Focus on Americas Market

USG9520

Part #:

Module #:

Price: US$ 0

Availability: In Stock

* Ship and Warranty by Huawei USA CANADA.
* Price includes USA customs duty and shipping cost.
* Online Price may be wrong or outdated and can NOT be used as proof by anyone or any organization for any purpose.

4U(DC)/5U(AC) Chassis, Dual core distributed platform

Support maximum 120Gbps firewall throughput

3 linear expansion slots, support LPU or SPU

Support GE, 10GE, 40GE, 100GE ports 

Support NAT, CGN, IPSec, Service Awareness, IPS,Anti-Virus, DLP, Anti-DDoS, IPv6, Virtualization features etc.

ModelUSG9520USG9560USG9580
Expansion Slots3816
Maximum Firewall Throughput120 Gbit/s960 Gbit/s1.92 Tbit/s
Maximum Number of Concurrent Sessions160,000,0001,280,000,0002,560,000,000
Basic FunctionsRouting/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing
NAT/CGNDestination NAT/PAT, NAT NO-PAT, source NAT-IP address persistence, source IP address pool grouping, NAT Server, bi-directional NAT, NAT Application Layer Gateway (NAT-ALG), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment)
NGFW FunctionsSupports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc.
PKIPKI certificate requests (PKCS 10), Certificate Authority (CA)
PKI authentications: EAP-SIM, EAP-AKA
PKI protocols: SCEP, OCSP, and CMPv2
Self-signed certificate
Virtual System4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR
DDoS MitigationSYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood
Port-scan, Smurf, Tear-drop, and IP-Sweep
IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output
Data Leak Prevention (DLP)Identifies and filters the transferred files and contents. The USG9500 can identify more than 120 file types, regardless of whether filename extensions are maliciously changed. In addition, the USG9500 can restore and implement content filtering for over 30 types of files, such as Word, Excel, PPT, PDF, and RAR files, to prevent leaks of critical enterprise information.