Description

Huawei eKitEngine USG6000F-S Series are next-generation AI firewalls that feature intelligent defense, outstanding performance, and simplified O&M, effectively addressing the preceding challenges. The eKitEngine USG6000F-S Series AI firewalls use intelligence technologies to enable border defense to accurately block known and unknown threats. Equipped with multiple built-in security-dedicated acceleration engines, the eKitEngine USG6000F-S Series AI firewalls support enhanced forwarding, content security detection, and IPsec service processing acceleration. The security O&M platform implements unified management and O&M of multiple types of security products, such as firewalls, anti-DDoS devices, reducing security O&M OPEX.

Product Highlights

Excellent Performance

By Leveraging Fresh-New Hardware And Software Architectures Of Forwarding And Control Separation, The eKitEngine USG6000F-S Series AI Firewalls Dynamically Allocate Resources To Service Modules Through The Adaptive Security Engine (ASE), Maximizing Resource Utilization And Improving Overall Service Performance. For Core Services, The eKitEngine USG6000F-S Series Also Supports Network Processor (NP), Pattern Matching, And Encryption/Decryption Engines. These Engines Greatly Improve Short-Packet Forwarding, Reduce The Forwarding Latency, And Enhance Application Identification, Intrusion Prevention Detection, And IPsec Service Performance.

Intelligent Defense

• The eKitEngine USG6000F-S Series AI Firewalls Provide Content Security Functions, Such As Application Identification, IPS, Antivirus, And URL Filtering To Protect Intranet Servers And Users Against Threats. eKitEngine USG6000F-S Series Also Support To Detect Unknown Threats By Interworking With Sandbox.
• Traditional IPS Signatures Are Manually Produced Through Analysis, Resulting In Low Productivity. Also, The Accuracy Of The Signatures Depends Heavily On Expert Experience. Huawei Innovatively Enables The IPS Signature Production On The Intelligent Cloud By Adopting Intelligence Technologies And Utilizing Expert Experience. Such An Intelligent Mode Helps Increase The Signature Productivity By 30 Times Compared With Manual Production, Reduce Errors Caused By Manual Analysis, And Continuously Improve The Accuracy Of Intrusion Detection.
• The Built-In Antivirus Content-Based Detection Engine (CDE) Powered By Intelligence Technologies Can Detect Unknown Threats And Provide In-Depth Data Analysis. With These Capabilities, The CDE-Boosted Firewall Is Able To Gain Insight Into Threat Activities And Quickly Detect Malicious Files, Effectively Improving The Threat Detection Rate.
• eKitEngine USG6000F-S Series Supports To Detect And Defend Malware Spreading And Network Attacks, Like Worm, Virus, Trojan-Horse, Spyware, Etc. Malware Spreading And Botnet, DoS/DDoS, SQL Injection, Cross Site Attack, Ransomware, Etc.

Simplified O&M

• The eKitEngine USG6000F-S Series AI Firewalls Provides A Brand-New Web UI, Which Intuitively Visualizes Threats As Well As Displays Key Information Such As Device Status, Alarms, Traffic, And Threat Events. With Multi-Dimensional Data Drilling, The Web UI Offers Optimal User Experience, Enhanced Usability, And Simplified O&M.
• The eKitEngine USG6000F-S Series Can Be Centrally Managed By The Security Management Platform SecoManager, Implementing A Shift From Single-Point Defense To Collaborative Network Protection. The SecoManager Provides Policy Tuning And Intelligent O&M Capabilities. It Can Also Manage Security Products, Such As Anti-DDoS Devices To Quickly Eliminate Network Threats And Improve Security Handling Effectiveness.
• The eKitEngine USG6000F-S Series Can Also Be Managed By NCE-Campus, And NCE-Campus Can Also Support To Manage Switch, AR, POL Device At The Same Time, Even Third Party Devices.

A Wide Range Of Network Features

• Provides Various VPN Features Such As IPsec VPN And SSL VPN, And Supports Multiple Encryption Algorithms, Such As DES, 3DES, AES, And SHA, Ensuring Secure And Reliable Data Transmission.
• Provides Secure And Rich IPv6 Network Switchover, Policy Control, Security Protection, And Service Visualization Capabilities, Helping Government, Media, Carrier, Internet, And Finance Sectors Implement IPv6 Reconstruction.
• Provides Dynamic And Static Intelligent Traffic Steering Based On Multi-Egress Links, Selects The Outbound Interface Based On The Specified Link Bandwidth, Weight, Or Priority, Forwards Traffic To Each Link Based On The Specified Traffic Steering Mode, And Dynamically Tunes The Link Selection Result In Real Time To Maximize The Usage Of Link Resources And Improve User Experience.

Deployment

Small Data Center Border Protection

• Firewalls Are Deployed At Egresses Of Data Centers, And Functions And System Resources Can Be Virtualized. The Firewall Has Multiple Types Of Interfaces, Such As 10GE And GE Interfaces. Services Can Be Flexibly Expanded Without Extra Interface Cards.
• The Intrusion Prevention Capability Effectively Blocks A Variety Of Malicious Attacks And Delivers Differentiated Defense Based On Virtual Environment Requirements To Guarantee Data Security.
• VPN Tunnels Can Be Set Up Between Firewalls And Mobile Workers And Between Firewalls And Branch Offices For Secure And Low-Cost Remote Access And Mobile Working.

Enterprise Border Protection

• Firewalls Are Deployed At The Network Border. The Built-In Traffic Probe Can Extract Packets Of Encrypted Traffic To Monitor Threats In Encrypted Traffic In Real Time.
• The Policy Control And Data Filtering Functions Of The Firewalls Are Used To Monitor Social Network Applications To Prevent Data Breach And Protect Enterprise Networks.

Technical Specifications

• Reference Number of Subscribers: 2,500
• Firewall Throughput IPv4 (1518/512/64-byte, UDP): 16/16/5 Gbit/s
• Maximum Number of Concurrent Connections (HTTP1.1): 4,000,000
• Number of New Connections per Second (HTTP1.1): 120,000
• FW + SA Throughput (HTTP 100 KB pages): 4.5 Gbit/s
• FW + SA + IPS + Antivirus Throughput (Real-world): 1.8 Gbit/s
• IPSec Throughput (AES-256 + SHA256, 1420-byte): 5.6 Gbit/s
• Number of IPsec VPN Tunnels: 4,000
• SSL VPN Throughput: 750 Mbit/s
• Number of Concurrent SSL VPN Users: 100 (Default) / 2,000 (Maximum)
• Maximum Security Policies: 15,000
• Virtual Firewalls: 100
• Fixed Interfaces:
  • 2 × 10GE (SFP+)
  • 8 × GE Combo
  • 16 × GE
• Product Form: 1U
• Dimensions (W × D × H): 442 × 420 × 43.6 mm
• Storage:
  • 64 GB M.2 Hard Disk
  • 240 GB M.2 Hard Disk
  • 960 GB M.2 Hard Disk
• Power Supply: Standard single power supply, optional dual power supplies