LonRise Equipment Co. Ltd.
LonRise Equipment Co. Ltd. Better Service Better Business
Add to Cart
Huawei USG9520-BASE-AC-V3 USG9500 Data Center Firewall Basic Configuration includes 3 slots chassis with AC power supply, 2*MPU. The Huawei USG9500 series data center firewall is the world’s fastest firewall for data center environment to ensure secure services in the cloud and for large data centers and enterprise campus networks. Integrated switching, routing, and security enable smooth upgrade, carrier-class reliability, comprehensive virtualization, and terabit-level processing capability. Huawei USG9500 firewall uses a hardware platform that often exists in a core router to provide modularized components. Each interface module has two network processors (NPs) to provide line rate forwarding. The SPU uses multi-core CPUs and a multi-thread architecture, and each CPU has an application acceleration engine. These hardware advantages, combined with Huawei optimized concurrent processing technology, increases CPU capacity to ensure the high speed parallel processing of multiple services, such as NAT and VPN. LPUs and SPUs function separately. The overall performance increases linearly with the addition of SPUs so that customers can easily scale up the performance at a low cost.
With revolutionized system architecture, the Huawei USG9500 security gateway series has the industry's highest firewall throughput and the most concurrent connections. With dedicated traffic splitting technology, the overall performance of the USG9500 increases linearly with the addition of SPUs. The USG9500 delivers a maximum of 960 Gbps large-packet throughput, 960 million concurrent connections, and 4096 virtual firewalls. The industry leading performance can meet the performance demand of high-end customers, such as television and broadcast systems, government agencies, energy companies, and education organizations.
USG9520 Specifications | |
| Performance and Capacity | |
| Firewall Throughput (maximum)* | 120 Gbit/s |
| Firewall Throughput (IMIX Traffic) | 120 Gbit/s |
| Maximum Number of Concurrent Sessions | 120 million |
| IPSec VPN Performance (1,420 Bytes) | 84 Gbit/s |
| Maximum Number of Concurrent IPSec Tunnels | 192,000 |
| IPS Performance | 38 Gbit/s |
| Antivirus Performance | 34 Gbit/s |
| Expansion and I/O | |
| Expansion Slots | 3 slots |
| Number of MPU Slots | 2 |
| Interface Types | GE, 10 GE, 40 GE, and 100 GE interfaces |
| SPU | Firewall and application security SPUs |
| Dimensions, Power Supply, and Operating Environment | |
| Dimensions (H x W x D) | 175 mm x 442 mm x 650 mm DC 220 mm x 442 mm x 650 mm DC |
| Weight | Vacant chassis: 15 kg, DC Full configuration: 30.7 kg, DC Vacant chassis: 25 kg, AC Full configuration: 40.7 kg, AC |
| Redundant Power Supply | Standard configuration |
| AC Power Supply | 90V AC to 264V AC; 175V AC to 264V AC (recommended) |
| DC Power Supply | -38V to -72V; Rated -48V |
| Power consumption | 1,270W |
| Operating Temperature | Long-term: 0°C to 45°C Short-term: -5°C to 55°C Storage: -40°C to 70°C |
| Ambient Humidity | Long-term: 5% RH to 85% RH, non-condensing Short-term: 5% RH to 95% RH, non-condensing Storage: 0% RH to 95% RH, non-condensing |
the recommended elements for the USG9520-BASE-AC-V3.
| Category | Model | Description |
| SPU and SPC
|
| X3 Service Processing Unit(Base Board) |
|
| 20G X3 Firewall Service Processing Unit(oversea) | |
|
| IPS Service Processing Card | |
| LPUF-120 and FPIC
|
| 24-Port 100/1000Base-X-SFP Flexible Card(P101,1/2wide,Occupy two sub-slots) |
|
| 1-Port 40GBase LAN CFP Flexible Card(P101,1/2wide,Occupy two sub-slots) |
| Product | USG9520-BASE-AC-V3 | USG9560-BASE-DC-V3 | USG9580-BASE-DC-V3 |
| Expansion Slots | 3 | 8 | 16 |
| Maximum Firewall Throughput | 120 Gbit/s | 720 Gbit/s | 1.44 Tbit/s |
| Maximum Number of Concurrent Sessions | 120 million | 720 million | 1.44 billion |
| Basic Functions | Routing/Transparent/Composite mode, state validation detection, blacklist and whitelist, access control, Application Specific Packet Filter (ASPF), security zone division, virtual firewall, smart route, and load balancing | ||
| NAT/CGN | Destination NAT/PAT, NAT NO-PAT, source NAT-IP address persistency, source IP address pool grouping, NAT Server, bi-directional NAT, NAT-ALG (Application Layer Gateway), unlimited IP address expansion, policy-based destination NAT, port range pre-allocation, hair pinning mode, SMART NAT, NAT64, DS-Lite, and 6RD (IPv6 Rapid Deployment) | ||
| NGFW Functions | Supports intrusion detection and prevention, URL filtering, antivirus, data loss prevention, etc. | ||
| PKI | PKI certificate requests (PKCS 10), Certificate Authority (CA) PKI authentication: EAP-SIM, EAP-AKA PKI protocol: SCEP, OCSP, and CMPv2 | ||
| Virtual System | 4,096-Virtual Firewall (VFW) definition, VLAN virtualization, security zones virtualization, user-defined virtual resources, route between VFW, and VFW-based traffic CAR | ||
| DDoS Mitigation | SYN-flood, ICMP-flood, TCP-flood, UDP-flood, and DNS-flood Port-scan, Smurf, Tear-drop, and IP-Sweep IPv6-extension-header defense, TTL detection, TCP-mss detection, and attack log output | ||
Business
