Sangfor Solution
Sangfor suggested a combination of Sangfor NGAF, HCI, and Endpoint Secure to harden network security and correlate their incident response capabilities.

Ensure those network security devices are properly deployed and installed to protect against both internal and external threats.

NGAF protects the network perimeter from external threats and attacks
NGAF and SSL-VPN restrict unauthorized users from accessing the internal network
Endpoint Secure protects endpoints from both known and unknown malware and viruses
NGAF URL and application filtering ensures that only authorized URL and applications can be assessed by authorized employees

Case Study of sangfor "success-stories/ransomware-attack-and-recovery-sangfor-indonesia"

If devide Ransomware Kill chain in 3 stages than on 2nd phase encription occured. Many Cyber experts devided in 7 steps than on stage 4 encryption processed.