Sangfor controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile3 entries
2022
2022
Sangfor employee-monitoring system raises privacy concerns
Issue disclosure
In February 2022, an article reported claims that Sangfor's behavior-awareness system could monitor employees' internet activity and identify employees considered likely to leave. Lawyers quoted in the article said that monitoring without informing employees and obtaining their consent could constitute unlawful processing of personal information or infringe privacy. The article also reported that the product description had become unavailable on Sangfor's website. The report presented these claims and comments without stating a regulatory finding or outcome.
The article reported claims that Sangfor's behavior-awareness system can monitor employees' internet activity and identify employees considered likely to leave. Lawyers said monitoring without informing employees and obtaining their consent could constitute unlawful processing of personal information or infringe privacy. The article also reported that the product description had become unavailable on Sangfor's website.
Company response
Denial — Zhihu
知乎表示，“对于网上该系统的截图，我们从未接触过，因此也不清楚其真实性。对于违规收集个人信息安全的行为，本身严重背离知乎价值观，对这类系统我们一向持坚决反对态度。”
Source excerpt
知乎表示，“对于网上该系统的截图，我们从未接触过，因此也不清楚其真实性。对于违规收集个人信息安全的行为，本身严重背离知乎价值观，对这类系统我们一向持坚决反对态度。”
据悉，行为感知系统由深信服公司开发。企业在安装了行为感知系统后，可以通过监控员工的上网行为获悉其浏览招聘网站、投简历等行为，以此了解员工是否想离职。
目前，深信服官网已检索不到“行为感知系统BA”产品介绍和宣传案例。
2020
Sangfor releases SSL VPN vulnerability fixes and security tools
Company response
A hacker group exploited a vulnerability affecting some users' Sangfor SSL VPN equipment. In response, Sangfor stated that it had completed a security-risk review and released an SSL VPN repair patch along with tools for detecting tampering and removing malicious files. The company's statement addressed the vulnerability and the remediation measures it made available to affected users.
Company response
Investigation — 深信服
经过48小时的不懈努力，深信服已完成全面安全风险排查
Remediation — 深信服
紧急发布SSL VPN产品修复补丁。用户安装修复补丁升级SSL VPN产品后，可自动更新并恢复被篡改的客户端，抵御恶意攻击。
Source excerpt
针对近日某黑客组织利用个别深信服用户的SSL VPN设备漏洞的事件，深信服第一时间成立应急事件小组，研究应对本次事件的用户对策。
经过48小时的不懈努力，深信服已完成全面安全风险排查，紧急发布SSL VPN产品修复补丁。
针对入侵SSL VPN设备的恶意文件，深信服已发布32位和64位系统的查杀工具，实现恶意文件的彻底查杀。