Huawei Firewall USG6680-AC 0235G7G7 Huawei USG6600 Next-Generation Firewall Huawei Firewall USG6680-AC Overview Huawei USG6680 next-generation firewall is designed for small data centers and large or medium-sized enterprises. The USG6680-AC offers 16GE (RJ-45) ports, 8GE SFP ports, four 10GE (SFP+) ports, 16GB memory and 2 AC power supply,with HW General Security Platform Software Huawei Firewall USG6680-AC​ Specification USG6680-AC Specification Fixed port 4 x 10 GE + 16 GE + 8 SFP Height 3 U Dimensions (H x W x D) 130.5 mm x 442 mm x 415 mm Weight (full configuration) 24 kg HDD Optional. Supports 300 GB hard disks (RAID1 and hot swappable). Redundant Power Supply Standard configuration AC Power Supply 100V to 240V Maximum Power 700W Features NAT, application-specific access control, VPN, intrusion prevention, antivirus, data leak prevention, bandwidth management, anti-DDoS, URL filtering, and anti-spam Functions Context Awareness *Application, Content, Time, User, Attack, Location (ACTUAL)based awareness capabilities *Eight authentication methods (local, RADIUS, HWTACACS, SecureID, AD, CA, LDAP, and Endpoint Security) Application Security *Fine-grained identification of over 6000 application protocols, application-specific action, and online update of protocol databases *Combination of application identification and virus scanning to recognize the viruses (more than 5 millions), Trojan horses, and malware hidden in applications *Combination of application identification and content detection to identify file types and sensitive information to prevent information leaks Intrusion Prevention *Provides over 5,000 signatures for attack identification. *Provides protocol identification to defend against abnormal protocol behaviors. *Supports user-defined IPS signatures. Web Security *Cloud-based URL filtering with a URL category database that contains over 85 million URLs in over 80 categories *Defense against web application attacks, such as cross-site scripting and SQL injection attacks HTTP/HTTPS/FTP-based content awareness to defend against web viruses *URL blacklist and whitelist and keyword filtering Email Security *Real-time anti-spam to detect and filter out phishing emails *Local whitelist and blacklist, remote real-time blacklist, content filtering, keyword filtering, and mail filtering by attachment type, size, and quantity *Virus scanning and notification for POP3/SMTP/IMAP email attachments Data Security *Data leak prevention based on content awareness *File reassembly and data filtering for more than 30 file types (including Word, Excel, PPT, and PDF), and file blocking for more than 120 file types Security Virtualization Virtualization of security features, forwarding statistics, users, management operations, views, and resources (such as bandwidths and sessions) Network Security *Defense against more than 10 types of DDoS attacks, such as the SYN flood and UDP flood attacks *VPN technologies: IPSec VPN, SSL VPN, L2TP VPN, MPLS VPN, and GRE Routing IPv4: static routing, RIP, OSPF, BGP, and IS-IS IPv6: RIPng, OSPFv3, BGP4+, IPv6 IS-IS, IPv6 RD, and ACL6 Working Mode and Availability Transparent, routing, or hybrid working mode and High Availability (HA), including the Active-Active and Active-Standby mode Intelligent Management *Evaluates the network risks based on the passed traffic and intelligently generates policies based on the evaluation to automatically optimize security policies. Supports policy matching ratio analysis and the detection of conflict and redundant policies to remove them, simplifying policy management. *Provides a global configuration view and integrated policy management. The configurations can be completed in one page. *Provides visualized and multi-dimensional report display by user, application, content, time, traffic, threat, and URL. The Modules, Cards, Licenses Table shows the recommended elements for the Huawei USG6680-AC firewall. Category Model Description Business Module Group WSIC-8GE Huawei WSIC-8GE SVN5800 Secure Access Gateways 8GE Electric Ports Interface Card WSIC-8GEF Huawei WSIC-8GEF 8GE Optical Ports Interface Card for USG6600 Next-Generation Firewall. Hard disk Group SM-HDD-SAS300G-A Huawei 300GB 10K RPM SAS Hard Disk Unit SM-HDD-SAS300G-A Function License LIC-VSYS-10-USG6000 Huawei LIC-VSYS-10-USG6000 Quantity of Virtual Firewall (10 Vsys) Software/License LIC-SSL-100-USG6000 Huawei LIC-SSL-100-USG6000 Software/License: Quantity of SSL VPN Concurrent Users License (100 Users) NGFW License LIC-IPS-12-USG6600 Huawei LIC-IPS-12-USG6600 IPS Update Service Subscribe for 12 Months Software/License LIC-URL-12-USG6600 Huawei LIC-URL-12-USG6600 Software/License: URL Filtering Update Service Subscribe for 12 Months LIC-AV-12-USG6600 Huawei Service LIC-AV-12-USG6600 Software/License: Anti-Virus Update Subscribe for 12 Months Basic License LIC-CONTENT Huawei LIC-CONTENT Content Filtering Function Software/License Related products S5700-28P-LI-AC USG6305-W S5700-10P-PWR-LI-AC NIP6650-DC S5700-28C-EI-AC USG6310S NIP6610-AC S6700-48-EI S6720-32C-SI-AC S6720-16X-LI-16S-AC S6720-26Q-SI-24S-AC LIC-IPS24-NIP63-HM Stock
