Huawei HiSecEngine USG6510E and USG6530E are new-generation desktop firewalls designed

for small enterprises, industry branches, and chain business organizations. In addition to the

traditional firewall management mode, the cloud-based management mode is supported. The

cloud-based management mode provides plug-and-play, automated service configuration,

automated and visualized O&M, and big data analytics for a large number of branches to

access the network securely. The Huawei-proprietary network processing chip provides pattern

matching and encryption/decryption service processing acceleration capabilities, which greatly

improve the performance for firewalls to process content security detection and IPSec services.

HUAWEI HiSecEngine USG6500E Series Firewalls (Desktop)

Product Appearances

HiSecEngine USG6500E Series (Desktop)

Product HighlightsComprehensive and integrated protection• Integrates the traditional firewall,VPN, intrusionprevention,antivirus,data leakprevention,

bandwidthmanagement,andonlinebehaviormanagementfunctionsallinonedevice.• Providesrefinedbandwidthmanagementandguaranteesbandwidthforkeyservicesbasedon

applicationsandwebsitecategories,sothatkeyservicescanbepreferentiallyforwarded.

Quick deployment, simple O&M, and cloud-based management• Initiatesauthenticationandregistrationtothecloud-basedmanagementplatformtoimplement

plug-and-playandsimplifynetworkcreationanddeployment.• Uses remoteserviceconfigurationmanagement,devicemonitoring,and faultmanagement,

implementingcloud-basedmanagementofmassdevicesandsimplifyingO&M.

Chip-based performance improvement• Uses theHuawei-proprietarynetworkprocessing chip, improving forwardingperformance

significantly.• Enables chip-levelpatternmatchingandacceleratesencryption/decryption, improving the

performanceforprocessingIPS,antivirus,andIPSecservices.

DeploymentCloud-based management• Firewalls canproactively registerwithandbequickly incorporated into the cloud-based

managementplatformtoimplementquickdevicedeploymentwithoutmanualattendance.• Remoteserviceconfigurationmanagement,devicemonitoring,andfaultmanagementareused

toimplementcloud-basedmanagementofmassdevicesandsimplifyO&M.

Enterprise HQ

Huawei Public Cloud

Enterprise Branch

Internet

......

Access to enterprise networks• Thedevices supportUSB-baseddeployment, simplifyingdevicedeployment. Centralized

managementissupportedtoreducedeviceO&Mcosts.• IPSecVPNensuresaccesssecurity. IPSec intelligentuplinkselectionautomaticallydetects link

qualityandperformsintelligenttunnelswitchingtoensureservicecontinuity.• Thedevices canworkwith theAgileController to formabranchaccess security solution

thatprovides services suchasuserauthenticationandportal customization.This solutionimplementsunifiedauthentication,unifiedO&M,andunified logmanagement.Centralizedservicemanagementeasesthedifficultyofmanagingbranchofficeswhileallowingforplatformcustomizationforbranchestoperformtargetedmarketing.

AC NMS LogCenter

Customer devices Customer devices

AAA

Branch

Outlet Outlet

IPSec VPN

......

Internet

Software Features

Feature Description

IntegratedprotectionIntegrates firewall,VPN, intrusionprevention,antivirus,data leakprevention,bandwidthmanagement, andURL filtering functions; provides a globalconfigurationviewandintegratedpolicymanagement.

Applicationidentificationandcontrol

Identifies commonapplications; supportsapplication-specificaccess control;combinesapplication identificationwith intrusiondetection,antivirus,anddatafiltering,improvingdetectionperformanceandaccuracy.

Cloud-basedmanagementmode

Initiatesauthenticationandregistrationtothecloud-basedmanagementplatformtoimplementplug-and-playandsimplifynetworkcreationanddeployment.Supportsremoteserviceconfiguration,devicemonitoring,andfaultmanagement,implementingthemanagementofmassdevicesinthecloud.

Cloudapplicationsecurityawareness

Controlsenterprisecloudapplications inarefinedanddifferentiatedmannertomeetenterprises'requirementsforcloudapplicationmanagement.

Intrusionpreventionandwebprotection

Accuratelydetectsanddefendsagainstvulnerability-specificattacksbasedonup-to-datethreat information.Thefirewallcandefendagainstweb-specificattacks,includingSQLinjectionandXSSattacks.

AntivirusRapidlydetectsover5milliontypesofvirusesbasedonthedaily-updatedvirussignaturedatabase.

Dataleakprevention(DLP)

Inspectsfilestoidentifythefiletypes,suchasWORD,EXCEL,POWERPOINT,andPDF,basedonfilecontent,andfiltersthefilecontent.

Bandwidthmanagement

Managesper-user andper-IPbandwidth in addition to identifying serviceapplicationstoensurethenetworkaccessexperienceofkeyservicesandusers.Controlmethodsincludelimitingthemaximumbandwidth,ensuringtheminimumbandwidth,andchangingapplicationforwardingpriorities.

URLfiltering

ProvidesaURLcategorydatabasewithover120millionURLsandacceleratesaccesstospecificcategoriesofwebsites,improvingaccessexperienceofhigh-prioritywebsites.SupportsDNSfiltering,inwhichaccessedwebpagesarefilteredbasedondomainnames.Supports theSafeSearchfunctiontofilter resourcesofsearchengines,suchasGoogle,toguaranteeaccesstoonlyhealthynetworkresources.

Behaviorandcontentaudit

Auditsandtracesthesourcesoftheaccessedcontentbasedonusers.

Loadbalancing Supportslinkloadbalancingtomakefulluseofexistingnetworkresources.

Intelligentuplinkselection

Supportsservice-specificPBRand intelligentuplinkselectionbasedonmultipleloadbalancingalgorithms(forexample,basedonbandwidthratioandlinkhealthstatus)inmulti-egressscenarios.

VPNencryptionSupportsmultiplehighlyavailableVPNfeatures,suchasIPSecVPN,SSLVPN,L2TPVPN,andGRE,andprovidestheHuawei-proprietaryVPNclientSecoClientforSSLVPN,L2TPVPN,andL2TPoverIPSecVPNremoteaccess.

DSVPNDynamicsmartVPNestablishesVPNtunnelsbetweenbrancheswhosepublicaddressesaredynamicallychanged,reducingthenetworkingandO&Mcostsofthebranches.

Feature Description

SSL-encryptedtrafficdetection

DetectsanddefendsagainstthreatsinSSL-encryptedtrafficusingapplication-layerprotectionmethods,suchasintrusionprevention,antivirus,datafiltering,andURLfiltering.

UserauthenticationSupportsmultiple user authenticationmethods, including local, RADIUS,HWTACACS,AD,andLDAP;supportsbuilt-inPortalandPortalredirectionfunctions;workswiththeAgileControllertoimplementmultipleauthenticationmodes.

SecurityvirtualizationSupportsvirtualizationofmultiple typesofsecurityservices, includingfirewall,intrusionprevention,antivirus,andVPN.Userscanseparatelyconductpersonalmanagementonthesamephysicaldevice.

PolicyManagement

Managesandcontrols trafficbasedonVLAN IDs,quintuples, securityzones,regions,applications,URLcategories,andtimeranges,andimplementsintegratedcontentsecuritydetection.Providespredefinedcommon-scenariodefense templates to facilitatesecuritypolicydeployment.Providessecuritypolicymanagementsolutions inpartnershipwithFireMonandAlgoSectoreduceO&Mcostsandpotentialfaults.

Diversifiedreports

Providesvisualizedandmulti-dimensional reportdisplaybyuser,application,content,time,traffic,threat,andURL.

Generatesnetwork security analysis reportson theHuawei security centerplatformtoevaluatethecurrentnetworksecuritystatusandprovideoptimizationsuggestions.

RoutingSupportsmultipletypesofroutingprotocolsandfeatures,suchasRIP,OSPF,BGP,IS-IS,RIPng,OSPFv3,BGP4+,andIPv6IS-IS.

Deploymentmode Supportstransparent,routing,andhybridworkingmodes.

1.TheHiSecEngineUSG6510Esupportsthedetectionof2millionviruses.

Model USG6510E USG6530E

FirewallThroughput1

(1518/512/64-byte,UDP)1.2/1.2/1.2Gbit/s 4/4/4Gbit/s

FirewallLatency(64-byte,UDP) 15µs 18µs

FW+SA+IPSThroughput2 0.6Gbit/s 1.5Gbit/s

FW+SA+IPS+AntivirusThroughput2 0.6Gbit/s 1.5Gbit/s

ConcurrentSessions(HTTP1.1)1 300,000 500,000

NewSessions/Second(HTTP1.1)1 20,000 30,000

IPsecVPNThroughput1(AES-256+SHA256,1420-byte)

1Gbit/s 3Gbit/s

SpecificationsSystem Performance and Capacity

Model USG6510E USG6530E

Dimensions(HxWxD)mm 43.6x250x210

FormFactor/Height Desktop

FixedInterface 2xGE(SFP)+10xGE 2x10GE(SFP+)+10xGE

USBPort 1xUSB3.0

Weight(FullConfiguration) 1.5kg

ExternalStorage Optional,Micro-SDcardsupported,64GB/128GB

ACPowerSupply 100Vto240V

Power 36W

PowerSupplies Externalpoweradapter

Hardware Specifications

1.TheperformanceistestedunderidealconditionsbasedonRFC2544andRFC3511.Theactualresultmayvarywithdeploymentenvironments.

2.TheAntivirus,IPS,andSAperformanceismeasuredusing100KBHTTPfiles.3.SSLinspectionthroughputismeasuredwithIPSenabledandHTTPStrafficusingTLSv1.2withAES128-GCM-SHA256.*SA:indicatesserviceawareness.

Model USG6510E USG6530E

SSLInspectionThroughput3 200Mbit/s 300Mbit/s

ConcurrentSSLVPNUsers(Default/Maximum)

100/100 100/500

SecurityPolicies(Maximum) 1,000 3,000

VirtualFirewalls 10 20

URLFiltering:Categories Morethan130

URLFiltering:URLs Adatabaseofover120millionURLsinthecloud

AutomatedThreatFeedbackandIPSSignatureUpdates

Yes,anindustry-leadingsecuritycenterfromHuawei(http://sec.huawei.com/sec/web/index.do)

Third-PartyandOpen-SourceEcosystem

OpenAPIforintegrationwiththird-partyproducts,providingRESTfulandNetConfinterfacesOtherthird-partymanagementsoftwarebasedonSNMP,SSH,andSyslogCooperationwiththird-partytools,suchasTufin,AlgoSec,andFireMonCollaborationwithanti-APTsolution

CentralizedManagementCentralizedconfiguration,logging,monitoring,andreportingisperformedbyHuaweieSightandeLog.

VLANs(Maximum) 4094

VLANIFInterfaces(Maximum) 256 1024

GENERAL DISCLAIMERThe information in this document may contain predictive statement including, without limitation, statements regarding the future financial and operating results, future product portfolios, new technologies, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.Copyright © 2019 HUAWEI TECHNOLOGIES CO., LTD. All Rights Reserved.

Ordering Information

Product Model Description

USG6510E USG6510E-ACUSG6510EACHost(2*GE(SFP)+10*GE,withAC/DCAdapter)

USG6530E USG6530E-ACUSG6530EACHost(2*10GE(SFP+)+10*GE,withAC/DCAdapter)

Function License

SSLVPNConcurrentUsers

LIC-USG6KE-SSLVPN-100 QuantityofSSLVPNConcurrentUsers(100Users)

LIC-USG6KE-SSLVPN-200 QuantityofSSLVPNConcurrentUsers(200Users)

LIC-USG6KE-SSLVPN-500 QuantityofSSLVPNConcurrentUsers(500Users)

NGFW License

ThreatProtectionBundle(IPS,AV,URL)

LIC-USG6510E-TP-1YThreatProtectionSubscription12Months(AppliestoUSG6510E)

LIC-USG6510E-TP-3YThreat Protection Subscription36Months (Applies toUSG6510E)

LIC-USG6530E-TP-1YThreatProtectionSubscription12Months(AppliestoUSG6530E)

LIC-USG6530E-TP-3YThreat Protection Subscription36Months (Applies toUSG6530E)

CloudSandboxInspection

LIC-USG6530E-CS-1Y CloudSandboxInspection12Months(AppliestoUSG6530E)

LIC-USG6530E-CS-3Y CloudSandboxInspection36Months(AppliestoUSG6530E)

N1 License

Foundationpackagefunction

N1-USG6510E-F-Lic N1-USG6510EFoundation,PerDevice

N1-USG6530E-F-Lic N1-USG6530EFoundation,PerDevice

Model USG6510E USG6530E

OperatingEnvironment(Temperature/Humidity)

Temperature:0°Cto45°C;Humidity:5%to95%,non-condensing;

Non-operatingEnvironmentTemperature:-40°Cto+70°CHumidity:5%to95%,non-condensing;