USG6630E Huawei Next-generation Firewalls Series best price USG6630E/USG6630E-AC HW 120 Gigabit optical + 12 Gigabit power + 2 40G QSFP+ ports hardware firewall Overviews Diversified new applications bring about convenient cyber life as well as more security risks. The identity of a user at an IP address is unclear. On new networks, attackers easily manipulate zombie hosts to use legitimate IP addresses. Attackers can then launch network attacks or forge source IP addresses for spoofing and obtaining permissions. The source IP address of a packet does not represent the user identity. In addition, teleworking and mobile working have emerged. The IP address of a user may change at any time. Traffic control by IP address cannot accommodate new network requirements. The port and protocol of an application are not fixed. Traditional network services run on fixed ports. For example, HTTP runs on port 80, and FTP runs on ports 20 and 21. On new networks, ephemeral ports that are not assigned by the Internet Assigned Numbers Authority (IANA) and random ports (for example, P2P ports) are frequently used by network applications. These applications are hard to control, exhaust bandwidths, and even cause network congestion. Meanwhile, increasing unfixed services start to use well-known ports. With the development of web page technologies, more and more services with different risk levels run on ports 80 and 443 using HTTP and HTTPS, for example, WebMail, web gaming, video streaming, and web chats. The packet content is uncertain. Single-packet detection analyzes only the security of individual packets. This mechanism cannot defend against viruses or Trojan horses during the Internet access. Intranet hosts may accidentally introduce worms, Trojan horses, and viruses, which result in information leaks and losses. Therefore, network security management must identify and monitor traffic contents, in addition to traffic control based on the source and destination IP addresses. Specifications Item Description System specifications CPU Multi-core 1.0 GHz processor Memory DDR3 4 GB Flash 16 MB CF card 2 GB Hard disk Optional hot-swappable 300GB 2.5-inch SAS hard disks SPUB (the service engine) Not supported Dimensions and weight Dimensions (Hb x Wa x D) 44.4 mm x 442 mm x 421 mm Weight Standard: 6 kg Fully configured: 10 kg Power specifications AC power Supported, 150 W built-in power module (default) and 170 W hotswappable power module (optional) Rated input voltage (AC) 100 V to 240 V, 50 Hz/60 Hz Maximum input voltage (AC) 90 V to 264 V, 47 Hz to 63 Hz Maximum input current (AC) 2.5 A DC power Not supported. Maximum output power 150 W (default) or 170 W (optional) Heat dissipation Fan module Built-in fan module, cannot be removed. Air flow (hot air flow, viewed facing the rear panel) Intake on the front and left sides, exhaust on the right side Port density Out-of-band management port 1 (RJ45) Console port 1 (RJ45) USB 2.0 port 1 Mandatory service ports 2 GE Combo ports 4 10/100/1000M autosensing Ethernet electrical ports Expansion slot 2WSIC Types of expansion cards 8GE-WSIC-81GE RJ45 interface card 2XG8GE-WSIC-81GE RJ45+210GE SFP+ interface card 8GEF-WSIC-81GE SFP interface card 4GE-BYPASS-WSIC-2electrical links Bypass card