Description

USG6000E-S series firewalls are AI-based firewalls provided by Huawei Technologies Co., Ltd. for large- and medium-sized enterprises, small enterprises, or branches. Products can be classified into two hardware models: desktop model and 1 U model, each of which includes multiple sub-models. The products can meet the market requirements of 100 Mbit/s, 1000 Mbit/s and 10000 Mbit/s unified security gateways. As a new-generation firewall product of Huawei, USG6000E-S series firewalls are based on the security detection and handling capabilities of traditional NGFWs, can collaborate with other network security devices such as the security analyzer HiSec Insight (CIS), FireHunter sandbox, and security controller SecoManager, and use intelligent detection technology to effectively detect and proactively defend against advanced threats. The product uses a built-in acceleration engine. It supports pattern matching and encryption/decryption acceleration, which significantly improves the processing performance of the product for content security detection and IPSec services. The product can be widely used in enterprises, governments, finance, energy, medical care, and schools to provide all-round security protection.

Product Highlights

Excellent Performance

• By Leveraging Fresh-New Hardware And Software Architectures, eKitEngine USG6000E-S Series AI Firewalls Dynamically Allocate Resources To Service Modules Through The Adaptive Security Engine (ASE), Maximizing Resource Utilization And Improving Overall Service Performance.
• For Core Services, The HiSecEngine USG6000E-S Series Also Supports Network Processor (NP), Pattern Matching, And Encryption/Decryption Engines.
• These Engines Greatly Improve Short-Packet Forwarding, Reduce The Forwarding Latency, And Enhance Application Identification, Intrusion Prevention Detection, And IPsec Service Performance.

Intelligent Defense

• eKitEngine USG6000E-S Series AI Firewalls Provide Content Security Functions, Such As Application Identification, IPS, Antivirus, And URL Filtering To Protect Intranet Servers And Users Against Threats.
• Traditional IPS Signatures Are Manually Produced Through Analysis, Resulting In Low Productivity.
• Also, The Accuracy Of The Signatures Depends Heavily On Expert Experience.
• Huawei Innovatively Enables The IPS Signature Production On The Intelligent Cloud By Adopting Intelligence Technologies And Utilizing Expert Experience.
• Such An Intelligent Mode Helps Increase The Signature Productivity By 30 Times Compared With Manual Production, Reduce Errors Caused By Manual Analysis, And Continuously Improve The Accuracy Of Intrusion Detection.
• The Built-In Antivirus Content-Based Detection Engine (CDE) Powered By Intelligence Technologies Can Detect Unknown Threats And Provide In-Depth Data Analysis.
• With These Capabilities, The CDE-Boosted Firewall Is Able To Gain Insight Into Threat Activities And Quickly Detect Malicious Files, Effectively Improving The Threat Detection Rate.

Simplified O&M

• The eKitEngine USG6000E-S Series Provides A Brand-New Web UI, Which Intuitively Visualizes Threats As Well As Displays Key Information Such As Device Status, Alarms, Traffic, And Threat Events.
• With Multi-Dimensional Data Drilling, The Web UI Offers Optimal User Experience, Enhanced Usability, And Simplified O&M.
• The eKitEngine USG6000E-S Series Firewalls Can Be Centrally Managed By The Security Management Platform SecoManager, Implementing A Shift From Single-Point Defense To Collaborative Network Protection.
• The SecoManager Provides Policy Tuning And Intelligent O&M Capabilities.
• It Can Also Manage Security Products, Such As Anti-DDoS Devices, To Quickly Eliminate Network Threats And Improve Security Handling Effectiveness.

A Wide Range Of Network Features

• Huawei eKitEngine USG6000E-S Series Also Provides Various Network Features Such As VPN, IPv6, And Intelligent Traffic Steering.
• Provides Various VPN Features Such As IPsec VPN And SSL VPN, And Supports Multiple Encryption Algorithms, Such As DES, 3DES, AES, And SHA, Ensuring Secure And Reliable Data Transmission.
• Provides Secure And Rich IPv6 Network Switchover, Policy Control, Security Protection, And Service Visualization Capabilities, Helping Government, Media, Carrier, Internet, And Finance Sectors Implement IPv6 Reconstruction.
• Provides Dynamic And Static Intelligent Traffic Steering Based On Multi-Egress Links, Selects The Outbound Interface Based On The Specified Link Bandwidth, Weight, Or Priority, Forwards Traffic To Each Link Based On The Specified Traffic Steering Mode, And Dynamically Tunes The Link Selection Result In Real Time To Maximize The Usage Of Link Resources And Improve User Experience.

Technical Specifications

• Reference Number of Subscribers: 400
• Firewall Throughput IPv4 (1518/512/64-byte, UDP): 5/5/3 Gbit/s
• Latency: 8 μs
• Maximum Number of Concurrent Connections (HTTP1.1): 500,000
• Number of New Connections per Second (HTTP1.1): 30,000
• FW + SA Throughput (HTTP 100 KB pages): 1.6 Gbit/s
• FW + SA + IPS + Antivirus Throughput (Realworld): 650 Mbit/s
• IPSec Throughput (AES-256 + SHA256, 1420-byte): 3 Gbit/s
• Number of IPsec VPN Tunnels: 2,000
• SSL VPN Throughput: 300 Mbit/s
• Number of Concurrent SSL VPN Users: 100 (Default) / 500 (Maximum)
• Maximum Security Policies: 3,000
• Virtual Firewalls: 20
• Fixed Interfaces:
  • 2 × 10GE (SFP+)
  • 10 × GE
  • 1 × Console
  • 1 × USB
  • SD Card Slot
• Product Form: Desktop
• Dimensions (W × D × H): 250 × 210 × 43.6 mm
• Storage: 64 GB Micro-SD Card
• Power Supply: External Adapter