Huawei ASG3100

Product Overview

Key Features

• Deep‑level application awareness: Identifies more than 1200 mainstream applications including instant‑messaging clients, P2P download services, online streaming media, stock‑trading utilities and online games; supports fine‑grained recognition of individual application behaviours, hundreds of mobile‑terminal applications, custom application definitions and automatic signature‑database updates.
• Massive URL filtering: Adopts tens‑of‑millions‑level URL classification database, delivers fine‑grained access control against malicious, phishing, risky and non‑business websites, with flexible black‑and‑white‑list management and cloud‑based database auto‑update.
• Multi‑dimensional bandwidth management & traffic shaping: Enforces traffic policies based on user groups, applications, time periods and IP addresses. Guarantees bandwidth for critical business traffic and suppresses non‑business bandwidth consumption to avoid network bottlenecks under heavy‑load conditions.
• Multi‑layer threat defence: Combines threat signature matching and web‑reputation intelligence to defend against malware, worms, botnets, DoS/DDoS attacks and web‑exploit threats.
• Data Leakage Prevention (DLP): Monitors file transmission over IM, email and web‑upload channels. Inspects file formats, sizes and sensitive keywords to block unauthorized exfiltration of confidential documents, drawings and source‑code assets.
• Comprehensive audit & visualized reporting: Records full internet‑access logs and content‑audit trails, generates statistical analysis, trend and compliance‑assessment reports. Supports Syslog export for centralized log storage and unified audit for distributed multi‑site deployment scenarios. Built‑in high‑capacity hard disk supports local massive‑log storage.
• Identity‑driven policy control: Supports multiple authentication modes including Web‑authentication, AD/LDAP, Radius and single sign‑on, enabling granular access and behaviour policies for differentiated user identities. Supports user information synchronization with enterprise directory servers.
• Integrated security functions: Embeds stateful firewall, NAT, IP‑MAC binding, attack‑prevention capabilities, together with IPsec, L2TP and GRE VPN for large‑scale multi‑branch interconnection.
• Powerful hardware expandability: Equipped with abundant high‑speed FIC expansion slots, supports electrical, optical, hardware‑bypass and multiple 10GE interface cards to adapt to high‑bandwidth business growth. Standard dual‑redundant power supply enhances equipment reliability for mission‑critical environments.
• Flexible deployment & high‑availability: Supports routing mode, transparent‑bridge mode and mixed composite mode. HA active‑standby deployment is available for mission‑critical production network environments.

Technical Specifications

• Deployment form: 19‑inch 4U rack‑mount modular application security gateway
• Fixed Interfaces: 12×GE RJ45 (with hardware bypass pairs), 12×GE SFP, 8×10GE SFP+
• Expansion slots: 4 × FIC slots (support combined DFIC mode)
• Built‑in storage: High‑capacity hard disk for local log storage
• Supported functions: Application control, URL filtering, bandwidth management, malware defence, DLP, behaviour audit & reporting, firewall, VPN, anti‑DDoS
• Deployment modes: Routing, Transparent Bridge, Mixed mode, HA active‑standby
• Management: Web‑UI, CLI, SNMP, Syslog log export
• Power Supply: Standard dual redundant AC power (ASG3100‑AC); DC‑powered variant optional
• Target concurrent user capacity: 12000‑25000 users
• Operating temperature: 0‑45°C

Application Scenarios

Short version for quotation / BOM