Huawei USG6395E-AC Next-Generation Firewall

Specification

Parameter	Details
Model	USG6395E-AC
Fixed Interface	610GE (SFP+) + 6GE (SFP) + 16*GE
Product Form	1U box type
Local Storage	Optional 2.5 Hard disk, supports SSD 240GB/960GB, HDD 1TB

Huawei USG6395E-AC Next-Generation Firewall

Overview

The Huawei USG6395E-AC is a high-performance, enterprise-level AI firewall, part of the HiSecEngine USG6300E series. It is designed for small and medium-sized enterprises and chain institutions, providing advanced next-generation firewall (NGFW) capabilities. This firewall integrates with other security devices to actively defend against network threats, enhance border detection capabilities, and protect against advanced threats. Additionally, it addresses performance degradation issues by offering pattern matching and accelerated encryption and decryption service processing.

Product Details

The Huawei HiSecEngine USG6300E series firewall, including the USG6395E-AC, offers the following features:

• Excellent Performance: Utilizes 100% of the firewall’s defensive capabilities with a 5x increase in unknown threat detection performance.
• Intelligent Defense: Provides real-time disposal of network edge threats with an accuracy rate of over 99% in detecting unknown threats.
• Minimal Operation and Maintenance: Reduces security operation and maintenance OPEX by more than 80% based on business deployment and change strategies.

Integrated Protection

• Combines traditional firewall, VPN, intrusion prevention, antivirus, data leakage prevention, bandwidth management, Anti-DDoS, URL filtering, anti-spam, and other functions into a single, global configuration view with integrated policy management.

Application Identification and Control

• Recognizes over 6000 applications, allowing access control accuracy down to specific application functions (e.g., distinguishing WeChat text from voice). This capability enhances detection performance and accuracy when combined with intrusion detection, antivirus, and content filtering.

Bandwidth Management

• Manages bandwidth used by each user/IP based on service applications to ensure key services and users have a consistent network experience. Control methods include limiting maximum bandwidth, guaranteeing minimum bandwidth, applying policy routing, and modifying application forwarding priority.

Intrusion Prevention and Web Protection

• Quickly receives the latest threat information to accurately detect and defend against web attacks, including SQL injection and cross-site scripting attacks.

APT Defense

• Links with local/cloud sandbox environments to detect and block malicious files. Encrypted traffic can be analyzed without decryption by linking with the big data analysis platform HiSec Insight, providing threat detection for encrypted traffic. The system actively responds to malicious scanning behaviors and conducts behavior analysis through HiSec Insight, allowing for real-time protection against corporate threats.

Cloud Management Model

• Supports plug-and-play by initiating authentication and registration with the cloud management platform. This simplifies network creation and deployment, enabling remote business configuration management, equipment monitoring, and fault management for cloud management of massive equipment.

Cloud Application Security Awareness

• Allows refined and differentiated control over enterprise cloud applications to meet management and control requirements for user cloud application usage,