To allow only email sites through Sangfor NGAF, you can follow these steps:

1- Log in to the Sangfor NGAF web console using your administrative credentials.
2- Navigate to the "Security Policy" section and select "Access Control".
3- Create a new access control policy by clicking on the "Add" button.
4- Name the policy and select "HTTP/HTTPS" as the service type.
5- Under "Source Address", select the range of IP addresses that you want to apply the policy to.
6- Under "Destination Address", enter the domain names of the email sites that you want to allow (e.g., gmail.com, yahoo.com, etc.).
7- Under "Action", select "Allow".
8- Save the policy by clicking on the "Save" button.

This policy will allow traffic from the specified source IP addresses to access only the email sites that you have specified, while blocking all other traffic.

To allow only email sites through Sangfor NGAF, you can follow these steps:

1- Log in to the Sangfor NGAF web console using your administrative credentials.
2- Navigate to the "Security Policy" section and select "Access Control".
3- Create a new access control policy by clicking on the "Add" button.
4- Name the policy and select "HTTP/HTTPS" as the service type.
5- Under "Source Address", select the range of IP addresses that you want to apply the policy to.
6- Under "Destination Address", enter the domain names of the email sites that you want to allow (e.g., gmail.com, yahoo.com, etc.).
7- Under "Action", select "Allow".
8- Save the policy by clicking on the "Save" button.

This policy will allow traffic from the specified source IP addresses to access only the email sites that you have specified, while blocking all other traffic.