Межсетевой экран Huawei USG6575E-B

Фиксированные интерфейсы

• 16×GE (RJ45)
• 8×GE Combo
• 2×10GE(SFP+)

USB порты

• 1×USB 3.0

Локальные накопители

Поддерживается опционально SSD (1×2.5 inch), 240 Гб / 960 Гб, HDD 1 Тб

Firewall Throughput (1518/512/64-byte, UDP)

Firewall Latency (64-byte, UDP)

Concurrent Sessions (HTTP1.1)

New Sessions/Second (HTTP1.1)

FW + SA + IPS Throughput

FW + SA + IPS + Antivirus Throughput

Maximum IPsec VPN Tunnels (GW to GW)

Maximum IPsec VPN Tunnels (Client to GW)

IPsec VPN Throughput (AES-256 + SHA256, 1420-byte)

SSL Inspection Throughput

Concurrent SSL VPN Users (Default/Maximum)

Политики безопасности (Max)

Виртуальные межсетевые экраны

Product Model

1U

URL Filtering: Categories

Более 130

URL Filtering: URLs

База данных, содержащая более 120 миллионов URL-адресов в облаке

Automated Threat Feedback and IPS Signature Updates

Да

Third-Party and Open-Source Ecosystem

• Open API for integration with third-party products, providing RESTful and NetConf interfaces
• Other third-part management software based on SNMP, SSH, and Syslog
• Cooperation with third-party tools, such as Tufin, AlgoSec and FireMon
• Collaboration with anti-APT solution

Centralized configuration, logging, monitoring, and reporting is performed by Huawei eSight and eLog

VLANs (Max)

4094

VLANIF Interfaces (Max)

1024

Integrated Protection

Provides firewall, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, anti-DDoS, URL filtering, and anti-spam functions.

Application Identification and Control

Identifies more than 6,000 applications with the access control granularity to application functions, for example, distinguishing between WeChat text and voice. Combines application identification with intrusion detection, antivirus, and data filtering, improving detection performance and accuracy.

Bandwidth Management

Manages per-user and per-IP bandwidth in addition to identifying service applications to ensure the network access experience of key services and users. Control methods include limiting the maximum bandwidth, ensuring the minimum bandwidth, applying PBR, and changing application forwarding priorities.

Intrusion Prevention and Web Protection

Obtains the latest threat information in a timely manner for accurate detection and defense against vulnerability-based attacks. The device can defend against web-specific attacks, including SQL injection and XSS attacks.

AAPT

Interworks with the local or cloud sandbox to detect and block malicious files. Encrypted traffic does not need to be decrypted. It can associate with the big data analysis platform HiSec Insight to detect threats in encrypted traffic. It proactively responds to malicious scanning behavior and associates with the HiSec Insight for behavior analysis to quickly detect and record malicious behavior, protecting enterprise against threats in real time.

Cloud Management Mode

Initiates authentication and registration to the cloud management platform to implement plug-and-play and simplify network creation and deployment. Remote service configuration management, device monitoring, and fault management are used to implement cloud-based management of mass devices.

Cloud Application Security Awareness

Controls enterprise cloud applications in a refined and differentiated manner to meet enterprises’ requirements for cloud application management.

Supports multiple highly available VPN features, such as IPSec VPN, SSL VPN, L2TP VPN, MPLS VPN, and GRE, and provides the Huawei-proprietary VPN client SecoClient for SSL VPN, L2TP VPN, and L2TP over IPSec VPN remote access

Defends against more than 10 types of common DDoS attacks, including SYN flood and UDP flood attacks.

Supports multiple types of routing protocols and features, such as RIP, OSPF, BGP, IS-IS, RIPng, OSPFv3, BGP4+, and IPv6 IS-IS.

Питание

Single AC power supply; optional dual AC power supplies

Напряжение питания

100 В ... 240 В

Потребляемая мощность (max)

76.9 Вт

Габаритные размеры

43.6×442×420 мм

Масса

5.8 кг

Рабочая температура и влажность

• Температура: от 0°C до 45°C
• Влажность: от 5% до 95%, без конденсации

Температура и влажность при хранении

• Температура: от -40°C до +70°C.
• Влажность: от 5% до 95%, без конденсации

• LIC-USG6575E-B-IPS-1Y - IPS Update Service Subscribe 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-IPS-3Y - IPS Update Service Subscribe 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-URL-1Y - URL Update Service Subscribe 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-URL-3Y - URL Update Service Subscribe 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-AV-1Y - AV Update Service Subscribe 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-AV-3Y - AV Update Service Subscribe 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-TP-1Y-OVS - Threat Protection Subscription 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-TP-3Y-OVS - Threat Protection Subscription 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-CS-1Y - Cloud Sandbox Inspection 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-CS-3Y - Cloud Sandbox Inspection 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-AI-1Y - AI Detection Model Upgrades Available in 12 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-AI-3Y - AI Detection Model Upgrades Available in 36 Months (Applies to USG6575E-B)
• LIC-USG6575E-B-ATP-1Y - Advanced Threat Protection Subscription 12 Months(Applies to USG6575E-B)
• LIC-USG6575E-B-ATP-3Y - Advanced Threat Protection Subscription 36 Months(Applies to USG6575E-B)
• LIC-USG6575E-B-FP - Flow Probe Function (Applies to USG6575E-B)
• N1-USG6575E-B-F-Lic - N1-USG6575E-B Foundation, Per Device
• N1-USG6575E-B-A-Lic - N1-USG6575E-B Advanced, Per Device