HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT...
Transcript of HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT...
![Page 1: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/1.jpg)
With the continuous digitalization and cloudification of carrier services, networks play an
important role in carrier operations, and must be protected. Network attackers use various
methods, such as identity spoofing, website Trojan horses, and malware, to initiate network
penetration and attacks, affecting the normal use of carrier networks.
Deploying firewalls on network borders is a common way to protect carrier network security.
However, firewalls can only analyze and block threats based on signatures. This method cannot
effectively handle unknown threats and may deteriorate device performance. This single-point and
passive method does not pre-empt or effectively defend against unknown threat attacks. Threats
hidden in encrypted traffic in particular cannot be effectively identified without breaching user privacy.
Huawei's next-generation firewalls provide the latest capabilities and work with other security
devices to proactively defend against network threats, enhance border detection capabilities,
effectively defend against advanced threats, and resolve performance deterioration problems.
The product provides pattern matching and encryption/decryption service processing
acceleration functions, which greatly improve the firewall ability to process content security
detection and IPSec services.
HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)
Product Appearances
Eudemon1000E Series Firewalls (Fixed-Configuration)
![Page 2: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/2.jpg)
Product HighlightsComprehensive and integrated protection• Integrates the traditional firewall,VPN, intrusionprevention,antivirus,data leakprevention,
bandwidthmanagement,URLfiltering,andonlinebehaviormanagementfunctionsall inonedevice.
• Interworkswiththe localorcloudsandboxtoeffectivelydetectunknownthreatsandpreventzero-dayattacks.
• Implementsrefinedbandwidthmanagementbasedonapplicationsandwebsites,preferentiallyforwardskeyservices,andensuresbandwidthforkeyservices.
High performance• Enablespatternmatchingandacceleratesencryption/decryption, improvingtheperformancefor
processingIPS,antivirus,andIPSecservices.
High port density• Thedevicehasmultipletypesofinterfaces,suchas40G,10G,and1Ginterfaces.Servicescanbe
flexiblyexpandedwithoutextrainterfacecards.
DeploymentSmall data center border protection• Firewallsaredeployedategressesofdatacenters,andfunctionsandsystemresourcescanbe
virtualized.Thefirewallhasmultipletypesof interfaces,suchas40G,10G,and1G interfaces.Servicescanbeflexiblyexpandedwithoutextrainterfacecards.
• The12-Gigabit intrusionpreventioncapabilityeffectivelyblocksavarietyofmaliciousattacksanddeliversdifferentiateddefensebasedonvirtualenvironmentrequirementstoguaranteedatasecurity.
• VPNtunnelscanbesetupbetweenfirewallsandmobileworkersandbetweenfirewallsandbranchofficesforsecureandlow-costremoteaccessandmobileworking.
![Page 3: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/3.jpg)
Endpoint access area WAN access area Internet access area
Common services Important services Core services
V-FWV-FW
Data centerEudemon1000E Eudemon1000E
Carrier border protection• Firewallsaredeployedat thenetworkborder.Thebuilt-in trafficprobecanextractpacketsof
encryptedtraffictomonitorthreatsinencryptedtrafficinrealtime.• Thedeceptionfunctionisenabledonthefirewallstoproactivelyrespondtomaliciousscanning
behavior,protectingcarriersagainstthreatsinrealtime.• Thepolicycontrol,datafiltering,andauditfunctionsofthefirewallsareusedtomonitorsocial
networkapplicationstopreventdatabreachandprotectcarriernetworks.
Software Features
Feature Description
IntegratedprotectionIntegrates firewall,VPN, intrusionprevention,antivirus,data leakprevention,bandwidthmanagement,anti-DDoS,URL filtering,andanti-spam functions;providesaglobalconfigurationview;managespoliciesinaunifiedmanner.
Applicationidentificationandcontrol
Identifiesover6000applicationsandsupports theaccesscontrolgranularitydowntoapplicationfunctions;combinesapplication identificationwith intrusiondetection,antivirus,anddata filtering, improvingdetectionperformanceandaccuracy.
Cloud-basedmanagementmode
Initiatesauthenticationandregistrationtothecloud-basedmanagementplatformtoimplementplug-and-playandsimplifynetworkcreationanddeployment.Supportsremoteserviceconfiguration,devicemonitoring,andfaultmanagement,implementingthemanagementofmassdevicesinthecloud.
Cloudapplicationsecurityawareness
Controlscarriercloudapplicationsinarefinedanddifferentiatedmannertomeetcarriers'requirementsforcloudapplicationmanagement.
![Page 4: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/4.jpg)
Feature Description
Intrusionpreventionandwebprotection
Accuratelydetectsanddefendsagainstvulnerability-specificattacksbasedonup-to-datethreat information.Thefirewallcandefendagainstweb-specificattacks,includingSQLinjectionandXSSattacks.
AntivirusRapidlydetectsover5milliontypesofvirusesbasedonthedaily-updatedvirussignaturedatabase.
Dataleakprevention(DLP)
Inspectsfilestoidentifythefiletypes,suchasWORD,EXCEL,POWERPOINT,andPDF,basedonfilecontent,andfiltersthefilecontent.
Bandwidthmanagement
Managesper-user andper-IPbandwidth in addition to identifying serviceapplicationstoensurethenetworkaccessexperienceofkeyservicesandusers.Controlmethodsincludelimitingthemaximumbandwidth,ensuringtheminimumbandwidth,andchangingapplicationforwardingpriorities.
URLfiltering
ProvidesaURLcategorydatabasewithover120millionURLsandacceleratesaccesstospecificcategoriesofwebsites,improvingaccessexperienceofhigh-prioritywebsites.SupportsDNSfiltering,inwhichaccessedwebpagesarefilteredbasedondomainnames.Supports theSafeSearchfunctiontofilter resourcesofsearchengines,suchasGoogle,toguaranteeaccesstoonlyhealthynetworkresources.
Behaviorandcontentaudit
Auditsandtracesthesourcesoftheaccessedcontentbasedonusers.
LoadbalancingSupportsserver loadbalancingand link loadbalancing, fullyutilizingexistingnetworkresources.
Intelligentuplinkselection
Supportsservice-specificPBRand intelligentuplinkselectionbasedonmultipleloadbalancingalgorithms(forexample,basedonbandwidthratioandlinkhealthstatus)inmulti-egressscenarios.
VPNencryptionSupportsmultiplehighlyavailableVPNfeatures, suchas IPSecVPN,SSLVPN,L2TPVPN,MPLSVPN,andGRE,andprovidestheHuawei-proprietaryVPNclientSecoClientforSSLVPN,L2TPVPN,andL2TPoverIPSecVPNremoteaccess.
DSVPNDynamicsmartVPN(DSVPN)establishesVPNtunnelsbetweenbrancheswhosepublicaddressesaredynamicallychanged, reducingthenetworkingandO&Mcostsofthebranches.
SSL-encryptedtrafficdetection
DetectsanddefendsagainstthreatsinSSL-encryptedtrafficusingapplication-layerprotectionmethods,suchasintrusionprevention,antivirus,datafiltering,andURLfiltering.
SSLoffloadingReplacesserverstoimplementSSLencryptionanddecryption,effectivelyreducingserverloadsandimplementingHTTPtrafficloadbalancing.
Anti-DDoSDefendsagainstmorethan10typesofcommonDDoSattacks, includingSYNfloodandUDPfloodattacks.
UserauthenticationSupportsmultipleuserauthenticationmethods,includinglocal,RADIUS,HWTACACS,AD,andLDAP.Thefirewallsupportsbuilt-inPortalandPortalredirectionfunctions.ItcanworkwiththeAgileControllertoimplementmultipleauthenticationmodes.
SecurityvirtualizationSupportsvirtualizationofmultiple typesofsecurityservices, includingfirewall,intrusionprevention,antivirus,andVPN.Userscanseparatelyconductpersonalmanagementonthesamephysicaldevice.
![Page 5: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/5.jpg)
Feature Description
Securitypolicymanagement
Managesandcontrols trafficbasedonVLAN IDs,quintuples, securityzones,regions,applications,URLcategories,andtimeranges,andimplementsintegratedcontentsecuritydetection.Providespredefinedcommon-scenariodefense templates to facilitatesecuritypolicydeployment.Providessecuritypolicymanagementsolutions inpartnershipwithFireMonandAlgoSectoreduceO&Mcostsandpotentialfaults.
Diversifiedreports
Providesvisualizedandmulti-dimensional reportdisplaybyuser,application,content,time,traffic,threat,andURL.
GeneratesnetworksecurityanalysisreportsontheHuaweisecuritycenterplatformtoevaluatethecurrentnetworksecuritystatusandprovideoptimizationsuggestions.
RoutingSupportsmultipletypesofroutingprotocolsandfeatures,suchasRIP,OSPF,BGP,IS-IS,RIPng,OSPFv3,BGP4+,andIPv6IS-IS.
Deploymentandreliability
Supportstransparent,routing,andhybridworkingmodesandhighavailability(HA),includingtheActive/ActiveandActive/Standbymodes.
ModelEudemon1000E-G15
Eudemon1000E-G25
Eudemon1000E-G35
Eudemon1000E-G55
FirewallThroughput1(1518/512/64-byte,UDP)
10/10/10Gbit/s 20/20/20Gbit/s 30/30/30Gbit/s 40/40/38Gbit/s
FirewallLatency(64-byte,UDP) 15µs 15µs 15µs 15µs
ConcurrentSessions(HTTP1.1)1 6,000,000 8,000,000 10,000,000 12,000,000
NewSessions/Second(HTTP1.1)1 200,000 200,000 400,000 400,000
IPsecVPNThroughput1(AES-256+SHA256,1420-byte)
10Gbit/s 20Gbit/s 30Gbit/s 30Gbit/s
SSLInspectionThroughput2 3Gbit/s 3Gbit/s 6Gbit/s 6Gbit/s
ConcurrentSSLVPNUsers(Default/Maximum)
100/2000 100/2000 100/5000 100/5000
SecurityPolicies(Maximum) 40,000 40,000 40,000 40,000
VirtualFirewalls 200 200 500 500
URLFiltering:Categories Morethan130
URLFiltering:URLs Adatabaseofover120millionURLsinthecloud
AutomatedThreatFeedbackandIPSSignatureUpdates
Yes,anindustry-leadingsecuritycenterfromHuawei(http://sec.huawei.com/sec/web/index.do)
SpecificationsSystem Performance and Capacity
![Page 6: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/6.jpg)
1. TheperformanceistestedunderidealconditionsbasedonRFC2544andRFC3511.Theactualresultmayvarywithdeploymentenvironments.
2. SSLinspectionthroughputismeasuredwithIPSenabledandHTTPStrafficusingTLSv1.2withAES128-GCM-SHA256.*SA:indicatesserviceawareness.
ModelEudemon1000E-G15
Eudemon1000E-G25
Eudemon1000E-G35
Eudemon1000E-G55
Third-PartyandOpen-SourceEcosystem
OpenAPIforintegrationwiththird-partyproducts,providingRESTfulandNetConfinterfacesOtherthird-partmanagementsoftwarebasedonSNMP,SSH,andSyslogCo-operationwiththird-partytools,suchasTufin,AlgoSec,andFireMmonCollaborationwithanti-APTsolution
CentralizedManagementCentralizedconfiguration,logging,monitoring,andreportingisperformedbyHuaweieSightandeLog
VLANs(Maximum) 4094
VLANIFInterfaces(Maximum) 1024
ModelEudemon1000E-G15
Eudemon1000E-G25
Eudemon1000E-G35
Eudemon1000E
Dimensions(HxWxD)mm 43.6x442x420
FormFactor/Height 1U
FixedInterface6x10GE(SFP+)+6xGE(SFP)+16xGE
2x40GE(QSFP+)+12x10GE(SFP+)+ 16xGE*
USBPort 1xUSB3.0
Weight(FullConfiguration) 7.6kg
ExternalStorage Optional,SSD(1x2.5inch)supported,240GB/HDD1TB
PowerSupply 100Vto240V
Typicalpowerconsumptionofthemachine
104.5W 136.1W
PowerSupplies OptionaldualACpowersupplies DualACpowersupplies
OperatingEnvironment(Temperature/Humidity)
Temperature:0°Cto45°CHumidity:5%to95%,non-condensing
Non-operatingEnvironmentTemperature:-40°Cto+70°CHumidity:5%to95%,non-condensing
Hardware Specifications
*Some10Gportsand40Gportsaremutuallyexclusive.Theportscanbeconfiguredasfollows:2x40GE(QSFP+)+8x10GE(SFP+)+ 16xGE(RJ45)+1xUSBor1x40GE(QSFP+)+12x10GE(SFP+)+16xGE(RJ45)+1xUSB.
-G55
![Page 7: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/7.jpg)
Product Model Description
Eudemon1000E-G15 Eudemon1000E-G15-ACEudemon1000E-G15ACHost(16*GERJ45+6*GESFP+6*10GESFP+,8GMemory,1ACpower)
Eudemon1000E-G25 Eudemon1000E-G25-ACEudemon1000E-G25ACHost (16*GERJ45+6*GESFP+6*10GESFP+,8GMemory,1ACpower)
Eudemon1000E-G35 Eudemon1000E-G35-ACEudemon1000E-G3-ACHost(16*GERJ45+12*10GESFP++2*40GEQSFP+,16GMemory,2ACpower)
Eudemon1000E-G55 Eudemon1000E-G55-ACEudemon1000E-G55ACHost(16*GERJ45+12*10GESFP++2*40GEQSFP+,16GMemory,2ACpower)
Function License
SSLVPNConcurrentUsers
LIC-EDMLM-SSLVPN-100 QuantityofSSLVPNConcurrentUsers(100Users)
LIC-EDMLM-SSLVPN-200 QuantityofSSLVPNConcurrentUsers(200Users)
LIC-EDMLM-SSLVPN-500 QuantityofSSLVPNConcurrentUsers(500Users)
LIC-EDMLM-SSLVPN-1000 QuantityofSSLVPNConcurrentUsers(1000Users)
LIC-EDMLM-SSLVPN-2000 QuantityofSSLVPNConcurrentUsers(2000Users)
LIC-EDMLM-SSLVPN-5000 QuantityofSSLVPNConcurrentUsers(5000Users)
VirtualFirewall
LIC-EDMLM-VSYS-10 QuantityofVirtualFirewall(10Vsys)
LIC-EDMLM-VSYS-20 QuantityofVirtualFirewall(20Vsys)
LIC-EDMLM-VSYS-50 QuantityofVirtualFirewall(50Vsys)
LIC-EDMLM-VSYS-100 QuantityofVirtualFirewall(100Vsys)
LIC-EDMLM-VSYS-200 QuantityofVirtualFirewall(200Vsys)
LIC-EDMLM-VSYS-500 QuantityofVirtualFirewall(500Vsys)
LIC-EDMLM-01-VSYS EnhancedVirtualFirewallFunction
NGFW License
IPSUpdateService
LIC-E1KE-G15-IPS-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G15)
LIC-E1KE-G15-IPS-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G15)
LIC-E1KE-G25-IPS-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G25)
LIC-E1KE-G25-IPS-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G25)
LIC-E1KE-G35-IPS-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G35)
LIC-E1KE-G35-IPS-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G35)
Ordering Information
![Page 8: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/8.jpg)
Product Model Description
LIC-E1KE-G55-IPS-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G55)
LIC-E1KE-G55-IPS-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G55)
URLFilteringUpdateService
LIC-E1KE-G15-URL-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G15)
LIC-E1KE-G15-URL-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G15)
LIC-E1KE-G25-URL-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G25)
LIC-E1KE-G25-URL-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G25)
LIC-E1KE-G35-URL-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G35)
LIC-E1KE-G35-URL-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G35)
LIC-E1KE-G55-URL-1YIPSUpdateServiceSubscribe12Months(AppliestoE1000E-G55)
LIC-E1KE-G55-URL-3YIPSUpdateServiceSubscribe36Months(AppliestoE1000E-G55)
AntivirusUpdateService
LIC-E1KE-G15-AV-1YAVUpdateServiceSubscribe12Months(AppliestoE1000E-G15)
LIC-E1KE-G15-AV-3YAVUpdateServiceSubscribe36Months(AppliestoE1000E-G15)
LIC-E1KE-G25-AV-1YAVUpdateServiceSubscribe12Months(AppliestoE1000E-G25)
LIC-E1KE-G25-AV-3YAVUpdateServiceSubscribe36Months(AppliestoE1000E-G25)
LIC-E1KE-G35-AV-1YAVUpdateServiceSubscribe12Months(AppliestoE1000E-G35)
LIC-E1KE-G35-AV-3YAVUpdateServiceSubscribe36Months(AppliestoE1000E-G35)
LIC-E1KE-G55-AV-1YAVUpdateServiceSubscribe12Months(AppliestoE1000E-G55)
LIC-E1KE-G55-AV-3YAVUpdateServiceSubscribe36Months(AppliestoE1000E-G55)
ThreatProtectionBundle(IPS,AV,URL)
LIC-E1KE-G15-TP-1Y-OVSThreatProtectionSubscription12Months(AppliestoE1000E-G15)
LIC-E1KE-G15-TP-3Y-OVSThreatProtectionSubscription36Months(AppliestoE1000E-G15)
![Page 9: HUAWEI Eudemon1000E Series Firewalls (Fixed-Configuration)/media/CNBGV2/download/...1.heformanceT per is tested under ideal conditions based on RFC2544 and RFC3511. The actual result](https://reader033.fdocuments.in/reader033/viewer/2022052616/60a9c938b48567018a02aec9/html5/thumbnails/9.jpg)
Product Model Description
LIC-E1KE-G25-TP-1Y-OVSThreatProtectionSubscription12Months(AppliestoE1000E-G25)
LIC-E1KE-G25-TP-3Y-OVSThreatProtectionSubscription36Months(AppliestoE1000E-G25)
LIC-E1KE-G35-TP-1Y-OVSThreatProtectionSubscription12Months(AppliestoE1000E-G35)
LIC-E1KE-G35-TP-3Y-OVSThreatProtectionSubscription36Months(AppliestoE1000E-G35)
LIC-E1KE-G55-TP-1Y-OVSThreatProtectionSubscription12Months(AppliestoE1000E-G55)
LIC-E1KE-G55-TP-3Y-OVSThreatProtectionSubscription36Months(AppliestoE1000E-G55)
FlowProbe
LIC-E1KE-G15-FP FlowProbeFunction(AppliestoE1000E-G15)
LIC-E1KE-G25-FP FlowProbeFunction(AppliestoE1000E-G25)
LIC-E1KE-G35-FP FlowProbeFunction(AppliestoE1000E-G35)
LIC-E1KE-G55-FP FlowProbeFunction(AppliestoE1000E-G55)
GENERAL DISCLAIMERThe information in this document may contain predictive statement including, without limitation, statements regarding the future financial and operating results, future product portfolios, new technologies, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.Copyright © 2020 HUAWEI TECHNOLOGIES CO., LTD. All Rights Reserved.