Huawei ASG3000

Product Overview

Key Features

• Deep‑level application awareness: Identifies more than 1200 mainstream applications including instant‑messaging clients, P2P download services, online streaming media, stock‑trading utilities and online games; supports recognition of hundreds of mobile‑terminal applications, custom application definitions and automatic signature‑database updates.
• Massive URL filtering: Adopts tens‑of‑millions‑level URL classification database, delivers fine‑grained access control against malicious, phishing, risky and non‑business websites, with flexible black‑and‑white‑list management and cloud‑based database auto‑update.
• Multi‑dimensional bandwidth management & traffic shaping: Enforces traffic policies based on user groups, applications, time periods and IP addresses. Guarantees bandwidth for critical business traffic and suppresses non‑business bandwidth consumption to avoid network bottlenecks.
• Multi‑layer threat defence: Combines threat signature matching and web‑reputation intelligence to defend against malware, worms, botnets, DoS/DDoS attacks and web‑exploit threats.
• Data Leakage Prevention (DLP): Monitors file transmission over IM, email and web‑upload channels. Inspects file formats, sizes and sensitive keywords to block unauthorized exfiltration of confidential documents, drawings and source‑code assets.
• Comprehensive audit & visualized reporting: Records full internet‑access logs and content‑audit trails, generates statistical analysis, trend and compliance‑assessment reports. Supports Syslog export for centralized log storage and unified audit for distributed multi‑site deployment scenarios.
• Identity‑driven policy control: Supports multiple authentication modes including Web‑authentication, AD/LDAP, Radius and single sign‑on, enabling granular access and behaviour policies for differentiated user identities.
• Integrated security functions: Embeds stateful firewall, NAT, IP‑MAC binding, attack‑prevention capabilities, together with IPsec, L2TP and GRE VPN for large‑scale multi‑branch interconnection.
• Powerful hardware expandability: Equipped with multiple high‑speed FIC expansion slots, supports electrical, optical and hardware‑bypass interface cards including 10GE cards to adapt to high‑bandwidth business growth. Dual redundant power supply is standard for enhanced equipment reliability.
• Flexible deployment & high‑availability: Supports routing mode, transparent‑bridge mode and mixed composite mode. HA active‑standby deployment is available for mission‑critical production network environments.

Technical Specifications

• Deployment form: 19‑inch 3U rack‑mount modular application security gateway
• Fixed Interfaces: 4×GE RJ45, 4×GE Combo (electrical/optical)
• Expansion slots: 4 × FIC slots (support combined DFIC mode)
• Supported functions: Application control, URL filtering, bandwidth management, malware defence, DLP, behaviour audit & reporting, firewall, VPN, anti‑DDoS
• Deployment modes: Routing, Transparent Bridge, Mixed mode, HA active‑standby
• Management: Web‑UI, CLI, SNMP, Syslog log export
• Power Supply: Standard dual redundant AC power (ASG3000‑AC); DC‑powered variant optional
• Target concurrent user capacity: 6000‑15000 users
• Operating temperature: 0‑45°C

Application Scenarios

Short version for quotation / BOM