Huawei Firewall USG9560-BASE-DC-V3,USG9560 DC Basic Configuration
with X8 DC Chassis,2SRU,1SFU
Overview
Huawei USG9560-BASE-DC-V3 USG9500 Data Center Firewall Basic
Configuration includes 8 slots Chassis with DC power supply,
2*SRU,1*SFU. Huawei USG9500 data center firewall is the world’s
fastest firewall for data center environment to ensure secure
services in the cloud and for large data centers and enterprise
campus networks. Integrated switching, routing, and security enable
smooth upgrade, carrier-class reliability, comprehensive
virtualization, and terabit-level processing capability. The Huawei
USG9500 uses a hardware platform that often exists in a core router
to provide modularized components. Each interface module has two
network processors (NPs) to provide line rate forwarding. The SPU
uses multi-core CPUs and a multi-thread architecture, and each CPU
has an application acceleration engine. These hardware advantages,
combined with Huawei optimized concurrent processing technology,
increases CPU capacity to ensure the high speed parallel processing
of multiple services, such as NAT and VPN. LPUs and SPUs function
separately. The overall performance increases linearly with the
addition of SPUs so that customers can easily scale up the
performance at a low cost.
With revolutionized system architecture, the Huawei USG9500
security gateway series has the industry's highest firewall
throughput and the most concurrent connections. With dedicated
traffic splitting technology, the overall performance of the
USG9500 increases linearly with the addition of SPUs. The USG9500
delivers a maximum of 960 Gbps large-packet throughput, 960 million
concurrent connections, and 4096 virtual firewalls. The industry
leading performance can meet the performance demand of high-end
customers, such as television and broadcast systems, government
agencies, energy companies, and education organizations.
Product specifications
USG9560 Specifications |
| Performance and Capacity |
| Firewall Throughput (maximum)* | 720 Gbit/s |
| Firewall Throughput (IMIX Traffic) | 720 Gbit/s |
| Maximum Number of Concurrent Sessions | 720 million |
| IPSec VPN Performance (1,420 Bytes) | 336 Gbit/s |
| Maximum Number of Concurrent IPSec Tunnels | 768,000 |
| IPS Performance | 209 Gbit/s |
| Antivirus Performance | 187 Gbit/s |
| Expansion and I/O |
| Expansion Slots | 8 slots |
| Number of MPU Slots | 2 |
| Interface Types | GE, 10 GE, 40 GE, and 100 GE interfaces |
| SPU | Firewall and application security SPUs |
| Dimensions, Power Supply, and Operating Environment |
| Dimensions (H x W x D) | 175 mm x 442 mm x 650 mm DC 220 mm x 442 mm x 650 mm DC |
| Weight | Vacant chassis: 15 kg, DC Full configuration: 30.7 kg, DC Vacant chassis: 25 kg, AC Full configuration: 40.7 kg, AC |
| Redundant Power Supply | Standard configuration |
| AC Power Supply | 90V AC to 264V AC; 175V AC to 264V AC (recommended) |
| DC Power Supply | -38V to -72V; Rated -48V |
| Power consumption | 3,960W |
| Operating Temperature | Long-term: 0°C to 45°C Short-term: -5°C to 55°C Storage: -40°C to 70°C |
| Ambient Humidity | Long-term: 5% RH to 85% RH, non-condensing Short-term: 5% RH to 95% RH, non-condensing Storage: 0% RH to 95% RH, non-condensing |
Compare to Similar Items
shows the comparison of USG9520-BASE-AC-V3, USG9560-BASE-DC-V3 and
USG9580-BASE-DC-V3.
| Product | USG9520-BASE-AC-V3 | USG9560-BASE-DC-V3 | USG9580-BASE-DC-V3 |
| Expansion Slots | 3 | 8 | 16 |
| Maximum Firewall Throughput | 120 Gbit/s | 720 Gbit/s | 1.44 Tbit/s |
| Maximum Number of Concurrent Sessions | 120 million | 720 million | 1.44 billion |
| Basic Functions | Routing/Transparent/Composite mode, state validation detection,
blacklist and whitelist, access control, Application Specific
Packet Filter (ASPF), security zone division, virtual firewall,
smart route, and load balancing |
| NAT/CGN | Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency,
source IP address pool grouping, NAT Server, bi-directional NAT,
NAT-ALG (Application Layer Gateway), unlimited IP address
expansion, policy-based destination NAT, port range pre-allocation,
hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid
Deployment) |
| NGFW Functions | Supports intrusion detection and prevention, URL filtering,
antivirus, data loss prevention, etc. |
| PKI | PKI certificate requests (PKCS 10), Certificate Authority (CA) PKI authentication: EAP-SIM, EAP-AKA PKI protocol: SCEP, OCSP, and CMPv2
Self-signed certificate |
| Virtual System | 4,096-Virtual Firewall (VFW) definition, VLAN virtualization,
security zones virtualization, user-defined virtual resources,
route between VFW, and VFW-based traffic CAR |
| DDoS Mitigation | SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood Port-scan, Smurf, Tear-drop, and IP-Sweep IPv6-extension-header defense, TTL detection, TCP-mss detection,
and attack log output |
2 . Company
