Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.107
Athena NGFW (Next-Generation Firewall) {{ breadTitle }} User Manual Network Sangfor/IPSec VPN IPsec VPN Tunnel Between Athena NGFW and AWS (Route Mode) Configuration Steps
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Configuration Steps")}}

Configuration Steps

{{ $t('productDocDetail.updateTime') }}: 2026-04-29

• AWS

  1. Create a virtual private cloud (VPC).
  2. Configure a network access control list (ACL) and a security group.
  3. Create a customer gateway.
  4. Create a virtual private gateway.
  5. Create a site-to-site VPN connection, and obtain the public IP address.
  6. Configure a route.

• Athena NGFW

  1. Configure the interface IP addresses.
  2. Create a VPN tunnel interface, and associate the interface with the corresponding zones.
  1. Configure an application control policy to allow business traffic from zones associated with the Internet-facing interface, internal-facing interface, and VPN tunnel interface.
  2. Enable the VPN service, and add a VPN link.
  3. Create an IPsec VPN tunnel.
  4. Configure a route to route traffic to the VPN tunnel interface.