USG9500 Series Firewall | Huawei Enterprise

엔터프라이즈

Worldwide

Huawei Global - English

- South Africa - English
- Morocco - Français
- Brazil - Português
- Mexico - Español
- United Arab Emirates - English
- Saudi Arabia - English
- China - 简体中文
- Hong Kong, China - English
- Japan - 日本語
- South Korea- 한국어
- Kazakhstan - русский
- Malaysia - English
- Singapore - English
- Indonesia - English
- Thailand - ไทย
- Philippines - English
- Europe- English
- Austria - Deutsch
- Czech - Czech
- France - Français
- Germany - Deutsch
- Greece - Ελληνικά
- Hungary - Magyar nyelv
- Italy - Italiano
- Poland - polski
- Sweden - English
- Spain - Español
- Turkey - Türkçe
- Ukraine - Українська мова

History
Most people search for
Quick access
Recommended

USG9500 시리즈 테라비트급 차세대 방화벽

Huawei의 차세대 올인원 DC 방화벽인 USG9500은 클라우드 서비스 제공 업체와 대규모 엔터프라이즈 캠퍼스 네트워크에 테라비트급 성능을 제공합니다. 99.999%의 신뢰도를 자랑하고 NAT(Network Address Translation), VPN(Virtual Private Network), IPS(Intrusion Protection System), 가상화, SA(Service Awareness)와 같은 필수 보안 기능을 통합하는 USG9500은 장비 사용 공간에 대한 투자 비용과 Mbit/s별 TCO(Cost of Ownership) 비용을 줄여주면서, 엔터프라이즈가 고급 보안 보호 기능을 갖춘 클라우드 컴퓨팅 지향 DC를 구축할 수 있습니다.

스펙

Model	USG9520	USG9560	USG9580
Expansion Slots	3	8	16
Maximum Firewall Throughput	120 Gbit/s	960 Gbit/s	1.92 Tbit/s
Maximum Number of Concurrent Sessions	160,000,000	1,280,000,000	2,560,000,000
Basic Functions	Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing
NAT/CGN	Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistence, source IP address pool grouping, NAT Server, bi-directional NAT, NAT Application Layer Gateway (NAT-ALG), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment)
NGFW Functions	Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc.
PKI	PKI certificate requests (PKCS 10), Certificate Authority (CA) PKI authentications: EAP-SIM, EAP-AKA PKI protocols: SCEP, OCSP, and CMPv2 Self-signed certificate
Virtual System	4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR
DDoS Mitigation	SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood Port-scan, Smurf, Tear-drop, and IP-Sweep IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output
Data Leak Prevention (DLP)	Identifies and filters the transferred files and contents. The USG9500 can identify more than 120 file types, regardless of whether filename extensions are maliciously changed. In addition, the USG9500 can restore and implement content filtering for over 30 types of files, such as Word, Excel, PPT, PDF, and RAR files, to prevent leaks of critical enterprise information.

Model

USG9520

USG9560

USG9580

Expansion Slots

Maximum Firewall Throughput

120 Gbit/s

960 Gbit/s

1.92 Tbit/s

Maximum Number of Concurrent Sessions

160,000,000

1,280,000,000

2,560,000,000

Basic Functions

Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing

NAT/CGN

Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistence, source IP address pool grouping, NAT Server, bi-directional NAT, NAT Application Layer Gateway (NAT-ALG), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment)

NGFW Functions

Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc.

PKI

PKI certificate requests (PKCS 10), Certificate Authority (CA)
PKI authentications: EAP-SIM, EAP-AKA
PKI protocols: SCEP, OCSP, and CMPv2
Self-signed certificate

Virtual System

4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR

DDoS Mitigation

SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood
Port-scan, Smurf, Tear-drop, and IP-Sweep
IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output

Data Leak Prevention (DLP)

Identifies and filters the transferred files and contents. The USG9500 can identify more than 120 file types, regardless of whether filename extensions are maliciously changed. In addition, the USG9500 can restore and implement content filtering for over 30 types of files, such as Word, Excel, PPT, PDF, and RAR files, to prevent leaks of critical enterprise information.

기술 지원

Login

USG9500 시리즈 테라비트급 차세대 방화벽

USG9500 시리즈 테라비트급 차세대 방화벽

Listen to Our Customers

스펙

자료

기술 지원

문의사항

파트너