Huawei Xinghe Intelligent SASE Solution Sets a New Benchmark in Multi-branch Security

Major Network Security Challenges

The Philippines has seen a recent boom in smart retail services, but this has seen a shift in consumer demand in terms of product diversity and personalized services. Personal Collection is no exception to this trend, scaling its business in multi-branch retail, online shopping platforms, and data analysis. This created three key issues to its network security: increased exposure to security risks from branch-cloud access, service expansion outpacing security protection, and reliance on manual workloads.

• Risks caused by local access to SaaS platforms

With the intelligent transformation of office applications, many companies are shifting to SaaS platforms, but this creates possible vulnerabilities when accessed from branch sites. The company wanted a firewall and SD-WAN functions integrated into remote gateways, which was not possible with the legacy infrastructure.

• Poor live network performance

Due to its national scale, Personal Collection services cover everything from store management, warehousing and logistics, to member management and online malls. This growth saw their traffic increase sharply and outpace the security capacity of existing network devices. To address this, the company wanted a comprehensive and high-performance solution for secure interconnections at branches.

• Insufficient site and resource provisioning

To support fast service expansion, Personal Collection needs to quickly construct and deploy sites. Conventional network solutions do not use a central management platform to organize geographically-dispersed sites or upgrade devices in batches, making this a priority for the company’s scalability. Specifically, the company wanted a multi-branch security solution that supports plug-and-play deployment and efficient site O&M.

Huawei Xinghe Intelligent SASE Solution supports SD-WAN connections and unified O&M of network and security devices

The Huawei Xinghe Intelligent SASE Solution uses the USG6510F-D security gateway at remote sites and iMaster NCE-Campus at the Personal Collection’s HQ. This setup ensures the security of SD-WAN networks at branches and enables unified O&M of all network and security devices from a central management platform.

The USG6510F-D is an all-in-one converged and intelligent gateway designed for multi-site networks. It is plug-and-play ready and provides automatic service provisioning, with proven performance in SD-WAN networking, intelligent traffic steering, QoS, and other metrics like application experience, security protection, O&M, and reliability during tests.

The iMaster NCE-Campus system is used for centralized management and O&M of LAN, WAN, and security devices. It integrates the capabilities of the policy and analysis center, SD-WAN controller, and security management center, greatly improving O&M efficiency.

The Intelligent Transformation of Personal Collection with Huawei Xinghe Intelligent SASE Solution

A pioneer in direct sales, Personal Collection embraces digital technologies in daily operations, with an ambitious goal of achieving full intelligence at all core business levels by 2027. The Huawei Solution lays a solid network and security foundation for the company’s intelligent transformation, providing the following benefits:

• Lightweight embedded AI engine detects 91% of unknown threats

Leveraging an exclusive AI core, Huawei deploys a lightweight embedded AI engine on the embedded system of the USG6510F-D firewalls. This engine can perform AI inference on endpoints in milliseconds, with a 10% higher detection rate of unknown threat than rival products. This ensures effective defense against ransomware attacks, 0-day exploits, and malware variants to ensure secure interconnection between branch sites.

• Leading SD-WAN forwarding, threat prevention, and bandwidth

The USG firewall can inspect traffic for threats at a rate of 700 Mbit/s, and the SD-WAN forwarding is up to 6 Gbit/s. Both figures are 20% higher than the industry averages. In addition, the USG firewall provides 12 GE service ports to improve connectivity and service scope at each branch, such as implementing CCTV.

• Site deployment in minutes

The Huawei USG firewall is plug-and-play ready, in which the system can be configured and initialized in minutes. In addition, the advanced EVPN site orchestration technology can automatically orchestrate the topology of thousands of sites within several minutes, greatly shortening the entire process from site preparation to official rollout. Personal Collection will use Huawei's Xinghe Intelligent SASE Solution to deploy new branches and overhaul existing sites in 2024.

Mr. Rufino Tinto Jr., CTO of Personal Collection, noted how Huawei’s position as a key technical partner was influential in transforming their retail branches to the digital age.

The Huawei Xinghe Intelligent SASE Solution builds an end-to-end security system across cloud, network, edge, and endpoints to protect remote sites from potential cyber threats. Looking ahead, Personal Collection will continue to cooperate Huawei in multiple fields to expand their services across the Philippines and beyond .