SANGFOR SSL VPN

With the development of cloud computing and mobile devices, modern

workforces have become increasingly mobilized and distributed. This trend
requires business organizations to prepare its IT infrastructure to facilitate
a secure and efficient remote access to business resources with full efforts.
SANGFOR understands those business challenges and is committed to
provide solutions for those increasing demands of modern businesses.
Leveraging from its innovative technologies, SANGFOR releases its superior
SSL VPN products. Compared with other existing SSL VPN solutions,
SANGFOR SSL VPN offers the best level business driven solution with
extraordinary access speed, unique virtualization and security technologies.

www.sangfor.net

Access
Optimization
Never Been So Fast
SANGFOR SSL VPN provides remote user with extraordinary
access performance and experience by embedding
acceleration technologies without additional license fee!

Less Bandwidth Required

Compression is commonly used in other

Byte Cache - Average Link Speed (Realtime)

solutions but not enough to offer a

Service Uptime 0day(s) 0hour(s) 10minute(s) [Optimization Effect]

high-speed SSL VPN connection.

8000
6000

SANGFOR SSL VPN innovatively adopts

4000

the byte cache technology into SSL VPN

2000
0

sessions, which effectively eliminates

09:22
09:23
09:24
Before Optimization:0.0 KBps
After Optimization: 0.0 KBps

30-90% of redundant traffics on

SSL VPN links and improves the access
speed of remote users.

Reduces more than 75% of redundant data and releases a

significant portion of the bandwidth for critical traffics

Under harsh network environments such

3G networks with high packet loss rate or
high latency, the access speed would be
significantly lower than one had expected.
SANGFOR SSL VPN employs HTP
(High-speed Transfer Protocol) to smooth
the transfer environment and minimize the
negative impact of packet loss and latency.

120
100
80
60
40
20
0

Lost 3% Lost 5% Lost 10%

Delay
Delay
1000ms 300ms

Delay
100ms

TCP transmission rate KB/S

as cross-border, cross-operator, Wi-Fi and

09:26

HTP transmission rate KB/S

Smooth Performance under

Harsh Network Environments

09:25

Optimal access experience under any environments

Thus, end users are able to consistently

enjoy a favorable access experience.

Access Optimization on
Tablets and Mobile Devices

In order to solve the display and slow

connection problems that tablets and
mobile devices users might encounter
when accessing browser-based
applications, SANGFOR SSL VPN not
only optimizes the page display and
mobile access, but also provides various
image optimization policies such as
image filtering and compression to
prevent the problems mentioned above.

Full Utilization of Resources

Ideal solution for mobile access optimization

Considering real-life deployment,

By using the exclusive acceleration

SANGFOR SSL VPN is also equipped with

technology of SANGFOR SSL VPN,

Intelligent Link Selector and Resources

Load Balancer. The Intelligent Link
Selector can automatically select the

enterprises are able to provide users with

a satisfied and efficient remote access

optimal link for remote access when there

experience, which eventually improves

are multiple links, and the Resources Load

the working productivity of remote

Balancer can assign each access to the

workforces.

ideal server when the related application is

carried by multiple servers.

Bidirectional
Virtualization
Do More with Less
Application virtualization: Tablets and smart phone access;
Bring Your Own Device;
Local virtualization: Endpoint Compliance;
Network/System Logical Isolation.

Application Virtualization
Deliveres Applications as
On-demand Service

With diversity of endpoints and business applications, IT managers have always been looking for
a better remote access solution. That is, business applications can be securely delivered to
remote workforces as on-demand service via a browser, with no limitation to remote workspaces,
application types or available endpoints. Then SANGFOR SSL VPN Remote Application is the
answer.

SANGFOR SSL VPN

Keyboard input, mouse click
Interfaces of remote applications
AT&T

Server-based applications

Remotely operation

SANGFOR Remote Application for Application Virtualization

- Interfaces of published applications are pushed to endpoints screens as virtual access windows, thus end users are
able to remotely access the applications through a browser;
- Operation and control on applications occur in the server-end, no business data will be stored locally.

With SANGFOR Remote Application, business applications are virtualized, centralized and
managed in the datacenter and instantly delivered as a service to those users in need. Since
everything occurs within the virtual application servers, by all means users are virtually
operating in the enterprise network, which avoided any possibility of information leakage.

Smooth Access from Tablets

and Smart Phones
As business applications are delivered to
remote workforce as on-demand service,
remote workforces can now access any
published applications freely from any
endpoints with a browser including mobile
devices, no matter the applications are
based on Windows or in the form of B/S
and C/S.

Enterprise-wide Application
Virtualization
SANGFOR Remote Application solution
virtualizes the business applications and
improves the portability, compatibility
and manageability of those applications.
It cuts down the maintenance cost since
all applications are operates and managed
in the datacenter. With its remarkable
ease of deployment and affordable price,
enterprises are able to carry out the
enterprise-wide application virtualization
in a fast and cost-effective way.

AT&T

Smart
phones

Tablets

Virtualization

LAN / WAN

Laptops

Desktops

Secure Desktop through

Local Virtualization

When application data is delivered to remote workforce, enterprises have to take the risk of
potential information leakage, since data can be out of control once leaving the enterprise
network. Application virtualization was the solution to prevent such risks, however, huge
costs and great changes to existing IT infrastructure may keep IT managers away.
Therefore, SANGFOR SSL VPN Secure Desktop can be a favorable alternative choice as a
light-weight virtualization solution in the endpoints.

Local
Virtualization

INTERNET

Common data

Default desktop
Minimize exit
Print

Save to local disk

Copy & Paste to

local resource

Cached / temp.files

SANGFOR
SSL VPN

Confidential data

Secure desktop

Secure Desktop mirrors a virtual desktop from the default desktop on remote endpoints.
Users need to access protected resources through Secure Desktop and other resources through default desktop.

SANGFOR Secure Desktop is a protected workspace that achieves logical isolation between
the Internet and local resources. No data can be leaked out with instant data encryption,
peripherals control and write restrictions in the protected space. When you exit the secure
desktop, all access records and usage traces will be cleared. Thus core business data can be
protected in a better way.
In addition to offering benefits to remote access criteria, with proper deployment in LAN
environment, SANGFOR Secure Desktop can also benefit enterprises as system/network
logical isolation solution in a convenient and cost-effective way.

Secure
Connection
SANGFOR SSL VPN has built-in all-round security protection polices
including identity authentication, endpoint security, transmitting
security and resources authorization polices to achieve a secure
remote connection.

Identity Authentication

Endpoint Security

Authentication: Supports up to eight types

of authentication methods:

Host Checker: Endpoint detection and

scanning of operating system, registry file,
personal firewall, anti-virus files,
user-customized security rules and other
security policies prior to user login as well
as during SSL VPN sessions.

- User name/Password, LDAP, RADIUS, CA

(Certification Authority);
- Certificate/USB key based authentication,
Dynamic token, Hardware ID, SMS.
Account Binding: Binds SSL VPN user
accounts to authorized applications
accounts for account compliance and
management.

Cache Cleanup: Wipes off any cached data

when the SSL VPN session terminates,
which avoids data leakage if any remote
users are accessing SSL VPN with a public
endpoint.

Transmission Security

Resources Authorization Policy

Tunnel Encryption: SSL session encryption.

User-Role-Resource Assignment:

Dedicated SSL VPN Tunnel: Provides the

flexibility of disconnecting all other Internet
connections but SSL VPN session to prevent
intrusions and attacks from the Internet.
Man-in-the-middle Attack Detection:
Detects and alerts if the endpoint is suffering
Man-in-the-middle attack before it is
connected to the intranet.

Accurately and meticulously assigns resources

to specifically defined users or roles, which
avoids unauthorized usage of published
applications.

Advantages

SSO

Simplified User Administration

SANGFOR SSL VPN simplifies the

account/authentication by allowing
administrators to do seamless combination
with the LDAP/RADIUS servers and
supporting SSO (single-sign-on) with
published applications.

IT administrators are provided with

broadcaster and bandwidth controller.
Message broadcaster enables IT
administrators to broadcast warnings or
notifications to their SSL VPN users.
Bandwidth controller allows IT
administrators to allocate the bandwidth

Flexible Deployment

precisely for fair usage and avoid bandwidth

Various deployment features are offered

for consolidating it into the existing IT
infrastructure with typical functions such
as the asymmetrical cluster and cloud
cluster. Asymmetrical cluster supports
robust clustering of different hardware
models for scalability. Cloud cluster
assigns SSL VPN requests to the fastest
and most healthy appliance when
SSL VPNs are deployed in multiple data
centers that are located in different places.

congestion among their SSL VPN users.

SANGFOR SSL VPN was designed to

deliver much more than just a secure
connectivity between remote users and
the enterprise resources. Embedded
acceleration technology differentiates
SANGFOR SSL VPN from other
competing products in the market by
achieving 3-50 times faster connection
in comparison. Virtualization technology
smooth the business application
availability in every way including the
application and endpoint compatibility,
efficiency, manageability and security.

The best-in-class SSL VPN appliance

IT managers are able to export those data

to enterprises log servers by Syslog/SNMP.

is promised to deliver enterprise business

with maximized value and low TCO
(Total cost of ownership).

visionaries

completeness of vision

Magic Quadrant For SSL VPNs

39.2%
36%
Source: Frost & Sullivan; China

Source: Gartner (Nov 2011) As of Nov 2011

Sangfor

niche players

Furthermore, access logs can be kept and

leaders

ability to execute

challengers

Acknowledges
and
Achievements

management tools such as message

percentage

Simplified
Management
and
Consolidated
Infrastructure

34%
31.1%

2008

2009
2010
years

2011

NO.1 in China for 4 consecutive years

www.sangfor.net

SANGFOR TECHNOLOGIES
Sangfor is a global leader in networking technology that has helped more than 28,000 businesses make
SANGFOR
TECHNOLOGIES
their networks
faster, simpler,
and safer. Sangfors networking solutions allow enterprieses to successfully
run critical
applications
on any device, anytime, and anywhere. With over 2,000 employees and 55 worldwide
SANGFOR
TECHNOLOGIES
offices. Sangfor has proven their WAN Optimization, SSL VPN, and Next Generation Firewall products in
Add: Unit
1109,
11/F, Tower A, Mandarin Plaza, 14 Science
SANGFOR
competitive
markets around
the
world.
Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Hong Kong
Add: Unit 1109, 11/F, Tower A, Mandarin Plaza, 14 Science
SANGFOR
Tel: (+852) 3427 9160
Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Hong Kong
Fax: (+852) 3427 9910
Tel: (+852) 3427 9160
Fax: (+852) 3427 9910

SANGFOR WAN Optimization (WANO) delivers

Add: 10 Jalan Kilang #01-05 Sime Darby Enterprise Centre,

SANGFOR
WAN Optimization
multi-layer WAN optimization, improves data

Singapore 159410
Singapore
10 Jalan Kilang
#01-05 Simeon
Darbycables
Enterprise
Centre,
transmission
and
accelerates
Make YourSANGFOR
WAN Like LAN Add: Tel:
(+65) 9189
3267
Singapore 159410
Singapore
application response, especially in high delay
Tel: (+65) 9189 3267

and high packet loss environments. The

improvement of acceleration is significant with
Add: Sequis Plaza Building, 20th Floors, Jl. Jend. Sudirman
SANGFOR
slow-responding
applications
such
as
Kav.25 Jakarta Selatan 12920
Indonesia
Add: Sequis Plaza
Building, email
20th Floors,
Jl. Jend. Sudirman
exchange
systems.
SANGFOR
Tel: (+62) 21 2933 2643
Kav.25 Jakarta Selatan 12920
Indonesia
Fax: (+62) 21 2933 2643
Tel: (+62) 21 2933 2643
Fax: (+62) 21 2933 2643

Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed utra,
SANGFOR
59200 Kuala Lumpur, Malaysia
Malaysia,
Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed Putra,
SANGFOR
Tel: (+60) 3 2201 0192
Vietnam
59200 Kuala Lumpur, Malaysia
Malaysia,
Fax: (+60) 3SANGFOR
2282 1206 SSL VPN is a secure and convenient
Tel: (+60) 3 2201 0192
Vietnam
solution in achieving efficient remote
Fax: (+60) 3 2282 1206
Connect in Anywhere, Anytime
connectivity and gain access to enterprise
applications; to avoid applications being
Add: 29 Vanissa Building 4th Floor, Unit 4G,
SANGFOR
directly
exposed
toLumpini,
risks of attacks and to
Soi Chidlom,
Ploenchit
Road,
ThailandVPN
Add: 29 Vanissa
Building
4th
Floor,
Unit
4G, of the application
Patumwan,
Bangkok,
10330
Thailand
SANGFOR
ensure
access
security
Soi Chidlom,
Ploenchit
Tel:
(+66) 2 254
5884 Road, Lumpini,
Thailand
system.
Patumwan,
Bangkok,
Fax:
(+66) 2
254 588410330 Thailand

SSL VPN

SSL

Tel: (+66) 2 254 5884

Fax: (+66) 2 254 5884

Data Reduction: identifies redundant contents

and eliminates 30-95% WAN traffics.
Transmission Optimization: reduces network
latency and package losses, and accelerates
applications for 3-50 times.
Bandwidth Management: monitors and controls
bandwidth to ensure priority of network activities
and effective bandwidth allocation.
Application Proxy: offers boosted performance to
a wide range of business applications.

Secure: Multiple ways of user authentications,

endpoint security check, dedicated SSL VPN
tunnel, secure desktop and cache cleanup.
Rapid: Streaming compression, resources load
balancer, byte cache technology; , High-speed
Transfer Protocol (HTP) technology.
Usable: Remote access,
EasyConnect application.

mobile

officing,

Add: 2901 Tasman Drive, Suite 107, Santa Clara,

SANGFOR
California 95054, USA
US
Add: 2901 Tasman Drive, Suite 107, Santa Clara,
SANGFOR
Tel: (+1) 408-520-7898
California 95054, USA
US
Fax: (+1) 408-520-7898

NGFW

Tel: (+1) 408-520-7898

Fax: (+1) 408-520-7898
SANGFOR Next Generation Firewall (NGFW)

contains the function of traditional firewalls

SANGFOR
Powerful & Professional
Next
and mainly focuses on application layer, thus, it
EMEA
GenerationSANGFOR
Protection
Add: Unit 1, Thecan
Antler
Complex,
Bruntcliffe Way,
Morley,security
provide
an 1integrated
2-7 layers
EMEA
Leeds LS27 0JG, United Kingdom
protection. SANGFOR NGFW is more reliable,
Tel: (+44) 0 845 533 2371
cost-effective
and high-performance than the
Fax: (+44) 0 845
533 2059
solution of FW+IPS+AV+WAF or UTM+WAF,
and brings you a powerful & professional next
generation protection.

Powerful: Anti application layer attacks,

Bidirectional contents inspection, Contains
traditional security, Application layer high
performance, Modules intelligent interaction.
Professional: Collaborates with Microsoft and
has been certificated by CVE, SOPHOS, APWG,
and AMTSO, etc.

sales@sangfor.com
sales@sangfor.com
www.sangfor.c
www.sangfor.com
Global Service Cent
Global Service Center: +60 12711 7129 (7511)
Sangfor Technologies
www.sangfor.net

info@sangfor.net
(408) 520-7898

2901 Tasman Dr., Suite 107

Santa Clara CA, 95054