Huawei USG‑CFW

Product Overview

Key Features

• Unified boundary traffic protection: Implements fine‑grained access control for internet ingress‑egress traffic and inter‑VPC internal traffic. Supports rule configuration based on IP address, port, domain name, geographic location and service tags, supports up to 20000 access control policies, effectively blocks unauthorized access and prevents lateral movement attacks inside cloud platforms华为云.
• Integrated threat prevention capability: Embeds Huawei‑powered IPS signature database with more than 12000 signatures, supports intrusion prevention, antivirus, reverse‑shell attack interception, brute‑force attack blocking and virtual vulnerability patching. Effectively defends against SQL injection, XSS, vulnerability exploits, malware and trojan threats for cloud assets including ECS, ELB and NAT gateway华为云.
• Automatic asset discovery & visualized O&M: Automatically identifies cloud assets such as EIP, ECS and VPC resources. Built‑in security dashboard presents real‑time traffic statistics, attack alerts and risk overview. Supports traffic topology display, policy hit‑rate analysis and policy‑assistant optimization to reduce mis‑configuration risks华为云.
• Elastic carrier‑grade cluster reliability: Adopts fully distributed redundant cluster deployment without single point of failure. Protection bandwidth scales elastically with business traffic, supports peak‑value burst traffic processing, avoids performance bottlenecks of traditional hardware firewalls in cloud scenarios华为云.
• Complete log audit & open integration: Records access logs, attack logs and traffic logs, supports log query, retention and security report generation. Seamlessly interconnects with SecoMaster, LTS log service, CTS cloud audit and SMN message notification for alert push and compliance audit. Provides open APIs for automatic policy orchestration and multi‑account centralized management华为云.
• Multiple edition options: Provides Standard Edition and Professional Edition. Standard edition focuses on internet boundary protection; Professional edition adds inter‑VPC east‑west traffic inspection, antivirus and advanced threat defense to satisfy differentiated security requirements of enterprises of different sizes华为云.

Technical Specifications

• Deployment form: SaaS cloud‑native security service, no physical hardware / local VM required
• Protection scope: Internet boundary (EIP, ECS, ELB, NAT Gateway); Inter‑VPC boundary traffic
• Supported platform: Huawei Public Cloud, HUAWEI CLOUD Stack private cloud
• Security functions: Access control ACL, IPS intrusion prevention, antivirus, reverse‑shell defense, virtual patch, outbound malicious connection detection, traffic analysis, log audit, multi‑account management
• Policy capacity: Up to 20000 protection rules
• Orchestration: RESTful open API, compatible with cloud automation workflow
• Management: Web‑based cloud console, security dashboard, alert notification, periodic security report
• Performance: Elastic bandwidth scaling according to purchased specifications

Application Scenarios

Short version for quotation / BOM