{{ $t('productDocDetail.updateTime') }}: 2025-12-22

Step

Step1: Get vNGAF image. go to sangfor community download the vNGAF image (suggest the latest version).

Step2: Upload vNGAF to sangfor platform. Login to SCP go to Compute > Image > Network Device Images click Upload button, select the downloaded vNGAF image and the resource pool needs deploy the vNGAF, then click Upload button at the bottom of the page.

Step3: Deploy vNGAF go to Networking > Topology click Edit. In the left tree menu locate the vNGAF drag it to the topology. After dragging the vNGAF to the topology there will display a menu on the page’s right side.

• Name: By clicking the Edit button, you can define the vNGAF name.

• Resource Pool: The resource pool to deploy the vNGAF.

• Image: Select the vNGAF image if you have upload different version. By click button you can re-direct to the vNGAF image upload page.

• Datastore: The datastore to deploy the vNGAF.

• Run Location: vNGAF running location. Suggest selecting Auto.

• Interfaces: Define the quantity interface for the vNGAF.

The maximum of the interface is 24, the minim is 4.

• Configuration: Select the vNGAF configuration.

CPU	MEM	Maximum Network Throughput
2 Cores	4 GB	100 Mbps
2 Cores	4 GB	200 Mbps
4 Cores	8 GB	400 Mbps
8 Cores	16 GB	800 Mbps
8 Cores	16 GB	1.6Gbps

The available VNGAF configurations depend on the license.

• Branch VPN Sites: IPsec VPN site number.

• Mobile Users: IPsec VPN client.

• Anti Web Defacement Licenses: Define the quantity interface for vNGAF.

• SSL VPN Users: Define the quantity interface for the vNGAF.

Click Apply changes, waiting for the vNGAF created successfully.

Step4: After vNGAF successfully creating, clicking the Licensing button at the right-bottom. Confirm the different modules configuration then click OK.

By clicking the Edit button, you can define where each VNGAF network interface is connected, running location and in the Advance section, you can enable the following features:

• Power on at host startup vNGAF

• High priority (Resources are preferentially allocated to the device even when resources are inadequate.)

• Reboot if fault occurs (reboot if VNGAF is not responding due to stuck.)

• VM Failover (Migrate to another node if the node fails.)

The Web Console button will redirect to the vNGAF console. After logging in to the vNGAF web console you can adjust the vNGAF configuration.

Under the More button you can select Power On, Shut Down, Power Off, Migrate, Clone and Enable storage Encryption.

Enable storage Encryption: Enabling the storage encryption feature means enabling encryption protection for the system disk of the vNGAF virtual machine. The encryption algorithm used is AES-256, and the encryption mode is ECB. After this feature is enabled, the data on the vNGAF virtual machine’s system disk is stored in an encrypted state, which effectively prevents data leakage caused by unauthorized access to the disk.