Huawei HiSecEngine USG6625E Full Product Description

Product Overview

Key Features

• AI‑Driven Intelligent Threat Prevention: Built‑in AI detection engine cooperates with HiSec Insight cloud threat intelligence to realize high‑accuracy identification of unknown threats. Supports encrypted‑traffic analysis to discover malicious behaviors within ciphertext traffic, enhancing defense capability against zero‑day exploits and APT attacksAlibaba.
• Comprehensive Multi‑dimensional Security Protection: Provides stateful firewall, intrusion prevention system (IPS), anti‑virus, data‑leak prevention (DLP), anti‑DDoS, URL filtering and fine‑grained application‑aware access control, supporting identification of more than 6000 applications. Supports up to 500 virtual firewall instances for multi‑tenant security isolationAlibaba.co....
• Hardware‑Accelerated VPN Services: Supports IPsec VPN, SSL VPN, GRE, L2TP, DSVPN and SD‑WAN. Hardware‑based encryption acceleration ensures stable high‑speed encrypted transmission for large‑scale multi‑site interconnection and remote‑access mobile users. Default supports 100 concurrent SSL VPN users, expandable to higher capacity via license.
• High‑Density Rich Fixed Interfaces: Equipped with 16 × GE RJ45 ports, 6 × GE SFP ports, 6 × 10GE SFP+ uplink ports, out‑of‑band MGMT port, Console port and USB2.0 port, supporting flexible mixed copper‑and‑fiber networking deployment. Optional hot‑swappable 2.5‑inch SATA SSD/HDD for local log storage and sandbox analysis.
• Application‑Aware QoS & Traffic Management: Fine‑grained application‑level traffic identification, marking, policing and queue scheduling to guarantee bandwidth priority for core business services. Supports link load balancing and policy‑based routing for multi‑egress networking scenarios.
• High‑Reliability & Simplified O&M: Supports ZTP zero‑touch deployment, local CLI / Web UI configuration and NETCONF/YANG open interface. Compatible with eSight and iMaster NCE‑Security for centralized policy delivery, visualized monitoring and batch maintenance. Optional 1+1 redundant AC power supply and hot‑swappable fan modules, supports active‑standby and active‑active HA deployment.

Technical Specifications

• Form Factor: 19‑inch standard 1U rack‑mount chassis
• Fixed Interfaces: 16 × GE RJ45, 6 × GE SFP, 6 × 10GE SFP+, Console, MGMT, USB2.0
• Firewall Throughput: Up to 20 Gbps
• Maximum Concurrent Sessions: 8,000,000
• New Connections Per Second: 200,000
• Maximum IPsec Tunnels: 18000
• Virtual Firewall: Max 500 instancesAlibaba.co...
• Storage: Optional hot‑swappable 2.5‑inch SATA SSD / HDD
• Power Supply: AC 100‑240V input, 1+1 power redundancy optional
• Fan: Hot‑swappable redundant fan modules, front‑to‑rear airflow
• Operating Environment: Temperature 0 °C ~ +45 °C, relative humidity 5%‑95% non‑condensing

Application Scenarios

Short Version (for BOM / quotation list)