Enterprise Hybrid Cloud
Sangfor Unified Hybrid Cloud: A Cloud that Evolves with You
Spollex, the official distributor of Sangfor products, offers simplified, secure, and resilient cloud solutions for core data centers, branch offices, and edge locations. With Sangfor Hyperconverged Infrastructure (HCI), organizations can build a Private Cloud and seamlessly transition to a Unified Hybrid Cloud by connecting to Sangfor Managed Cloud Services (MCS).
Sangfor MCS uses the same HCI infrastructure and technology stack, enabling smooth integration and workload portability. This flexibility allows businesses to run applications on-premises or in the cloud for optimized performance, cost-efficiency, and security—all managed through a centralized cloud management platform.

Sangfor Hybrid Cloud Solution Framework

Sangfor Hybrid Cloud Value Proposition
Homogeneous & Flexible Hybrid Cloud
The end-to-end Hybrid Cloud solution, powered by NG-CDI, supports both virtual machines and containers. Its unified architecture offers flexibility in designing application partitioning and workload placement within a hybrid model, ensuring maximum value from cloud adoption.
Unified Management of On & Off-prem Environments
Simplified operations and maintenance are ensured through unified management across on-premises and off-premises environments in a Homogeneous Hybrid Cloud. A visual drag-and-drop topology provides deep visibility, enabling efficient governance of performance, risk, and cost control.
High Resiliency & Security
Sangfor ensures a highly resilient and secure hybrid cloud with its integrated Backup and DR solution and comprehensive security features. The unified hybrid cloud design maintains consistent resiliency and security across on-premises private clouds and off-premises MCS Cloud.
Sangfor Zero Trust Guard Value Propositions
Smart Security
- Minimize the attack surface by making applications invisible to the internet.
- Enforce least-privileged access by continuously assessing identity and context.
- Prevent lateral movement by segmenting user access to isolated resources.
- Continuously monitor and detect threats, responding to security incidents in real time.
Simplicity
- Easy Configure: Reduce IT overhead with ZTG’s intuitive UI, enabling simplified and unified management.
- Easy to Deploy: Speed up your deployments with ZTG’s one-click automated provisioning and orchestration.
- Avoid Client Sprawl: Use an all-in-one client for a unified and consistent end-user experience.
- Seamless Migration: Easily transition from legacy VPN.
Regulatory Compliance
- Ensure compliance with regulatory frameworks such as PCI DSS, HIPAA, and GDPR, including:
- Access control requirements through granular policy enforcement, micro-segmentation, and risk-based access.
- Data protection requirements through data encryption in transit and at rest, keeping sensitive information secure.
- Facilitate incident response and forensic analysis with detailed audit and logging capabilities.
- Continuously track and monitor access activities in real time.
Scalability and Flexibility
- Leverage a cloud-native, dynamically scalable solution to accommodate a growing user base, diverse devices, and expanding network infrastructure.
- Use on-demand provisioning to meet fluctuating demands without upfront hardware investments.
- Benefit from a distributed architecture with international Points of Presence (POPs) for enhanced performance.
Sangfor Zero Trust Guard Delivers Cost Savings at Every Stage

Sangfor Zero Trust Guard High-Level Architecture

Sangfor Zero Trust Guard Advantages
Adaptive Authentication
ZTG’s multi-factor authentication (MFA) capability adjusts its strength based on environmental and behavioral factors, striking a balance between security and user experience.
Adaptive Access Control
Adaptive access control evaluates requests for new sessions based on conditions like user identity, device posture, and location to allow or deny access. These conditions are continuously assessed, and appropriate actions are enforced when suspicious activity is detected.
Identity-Based Application Access
ZTG provides granular controls to define access at the application level based on user roles and device posture, rather than network-level controls like MAC addresses, VLANs, or IPs. All controls, permissions, and audit trails link directly to user identity, ensuring permissions move with the user for more flexible and precise policies.
User and Experience Behavior Analytics
ZTG offers complete visibility into potential threats, application performance, and user behavior. The centralized ZTG portal provides intuitive dashboards where administrators can see details about users, the apps they access, and the health of apps and resources.
Full Security Stack
As part of the Sangfor Access Secure (SASE) platform, Zero Trust Guard integrates seamlessly with Advanced Secure Web Gateway (SWG), Next-Generation Firewall as a Service (FWaaS), Endpoint Protection (EDR), and more. This integration offers unparalleled threat prevention and secure remote access capabilities, empowering businesses to operate securely across all locations.
Sangfor Zero Trust Guard Use Cases
VDI Replacement
Replace slow and expensive legacy virtual desktop infrastructure (VDI) solutions for protecting data on BYOD and unmanaged devices. Sangfor ZTG offers a faster, smoother user experience while ensuring data encryption to protect sensitive information.
Threat Prevention & Remediation
Sangfor ZTG provides improved visibility into end users and devices accessing corporate resources, enabling threat prevention, remediation, and data protection for remote users. This also reduces the complexity of legacy infrastructure like NGFW and VPN.
Secure Third-Party Access
Deploy a smart, adaptive security solution to allow third-party vendors, contractors, and suppliers access to private applications and resources. This solution supports BYOD and unmanaged devices, ensuring security and peace of mind.
VPN-Less Access
Sangfor ZTG complements or replaces existing VPN with a Zero Trust solution, allowing secure remote access to your data center or cloud applications. This reduces the attack surface and prevents lateral threat movement.
Global App Acceleration
Improve application access for end users by accelerating application traffic using Sangfor ZTG’s superior backbone connectivity. This overcomes latency and performance issues in hybrid and multi-cloud environments worldwide.
Zero Trust Cloud Access
Utilize a single-pane solution that provides single sign-on (SSO) and adaptive access policies for applications hosted in data centers or the cloud. Adaptive authentication allows organizations to tailor their authentication flow to align with business needs. Sangfor IDaaS integrates with existing identity ecosystems and eases the transition to the cloud.