Eudemon_200E-X_Series_Datasheet.pdf

Huawei Eudemon200E-X Series Data sheetHUAWEI Eudemon 200E-X Series Unified Security Gateway 2011-9-26 Huawei confidential Page 1 Trojan horses. URL filtering. wireless access and voice business in an integrated single platform. providing a combination of traditional network access and network security integration business standards. HUAWEI Eudemon 200E-X series products using Huawei's unified software platform which named VRP. Huawei Eudemon 200E-X Series product family transforms today’s Small Business and Enterprise’s workspace experience by delivering them high performance routing and switching.Huawei Eudemon200E-X Series Data sheet 『Product Overview』 As a new-generation unified security gateway. viruses. VPN. local area network LAN. In addition to a strong routing and switching features. worms. These safety features and wide area network WAN. 『Product Description』 Pictures Model Location Eudemon Enterprise remote sites. application security and other security features can protect the network against DDoS attacks. authentication. illegal invasion and illegal networks. 200E-X1/X1W/X1AGW office users Eudemon 200E-X2/X2W SMEs. anti-virus. anti-spam . branch offices or small-scale users Small and medium-sized Eudemon 200E-X3 enterprise branch offices Eudemon 200E-X5 or corporate headquarters users 2011-9-26 Huawei confidential Page 2 . Network Address Translation (NAT). Unified Security Gateway Eudemon 200E-X with a variety of professional security features including stateful firewall. spam. access control. strong security enhancement. IPS. wireless WAN and wireless LAN WLAN WWAN interface provides a high degree of integration makes the sustainability of flexible end to end security services become a reality. wireless (Wi-Fi. wireless (Wi-Fi. 3G) and security Eudemon 200E-X series of products set routing. security functions into one. switching. Extensive routing. thus preventing spam from interfering with normal services. making the Eudemon 200E-X series products sufficient to meet all kinds of large-scale application of network traffic.Huawei Eudemon200E-X Series Data sheet Eudemon 200E-X6 Corporate headquarters or large branch office users Eudemon 200E-X7 『Product Features』 Leading infrastructure platforms Eudemon 200E-X series products using advanced multi-threaded multi-core hardware architectures and parallel processing technology to optimize the safety of business processes. Comprehensive dedicated technologies for network protection Integrated UTM functions:  IPS: IPS Intrusion detection using Symantec's advanced IPS detection engines to provide efficient and accurate network packet scanning capability. 3G). Mature VRP software platform Eudemon 200E-X Series products provide a robust operating system. integrating the traditional routers. switching. voice. the deployment of traditional firewall and UTM solutions can help companies improve efficiency.  AS: effectively blocks spam and purifies enterprises' mail systems. a user's most trusted security operating system. and reduce TCO.  AV: efficiently and precisely detects and removes hidden viruses in network traffic by virtue of Symantec cutting-edge virus detection engine. traditional switches. reduce maintenance complexity. Eudemon200E-X series products can quickly and accurately identify attacks. 2011-9-26 Huawei confidential Page 3 . with advanced software and hardware platforms and rich signature library. DFIC three types of expansion slot that can support the FE. and blocking actions to guarantee bandwidth for normal services. GE. SA. ESP open platform to support Multi-Service Eudemon 200E-X series support server card. WIFI. traffic limiting. SHDSL. large-scale applications. G. and provides alerting. E1/CE1. terminal procedures. Diversified VPNs The Eudemon 200E-X delivers powerful VPN function. 3G and other access ways into the Internet to provide users with a wealth of access. 『Product Specifications』 Model Eudemon 200E-X1/X1W Eudemon 200E-X1AGW Eudemon 200E-X2/X2W 2*10/100 WAN 1*10/100 WAN 1*10/100 WAN WAN Interface for standard configuration 2011-9-26 Huawei confidential Page 4 .Huawei Eudemon200E-X Series Data sheet  URL filtering and P2P/IM control: precisely identifies access to illegitimate Web sites and over 60 P2P/IM applications. to provide users with integrated solutions. file servers. the user can be deployed online anti-virus software. and supports the following common VPNs for differentiated VPN applications:  L2TP  IPSec VPN  Dynamic VPN (DVPN)  SSL VPN  GRE  MPLS VPN Flexible scalability Eudemon 200E-X series products support MIC. FIC. ADSL2 +. Huawei Eudemon200E-X Series Data sheet Model Eudemon 200E-X1/X1W Eudemon 200E-X1AGW Eudemon 200E-X2/X2W 8*10/100 LAN 8*10/100 LAN 8*10/100 LAN 10FE 9FE 14FE LAN Interface for standard configuration Maximum number of interfaces Extension slot / 1 MIC Packets per second(pps) 120K 160K Overall throughput (bps) 180M 200M 2000 3.SHDSL， E1/CE1，SA，3G 420mm×255mm×44.0 kg 5.000 100.0 kg Voltage AC:100~240V 50/60Hz AC:100~240V 50/60Hz MTBF 12.45m Dimensions (W x D x H) 280mm×190mm×35mm m Weight <2.000 Maximum number ofAcl 3000 3000 USB interfaces 1 (v2.0) L2TP/GRE/SSL/IPSec Y Y IPSec VPN performance 40M 50M Number of concurrent 64 64 20 20 MPLS VPN Y Y Wi-Fi N/Y N/Y Number of new connections per second Number of concurrent connections VPN IPSec VPN tunnels Number of concurrent SSL VPN users 3G Y Y WCDMA/CDMA2000 IPS Y Y AV Y Y AS Y Y URL Y Y IPv6 Y Y ESP N N Hardware Encryption Y Y Interface module / FE，ADSL2+，G.0) 1 (v2.67 years 12.67 years Model 2011-9-26 Eudemon Eudemon Eudemon Eudemon 200E-X3 200E-X5 200E-X6 200E-X7 Huawei confidential Page 5 .000 200. 000 1.5mm 5.5 kg 8.0) L2TP/GRE/SSL/IPSec VPN Y Y Y Y IPSec VPN performance 300M 500M 1G 2G Number of concurrent IPSec VPN 2000 2000 2000 2000 Number of concurrent SSL VPN users 100 100 150 200 MPLS VPN Y Y Y Y Wi-Fi Y Y Y Y 3G Y Y Y Y IPS Y Y Y Y AV Y Y Y Y AS Y Y Y Y URL Y Y Y Y Ipv6 Y Y Y Y ESP Y Y Y Y Hardware Encryption Y Y Y Y Model 2GE+2GE-Comb o 4GE-Combo tunnels Interface module Dimensions (W x D x H) Weight Voltage MTBF FE，GE，ADSL2+，G.000.5G 2G 3.000 1.000 USB interfaces 2 (v2.000 Maximum number ofAcl 20.000 40.000 20.000 20.000 40.5M Overall throughput (bps) 900M 1.67 years AC:85~264V 50/60Hz 12.45mm 6.67 years 12.000 20.200.0) 2 (v2.SHDSL，E1/CE1，SA，3G 442mm×420mm× 442mm×420mm× 442mm*414mm*8 442mm*414mm*1 44.000 Number of concurrent connections 1.9G Number of new connections per second 20.67 years Software Model Eudemon 200E-X Basic Firewall Features Working mode Transparent.000 1.0) 2 (v2.0) 2 (v2.3 kg AC:85~264V AC:100~240V AC:100~240V 50/60Hz 50/60Hz 50/60Hz DC: -48~-60V DC:-48~-60V DC:-48~-60V 12.000.4 kg 5. and hybrid ASPF Y 2011-9-26 Huawei confidential Page 6 .200.4 kg 6.1mm 30.Huawei Eudemon200E-X Series Data sheet Eudemon Eudemon Eudemon Eudemon 200E-X3 200E-X5 200E-X6 200E-X7 WAN Interface for standard configuration 2GE-Combo 2GE-Combo Maximum number of interfaces 22GE+20FE 22GE+20FE 64GE + 28FE 84GE +28FE Extension slot 4 MIC + 2 FIC 4 MIC+2 FIC 2DFIC+2FIC+4MI 4DFIC+2FIC+4M C IC Packets per second(pps) 360K 490K 950K 1.67 years 12.45mm 44. routing.000 20. and IKEv2 Y 2011-9-26 Huawei confidential Page 7 .Huawei Eudemon200E-X Series Data sheet Access control Y Status validity check Y Blacklist and whitelist Y Security zone division Y Application protocol identification Y Anti-DDoS Bidirectional defense Y Dynamic fingerprint learning Y SYN flood Y SYN-ACK flood Y UDP flood Y HTTP flood Y Connection flood Y ICMP flood Y NAT Destination NAT/PAT Y Destination IP address (for NAT) on the same subnet with the IP address of the interface serving Y as the ingress Destination IP addresses and port numbers corresponding to one IP address and a specific port Y number (M:1P) Destination IP addresses corresponding to one IP address (M:1) Destination IP addresses corresponding to multiple IP addresses (M:M) Y Y No-PAT Y PAT Y Permanent mapping between addresses before and after NAT Address grouping of the source IP address pool NAT for source IP addresses beyond the interface subnet range Y Y Y NAT Server Y Bidirectional NAT Y NAT ALG Y Extended NAT (infinite addresses) Y Policy-based destination NAT Y IPSec VPN DES. PKI. 3DES. and AES encryption Y MD5 and SHA-1 authentication Y Manually configured key. Huawei Eudemon200E-X Series Data sheet Perfect Forward Secrecy (DH group) 1. 5 Anti-replay attack Y Remote VPN access Y EAP authentication Y High Availability Master/Slave. 2. master/master Y Configuration synchronization Y Firewall and IPSec VPN sessions synchronization Y Device fault detection Y Link fault detection Y User Identity Authentication and Access Control Built-in (internal) database Y RADIUS accounting Y Web-based authentication Y Public Key Infrastructure (PKI) PKI certificate format (PKCS #7 and #10) Y Automatic certificate registration (SCEP) Y Certificate Authority (CA) Y Self-signed certificate Y Routing BGP Y OSPF Y Dynamic routing Y Static routing Y Source-based routing Y Policy-based routing Y Routing policy Y Route iteration Y IPv6 Security OSPFv3 Y BGP4+ Y IPv6 IS-IS Y IPv6 policy-based routing Y GRE for BPG/OSPFv3/IS-IS Y Standard IPv6 ACL Y Extended IPv6 ACL Y IPv6 interface statistics Y NAT-PT (4 to 6 and 6 to 4) Y IPv6 ND/SEND Y Management Web UI (HTTP/HTTPS) Y CLI (console) Y 2011-9-26 Huawei confidential Page 8 . URL Filtering Update Service Subscribe 12/36 Months. ADSL2+.SHDSL. SA.Huawei Eudemon200E-X Series Data sheet CLI (Telnet) Y CLI (SSH) Y U2000/VSM Y Hierarchical administrators Y Software upgrade Y Configuration rollback Y Logging/Monitoring Structured system log Y SNMPv3 Y Binary log Y Complementary log server (eLog) Y 『Product Configuration』 Model Configuration  Host：Required  License: Optional. PS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months  Host：Required  Mini Interface Module: Optional. 5FE. PS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months  Host：Required (AC or DC)  Mini Interface Module: Optional. 3G-CDMA2000. 10/20/50/100 Users  License: Optional. 1FE. 1/2/4G. 2E1/CE1  Quantity of SSL VPN Concurrent Users: Optional. IPS Update Service Subscribe 12/36 Months. 1/2/4G. AV Update Service Subscribe 12/36 Months. IPS Update Service Subscribe 12/36 Months. 1SA. 1SA. ADSL2+. 10/20/50/100 Users  License: Optional. AS Update Service Subscribe 12/36 Months. URL Filtering Update Service Subscribe 12/36 Months. 1GE. 1GE. 2E1/CE1  Quantity of SSL VPN Concurrent Users: Optional. 1FE. E1/CE1. 8FE2GE  Flexible Interface Module: Optional.SHDSL. E1/CE1. 5FE. 8FE2GE  Quantity of SSL VPN Concurrent Users: Optional. 3G-CDMA2000. Wifi  Double Mini Interface Module: Optional. 10/20 Users  License: Optional. AS Update Eudemon 200E-X1/X1W/X1AGW Eudemon 200E-X2/X2W Eudemon 200E-X3 Eudemon 200E-X5 2011-9-26 Huawei confidential Page 9 . 8FE2GE  Flexible Interface Module: Optional. AS Update Service Subscribe 12/36 Months. E1/CE1. SA. ADSL2+.SHDSL. Wifi  Double Mini Interface Module: Optional. AV Update Service Subscribe 12/36 Months. 3G-CDMA2000. 1SA  Double Mini Interface Module: Optional. 1FE. SA. 1/2/4G. IPS Update Service Subscribe 12/36 Months. 5FE. IPS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months  Host：Required  Mini Interface Module: Optional. with HS General Security Platform Software Huawei confidential Page 10 . AS Update Service Subscribe 12/36 Months. 5FE.11a\b\g\n wireless LAN. URL Filtering Update Service Subscribe 12/36 Months. 1/2/4G.11a\b\g\n wireless LAN. Eudemon 200E-X1AGW-W-AC 802.Huawei Eudemon200E-X Series Data sheet Service Subscribe 12/36 Months.with HS General Security Platform Software Eudemon 200E-X1W AC Host with 2FE WAN+8FE LAN and 802. E1/CE1. 1GE. 8FE2GE  Flexible Interface Module: Optional. adsl. URL Filtering Update Service Subscribe 12/36 Months. 1GE. 3G-CDMA2000.1 Host Eudemon 200E-X1-AC Eudemon 200E-X1W-AC Eudemon 200E-X1 AC Host with 2FE WAN+8FE LAN.with HS General Security Platform Software Eudemon 200E-X1AGW-W AC Host with 1FE WAN+8FE LAN. ADSL2+. AS Update Service Subscribe 12/36 Months. WCDMA with HS General Security Platform Software Eudemon 200E-X1AGW-W AC Host with 1FE WAN+8FE LAN. 3G-CDMA2000. AV Update Service Subscribe 12/36 Months.with HS General Security Platform Software Eudemon 200E-X2W AC Host with 1FE WAN+8FE LAN and 802. PS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months 『Subscription Information』 Part Number Part Description 1. 2E1/CE1  Quantity of SSL VPN Concurrent Users: Optional. 8FE2GE  Flexible Interface Module: Optional. PS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months  Host：Required  Power Module：Required  Mini Interface Module: Optional.11a\b\g\n wireless LAN. 10/20/50/100/150 Users  License: Optional. AV Update Service Subscribe 12/36 Months. IPS Update Service Subscribe 12/36 Months. 10/20/50/100/150/200 Users  License: Optional. 2E1/CE1  Quantity of SSL VPN Concurrent Users: Optional. CDMA2000 with HS General Security Platform Software Eudemon 200E-X2-AC Eudemon 200E-X2W-AC 2011-9-26 Eudemon 200E-X2 AC Host with 1FE WAN+8FE LAN.SHDSL. Wifi  Double Mini Interface Module: Optional. URL Filtering Update Service Subscribe 12/36 Months. 1/2/4G. SA. 1SA. IPS Update Service Subscribe 12/36 Months. 1FE. Wifi  Double Mini Interface Module: Optional.SHDSL. AV Update Service Subscribe 12/36 Months. PS/AV/AS/URL Filtering Update Service Subscribe 12/36 Months Eudemon 200E-X6 Eudemon 200E-X7  Host：Required (AC or DC)  Mini Interface Module: Optional. 5FE. E1/CE1. adsl.11a\b\g\n wireless LAN. SA. 1FE. Eudemon 200E-X1AGW-C-AC 802. 1SA. ADSL2+. shdsl Interface Module.with HS General Security Platform Software 8FE(RJ45)+2GE(RJ45) Mixed Interface Card.with HS General Security Platform Software 1-port Channelized E1 Interface Module.with HS General Security Platform Software 5-Port Fast Ethernet Switch Electrical Interface Module(RJ45).with HS General Security Platform Software 1 portG.with HS General Security Platform Software Eudemon 200E-X6 DC Host with 2ComboGE.with HS General Security Platform Software 1-port GE Electrical Interface Card(RJ45).2 MIC-ADSL MIC-E1 MIC-CE1 MIC-1E1 MIC-1CE1 MIC-CDMA2000 MIC-WCDMA MIC-1G.with HS General Security Platform Software 2-port E1&Fractional E1 Interface Card.with HS General Security Platform Software Interface Extension Module of Eudemon 200E-X unified security gateway ADSL2+ MIC BOARD.with HS General Security Platform Software E200E-X7 Host with 2ComboGE.with HS General Security Platform Software Eudemon 200E-X5 DC Host with 2ComboGE.SHDSL MIC-2G.with HS General Security Platform Software WiFi MIC Card.with HS General Security Platform Software 2 portG.with HS General Security Platform Software 4-port GE Electrical Interface Card(RJ45).shdsl Interface Module.with HS General Security Platform 3G-CDMA2000 Interface Module.SHDSL MIC-Wifi MIC-1SA DMIC-8FE2GE FIC-1GE FIC-4GE FIC-2E1 2011-9-26 Eudemon 200E-X3 AC Host with 2ComboGE.with HS General Security Platform Software Huawei confidential Page 11 .with HS General Security Platform Software Eudemon 200E-X5 AC Host with 2ComboGE.with HS General Security Platform Software 1-Port Fast Ethernet Electrical Interface Module(RJ45).with HS General Security Platform Software 1-Channel Sync/Async Serial Port Interface Card.shdsl Interface Module.with HS General Security Platform Software 4 portG.with HS General Security Platform Software 1-PORT E1 Interface Module.Huawei Eudemon200E-X Series Data sheet Eudemon 200E-X3-AC Eudemon 200E-X5-AC Eudemon 200E-X5-DC Eudemon 200E-X6-AC Eudemon 200E-X6-DC Eudemon 200E-X7 1.with HS General Security Platform Software 3G-WCDMA Interface Module.with HS General Security Platform Software Eudemon 200E-X6 AC Host with 2ComboGE.SHDSL MIC-4G. with HS General URL-36months Security Platform Software AV Update Service Subscribe 12 Months.with HS General Security AS-12months Platform Software AS-36months Platform Software URL-12months Security Platform Software AS Update Service Subscribe 36 Months.with HS General SSL VPN-20 Security Platform Software Quantity of SSL VPN Concurrent Users(50 Users).4 Security Platform Software UTM Licenses of Eudemon 200E-X unified security gateway IPS Update Service Subscribe 12 Months.with HS General SSL VPN-150 Security Platform Software Quantity of SSL VPN Concurrent Users(200 Users).with HS General Security IPS-12months Platform Software IPS Update Service Subscribe 36 Months.with HS General Security IPS-36months Platform Software AS Update Service Subscribe 12 Months.with HS General Security AV-12months Platform Software AV Update Service Subscribe 36 Months.with HS General SSL VPN-50 Security Platform Software Quantity of SSL VPN Concurrent Users(100 Users).1*1.with HS General Security Platform Software 16GE(RJ45)+4GE(SFP) Mixed Interface Card. 2011-9-26 Huawei confidential Page 12 .with HS General Security URL Filtering Update Service Subscribe 12 Months. Ltd..Huawei Eudemon200E-X Series Data sheet FIC-2CE1 DFIC-18FE2GE DFIC-16GE4GE 2-port Channelized E1 Interface Card.with HS General SSL VPN-200 1.with HS IPS/AV/AS/URL-12months General Security Platform Software Huawei Technologies Co.3 security gateway Quantity of SSL VPN Concurrent Users(10 Users).with HS General Security Platform Software Quantity of SSL VPN Concurrent Users of Eudemon 200E-X unified 1.with HS General URL Filtering Update Service Subscribe 36 Months.with HS General Security AV-36months Platform Software IPS/AV/AS/URLFiltering Update Service Subscribe 12 Months.with HS General SSL VPN-100 Security Platform Software Quantity of SSL VPN Concurrent Users(150 Users).with HS General SSL VPN-10 Security Platform Software Quantity of SSL VPN Concurrent Users(20 Users).with HS General Security Platform Software 18FE(RJ45)+2GE(SFP) Mixed Interface Card . pictures. logos. Ltd. Ltd.. 2011 All rights reserved.. or a third party.Huawei Eudemon200E-X Series Data sheet About This Publication The content of this document is for reference only and does not constitute a warranty of any kind. and brands mentioned in this document are the property of Huawei Technologies Co. Copyright© Huawei Technologies Co. 2011-9-26 Huawei confidential Page 13 . All trademarks.