Huawei USG6000V8

Product Overview

Key Features

• Full‑featured integrated NGFW security suite: Integrates stateful firewall, IPsec / SSL / L2TP / GRE VPN, IPS intrusion prevention, antivirus, anti‑DDoS protection, URL filtering, application awareness, fine‑grained access control, DLP data leakage prevention, QoS bandwidth management and server load balancing. Supports high‑performance TLS/SSL traffic decryption and inspection to uncover threats hidden within encrypted traffic. Identifies more than 6000 applications and supports policy control based on user, application, content and time context.
• Flagship‑level virtual performance with SR‑IOV acceleration: Supports maximum 8 vCPU and 12GB memory configuration, supports SR‑IOV hardware‑assisted network acceleration to greatly improve virtual forwarding efficiency, delivering ultra‑high throughput, massive concurrent sessions and high new‑connection establishment rate, meeting carrier‑grade high‑load virtual security gateway requirements.
• Enterprise‑class enhanced multi‑tenant virtual‑system capability: Supports large quantity of independent virtual security systems on a single instance. Each tenant gets fully isolated security policies, routing tables, address pools and log resources. Independent tenant administrator accounts are supported, realizing strict security domain isolation for massive multi‑tenant cloud scenarios.
• Broad virtual‑platform compatibility: Compatible with mainstream hypervisors including VMware ESXi, KVM, Microsoft Hyper‑V and Huawei FusionSphere. Provides standard RESTful open APIs, supports integration with OpenStack, SDN controllers and NFV‑MANO frameworks, enabling automatic instantiation, policy distribution and full lifecycle management of virtual security services.
• Carrier‑grade high‑availability deployment: Supports VGMP / HRP hot‑standby cluster, VRRP and link‑group reliability technologies, realizing seamless service failover for virtual firewalls to guarantee non‑interrupted business operation for critical production environments. Supports gateway mode, transparent mode and one‑arm mode deployment.
• Advanced threat defense and unified visualized O&M: High‑performance IPS engine detects vulnerability exploits, SQL injection, XSS and other web application attacks. Real‑time signature and cloud threat‑intelligence updates defend against malware, ransomware, trojans and botnet attacks. Supports Web‑UI, CLI, SNMP and syslog logging. Can be centrally managed together with Huawei physical firewalls for visualized traffic monitoring, threat alerting and multi‑dimensional security report statistics.

Technical Specifications

• Deployment form: Software virtual machine image, no physical hardware
• Recommended resource: Max 8 vCPU, 12 GB memory, 2‑11 vNIC interfaces; supports SR‑IOV hardware acceleration
• Supported hypervisors: VMware ESXi, KVM, Microsoft Hyper‑V, Huawei FusionSphere
• Orchestration interface: RESTful API, compatible with OpenStack and NFV‑MANO
• Security functions: Stateful firewall, multi‑protocol VPN, IPS, antivirus, anti‑DDoS, URL filtering, application identification, SSL decryption, DLP, QoS, SLB, multi‑tenant virtual‑system
• High‑availability: VGMP, HRP hot‑standby, VRRP, link group
• Management: Web‑UI, CLI, SNMP, Syslog, centralized security management platform
• Deployment modes: Gateway mode, transparent mode, one‑arm mode
• Performance: Actual throughput and session capacity subject to allocated virtual resources and SR‑IOV enablement status

Application Scenarios

Short version for quotation / BOM