Huawei USG6000V‑F

Product Overview

Key Features

• Full‑featured integrated NGFW security suite: Integrates stateful firewall, IPsec / SSL / L2TP / GRE VPN, IPS intrusion prevention, antivirus, anti‑DDoS protection, URL filtering, fine‑grained application control, DLP data leakage prevention and QoS bandwidth management. Supports high‑performance TLS/SSL decryption and inspection to detect threats hidden in encrypted traffic. Recognizes more than 6000 applications and supports granular policy control based on user, application, content and time conditions.
• Cloud‑native lightweight optimized performance: Optimized for container and microservice workloads, features fast instance startup and low runtime overhead. Supports flexible elastic allocation of vCPU, memory and vNIC resources, adapts to dynamic scaling characteristics of cloud‑native services, provides stable security processing for frequently created and destroyed microservice instances.
• Microservice‑oriented multi‑tenant isolation capability: Supports multiple independent virtual security systems within one instance. Each tenant or microservice namespace obtains isolated security policies, routing tables, address pools and log resources. Independent tenant administrator accounts are supported, implementing strict security‑domain isolation for multi‑tenant cloud‑native platforms.
• Rich cloud‑platform orchestration compatibility: Supports mainstream hypervisors including VMware ESXi, KVM and Huawei FusionSphere. Provides RESTful open APIs and Kubernetes‑compatible orchestration interfaces, compatible with OpenStack, NFV‑MANO frameworks and container orchestration platforms, enabling automatic instantiation, policy distribution and full‑lifecycle security service management for cloud‑native environments.
• Flexible high‑availability for cloud‑native production: Supports VGMP / HRP hot‑standby cluster, VRRP and link‑group reliability mechanisms, ensuring business continuity for cloud‑native workloads. Supports gateway mode, transparent mode and one‑arm mode deployment, also fits for service mesh auxiliary security gateway deployment.
• Advanced threat defense and unified visualized O&M: High‑performance IPS engine detects vulnerability exploits, SQL injection, XSS and other web‑application attacks. Real‑time signature updates and cloud‑based threat intelligence defend against malware, ransomware, trojans and botnet‑oriented attacks. Supports Web‑UI, CLI, SNMP and syslog logging. Can be centrally managed with Huawei physical and virtual firewalls for visualized traffic monitoring, real‑time threat alerts and multi‑dimensional security reporting.

Technical Specifications

• Deployment form: Software‑only virtual machine image, cloud‑native optimized, no physical hardware
• Resource allocation: Lightweight cloud‑native design, scalable vCPU, memory and multiple vNIC interfaces
• Supported hypervisors: VMware ESXi, KVM, Huawei FusionSphere
• Orchestration interface: RESTful API, Kubernetes compatible interface, OpenStack and NFV‑MANO supported
• Security functions: Stateful firewall, multi‑protocol VPN, IPS, antivirus, anti‑DDoS, URL filtering, application identification, SSL decryption, DLP, QoS, multi‑tenant virtual‑system
• High‑availability: VGMP, HRP hot‑standby cluster, VRRP, link group
• Management: Web‑UI, CLI, SNMP, Syslog, centralized security management platform
• Deployment modes: Gateway mode, transparent mode, one‑arm mode, auxiliary gateway for service mesh
• Performance: Actual throughput and session capacity depend on assigned virtual computing and network resources

Application Scenarios

Short version for quotation / BOM