Huawei USG9500 Data Center Firewall USG9520-BASE-AC-V3 AC Basic Configuration include X3 AC Chassis,2*MPU USG9520-BASE-AC-V3 Overview Huawei USG9520-BASE-AC-V3 USG9500 Data Center Firewall Basic Configuration includes 3 slots chassis with AC power supply, 2*MPU. The Huawei USG9500 series data center firewall is the worlds fastest firewall for data center environment to ensure secure services in the cloud and for large data centers and enterprise campus networks. Integrated switching, routing, and security enable smooth upgrade, carrier-class reliability, comprehensive virtualization, and terabit-level processing capability. Huawei USG9500 firewall uses a hardware platform that often exists in a core router to provide modularized components. Each interface module has two network processors (NPs) to provide line rate forwarding. The SPU uses multi-core CPUs and a multi-thread architecture, and each CPU has an application acceleration engine. These hardware advantages, combined with Huawei optimized concurrent processing technology, increases CPU capacity to ensure the high speed parallel processing of multiple services, such as NAT and VPN. LPUs and SPUs function separately. The overall performance increases linearly with the addition of SPUs so that customers can easily scale up the performance at a low cost. With revolutionized system architecture, the Huawei USG9500 security gateway series has the industrys highest firewall throughput and the most concurrent connections. With dedicated traffic splitting technology, the overall performance of the USG9500 increases linearly with the addition of SPUs. The USG9500 delivers a maximum of 960 Gbps large-packet throughput, 960 million concurrent connections, and 4096 virtual firewalls. The industry leading performance can meet the performance demand of high-end customers, such as television and broadcast systems, government agencies, energy companies, and education organizations. USG9520-BASE-AC-V3 Specification USG9520 Specifications Performance and Capacity Firewall Throughput (maximum)* 120 Gbit/s Firewall Throughput (IMIX Traffic) 120 Gbit/s Maximum Number of Concurrent Sessions 120 million IPSec VPN Performance (1,420 Bytes) 84 Gbit/s Maximum Number of Concurrent IPSec Tunnels 192,000 IPS Performance 38 Gbit/s Antivirus Performance 34 Gbit/s Expansion and I/O Expansion Slots 3 slots Number of MPU Slots 2 Interface Types GE, 10 GE, 40 GE, and 100 GE interfaces SPU Firewall and application security SPUs Dimensions, Power Supply, and Operating Environment Dimensions (H x W x D) 175 mm x 442 mm x 650 mm DC 220 mm x 442 mm x 650 mm DC Weight Vacant chassis: 15 kg, DC Full configuration: 30.7 kg, DC Vacant chassis: 25 kg, AC Full configuration: 40.7 kg, AC Redundant Power Supply Standard configuration AC Power Supply 90V AC to 264V AC, 175V AC to 264V AC (recommended) DC Power Supply -38V to -72V, Rated -48V Power consumption 1,270W Operating Temperature Long-term: 0C to 45C Short-term: -5C to 55C Storage: -40C to 70C Ambient Humidity Long-term: 5% RH to 85% RH, non-condensing Short-term: 5% RH to 95% RH, non-condensing Storage: 0% RH to 95% RH, non-condensing the recommended elements for the USG9520-BASE-AC-V3. Category Model Description SPU and SPC SPU-X3-B X3 Service Processing Unit(Base Board) SPU-X3-20-O-E8KE 20G X3 Firewall Service Processing Unit(oversea) SPC-IPS-20 IPS Service Processing Card LPUF-120 and FPIC E8KE-X-101-24XGE-SFP 24-Port 100/1000Base-X-SFP Flexible Card(P101,1/2wide,Occupy two sub-slots) E8KE-X-101-1X40GE-CFP 1-Port 40GBase LAN CFP Flexible Card(P101,1/2wide,Occupy two sub-slots) Compare to Similar Items shows the comparison of USG9520-BASE-AC-V3, USG9560-BASE-DC-V3 and USG9580-BASE-DC-V3. Product USG9520-BASE-AC-V3 USG9560-BASE-DC-V3 USG9580-BASE-DC-V3 Expansion Slots 3 8 16 Maximum Firewall Throughput 120 Gbit/s 720 Gbit/s 1.44 Tbit/s Maximum Number of Concurrent Sessions 120 million 720 million 1.44 billion Basic Functions Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing NAT/CGN Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency, source IP address pool grouping, NAT Server, bi-directional NAT, NAT-ALG (Application Layer Gateway), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment) NGFW Functions Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc. PKI PKI certificate requests (PKCS 10), Certificate Authority (CA) PKI authentication: EAP-SIM, EAP-AKA PKI protocol: SCEP, OCSP, and CMPv2 Self-signed certificate Virtual System 4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR DDoS Mitigation SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood Port-scan, Smurf, Tear-drop, and IP-Sweep IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output Business
