[Question] Inquiry Regarding Remote Management of aSV via SCP

Newbie481305 Lv1Posted Sep-02-2025 10:43

I hope this message finds you well.

We are currently proposing the deployment of aSV at a customer site. The customer would like to install one aSV at each of two branch offices, and manage these aSV instances remotely from the headquarters.

From our research, it appears that the SCP tool can be used for remote management by deploying its image. However, we understand that SCP is typically used to manage clustered environments. In this case, the customer’s setup involves standalone aSV instances rather than an HCI cluster.

Could you please advise whether aSV can be managed through SCP in this scenario, and if so, what method would be used to enable such management?

Newbie337989 has solved this question and earned 20 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Feel free to correct this.
I believe you're correct, SCP is designed as a centralized management and orchestration tool for HCI clusters (multiple nodes, shared storage, virtual datastores, HA, etc.). It provides, Cluster management, Resource scheduling, Lifecycle management, and Upgrade handling.

But, SCP does not natively manage standalone aSV appliances (like firewall/VPN virtual machines deployed on ESXi, Hyper-V, or HCI). Those are single-node deployments.

You can try:

1. Individually via Web GUI (HTTPS/443)
2. Or via Sangfor Central Manager (CM), which is different from SCP.
- Central Manager (CM) is the product Sangfor provides for multi-site NGAF/NGW/EDR/EPP policy & monitoring management.
- It allows remote management of multiple appliances (like your HQ + branches).

So, SCP cannot be used to manage standalone aSV instances in your customer's setup. SCP is tied to Sangfor HCI clusters only.

If you want centralized remote management of multiple aSVs across HQ and branches:
- Use Sangfor Central Manager (CM) for NGAF/NGW-type appliances.
- Or manage each appliance individually via its own Web UI (less scalable).

Additional notes:

1. If they want to centrally manage firewall/security policies > Propose Sangfor Central Manager (CM). (Please validate also with Sangfor support)
2. If they only need basic access > Each aSV can still be securely managed from HQ via:
- VPN access to the branch
- Or port forwarding (HTTPS/443) with proper firewall rules.
Is this answer helpful?
Newbie337989 Lv2Posted Sep-02-2025 13:20
  
Feel free to correct this.
I believe you're correct, SCP is designed as a centralized management and orchestration tool for HCI clusters (multiple nodes, shared storage, virtual datastores, HA, etc.). It provides, Cluster management, Resource scheduling, Lifecycle management, and Upgrade handling.

But, SCP does not natively manage standalone aSV appliances (like firewall/VPN virtual machines deployed on ESXi, Hyper-V, or HCI). Those are single-node deployments.

You can try:

1. Individually via Web GUI (HTTPS/443)
2. Or via Sangfor Central Manager (CM), which is different from SCP.
- Central Manager (CM) is the product Sangfor provides for multi-site NGAF/NGW/EDR/EPP policy & monitoring management.
- It allows remote management of multiple appliances (like your HQ + branches).

So, SCP cannot be used to manage standalone aSV instances in your customer's setup. SCP is tied to Sangfor HCI clusters only.

If you want centralized remote management of multiple aSVs across HQ and branches:
- Use Sangfor Central Manager (CM) for NGAF/NGW-type appliances.
- Or manage each appliance individually via its own Web UI (less scalable).

Additional notes:

1. If they want to centrally manage firewall/security policies > Propose Sangfor Central Manager (CM). (Please validate also with Sangfor support)
2. If they only need basic access > Each aSV can still be securely managed from HQ via:
- VPN access to the branch
- Or port forwarding (HTTPS/443) with proper firewall rules.

I Can Help:

Change

Board Leaders

NyxZale...

Weekly Sharers

Newbie5...

Weekly Questioners