HiSecEngine USG6600E Series AI Firewalls
Produits, solutions et services pour les entreprises
HiSecEngine USG6600E Series AI Firewalls
Huawei HiSecEngine USG6600E series next-generation firewalls are designed for medium- and large-sized enterprises, institutions, and next-generation data centers. USG6600E firewalls provide NGFW capabilities and collaborate with other security devices to proactively defend against network threats, enhance border detection capabilities, and resolve performance deterioration problems. They provide pattern matching and encryption/decryption service processing acceleration capabilities, which greatly improve the performance of firewalls, security detection, and IPSec services.
Huawei Firewalls Continuously Lead Technological Innovation
Three Reasons for Choosing Huawei Firewalls
Exceptional Performance
• Adaptive Security Engine (ASE): Dynamically allocates resources across service modules to maximize resource utilization and enhance overall performance.
• NP, pattern matching, and encryption/decryption co-processing engines: Improve small-packet forwarding performance, reduce forwarding latency, and enhance capabilities in application identification, intrusion detection, and services such as IPsec.
Intelligent Defense
• Hundreds of millions of virus samples: The AI-powered Content-based Detection Engine (CDE) covers a vast database of virus samples, effectively defending against virus attacks.
• AI security detection algorithm: AI detection algorithms are deployed at local gateways, enabling deep analysis of malicious behavior. This allows rapid identification of unknown virus variants, achieving a 95% detection rate for unknown threats.
Simplified O&M
• Unified O&M: A centralized controller enables unified policy orchestration and automated alarm correlation analysis. Combined with cloud-network-edge coordination, it enables threat response within seconds.
• Simplified O&M: A newly defined security interface with threat visualization presents key information, such as device status, alarms, traffic, and threat events in an intuitive way, simplifying O&M.
Specifications
| Model | USG6610E | USG6620E | USG6630E | USG6650E | USG6680E | USG6605E-B | USG6615E | USG6625E | USG6635E | USG6655E |
| Fixed Interfaces | 12×GE (RJ45) + 8×GE (SFP) + 4×10GE (SFP+) | 2 x 40G (QSFP+) + 12 x 10 GE (SFP+) + 12 x GE + 1 x USB 3.0 | 4 x 40 GE (QSFP+) + 28 x 10 GE (SFP+) + 2 x 10 GE (SFP+) HA + 1 x USB 3.0 | 16×GE (RJ45)+ 8×GE Combo+ 2×10GE(SFP+) | 6 x 10GE (SFP+) + 6 x GE (SFP) + 16 x GE | 2 x 40GE (QSFP+) + 12 x 10GE (SFP+) + 16 x GE | ||||
| Product Model | 1U | |||||||||
| Local Storage | Optional SSD(1×2.5 inch)supported, 240GB, HDD1TB | |||||||||
| Integrated Protection |
Provides firewall, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, anti-DDoS, URL filtering, and anti-spam functions. | |||||||||
| Application Identification and Control |
Identifies more than 6,000 applications with the access control granularity to application functions, for example, distinguishing between WeChat text and voice. Combines application identification with intrusion detection, antivirus, and data filtering, improving detection performance and accuracy. | |||||||||
| Bandwidth Management |
Manages per-user and per-IP bandwidth in addition to identifying service applications to ensure the network access experiences of key services and users. Control methods include limiting the maximum bandwidth, ensuring the minimum bandwidth, applying PBR, and changing application forwarding priorities. | |||||||||
| Intrusion Prevention and Web Protection |
Obtains the latest threat information in a timely manner for accurate detection and defense against vulnerability-based attacks. The device can defend against web-specific attacks, including SQL injection and XSS attacks. | |||||||||
| AAPT | Collaborates with the local or cloud sandbox to detect and block malicious files. Supports the flow probe information collection function to collect traffic information and send the collected information to the Cybersecurity Intelligence System (HiSec Insight) for analysis, evaluation, and identification of threats and APT attacks. Encrypted traffic does not need to be decrypted. The firewall can work with the HiSec Insight to detect threats in encrypted traffic. The firewall can proactively respond to malicious scanning behavior and work with the HiSec Insight to analyze behavior, quickly detect and record malicious behavior, and protect enterprises against threats in real time. |
|||||||||
| Cloud Management Mode |
Initiates authentication and registration to the cloud management platform to implement plug-and-play and simplify network creation and deployment. Remote service configuration management, device monitoring, and fault management are used to implement cloud-based management of massive numbers of devices. |
|||||||||
| Cloud Application Security Awareness |
Controls enterprise cloud applications in a refined and differentiated manner to meet enterprises’ requirements for cloud application management. | |||||||||
Voices of Customers
News and Events
Resources
En savoir plus
En savoir plus
Technical Support