface, VLAN Interface, AggregatedInterfaceRouting: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability

2Comprehensive Business Systems Protection

Comprehensive business systems protection with built-in Web Application Firewall andVulnerability Scanners, which is critical for internal systems as well as "internet-facing"systems. Business systems protection is easily enabled via advanced license, without any
integration or additional appliance required.

02

Access Control
User: Import / export from external server
Authentication: SSO/LDAP/RADIUS
Application: ACL and application rules
URL Filter: Supported

3 User Friendly
03

A single simplified operation & maintenance with interactive GUI, which provides ease ofconfiguration, maintenance, troubleshooting and reporting for IT managers, administratorsand operations team.

VPNSANGFOR VPN, IPSEC VPN and SSL VPN supported
SDWAN auto path selection

04

Security Features

Management
SNMP v1, v2c, v3
SyslogReal-Time Vulnerability Scanner

12

Converged Security

Integrated L2–L7 Security features:
DoS/DDoS: Inbound, Outbound, Attack Protection

Content Security

IPS



Anti-virusEngine Zero: AI based anti-malware, anti-virus

APTWAF



Data Leakage Prevention

Bandwidth ManagementReal-Time Vulnerability Scanner

Security Reporter

Neural-X: Cloud threat intelligence and analytics

Comprehensive WAF

Web Application Firewall (WAF)Semantic EngineSupport OWASP Top 10 WAF

Central management

Hardware Description
83

4requirements


Recommended by NSS

1 27
1. Console Interface
2. USB ports
3. Management Interface

6

4. Line Interface
5. Power outlet
6. Switch

5
7. Fan Trays
8. LED Indicators

All Pictures shown are for illustration purpose only. Actual Product may vary.

NGAF M5400-F-I Ordering Guide* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription
SKU

Description

ESS-54-1/2/3/5Y

M5400-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter)

PM-54-1/2/3/5Y

M5400-F-I,Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter, Engine Zero, Neural-X)

ULT-54-1/2/3/5Y

M5400-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)“A La Carte” Subscription License
SKU

Description

FNX54-1/2/3/5Y

M5400-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ54-1/2/3/5Y

M5400-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

WAFL54-1/2/3/5Y

M5400-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
Advanced Security Reporter

Hardware Support Services
SKU

Description

STS54-1/2/3/5Y

M5400-F-I, NGAF Software Upgrade, 24*7 Technical Support Services

HRTF54-1/2/3/5Y

M5400-F-I, NGAF,Return to Factory (5 Business days ship after receipt)

HSDS-54-1/2/3/5Y

M5400-F-I, NGAF, SDS Hardware Service

HNBD-54-1/2/3/5Y

M5400-F-I, NGAF, NBD Hardware Service

H244G-54-1/2/3/5Y

M5400-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative.

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

NGAF_DS_P_NGAF54-Datasheet_20220530

Make Your Digital Transformation
Simpler and Secure