Huawei USG6625E-AC HiSecEngine USG6600E Series Next-Generation Firewall

Specification

Parameter	Details
Model	USG6625E-AC
Description	USG6625E AC Host (610GE (SFP+) + 6GE (SFP) + 16*GE, 1 AC power supply)
Dimensions (H x W x D)	43.6 x 442 x 420 mm
Form Factor/Height	1U
Fixed Interface	6 x 10GE (SFP+) + 6 x GE (SFP) + 16 x GE
USB Port	1 x USB 2.0
External Storage	Optional, SSD (1 x 2.5 inch) supported, 240 GB/HDD 1TB
Power Supply	100 V to 240 V
Typical Power Consumption	104.5 W
IPsec VPN Throughput	15 Gbit/s (AES-256 + SHA256, 1420-byte)
SSL Inspection Throughput	3 Gbit/s

Huawei USG6625E-AC HiSecEngine USG6600E Series Next-Generation Firewall

Overview

The Huawei HiSecEngine USG6625E-AC is part of the USG6600E series of next-generation firewalls designed for medium- and large-sized enterprises, institutions, and next-generation data centers. These firewalls provide comprehensive NGFW capabilities and collaborate with other security devices to proactively defend against network threats, enhance border detection capabilities, and resolve performance deterioration problems.

Product Details

The Huawei USG6625E-AC provides the following features:

• Comprehensive and Integrated Protection
  • Integrates traditional firewall, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, URL filtering, and online behavior management.
  • Works with local or cloud sandboxes to detect unknown threats and prevent zero-day attacks.
  • Refined bandwidth management based on applications and websites to prioritize key services.
• High Performance
  • Uses Huawei’s proprietary network processing chip for improved forwarding performance.
  • Chip-level pattern matching and accelerated encryption/decryption to enhance IPS, antivirus, and IPSec services.
• High Port Density
  • Multiple types of interfaces (40G, 10G, and 1G), allow flexible service expansion without extra interface cards.

Comparison with Similar Items

Product Code	USG6615E-AC	USG6625E-AC	USG6635E-AC	USG6655E-AC
Dimensions (H x W x D)	43.6 x 442 x 420 mm	43.6 x 442 x 420 mm	43.6 x 442 x 420 mm	43.6 x 442 x 420 mm
Form Factor/Height	1U	1U	1U	1U
Fixed Interface	6 x 10GE (SFP+) + 6 x GE (SFP) + 16 x GE	6 x 10GE (SFP+) + 6 x GE (SFP) + 16 x GE	2 x 40GE (QSFP+) + 12 x 10GE (SFP+) + 16 x GE	2 x 40GE (QSFP+) + 12 x 10GE (SFP+) + 16 x GE
Typical Power Consumption	104.5 W	104.5 W	136.1 W	136.1 W
Firewall Throughput	12 Gbit/s	20 Gbit/s	30 Gbit/s	40 Gbit/s
FW + SA + IPS Throughput	10 Gbit/s	10 Gbit/s	13 Gbit/s	15 Gbit/s
Concurrent Sessions	6,000,000	8,000,000	12,000,000	12,000,000
New Sessions/Second	200,000	200,000	400,000	400,000

Additional Specifications

Parameter	Details
Firewall Latency	15 µs
Concurrent SSL VPN Users	Default 100, Maximum 2000
Security Policies	Maximum 40,000
Virtual Firewalls	500
URL Filtering	Over 130 categories and a database of 120 million URLs in the cloud
Automated Threat Feedback and IPS Signature Updates	Yes
Third-Party and Open-Source Ecosystem	Open API, RESTful and NetConf interfaces, integration with third-party tools like Tufin, AlgoSec, and FireMon
Centralized Management	Via Huawei eSight and eLog
VLANs	Maximum 4094
VLANIF Interfaces	Maximum 1024

Integrated Protection

• Firewall, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, anti-DDoS, URL filtering, and anti-spam all in one device.
• Application Identification and Control: Identifies over 6000 applications with granular control.
• Bandwidth Management: Manages per-user and per-IP bandwidth, ensuring key services and users have prioritized access.
• Intrusion Prevention and Web Protection: Accurate detection and defense against web attacks, including SQL injection and cross-site scripting (XSS) attacks.
• APT Defense: Works with local/cloud sandbox environments to detect/block malicious files, supports encrypted traffic analysis without decryption, and actively responds to malicious scanning behaviors.

Cloud Management Mode

• Plug-and-Play: Simplifies network creation and deployment.
• Remote Management: Allows for remote configuration, monitoring, and fault management for large-scale device management.

Cloud Application Security Awareness

• Provides refined control over enterprise cloud applications to meet management requirements.