Using Application Hiding in your NGAF solution is the best option to prevent hackers from obtaining server information through FTP. However, it is also crucial to implement other security measures to ensure the overall security of your FTP server and network.

Hi,
"Application hiding" is the way. Use it on NGAF.

My suggestion, you can consider the solutions:
1) Protection Against Weak FTP Passwords to protect against brute force attacks
2) Hiding the application to protect information about the server from being sniffed by attackers

Sangfor NGAF offers a couple of functionalities that can help prevent hackers from obtaining server information through FTP:

    Web Application Firewall (WAF): The WAF can be configured to mask server version information in the HTTP response headers. This stops hackers from identifying the specific server software and exploiting known vulnerabilities.

    Intrusion Detection System (IDS): The IDS can be configured to detect and block attempts to exploit known vulnerabilities in FTP servers. This helps prevent hackers from gaining unauthorized access to the server and its data.

By combining these Sangfor NGAF features, you can significantly improve your server's security posture against attacks that try to exploit server vulnerabilities exposed through FTP.

The best solution would be to utilize the "Application hiding" function in Next-Generation Firewall (NGAF). This feature allows the firewall to disguise or obfuscate specific application signatures or characteristics, thereby concealing information about the server's FTP version. By hiding this information, potential attackers are thwarted in their attempts to identify vulnerabilities based on server version details, effectively mitigating the risk of exploitation.