Module Feature
|
External Access Purpose
|
Recommendations on Allowing Traffic
|
Domain Names (Non Europe Region)
|
Domain Names (for Europe)
|
Ports
|
| Network-Related Features |
SSL VPN |
Download the SSL VPN client when the SSL VPN service is used. |
Based on business needs. |
download.sangfor.com
itunes.apple.com |
download.sangfor.com
itunes.apple.com |
TCP 443 |
| Quick Deployment via Email |
Configure Quick Deployment via Email for Central Manager and check the network connection status. |
Based on business needs. |
www.sangfor.com |
www.sangfor.com |
TCP 443 |
| UI Display |
Login |
Obtain technical support services from the community. |
Based on business needs. |
community.sangfor.com
update1.sangfor.net |
community.sangfor.com
update1.sangfor.net |
TCP 443 |
| Home |
Display the network security compliance prompt. |
Based on business needs. |
Not supported. |
Not supported. |
TCP 443 |
| Obtain the offline signature database package. |
Based on business needs. |
Not supported. |
Not supported. |
TCP 443 |
| Chat with the live chatbot. |
Based on business needs. |
Not supported. |
Not supported. |
TCP 443 |
| |
|
|
|
secaas.sangfor.com
sec.sangfor.com |
secaas.sangfor.com
sec.sangfor.com |
TCP 80 |
| SOC |
Business Asset Security |
1. Offer recommendations in User Security > Summary by connecting to Sangfor Security Center.
2. Offer best practices in Business Asset Security > Summary > Recommendation. |
Based on business needs. |
www.sangfor.com
ti.sangfor.com |
www.sangfor.com
ti.sangfor.com |
TCP 443 |
| Security Service Subscriptions |
Threat Deception |
1. Configure threat deception policies.
2. Forward traffic based on threat deception policies. |
Required after subscription. |
Not supported. |
Not supported. |
TCP 443 |
| Neural-X |
1. Report security logs to Neural-X.
2. Obtain security databases from Neural-X. |
You are recommended to allow traffic. |
auth.sangfor.com
analysis.sangfor.com
upd.sangfor.com
sp.sangfor.com |
auth.sangfor.com
analysis.sangfor.com
upd.forenova.com
sp.sangfor.com |
TCP 443 |
| Neural-X Unknown Threat Update |
Subscribe to Neural-X Unknown Threat Update and activate its license after privacy policy is enabled. To use this service, do the following:
1. Enable policies in Policies > Network Security.
2. Connect to Neural-X.
3. Connect to Endpoint Secure. |
Required after subscription |
analysis.sangfor.com
clt.sangfor.com
wiki.sec.sangfor.com
afapp.sangfor.com |
analysis.sangfor.com
clt.sangfor.com
wiki.sec.sangfor.com
afapp.sangfor.com |
TCP 443 |
| Connection to the Cloud |
Connect to Platform-X by clicking Go to Platform-X in Next-Gen Security > Product Integration > Cloud Products.
|
Required after subscription. |
sea.xlink.sangfor.com |
xlink.forenova.com |
TCP 8333 |
sea.xlink.sangfor.com
cloudbbc.sangfor.com (Network Secure 8.0.105)
x.sangfor.com |
xlink.forenova.com
cloudbbc.sangfor.com (Network Secure 8.0.105)
x.sangfor.com |
TCP 443 |
| Threat Intelligence Gateway |
Subscribe to Threat Intelligence Gateway. |
Required after subscription. |
xlink.sangfor.com.cn |
xlink.sangfor.com.cn |
TCP 8333 |
xlink.sangfor.com.cn
rt-sase.sangfor.com
analysis.sangfor.com
auth.sangfor.com
upd.sangfor.com |
xlink.sangfor.com.cn
rt-sase.sangfor.com
analysis.sangfor.com
auth.sangfor.com
upd.sangfor.com |
TCP 443 |
| Cyber Guardian |
Subscribe to SaaS Cyber Guardian. |
Required after subscription. |
Malaysia:
sea.xlink.sangfor.com |
xlink.forenova.com |
TCP 8333 |
Malaysia:
sea.xlink.sangfor.com
dlauth.sangfor.com
datalake.sangfor.com
Indonesia:
sea.xlink.sangfor.com
idauth.dl.sangfor.com
idcollect.dl.sangfor.com |
xlink.forenova.com
dlauth.forenova.com
datalake.forenova.com |
TCP 443 |
| Phishing Email Protection |
Subscribe to Phishing Email Protection. |
Required after subscription. |
antiphishinggpt.sangfor.com
dlauth.sangfor.com
datalake.sangfor.com |
Not supported. |
TCP 443 |
| Endpoint Secure |
Subscribe to SaaS Endpoint Secure. |
Required after subscription. |
sea.xlink.sangfor.com |
xlink.forenova.com |
TCP 8333, TCP 443 |
| XDR |
Subscribe to SaaS XDR. |
Required after subscription. |
Malaysia:
x.sangfor.com
dlauth.sangfor.com
datalake.sangfor.com
Indonesia:
x.sangfor.com
idauth.dl.sangfor.com
idcollect.dl.sangfor.com |
x.forenova.com
dlauth.forenova.com
datalake.forenova.com |
TCP 443 |
| On-Premises MSS |
Subscribe to On-Premises MSS. |
Required after subscription. |
Not supported. |
Not supported. |
TCP 443 |
| Hot Threat Database |
Automatically update the hot threat database. |
Based on business needs. |
intelligence.sangfor.com |
intelligence.sangfor.com |
TCP 443 |
| Tools |
Packet Replay |
Download sample packets in System > Troubleshooting > Packet Replay. |
Based on business needs. |
Not supported. |
Not supported. |
TCP 443 |
| Licensing |
1. Learn how to renew licenses on the Licensing page.
2. Send daily emails to remind customers when their licenses are about to expire. |
Required. |
www.sangfor.com
tech.support@sangfor.com
license.sangfor.com |
www.sangfor.com
tech.support@sangfor.com
license.sangfor.com |
TCP 443 |
| Sync time with the licensing server. |
update1.sangfor.net
update2.sangfor.net |
update1.sangfor.net
update2.sangfor.net |
TCP 80 |
| Obtain the warranty service phone number and hardware warranty service time window. |
Not supported on devices outside China. |
Not supported on devices outside China. |
TCP 88 |
| Send daily emails to remind customers when their licenses are about to expire. |
tech.support@sangfor.com |
tech.support@sangfor.com |
/ |
| Upgrade |
Service Packs |
Download and install SPs. |
Required. |
sp.sangfor.com.cn
sp1.sangfor.com.cn
sp2.sangfor.com.cn
sp3.sangfor.com.cn
auth.sangfor.com.cn |
sp.sangfor.com.cn
sp1.sangfor.com.cn
sp2.sangfor.com.cn
sp3.sangfor.com.cn
auth.sangfor.com.cn |
TCP 443 |
| Database Update |
Update the signature database. |
Required. |
update1.sangfor.net
update2.sangfor.net
update3.sangfor.net |
update1.sangfor.net
update2.sangfor.net
update3.sangfor.net |
TCP 80 |
| Alerts |
Email Alert Content |
Send alert emails to the email addresses provided by customers, including the technical support email address in the alert email body. |
Required. |
tech.support@sangfor.com |
tech.support@sangfor.com |
/ |
| Email Alert Configuration |
Configure the default email address used to send email alerts. |
Required. |
The default email setting is unavailable to devices outside China. |
The default email setting is unavailable to devices outside China. |
TCP 465 |
{{ $t('index.defaultHeader.chromeBrowserTip') }}