Huawei ASG3300

Product Overview

Key Features

• Deep‑level application awareness: Identifies more than 1200 mainstream applications including instant‑messaging clients, P2P download services, online streaming media, stock‑trading utilities and online games. Supports fine‑grained recognition of application sub‑behaviours, massive mobile‑terminal applications, custom application definitions and automatic signature‑database updates.
• Massive URL filtering: Adopts tens‑of‑millions‑level URL classification database, delivers fine‑grained access control against malicious, phishing, risky and non‑business websites, with flexible black‑and‑white‑list management and cloud‑based database auto‑update.
• Multi‑dimensional bandwidth management & traffic shaping: Enforces traffic policies based on user groups, applications, time periods and IP addresses. Guarantees bandwidth for critical business traffic and suppresses non‑business bandwidth consumption to avoid network bottlenecks under extreme heavy‑load conditions.
• Multi‑layer threat defence: Combines threat signature matching and web‑reputation intelligence to defend against malware, worms, botnets, DoS/DDoS attacks and web‑exploit threats.
• Data Leakage Prevention (DLP): Monitors file transmission over IM, email and web‑upload channels. Inspects file formats, sizes and sensitive keywords to block unauthorized exfiltration of confidential documents, drawings and source‑code assets.
• Comprehensive audit & visualized reporting: Records full internet‑access logs and content‑audit trails, generates statistical analysis, trend and compliance‑assessment reports. Supports Syslog export for centralized log storage and unified audit for large‑scale multi‑site distributed deployment scenarios. Built‑in high‑capacity enterprise hard disks support massive‑volume local log storage.
• Identity‑driven policy control: Supports multiple authentication modes including Web‑authentication, AD/LDAP, Radius and single sign‑on, enabling granular access and behaviour policies for differentiated user identities. Supports large‑volume user information synchronization with enterprise directory servers.
• Integrated security functions: Embeds stateful firewall, NAT, IP‑MAC binding, attack‑prevention capabilities, together with IPsec, L2TP and GRE VPN for large‑scale multi‑branch interconnection.
• Powerful hardware expandability: Equipped with abundant high‑speed FIC expansion slots, supports electrical, optical, hardware‑bypass and high‑density 10GE/25GE interface cards to adapt to ultra‑high‑bandwidth business growth. Standard dual‑redundant power supply enhances equipment reliability for mission‑critical production environments.
• Flexible deployment & high‑availability: Supports routing mode, transparent‑bridge mode and mixed composite mode. HA active‑standby deployment is available for mission‑critical production network environments.

Technical Specifications

• Deployment form: 19‑inch 4U rack‑mount modular application security gateway
• Fixed Interfaces: 12×GE RJ45 (hardware‑bypass capable pairs), 12×GE SFP, 8×10GE SFP+
• Expansion slots: 4 × FIC slots (support combined DFIC mode)
• Built‑in storage: High‑capacity enterprise‑grade hard disk for massive local log storage
• Supported functions: Application control, URL filtering, bandwidth management, malware defence, DLP, behaviour audit & reporting, firewall, VPN, anti‑DDoS
• Deployment modes: Routing, Transparent Bridge, Mixed mode, HA active‑standby
• Management: Web‑UI, CLI, SNMP, Syslog log export
• Power Supply: Standard dual redundant AC power (ASG3300‑AC); DC‑powered variant optional
• Target concurrent user capacity: 45000‑60000 users
• Operating temperature: 0‑45°C

Application Scenarios

Short version for quotation / BOM