USG6630E Huawei Next-generation Firewalls Series best price

Diversified new applications bring about convenient cyber life as well as more security risks.

• The identity of a user at an IP address is unclear.

  On new networks, attackers easily manipulate zombie hosts to use legitimate IP addresses. Attackers can then launch network attacks or forge source IP addresses for spoofing and obtaining permissions. The source IP address of a packet does not represent the user identity.

  In addition, teleworking and mobile working have emerged. The IP address of a user may change at any time. Traffic control by IP address cannot accommodate new network requirements.

• The port and protocol of an application are not fixed.

  Traditional network services run on fixed ports. For example, HTTP runs on port 80, and FTP runs on ports 20 and 21. On new networks, ephemeral ports that are not assigned by the Internet Assigned Numbers Authority (IANA) and random ports (for example, P2P ports) are frequently used by network applications. These applications are hard to control, exhaust bandwidths, and even cause network congestion.

  Meanwhile, increasing unfixed services start to use well-known ports. With the development of web page technologies, more and more services with different risk levels run on ports 80 and 443 using HTTP and HTTPS, for example, WebMail, web gaming, video streaming, and web chats.

• The packet content is uncertain.

  Single-packet detection analyzes only the security of individual packets. This mechanism cannot defend against viruses or Trojan horses during the Internet access. Intranet hosts may accidentally introduce worms, Trojan horses, and viruses, which result in information leaks and losses. Therefore, network security management must identify and monitor traffic contents, in addition to traffic control based on the source and destination IP addresses.

•  

  Specifications

  Item	Description
  System specifications
  CPU	Multi-core 1.0 GHz processor
  Memory	DDR3 4 GB
  Flash	16 MB
  CF card	2 GB
  Hard disk	Optional hot-swappable 300GB 2.5-inch SAS hard disks
  SPUB (the service engine)	Not supported
  Dimensions and weight
  Dimensions (Hb x Wa x D)	44.4 mm x 442 mm x 421 mm
  Weight	Standard: 6 kg Fully configured: 10 kg
  Power specifications
  AC power	Supported; 150 W built-in power module (default) and 170 W hotswappable power module (optional)
  Rated input voltage (AC)	100 V to 240 V, 50 Hz/60 Hz
  Maximum input voltage (AC)	90 V to 264 V, 47 Hz to 63 Hz
  Maximum input current (AC)	2.5 A
  DC power	Not supported.
  Maximum output power	150 W (default) or 170 W (optional)
  Heat dissipation
  Fan module	Built-in fan module, cannot be removed.
  Air flow (hot air flow, viewed facing the rear panel)	Intake on the front and left sides, exhaust on the right side
  Port density
  Out-of-band management port	1 (RJ45)
  Console port	1 (RJ45)
  USB 2.0 port	1
  Mandatory service ports	2 GE Combo ports 4 10/100/1000M autosensing Ethernet electrical ports
  Expansion slot	2×WSIC
  Types of expansion cards	8GE-WSIC-8×1GE RJ45 interface card 2XG8GE-WSIC-8×1GE RJ45+2×10GE SFP+ interface card 8GEF-WSIC-8×1GE SFP interface card 4GE-BYPASS-WSIC-2×electrical links Bypass card

•