Huawei USG6000V5

Product Overview

Key Features

• Comprehensive integrated NGFW security suite: Integrates stateful firewall, IPsec / SSL / L2TP / GRE VPN, IPS intrusion prevention, antivirus, anti‑DDoS protection, URL filtering, application awareness, fine‑grained access control, DLP data leakage prevention, QoS bandwidth management and server load balancing. It identifies more than 6000 applications and supports policy control based on user, application, content and time context. It supports TLS/SSL traffic decryption and inspection to defend against threats hidden inside encrypted traffic.
• High‑performance virtual resource support: Supports large‑scale allocation of vCPU, memory and abundant vNIC interfaces, delivers high throughput and massive concurrent session capacity, satisfies high‑load production‑grade virtual security gateway requirements for large enterprises and cloud environments.
• Powerful multi‑tenant virtual‑system capability: Supports a large quantity of independent virtual security systems on a single instance. Each tenant obtains fully isolated security policies, routing tables, address pools and log resources. Independent tenant administrator accounts are supported, realizing strict security domain isolation for large‑scale multi‑tenant cloud scenarios.
• Broad virtual‑platform compatibility: Compatible with mainstream hypervisors including VMware ESXi, KVM and Huawei FusionSphere. Provides standard RESTful open APIs, supports integration with OpenStack, SDN controllers and NFV‑MANO frameworks, enabling automatic instantiation, policy distribution and full lifecycle management of virtual security services.
• Enterprise‑grade high‑availability deployment: Supports VGMP / HRP hot‑standby cluster, VRRP and link‑group reliability technologies. Implements seamless service failover for virtual firewalls to guarantee business continuity in critical production environments. Multiple deployment modes include gateway mode, transparent mode and one‑arm mode.
• Advanced threat defense and unified O&M: The high‑performance IPS engine detects vulnerability exploits, SQL injection, XSS and other web application attacks. Real‑time signature and threat‑intelligence updates defend against malware, ransomware, trojans and botnet attacks. Supports Web‑UI, CLI, SNMP and syslog logging. It can be centrally managed together with Huawei physical firewalls for visualized traffic monitoring, threat alerting and multi‑dimensional security report statistics.

Technical Specifications

• Deployment form: Software virtual machine image, no physical hardware
• Resource allocation: Supports high‑capacity scalable vCPU, memory and large‑quantity vNIC interfaces for high‑load production scenarios
• Supported hypervisors: VMware ESXi, KVM, Huawei FusionSphere
• Orchestration interface: RESTful API, compatible with OpenStack and NFV‑MANO
• Security functions: Stateful firewall, multi‑protocol VPN, IPS, antivirus, anti‑DDoS, URL filtering, application identification, SSL decryption, DLP, QoS, SLB, multi‑tenant virtual‑system
• High‑availability: VGMP, HRP hot‑standby, VRRP, link group
• Management: Web‑UI, CLI, SNMP, Syslog, centralized security management platform
• Deployment modes: Gateway mode, transparent mode, one‑arm mode
• Performance: Performance output depends on allocated virtual computing and network resources

Application Scenarios

Short version for quotation / BOM