Company OverviewSince its establishment in 2000, Sangfor has had a clear goal: To build high-performance, reliable and absolutely secure

networks that underpin the growth of our customers’ businesses. Sangfor concentrates on excellence in WAN devices and

Internet Access Management solutions, chiefly for emerging segments, rather than producing good-enough products for

all parts of the network. From the start, Sangfor’s products have been designed to offer unparalleled performance,

greater choice and greater flexibility while lowering TCO (total cost of ownership).

SANGFOR has over 700 full-time employees worldwide. Its customers include more than 15,000 businesses, among them

a number of Fortune 500 members, as well as hundreds of local governments and higher-education institutions.

SANGFOR Technologies International Department

Unit 11F, 11/F, InfoTech Centre, 21 Hung To Road, Kwun Tong, Hong Kong+852 3427 9160+852 3427 9910

www.sangfor.com

Address:

Tel:Fax:

SANGFOR IAM Product Introduction

Background

Challenges

Benefits

Winet(http://www.winet.com.my/)is a leading broad¬band multimedia

services provider. Headquartered in Kuala Lumpur, Winet has more than

200 employees and a global customer base in Wi-Fi,

telecommuni¬cations, multimedia and wireless broadcasting.

As Winet expanded its operations worldwide, it faced growing demand

from its users for higher quality services. Specific challenges included:

• Some users constantly downloaded movies and music using P2P,

reducing bandwidth for other users.

• Winet users demanded consistently high service levels and 24-by-7

access to the servers, even in the event of network failure.

• Users sometimes changed service packages, thus required systems

flexibility.

• Any network management system needed to cooperate with Winet’s

existing LDAP and RADIUS systems.

After testing offerings from a number of other vendors, Winet chose the

SANGFOR solution and found that performance improved markedly

• P2P traffic was reduced, helping Winet save a lot of bandwidth.

• Service packages are now easily provided, according to user

requirements.

• The SANGFOR solution gives Winet’s IT managers better understanding

of network usage. It also supports hardware bypass, which leaves user

Internet access unaffected in the event of failure, and the SANGFOR

IAM is compatible with Winet’s existing billing system, IWISH.

TNS is one of the world's largest Custom Market Research specialists. It

provides quality marketing information delivered by Global Industry

Sector expert consultants, with innovative Market Research Expertise

across the product life-cycle, in 75 countries. The file sharing and

internal business system acceleration are improved after deploying the

SANGFOR WANO product in the Singapore, Hong Kong and China

Mainland office.

UTem is a leading education provider with more than 1000 employees

and over 1500 students. University Teknikal Malaysia Melaka

(http://www.utem.edu.my/default.php) was formerly known as Kolej

University Teknikal Kebangsaan Malaysia (KUTKM) and was established

on 1 December 2000. After the re-branding of KUTKM it is now known as

UTeM, commencing 1 February 2007. By deploying SANGFOR IAM, UteM

has reduced the bandwidth consumed by P2P applications. The URL

filtering function of IAM has built a healthy network environment for the

university, and the detailed reporting functionality provides professional

network analysis for the network administrator, ensuring efficient

educational resources for students and crucial information for

managers.

The Delma Emirates Group was established in 1972 in Abu Dhabi. Since

its inception, the company has endeavored to offer the best quality in

the construction fields and therefore has also been recognized as a

quality-conscious organization, adopting the latest technologies and

working techniques in all areas of work, including field work,

administration and project management.

The SANGFOR WANO has accelerated applications between the branch

offices and head offices and is delivering LAN-like application

responsiveness. The SANGFOR WANO is reducing up to 55% of redundant

data and boosting network speed by 5.5 times. The company’s ERP

server can be accessed faster than ever, with minimal delay and higher

connectivity.

GE Healthcare is a premier subsidiary department of GE. It provides

transformational medical technologies and services that are shaping a

new age of patient care. GE Healthcare is a $17 billion unit of GE and has

served patients in over 100 countries.

For deploying its SANGFOR's M5100-S, GE Healthcare chose a combined

authentication method with username, password and SMS. After

identification by username and password, maintenance engineers who

want to gain access must further type in a real-time message

authentication code sent via SMS, additionally ensuring user identity. In

addition, GE Healthcare has used SANGFOR’s Customized Log-in

Interface to ensure full compliance with GE’s branding design guidelines.

SANGFOR’s solutions are delivering rapid, stable and safe access to

maintenance engineers, regardless of location, supporting them in their

daily tasks of maintaining GE equipment, obtaining medical information

and enhancing overall after-sales customer satisfaction.

Eaton Hotel Hong Kong is a four-star superior Hong Kong hotel

and a member of the WORLDHOTELS First Class Collection.

Eaton hotel is pleasant, enjoyable and highly attractive to

smart travelers, enthusiastically offering everything that its

guests could possibly desire.

GAC TOYOTA was founded on September 1, 2004, a joint-venture

between Guangzhou Automobile Industry Group Co. Ltd. in China and

the Toyota Motor Corporation of Japan, with equity participation at 50%

by both parties. The company has over 5,600 employees now.

The company deployed the SANGFOR IAM solution to manage staff

Internet access during business hours, allowing for increase in

productivity and enhanced administrator management of network

resources and business bandwidth.www.sangfor.com

SANGFOR IAM Product Introduction

Router mode

Bypass mode

Typical Case Studies

www.sangfor.comwww.sangfor.comwww.sangfor.com

Our Solutions

Prevent bandwidth abuse and low efficiency: IDC data shows that, across all countries, P2P traffic accounts for 49 to 83

percent of total Internet traffic, of which encrypted P2P traffic accounts for nearly 20 percent. In an office environment,

limited and expensive business bandwidth can be consumed by P2P applications (which cannot be controlled by

traditional means), impairing legitimate Internet access and degrading the responsiveness of Web-based business

applications. SANGFOR’s IAM series addresses this challenge with comprehensive network device identification, fine-

grained bandwidth throttling and powerful network behavior analysis and control. The IAM series guarantees resources

for critical applications and restricts non-critical ones, raising your organizational application effectiveness.

With an industry-leading e-soft engine [recommend: “software decision engine”], the IAM series leverages its extensive

built-in URL library to deliver accurate and powerful URL identification, filtering and control.

Control outbound information to prevent leakage: IDC reports that nearly 80 percent of global organizations face

information security challenges. SANGFOR’s IAM series manages both proactive and passive leakage, securing your

information and digital assets and reducing network threats via advanced measures, including Zero-Day protection, In-

Process Event warning and detailed follow-up tracking.

Benefits

Improved productivity: Eliminate employee downtime due to Internet entertainment during business hours.

Effective IT regulation: Ensure organizational IT regulation compliance.

Better network management and optimization: The SANGFOR IAM provides comprehensive Web-based visual reports,

giving managers a solid basis for granular decisions regarding Internet utilization, mitigation of resource bottlenecks and

troubleshooting network failures, resulting in continuous business infrastructure optimization.

Record access behavior for compliance: The IAM series logs users’ Internet access trails in detail, ensuring a record of

access behavior to meet relevant laws and corporate regulations.

Main Functions and Technologies

Accurate access behavior identification

Intelligent Webpage identification

Extensive application protocol library

Feature-based file identification

Flexible policy administration

Internet access strategy objectification and mandatory inheritance

Personalized authorization management permissions

Granular bandwidth and traffic management

Multi-line separation of traffic control (physical lines only; logical connections not supported)

Logical connection support based on application\Website\file

Bandwidth resource throttling

Detailed Internet access logging

Including behavioral patterns and content retrieval

Security protection

Protects the intranet by filtering extranet viruses

Proactive prevention and identification of malicious traffic

1

2

3

4

5

Profile 1U 1U 1U 1U 1U 1U 2U 2U 2U 2U

RAM 256MB 256MB 256MB 256MB 512MB 2GB 2GB 4GB 4GB 4GB

HD 80GB 80GB 80GB 80GB 160GB 160GB 160GB 160GB 160GB 250GB

Throughput 4Mbps 8Mbps 12Mbps 20Mbps 45Mbps 60Mbps 120Mbps 200Mbps 280Mbps 400Mbps

Connections 20,000 30,000 40,000 60,000 120,000 200,000 400,000 550,000 700,000 1,000,000

Users 50 100 200 400 800 1,200 2,500 5,000 8,000 10,000

Model S5000 M5000 M5100 M5100-P M5400 M5400-P M5500 M5600 M5800 M5900

Specifications

SANGFOR IAM Product Introduction

Deployment

Transparent mode

The SANGFOR IAM series leverages dozens of patented innovations to address business challenges (such as low

productivity, low bandwidth utilization, information leakage, Internet access and business compliance). Its powerful

feature-set includes identification of users, end-points, and applications, plus numerous management mechanisms such

as blocking, stream control and auditing. SANGFOR’s IAM series is your first choice for ensuring effective organizational

use of Internet applications and resources.

Product Preface