Performance & Capacity NGAF M5400-F-I DimensionIPSec VPN Throughput Max IPSec VPN Tunnels Concurrent Connections (TCP)New Connections (TCP)Dual Power Supply1U 1.25Gbps 1,5002,500,000110,000N/AHardware Specifications RAMStorage HD Capacity Power [Watt] Max Operating T emperature Humidity System Weight System DimensionsNGAF M5400-F-I8Gb (Customizable up to 32Gb)SSD 128G (Customizable up to 2T)150W 0°C~40°C5%~95% non-condensing 6.1 Kg400 x 430 x 45 mm (W x L x H)Network Interfaces Bypass (Copper)10/100/1000 Base-T SFP10G Fiber SFP Optional InterfaceSerial Port USB PortNGAF M5400-F-I 3 pairs 6N/A 21 x RJ452Compliance CertificationsNGAF M5400-F-I CE, FCCSANGFOR NGAFM5400-F-ISangfor Next Generation Application Firewall is the world first fully integrated NGFW + WAF with pre-event, during-event and post-event defense for all business assets.A truly integrated firewall solution, providing holistic overview of the entire organization security network, with ease of management for administration, operation and maintenance.NGAF-5400 is the ideal Converged Security solution for Medium Corporate Enterprises. NGAF-5400 is also ideal for Medium - Large Branch Deployment.NGFW is measured with Firewall,Bandwidth Management , IPS, Application ControlThreat Prevention is measured with Firewall, Bandwidth Management IPS, Application Control, Anti Virus12Firewall Throughput IPS & WAF Throughput NGFW Throughput WAF Throughput 20Gbps Threat Protection Throughput 5.6Gbps 5.6Gbps 8.4Gbps 8.4Gbps 12All Pictures shown are for illustration purpose only. Actual Product may vary.End-to-End Protection - End-to-end protection from endpoint to business system- T otal visibility of the entire organization security status- Provides High Availability features with Multi-line HA and Load Balancing- Proactive early detection and prevention at thegateway to prevent attacks from reaching the networkDouble Security (2nd-Tier Firewall)- Double protection which complement existing firewall security policies to ensure full protection - Providing regulatory compliance- Simplified deployment, reducing downtime - Provides flexibility of security design and security policies for di erent business requirements DMZ Protection- Dedicated business system protection for advance protection, without impacting other networks - Providing regulatory compliance- Simplified deployment, reducing downtime- Minimize operation and maintenance works to monitor and troubleshoot security incidentsDeployment ModesInternet O ce NetworkSANGFOR NGAFServer ZoneInternet O ce NetworkServer ZoneInternet SANGFOR NGAF1st-Tier Firewall1st-Tier Firewall2nd-Tier FirewallO ce NetworkServer ZoneInternetSANGFOR NGAF DMZ Network1x Network Module can becustomized to add one more NIC1. 4x GE RJ452. 4x GE SFP3. 8x GE RJ454. 8x GE SFP5. 4x GE RJ45 & 4x GE SFP6. 2x 10GE SFP+Network Module2Hardware Description1. Management Console2. USB ports3. Default Interface4. Line Interface5. Power outlet6. Switch7. Fan Trays8. LED IndicatorsNGAF_DS_P_NGAF54-Datasheet_20201127For more information on Sangfor' full range of support & services, please contact your local representative.All Pictures shown are for illustration purpose only. Actual Product may vary.Software FeaturesNetworkingInterface: Physical Interface, Sub Interface, VLAN Interface, Aggregated InterfaceRouting: Static, Policy-based, RIP, OSPF, BGPNetwork Functions: ARP, DNS, DHCP, SNMP, NAT, High Availability01Access ControlUser: Import / export from external server Authentication: SSO/LDAP/RADIUS Application: ACL and application rules URL Filter: Supported02VPNSANGFOR VPN, IPSEC VPN and SSL VPN supported SDWAN auto path selection03ManagementSNMP v1, v2c, v3SyslogReal-Time Vulnerability Scanner Central management04Key FeaturesFully converged security solution from endpoint to business systems, without the needs of manual integration & consolidation of each feature, as well as additional hardware, which results in lower operational and maintenance costs.Lower TCO Converged Security SolutionsComprehensive business systems protection with built-in Web Application Firewall and Vulnerability Scanners, which is critical for internal systems as well as "internet-facing" systems. Business systems protection is easily enabled via advanced license, without any integration or additional appliance required.Comprehensive Business Systems ProtectionA single simplified operation & maintenance with interactive GUI, which provides ease of configuration, maintenance, troubleshooting and reporting for IT managers, administrators and operations team.User Friendly12Integrated L2–L7 Security features:DoS/DDoS: Inbound, Outbound, Attack Protection Content Security IPS Anti-virusEngine Zero: AI based anti-malware, anti-virus APT WAFData Leakage Prevention Bandwidth Management Web ScannerReal-Time Vulnerability Scanner Security ReporterNeural-X: Cloud threat intelligence and analyticsWeb Application Firewall (WAF) Semantic EngineSupport OWASP Top 10 WAFrequirementsRecommended by NSSSecurity FeaturesConverged SecurityComprehensive WAF12331248765NGAF M5400-F-I Ordering Guide* All bundles are o ered in 1, 2, 3 or 5 year incrementsESS-M54-1/2/3/5Y PM-M54-1/2/3/5Y ULT-M54-1/2/3/5YSKUSKUDescriptionM5400-F-I, Essential Bundle (FW, BM, URL filtering, Application Control, IPS, Email Security, Risk Assessment, Security Visibility, Basic Security Reporter) & Support Services (STS & HRTF)M5400-F-I, Premium Bundle Including Essential Subscription & Engine Zero & Neural-X & Support Services (STS & HRTF)M5400-F-I, Ultimate Bundle including Premium Subscription & Platform-X (NGAF & Endpoint Secure Management, Event Correlation & Response, Security Posture Reporting) & Incident Response (2 times per annum) & Complimentary 30 units of Endpoint Secure Protect Agents (Limited Time O er) & Support Services (STS & HRTF)“A La Carte” Subscription LicenseFNX-M54-1/2/3/5Y FEZ-M54-1/2/3/5Y WAFL-M54-1/2/3/5YDescriptionM5400-F-I, Neural-X License, Threat Intelligence & Analytics, Unknown Threat & Advanced Threat Defense, Value-Added Cloud Service M5400-F-I, Engine Zero License, AI powered Malware Detection, Anti-malware, Anti-virusM5400-F-I, Add Anti-Defacement Module, Web Application FW, Application Hiding, HTTP Anomalies Detection, Data Leak Protection, Web Scanner, Vulnerability Scanner, Advanced Security ReporterSKUHardware Support ServicesSTS-M54-1/2/3/5Y HRTF-M54-1/2/3/5Y HSDS-M54-1/2/3/5Y HNBD-M54-1/2/3/5Y H244G-M54-1/2/3/5YDescriptionM5400-F-I, NGAF Software Upgrade, 24*7 Technical Support Services M5400-F-I, NGAF,Return to Factory (5 Business days ship after receipt)M5400-F-I, NGAF, SDS Hardware Service M5400-F-I, NGAF, NBD Hardware Service M5400-F-I, 24x7x4 Delivery Hardware Service。
深信服超融合架构技术白皮书深信服科技有限公司修订记录深信服超融合架构技术白皮书文档密级：内部第1章、前言 (8)1.1IT时代的变革 (8)1.2白皮书总览 (9)第2章、深信服超融合技术架构 (11)1.1超融合架构概述 (11)1.1.1超融合架构的定义 (11)1.2深信服超融合架构组成模块 (11)1.2.1.1系统总体架构 (11)1.2.1.2aSV计算虚拟化平台 (12)1.2.1.2.1概述 (12)1.2.1.2.2aSV技术原理 (13)1.2.1.2.2.1aSV的Hypervisor架构 (14)1.2.1.2.2.2Hypervisor虚拟化实现 (17)1.2.1.2.3aSV的技术特性 (25)1.2.1.2.3.1内存NUMA技术 (25)1.2.1.2.3.2SR-IOV (26)1.2.1.2.3.3Faik-raid (27)1.2.1.2.3.4虚拟机生命周期管理 (28)1.2.1.2.3.5虚拟交换机 (29)1.2.1.2.3.6动态资源调度 (30)1.2.1.2.4aSV的特色技术 (30)1.2.1.2.4.1快虚 (30)1.2.1.2.4.2虚拟机热迁移 (31)1.2.1.2.4.3虚拟磁盘加密 (32)1.2.1.2.4.4虚拟机的HA (33)1.2.1.2.4.5多USB映射 (33)1.2.1.3aSAN存储虚拟化 (35)1.2.1.3.1存储虚拟化概述 (35)1.2.1.3.1.1虚拟后对存储带来的挑战 (35)1.2.1.3.1.2分布式存储技术的发展 (35)1.2.1.3.1.3深信服aSAN概述 (36)1.2.1.3.2aSAN技术原理 (36)1.2.1.3.2.1主机管理 (36)1.2.1.3.2.2文件副本 (37)1.2.1.3.2.3磁盘管理 (38)1.2.1.3.2.4SSD读缓存原理 (39)1.2.1.3.2.5SSD写缓存原理 (45)1.2.1.3.2.6磁盘故障处理机制 (49)1.2.1.3.3深信服aSAN功能特性 (60)1.2.1.3.3.1存储精简配置 (60)1.2.1.3.3.2aSAN私网链路聚合 (61)1.2.1.3.3.3数据一致性检查 (61)1.2.1.4aNet网络虚拟化 (61)1.2.1.4.1网络虚拟化概述 (61)1.2.1.4.2aNET网络虚拟化技术原理 (62)1.2.1.4.2.1SDN (62)1.2.1.4.2.2NFV (63)1.2.1.4.2.3aNet底层的实现 (64)1.2.1.4.3功能特性 (68)1.2.1.4.3.1aSW分布式虚拟交换机 (68)1.2.1.4.3.2aRouter (68)1.2.1.4.3.3vAF (69)1.2.1.4.3.4vAD (69)1.2.1.4.4深信服aNet的特色技术 (69)1.2.1.4.4.1网络探测功能 (69)1.2.1.4.4.2全网流量可视 (70)1.2.1.4.4.3所画即所得业务逻辑拓扑 (70)1.2.2深信服超融合架构产品介绍 (71)1.2.2.1产品概述 (71)1.2.2.2产品定位 (71)第3章、深信服超融合架构带来的核心价值 (73)1.1可靠性： (73)1.2安全性 (73)1.3灵活弹性 (73)1.4易操作性 (73)第4章、超融合架构最佳实践 (74)第1章、前言1.1 IT时代的变革20 世纪90 年代，随着Windows 的广泛使用及Linux 服务器操作系统的出现奠定了x86服务器的行业标准地位，然而x86 服务器部署的增长带来了新的IT 基础架构和运作难题，包括：基础架构利用率低、物理基础架构成本日益攀升、IT 管理成本不断提高以及对关键应用故障和灾难保护不足等问题。
SSL VPN V4.1 技术白皮书目录第1章序言 (1)第2章SANGFOR SSL VPN网关简介 (3)第3章SANGFOR SSL VPN网关技术 (5)3.1更快的SSL VPN (5)3.1.1多线路智能选路解决您的网络延迟问题 (5)3.1.2多线路带宽叠加技术，扩大出口带宽 (6)3.1.3HTP技术，提高无线和恶劣环境下的访问速度 (7)3.1.4动态压缩技术，全面提高传输速度 (8)3.1.5基于Web的压缩技术，进一步提高传输效率 (8)3.1.6强大的硬件加速卡，更快的SSL处理速度 (8)3.2更安全的SSL VPN (8)3.2.1集成多种认证方式 (8)3.2.2混合认证 (8)3.2.3动态身份认证提供多重保证 (9)3.2.4内置的CA中心提供完整认证体系 (11)3.2.5与LDAP（AD）结合 (11)3.2.6与Radius结合 (12)3.2.7与第三CA结合 (12)3.2.8开放数据接口提供二次开发 (12)3.2.9与其他第三方认证系统结合，保护前期投资 (13)3.2.10图形码验证功能 (13)3.2.11软键盘功能 (13)3.2.12会话超时控制功能 (13)3.2.13全面的密码安全保障 (14)3.2.14客户端安全检查从端点开始保障您的网络安全 (14)3.2.15强化的网络防护－VPN虚拟专线功能 (14)3.2.16零痕迹访问功能避免安全漏洞 (15)3.2.17真正的SSL 协议加密传输 (15)3.2.18访问权限控制功能提供最细致的权限管理 (16)3.2.19完善的日志系统 (16)3.2.20丰富的日志信息 (17)3.2.21强大的实时监控能力 (17)3.2.22集成企业级状态防火墙 (17)3.3更好用的SSL VPN (18)3.3.1能支持您的所有网络应用 (18)3.3.2B/S正则替换，全面适应各种平台 (19)3.3.3提供IPSec/SSL一体化选择 (19)3.3.4配置向导简化管理员的操作过程 (20)3.3.5隐藏服务模式 (20)3.3.6支持动态IP (20)3.3.7管理员分级分权限管理 (21)3.3.8定制登录界面功能 (21)3.3.9单点登录功能（SSO） (21)3.3.10移动终端设备的完美支持 (22)3.3.11内网DNS支持 (22)3.3.12多虚拟IP池支持 (22)3.3.13User权限下正常访问 (22)3.3.14默认服务页面 (23)3.3.15系统托盘 (23)3.3.16全网资源 (23)3.4更稳定的SSL VPN (23)3.4.1支持动态IP (23)3.4.2多线路技术实现线路备份，保证VPN线路稳定 (24)3.4.3双机热备，保证VPN网络稳定性 (24)3.4.4自动恢复，提高网络适应能力 (25)3.4.5集群功能，满足大并发接入 (25)第4章SANGFOR SSL VPN网关网络和系统结构 (25)4.1路由模式部署 (25)4.2单臂模式部署 (26)4.3双机热备原理 (26)4.4客户端登录和使用界面 (27)4.4.1缺省登录界面 (27)4.4.2可用资源界面 (27)第5章SANGFOR SSL VPN网关技术优势 (28)5.1更方便易用的SSL VPN (28)5.1.1单点登录 (28)5.1.2默认服务页面 (28)5.1.3分级分权限管理 (28)5.1.4集群 (28)5.1.5完全页面定制 (28)5.2更安全的SSL VPN (29)5.2.1混合认证 (29)5.3更快的SSL VPN (29)5.3.1多线路技术 (29)5.3.2HTP技术 (29)5.3.3压缩技术 (30)5.3.4更多广域网加速技术 (30)5.4更好管理和易用的SSL VPN (30)5.4.1动态IP快速建立隧道 (30)第6章深信服公司简介 (1)第7章附录 (2)7.1VPN技术背景知识 (2)7.1.1VPN简介 (2)7.1.2SSL 协议介绍 (5)7.1.3SSL VPN技术 (6)第1章序言随着移动数据技术的进步和商务模式的发展，选择远程办公的人越来越多。
