SANGFOR NGAF
M4500-F-I
Sangfor Next Generation Application Firewall is the world first fully integrated
NGFW + NGWAF with pre-event, during-event and post-event defense for all
business assets.
A truly integrated firewall solution, providing holistic overview of the entire
organization security network, with ease of management for administration,
operation and maintenance.
NGAF M4500 is the ideal Converged Security solution for Small Enterprises.
It is also ideal for Branch Deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity

M4500-F-I

Hardware Specifications

M4500-F-I

Generation # 12RAM

4GBDimension

Desktop

Storage HD Capacity

64G SSD

Firewall Throughput 2,32Gbps

Power [Watt] Max

60W

NGFW Throughput 2,4

1.4GbpsOperating Temperature

0°C ~ 45°C

1.4Gbps

Humidity

5%~90% non-condensing

1.2Gbps

System Weight

2.3Kg

1Gbps

System Dimensions (L x W x H, mm)

175 x 275 x 45

WAF Throughput

2IPS & WAF Throughput 2
Threat Protection Throughput

2,5IPSec VPN Throughput 2

250Mbps

Max IPSec VPN Tunnels

300

Network Interfaces

M4500-F-I

Concurrent Connections (TCP)

250,000

Bypass (Copper)

N/A

New Connections (TCP)

10,00010/100/1000 Base-T

6Dual Power Supply

N/ASFP

N/A

10G Fiber SFP+

N/ACompliance

M4500-F-I

Network Modules (Total/Available)

N/A

Certifications

CE, FCC

Optional Interface

N/ASerial Port

1 x RJ45

USB Port

2

1. Generation #2 of M4500-F-I accepts orders from June 2022. This new generation of hardware brings changes,
including better performance, flexible interface options, and better stability.
2. All throughput performance data is measured in the laboratory environment. The real-world performance may varydepending on the configuration & network environment.
3. Firewall Throughput is measured with 1518 Bytes UDP packets.
4. NGFW Throughput is measured with Firewall, Application Control, Bandwidth Management and IPS enabled.
5. Threat Prevention Throughput is measured with Firewall, Application Control, Bandwidth Management, IPS andAnti-Virus enabled.

Deployment Modes
1st-Tier Firewall

Internet

1st-Tier Firewall

InternetInternet

2nd-TierFirewall

SANGFOR NGAF

Server Zone
SANGFOR NGAFHeadquarters

Internetn

VPN

Office Network

Server Zone

Office NetworknCo

Branch Officestionec

Branch Offices

Branch Offices

Server Zone

End-to-End Protection

Double Security (2nd-Tier Firewall)

Branch Deployment- End-to-end protection from endpoint to business system- Total visibility of the entire organization security status- Provides High Availability features with Multi-line HA
and Load Balancing- Proactive early detection and prevention at thegateway to prevent attacks from reaching the network- Double protection which complement existing firewall
security policies to ensure full protection- Providing regulatory compliance- Simplified deployment, reducing downtime- Provides flexibility of security design and security
policies for different business requirements- Secure connection to HQ via VPN- Full protection of branches- With Sangfor Central management Console , manage
all NGAFs from a single point- Total visibility of the entire organization security status- Simple operation & management with reporting

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

Make Your Digital Transformation
Simpler and SecureKey Features
1

Software Features

Lower TCO Converged Security Solutions

Fully converged security solution from endpoint to business systems, without theneeds of manual integration & consolidation of each feature, as well as additional
hardware, which results in lower operational and maintenance costs.

01

Networking
Interface: Physical Interface, Sub Interface, VLAN Interface,
Aggregated Interface
Routing: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability

2 User Friendly
A single simplified operation & maintenance with interactive GUI, which provides
ease of configuration, maintenance, troubleshooting and reporting for IT
managers, administrators and operations team.

02

Access Control
User: Import / export from external server
Authentication: SSO/LDAP/RADIUS
Application: ACL and application rules
URL Filter: Supported

Security Features
Converged Security

03

Integrated L2–L7 Security features:
 DoS/DDoS: Inbound, Outbound, Attack Protection
 Content Security
 IPS
 Anti-virus
 Engine Zero: AI based anti-malware, anti-virus
 APT
 Data Leakage Prevention
 Bandwidth Management Real-Time Vulnerability Scanner Security Reporter Neural-X: Cloud threat intelligence and analytics

4 12
1. Management Interface

VPN
SANGFOR VPN, IPSEC VPN and SSL VPN supported
SDWAN auto path selection

04

Management
SNMP v1, v2c, v3Syslog
Real-Time Vulnerability Scanner
Central management

Hardware Description
3

2. USB ports

3. Line Interface
All Pictures shown are for illustration purpose only. Actual Product may vary.

4. Console Interface

NGAF M4500-F-I Ordering Guide* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription
SKU

Description

ESS-45-1/2/3/5Y

M4500-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter)

PM-45-1/2/3/5Y

M4500-F-I, Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter, Engine Zero, Neural-X)

ULT-45-1/2/3/5Y

M4500-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)“A La Carte” Subscription License
SKUDescription

FNX45-1/2/3/5Y

M4500-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ45-1/2/3/5Y

M4500-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

WAFL45-1/2/3/5Y

M4500-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
Advanced Security Reporter

Hardware Support Services
SKU

Description

STS45-1/2/3/5Y

M4500-F-I, NGAF Software Upgrade, 24*7 Technical Support Services

HRTF45-1/2/3/5Y

M4500-F-I, NGAF,Return to Factory (5 Business days ship after receipt)

HSDS-45-1/2/3/5Y

M4500-F-I, NGAF, SDS Hardware Service

HNBD-45-1/2/3/5Y

M4500-F-I, NGAF, NBD Hardware Service

H244G-45-1/2/3/5Y

M4500-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative.

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

NGAF_DS_P_NGAF45-Datasheet_20220530

Make Your Digital Transformation
Simpler and Secure