Huawei Firewall USG9560-BASE-DC-V3,USG9560 DC Basic Configuration with X8 DC Chassis,2SRU,1SFU Overview Huawei USG9560-BASE-DC-V3 USG9500 Data Center Firewall Basic Configuration includes 8 slots Chassis with DC power supply, 2*SRU,1*SFU. Huawei USG9500 data center firewall is the worlds fastest firewall for data center environment to ensure secure services in the cloud and for large data centers and enterprise campus networks. Integrated switching, routing, and security enable smooth upgrade, carrier-class reliability, comprehensive virtualization, and terabit-level processing capability. The Huawei USG9500 uses a hardware platform that often exists in a core router to provide modularized components. Each interface module has two network processors (NPs) to provide line rate forwarding. The SPU uses multi-core CPUs and a multi-thread architecture, and each CPU has an application acceleration engine. These hardware advantages, combined with Huawei optimized concurrent processing technology, increases CPU capacity to ensure the high speed parallel processing of multiple services, such as NAT and VPN. LPUs and SPUs function separately. The overall performance increases linearly with the addition of SPUs so that customers can easily scale up the performance at a low cost. With revolutionized system architecture, the Huawei USG9500 security gateway series has the industrys highest firewall throughput and the most concurrent connections. With dedicated traffic splitting technology, the overall performance of the USG9500 increases linearly with the addition of SPUs. The USG9500 delivers a maximum of 960 Gbps large-packet throughput, 960 million concurrent connections, and 4096 virtual firewalls. The industry leading performance can meet the performance demand of high-end customers, such as television and broadcast systems, government agencies, energy companies, and education organizations. Product specifications USG9560 Specifications Performance and Capacity Firewall Throughput (maximum)* 720 Gbit/s Firewall Throughput (IMIX Traffic) 720 Gbit/s Maximum Number of Concurrent Sessions 720 million IPSec VPN Performance (1,420 Bytes) 336 Gbit/s Maximum Number of Concurrent IPSec Tunnels 768,000 IPS Performance 209 Gbit/s Antivirus Performance 187 Gbit/s Expansion and I/O Expansion Slots 8 slots Number of MPU Slots 2 Interface Types GE, 10 GE, 40 GE, and 100 GE interfaces SPU Firewall and application security SPUs Dimensions, Power Supply, and Operating Environment Dimensions (H x W x D) 175 mm x 442 mm x 650 mm DC 220 mm x 442 mm x 650 mm DC Weight Vacant chassis: 15 kg, DC Full configuration: 30.7 kg, DC Vacant chassis: 25 kg, AC Full configuration: 40.7 kg, AC Redundant Power Supply Standard configuration AC Power Supply 90V AC to 264V AC, 175V AC to 264V AC (recommended) DC Power Supply -38V to -72V, Rated -48V Power consumption 3,960W Operating Temperature Long-term: 0C to 45C Short-term: -5C to 55C Storage: -40C to 70C Ambient Humidity Long-term: 5% RH to 85% RH, non-condensing Short-term: 5% RH to 95% RH, non-condensing Storage: 0% RH to 95% RH, non-condensing Compare to Similar Items shows the comparison of USG9520-BASE-AC-V3, USG9560-BASE-DC-V3 and USG9580-BASE-DC-V3. Product USG9520-BASE-AC-V3 USG9560-BASE-DC-V3 USG9580-BASE-DC-V3 Expansion Slots 3 8 16 Maximum Firewall Throughput 120 Gbit/s 720 Gbit/s 1.44 Tbit/s Maximum Number of Concurrent Sessions 120 million 720 million 1.44 billion Basic Functions Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing NAT/CGN Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency, source IP address pool grouping, NAT Server, bi-directional NAT, NAT-ALG (Application Layer Gateway), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment) NGFW Functions Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc. PKI PKI certificate requests (PKCS 10), Certificate Authority (CA) PKI authentication: EAP-SIM, EAP-AKA PKI protocol: SCEP, OCSP, and CMPv2 Self-signed certificate Virtual System 4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR DDoS Mitigation SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood Port-scan, Smurf, Tear-drop, and IP-Sweep IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output 2 . Company
