World’s fastest data center firewall ensures secure services for large data centers, cloud computing environments, and enterprise campus networks. Integrated switching, routing, and security enable smooth upgrades, easy virtualization, and terabit-level processing capability – all with carrier-grade reliability in a compact, space-saving form factor.
NP + multi-core + distributed architecture integrates security, virtualization, and comprehensive service awareness with continuous database updates to optimize protection.
Minimize security risks, ensure ongoing protection, and reduce TCO with Huawei’s NSS-tested data center firewall.
|Maximum Firewall Throughput||120 Gbit/s||720 Gbit/s||1.44 Tbit/s|
|Maximum Number of Concurrent Sessions||120 million||720 million||1.44 billion|
|Basic Functions||Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing|
|NAT/CGN||Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency, source IP address pool grouping, NAT Server, bi-directional NAT, NAT-ALG (Application Layer Gateway), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment)|
|NGFW Functions||Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc.|
|PKI||PKI certificate requests (PKCS 10), Certificate Authority (CA)
PKI authentication: EAP-SIM, EAP-AKA
PKI protocol: SCEP, OCSP, and CMPv2
|Virtual System||4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR|
|DDoS Mitigation||SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood
Port-scan, Smurf, Tear-drop, and IP-Sweep
IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output