Huawei USG6000V16

Product Overview

Key Features

• Full‑featured comprehensive NGFW security suite: Integrates stateful firewall, IPsec / SSL / L2TP / GRE VPN, IPS intrusion prevention, antivirus, anti‑DDoS protection, URL filtering, application awareness, fine‑grained access control, DLP data leakage prevention, QoS bandwidth management and server load balancing. Supports high‑throughput TLS/SSL decryption and inspection to identify threats concealed in encrypted traffic. Recognizes over 6000 applications and supports granular policy control based on user, application, content and time conditions.
• Top‑tier virtual performance with SR‑IOV acceleration: Supports maximum allocation of 16 vCPU cores and large‑capacity memory resources, compatible with SR‑IOV hardware‑assisted network acceleration technology to reduce virtualization overhead. Achieves ultra‑high throughput, massive concurrent sessions and high new‑connection establishment rate, meeting strict carrier‑grade high‑load virtual security gateway requirements.
• Maximum‑scale multi‑tenant virtual‑system capability: Supports large‑quantity independent virtual security systems on one single virtual instance. Each tenant obtains fully‑isolated security policies, routing tables, address pools and independent log resources. Supports dedicated tenant administrator accounts, realizing rigorous security‑domain isolation for hyperscale multi‑tenant cloud environments.
• Wide compatibility with mainstream virtual platforms: Works seamlessly with VMware ESXi, KVM, Microsoft Hyper‑V and Huawei FusionSphere. Provides standard RESTful open APIs, supports integration with OpenStack, SDN controllers and NFV‑MANO orchestration frameworks, enabling automatic instantiation, policy delivery and end‑to‑end lifecycle management for virtual cloud security services.
• Carrier‑grade high‑availability deployment: Supports VGMP / HRP hot‑standby cluster, VRRP and link‑group reliability mechanisms. Enables seamless service failover to guarantee non‑stop business operation for critical production workloads. Supports gateway mode, transparent mode and one‑arm mode deployment options.
• Advanced threat defense and unified visualized O&M: High‑performance IPS engine detects vulnerability exploits, SQL injection, XSS and other web application attacks. Real‑time signature updates and cloud‑based threat intelligence defend against malware, ransomware, trojans and botnet‑oriented attacks. Supports Web‑UI, CLI, SNMP and syslog logging. Can be centrally managed alongside Huawei physical firewalls, delivering visualized traffic monitoring, real‑time threat alerts and multi‑dimensional security reporting.

Technical Specifications

• Deployment form: Software‑only virtual machine image, no physical hardware
• Virtual resource: Up to 16 vCPU cores, large‑capacity memory, multiple vNIC interfaces; supports SR‑IOV hardware acceleration
• Supported hypervisors: VMware ESXi, KVM, Microsoft Hyper‑V, Huawei FusionSphere
• Orchestration interface: RESTful API, compatible with OpenStack and NFV‑MANO
• Security functions: Stateful firewall, multi‑protocol VPN, IPS, antivirus, anti‑DDoS, URL filtering, application identification, SSL decryption, DLP, QoS, SLB, multi‑tenant virtual‑system
• High‑availability: VGMP, HRP hot‑standby cluster, VRRP, link group
• Management: Web‑UI, CLI, SNMP, Syslog, centralized security management platform
• Deployment modes: Gateway mode, transparent mode, one‑arm mode
• Performance: Actual throughput and session capacity depend on assigned virtual resources and SR‑IOV activation status

Application Scenarios

Short version for quotation / BOM