To set the correlation between device and cloud, including three functional modules: cloud-network access settings, Neural-X Unknown Threat Update detection and protection, and portal website protection.

Cloud-Based Protection Options

At present, the NGAF can correlate with and respond to four types of cloud products, i.e., Neural-X Unknown Threat Update, Platform-X, Sangfor Security Assessment, and Cloud Mirror. See the figure below.

Neural-X Unknown Threat Update

Sangfor Neural-X Unknown Threat Update is a comprehensive detection and protection subscription service based on multiple engines such as cloud sandbox, behavior analysis, and threat intelligence. Once subscribed, users can obtain powerful cloud security capabilities and build cloud detection and protection capabilities for unknown threats that cannot be protected by traditional rule signatures such as advanced variant threats and the latest threats.

As long as the device can access the Internet and the Neural-X Unknown Threat Update is subscribed, the NGAF can be integrated with the Neural-X Unknown Threat Update.

Platform-X

Sangfor Platform-X combines cloud-based big data analytics with your LAN business characteristics to provide centralized visibility of security threats. Integration with other security products delivers quick responses to prevent potential threats and detect LAN-related security hazards in advance. After completing the corporate user registration on the Platform-X, and obtaining the CorpID, Device Name, and Access Token, the connection between the NGAF device and the Platform-X can be established successfully. See the figure below.

Click Connect to successfully establish a connection with the Platform-X. See the figure below.

Neural-X Subscription

Sangfor Neural-X keeps learning autonomously to constantly improve its ability to identify new threats, unknown threats, and advanced threats. It maintains a deep correlation with devices to constantly improve the security capabilities of NGAFs and ensure cybersecurity for users.

The device can access the Internet. With proper authorization for Neural-X being enabled, the device can automatically connect with the Neural-X and Sangfor Engine Zero. No additional settings are required. After the connection is established, the user can view the contents related to threat intelligence through this module. See the figure below.