Sangfor SSL VPN is an integrated, full-featured secure remote access platform for easy-to-use, anytime, anywhere connectivity. Remote and mobile users can quickly and easily access internal resources, applications and files - using any device with a web browser. Multi-layered security protection includes authentication, endpoint security, transmitting security and resource authorization policies.

1. With the development of cloud computing and mobile devices, modern
workforces have become increasingly mobilized and distributed. This trend
requires business organizations to prepare its IT infrastructure to facilitate
a secure and efficient remote access to business resources with full efforts.
SANGFOR understands those business challenges and is committed to
provide solutions for those increasing demands of modern businesses.
Leveraging from its innovative technologies, SANGFOR releases its superior
SSL VPN products. Compared with other existing SSL VPN solutions,
SANGFOR SSL VPN offers the best level business driven solution with
extraordinary access speed, unique virtualization and security technologies.
www.sangfor.net
SANGFOR SSL VPNSANGFOR SSL VPN

2. Compression is commonly used in other
solutions but not enough to offer a
high-speed SSL VPN connection.
SANGFOR SSL VPN innovatively adopts
the byte cache technology into SSL VPN
sessions, which effectively eliminates
30-90% of redundant traffics on
SSL VPN links and improves the access
speed of remote users.
Under harsh network environments such
as cross-border, cross-operator, Wi-Fi and
3G networks with high packet loss rate or
high latency, the access speed would be
significantly lower than one had expected.
SANGFOR SSL VPN employs HTP
(High-speed Transfer Protocol) to smooth
the transfer environment and minimize the
negative impact of packet loss and latency.
Thus, end users are able to consistently
enjoy a favorable access experience.
Access
Optimization
Reduces more than 75% of redundant data and releases a
significant portion of the bandwidth for critical traffics
In order to solve the display and slow
connection problems that tablets and
mobile devices users might encounter
when accessing browser-based
applications, SANGFOR SSL VPN not
only optimizes the page display and
mobile access, but also provides various
image optimization policies such as
image filtering and compression to
prevent the problems mentioned above.
Considering real-life deployment,
SANGFOR SSL VPN is also equipped with
Intelligent Link Selector and Resources
Load Balancer. The Intelligent Link
Selector can automatically select the
optimal link for remote access when there
are multiple links, and the Resources Load
Balancer can assign each access to the
ideal server when the related application is
carried by multiple servers.
By using the exclusive acceleration
technology of SANGFOR SSL VPN,
enterprises are able to provide users with
a satisfied and efficient remote access
experience, which eventually improves
the working productivity of remote
workforces.
Ideal solution for mobile access optimization
Optimal access experience under any environments
Access Optimization on
Tablets and Mobile Devices
Full Utilization of Resources
Smooth Performance under
Harsh Network Environments
Less Bandwidth Required Byte Cache - Average Link Speed (Realtime)
Service Uptime 0day(s) 0hour(s) 10minute(s) [Optimization Effect]
8000
6000
4000
2000
0
09:22
Before Optimization:0.0 KBps
After Optimization: 0.0 KBps
09:23 09:24 09:25 09:26
TCPtransmissionrateKB/S
HTPtransmissionrateKB/S
Delay
1000ms
Lost 3%
120
100
80
60
40
20
0
Lost 5% Lost 10%
Delay
300ms
Delay
100ms
SANGFOR SSL VPN provides remote user with extraordinary
access performance and experience by embedding
acceleration technologies without additional license fee!
Never Been So Fast

3. SANGFOR Remote Application® for Application Virtualization
- Interfaces of published applications are pushed to endpoints’ screens as virtual access windows, thus end users are
able to remotely access the applications through a browser;
- Operation and control on applications occur in the server-end, no business data will be stored locally.
Bidirectional
Virtualization
With SANGFOR Remote Application, business applications are virtualized, centralized and
managed in the datacenter and instantly delivered as a service to those users in need. Since
everything occurs within the virtual application servers, by all means users are virtually
operating in the enterprise network, which avoided any possibility of information leakage.
As business applications are delivered to
remote workforce as on-demand service,
remote workforces can now access any
published applications freely from any
endpoints with a browser including mobile
devices, no matter the applications are
based on Windows or in the form of B/S
and C/S.
With diversity of endpoints and business applications, IT managers have always been looking for
a better remote access solution. That is, business applications can be securely delivered to
remote workforces as on-demand service via a browser, with no limitation to remote workspaces,
application types or available endpoints. Then SANGFOR SSL VPN Remote Application is the
answer.
Application Virtualization
Deliveres Applications as
On-demand Service
Smooth Access from Tablets
and Smart Phones
Enterprise-wide Application
Virtualization
SANGFOR Remote Application solution
virtualizes the business applications and
improves the portability, compatibility
and manageability of those applications.
It cuts down the maintenance cost since
all applications are operates and managed
in the datacenter. With its remarkable
ease of deployment and affordable price,
enterprises are able to carry out the
enterprise-wide application virtualization
in a fast and cost-effective way.
LAN / WAN
AT&T
Tablets
Desktops
Smart
phones
Laptops
Virtualization
Application virtualization: Tablets and smart phone access;
Bring Your Own Device;
Local virtualization: Endpoint Compliance;
Network/System Logical Isolation.
Remotely operation
SANGFOR SSL VPN
Server-based applications
Keyboard input, mouse click
Interfaces of remote applications
AT&T
Do More with Less

4. Secure
Connection
When application data is delivered to remote workforce, enterprises have to take the risk of
potential information leakage, since data can be out of control once leaving the enterprise
network. Application virtualization was the solution to prevent such risks, however, huge
costs and great changes to existing IT infrastructure may keep IT managers away.
Therefore, SANGFOR SSL VPN Secure Desktop can be a favorable alternative choice as a
light-weight virtualization solution in the endpoints.
Secure Desktop through
Local Virtualization
Secure Desktop mirrors a virtual desktop from the default desktop on remote endpoints.
Users need to access protected resources through Secure Desktop and other resources through default desktop.
SANGFOR
SSL VPN
Default desktop
Secure desktop
Minimize exit
Local
Virtualization
Common data
Confidential data
INTERNET
Save to local disk
Copy & Paste to
local resource Cached / temp.files
Print
SANGFOR Secure Desktop is a protected workspace that achieves logical isolation between
the Internet and local resources. No data can be leaked out with instant data encryption,
peripherals control and “write” restrictions in the protected space. When you exit the secure
desktop, all access records and usage traces will be cleared. Thus core business data can be
protected in a better way.
In addition to offering benefits to remote access criteria, with proper deployment in LAN
environment, SANGFOR Secure Desktop can also benefit enterprises as system/network
logical isolation solution in a convenient and cost-effective way.
Authentication: Supports up to eight types
of authentication methods:
- User name/Password, LDAP, RADIUS, CA
(Certification Authority);
- Certificate/USB key based authentication,
Dynamic token, Hardware ID, SMS.
Binds SSL VPN user
accounts to authorized applications
accounts for account compliance and
management.
Host Checker: Endpoint detection and
scanning of operating system, registry file,
personal firewall, anti-virus files,
user-customized security rules and other
security policies prior to user login as well
as during SSL VPN sessions.
Cache Cleanup: Wipes off any cached data
when the SSL VPN session terminates,
which avoids data leakage if any remote
users are accessing SSL VPN with a public
endpoint.
Tunnel Encryption: SSLsession encryption.
Provides the
flexibility of disconnecting all other Internet
connections but SSL VPN session to prevent
intrusions and attacks from the Internet.
Man-in-the-middle Attack Detection:
Detects and alerts if the endpoint is suffering
“Man-in-the-middle” attack before it is
connected to the intranet.
“User-Role-Resource” Assignment:
Accuratelyandmeticulouslyassignsresources
tospecificallydefinedusersorroles,which
avoidsunauthorizedusageofpublished
applications.
Transmission Security Resources Authorization Policy
Identity Authentication Endpoint Security
SANGFOR SSL VPN has built-in all-round security protection polices
including identity authentication, endpoint security, transmitting
security and resources authorization polices to achieve a secure
remote connection.
Account Binding:
Dedicated SSL VPN Tunnel:

5. SANGFOR SSL VPN was designed to
deliver much more than just a secure
connectivity between remote users and
the enterprise resources. Embedded
acceleration technology differentiates
SANGFOR SSL VPN from other
competing products in the market by
achieving 3-50 times faster connection
in comparison. Virtualization technology
smooth the business application
availability in every way including the
application and endpoint compatibility,
efficiency, manageability and security.
Advantages
Simplified
Management
and
Consolidated
Infrastructure
Acknowledges
and
Achievements
SANGFOR SSL VPN simplifies the
account/authentication by allowing
administrators to do seamless combination
with the LDAP/RADIUS servers and
supporting SSO (single-sign-on) with
published applications.
SSO Simplified User Administration
Flexible Deployment
IT administrators are provided with
management tools such as message
broadcaster and bandwidth controller.
Message broadcaster enables IT
administrators to broadcast warnings or
notifications to their SSL VPN users.
Bandwidth controller allows IT
administrators to allocate the bandwidth
precisely for fair usage and avoid bandwidth
congestion among their SSL VPN users.
Furthermore, access logs can be kept and
IT managers are able to export those data
to enterprises’ log servers by Syslog/SNMP.
Various deployment features are offered
for consolidating it into the existing IT
infrastructure with typical functions such
as the asymmetrical cluster and cloud
cluster. Asymmetrical cluster supports
robust clustering of different hardware
models for scalability. Cloud cluster
assigns SSL VPN requests to the fastest
and most healthy appliance when
SSL VPNs are deployed in multiple data
centers that are located in different places.
The best-in-class SSL VPN appliance
is promised to deliver enterprise business
with maximized value and low TCO
(Total cost of ownership).
Magic Quadrant For SSL VPNs
leaders
visionaries
challengers
niche players
completeness of vision
abilitytoexecute
Source:Gartner(Nov2011)AsofNov2011
Sangfor
NO.1 in China for 4 consecutive years
Source:Frost&Sullivan;China
2008
31.1%
2011
39.2%
2010
36%
2009
34%
percentage
years

6. SANGFOR TECHNOLOGIES
sales@sangfor.com
www.sangfor.com
Global Service Center: +60 12711 7129 (7511)
Add: Unit 1109, 11/F, Tower A, Mandarin Plaza, 14 Science
Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Tel: (+852) 3427 9160
Fax: (+852) 3427 9910
Add: 10 Jalan Kilang #01-05 Sime Darby Enterprise Centre,
Singapore 159410
Tel: (+65) 9189 3267
Add: Sequis Plaza Building, 20th Floors, Jl. Jend. Sudirman
Kav.25 Jakarta Selatan 12920
Tel: (+62) 21 2933 2643
Fax: (+62) 21 2933 2643
Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed Putra,
59200 Kuala Lumpur, Malaysia
Tel: (+60) 3 2201 0192
Fax: (+60) 3 2282 1206
Add: 29 Vanissa Building 4th Floor, Unit 4G,
Soi Chidlom, Ploenchit Road, Lumpini,
Patumwan, Bangkok, 10330 Thailand
Tel: (+66) 2 254 5884
Fax: (+66) 2 254 5884
Add: 2901 Tasman Drive, Suite 107, Santa Clara,
California 95054, USA
Tel: (+1) 408-520-7898
Fax: (+1) 408-520-7898
SANGFOR
US
SANGFOR
Hong Kong
SANGFOR
Singapore
SANGFOR
Indonesia
SANGFOR
Malaysia,
Vietnam
SANGFOR
Thailand
SANGFOR
EMEA
Add: Unit 1, The Antler Complex, 1 Bruntcliffe Way, Morley,
Leeds LS27 0JG, United Kingdom
Tel: (+44) 0 845 533 2371
Fax: (+44) 0 845 533 2059
SANGFOR TECHNOLOGIES
sales@sangfor.com
www.sangfor.c
Global Service Cent
Add: Unit 1109, 11/F, Tower A, Mandarin Plaza, 14 Science
Museum Road,Tsim Sha Tsui East, Kowloon, Hong Kong
Tel: (+852) 3427 9160
Fax: (+852) 3427 9910
Add: 10 Jalan Kilang #01-05 Sime Darby Enterprise Centre,
Singapore 159410
Tel: (+65) 9189 3267
Add: Sequis Plaza Building, 20th Floors, Jl. Jend. Sudirman
Kav.25 Jakarta Selatan 12920
Tel: (+62) 21 2933 2643
Fax: (+62) 21 2933 2643
Add: No. 7-8, Boulevard Mid Valley City, Lingkaran Syed utra,
59200 Kuala Lumpur, Malaysia
Tel: (+60) 3 2201 0192
Fax: (+60) 3 2282 1206
Add: 29 Vanissa Building 4th Floor, Unit 4G,
Soi Chidlom, Ploenchit Road, Lumpini,
Patumwan, Bangkok, 10330 Thailand
Tel: (+66) 2 254 5884
Fax: (+66) 2 254 5884
Add: 2901 Tasman Drive, Suite 107, Santa Clara,
California 95054, USA
Tel: (+1) 408-520-7898
Fax: (+1) 408-520-7898
SANGFOR
US
SANGFOR
Hong Kong
SANGFOR
Singapore
SANGFOR
Indonesia
SANGFOR
Malaysia,
Vietnam
SANGFOR
Thailand
SANGFOR
EMEA
SANGFOR TECHNOLOGIES
Sangfor is a global leader in networking technology that has helped more than 28,000 businesses make
their networks faster, simpler, and safer. Sangfor’s networking solutions allow enterprieses to successfully
run critical applications on any device, anytime, and anywhere. With over 2,000 employees and 55 worldwide
offices. Sangfor has proven their WAN Optimization, SSL VPN, and Next Generation Firewall products in
competitive markets around the world.
WAN Optimization
Make Your WAN Like LAN
SSL VPN
SANGFOR WAN Optimization (WANO) delivers
multi-layer WAN optimization, improves data
transmission on cables and accelerates
application response, especially in high delay
and high packet loss environments. The
improvement of acceleration is significant with
slow-responding applications such as
exchange email systems.
Data Reduction: identifies redundant contents
and eliminates 30-95%WAN traffics.
Transmission Optimization: reduces network
latency and package losses, and accelerates
applications for 3-50 times.
Bandwidth Management: monitors and controls
bandwidth to ensure priority of network activities
and effective bandwidth allocation.
Application Proxy: offers boosted performance to
a wide range of business applications.
SANGFOR SSL VPN is a secure and convenient
solution in achieving efficient remote
connectivity and gain access to enterprise
applications; to avoid applications being
directly exposed to risks of attacks and to
ensure access security of the application
system.
Secure: Multiple ways of user authentications,
endpoint security check, dedicated SSL VPN
tunnel,secure desktop and cache cleanup.
Rapid: Streaming compression, resources load
balancer, byte cache technology; , High-speed
Transfer Protocol (HTP) technology.
Usable: Remote access, mobile officing,
EasyConnect application.
Connect in Anywhere, Anytime
VPN
SSL
NGFW SANGFOR Next Generation Firewall (NGFW)
contains the function of traditional firewalls
and mainly focuses on application layer, thus, it
can provide an integrated 2-7 layers security
protection. SANGFOR NGFW is more reliable,
cost-effective and high-performance than the
solution of FW+IPS+AV+WAF or UTM+WAF,
and brings you a powerful & professional next
generation protection.
Powerful: Anti application layer attacks,
Bidirectional contents inspection, Contains
traditional security, Application layer high
performance,Modules intelligent interaction.
Professional: Collaborates with Microsoft and
has been certificated by CVE, SOPHOS, APWG,
andAMTSO,etc.
Powerful & Professional Next
Generation Protection
www.sangfor.net
info@sangfor.net
(408) 520-7898
2901 Tasman Dr., Suite 107
Santa Clara CA, 95054
Sangfor Technologies
www.sangfor.net