Sangfor NSF

Hello. Could anybody advise, how is realised functionality like fortinet VDOM? I need to separate NSF in several virtual domains, like in fortinet.

Sangfor Hyper-Converged Infrastructure (HCI) provides 3rd-gen cloud computing architecture and one-stop software-defined data centre solution. Learn more.​

A VDOM is a virtual domain, you can configure multiple on ONE firewall (cluster) and as such realize something like multiple virtual firewalls.

Fortinet's VDOM functionality allows the separation of a single physical firewall into multiple virtual firewalls, each with its own configuration, security policies, and user management. This feature is useful for organizations that need to manage and secure different parts of their network infrastructure independently.

To achieve a similar functionality in Sangfor's Network Security Firewall (NSF), you can create multiple virtual instances or tenants within the NSF. Each virtual instance will have its own configuration, security policies, and user management, similar to Fortinet's VDOMs.

1. Log in to the Sangfor NSF web console: Access the web-based management interface of your Sangfor NSF device by entering its IP address or fully qualified domain name in your web browser.

2. Navigate to the virtual instance or tenant management: Look for the menu option related to virtual instances or tenants in the console. This could be under "System," "Management," or "Virtualization" depending on the specific version of the Sangfor NSF.

3. Create a new virtual instance or tenant: Click on the "Add" or "Create" button to start the process of creating a new virtual instance or tenant. Provide a name and description for the new virtual instance, and configure other settings such as IP address, subnet, and gateway as required.

4. Configure security policies and user management: After creating the virtual instance, you can configure its security policies, user management, and other settings independently from the other virtual instances. This allows you to tailor the network security and access control to the specific needs of each virtual instance.

5. Assign interfaces to virtual instances: Map the physical network interfaces of the Sangfor NSF to the appropriate virtual instances. This will allow traffic to flow between the virtual instances and the connected networks.

6. Save and activate the changes: Once you have configured the virtual instances, save the changes and apply them to the Sangfor NSF device. The new virtual instances will become active and start functioning as separate security entities within the NSF.

Sangfor documentation doesn't explicitly mention separating NSF (Network Service Function) into virtual domains like FortiGate does.

Here are some approaches you can consider:

    Investigate Sangfor Partitioning: While Sangfor doesn't have a direct equivalent to FortiGate's virtual domains, Sangfor OS (Sangfor's operating system) does support partitioning.  You might be able to achieve some level of separation using partitions. Refer to the Sangfor OS documentation for details on partitioning: https://www.sangfor.com/support/support-resources.

    Use Separate Sangfor Appliances: If partitioning isn't sufficient,  you might need to consider deploying separate Sangfor appliances for each virtual domain. This would provide the strongest isolation between domains.

    Contact Sangfor Support: Sangfor's technical support might have insights on achieving virtual domain-like separation within a single appliance. You can find their contact information in the Sangfor OS documentation or on the Sangfor website.

In Sangfor NSF, Virtual System is available for use

I can see in the new NSF datasheet there is virtual domain ? is not the same as VDOM ? Can someone clarify ?

Hopefully SANGFOR will introduce VDOM in the near future.

Virtual Domain feature is not yet available in Sangfor NGAF. You may try to contact Sangfor support and  request for the said feature. It is possible to include this feature in future version upgrades

this feature is not available as of now.

Hi, as far as i know, The Virtual Domain functionality is currently unavailable in Sangfor NGAF. We’ll patiently await a firmware upgrade to see if this feature will be added.