Huawei HiSecEngine USG6500E series fixed-configuration next-generation firewalls are enterprise-class firewalls designed for small and medium-sized enterprises and chain organizations. In addition to basic NGFW capabilities, the HiSecEngine USG6500E series can interwork with other security devices to proactively defend against network threats, enhance border detection capabilities, effectively defend against advanced threats, and resolve performance deterioration problems. The product provides pattern matching and accelerated encryption/decryption service processing, which significantly improves the performance of processing content security detection and IPSec services.
Fully unleashing firewalls‘ defense capabilities，5x the unknown threat detection performance
Real-time threat processing at the network edge，unknown threat detection accuracy: > 99%
Security O&M based on service deployment and change policies, reducing OPEX by 80%+
|Fixed Interfaces||2 x 10GE (SFP+) + 8 x GE Combo + 2 x GE WAN||16×GE (RJ45)+ 8×GE Combo+ 2×10GE(SFP+)|
|Local Storage||Optional, SSD (M.2) card supported, 64 GB/240 GB||Optional, SSD (M.2) card supported, 240 GB||Optional SSD(1×2.5 inch)supported, 240GB, HDD1TB|
|Integrated Protection||Provides firewall, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, anti-DDoS, URL filtering, and anti-spam functions.|
|Application Identification and Control||Identifies more than 6,000 applications with the access control granularity to application functions, for example, distinguishing between WeChat text and voice. Combines application identification with intrusion detection, antivirus, and data filtering, improving detection performance and accuracy.|
|Bandwidth Management||Manages per-user and per-IP bandwidth in addition to identifying service applications to ensure the network access experience of key services and users. Control methods include limiting the maximum bandwidth, ensuring the minimum bandwidth, applying PBR, and changing application forwarding priorities.|
|Intrusion Prevention and Web Protection||Obtains the latest threat information in a timely manner for accurate detection and defense against vulnerability-based attacks. The device can defend against web-specific attacks, including SQL injection and XSS attacks.|
|AAPT||Interworks with the local or cloud sandbox to detect and block malicious files.
Encrypted traffic does not need to be decrypted. It can associate with the big data analysis platform HiSec Insight to detect threats in encrypted traffic.
It proactively responds to malicious scanning behavior and associates with the HiSec Insight for behavior analysis to quickly detect and record malicious behavior, protecting enterprise against threats in real time.
|Cloud Management Mode||Initiates authentication and registration to the cloud management platform to implement plug-and-play and simplify network creation and deployment.
Remote service configuration management, device monitoring, and fault management are used to implement cloud-based management of mass devices.
|Cloud Application Security Awareness||Controls enterprise cloud applications in a refined and differentiated manner to meet enterprises’ requirements for cloud application management.|