Huawei Eudemon3000E

Product Overview

Key Features

1. Multi‑layer intelligent comprehensive threat defense

   Supports stateful packet inspection, IPS intrusion prevention, gateway anti‑virus, anti‑spam, URL filtering, DLP and anti‑DDoS attack mitigation. It identifies massive network applications and enforces fine‑grained security policies based on user identity, application type, time schedule and content inspection. Supports SSL traffic decryption to detect threats hidden inside encrypted traffic, cooperates with sandbox for unknown malware identification. Signature databases support online real‑time upgrade against malware, exploits and zero‑day threats.
2. Modular high‑density expandable hardware architecture

   Adopts 5U 19‑inch rack‑mount chassis with abundant service slots for GE /10GE /40GE interface cards and bypass modules. Equipped with dedicated out‑of‑band management ports, RJ45 Console port and USB interface for configuration backup. Supports hot‑swappable dual power supplies for 1+1 redundancy, compatible with AC and DC power input to satisfy strict reliability requirements for carrier and large‑enterprise core sites. Supports optional hot‑swap SSD for local log storage and audit.
3. Hardware‑accelerated multi‑service VPN connectivity

   Built‑in hardware encryption engine supports IPsec VPN, SSL VPN, L2TP, GRE, MPLS VPN and DSVPN dynamic smart VPN. Supports IKEv1/IKEv2 key negotiation and mainstream encryption algorithms. Realizes large‑scale site‑to‑site encrypted interconnection between headquarters and massive remote branches, as well as high‑capacity SSL‑VPN remote access for mobile employees, guarantees secure transmission of cross‑location business data.
4. Application‑aware bandwidth management & network audit

   Implements precise application‑level traffic identification and QoS scheduling. Supports per‑user bandwidth quota control, application‑based traffic shaping, multi‑link load‑balancing and intelligent egress selection under multi‑ISP environment. Supports web access audit and URL‑category‑based access restriction to optimize internet link bandwidth utilization. Supports vSys virtual firewalls to implement multi‑tenant logical isolation for service segmentation.
5. Flexible deployment and centralized O&M capability

   Supports routing mode, transparent mode and mixed deployment. Supports local management via CLI and Web‑GUI; supports Syslog, SNMP v3 for log output and monitoring. Compatible with Huawei SecoManager centralized security management system for unified policy distribution, threat visualization and log audit. Supports active‑active / active‑standby HA cluster for service continuity. Complies with CE, RoHS, CC EAL4+ and ICSA Labs international security certifications.

Technical Specifications

• Form Factor: 5U 19‑inch rack‑mount modular chassis
• Interfaces: Multiple service slots for GE/10GE/40GE interface cards and bypass modules; dedicated out‑of‑band management ports
• Management Ports: RJ45 Console port, USB port
• Max Concurrent Sessions: Up to 36,000,000 (model‑dependent)
• Firewall Throughput: High‑performance range varies per sub‑model
• VPN Protocols: IPsec, SSL‑VPN, L2TP, GRE, MPLS VPN, DSVPN
• Virtualization: Supports vSys virtual firewalls for multi‑tenant isolation
• Routing Protocols: IPv4 / IPv6 static routing, RIP, OSPF, BGP, IS‑IS, DHCP Server, PPPoE
• Power Supply: AC 100‑240V / DC‑48V, supports dual hot‑swappable 1+1 redundant power supply
• Operating Environment: 0‑45 °C, humidity 5%‑95% non‑condensing
• Compliance: CE, RoHS, CC EAL4+, ICSA Labs certification

Application Scenarios

Short Version (for BOM / Quotation List)