SANGFOR NGAFM6000-F-I
Sangfor Next Generation Application Firewall is the world first fully integrated
NGFW + NGWAF with pre-event, during-event and post-event defense for all
business assets.
A truly integrated firewall solution, providing holistic overview of the entire
organization security network, with ease of management for administration,
operation and maintenance.
NGAF M6000-F-I is the ideal Converged Security solution for large enterpriseand data center deployment.
All Pictures shown are for illustration purpose only. Actual Product may vary.

Performance & Capacity

NGAF M6000-F-I

Hardware Specifications

NGAF M6000-F-I

Dimension

2URAM

32GB

Firewall Throughput

140GbpsStorage HD Capacity

184Gbps

Power [Watt] Max

760W

WAF Throughput

84GbpsOperating Temperature

0 - 45°C

IPS & WAF Throughput

56GbpsHumidity

5% - 90%, non-condensing

67.2Gbps

System Weight

20.00 Kg

IPSec VPN Throughput

5Gbps

System Dimensions (L * W * H, mm)

600 x 440 x 90

Max IPSec VPN Tunnels

10,000Concurrent Connections (TCP)

16,000,000

Network Interfaces

NGAF M6000-F-I

New Connections (TCP)

600,000

Bypass (Copper)

4 pairs

Power Redundancy

Supported

10/100/1000 Base-T

8SFP8NGFW Throughput

Threat Protection Throughput

13264GB SSD + 960G SSD

Compliance

NGAF M6000-F-I

10G Fiber SFP

4Certifications

CE, FCC

Network Modules (Total/Available)

6/2
Per network module can add one of
the NICs below:

NGFW is measured with Firewall,
Bandwidth Management, IPS, ApplicationControl

2Threat Prevention is measured withFirewall, Bandwidth Management IPS,
Application Control, Anti Virus

3

Other storage options; 64GB SSD + 2TB
SATA①. 4x GE RJ45 ⑤. 4x GE RJ45 & 4x GE SFP②. 4x GE SFP ⑥. 2x 10GE SFP+③. 8x GE RJ45 ⑦. 4x 10GE SFP+④. 8x GE SFP⑧. 2x 40GE QSFP

Optional Interface

Serial Port

1 x RJ45

USB Port

2Deployment Modes
1st-Tier Firewall

Internet

1st-Tier Firewall

InternetInternet

2nd-TierFirewall

SANGFOR NGAFInternet

SANGFOR NGAFSANGFOR NGAFDMZ Network

Server Zone
Office Network

Server Zone

Office Network

Server Zone

Office Network

End-to-End Protection

Double Security (2nd-Tier Firewall)

DMZ Protection- End-to-end protection from endpoint to business system- Total visibility of the entire organization security status- Provides High Availability features with Multi-line HA
and Load Balancing- Proactive early detection and prevention at thegateway to prevent attacks from reaching the network- Double protection which complement existing firewall
security policies to ensure full protection- Providing regulatory compliance- Simplified deployment, reducing downtime- Provides flexibility of security design and security
policies for different business requirements- Dedicated business system protection for advance
protection, without impacting other networks- Providing regulatory compliance- Simplified deployment, reducing downtime- Minimize operation and maintenance works to monitor
and troubleshoot security incidentsSANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

Make IT Simpler,
More Secure and Valuable

Key Features
1

Software Features

Lower TCO Converged Security Solutions

01

Fully converged security solution from endpoint to business systems, without theneeds of manual integration & consolidation of each feature, as well as additional
hardware, which results in lower operational and maintenance costs.

Networking
Interface: Physical Interface, Sub Interface, VLAN Interface, AggregatedInterfaceRouting: Static, Policy-based, RIP, OSPF, BGP
Network Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability

2Comprehensive Business Systems Protection

Comprehensive business systems protection with built-in Web Application Firewall andVulnerability Scanners, which is critical for internal systems as well as "internet-facing"systems. Business systems protection is easily enabled via advanced license, without any
integration or additional appliance required.

02

Access Control
User: Import / export from external server
Authentication: SSO/LDAP/RADIUS
Application: ACL and application rules
URL Filter: Supported

3 User Friendly
03

A single simplified operation & maintenance with interactive GUI, which provides ease ofconfiguration, maintenance, troubleshooting and reporting for IT managers, administratorsand operations team.

VPN
SANGFOR VPN, IPSEC VPN and SSL VPN supported
SDWAN auto path selection

04

Security Features

Management
SNMP v1, v2c, v3
SyslogReal-Time Vulnerability Scanner

12

Converged Security

Comprehensive WAF

Integrated L2–L7 Security features:

Web Application Firewall (WAF)

DoS/DDoS: Inbound, Outbound, Attack
Protection

Semantic Engine

Support OWASP Top 10 WAF

Content Security

IPS



Central management

Hardware Description
8 134requirements
Anti-virusRecommended by NSS

Engine Zero: AI based anti-malware,anti-virus



APT

WAF

Data Leakage Prevention

Bandwidth ManagementReal-Time Vulnerability Scanner

Security Reporter

257

1. Management Console
2. USB ports
3. Default Interface

Neural-X: Cloud threat intelligence andanalytics

6

4. Line Interface
5. Power outlet
6. Switch

7. Fan Trays
8. LED Indicators

All Pictures shown are for illustration purpose only. Actual Product may vary.

NGAF M6000-F-I Ordering Guide* All bundles are offered in 1, 2, 3 or 5 year increments

Sangfor NGAF Bundle Subscription
SKU

Description

ESS-60-1/2/3/5Y

M6000-F-I, Essential Bundle (30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter)

PM-60-1/2/3/5Y

M6000-F-I, Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security
Visibility, Basic Security Reporter, Engine Zero, Neural-X)

ULT-60-1/2/3/5Y

M6000-F-I, Ultimate Bundle including Premium Bundle(30 SSL VPN license, Site-to-Site IPsec VPN, FW, BM, URL filtering, Application Control, IPS, Email Security, Risk
Assessment, Security Visibility, Basic Security Reporter, Engine Zero, Neural-X) & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security
Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time Offer)“A La Carte” Subscription License
SKU

Description

FNX60-1/2/3/5Y

M6000-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service

FEZ60-1/2/3/5Y

M6000-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virus

WAFL60-1/2/3/5Y

M6000-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner,
Advanced Security Reporter

Sangfor Support Services
SKU

Description

STS60-1/2/3/5Y

M6000-F-I, NGAF Software Upgrade, 24*7 Technical Support Services

HRTF60-1/2/3/5Y

M6000-F-I, NGAF,Return to Factory (5 Business days ship after receipt)

HSDS-60-1/2/3/5Y

M6000-F-I, NGAF, SDS Hardware Service

HNBD-60-1/2/3/5Y

M6000-F-I, NGAF, NBD Hardware Service

H244G-60-1/2/3/5Y

M6000-F-I, 24x7x4 Delivery Hardware Service

For more information on Sangfor' full range of support & services, please contact your local representative.

SANGFOR TECHNOLOGIES INC.

sales@sangfor.com
www.sangfor.com

NGAF_DS_P_NGAF60-Datasheet_20210923

Make IT Simpler,
More Secure and Valuable