Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.107
Athena NGFW (Next-Generation Firewall) {{ breadTitle }} Specs Required Domains and Ports List for Network Connectivity
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Required Domains and Ports List for Network Connectivity")}}

Required Domains and Ports List for Network Connectivity

{{ $t('productDocDetail.updateTime') }}: 2026-04-29
Module Feature External Access Purpose Recommendations on Allowing Traffic Impacts on Denying Traffic and Solutions Domain Names (for China) Domain Names (for Global) Domain Names (for Europe) Remarks
Network-Related Features SSL VPN Download the SSL VPN client when the SSL VPN service is used. Based on business needs. Impacts:
Unable to download the SSL VPN client.
Solutions:
Download the SSL VPN client for the corresponding OS from a computer with internet access, then copy the client to the device for installation.
download.sangfor.com.cn:443
itunes.apple.com:443
www.sangfor.com.cn:443
download.sangfor.com:443
itunes.apple.com:443
download.sangfor.com:443
itunes.apple.com:443
 
Quick Deployment via Email Configure Quick Deployment via Email for Central Manager and check the network connection status. Based on business needs. Impacts:
During quick deployment, the system returns a message indicating that the network is unavailable when you check the network connection.
Solutions:
Ignore.
www.sangfor.com www.sangfor.com www.sangfor.com  
UI Display Login Obtain technical support services from the community. Based on business needs. Impacts:
Unable to obtain technical support services from the community.

Solutions:
None.
community.sangfor.com:443
update1.sangfor.net:443
community.sangfor.com:443
update1.sangfor.net:443
community.sangfor.com:443
update1.sangfor.net:443
 
Home Display the network security compliance prompt. Based on business needs. Impacts:
The network security compliance prompt cannot be displayed.

Solutions:
None.
www.miit.gov.cn:443 Not supported. Not supported.  
Obtain the offline signature database package. Based on business needs. Impacts:
Unable to obtain the offline signature database packages.

Solutions:
None.
bbs.sangfor.com.cn:443 Not supported. Not supported.  
Chat with the live chatbot. Based on business needs. Impacts:
Unable to click the bot for redirection.

Solutions:
None.
bbs.sangfor.com.cn:443 https://community.sangfor.com https://community.sangfor.com  
SOC Business Asset Security 1. Offer recommendations in User Security > Summary by connecting to Sangfor Security Center.
2. Offer best practices in Business Asset Security > Summary > Recommendation.
Based on business needs. Impacts:
Unable to access the corresponding page, resulting in a poor experience.

Solutions:
None.
sec.sangfor.com.cn:80
secaas.sangfor.com.cn:80
www.sangfor.com.cn:443
ti.sangfor.com.cn:443
secaas.sangfor.com:80
sec.sangfor.com:80
www.sangfor.com:443
ti.sangfor.com:443
secaas.sangfor.com:80
sec.sangfor.com:80
www.sangfor.com:443
ti.sangfor.com:443
 
Security Policy Template URL Filter Redirect users accessing invalid URLs to the portal address. Based on business needs. Impacts:
Users cannot be redirected to the portal address after access to invalid URLs is blocked.

Solutions:
None.
urlfilter.sangfor.com.cn urlfilter.sangfor.com urlfilter.sangfor.com New requirement for Network Secure 8.0.107
Security Service Subscriptions Threat Deception 1. Configure threat deception policies.
2. Forward traffic based on threat deception policies.
Required after subscription. Impacts:
The feature is unavailable and does not take effect after subscription.

Solutions:
None.

auth.sangfor.com.cn:443
analysis.sangfor.com.cn:443
chpm.sangfor.com.cn:443
chp.sangfor.com.cn:443
Not supported. Not supported.  
Neural-X 1. Report security logs to Neural-X.
2. Obtain security databases from Neural-X.
You are recommended to allow traffic. Impacts:
The Neural-X feature does not take effect.

Solutions:
None.
auth.sangfor.com.cn:443
analysis.sangfor.com.cn:443
upd.sangfor.com.cn:443
sp.sangfor.com.cn:443
auth.sangfor.com:443
analysis.sangfor.com:443
upd.sangfor.com:443
sp.sangfor.com:443
auth.sangfor.com:443
analysis.sangfor.com:443
upd.forenova.com:443
sp.sangfor.com:443
 
Neural-X Unknown Threat Update Subscribe to Neural-X Unknown Threat Update and activate its license after privacy policy is enabled. To use this service, do the following:
1. Enable policies in Policies > Network Security.
2. Connect to Neural-X.
3. Connect to Endpoint Secure.
Required after subscription Impacts:
The corresponding feature does not take effect.

Solutions:
None.
analysis.sangfor.com.cn:443
clt.sangfor.com.cn:443
wiki.sec.sangfor.com.cn:443
afapp.sangfor.com.cn:443
analysis.sangfor.com:443
clt.sangfor.com:443
wiki.sec.sangfor.com:443
afapp.sangfor.com:443
analysis.sangfor.com:443
clt.sangfor.com:443
wiki.sec.sangfor.com:443
afapp.sangfor.com:443
 
Connection to the Cloud Connect to Platform-X by clicking Go to Platform-X in Next-Gen Security > Product Integration > Cloud Products.
 
Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
cloudbbc.sangfor.com.cn:443
x.sangfor.com.cn:443
sea.xlink.sangfor.com:443
sea.xlink.sangfor.com:8333
cloudbbc.sangfor.com:443
x.sangfor.com:443
xlink.forenova.com:443
xlink.forenova.com:8333
cloudbbc.sangfor.com:443
x.sangfor.com:443
 
Threat Intelligence Gateway Subscribe to Threat Intelligence Gateway. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
rt-sase.sangfor.com.cn:443
analysis.sangfor.com.cn443
auth.sangfor.com.cn:443
upd.sangfor.com.cn:443
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
rt-sase.sangfor.com:443
analysis.sangfor.com:443
auth.sangfor.com:443
upd.sangfor.com:443
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
rt-sase.sangfor.com:443
analysis.sangfor.com:443
auth.sangfor.com:443
upd.sangfor.com:443
 
Cyber Guardian Subscribe to SaaS Cyber Guardian. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
dlauth.sangfor.com.cn:443
datalake.sangfor.com.cn:443
Malaysia:
sea.xlink.sangfor.com:443
sea.xlink.sangfor.com:8333
dlauth.sangfor.com:443
datalake.sangfor.com:443
Indonesia:
sea.xlink.sangfor.com:443
idauth.dl.sangfor.com:443
idcollect.dl.sangfor.com:443
xlink.forenova.com:443
xlink.forenova.com:8333
dlauth.forenova.com:443
datalake.forenova.com:443
 
Phishing Email Protection Subscribe to Phishing Email Protection. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
antiphishinggpt.sangfor.com.cn:443
dlauth.sangfor.com.cn:443
datalake.sangfor.com.cn:443
antiphishinggpt.sangfor.com:443
dlauth.sangfor.com:443
datalake.sangfor.com:443
Not supported.  
Endpoint Secure Subscribe to SaaS Endpoint Secure. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
xlink.sangfor.com.cn:443
xlink.sangfor.com.cn:8333
sea.xlink.sangfor.com:443
sea.xlink.sangfor.com:8333
xlink.forenova.com:443
xlink.forenova.com:8333
 
XDR Subscribe to SaaS XDR. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
x.sangfor.com.cn:443
dlauth.sangfor.com.cn:443
datalake.sangfor.com.cn:443
Malaysia:
x.sangfor.com:443
dlauth.sangfor.com:443
datalake.sangfor.com:443
Indonesia:
x.sangfor.com:443
idauth.dl.sangfor.com:443
idcollect.dl.sangfor.com:443
x.forenova.com:443
dlauth.forenova.com:443
datalake.forenova.com:443
 
On-Premises MSS Subscribe to On-Premises MSS. Required after subscription. Impacts:
The corresponding feature does not take effect.

Solutions:
None.
auth.sangfor.com.cn:443
clt.sangfor.com.cn:443
device.sangfor.com.cn:443
device.scloud.sangfor.com.cn:443
upd.sangfor.com.cn:443
x.sangfor.com.cn:443
Not supported. Not supported.  
Hot Threat Database Automatically update the hot threat database. Based on business needs. Impacts:
The hot threat database and botnet detection results cannot be updated in real time.
Solutions:
Manually update the downloaded hot threat database.
intelligence.sangfor.com:443 intelligence.sangfor.com:443 intelligence.sangfor.com:443  
Tools Packet Replay Download sample packets in System > Troubleshooting > Packet Replay. Based on business needs. Impacts:
Unable to download sample packets.
Solutions:
Download sample packets from a computer with internet access, copy the sample packets to the internal network computer, and then upload the sample packets.
Versions earlier than Network Secure 8.0.95:
bbs.sangfor.com.cn:443

Network Secure 8.0.95 and later versions:
support.sangfor.com.cn:443
Not supported. Not supported.  
Compliance Check   Based on business needs. The compliance check feature is not a focus of promotion. msspapi.sangfor.com.cn
compliancesaas.sangfor.com.cn
Not supported. Not supported.  
Licensing 1. Learn how to renew licenses on the Licensing page.
2. Send daily emails to remind customers when their licenses are about to expire.
Required. Impacts:
No impact because no businesses rely on it.
Solutions:
Visit the Licensing page in System > General Settings from a computer with internet access to learn about licensing and renewal.
www.sangfor.com.cn
support@sangfor.com.cn
license.sangfor.com.cn
www.sangfor.com
tech.support@sangfor.com
license.sangfor.com
www.sangfor.com
tech.support@sangfor.com
license.sangfor.com
 
Sync time with the licensing server. update1.sangfor.net:443
update2.sangfor.net:443
update1.sangfor.net:443
update2.sangfor.net:443
update1.sangfor.net:443
update2.sangfor.net:443
 
Obtain the warranty service phone number and hardware warranty service time window. http://svr.sangfor.com.cn:88 Not supported on devices outside China. Not supported on devices outside China.  
Send daily emails to remind customers when their licenses are about to expire. support@sangfor.com.cn tech.support@sangfor.com tech.support@sangfor.com  
Upgrade Service Packs Download and install SPs. Required. You are recommended to allow traffic. Otherwise, you cannot obtain the latest SPs. sp.sangfor.com.cn
sp1.sangfor.com.cn
sp2.sangfor.com.cn
sp3.sangfor.com.cn
auth.sangfor.com.cn
sp.sangfor.com
sp1.sangfor.com
sp2.sangfor.com
sp3.sangfor.com
auth.sangfor.com
sp.sangfor.com
sp1.sangfor.com
sp2.sangfor.com
sp3.sangfor.com
auth.sangfor.com
 
Database Update Update the signature database. Required. You are recommended to allow traffic. Otherwise, you cannot obtain the latest signature database. update1.sangfor.net:443
update2.sangfor.net:443
update3.sangfor.net:443
update1.sangfor.net:443
update2.sangfor.net:443
update3.sangfor.net:443
update1.sangfor.net:443
update2.sangfor.net:443
update3.sangfor.net:443
 
Alerts Email Alert Content Send alert emails to the email addresses provided by customers, including the technical support email address in the alert email body. Required. Impacts:
No impact because no businesses rely on it.
Solutions:
Send emails to the technical support email address included in the email body to contact us from a computer with internet access.
support@sangfor.com.cn tech.support@sangfor.com tech.support@sangfor.com  
Email Alert Configuration Configure the default email address used to send email alerts. Required. Impacts:
Emails cannot be sent as expected using the default email address.
Solutions:
None.
smtps://smtp.sangfor.com.cn:465 The default email setting is unavailable to devices outside China. The default email setting is unavailable to devices outside China.  

 

 

Sangfor Athena NGFW_V8.0.107_Domain Names to Be Allowed Before Deployment.xlsx ( 0.01M ,Download Times:3)