| Module Feature |
External Access Purpose |
Recommendations on Allowing Traffic |
Impacts on Denying Traffic and Solutions |
Domain Names (for China) |
Domain Names (for Global) |
Domain Names (for Europe) |
Remarks |
| Network-Related Features |
SSL VPN |
Download the SSL VPN client when the SSL VPN service is used. |
Based on business needs. |
Impacts: Unable to download the SSL VPN client. Solutions: Download the SSL VPN client for the corresponding OS from a computer with internet access, then copy the client to the device for installation. |
download.sangfor.com.cn:443 itunes.apple.com:443 www.sangfor.com.cn:443 |
download.sangfor.com:443 itunes.apple.com:443 |
download.sangfor.com:443 itunes.apple.com:443 |
|
| Quick Deployment via Email |
Configure Quick Deployment via Email for Central Manager and check the network connection status. |
Based on business needs. |
Impacts: During quick deployment, the system returns a message indicating that the network is unavailable when you check the network connection. Solutions: Ignore. |
www.sangfor.com |
www.sangfor.com |
www.sangfor.com |
|
| UI Display |
Login |
Obtain technical support services from the community. |
Based on business needs. |
Impacts: Unable to obtain technical support services from the community.
Solutions: None. |
community.sangfor.com:443 update1.sangfor.net:443 |
community.sangfor.com:443 update1.sangfor.net:443 |
community.sangfor.com:443 update1.sangfor.net:443 |
|
| Home |
Display the network security compliance prompt. |
Based on business needs. |
Impacts: The network security compliance prompt cannot be displayed.
Solutions: None. |
www.miit.gov.cn:443 |
Not supported. |
Not supported. |
|
| Obtain the offline signature database package. |
Based on business needs. |
Impacts: Unable to obtain the offline signature database packages.
Solutions: None. |
bbs.sangfor.com.cn:443 |
Not supported. |
Not supported. |
|
| Chat with the live chatbot. |
Based on business needs. |
Impacts: Unable to click the bot for redirection.
Solutions: None. |
bbs.sangfor.com.cn:443 |
https://community.sangfor.com |
https://community.sangfor.com |
|
| SOC |
Business Asset Security |
1. Offer recommendations in User Security > Summary by connecting to Sangfor Security Center. 2. Offer best practices in Business Asset Security > Summary > Recommendation. |
Based on business needs. |
Impacts: Unable to access the corresponding page, resulting in a poor experience.
Solutions: None. |
sec.sangfor.com.cn:80 secaas.sangfor.com.cn:80 www.sangfor.com.cn:443 ti.sangfor.com.cn:443 |
secaas.sangfor.com:80 sec.sangfor.com:80 www.sangfor.com:443 ti.sangfor.com:443 |
secaas.sangfor.com:80 sec.sangfor.com:80 www.sangfor.com:443 ti.sangfor.com:443 |
|
| Security Policy Template |
URL Filter |
Redirect users accessing invalid URLs to the portal address. |
Based on business needs. |
Impacts: Users cannot be redirected to the portal address after access to invalid URLs is blocked.
Solutions: None. |
urlfilter.sangfor.com.cn |
urlfilter.sangfor.com |
urlfilter.sangfor.com |
New requirement for Network Secure 8.0.107 |
| Security Service Subscriptions |
Threat Deception |
1. Configure threat deception policies. 2. Forward traffic based on threat deception policies. |
Required after subscription. |
Impacts: The feature is unavailable and does not take effect after subscription.
Solutions: None. |
auth.sangfor.com.cn:443 analysis.sangfor.com.cn:443 chpm.sangfor.com.cn:443 chp.sangfor.com.cn:443 |
Not supported. |
Not supported. |
|
| Neural-X |
1. Report security logs to Neural-X. 2. Obtain security databases from Neural-X. |
You are recommended to allow traffic. |
Impacts: The Neural-X feature does not take effect.
Solutions: None. |
auth.sangfor.com.cn:443 analysis.sangfor.com.cn:443 upd.sangfor.com.cn:443 sp.sangfor.com.cn:443 |
auth.sangfor.com:443 analysis.sangfor.com:443 upd.sangfor.com:443 sp.sangfor.com:443 |
auth.sangfor.com:443 analysis.sangfor.com:443 upd.forenova.com:443 sp.sangfor.com:443 |
|
| Neural-X Unknown Threat Update |
Subscribe to Neural-X Unknown Threat Update and activate its license after privacy policy is enabled. To use this service, do the following: 1. Enable policies in Policies > Network Security. 2. Connect to Neural-X. 3. Connect to Endpoint Secure. |
Required after subscription |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
analysis.sangfor.com.cn:443 clt.sangfor.com.cn:443 wiki.sec.sangfor.com.cn:443 afapp.sangfor.com.cn:443 |
analysis.sangfor.com:443 clt.sangfor.com:443 wiki.sec.sangfor.com:443 afapp.sangfor.com:443 |
analysis.sangfor.com:443 clt.sangfor.com:443 wiki.sec.sangfor.com:443 afapp.sangfor.com:443 |
|
| Connection to the Cloud |
Connect to Platform-X by clicking Go to Platform-X in Next-Gen Security > Product Integration > Cloud Products. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 cloudbbc.sangfor.com.cn:443 x.sangfor.com.cn:443 |
sea.xlink.sangfor.com:443 sea.xlink.sangfor.com:8333 cloudbbc.sangfor.com:443 x.sangfor.com:443 |
xlink.forenova.com:443 xlink.forenova.com:8333 cloudbbc.sangfor.com:443 x.sangfor.com:443 |
|
| Threat Intelligence Gateway |
Subscribe to Threat Intelligence Gateway. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 rt-sase.sangfor.com.cn:443 analysis.sangfor.com.cn:443 auth.sangfor.com.cn:443 upd.sangfor.com.cn:443 |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 rt-sase.sangfor.com:443 analysis.sangfor.com:443 auth.sangfor.com:443 upd.sangfor.com:443 |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 rt-sase.sangfor.com:443 analysis.sangfor.com:443 auth.sangfor.com:443 upd.sangfor.com:443 |
|
| Cyber Guardian |
Subscribe to SaaS Cyber Guardian. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 dlauth.sangfor.com.cn:443 datalake.sangfor.com.cn:443 |
Malaysia: sea.xlink.sangfor.com:443 sea.xlink.sangfor.com:8333 dlauth.sangfor.com:443 datalake.sangfor.com:443 Indonesia: sea.xlink.sangfor.com:443 idauth.dl.sangfor.com:443 idcollect.dl.sangfor.com:443 |
xlink.forenova.com:443 xlink.forenova.com:8333 dlauth.forenova.com:443 datalake.forenova.com:443 |
|
| Phishing Email Protection |
Subscribe to Phishing Email Protection. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
antiphishinggpt.sangfor.com.cn:443 dlauth.sangfor.com.cn:443 datalake.sangfor.com.cn:443 |
antiphishinggpt.sangfor.com:443 dlauth.sangfor.com:443 datalake.sangfor.com:443 |
Not supported. |
|
| Endpoint Secure |
Subscribe to SaaS Endpoint Secure. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
xlink.sangfor.com.cn:443 xlink.sangfor.com.cn:8333 |
sea.xlink.sangfor.com:443 sea.xlink.sangfor.com:8333 |
xlink.forenova.com:443 xlink.forenova.com:8333 |
|
| XDR |
Subscribe to SaaS XDR. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
x.sangfor.com.cn:443 dlauth.sangfor.com.cn:443 datalake.sangfor.com.cn:443 |
Malaysia: x.sangfor.com:443 dlauth.sangfor.com:443 datalake.sangfor.com:443 Indonesia: x.sangfor.com:443 idauth.dl.sangfor.com:443 idcollect.dl.sangfor.com:443 |
x.forenova.com:443 dlauth.forenova.com:443 datalake.forenova.com:443 |
|
| On-Premises MSS |
Subscribe to On-Premises MSS. |
Required after subscription. |
Impacts: The corresponding feature does not take effect.
Solutions: None. |
auth.sangfor.com.cn:443 clt.sangfor.com.cn:443 device.sangfor.com.cn:443 device.scloud.sangfor.com.cn:443 upd.sangfor.com.cn:443 x.sangfor.com.cn:443 |
Not supported. |
Not supported. |
|
| Hot Threat Database |
Automatically update the hot threat database. |
Based on business needs. |
Impacts: The hot threat database and botnet detection results cannot be updated in real time. Solutions: Manually update the downloaded hot threat database. |
intelligence.sangfor.com:443 |
intelligence.sangfor.com:443 |
intelligence.sangfor.com:443 |
|
| Tools |
Packet Replay |
Download sample packets in System > Troubleshooting > Packet Replay. |
Based on business needs. |
Impacts: Unable to download sample packets. Solutions: Download sample packets from a computer with internet access, copy the sample packets to the internal network computer, and then upload the sample packets. |
Versions earlier than Network Secure 8.0.95: bbs.sangfor.com.cn:443
Network Secure 8.0.95 and later versions: support.sangfor.com.cn:443 |
Not supported. |
Not supported. |
|
| Compliance Check |
|
Based on business needs. |
The compliance check feature is not a focus of promotion. |
msspapi.sangfor.com.cn compliancesaas.sangfor.com.cn |
Not supported. |
Not supported. |
|
| Licensing |
1. Learn how to renew licenses on the Licensing page. 2. Send daily emails to remind customers when their licenses are about to expire. |
Required. |
Impacts: No impact because no businesses rely on it. Solutions: Visit the Licensing page in System > General Settings from a computer with internet access to learn about licensing and renewal. |
www.sangfor.com.cn support@sangfor.com.cn license.sangfor.com.cn |
www.sangfor.com tech.support@sangfor.com license.sangfor.com |
www.sangfor.com tech.support@sangfor.com license.sangfor.com |
|
| Sync time with the licensing server. |
update1.sangfor.net:443 update2.sangfor.net:443 |
update1.sangfor.net:443 update2.sangfor.net:443 |
update1.sangfor.net:443 update2.sangfor.net:443 |
|
| Obtain the warranty service phone number and hardware warranty service time window. |
http://svr.sangfor.com.cn:88 |
Not supported on devices outside China. |
Not supported on devices outside China. |
|
| Send daily emails to remind customers when their licenses are about to expire. |
support@sangfor.com.cn |
tech.support@sangfor.com |
tech.support@sangfor.com |
|
| Upgrade |
Service Packs |
Download and install SPs. |
Required. |
You are recommended to allow traffic. Otherwise, you cannot obtain the latest SPs. |
sp.sangfor.com.cn sp1.sangfor.com.cn sp2.sangfor.com.cn sp3.sangfor.com.cn auth.sangfor.com.cn |
sp.sangfor.com sp1.sangfor.com sp2.sangfor.com sp3.sangfor.com auth.sangfor.com |
sp.sangfor.com sp1.sangfor.com sp2.sangfor.com sp3.sangfor.com auth.sangfor.com |
|
| Database Update |
Update the signature database. |
Required. |
You are recommended to allow traffic. Otherwise, you cannot obtain the latest signature database. |
update1.sangfor.net:443 update2.sangfor.net:443 update3.sangfor.net:443 |
update1.sangfor.net:443 update2.sangfor.net:443 update3.sangfor.net:443 |
update1.sangfor.net:443 update2.sangfor.net:443 update3.sangfor.net:443 |
|
| Alerts |
Email Alert Content |
Send alert emails to the email addresses provided by customers, including the technical support email address in the alert email body. |
Required. |
Impacts: No impact because no businesses rely on it. Solutions: Send emails to the technical support email address included in the email body to contact us from a computer with internet access. |
support@sangfor.com.cn |
tech.support@sangfor.com |
tech.support@sangfor.com |
|
| Email Alert Configuration |
Configure the default email address used to send email alerts. |
Required. |
Impacts: Emails cannot be sent as expected using the default email address. Solutions: None. |
smtps://smtp.sangfor.com.cn:465 |
The default email setting is unavailable to devices outside China. |
The default email setting is unavailable to devices outside China. |
|