Fortinet's VDOM functionality allows the separation of a single physical firewall into multiple virtual firewalls, each with its own configuration, security policies, and user management. This feature is useful for organizations that need to manage and secure different parts of their network infrastructure independently.

To achieve a similar functionality in Sangfor's Network Security Firewall (NSF), you can create multiple virtual instances or tenants within the NSF. Each virtual instance will have its own configuration, security policies, and user management, similar to Fortinet's VDOMs.

1. Log in to the Sangfor NSF web console: Access the web-based management interface of your Sangfor NSF device by entering its IP address or fully qualified domain name in your web browser.

2. Navigate to the virtual instance or tenant management: Look for the menu option related to virtual instances or tenants in the console. This could be under "System," "Management," or "Virtualization" depending on the specific version of the Sangfor NSF.

3. Create a new virtual instance or tenant: Click on the "Add" or "Create" button to start the process of creating a new virtual instance or tenant. Provide a name and description for the new virtual instance, and configure other settings such as IP address, subnet, and gateway as required.

4. Configure security policies and user management: After creating the virtual instance, you can configure its security policies, user management, and other settings independently from the other virtual instances. This allows you to tailor the network security and access control to the specific needs of each virtual instance.

5. Assign interfaces to virtual instances: Map the physical network interfaces of the Sangfor NSF to the appropriate virtual instances. This will allow traffic to flow between the virtual instances and the connected networks.

6. Save and activate the changes: Once you have configured the virtual instances, save the changes and apply them to the Sangfor NSF device. The new virtual instances will become active and start functioning as separate security entities within the NSF.

A VDOM is a virtual domain, you can configure multiple on ONE firewall (cluster) and as such realize something like multiple virtual firewalls.

Sangfor Hyper-Converged Infrastructure (HCI) provides 3rd-gen cloud computing architecture and one-stop software-defined data centre solution. Learn more.​