Uonel Co.Limtied |
The USG9500 Data Center Firewall is the world’s fastest and provides services for large data centers, cloud computing environments, and enterprise campus networks. Integrated switching, routing, and security make upgrades smooth, virtualization easy, and its TB-level processing capability comes in a compact unit with carrier-grade reliability.
Its multiple core network processor and distributed architecture integrates security and virtualization while continual database updates optimize protection.
Minimize security risks, get reliable protection, and reduce TCO with Huawei’s NSS-tested data center firewall
Traditional firewall access control is based on port and IP addresses, but the USG9500 provides more fine-grained controls like these:
The USG9500 provides comprehensive protection against rampant cyber-attacks and information theft:
The USG9500 uses a hardware platform that is often used in core routers to provide modularized components. Each Line Protection Unit (LPU) has two Network Processors (NPs) to provide line rate forwarding. LPUs and Stream Processing Unites (SPUs) function separately. The SPU uses multi-core CPUs and multi-threaded architecture, and each CPU has an application acceleration engine. These hardware advantages, combined with Huawei’s optimized concurrent processing technology, increase CPU capacity to ensure high-speed, parallel processing of multiple services, such as NAT and VPN. Overall performance increases linearly with the number of SPUs, enabling customers to scale up performance at low cost.
The system’s unique architecture and hardware design delivers industry-leading performance; up to 144 Tbit/s, large-packet throughput, 1.44 billion concurrent sessions, and 4,096 virtual firewalls. Meets requirements of high-end customers, such as television and broadcast companies, government agencies, energy companies, and educational institutions.
To ensure service continuity on mission-critical, high-performance networks, the USG9500 supports active/standby and active/active redundancy, port aggregation, VPN redundancy, and SPU load balancing. The USG9500 also supports dual-MPU active/standby switch-over normally available in high-end routers, for high availability. Mean-Time-Between-Failures (MTBF) is up to 200,000 hours, and fail-over time is less than one second.
Secure, high-speed network connections and rich virtualization features support cloud computing systems with dedicated resources, independently forwarding traffic, and separately managing configurations to meet the requirements of different customers. Resources can be easily assigned to different virtual systems as needed, with different security policies, log management, forwarding processes, and audit functions based on tenant requirements. Forwarding planes of virtual systems are separated to ensure data security of tenants and eliminate the impact of performance degradation of one virtual system affecting other virtual systems.
Model | USG9520 | USG9560 | USG9580 |
---|---|---|---|
Performance and Capacity | |||
Firewall Throughput (maximum) | 120 Gbit/s | 720 Gbit/s | 1,440 Gbit/s |
Firewall Throughput (IMIX Traffic) | 120 Gbit/s | 720 Gbit/s | 1,440 Gbit/s |
Maximum Number of Concurrent Sessions | 120 million | 720 million | 1.44 billion |
IPSec VPN Performance (1,420 Bytes) | 84 Gbit/s | 336 Gbit/s | 720 Gbit/s |
Maximum Number of Concurrent IPSec Tunnels | 128,000 | 640,000 | 1,000,000 |
IPS Performance | 40 Gbit/s | 220 Gbit/s | 440 Gbit/s |
Antivirus Performance | 34 Gbit/s | 187 Gbit/s | 374 Gbit/s |
Expansion and I/O | |||
Expansion Slots | 3 slots | 8 slots | 16 slots |
Number of MPU Slots | 2 | ||
Interface Types | GE, 10 GE, 40 GE, and 100 GE interfaces | ||
SPU | Firewall and application security SPUs | ||
Dimensions, Power Supply, and Operating Environment | |||
Dimensions (H x W x D) | 175 mm x 442 mm x 650 mm DC 220 mm x 442 mm x 650 mm DC | 620 mm x 442 mm x 650 mm | 1,420 mm x 442 mm x 650 mm |
Weight | Vacant chassis: 15 kg, DC Full configuration: 32 kg, DC Vacant chassis: 25 kg, AC Full configuration: 42 kg, AC | Vacant chassis: 43.2 kg Full configuration: 113 kg | Vacant chassis: 94.4 kg Full configuration: 229 kg |
Redundant Power Supply | Standard configuration | ||
AC Power Supply | 90V AC to 275V AC; 175V AC to 275V AC (recommended) | ||
DC Power Supply | -38V to -72V; Rated -48V | ||
Power consumption | 1,270W | 3,960W | 7,540W |
Operating Temperature | Long-term: 0°C to 45°C Short-term: -5°C to 55°C Storage: -40°C to 70°C | ||
Ambient Humidity | Long-term: 5% RH to 85% RH, non-condensing Short-term: 5% RH to 95% RH, non-condensing Storage: 0% RH to 95% RH, non-condensing |
Basic Firewall Functions |
|
NAT/CGN |
|
Egress Load Balancing |
|
Ingress Load Balancing |
|
Service Awareness | Identification and prevention of over 6,000 protocols: P2P, IM, game, stock charting/trading, VoIP, video, stream media, email, mobile phone services, Web browsing, remote access, network management, and news applications |
Intrusion Prevention System |
|
URL Filtering |
|
Antivirus |
|
VPN |
|
PKI |
|
Anti-DDoS Features |
|
Networking/Routing |
|
High Availability |
|
Virtual System |
|
Management |
|
Logging/Monitoring |
|
Certification |
|
User Authentication and Access Control |
|
Note: The list above is comprehensive and may contain features that are not available on all USG9500 appliances. View USG9500 system documentation to determine feature availability.
Customer requirements
Solution highlights
Customer requirements
Solution highlights
Host | |
---|---|
USG9520-BASE-AC-51 | USG9520 AC Standard Configuration (includes X3 AC Chassis and 2 x MPU) |
USG9520-BASE-DC-51 | USG9520 DC Standard Configuration (includes X3 DC Chassis and 2 x MPU) |
USG9560-BASE-DC-51 | USG9560 DC Basic Configuration (include X8 DC Chassis, 2 x SRU, and 1 x SFU) |
USG9580-BASE-DC-51 | USG9580 DC Standard Configuration (includes X16 DC Chassis, 2 x MPU, and 4 x SFU) |
USG9500 SPUs | |
SPU-X3-40-E8KE | 40G X3 Firewall Service Processing Unit |
SPU-X8X16-80-E8KE | 80G X8 & X16 Firewall Service Processing Unit |
SPC-S-40-E8KE | 40G Firewall Processing Card |
SPC-D-80-E8KE | 80G Firewall Processing Card |
SPC-APPSEC-FW | Application Security Service Processing Card |
USG9500 Flexible Line Processing Units | |
E8KE-X-LPUF-101 | Flexible Card Line Processing Unit (LPUF-101, 4 sub-slots) |
E8KE-X-101-1X40GE-CFP | 1-Port 40G Base LAN CFP Flexible Card (P101, 1/2 wide, occupies 2 sub-slots) |
E8KE-X-101-5X10GE-SFP+ | 5-Port 10G Base LAN/WAN-SFP + Flexible Card A (P101, 1/2 wide, occupies 2 sub-slots) Spare Part |
E8KE-X-101-24XGE-SFP | 24-Port 100/1,000 Base-X-SFP Flexible Card (P101, 1/2 wide, occupies 2 sub-slots) |
FW-LPUF-120 | 120G Line Processing Unit |
FW-LPUF-240 | Flexible Card Line Processing Unit (LPUF-240, 2 sub-slots) Spare Part |
FW-6X10G-SFP+ | 6-Port 10G Base LAN/WAN-SFP + Flexible Card A Spare Part |
FW-1X100G-CFP | 1 x 100 GE CFP Daughter Card |
FW-12X10G-SFP+ | 12-Port 10G Base LAN/WAN-SFP + Flexible Card A (P120-A) Spare Part |
E8KE-X-101-1X100GE-CFP | 1-Port 100G Base-CFP Integrated Line Processing Unit (LPUI-101) |