Huawei SVN5800 Secure VPN Firewall

Trends and ChallengesThe development of networks allows enterprises to provide remote access to branch offices, partners, customers, mobile employees, and home offices so that they can access application and data resources, such as OA, ERP, CRM, and SCM, on enterprise intranet. The access networks are complex. Some access networks, such as branch office and partner networks, can be managed by the enterprise. Some access networks, such as home, public Wi-Fi, and 3G networks, are geographically dispersed and out of the control of the enterprise. Moreover, the devices that access the enterprise intranet are diversifying. In addition to traditional terminals, such as desktop computer and laptops, smart devices are increasingly used to access enterprise networks. To facilitate business processing, enterprises must ensure that legitimate users can easily access information resources on the intranet from various devices on various networks, without compromising intranet security.SVN5800 products are the latest secure access gateway products, which are built on a carrier-class hardware platform, secure real-time embedded operating system, and many years of experience in communication and networking development and design. SVN5800 products meet demanding international certification standards to provide security solutions, such as remote access, mobile working, branch office interconnection, cloud access, and multimedia tunnel access.Product AppearanceSVN5800 series secure access gateways Product CharacteristicsAnywhere AccessPowerful access capability > Support up to 100,000 concurrent users. This capacity is industry leading. The SVN5800 series secure access gateways use a hardware platform that has a brand new architecture, dedicated multi-core platform, and multiple CPUs for parallel processing.Cross-OS support > The SVN5800 series secure access gateways support Android, Windows, iOS, Mac OS, Linux, Symbian, and BlackBerry operating systems.Full VPN support> The SVN5800 series secure access gateways support SSL, IPSec, GRE, L2TP, and MPLS VPN types.Secure AccessDiverse authentication types > The SVN5800 series supports authentication types, such as local password (VPNDB), AD/LDAP, RADIUS, digital certificate, token, USB key, short message service (SMS), device ID, and CAPTCHA. Therefore, the SVN5800 series allows you to combine multiple authentication factors so that users must pass the authentication of all configured authentication types to improve security. You can also configure multiple authentication types and allow users to gain VPN access if they pass any one of the configured authentication types.Fine-grained security control > The SVN5800 series provides fine-grained access control based on application, IP address, port, and URL and is able to identify over 6000 application protocols. > The application-based access control allows you to permit the traffic of some applications, such as ERP and web, but limit or block the traffic of other applications, such as video and social networking applications. Such access control allows you to implement fine-grained traffic control to ensure that enterprise bandwidth resources are productively used.Comprehensive protection > The SVN5800 can check the security state of devices to determine whether to limit the resources accessible to the user or prevent the user from logging to the SVN to ensure that only secure devices can access the enterprise intranet. After the user logs out, the SVN5800 can delete access history, such as temporary files and cookies, to avoid data loss. > The SVN5800 series can also identify and prevent tens of attacks based on the traffic features and DDoS attack methods to ensure that user devices are not exploited to launch attacks.Leading virtualization technologies > Up to 512 virtual SSL VPN gateways can be created on an SVN5800 secure access gateway. The virtual gateways are independent from each other and can be used by different enterprises of different departments of an enterprise. The virtual gateway technology maximizes device efficiency, minimizes hardware cost, and improve return on investment.Agile AccessFlexible access methods > The SVN5800 supports secure access methods, such as Web proxy, file sharing, port forwarding, network extension, and multimedia tunnel.Web proxy: When a remote user sends the SVN5800 a request for a web page hosted on the intranet, the SVN58050 forwards the request to the web server on the intranet, and sends the web page returned by the server to the user. The content of the web page is transmitted through SSL-encrypted tunnels to ensure data integrity. File sharing: The file systems on the intranet are put on the web so that users can user their browser to create and view folders and upload, download, rename, and delete files, just as they do on file systems. The SVN supports the SMB/CIFS and NFS protocols to provide secure remote access to Windows and Linux file systems, respectively. Port forwarding: Uses SSL to protect TCP applications and controls the access to these applications. A control is installed on the client to relay TCP/UDP services, encrypt data flows using SSL, and transmit the data flows to the SVN. Then, the SVN decrypts and parses the data flows and transmits the data flows to corresponding application servers, ensuring application security. Network extension: Provides remote access to network layer applications and resources by using Layer 3 SSL VPN (L3VPN) or IPSec Layer 3 VPN (IPSec L3VPN). Multimedia tunnel: By integrating the multimedia tunnel client component, multimedia clients can encrypt multimedia content using SSL tunnels, which have inherent advantages in traversing NAT and firewalls.Intelligent ISP link selection > If multiple ISP links exist, the SVN5800 series can intelligently select an optimal ISP link to avoid the delay caused by cross-carrier routes. > If geographically dispersed secure access gateways are deployed, the SVN5800 allows clients to constantly probe gateway distribution and quality to select the fastest SVN gateway to access.Service mobility* > The SVN5800 in the agile campus solution ensures that users can have the same network permissions, policies, and access experience regardless of users' location and IP addresses.SVN user rate limiting: Bandwidth thresholds for SVN users are centrally configured on the controller. After SSL VPN users are authenticated, the controller delivers the bandwidth thresholds to users. VIP access: If the users connected to a gateway reach the maximum capacity and a VIP user attempts to access the SVN, the SVN logs out some common users to ensure the access of the VIP user. VIP traffic forwarding: User priorities are mapped to traffic priorities to ensure that the traffic of higher-priority users is forwarded preferentially.Product SpecificationsDevice specificationsModelSVN5830SVN5850SVN5860SVN5880Maximum number of concurrent SSL VPN users600012,00040,000100,000Maximum number of concurrent SSL VPN connections15,00030,000150,000150,000IPSec VPN throughput3Gbit/s3Gbit/s18Gbit/s18Gbit/sConcurrent IPSec VPN connections40004,00015,00015,000Maximum number of virtual gateways256256512512I/OFixed ports8GE+4SFP4*10GE+16GE+8SFPExpansion slots2WSIC5WSICExpansion card typesWSIC: 2×10GE（SFP+）+8×GE（RJ45),8×GE（RJ45）,8×GE（SFP）,4×GE（RJ45）BYPASSDevice SpecificationsForm Factor1U3UDimensions (H x W x D) mm43.6 x 442 x 421130.5 x 442 × 415Weight (fully configured)10KG22KGHDDOptional, 300 GB hot-swappable single hard diskOptional, 300 GB hot-swappable dual hard disks (RAID1)Redundant power supplyOptionalStandardAC power supply100 V to 240 VMaximum power170W350W700WOperating environmentTemperature: 0°C to 45°C (without hard disk)/5°C to 40°C (with hard disk), humidity: 10% to 90%Non-operating environment (storage environment)Temperature: –40ºC to 70ºC, humidity: 5% to 95% (non-condensing)FunctionsSSL VPNSupports Web proxy, file sharing, port forwarding, network extension, and multimedia tunnel.Supports access to resources, such as Web, Client/Server application program, and multimedia resources, in IPv4 or IPv6VPN typesSSL VPN, IPSec VPN, GRE VPN, L2TP VPN, MPLS VPNUser authenticationSupports authentication methods, such as local password (VPNDB), AD, RADIUS, LDAP, SecurID, X.509 digital certificate, USB key, SMS, device ID, and CAPTCHA authentication. Supports hierarchical authentication, single sign-on (SSO), and software keyboard.Authentication controlSupports role-based, external group mapping, and dynamic authorization based on the security level of the terminalsProvides fine-grained access control based on application, IP address, port, and URL and is able to identify over 6000 application protocolsSupported operating systemsSupports Android, Windows, Mac OS, iOS, Linux, Symbian, and BlackBerry OS.Terminal securitySupports terminal/host security check, cache cleaning, terminal ID binding, and DDoS attack defense at application and network layers.Virtual gatewaySupports multiple virtual gateways on one physical gateway to allow for service and network virtualization and independent authentication, authorization, services, and resources managementAgile featureBandwidth management, intelligent ISP link selectionNetwork securitySupports access control, NAT, and attack defense.Network protocolsSupports IPv4 and IPv6Deployment and availabilitySupports transparent, routing, and hybrid deployment modes and active/active and active/standby high availability (HA)Ordering InformationQuotation items of SVN5800 SeriesModel No.DescriptionHostSVN5880-ACSVN5880 AC Host(16GE(RJ45)+8GE(SFP)+4*10GE(SFP+),16G Memory,2 AC Power),with HW General Security Platform SoftwareSVN5860-ACSVN5860 AC Host(16GE(RJ45)+8GE(SFP)+4*10GE(SFP),16GB Memory,2 AC Power),with HW General Security Platform SoftwareSVN5850-ACSVN5850 AC Host(8GE(RJ45)+4GE(SFP),4GB Memory,1 AC Power),with HW General Security Platform SoftwareSVN5830-ACSVN5830 AC Host(8GE(RJ45)+4GE(SFP),4GB Memory,1 AC Power),with HW General Security Platform SoftwareInterface CardWSIC-8GE8GE Electric Ports Interface Card,with HW General Security Platform SoftwareWSIC-4GEBYPASS4GE Electric Ports Bypass Card,with HW General Security Platform SoftwareWSIC-8GEF8GE Optical Ports Interface Card,with HW General Security Platform SoftwareWSIC-2XG8GE2*10GE Optical Ports+8GE Electric Ports Interface Card,with HW General Security Platform SoftwareHard Disk ModuleSM-HDD-SAS300G-A300GB 10K RPM SAS Hard Disk UnitSM-HDD-SAS300G-B300GB 10K RPM SAS Hard Disk for 1U rack GatewayPower Supply ModulePower-AC-BAC power module;-25degC~60degC;90V~290V;12V/14.2AFunction LicenseLIC-SVN-01-VGW-1Add 1 Virtual Gateway,with HW General Security Platform SoftwareLIC-SVN-01-SECEncryption Function,With HW General Security Platform SoftwareConcurrent SSL VPN Users LicenseLIC-SVN-01-SSL-10SSL VPN 10 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-25SSL VPN 25 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-50SSL VPN 50 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-100SSL VPN 100 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-250SSL VPN 250 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-500SSL VPN 500 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-1000SSL VPN 1000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-2500SSL VPN 2500 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-5000SSL VPN 5000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-7500SSL VPN 7500 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-10000SSL VPN 10000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-15000SSL VPN 15000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-20000SSL VPN 20000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-40000SSL VPN 40000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-60000SSL VPN 60000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-80000SSL VPN 80000 Concurrent Users,with HW General Security Platform SoftwareLIC-SVN-01-SSL-100000SSL VPN 100000 Concurrent Users,with HW General Security Platform Software