Huawei USG‑CFW‑E

Product Overview

Key Features

• Enterprise‑level full‑dimensional traffic protection: Implements refined access control for internet ingress‑egress traffic, cross‑VPC east‑west traffic and traffic between cloud platform and on‑premises IDC. Supports rule matching by IP, port, domain, geographic location, asset tag and user identity, supports massive access control policies, effectively blocks unauthorized access and prevents threat lateral movement within cloud environment.
• AI‑enhanced advanced threat defense: Integrates upgraded IPS signature database and Huawei global threat intelligence feed. Supports inline TLS/SSL traffic decryption and inspection, accurately identifies hidden threats in encrypted traffic. Defends against vulnerability exploits, brute‑force attacks, reverse‑shell, ransomware communication, malware C‑C channel and complex web‑based attacks such as SQL injection and XSS.
• Automatic asset awareness & intelligent policy optimization: Automatically discovers ECS, EIP, ELB, NAT gateway and other cloud resources across multiple VPCs. Built‑in security dashboard displays real‑time traffic statistics, threat alert overview and attack tracing. Provides intelligent policy suggestion, policy‑hit‑rate analysis and redundant‑rule cleanup function, lowering operation risk caused by mis‑configuration.
• Hybrid‑cloud & cross‑site adaptive capability: Supports security inspection for hybrid‑cloud traffic connecting public cloud and on‑premises data centers. Adopts distributed redundant cluster architecture with no single point of failure, bandwidth elastically scales according to business burst traffic, satisfies high‑concurrency traffic requirements of large enterprise cloud workloads.
• High‑spec compliance audit & open integration: Generates complete access logs, attack logs and full traffic logs, supports long‑term log storage, custom security report and forensics‑oriented event tracing. Deeply interconnects with SecoMaster, LTS log service, CTS cloud audit and SMN alert notification. Provides high‑performance RESTful open APIs to realize automatic policy orchestration, multi‑account centralized management and third‑party platform docking.
• Enterprise‑oriented permission control: Supports fine‑grained RBAC authority management, enterprise‑project isolation and multi‑tenant sub‑account management, suitable for large‑enterprise department‑based authority division and collaborative O&M.

Technical Specifications

• Deployment form: Managed SaaS cloud‑native security service, no physical hardware or local VM
• Protection scope: Internet boundary EIP traffic, cross‑VPC east‑west traffic, hybrid‑cloud traffic between VPC and on‑premises IDC
• Supported platform: Huawei Public Cloud, HUAWEI CLOUD Stack private cloud, hybrid‑cloud scenario
• Security functions: ACL access control, AI‑enhanced IPS intrusion prevention, antivirus, SSL/TLS decryption, malicious outbound connection detection, brute‑force attack interception, asset auto‑discovery, intelligent policy optimization, full log audit, RBAC permission management
• Orchestration interface: RESTful open API, supports automated security workflow
• Management: Cloud‑based console, visualized security dashboard, real‑time threat alert, custom compliance report
• Performance: Elastic bandwidth scaling for enterprise‑level high‑volume traffic

Application Scenarios

Short version for quotation / BOM