4th Floor, Building 2, Financial Base

No.8 Kefa Road, Technology Park, Nanshan District

Shenzhen, Guangdong Province, P.R.China P.C.:518052

www.sangfor.com1 / 2public

Sangfor Product Comparison Matrix(October, 2012)
Internet Access Management .WAN Optimization.SSL VPN. Central Management Console
Sangfor Internet Access Management
Product
Model
Ideal Maximum
Bandwidth
Concurrent
Connections
Proxy Mode(1) Recommended
Concurrent Users
High
Availability(2)
Dual Power
Supplies
Bypass
(Copper)
10/100/1000
Base-T
SFP Serial
Port
Profile
Throughput Concurrent Connections
M5000-AC-I 5~8 Mbps 30,000 N/A N/A 50~100 A/A,A/P N/A 1 pair 4 N/A RJ451 1U
M5100-AC-I 10~20 Mbps 40,000 5~15 Mbps 7,000 100~200 A/A,A/P N/A 1 pair 4 N/A RJ451 1U
M5400-AC-I 25~50 Mbps 120,000 18~35 Mbps 15,000 200~500 A/A,A/P N/A 1 pair 6 N/A RJ452 1U
M5500-AC-I 60~130 Mbps 400,000 40~75 Mbps 20,000 500~1,200 A/A,A/P N/A 1 pair 6 2 RJ452 2U
M5600-AC-I 140~300 Mbps 550,000 100~150 Mbps 60,000 1,200~3,000 A/A,A/P 3 pair 6 4 RJ451 2U
M5800-AC-I 300~400Mbps 700,000 150~250 Mbps 85,000 3,000~5,000 A/A,A/P 3 pair 6 4 RJ451 2U
M5900-AC-I 400 Mbps ~1 Gbps 1,000,000 250~500 Mbps 100,000 5,000~10,000 A/A,A/P 2 pair 4 4 RJ451 2U
M6000-AC-I 800 Mbps ~2 Gbps 1,700,000 400 Mbps ~1 Gbps 120,000 10,000~14,000 A/A,A/P 2 pair 4 4 RJ451 2U
License
Options
On-disk URL Database:URL database with width Chinese websites coverage; Yearly recurring license
In-cloud URL Database: URL database leveragingthe unique "in the cloud" infrastructure to provide unprecedented breadth of web coverage; Yearly recurring license
Application Database: Internet application identification;License comes along with the service subscription; Yearly Recurring License,
Anti- virus: Built-in Anti-virus engine, Yearly recurring license
Proxy(3): Enabling Proxy and cache function; One-Time perpetual license
Multi-lines:Augmentation of Internet lines; Per augmented Internet line based; One-Time perpetual license
IPsecVPN Remote Client: Only valid when IPsec VPN module is enabled;IPsecVPN client for remote access of mobile user; Per user based; One-Time perpetual license
(1):When proxy/cache function enabled, product model should be sized with specifications under proxy mode;
(2): A/A: Active/Active; A/P: Active/Passive;
(3): Proxy function is not available for M5000-AC-I;
SangforWAN Optimization
Product
Model
Optimized
Bandwidth(1)
OptimizedTCP
Connection
Optimized Sites or
Mobiles
Max Traffic Shaping
Bandwidth(2)
High
Availability(3)
Dual Power
Supplies
Bypass
(Copper)
10/100/1000
Base-T
SFP Serial Port Profile
S4000-Q-I 3Mbps 300 3 10 Mbps A/P N/A N/A 3 N/A RJ451 Mini
S5000-Q-I 6 Mbps 600 5 20 Mbps A/P N/A 1 pair 4 N/A RJ451 Mini
M5000-Q-I 15 Mbps 1,500 10 45 Mbps A/P N/A 1 pair 4 N/A RJ451 1U
M5100-Q-I 25 Mbps 3,000 32 55 Mbps A/P N/A 1 pair 4 N/A RJ451 1U
M5400-Q-I 50 Mbps 4,000 100 80 Mbps A/P N/A 1 pair 6 N/A RJ452 1U
M5500-Q-I 60 Mbps 5,000 300 90 Mbps A/P N/A 1 pair 6 2 RJ452 2U
M5600-Q-I 80 Mbps 8,000 500 105 Mbps A/P 3 pair 6 4 RJ451 2U
M5800-Q-I 100Mbps 8,000 500 112 Mbps A/P 3 pair 6 4 RJ451 2U
M5900-Q-I 150Mbps 15,000 1,000 400 Mbps A/P 2pair 4 4 RJ451 2U
License
Options
Portable Accelerator:Windows base software client for PC. When apply with WANO Central appliance, it enable portable accelerator capability on mobile client.; Per user based; One-Time
perpetual license;
Multi-lines: Only valid when IPsec VPN module is enabled; Augmentation of Internet lines; Per augmented Internet line based; One-Time perpetual license
IPsecVPN Remote Client: Only valid when IPsec VPN module is enabled;IPsecVPN client for remote access of mobile user; Per user based; One-Time perpetual license
(1): Optimized bandwidth indicates maximum WAN bandwidth that can be optimized.Exceed traffic will be bypassed by WANO appliance. Optimization flexibility allowadministratorsto configure specific critical WAN applications tobe
optimized, while ignore and/or suppress non-critical traffic;
(2): Maximum traffic shaping bandwidth indicates maximum WAN bandwidth that can be processed; If surpassed, appliance stability can be negatively affected;
(3): A/P: Active/Passive;
SangforSSL VPN
Product
Model
Concurrent
Users
Connection Per
Second
Virtual Secure
Portal
Cluster Options(1) Dual Power
Supplies
Bypass
(Copper)
10/100/1000
Base-T
SFP Serial
Port
Profile
M5100-S-I 300 60 256 A/P, Multiple units cluster, Cluster cloud N/A 1 pair 4 N/A RJ451 1U
M5400-S-I 1200 150 256 A/P, Multiple units cluster, Cluster cloud N/A 1 pair 6 N/A RJ452 1U
M5500-S-I 2600 250 256 A/P, Multiple units cluster, Cluster cloud N/A 1 pair 6 2 RJ452 2U
M5600-S-I 3800 300 256 A/P, Multiple units cluster, Cluster cloud 2 pair 6 4 RJ451 2U
M5800-S-I 5000 500 256 A/P, Multiple units cluster, Cluster cloud 2 pair 6 4 RJ451 2U
M5900-S-I 16000 1200 256 A/P, Multiple units cluster, Cluster cloud 2 pair 4 4 RJ451 2U
4th Floor, Building 2, Financial Base
No.8 Kefa Road, Technology Park, Nanshan District
Shenzhen, Guangdong Province, P.R.China P.C.:518052

www.sangfor.com2 / 2public

License
Options
User License:SSL VPN user license; Per user based; One-Time perpetual license;
Dynamic Token Server Software: Software, Dynamic Token Authentication Server Software;One-Time perpetual.
Dynamic Token: Hardware, Dynamic Token, Per user based. One-Time perpetual.
SMS Authentication Module:Enabling SMS authentication function License packet includes SMS authentication function and one SMS Modem(GSM/CDMA)One-Time perpetual license
Secure Desktop:EnablingSecure Desktopfunction; One-Time perpetual license
Remote Application Function License:Enabling remote application function; One-Time perpetual license
Remote Application Client License:Only clients with remote application licenses can use remote application function; Per client based; One-Time perpetual license;
Multiple Units Cluster:Clustering with multiple units; License starts from3 appliances cluster; Per unit based; One-Time perpetual license;
Multi-lines: Only valid when IPsec VPN module is enabled; Augmentation of Internet lines; Per augmented Internet line based; One-Time perpetual license
IPsecVPN Remote Client: Only valid when IPsec VPN module is enabled;IPsecVPN client for remote access of mobile user; Per user based; One-Time perpetual license
(1): A/P: Active/Passive
SangforCentral Management Console
ProductModel Manageable Devices (1) Dual Power Supplies Bypass (Copper) 10/100/1000 Base-T SFP Serial Port Profile
M5100-SC-I 800 N/A 1 pair 4 N/A RJ451 1U
M5500-SC-I 10000 N/A 1 pair 6 2 RJ452 2U
License
Options
CMC management license: CMC management license, Per unit based; One-Time perpetual license;.

(1): The Sangfor CMC only does central management to its WAN Optimization (WANO) product line currently.

Sangfor Business Data Delivery Network
Sangfor leverage its layer 7 security and optimization technologies toensure organizations business data be delivered to those users in need securely and efficiently. With
Sangfor products in place, business entitiesare able to enjoy the most reliableand productive business delivery network to underpin the growth ofbusinesses while lower
the Total Cost of Ownership (TCO) for organizations IT infrastructure.

























Internet Access Management (IAM)
Monitor, Manage and Accelerate Your Network
SANGFOR IAM products are designed to help organizations to solve a variety of
problems that associated with Internet connection. With features of user
authentication, web filtering, application control, bandwidth management,
caching and Internet traffic reporting , the IAM offers effective solution to
Internet traffic visibility, control and optimization, thus to create a manageable,
rapid Internet access environment while simplify the network infrastructure.
Visibility: Content layer visibility with systematic reporting capability
Control: Flexible and comprehensive Internet access controls
Optimization: Well reputablebandwidth management solution with
performance boost through caching;

WAN Optimization (WANO)
LAN Speed on Your WAN
SANGFOR WANO products excel at multi-layer WAN transmission optimization to
improve data transmission on physical lines and reduce application response
timesignificantly, especially for transmission environments with high delay and
packet loss. Thus benefitslow-responding applications such as Exchange, Lotus,
SAP, MS Share Point, Oracle database, Disaster Recovery systems, etc.
Data Reduction: 30-90%
Reduce bandwidth utilization: 30%~80%
Improve data transfer up to 60 times!


SSL VPN
Rapidity, Virtualization, Security
SANGFOR SSL VPN solution can be a convenient and effective way of landing a large
number of security mechanisms and end-user groups in achieving safe and efficient
remote access to enterprise applications, ensuring application system availability for
remote workforce while preventing business data exposed to risks of Internet
attacks directly.
Rapidity: The most rapid SSL VPN ever by virtue of itsembedded
acceleration technologies.
Virtualization: Do more with less by SangforSSL VPNs remote application
and local virtualization modules.
All-around Security Protection: Identity, endpoint, transmission, resource
authorization security protection for secure business connectivity.