Benefits

Updated at:

Connecting on-premises networks to Alibaba Cloud typically involves manual device configuration, fragile single-link setups, and unencrypted traffic. Smart Access Gateway (SAG) addresses these gaps with automatic provisioning, built-in redundancy, and encrypted connections — all managed from one console.

Intelligence — eliminate manual configuration

SAG supports automatic configurations and zero touch provisioning (ZTP), so devices are ready without manual setup. When your network topology changes, SAG adapts automatically.

Reliability — stay connected when hardware or links fail

SAG connects your on-premises network to nearby access points in the metropolitan area network. Primary and secondary connections and devices provide built-in redundancy.

Device-based HA

SAG devices run in active-standby mode. If the active device fails, network traffic switches to the standby device automatically.

Link-based HA

Each SAG device maintains two encrypted links. SAG selects the optimal link in real time and fails over if a link error occurs.

Security — encrypt traffic and block data attacks

SAG supports hybrid clouds and encrypted private connections. All internet data transmission is encrypted.

Data encryption

Use the IKE and IPsec protocols to encrypt data in transit, protecting traffic between your on-premises network and Alibaba Cloud from interception.

Anti-replay

SAG authenticates data sources, so replay attacks are blocked before they reach your network.

Web tamper proofing

SAG applies multiple authentication methods to verify data integrity.

Centralized management — operate all gateways from one place

The SAG console lets you manage all gateway devices centrally.