Huawei USG6000V32

Product Overview

Key Features

• Full‑featured integrated NGFW security suite: Integrates stateful firewall, IPsec / SSL / L2TP / GRE VPN, IPS intrusion prevention, antivirus, anti‑DDoS protection, URL filtering, application awareness, fine‑grained access control, DLP data leakage prevention, QoS bandwidth management and server load balancing. Supports high‑performance TLS/SSL decryption and inspection to detect threats hidden inside encrypted traffic. Identifies more than 6000 applications and supports granular policy control based on user, application, content and time conditions.
• Maximum‑level virtual performance with SR‑IOV acceleration: Supports up to 32 vCPU cores and large‑capacity memory allocation, compatible with SR‑IOV hardware‑assisted network acceleration technology to lower virtualization overhead. It provides ultra‑high throughput, massive concurrent sessions and high new‑connection establishment rate, fully meeting strict carrier‑grade ultra‑high‑load virtual security gateway requirements.
• Ultra‑large‑scale multi‑tenant virtual‑system capability: Supports massive independent virtual security systems on a single virtual instance. Each tenant gets fully‑isolated security policies, routing tables, address pools and independent log resources. Dedicated tenant administrator accounts are supported, implementing strict security‑domain isolation for hyperscale multi‑tenant cloud environments.
• Broad compatibility with mainstream virtual platforms: Works with VMware ESXi, KVM, Microsoft Hyper‑V and Huawei FusionSphere. Provides standard RESTful open APIs, supports integration with OpenStack, SDN controllers and NFV‑MANO orchestration frameworks, enabling automatic instantiation, policy delivery and full‑lifecycle management for virtual cloud security services.
• Carrier‑grade high‑availability deployment: Supports VGMP / HRP hot‑standby cluster, VRRP and link‑group reliability mechanisms. Realizes seamless service failover to ensure non‑stop business operation for critical production workloads. Supports gateway mode, transparent mode and one‑arm mode deployment options.
• Advanced threat defense and unified visualized O&M: High‑performance IPS engine detects vulnerability exploits, SQL injection, XSS and other web‑application attacks. Real‑time signature updates and cloud‑based threat intelligence defend against malware, ransomware, trojans and botnet‑oriented attacks. Supports Web‑UI, CLI, SNMP and syslog logging. Can be centrally managed together with Huawei physical firewalls for visualized traffic monitoring, real‑time threat alerts and multi‑dimensional security reporting.

Technical Specifications

• Deployment form: Software‑only virtual machine image, no physical hardware
• Virtual resource: Up to 32 vCPU cores, large‑capacity memory, multiple vNIC interfaces; supports SR‑IOV hardware acceleration
• Supported hypervisors: VMware ESXi, KVM, Microsoft Hyper‑V, Huawei FusionSphere
• Orchestration interface: RESTful API, compatible with OpenStack and NFV‑MANO
• Security functions: Stateful firewall, multi‑protocol VPN, IPS, antivirus, anti‑DDoS, URL filtering, application identification, SSL decryption, DLP, QoS, SLB, multi‑tenant virtual‑system
• High‑availability: VGMP, HRP hot‑standby cluster, VRRP, link group
• Management: Web‑UI, CLI, SNMP, Syslog, centralized security management platform
• Deployment modes: Gateway mode, transparent mode, one‑arm mode
• Performance: Actual throughput and session capacity depend on assigned virtual resources and SR‑IOV activation status

Application Scenarios

Short version for quotation / BOM