Huawei Eudemon1000E-X series Firewall

Eudemon 1000E-X Series Firewall

Huawei Technologies Co., Ltd.

Huawei Eudemon1000E-X series Firewall

Product Overview
With the dramatic increase in threats to networks, users are become ever more concerned by
application- and service-based network security problems. As security threats such as malicious
intrusions, phishing Web sites, Trojan horse programs, and P2P applications proliferate, the
efficiency of enterprise networks is reduced and their security threatened.
Huawei Technologies Co., Ltd. (hereafter referred to as Huawei) is dedicated to providing
comprehensive network security solutions for users. Huawei organizes an industry-leading
network protocol analysis team and possesses the industrys most comprehensive protocol library.
These unique resources allow Huawei to offer in-depth analysis of network threats aimed at
different protocols, and provides users with technical support to combat a wide range of network
security problems.
Developed by Huawei, the Eudemon 1000E-X series is a new-generation multi-function
firewall. Delivering comprehensive advanced security functions such as Firewall,NAT,VPN, IM
ControlP2P ControlIPS, anti-virus, URL filtering and Anti-Spam, it provides all-around security
protection to safeguard the efficient running of network systems.

Product Portfolio

Product Feature
Perfect Firewall Functions

Advanced Architecture and Platform

Adopting an advanced multi-core hardware architecture and multi-thread concurrent

processing, the Eudemon 1000E-X series optimizes the security service processing flow,
especially the processing of header packets. All these features equip the Eudemon 1000E-X series
with an industry-leading firewall indicator the number of new connections per second
enabling it to easily deal with mass network traffic. Moreover, the Eudemon 1000E-X series
separates data decapsulation and in-depth detection, and concurrently implements multiple types
of in-depth detection, considerably promoting the performance of its in-depth detection state.
With ten years of successful commercial application, the mature VRP software platform furnishes
the Eudemon 1000E-X series with a robust, reliable security operating system.

Industry-leading Performance

Huawei Eudemon1000E-X series Firewall

Multi-core concurrent processing technology substantially enhances the Eudemon 1000E-Xs
performance allowing it to concurrently process dozens of threads. With three industry-leading
performance indexes, the Eudemon 1000E-X provides an exceptional performance experience for
customers. New connections per second, the key firewall performance indicator, can comfortably
reach 200,000, setting a clear lead for the industry. Quickly setting up a large number of
connections for network access, the Eudemon 1000E-X provides high-speed forwarding rates and
low delay. And the maximum performance can up to 15Gbps.This performance advantage also
enables the Eudemon 1000E-X to effectively process burst and attack traffic fully meeting
customer demand for high-speed bandwidth increase.

Advanced IPv6 technology

Nowadays, 32-bit IPv4 addresses can no longer keep pace with the rapid development of the
Internet; worse still, IPv4 itself is of low security, calling the birth of IPv6. The network
transformation, however, is a gradual process. The replacement of IPv4 by IPv6 cannot be
achieved in a day, and the two protocols will definitely coexist for a long time. Subsequently, the
communications between IPv4 regions and IPv6 regions become an urgent challenge. Considering
the current network situation, Huawei launches the Eudemon 1000E-X series firewall. This series
not only supports IPv6, but also skillfully settles the coexistence of IPv4 and IPv6, which realizes
the seamless communications between IPv4 regions and IPv6 regions.

Super-Capacity VPN

As an organization extends its service, the number of branches and employees on business
trips increases, imposing more demands for encrypted data transmission. Supporting L2TP, GRE,
MPLS,SSL and IPSec VPN functions, the Eudemon 1000E-X series facilitates flexible selection
and configuration. Its advanced hardware architecture allows for high VPN performance and
15000 VPN tunnels, freeing users from worries about the security of encrypted data transmission.
The data of various network applications, including heavy-traffic video and audio applications,
can be transmitted at high speed in the encrypted tunnel, enabling users to enjoy Gbps-level
encrypted data transmission.
Note: The IPSec/SSL VPN function is optional. Customers can purchase related license to apply this function.

Powerful DDoS Defense

Protecting key network services against DDoS attacks is a vital security problem for
organization-level users. With the huge number of new connections per second, the Eudemon
1000E-X series defends against DDoS attacks at speeds of up to millions of packets per second,
providing effective DDoS defense for users' service systems. Based on its powerful protocol
analysis capability, the Eudemon 1000E-X series accurately identifies and controls many DDoS
attacks such as SYN, UDP, ICMP, and DNS floods, and CC attacks. It also identifies and defends
against worm-infected traffic. By integrating Huaweis proprietary ICA, the Eudemon 1000E-X
series precisely identifies DDoS traffic without affecting users' access, providing genuine security
protection on complicated networks. All these confirm that the Eudemon 1000E-X series is the

Huawei Eudemon1000E-X series Firewall

industrys leading DDoS defense solution.

Accurate P2P Control

P2P traffic is a broadband killer. Disrupting service applications, it is a key concern for most
organizations. In practice, controlling P2P traffic is extremely difficult due to protocol flexibility.
Utilizing Huaweis powerful network protocol analysis capability, the Eudemon 1000E-X series
precisely identifies up to 50 types of P2P traffic. It supports library upgrades and with each
upgrade, the number of protocols that can be identified increases. In so doing, the Eudemon
1000E-X series controls the P2P traffic of abundant protocols at Kbps-level speeds. Moreover, the
Eudemon 1000E-X series controls different modes of P2P traffic such as single user-based,
group-based, and global control, effectively safeguarding bandwidth resources. By helping users
plan network traffic, it dramatically enhances a networks application value.

Leading UTM Functions

IPS Intrusion Detection

Using Symantec's advanced IPS detection engine, the IPS Intrusion Detection function
efficiently and accurately scans network packets. Any IPS evasion and deception techniques are
also accurately identified. With advanced software and hardware platforms, and a rich signature
library, the Eudemon 1000E-X series unified security gateway rapidly and accurately identifies
any application layer attacks mixed in with normal traffic. Symantec's global deployment of
honeypot systems catches the latest attacks, worms, Trojans and other threats, instantly extracting
their signatures and providing timely updates. The Eudemon 1000E-X series unified security
gateway offers zero-attack defense capability.

Anti-Virus Anti-Virus

Using Symantec's advanced virus detection engine, an Anti-Virus function efficiently and
accurately detects viruses hidden in network traffic. Advanced software and hardware platforms,
and a rich Accessible Virus library provide the Eudemon 1000E-X series with unique antivirus
capabilities allowing it to identify compression shelling and other techniques to evade detection.
Symantec's global distribution network of analysis virus monitoring, and professional team of
the virus, Eudemon 1000E-X series of unified security gateways can obtain the latest virus
signatures and the latest anti-virus engines timely. Eudemon 1000E-X series unified security
gateway can keep high efficiency and precise antivirus ability.

URL Filtering

Using an advanced matching engine, the URL filtering function greatly shortens URL match
times and makes URL filtering more efficient. A huge URL classification database and powerful
URL classification capabilities allow for accurate URL filtering. A flexible security policy allows

Huawei Eudemon1000E-X series Firewall

the URL filtering function to apply to most scenarios. Friendly, easy configuration greatly
improves the URL filtering function's usability. Thanks to all these features, the Eudemon
1000E-X series unified security gateway offers powerful functionality together with ease of
operation and maintenance.

Huawei Eudemon1000E-X series Firewall

Typical Application

Typical networking diagram of the Eudemon 1000E-X Series

Huawei Eudemon1000E-X series Firewall

Product Specification
Eudemon 1000E-X3

Eudemon 1000E-X5

Eudemon 1000E-X6

6 Gbps

10Gbps

15 Gbps

100K

150K

200K

200M

300M

400M

30K

30K

30K

Support

Support

Support

4 Gbps

5 Gbps

7 Gbps

15K

15K

15K

500

500

500

Support

Support

Support

200K

200K

200K

Support

Support

Support

100

100

100

IPS

Support

Support

Support

Anti-Virus

Support

Support

Support

URL Filtering

Support

Support

Support

Anti-Spam

Support

Support

Support

Maximum Throughput
Number of New connections
per Second
Number

of

concurrent

connections
Number of Policies
L2TP/GRE/SSL/IPSec VPN
IPSec VPN Performance
Number

of

IPSec

VPN

Tunnels
Number

of

SSL

VPN

concurrent users
MPLS VPN
Number of GTP Tunnels
IPv6
Number fo virtual firewalls

4GE(electric)+8GE(optical)
Number of Fixed Interfaces

4GE(electric) +4GE Combo

4GE(electric)+4GE Combo
+4GE Combo
2*MIC solts

Number of Expansion solts

2*FIC solts

2*FIC solts
6*FIC solts

Dimensions (W x D x H)

1U: 44256043.6mm

1U: 44256043.6mm

3U: 442414.1130.5mm

Weight

8.9KG

8.9KG

18KG

AC100240V 50/60Hz

AC100240V 50/60Hz

AC100240V 50/60Hz

DC-48-60V

DC-48-60V

DC-48-60V

Maximum Power

100 W

100W

300W

MTBF

74.53 years

74.53 years

74.53 years

Rated Voltage

Ordering Information
MODEL NUMBER

DESCRIPTION

Base System
SU5M001UAH00

Eudemon 1000E X3 Standard Configuration 8GE AC Host

SU5M001UDH00

Eudemon 1000E X3 Standard Configuration 8GE DC Host

SU5M001UAH01

Eudemon 1000E X5 Standard Configuration 8GE AC Host

SU5M001UDH01

Eudemon 1000E X5 Standard Configuration 8GE DC Host

SU5M003UAH00

Eudemon 1000E X6 Standard Configuration 16GE AC Host

Huawei Eudemon1000E-X series Firewall

SU5M003UDH00

Eudemon 1000E X6 Standard Configuration 16GE DC Host

E1000E-X Interface Modules

FIC-8GE

8GE Electric Ports Interface Card

SU5D0E8GFF00

8GE Optical Ports FIC Interface Card

FIC-2SFP+

2*10GE Optical Ports FIC Interface Card

FIC-2SFP+&8GE

2*10GE Optical Ports+8GE Electric Ports Interface Card

FIC-4GE-BYPASS

4GE Electric Ports Bypass Card

SU5DF2BY0200

2 Link LC/UPC Singlemode Optical Interface Bypass Protect Card

SU5DF2BY0100

2 Link LC/UPC Multimode Optical Interface Bypass Protect Card

DMIC-2SFP+

2*10GE Optical Ports DMIC Interface Card

E1000E-X License
FWES00GTPF01

GTP Function

FWES005VFW01

Quantity of Virtual Firewall(5 Vsys)

FWES010VFW01

Quantity of Virtual Firewall(10 Vsys)

FWES025VFW01

Quantity of Virtual Firewall(25 Vsys)

FWES050VFW01

Quantity of Virtual Firewall(50 Vsys)

FWES100VFW01

Quantity of Virtual Firewall(100 Vsys)

FWCS010VPN01

Quantity of VPN Tunnels(10 Tunnels)

FWCS100VPN01

Quantity of VPN Tunnels(100 Tunnels)

FWCS500VPN01

Quantity of VPN Tunnels(500 Tunnels)

FWCS01KVPN01

Quantity of VPN Tunnels(1000 Tunnels)

FWCS02KVPN01

Quantity of VPN Tunnels(2000 Tunnels)

FWCS05KVPN01

Quantity of VPN Tunnels(5000 Tunnels)

FWCS10KVPN01

Quantity of VPN Tunnels(10000 Tunnels)

FWES010SSL00

Quantity of SSL VPN Conncurrent Users(10 Users)

FWES020SSL00

Quantity of SSL VPN Conncurrent Users(20 Users)

FWES050SSL00

Quantity of SSL VPN Conncurrent Users(50 Users)

FWES100SSL00

Quantity of SSL VPN Conncurrent Users(100 Users)

FWES150SSL00

Quantity of SSL VPN Conncurrent Users(150 Users)

FWES200SSL00

Quantity of SSL VPN Conncurrent Users(200 Users)

SU5S012IPS00

Eudemon1000E X3 IPS Update Service Subscribe 12 Months

SU5S036IPS00

Eudemon1000E X3 IPS Update Service Subscribe 36 Months

SU5S0012AV00

Eudemon1000E X3 Anti-Virus Update Service Subscribe 12 Months

SU5S0036AV00

Eudemon1000E X3 Anti-Virus Update Service Subscribe 36 Months

SU5S012UFM00

Eudemon1000E X3 URL Filtering Update Service Subscribe 12 Months

SU5S036UFM00

Eudemon1000E X3 URL Filtering Update Service Subscribe 36 Months

SU5S12MAIL00

Eudemon1000E X3 Anti-Spam Update Service Subscribe 12 Months

SU5S36MAIL00

Eudemon1000E X3 Anti-Spam Update Service Subscribe 36 Months

SU5S12UTMG00

Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36UTMG00

Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S012IPS01

Eudemon1000E X5 IPS Update Service Subscribe 12 Months

SU5S036IPS01

Eudemon1000E X5 IPS Update Service Subscribe 36 Months

SU5S0012AV01

Eudemon1000E X5 Anti-Virus Update Service Subscribe 12 Months

Huawei Eudemon1000E-X series Firewall

SU5S0036AV01

Eudemon1000E X5 Anti-Virus Update Service Subscribe 36 Months

SU5S012UFM01

Eudemon1000E X5 URL Filtering Update Service Subscribe 12 Months

SU5S036UFM01

Eudemon1000E X5 URL Filtering Update Service Subscribe 36 Months

SU5S12MAIL01

Eudemon1000E X5 Anti-Spam Update Service Subscribe 12 Months

SU5S36MAIL01

Eudemon1000E X5 Anti-Spam Update Service Subscribe 36 Months

SU5S12UTMG01

Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36UTMG01

Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S012IPS02

Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months

SU5S036IPS02

Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months

SU5S0012AV02

Eudemon1000E X6 URL Filtering Update Service Subscribe 12 Months

SU5S0036AV02

Eudemon1000E X6 URL Filtering Update Service Subscribe 36 Months

SU5S012UFM02

Eudemon1000E X6 Anti-Spam Update Service Subscribe 12 Months

SU5S036UFM02

Eudemon1000E X6 Anti-Spam Update Service Subscribe 36 Months

SU5S12MAIL02

Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36MAIL02

Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S12UTMG02

Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months

SU5S36UTMG02

Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months

Copyright Huawei Technologies Co., Ltd. 2011.

All rights reserved.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.