The USG9500 is a new generation of T-class all-in-one data center firewall for Huawei's cloud service provider, large data center and large enterprise campus network.
The USG9500 provides up to T-class processing performance and 99.999% reliability, and integrates various security features such as NAT, VPN, IPS, virtualization, and service awareness to help enterprises build data center border protection for the cloud computing era. And the total cost of ownership per Mbps.
Key Features
T-class performance, all-in-one, highly reliable network security protection
Providing the industry's highest performance 160Gbps business board, saving rack space 75%, the whole machine can be expanded to 1.44Tbps throughput and up to 1.44 billion concurrent;
Support GE, 10GE, 40GE, 100GE and other interface types, single-slot density up to 48GE or 24 * 10GE. Distributed hardware framework and expansion card design, easy expansion, protection of pre-investment;
It supports traditional features such as NAT, VPN, IPS and Anti-DDoS, and enhances service awareness, virtualization, and IPv6 security. The multi-service one device replaces multiple devices to effectively reduce TCO.
Excellent hardware and software design, reliability up to 99.999%, support dual-master, dual hot backup, load balancing, complete redundancy to avoid downtime, hot-swappable components to ensure online continuous upgrade expansion.
Technical specifications
parameter | USG9520 | USG9560 | USG9580 |
Basic characteristics |
Support 6000+ application layer protocol identification and flow control, application layer packet filtering (ASPF), access control, statefulness detection, address translation, black and white list, virtual firewall In a multi-export scenario, a device can replace a traditional firewall in most scenarios according to various load balancing algorithms (such as bandwidth ratio, link health status, and so on) for intelligent routing, load balancing, and security domain partitioning. Flow control, load balancing and other network equipment
|
NAT/CGN | NAT NAT-PAT, Source NAT-IP address persistency, Source IP address pool, NAT Server, Bidirectional NAT, NAT-PAT, NAT-PAT, NAT-PAT, NAT-IP address persistence, ALG, unrestricted IP address extension, policy-based destination NAT, port range pre-allocation, hairpin access mode, SMART NAT, NAT64, DS-Lite, 6RD (IPv6 Rapid Deployment)
|
Apply security features
|
Support for more than 5,000 kinds of vulnerability characteristics of the attack detection and defense. Support Web attack identification and protection, such as cross-site scripting attacks, SQL injection attacks; High-performance virus engine, can protect more than 5 million kinds of viruses and Trojans, virus signature database updated daily; Using cloud-based URL classification filtering, pre-defined classification of more than 80 categories, more than 8500 million
|
VPN/PKI | Supports key encryption and decryption protocols such as IPSec, GRE, L2TP, etc., and supports manual key, PKI (X.509), IKEv2, redundant VPN gateway, EAP authentication, etc.
|
Virtual system | Support virtual enterprise, multi-tenant management, a physical host virtual 4096 virtual software system (VSYS), support VLAN virtualization, security domain virtualization, custom virtual resources, virtual system routing, virtual system traffic CAR, management virtualization , Multi-tenant virtual resource isolation
|
DDoSAttack Protection |
Supports multiple DoS and DDoS attack prevention including application layer: SYN Flood, SIP Flood, ICMP Flood, UDP Flood, DNS Query Flood, DNS cache poisoning attack, DNS reflection attack, Connection Flood, HTTP Flood, HTTPS Flood, etc. Support DDOS traffic self-learning function, according to the actual situation of the current network traffic flow thresholds accurately set the baseline
|
| Data leakage prevention | The transmission of documents and content identification filter. Can identify 120 kinds of common file types, to prevent the virus by modifying the suffix name attack. Word, Excel, PPT, PDF, RAR and other 30 + files to restore and content filtering, to prevent leakage of critical information through the file
|
