Huawei USG9500 Terabit-level Next-Generation Firewall

Firewall następnej gerenacji o terabitowej przepustowości

    Zapytaj o

    Huawei USG9500 Terabit-level Next-Generation Firewall

    Opis produktu Huawei USG9500 Terabit-level Next-Generation Firewall

    • Integrated device provides up to 1.44 Tbit/s throughput and supports up to 1.44 billion concurrent sessions, delivering an industry-leading 160 Gbit/s Stream Processing Units (SPUs) while saving 75% of rack space
    • Integrates multiple services and provides traditional functions (such as NAT, VPN, IPS, and anti-DDoS) and enhanced functions (such as service awareness, virtualization, and IPv6 security) to significantly reduce TCO
    • Dual-MPU, hot standby, and load balancing ensure 99.999% uptime availability. Hot-swappable components enable online upgrades and capacity expansion without service interruption
    • The first Terabit, next-generation firewall to be tested by the NSS, the USG9500 is currently the world’s fastest firewall

    World’s fastest data center firewall ensures secure services for large data centers, cloud computing environments, and enterprise campus networks. Integrated switching, routing, and security enable smooth upgrades, easy virtualization, and terabit-level processing capability – all with carrier-grade reliability in a compact, space-saving form factor.
    NP + multi-core + distributed architecture integrates security, virtualization, and comprehensive service awareness with continuous database updates to optimize protection.
    Minimize security risks, ensure ongoing protection, and reduce TCO with Huawei’s NSS-tested data center firewall.

    Specyfikacja techniczna

    ProductUSG9520USG9560USG9580
    Expansion Slots3816
    Maximum Firewall Throughput120 Gbit/s720 Gbit/s1.44 Tbit/s
    Maximum Number of Concurrent Sessions120 million720 million1.44 billion
    Basic FunctionsRouting/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing
    NAT/CGNDestination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency, source IP address pool grouping, NAT Server, bi-directional NAT, NAT-ALG (Application Layer Gateway), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment)
    NGFW FunctionsSupports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc.
    PKIPKI certificate requests (PKCS 10), Certificate Authority (CA)

    PKI authentication: EAP-SIM, EAP-AKA

    PKI protocol: SCEP, OCSP, and CMPv2
    Self-signed certificate

    Virtual System4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR
    DDoS MitigationSYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood

    Port-scan, Smurf, Tear-drop, and IP-Sweep

    IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output


    Inni przeczytali także: