Managed SOC & MDR built on Sangfor.
Sangfor's network, endpoint and detection platforms are designed to work as one system. We add the 24/7 monitoring, investigation and response that turn them into a complete security operation.
Why build security operations on Sangfor?
Sangfor is a global cybersecurity and cloud computing vendor with a strong presence across Asia Pacific, including the Philippines. Its security products are built to share threat data and coordinate response, which Sangfor describes as an integrated detection, defense and response approach.
In practice, that means the firewall, the endpoint agent and the network detection platform can act together. When one detects an attack, the others can help confirm it and contain it, for example by blocking an address at the firewall and isolating the affected computer.
Sangfor has recently grouped its security portfolio under the Sangfor Athena brand, so you may see newer product names. We'll use whichever names match your deployment.
The Sangfor technology we work with.
These are the components we most often monitor and manage, described in general terms.
Cyber Command
Sangfor's network detection and response platform, now called Athena NDR. It analyzes network traffic and security logs with AI-assisted analytics to uncover hidden threats, attacks in progress, unmanaged devices and risky behavior.
Endpoint Secure
Endpoint protection and response for PCs and servers, now called Athena EPP. It combines next-generation antivirus with detection and response features, and can isolate a compromised device or scan all endpoints for the same malware.
NGAF
Sangfor's next-generation firewall, later known as Network Secure and now Athena NGFW. It protects the network perimeter and includes web application protection against attacks such as SQL injection and cross-site scripting.
Athena XDR
Sangfor's extended detection and response platform. It brings network, endpoint, email and cloud activity together in one console for correlation, investigation and coordinated response.
Neural-X threat intelligence
Sangfor's cloud-based threat intelligence and analysis platform, which helps the other components recognize new and emerging threats.
You don't need the full stack on day one. Many organizations start with a firewall and endpoint protection and add network detection as their needs grow.
Sangfor tools, plus the people and process to run them.
- 24/7 monitoring of alerts from your Sangfor platforms, triaged so you only hear about real issues.
- Investigation that explains what happened, how far it spread, and what data or systems may be affected.
- Response using pre-approved actions, such as isolating an endpoint or blocking an address on the firewall.
- Threat hunting for attackers who may already be inside and have not yet triggered an alert.
- Plain-language reporting for management, auditors and your Data Protection Officer.
- Incident documentation that supports breach assessment and reporting under the Data Privacy Act of 2012.
From assessment to 24/7 coverage.
Assess
Start with our free external assessment. For a deeper view of your internal network, add a paid internal vulnerability assessment.
Design
We review your Sangfor deployment, agree on what's in scope, who we escalate to, and which response actions we may take.
Connect
We connect your platforms to monitoring, deploy endpoint agents where needed, and establish a baseline of normal activity.
Operate
Your environment is watched around the clock, with regular reports and reviews to keep improving your defenses.
A good fit if any of these sound familiar.
- You use a Sangfor firewall or endpoint protection, but nobody watches the alerts after office hours.
- You want the value of an integrated platform without staffing your own SOC.
- You're an LGU, school or business that handles personal data and must respond quickly to incidents.
Using Fortinet instead, or a mix of vendors? See our Fortinet SOC & MDR page, or ask us. Our recommendation follows your environment and goals.
Pricing on request
Proposals are scoped to the users, endpoints and network segments you want covered. Have questions first? Read the FAQ.
Find out where you stand.
Start with a free security assessment: a discovery call plus a non-intrusive external scan of your public domains, websites and email security. You get a short findings report and plain next steps. No obligation.
Book a free security assessment