{{ getBottomFeedbackTxt(displayPage) }}
{{ $t('bottomFeedback.selectTags') }}
{{ item.name }}
{{ $t('bottomFeedback.moreAdvice') }}
{{ $t('bottomFeedback.email') }}
{{ $t('bottomFeedback.agreeRecall') }}
{{ $t('bottomFeedback.submitAdvice') }}
{{ tipmsg }}
{{ getBottomFeedbackTxt(page) }}
{{ $t('rightFeedback.close') }}
{{ $t('rightFeedback.submitSuccess') }}
{{ getTitle() }} {{ $t('rightFeedback.feedback') }}
{{ $t('rightFeedback.warningTip') }}
{{ $t('rightFeedback.onlineServiceLink') }}
.
{{ getBottomFeedbackTxt(page) }}
{{ $t('bottomFeedback.selectTags') }}
{{ item.name }}
{{ $t('bottomFeedback.moreAdvice') }}
{{ $t('bottomFeedback.email') }}
{{ $t('bottomFeedback.agreeRecall') }}
{{ $t('bottomFeedback.submitAdvice') }}
{{ getTitle() }} {{ $t('rightFeedback.feedback')}}
{{ getTitle() }} {{ $t('rightFeedback.feedback')}}
{{ $t('rightFeedback.warningTip')}}
{{ $t('rightFeedback.onlineService')}}
.
{{ getBottomFeedbackTxt(page) }}
{{ $t('bottomFeedback.selectTags') }}
{{ item.name }}
{{ $t('bottomFeedback.moreAdvice') }}
{{ $t('bottomFeedback.markedContent')}}
{{ dialog_sign_txt }}
{{ $t('bottomFeedback.email') }}
{{ $t('bottomFeedback.agreeRecall') }}
{{ $t('bottomFeedback.submitAdvice') }}
{{ menuItem.name }}
{{ menuItem.name }}
{{subMenu.name}}
{{ menuItem.name }}
{{ secondMenu.name }}
{{thirdMenu.name}}
{{ $t('productSubHeader.searchLabel') }}
No Data
{{ $t('productSubHeader.searchLabel') }}
# {{ $t('index.trendingSearches') }} #
{{ $t('index.search.noSearchRecords')}}
{{ item }}
# {{ $t('index.search.searchHistory') }} #
{{ $t('index.search.deleteAll')}}
{{ $t('index.search.complete')}}
{{ $t('index.search.noSearchRecords')}}
{{ item }}
{{getProductJoinVersion(item.product,item.version)}}
{{ $t('index.search.viewMore')}}
{{language}}
{{ item.value}}
{{ $t('sangforUser.login') }}
{{ $t('sangforUser.mySangfor') }}
{{user.username}}
{{ $t('sangforUser.uid') }}{{user.uid}}
{{ $t('sangforUser.accountInfo') }}
{{ $t('sangforUser.identityTip') }}
{{ $t('sangforUser.goToAuth') }}
{{ $t('sangforUser.myFollowedProducts') }}
{{ $t('sangforUser.myCollection') }}
{{ $t('sangforUser.unreadMessages') }}
{{unreadMsg}}
{{ $t('sangforUser.logout') }}
搜索
{{getProductJoinVersion(item.product,item.version)}}
查看更多
{{ language }}
{{ item.label }}
{{item.name}}
{{subitem.name}}
{{msg}}
{{ $t('index.prodDialog.interestsProductLine') }}
{{item.name}}
{{ $t('index.prodDialog.notFollowProductLine') }}，
{{ $t('index.prodDialog.clickToFocus') }}
{{ $t('index.prodDialog.allProductsAndServices') }}
{{ $t('index.prodDialog.notFoundWith') }}“
{{searchName}}
”{{ $t('index.prodDialog.productLinesReEnter') }}
{{item.name}}
{{subitem.name}}
{{ $t('index.prodDialog.noData') }}
{{ $t('index.qiyuProductLineDialog.hotProductLine') }}
{{item.name}}
{{ $t('index.qiyuProductLineDialog.noContent') }}
{{ $t('index.qiyuProductLineDialog.securityProducts') }}
{{item.name}}
{{item.name}}
{{subitem.name}}
{{ $t('snGuideDialog.question1') }}
{{ $t('snGuideDialog.question2') }}
{{ $t('versionGuideDialog.contactCustomerService') }}
{{ $t('versionGuideDialog.intelligentCustomerService') }}
{{ $t('versionGuideDialog.getVersionInfo') }}
{{ $t('addFollow.popover') }}
{{ $t('addFollow.setEmail') }}
{{ $t('addFollow.tipDailyLimit') }}
{{ $t('bindEmailModal.cannotSeeChange')}}
{{ $t('addFollow.getCode') }}
{{ timerSecond }}{{ $t('addFollow.secondsLater') }}
{{ $t('saveSetForm.problemTip1') }}
{{ $t('saveSetForm.problemTip2') }}
{{ $t('addFollow.successTip') }}
{{ $t('addFollow.confirm') }}
{{ $t('addFollow.cancel') }}
{{ $t('caseDetail.pageCatalog') }}
{{ $t('helpTip.prefix') }}
{{ $t('helpTip.onlineService') }}
{{ $t('helpTip.suffix') }}.
{{ $t('downloadWarnModal.contentOnlyFor') }} {{powertip}}
{{ $t('downloadWarnModal.pleaseAuthFirst') }}
{{ $t('downloadWarnModal.authAsCustomer') }}
{{ $t('downloadWarnModal.authAsPartner') }}
{{ $t('downloadWarnModal.authAsEmployee') }}
{{ $t('downloadWarnModal.goToAuth') }}
{{ $t('downloadWarnModal.onlineService') }}
{{ $t('downloadWarnModal.clickToLearnAuth') }}
{{ showPowerText +' '+ $t('toolList.permission') + getPowerName }}
{{ $t('common.buttons.selectAll') }}
{{ node.label }}
{{ $t('common.buttons.cancel') }}
{{ $t('common.buttons.confirm') }}
{{ $t('toolList.download') }}
{{ $t('toolList.downloadPdf') }}
{{ $t('toolList.download') }}
{{ $t('toolList.shareContent') }}
{{ $t('toolList.copyLinkSuccess') }}
{{ $t('toolList.copyLink') }}
{{ $t('toolList.share') }}
|
{{isCurCollection ? $t('toolList.cancelCollect') : $t('toolList.collectContent')}}
{{isCurCollection ? $t('toolList.cancelCollect') : $t('toolList.collect')}}
|
{{ $t('toolList.copyMd5') }}
|
Size:{{ fileSize }}
{{ $t('index.defaultHeader.chromeBrowserTip') }}
{{ $t('index.defaultHeader.logo') }}
Athena NGFW (Next-Generation Firewall)
Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productSubHeader.tabs.document') }}
{{ $t('productSubHeader.tabs.bestPractice') }}
{{ $t('productSubHeader.tabs.case') }}
{{ $t('productSubHeader.tabs.software') }}
{{ $t('productSubHeader.tabs.bbs') }}
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.107
{{item.code}}
Release Notes
Overview
Version Values
New Features
Changed Features
Deleted Features
Upgrade Path
Upgrade Impacts
Impacts on Services
Impacts on O&M
Upgrade Schedule
Customer Upgrade Preparations
Recommendations
Notes
Upgrade Guide
Preparations for Upgrade
Upgrade Methods
Environment Information
Customer Resource Coordination
Pre-Upgrade Check
Upgrade Limitations
Environment Check Using Pre-Upgrade Check Package
Procedure
Upgrade Procedures
Standalone Device Upgrade
HA Device Upgrade
Post-Upgrade Check
Network Connectivity Check
System Health Check
Service Status Check
Upgrade Methods
Upgrade from the GUI
Overall Upgrade Process
Upgrade Procedure
Upgrade via Central Manager
Overall Upgrade Process
Upgrade Procedure
Troubleshooting Upgrade Failures
Rollback Instructions
Precheck Error Handling
Installation of Pre-Upgrade Check Package
Recommendations for Installation Success Scenarios
0000-0002: Pre-Upgrade Check Passed
Message
Description
Reinstallation of Pre-Upgrade Check Package
0000-0004: Recommended Update Package Type
Message
Description
0002-0001: Blacklist and Whitelist Compatibility Issues (No Impact on Upgrade)
Error Message
Troubleshooting
0002-0003: Platform Connection Error (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0004: Missing Integration Key for XDR Connection (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0005: Some Platform-X Domains Inaccessible (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0006: Different CorpIDs for Connection to Platform-X and XDR (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0008: Abnormal Integration Bus Status (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0009: Potential Service Error Due to Changes in OOBM Settings (No Impact on Upgrade)
Error Message
Cause and Solution (Customer-Operable)
0002-0010: Simultaneous Connection to Cyber Guardian and Omni-Command Not Supported (No Impact on Upgrade)
Error Message
Cause and Solution (Not Customer-Operable)
0002-0011: Overload Risk Due to Traffic Forwarding Through DNS Proxy (No Impact on Upgrade)
Error Message
Cause and Solution (Not Customer-Operable)
0002-0012: Post-upgrade, historical custom/built-in URL category library data is preserved, but language switching fails during category conflicts between custom and built-in URL libraries. (No Impact on Upgrade)
Error Message
Cause and Solution (Not Customer-Operable)
0002-0013: Following the expiration of Neural-X New Threat Update license, the system upgrade to version 107 results in the built-in URL. (No Impact on Upgrade)
Error Message
Cause and Solution (Not Customer-Operable)
Recommendations for Installation Failure Scenarios
0001-0001
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
0001-0002
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
0001-0003
Error Message
Cause
Solution
0001-0004
Error Message
Cause and Solution
Recommendations
0001-0005
Error Message
Cause
0001-0006
Error Message
Cause
0002-0007
Error Message
Cause
0003-0001
Error Message
Cause
Recommendations
0003-0002
Error Message
Cause and Solution
0004-0001
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
0004-0002
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0003
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0004
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0005
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0006
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0007
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0008
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0004-0009
Error Message
Error Detection and Fixing in the Frontend (Customer-Operable)
Configuration Query in the Backend
0005-0001
Error Message
Cause
Solution
0005-0002
Error Message
Cause and Solution (Optional)
0005-0003
Error Message
Cause and Solution
0005-0005
Error Message
Cause (User Notice)
Troubleshooting
0005-0006
Error Message
Cause (User Notice)
Troubleshooting
0005-0008
Error Message
Cause (User Notice)
0005-0012
Error Message
Cause (User Notice)
Solution
SP01 Release Note
SP Information
Upgrade Impacts
Impacts on Services
Impacts on O&M
Impacts on Customer Network
Other Impacts
Customer Upgrade Preparations
Upgrade Preparations
Notes
Implementation Procedure
Post-Upgrade Service Check
Rollback Instructions
Upgrade Guide
Preparations for Upgrade
Upgrade Tools
Environment Information
Customer Resource Coordination
Pre-Upgrade Check
Notes
Upgrade Conditions
Smooth Upgrade of Configurations, Logs, and Data
Upgrade Recommendations
Central Manager
HA/Multiple Nodes/Cluster/Distributed Nodes
Upgrade Procedure
Upgrade Path
Upgrade Procedure
Platform Check
Service Status Check
Troubleshooting Upgrade Failures
Rollback Instructions
SP02 Release Note
SP Information
Upgrade Impacts
Impacts on Services
Impacts on O&M
Impacts on Customer Network
Other Impacts
Customer Upgrade Preparations
Upgrade Preparations
Notes
Implementation Procedure
Post-Upgrade Service Check
Upgrade Guide
Preparations for Upgrade
Upgrade Tools
Environment Information
Pre-Upgrade Check
Notes
Upgrade Conditions
Smooth Upgrade of Configurations, Logs, and Data
Upgrade Recommendations
Central Manager
HA/Multiple Nodes/Cluster/Distributed Nodes
Upgrade Procedure
Upgrade Path
Upgrade Procedure
Upgrade via Network Secure Console
Upgrade via SANGFOR Checks
Platform Check
Service Status Check
Troubleshooting Upgrade Failures
Rollback Instructions
Product Overview
Introduction
Key Features
Quick Start & Deployment
Getting Started
Device Appearance
Deployment Environment Requirements
Device Installation
Hardware Troubleshooting
Device Management and License Activation
License Introduction
License Expiration
Web Console Overview
Deployment Guide
Basic Network Configuration
Deployment Troubleshooting
Deploy vNGFW Instances on Virtualization Platforms
Replacing Fortigate with NGFW
Overview and Migration Process Overview
Overview
List of Key Feature Compatibility Features and Migration Order
Pre-Migration Preparation (Critical)
Device and Version Information
Network and Service Review
FortiGate Configuration Export and Backup
FortiGate Configuration Export Methods (CLI / Web Interface)
Sangfor Firewall Initialization and Configuration Backup
Key Functional Differences Between Fortigate and Sangfor NGFW
VODM
Fortigate VDOM
Virtual System of NGFW
NAT
Fortigate's Central NAT and Regular NAT
NGFW’s NAT
IPSEC
IPSEC
How to Migrate from FortiGate to Sangfor NGFW
SD-WAN and Policy-Based Routing
FortiGate SD-WAN and Policy-Based Routing
NGFW SDWAN and Policy Based Routing
Firewall Policy
Firewall Policy of Fortigate
Policy of NGFW
Automated Configuration Conversion Based on Tools – For ACL, NAT, Address Objects, and Service Objects
Tool Introduction
How to Use the Tool
Enable API Function in NGFW
Write configuration to firewall
Check the Import Result
Conversion Logs and Results
Conversion Result Verification Method
Manual Migration Configuration
Modify the Interface Configuration
Bind the Interface and Zone
Migrate Software Switch Interface
Policy Template Migration
WAF
IPS
URL Filter
Antivirus
Security Protection Policy Migration
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
SSL Decryption
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
Logs and Alert
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
AD / LDAP
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
HA
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
Fortigate IPSec Migration
Fortigate Configuration Example
Fortigate Parameter Explanation and Conversion Suggestions
Migrate to Sangfor NGFW
SD-WAN Migration
PBR
SD-WAN
Testing and Validation
Functional Validation Checklist
Verification Methods and Common Troubleshooting
Cutover and Rollback Plan
Cutover Objectives and Principles
Cutover Timing and Window Selection
Pre-Cutover Checklist
Configuration Preparation
Environment Preparation
Cutover Procedure
Phase 1: Preparation
Phase 2: Network Cutover Implementation
Business Verification
Rollback Plan
Principles
Rollback Steps
Fast Rollback Tips
Post-Cutover Optimization and Best Practices
Policy Optimization
Merge Duplicate Policies
Delete Unused Objects
Object Hierarchical Management
Log and Reporting Configuration
Integrate with log center
Enable Alert Notifications
Security Policy Audit Recommendations
Appendices and Support Information
Administrator Guide
Network
Interface
Zone
Virtual Wire
Static Routes
Policy-Based Routes
Multicast Routes
Dynamic Routes
Route Testing
Access Lists
Route Maps
DNS
DHCP
ARP
Advanced
SSL VPN
Policies
Access Control Policies
NAT Policy
Security Protection Policies
SSL Decryption Policy
Bandwidth Management Policy
User Internet Access Security Case
Server Protection Case
Object Management
Object System Overview
Network Object Management
Link State Detection
Services
Security Policy Template
Threat Signature Database
Content Identification Database
Sangfor VPN
Basic Principles
Routing Mechanism
Network Configuration Process and Functional Components
Monitoring Status
Basic Component Configuration
Advanced Features
Quick Start
SD-WAN Smart Path Selection and Link Optimization
Configuration Steps
User Authentication
Introduction
Authentication Configuration Process
User and Group Management
Authentication Options
No Authentication
Local Password Authentication
External Password Authentication
RADIUS SSO
AD SSO
Other SSO Options
Troubleshooting Typical Issues
System
Routine O&M
Emergency Response
Specs
Required Domains and Ports List for Network Connectivity
Syslog Field Description and Log Examples
SDKs, APIs
API Document
CLI Document
Emergency Response Plan
Emergency Information Collection
Core Business Scenarios
Emergency Information Collection
Emergency Plan
Emergency Scenarios and Recovery Time
Abnormal Access to Specific Business
Possible Causes
Rapid Troubleshooting
Emergency Recovery Methods
Overall Slowness in Network Access
Possible Causes
Rapid Troubleshooting
Emergency Recovery Methods
Emergency Recovery for an Overall Business Interruption Scenario (Virtual Wire/Transparent Deployment)
Possible Causes
Rapid Troubleshooting
Emergency Recovery Methods (HA Scenario)
Emergency Recovery Methods (Standalone Scenario)
Emergency Recovery for an Overall Business Interruption Scenario (Routing Deployment)
Possible Causes
Rapid Troubleshooting
Emergency Recovery Methods (HA Scenario)
Emergency Recovery Methods (Standalone Scenario)
Emergency Response for Network and Service Interruption
Network-Wide or Large-scale Network Interruption
Individual or Partial Business System Access Abnormalities
Log Analysis and Fault Location
Device Hardware Fault Emergency Response
Security Incident Emergency Response
Data Backup and Configuration Recovery
Password Recovery
Log and Monitoring System Emergency Response
Log Not Found or Data Anomalies
Monitoring Data Reporting Failure
Maintenance Guide
Maintenance Tools
Routine Device Checks
Precautions
Device Hardware Status Check
Basic Hardware Information
Device Power-On/Off
Device Status Indicator Check
Interface Indicator Check
Device Status Check
Device Anomaly Check
Configuration Backup and Database Checks
Device Configuration Backup
Software and Database Version Check
Device Security Checks
Account Security Check
Remote Maintenance Check
Troubleshooting Log Check
Routine Security Checks
Security Operations
Assess Now
Pending Issues
Hardware & System Operations
Assessment Settings
Mark as Fixed
Reassessment
Business Asset Security
Compromised
Attacked
Data Harvested
Vulnerable
User Security
Compromised
High
Medium
Low
Ransomware Protection
Account Protection
Logs
Security Logs
Access Logs
System Logs
Report
Device Configuration and Password Recovery
Password Recovery via a USB Flash Drive
Applicable Scenario
Procedure
Factory Reset in the Console
Applicable Scenario
Procedure
Auxiliary Tools
Troubleshooting
Packet Capture
Common Issues & Solutions
You Are Unable to Log in to the Athena NGFW Console
An Error Occurred During Business System Access
A Device I/O Error Occurred
A Database Update Failure Occurred
Normal Business Traffic Is Intercepted
The Server Suffered DoS/DDoS Attacks
The Server Proactively Sends Traffic to the External Environment
You Are Unable to Access Resources in Sangfor VPN
Mutual Access Between Virtual Systems Failed
Emergency Handling
Critical Business System Anomaly or Disconnection
Device Hardware Faults
Athena NGFW (Next-Generation Firewall)
{{ breadTitle }}
Administrator Guide
SD-WAN Smart Path Selection and Link Optimization
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)", "SD-WAN Smart Path Selection and Link Optimization")}}
SD-WAN Smart Path Selection and Link Optimization
{{ $t('productDocDetail.updateTime') }}: 2026-09-03
Overview
Principles of the BEST Smart Path Selection
Principle of the SOFAST Link Optimization Engine
Scenarios
Configuration Steps
Case 1: AutoGO Smart Path Selection
Case 2: Optimal-Quality Path Selection
Case 3: Packet Loss Optimization for Bandwidth-Intensive Apps using SOFAST Optimization
Notes
Troubleshooting Typical Issues
{{ language }}
{{ $t('index.defaultHeader.chromeBrowserTip') }}