250 likes | 735 Views
Huawei Security Products Introduction. Huawei Russia. Content. 1. Security Overview. 2. Products and Highlights. 3. Service and Logistic Introduction. Giant growth of Security. $ 258M. Serving over 1000 key customers worldwide
E N D
Huawei Security Products Introduction Huawei Russia
Content 1 Security Overview 2 Products and Highlights 3 Service and Logistic Introduction
Giant growth of Security $ 258M • Serving over 1000 key customers worldwide • Over 66 percent growth in revenue per annum over last three years • Globalized 7*24-hour threat response center • Main contributor of industry standards • By revenue, No.1 in China, No.8 in Global. CAGR: 66.4% $ 188M $ 112M $ 56M As of the year 2011 • Huawei Technologies annual report with consolidated financial statements audited by KPMG 2008 2009 2010 2011 (Est.)
2008 10 years product innovation • Huawei security and storage product line founded • Focus on network security technology research • VPN card • 4 R&D centers in Beijing, Shenzhen, Chengdu, Hangzhou, a special R&D institutions in US • 2200+ security professional and 400+ technical service personal in first line • FW market share: NO.1 in China, TOP8 in global • DPI market share: NO.1 in China, TOP5 in global • Launch E100/E200,the first generation FW based on MIPS architecture • Launch high-speed IPSec card 2000 • Launch SIG: the value-added services platform • Launch endpoint security management solutions 2003 2005 • All middle and low-end of FW upgrade to UTM series • Launch security routing gateways, ranging from SOHOto large enterprise • IPS boards on high-end firewall. • Launch E8000E: the most powerful FW in security field which provide 200G in one box. • Launch Anti-DDoS solution 2011
Huawei Enterprise A Better Way Huawei Security Capability and Investment Market 2011 R&D Investment World Wide 50% of revenue Patents Security Employee 信任的图片 400 >2000 Global Response Comprehensive Product Line • Disaster relief efforts • Social welfare contributions • Local community engagement 7*24hours NETWORK SECURITY INFORMATION SECURITY SECURITY SERVICE
Content 1 Security Overview 2 Products and Highlights 3 Service and Logistic Introduction
Product Portfolio Security Service Botnet signature file Spam library Security emergency response Security management center Service center Capability center Application protocol signature file (DPI) URL category database Online update platform Security management service Virus/Malicious code signature file Intrusion/Vulnerability feature library Reputation appraisal center Security consulting DPI Anti-DDoS solution IPS Network and content security NIP2000/5000 AMS 8000 AMS1000 ATIC SIG9800-X 20G 60G 120G Management center 1G-2G 40G-200G 200M-1G FW/UTM+ SSL VPN Eudemon 200E-X Eudemon 1000E-X Eudemon 8000E-X SVN 2000/5000 40G-200G <3.9G 6G-15G 2000-12000 users Terminal security management Security management Security management Log server Security Software eLog VSM TSM DSM VSM Unified management Event Log Terminal security management Document security management Unified management
Huawei NG Security Network - UTM+ Remote office Management platform IDC eSight / eLog Cooperation partner E8000E-X Core HQ Internet Mobile, Roaming employee SVN 5000 Client IDC Layer one branch E1000E-X Internet E1000E-X NMS Private network Layer two branch FE/GE 3G wireless UTM+ ADSL E200E-X Urban council (park) NAC IPSec VPN SSL VPN
UTM+ : Eudemon E200E-X Series Highlights • Advanced Structure:MIPS multi-core structure, Industry leading • All-in-One:routing, switching, wireless(3G & WIFI), security in one • DPI:IPS based on DPI, AV, AS, URL filtering ,application control, Anti-DDoS • VPN:IPSEC/ SSL/ MPLS/ GRE/ L2TP VPN; • Multi-access:FE, GE, E1/CE1, serial, ADSL2+, G.SHDSL, Wifi, 3G; • Rich router :static/policy router based on users and application/WCMP/ RIPv2/ RIPng/OSPFv2 /OSPFv3/ BGP-4/ BGP-4+/ IS-IS/ IS-ISv6,IGMP/PIM/SIM; E200E-X • E200E-X2 • E200E-X5 • E200E-X7 • E200E-X1 • E200E-X3 • E200E-X6
UTM+Network Element Capability • Multiple Access Modes • Flexible Terminal Security Access • NAT/VPN • Anti-DDoS • AV/IPS • P2Plimiting • IMBlock • URLFiltering • Anti-Spam • WEBSecurity • Traffic Analysis Flexible Access • IPV6 • RIP/RIPng • OSPF/OSPFv3 • BGP/BGP4+ • IS-IS • VLAN • MSTP UTM+ Routing Switching UTM Equipment Business Rapid Deployment • TR069 Batch Deployment, Batch Config, Batch Update • Business Visualization Deployment, Threshold Alarms
Advanced Structure Kernel of traditional security products Kernel of E200E-X User UI Policy manage AV IPS AV URL AS IPS FW/VPN module FW DPI DPI FW URL • Safety ability embodying the system kernel, actively completing safety testing • Data flow through the security kernel during the forwarding process, • Each module parallel work, high efficiency, high safety • Kernel only perform traditional route forwarding, security module inserted on routing engine • Data flow pass the security module by interference of route engine • Low security of architecture and data processing efficiency Route engine AS
All in one Device integration Firewall IPS Switch Router WiFi 3G VPN Anti-X Service integration Unified deployment Centralized maintenance WAN LAN WLAN WWAN VPN Integrated security Benefit integration High efficiency Service continuity Timely response Low costs Investment protection Easy to manage Eudemon 200E-X
DPI - User/Application based traffic control Bandwidth Guarrantee • Intelligent traffic control: • Application controlled • User identified • Content detected • Time segment divided • Management visualized Applications Critical Applications Context User Limited bandwidth Acceptable Applications viruses worms Blocked E200E-X Prohibited Applications Trojans Visible management Blocked Time
DPI – URL Filtering 1 languages: 11 categorized Web sites: > 65 million 4 2 URLfiltering Accuracy> 96% categories> 130 3 Based on database and machine learning, using multiple classification method High detect rate and accuracy, picture recognition and URL analyze is in research Advanced Algorithm Key word based, sophisticated classification, requirement based auto-adjustment 42,000 more malicious website database and 13,000 more phishing website database 100,000 more URL hot spot database, provide second-level response Sophisticated Classification Perfect automatic categorization platform, data acquisition, integrated classification; Efficient data query performance, dozens of times higher than the industry-leading level; Stable Platform
Security Gateway Overall Positioning SRX650-7 4Gbps ASA5555-X-4 E200E-X7 UTM-1 1070-3 ASA5545-X-3 UTM-1 570-2.5 2Gbps E200E-X6 ASA5525-X-2 SRX240-1.8 U270/130-1.5 E200E-X5 ASA5515-X-1.2 Same Level Half Price 1Gbps SSG550-1 ASA5512-X-1 110C/60C-1 EdgeN-1 SRX220-0.95 E200E-X3 SRX210-0.85 80C-0.7 SRX100-0.7 SSG520-0.65 ASA5540-0.65 SSG350-0.55 110-0.5 ASA5520-0.45 SSG320-0.45 400 Mbps SSG140-0.35 ASA5510-0.3 E200E-X2 200 Mbps 40C-0.2 E200E-X1 SSG5/20-0.16 ASA5505-0.15 100 Mbps 50B-0.1
Content 1 Security Overview 2 Products and Highlights 3 Service and Logistic Introduction
Global Service Team & Solution Partner • Worldwide Service Staff 22,000+ • Managed Services Delivery Staff 4,200+ • PMP Project Management Experts 960+ • Full- time Training Instructors 700+ • System integration engineers 3000+ • Localization in Oversea Market77% • Partners for Service Solution 60+ • Partners for Industry Solution 100+ Open Garden: Huawei Service Solution Partner Industry Solution partners(Over 100+): Strategic Partners Portfolio Partners
Serving Customers Around the World 100+:providing services for more than 100 operators. 1000+: providing services for more than 1000 important industry customers. Telecommunication Customers Operator Channel Partners Industry Customers Huawei • Enterprise Others Other OEMs and Strategy Partners …