{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
6.11.3
{{sendMatomoQuery("Sangfor Cloud Platform (SCP)","Architecture")}}

Architecture

{{ $t('productDocDetail.updateTime') }}: 2025-12-17

The technical architecture of aSecurity consists of three layers:

  1. Basic Platform Layer

The core technology is Hypervisor, which virtualizes physical resources to maximize resource utilization. HCI provides basic computing, storage, and network functions, while SCP offers cluster, tenant, and permission management capabilities.

  1. Core Engine Layer

Based on the capabilities at the basic platform layer, the core engine layer encapsulates interfaces of different platforms (such as Endpoint Secure, CWPP, Neural-X, HCI, and SCP). It integrates the capabilities of various management platforms and security platforms to develop basic component functions (such as multi-version management and AK/SK-based authentication) for aSecurity.

  1. Function Presentation Layer

Based on the basic component functions provided by the core engine layer, actual business scenarios, and function characteristics, this layer is divided into multiple functional modules for management, such as MGR management, threat management, and vulnerability management. The business interfaces are called on the UIs that are embedded in HCI and SCP pages. Interface requests are routed from the platforms to Sangfor-WAF of aSecurity and then to the aSecurity services. Then, the UIs receive service responses.

A screen shot of a computer

AI-generated content may be incorrect.