Embed Size (px)
DESCRIPTION
Â
Citation preview
With the development of cloud computing and mobile devices, modernworkforces have become increasingly mobilized and distributed. This trendrequires business organizations to prepare its IT infrastructure to facilitatea secure and efficient remote access to business resources with full efforts.
SANGFOR understands those business challenges and is committed toprovide solutions for those increasing demands of modern businesses.Leveraging from its innovative technologies, SANGFOR releases its superiorSSL VPN products. Compared with other existing SSL VPN solutions,SANGFOR SSL VPN offers the best level business driven solution withextraordinary access speed, unique virtualization and security technologies.
www.sangfor.net
SANGFOR SSL VPN SANGFOR SSL VPN
Compression is commonly used in other
solutions but not enough to offer a
high-speed SSL VPN connection.
SANGFOR SSL VPN innovatively adopts
the byte cache technology into SSL VPN
sessions, which effectively eliminates
30-90% of redundant traffics on
SSL VPN links and improves the access
speed of remote users.
Under harsh network environments such
as cross-border, cross-operator, Wi-Fi and
3G networks with high packet loss rate or
high latency, the access speed would be
significantly lower than one had expected.
SANGFOR SSL VPN employs HTP
(High-speed Transfer Protocol) to smooth
the transfer environment and minimize the
negative impact of packet loss and latency.
Thus, end users are able to consistently
enjoy a favorable access experience.
AccessOptimization
Reduces more than 75% of redundant data and releases asignificant portion of the bandwidth for critical traffics
In order to solve the display and slow
connection problems that tablets and
mobile devices users might encounter
when accessing browser-based
applications, SANGFOR SSL VPN not
only optimizes the page display and
mobile access, but also provides various
image optimization policies such as
image filtering and compression to
prevent the problems mentioned above.
Considering real-life deployment,
SANGFOR SSL VPN is also equipped with
Intelligent Link Selector and Resources
Load Balancer. The Intelligent Link
Selector can automatically select the
optimal link for remote access when there
are multiple links, and the Resources Load
Balancer can assign each access to the
ideal server when the related application is
carried by multiple servers.
By using the exclusive acceleration
technology of SANGFOR SSL VPN,
enterprises are able to provide users with
a satisfied and efficient remote access
experience, which eventually improves
the working productivity of remote
workforces.
Ideal solution for mobile access optimization
Optimal access experience under any environments
Access Optimization onTablets and Mobile Devices
Full Utilization of Resources
Smooth Performance underHarsh Network Environments
Less Bandwidth Required Byte Cache - Average Link Speed (Realtime)
Service Uptime 0day(s) 0hour(s) 10minute(s) [Optimization Effect]
8000
6000
4000
2000
009:22
Before Optimization:0.0 KBpsAfter Optimization: 0.0 KBps
09:23 09:24 09:25 09:26
TCP
transm
ission rate K
B/S
HT
P tran
smission
rate KB
/S
Delay1000ms
Lost 3%120100
80604020
0
Lost 5% Lost 10%
Delay300ms
Delay100ms
SANGFOR SSL VPN provides remote user with extraordinaryaccess performance and experience by embeddingacceleration technologies without additional license fee!
Never Been So Fast
SANGFOR Remote Application® for Application Virtualization- Interfaces of published applications are pushed to endpoints’ screens as virtual access windows, thus end users are able to remotely access the applications through a browser; - Operation and control on applications occur in the server-end, no business data will be stored locally.
BidirectionalVirtualization
With SANGFOR Remote Application, business applications are virtualized, centralized and
managed in the datacenter and instantly delivered as a service to those users in need. Since
everything occurs within the virtual application servers, by all means users are virtuallyoperating in the enterprise network, which avoided any possibility of information leakage.
As business applications are delivered to
remote workforce as on-demand service,
remote workforces can now access anypublished applications freely from anyendpoints with a browser including mobiledevices, no matter the applications are
based on Windows or in the form of B/S
and C/S.
With diversity of endpoints and business applications, IT managers have always been looking fora better remote access solution. That is, business applications can be securely delivered to
remote workforces as on-demand service via a browser, with no limitation to remote workspaces,application types or available endpoints. Then SANGFOR SSL VPN Remote Application is theanswer.
Application Virtualization
Deliveres Applications as
On-demand Service
Smooth Access from Tabletsand Smart Phones
Enterprise-wide ApplicationVirtualization
SANGFOR Remote Application solutionvirtualizes the business applications andimproves the portability, compatibility
and manageability of those applications.It cuts down the maintenance cost sinceall applications are operates and managedin the datacenter. With its remarkableease of deployment and affordable price,
enterprises are able to carry out theenterprise-wide application virtualization
in a fast and cost-effective way.
LAN / WAN
AT&T
Tablets
Desktops
Smartphones
Laptops
Virtualization
Application virtualization: Tablets and smart phone access; Bring Your Own Device;Local virtualization: Endpoint Compliance; Network/System Logical Isolation.
Remotely operation
SANGFOR SSL VPN
Server-based applications
Keyboard input, mouse click
Interfaces of remote applicationsAT&T
Do More with Less
SecureConnection
When application data is delivered to remote workforce, enterprises have to take the risk of
potential information leakage, since data can be out of control once leaving the enterprisenetwork. Application virtualization was the solution to prevent such risks, however, huge
costs and great changes to existing IT infrastructure may keep IT managers away.Therefore, SANGFOR SSL VPN Secure Desktop can be a favorable alternative choice as alight-weight virtualization solution in the endpoints.
Secure Desktop through Local Virtualization
Secure Desktop mirrors a virtual desktop from the default desktop on remote endpoints.Users need to access protected resources through Secure Desktop and other resources through default desktop.
SANGFOR SSL VPN
Default desktop
Secure desktop
Minimize exit
Local Virtualization
Common data
Confidential data
INTERNET
Save to local disk
Copy & Paste to local resource Cached / temp.files
SANGFOR Secure Desktop is a protected workspace that achieves logical isolation betweenthe Internet and local resources. No data can be leaked out with instant data encryption,peripherals control and “write” restrictions in the protected space. When you exit the secure
desktop, all access records and usage traces will be cleared. Thus core business data can beprotected in a better way.
In addition to offering benefits to remote access criteria, with proper deployment in LAN
environment, SANGFOR Secure Desktop can also benefit enterprises as system/network
logical isolation solution in a convenient and cost-effective way.
Authentication: Supports up to eight typesof authentication methods:
- User name/Password, LDAP, RADIUS, CA(Certification Authority);
- Certificate/USB key based authentication,Dynamic token, Hardware ID, SMS.
Binds SSL VPN useraccounts to authorized applicationsaccounts for account compliance andmanagement.
Host Checker: Endpoint detection andscanning of operating system, registry file,
personal firewall, anti-virus files,user-customized security rules and other
security policies prior to user login as wellas during SSL VPN sessions.
Cache Cleanup: Wipes off any cached datawhen the SSL VPN session terminates,
which avoids data leakage if any remoteusers are accessing SSL VPN with a public
endpoint.
Tunnel Encryption: SSL session encryption.
Provides theflexibility of disconnecting all other Internet
connections but SSL VPN session to prevent
intrusions and attacks from the Internet.
Man-in-the-middle Attack Detection: Detects and alerts if the endpoint is suffering“Man-in-the-middle” attack before it is
connected to the intranet.
“User-Role-Resource” Assignment:
Accurately and meticulously assigns resources
to specifically defined users or roles, which
avoids unauthorized usage of published
applications.
Transmission Security Resources Authorization Policy
Identity Authentication Endpoint Security
SANGFOR SSL VPN has built-in all-round security protection polices
including identity authentication, endpoint security, transmitting
security and resources authorization polices to achieve a secure
remote connection.
Account Binding:
Dedicated SSL VPN Tunnel:
SANGFOR SSL VPN was designed to
deliver much more than just a secure
connectivity between remote users and
the enterprise resources. Embedded
acceleration technology differentiatesSANGFOR SSL VPN from other
competing products in the market by
achieving 3-50 times faster connection
in comparison. Virtualization technology
smooth the business applicationavailability in every way including the
application and endpoint compatibility,
efficiency, manageability and security.
Advantages
SimplifiedManagementandConsolidatedInfrastructure
Acknowledgesand Achievements
SANGFOR SSL VPN simplifies theaccount/authentication by allowing
administrators to do seamless combinationwith the LDAP/RADIUS servers andsupporting SSO (single-sign-on) with
published applications.
SSO Simplified User Administration
Flexible Deployment
IT administrators are provided with
management tools such as message
broadcaster and bandwidth controller.
Message broadcaster enables IT
administrators to broadcast warnings or
notifications to their SSL VPN users.
Bandwidth controller allows IT
administrators to allocate the bandwidth
precisely for fair usage and avoid bandwidth
congestion among their SSL VPN users.
Furthermore, access logs can be kept and
IT managers are able to export those data
to enterprises’ log servers by Syslog/SNMP.
Various deployment features are offered
for consolidating it into the existing ITinfrastructure with typical functions such
as the asymmetrical cluster and cloudcluster. Asymmetrical cluster supportsrobust clustering of different hardware
models for scalability. Cloud clusterassigns SSL VPN requests to the fastest
and most healthy appliance when
SSL VPNs are deployed in multiple data
centers that are located in different places.
The best-in-class SSL VPN appliance
is promised to deliver enterprise business
with maximized value and low TCO
(Total cost of ownership).
Magic Quadrant For SSL VPNs
leaders
visionaries
challengers
niche players
completeness of vision
abili
ty t
o ex
ecu
teS
ource: G
artner (N
ov 2011) A
s of Nov 20
11
Sangfor
NO.1 in China for 4 consecutive years
Sou
rce: Frost & S
ullivan
; Ch
ina
2008
31.1%
2011
39.2%
2010
36%
2009
34%
per
cen
tage
years
SANGFOR TECHNOLOGIES
www.sangfor.com
Global Service Center: +60 12711 7129 (7511)
Add: Unit 1109, 11/F, Tower A, Mandarin Plaza, 14 Science Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Tel: (+852) 3427 9160Fax: (+852) 3427 9910
Add: 10 Jalan Kilang #01-05 Sime Darby Enterprise Centre, Singapore 159410Tel: (+65) 9189 3267
Add: Sequis Plaza Building, 20th Floors, Jl. Jend. Sudirman Kav.25 Jakarta Selatan 12920Tel: (+62) 21 2933 2643Fax: (+62) 21 2933 2643
Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed Putra, 59200 Kuala Lumpur, MalaysiaTel: (+60) 3 2201 0192Fax: (+60) 3 2282 1206
Add: 29 Vanissa Building 4th Floor, Unit 4G, Soi Chidlom, Ploenchit Road, Lumpini, Patumwan, Bangkok, 10330 ThailandTel: (+66) 2 254 5884Fax: (+66) 2 254 5884
Add: 2901 Tasman Drive, Suite 107, Santa Clara, California 95054, USATel: (+1) 408-520-7898Fax: (+1) 408-520-7898
SANGFOR US
SANGFOR Hong Kong
SANGFOR Singapore
SANGFOR Indonesia
SANGFOR Malaysia, Vietnam
SANGFOR Thailand
SANGFOR EMEA
Add: Unit 1, The Antler Complex, 1 Bruntcliffe Way, Morley,Leeds LS27 0JG, United Kingdom
Tel: (+44) 0 845 533 2371Fax: (+44) 0 845 533 2059
SANGFOR TECHNOLOGIES
www.sangfor.c
Global Service Cent
Add: Unit 1109, 11/F, Tower A, Mandarin Plaza, 14 Science Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Tel: (+852) 3427 9160Fax: (+852) 3427 9910
Add: 10 Jalan Kilang #01-05 Sime Darby Enterprise Centre, Singapore 159410Tel: (+65) 9189 3267
Add: Sequis Plaza Building, 20th Floors, Jl. Jend. Sudirman Kav.25 Jakarta Selatan 12920Tel: (+62) 21 2933 2643Fax: (+62) 21 2933 2643
Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed utra, 59200 Kuala Lumpur, MalaysiaTel: (+60) 3 2201 0192Fax: (+60) 3 2282 1206
Add: 29 Vanissa Building 4th Floor, Unit 4G, Soi Chidlom, Ploenchit Road, Lumpini, Patumwan, Bangkok, 10330 ThailandTel: (+66) 2 254 5884Fax: (+66) 2 254 5884
Add: 2901 Tasman Drive, Suite 107, Santa Clara, California 95054, USATel: (+1) 408-520-7898Fax: (+1) 408-520-7898
SANGFOR US
SANGFOR Hong Kong
SANGFOR Singapore
SANGFOR Indonesia
SANGFOR Malaysia, Vietnam
SANGFOR Thailand
SANGFOR EMEA
SANGFOR TECHNOLOGIESSangfor is a global leader in networking technology that has helped more than 28,000 businesses make their networks faster, simpler, and safer. Sangfor’s networking solutions allow enterprieses to successfully run critical applications on any device, anytime, and anywhere. With over 2,000 employees and 55 worldwide offices. Sangfor has proven their WAN Optimization, SSL VPN, and Next Generation Firewall products in competitive markets around the world.
WAN OptimizationMake Your WAN Like LAN
SSL VPN
SANGFOR WAN Optimization (WANO) delivers
multi-layer WAN optimization, improves data
transmission on cables and accelerates
application response, especially in high delay
and high packet loss environments. The
improvement of acceleration is significant with
slow-responding applications such as
exchange email systems.
Data Reduction: identifies redundant contents
and eliminates 30-95% WAN traffics.
Transmission Optimization: reduces network
latency and package losses, and accelerates
applications for 3-50 times.
Bandwidth Management: monitors and controls
bandwidth to ensure priority of network activities
and effective bandwidth allocation.
Application Proxy: offers boosted performance to
a wide range of business applications.
SANGFOR SSL VPN is a secure and convenient
solution in achieving efficient remote
connectivity and gain access to enterprise
applications; to avoid applications being
directly exposed to risks of attacks and to
ensure access security of the application
system.
Secure: Multiple ways of user authentications,
endpoint security check, dedicated SSL VPN
tunnel, secure desktop and cache cleanup.
Rapid: Streaming compression, resources load
balancer, byte cache technology; , High-speed
Transfer Protocol (HTP) technology.
Usable: Remote access, mobile officing,
EasyConnect application.
Connect in Anywhere, Anytime
VPN
SSL
NGFW SANGFOR Next Generation Firewall (NGFW)
contains the function of traditional firewalls
and mainly focuses on application layer, thus, it
can provide an integrated 2-7 layers security
protection. SANGFOR NGFW is more reliable,
cost-effective and high-performance than the
solution of FW+IPS+AV+WAF or UTM+WAF,
and brings you a powerful & professional next
generation protection.
Powerful: Anti application layer attacks,
Bidirectional contents inspection, Contains
traditional security, Application layer high
performance, Modules intelligent interaction.
Professional: Collaborates with Microsoft and
has been certificated by CVE, SOPHOS, APWG,
and AMTSO, etc.
Powerful & Professional Next
Generation Protection
www.sangfor.net
(408) 520-7898
2901 Tasman Dr., Suite 107
Santa Clara CA, 95054Sangfor Technologieswww.sangfor.net
