Huawei Eudemon5000E

Product Overview

Key Features

1. Multi‑layer intelligent comprehensive threat defense

   Supports stateful packet inspection, IPS intrusion prevention, gateway anti‑virus, anti‑spam, URL filtering, DLP and large‑capacity anti‑DDoS attack mitigation. Identifies massive network applications and enforces fine‑grained security policies based on user identity, application type, time schedule and content inspection. Supports SSL traffic decryption to discover threats hidden in encrypted traffic, cooperates with sandbox to identify unknown malware. Signature databases support online real‑time upgrade against malware, exploits and zero‑day threats.
2. Distributed modular high‑density expandable hardware architecture

   Adopts 8U 19‑inch rack‑mount chassis with abundant service slots for GE/10GE/40GE/100GE interface cards and bypass modules. Equipped with dedicated out‑of‑band management ports, RJ45 Console port and USB interface for configuration backup. Supports hot‑swappable dual power supplies for 1+1 redundancy, compatible with AC and DC power input to satisfy strict reliability requirements for carrier and super‑large‑enterprise core sites. Supports optional hot‑swap SSD for massive local log storage and security audit.
3. Hardware‑accelerated large‑scale multi‑service VPN connectivity

   Built‑in hardware encryption engine supports IPsec VPN, SSL VPN, L2TP, GRE, MPLS VPN and DSVPN dynamic smart VPN. Supports IKEv1/IKEv2 key negotiation and mainstream encryption algorithms. Realizes massive‑scale site‑to‑site encrypted interconnection between headquarters and numerous distributed remote branches, as well as high‑capacity SSL‑VPN remote access for large‑quantity mobile employees, guarantees secure transmission of mass cross‑location business data.
4. Application‑aware bandwidth management & network audit

   Implements precise application‑level traffic identification and QoS scheduling. Supports per‑user bandwidth quota control, application‑based traffic shaping, multi‑link load‑balancing and intelligent egress selection under multi‑ISP environment. Supports web access audit and URL‑category‑based access restriction to optimize internet link bandwidth utilization. Supports vSys virtual firewalls to implement multi‑tenant logical isolation for service segmentation.
5. Flexible deployment and centralized O&M capability

   Supports routing mode, transparent mode and mixed deployment. Supports local management via CLI and Web‑GUI; supports Syslog, SNMP v3 for log output and monitoring. Compatible with Huawei SecoManager centralized security management system for unified policy distribution, threat visualization and log audit. Supports active‑active / active‑standby HA cluster for service continuity. Complies with CE, RoHS, CC EAL4+ and ICSA Labs international security certifications.

Technical Specifications

• Form Factor: 8U 19‑inch rack‑mount modular chassis
• Interfaces: Multiple service slots for GE/10GE/40GE/100GE interface cards and bypass modules; dedicated out‑of‑band management ports
• Management Ports: RJ45 Console port, USB port
• Max Concurrent Sessions: Up to 48,000,000 (model‑dependent)
• Firewall Throughput: Flagship high‑performance range varies per sub‑model
• VPN Protocols: IPsec, SSL‑VPN, L2TP, GRE, MPLS VPN, DSVPN
• Virtualization: Supports vSys virtual firewalls for multi‑tenant isolation
• Routing Protocols: IPv4 / IPv6 static routing, RIP, OSPF, BGP, IS‑IS, DHCP Server, PPPoE
• Power Supply: AC 100‑240V / DC‑48V, supports dual hot‑swappable 1+1 redundant power supply
• Operating Environment: 0‑45 °C, humidity 5%‑95% non‑condensing
• Compliance: CE, RoHS, CC EAL4+, ICSA Labs certification

Application Scenarios

Short Version (for BOM / Quotation List)