Sangfor firewall is capable to perform periodic network scans based on the server's open ports, you can treat it as part of the NMAP feature. However, it does not support scanning the ransomware since it is involved in the endpoint system, you could install the Sangfor ES agent and schedule for periodical scanning. The synergy between Sangfor NGAF and Sangfor ES is botnet detection. When NGAF detected botnet traffic, it could trigger the Sangfor ES agent to start the malware scanning.

Sangfor firewall is capable to perform periodic network scans based on the server's open ports, you can treat it as part of the NMAP feature. However, it does not support scanning the ransomware since it is involved in the endpoint system, you could install the Sangfor ES agent and schedule for periodical scanning. The synergy between Sangfor NGAF and Sangfor ES is botnet detection. When NGAF detected botnet traffic, it could trigger the Sangfor ES agent to start the malware scanning.