<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
  <channel>
    <title>Sangfor Community - Athena Secure Web Gateway (SWG)</title>
    <link>https://community.sangfor.com/forum.php?mod=forumdisplay&amp;fid=9</link>
    <description>Latest 20 threads of Athena Secure Web Gateway (SWG)</description>
    <copyright>Copyright(C) Sangfor Community</copyright>
    <generator>Discuz! Board by Comsenz Inc.</generator>
    <lastBuildDate>Tue, 09 Jun 2026 07:14:14 +0000</lastBuildDate>
    <ttl>60</ttl>
    <image>
      <url>https://community.sangfor.com/static/image/common/logo_88_31.gif</url>
      <title>Sangfor Community</title>
      <link>https://community.sangfor.com/</link>
    </image>
    <item>
      <title>Brainstorming Session: Handling the Performance &amp; Compliance Toll of SSL Decryption on IAG</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11981</link>
      <description><![CDATA[Let’s talk about a topic that every security engineer wrestles with: SSL Decryption (Man-in-the-Middle &amp; Ingress Client).  With modern web traffic being almost entirely encrypted via HTTPS, traditional application identification and deep activity au ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Fri, 05 Jun 2026 11:50:25 +0000</pubDate>
    </item>
    <item>
      <title>Technical Debate: Why Bypass Mode is a Double-Edged Sword for Network Security Managers</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11980</link>
      <description><![CDATA[I wanted to trigger a discussion on IAG architectural choices. We all know that deploying Sangfor IAG in Bypass Mode is incredibly attractive because it offers the smallest change to the existing network topology and has zero risk of causing network  ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Fri, 05 Jun 2026 11:47:34 +0000</pubDate>
    </item>
    <item>
      <title>Is there ever a reason not to use Bridge Mode in an established enterprise network?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11967</link>
      <description><![CDATA[The IAG library makes a strong case for Bridge Mode because of Hardware Bypass. It’s transparent to both the uplink and downlink devices, meaning zero topology changes. Yet, many still deploy in Route Mode or even Bypass Mode (which misses UDP traff ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:38:25 +0000</pubDate>
    </item>
    <item>
      <title>Let’s settle the debate: Which Sangfor SSO method actually works best in a messy, real-world AD environment?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11966</link>
      <description><![CDATA[The library says Script Mode has the highest success rate, but IWA SSO offers that \'zero-touch\' magic using NTLM/Kerberos. We also have the SSO Agent, which doesn\'t require AD changes but can\'t always sync logouts effectively.
Discussion Points:

[]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:34:50 +0000</pubDate>
    </item>
    <item>
      <title>Admin to Admin: Are we being too hard on our users by blocking \'fun\' apps?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11965</link>
      <description><![CDATA[The Sangfor IAG library suggests that instead of blocking P2P or video, we should use Smart BM. This system uses queuing and buffering to create a \'dynamic\' ceiling. You can limit staff to 20% for P2P but allow that limit to be exceeded if the networ ..]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:25:51 +0000</pubDate>
    </item>
    <item>
      <title>We all love the idea of \'zero-day\' protection, but let’s talk about the cost of accuracy.</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11964</link>
      <description><![CDATA[Sangfor Engine Zero uses some serious math—Principal Component Analysis (PCA) and Random Forest algorithms—to catch viruses that don\'t even have a signature yet. It’s a self-evolving AI at our gateway. However, the documentation notes that false p ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:23:22 +0000</pubDate>
    </item>
    <item>
      <title>Beyond Security: Turning Network Logs into Business Intelligence (BI)</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11963</link>
      <description><![CDATA[Sangfor IAG isn\'t just a security tool; it\'s a Business Intelligence (BI) platform. Most admins only look at logs when something goes wrong, but IAG\'s BI module lets you proactively solve business problems.
Two \'Killer Features\' you should be using:]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:20:03 +0000</pubDate>
    </item>
    <item>
      <title>The &quot;Zero-Touch&quot; User Experience: Mastering IWA Single Sign-On</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11962</link>
      <description><![CDATA[User authentication is critical for security, but it’s a friction point for employees. If you are running a Microsoft AD domain, you should be using Integrated Windows Authentication (IWA) SSO.
Unlike traditional authentication that forces a pop-up  ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:15:52 +0000</pubDate>
    </item>
    <item>
      <title>Solving the &quot;Internet is Slow&quot; Headache Without Blocking Apps</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11961</link>
      <description><![CDATA[The most common complaint for any network admin is \'The internet is slow!\' Usually, the first instinct is to block high-bandwidth apps. But what if your manager doesn’t want to block anything?
This is where Smart Bandwidth Management (BM) comes in.  ..]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:13:34 +0000</pubDate>
    </item>
    <item>
      <title>AI-Powered Defense: How Engine Zero &amp; Neural-X Identify &quot;Unknown&quot; Threats</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11960</link>
      <description><![CDATA[Ever wondered what makes Sangfor IAG more than just a web filter? It’s the AI-based Sangfor Engine Zero.
Most traditional security engines rely on signature libraries—meaning they only stop what they’ve seen before. Engine Zero is different. It us ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:11:12 +0000</pubDate>
    </item>
    <item>
      <title>Which Sangfor IAG Deployment Mode is Right for Your Network?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11959</link>
      <description><![CDATA[Choosing the correct deployment method is essential, as different modes affect your network’s performance and functionality.
[*]Route Mode: Best if you need the IAG to act as a gateway, providing routing, DHCP, and NAT capabilities.
[*]Bridge Mode:  ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Tue, 02 Jun 2026 15:07:48 +0000</pubDate>
    </item>
    <item>
      <title>Is MAC Authentication Still Reliable in 2026?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11955</link>
      <description><![CDATA[Last edited by George Fady 2026-Jun-01 17:31. 

VIPWith iOS, Android, and Windows now enabling MAC address randomization by default, I\'ve started seeing more challenges in Sangfor IAG environments where MAC authentication is heavily used.Some common ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Mon, 01 Jun 2026 09:25:20 +0000</pubDate>
    </item>
    <item>
      <title>Is MAC address authentication still reliable in 2025? How are you handling MAC randomization with Sangfor IAG?</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11953</link>
      <description><![CDATA[Hi everyone]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Sun, 31 May 2026 17:44:08 +0000</pubDate>
    </item>
    <item>
      <title>DHCP problem causing authentication type to fail (IAM authentication types: DHCP issue)</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11950</link>
      <description><![CDATA[When IAG acts as the DHCP server (common in route mode), IP-to-user mapping can break if DHCP leases are not synchronized with authentication records.
Confirm whether the IAG or an upstream router is the DHCP server. Mixed DHCP sources create duplica ...]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Sun, 31 May 2026 17:05:08 +0000</pubDate>
    </item>
    <item>
      <title>IAM/IAG is not authenticating users — users go online without logging in or get stuck</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11947</link>
      <description><![CDATA[The IAG supports several authentication methods. When users bypass or get stuck, first identify which method is configured.
IP/MAC binding — the device MAC and IP must be pre-registered. If the MAC changes (VM, VPN adapter), auth fails silently.

Lo ..]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>George Fady</author>
      <pubDate>Sun, 31 May 2026 14:02:56 +0000</pubDate>
    </item>
    <item>
      <title>Reset IAG Admin</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11822</link>
      <description><![CDATA[Hi mates

I have problem where my office mate is administrator who managed the Sangfor IAG system, model M6000-AC-I has resigned.
So currently I facing an issue where the administrator password is no longer available.

Under this circumstance, I woul]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>Abdul Rahman</author>
      <pubDate>Tue, 14 Apr 2026 02:18:52 +0000</pubDate>
    </item>
    <item>
      <title>Sangfor SWG API Documentation</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11795</link>
      <description><![CDATA[Where can i find the API Documentation for the latest version of IAG, this will be helpful to the web app i am creating. Thank You!]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>johhan</author>
      <pubDate>Wed, 01 Apr 2026 01:03:04 +0000</pubDate>
    </item>
    <item>
      <title>IAG virtual line</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11711</link>
      <description><![CDATA[Hi,
i want to discuss

we have 200 Mbps for MPLS traffic
we have 170 Mbps for internet traffic

the scenario / the question:

1.) it is possible to configure mpls traffic and internet traffic with 1 virtual lines ?
2.) what happen if configure 2]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>ilham</author>
      <pubDate>Mon, 23 Feb 2026 06:29:10 +0000</pubDate>
    </item>
    <item>
      <title>Editing Custom Webpage for IAG or SWG</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=11706</link>
      <description><![CDATA[Hello All,

I want to edit and make custom web from base template in IAG custom webpage.
I need to remove WeChat and other unnecessary item for authentication method.
But I can\'t see CSS file, and it is difficult to custom. When I change one of codin]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>jondoe</author>
      <pubDate>Mon, 16 Feb 2026 05:54:56 +0000</pubDate>
    </item>
    <item>
      <title>IAG POC/ Implementation Guides, Configuration and Troubleshooting Guides for Pre-Sales and FAEs</title>
      <link>https://community.sangfor.com/forum.php?mod=viewthread&amp;tid=10794</link>
      <description><![CDATA[Dear members,
We are excited to announce the availability of a curated collection of technical documents designed to support pre-sales teams and Field Application Engineers (FAEs). 
Whether you\\\'re working on proof of concept (POC) demonstrations, h .]]></description>
      <category>Athena Secure Web Gateway (SWG)</category>
      <author>Sangfor Jojo</author>
      <pubDate>Fri, 20 Dec 2024 08:48:51 +0000</pubDate>
    </item>
  </channel>
</rss>