7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 1/9

 Huawei Eudemon1000E-X series Firewall

Eudemon 1000E-X Series Firewall

Huawei Technologies Co., Ltd. 

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 2/9

 Huawei Eudemon1000E-X series Firewall

Product Overview

With the dramatic increase in threats to networks, users are become ever more concerned by

application- and service-based network security problems. As security threats such as malicious

intrusions, phishing Web sites, Trojan horse programs, and P2P applications proliferate, theefficiency of enterprise networks is reduced and their security threatened.

Huawei Technologies Co., Ltd. (hereafter referred to as Huawei) is dedicated to providing

comprehensive network security solutions for users. Huawei organizes an industry-leading

network protocol analysis team and possesses the industry’s most comprehensive protocol library.

These unique resources allow Huawei to offer in-depth analysis of network threats aimed at

different protocols, and provides users with technical support to combat a wide range of network

security problems.

Developed by Huawei, the Eudemon 1000E-X series is a new-generation multi-function

firewall. Delivering comprehensive advanced security functions such as Firewall,NAT,VPN, IM

Control、P2P Control、IPS, anti-virus, URL filtering and Anti-Spam, it provides all-around security

 protection to safeguard the efficient running of network systems.

Product Portfolio

Product Feature

Perfect Firewall Functions

  Advanced Architecture and Platform

Adopting an advanced multi-core hardware architecture and multi-thread concurrent

 processing, the Eudemon 1000E-X series optimizes the security service processing flow,

especially the processing of header packets. All these features equip the Eudemon 1000E-X series

with an industry-leading firewall indicator  —   the number of new connections per second  –  

enabling it to easily deal with mass network traffic. Moreover, the Eudemon 1000E-X series

separates data decapsulation and in-depth detection, and concurrently implements multiple types

of in-depth detection, considerably promoting the performance of its in-depth detection state.

With ten years of successful commercial application, the mature VRP software platform furnishes

the Eudemon 1000E-X series with a robust, reliable security operating system.

 

Industry-leading Performance

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 3/9

 Huawei Eudemon1000E-X series Firewall

Multi-core concurrent processing technology substantially enhances the Eudemon 1000E-X’s

 performance allowing it to concurrently process dozens of threads. With three industry-leading

 performance indexes, the Eudemon 1000E-X provides an exceptional performance experience for

customers. New connections per second, the key firewall performance indicator, can comfortably

reach 200,000, setting a clear lead for the industry. Quickly setting up a large number of

connections for network access, the Eudemon 1000E-X provides high-speed forwarding rates and

low delay. And the maximum performance can up to 15Gbps.This performance advantage also

enables the Eudemon 1000E-X to effectively process burst and attack traffic  –   fully meeting

customer demand for high-speed bandwidth increase.

  Advanced IPv6 technology

 Nowadays, 32-bit IPv4 addresses can no longer keep pace with the rapid development of the

Internet; worse still, IPv4 itself is of low security, calling the birth of IPv6. The network

transformation, however, is a gradual process. The replacement of IPv4 by IPv6 cannot be

achieved in a day, and the two protocols will definitely coexist for a long time. Subsequently, the

communications between IPv4 regions and IPv6 regions become an urgent challenge. Considering

the current network situation, Huawei launches the Eudemon 1000E-X series firewall. This series

not only supports IPv6, but also skillfully settles the coexistence of IPv4 and IPv6, which realizes

the seamless communications between IPv4 regions and IPv6 regions.

  Super-Capacity VPN

As an organization extends its service, the number of branches and employees on businesstrips increases, imposing more demands for encrypted data transmission. Supporting L2TP, GRE,

MPLS,SSL and IPSec VPN functions, the Eudemon 1000E-X series facilitates flexible selection

and configuration. Its advanced hardware architecture allows for high VPN performance and

15000 VPN tunnels, freeing users from worries about the security of encrypted data transmission.

The data of various network applications, including heavy-traffic video and audio applications,

can be transmitted at high speed in the encrypted tunnel, enabling users to enjoy Gbps-level

encrypted data transmission.

 Note: The IPSec/SSL VPN function is optional. Customers can purchase related license to apply this function.

  Powerful DDoS Defense

Protecting key network services against DDoS attacks is a vital security problem for

organization-level users. With the huge number of new connections per second, the Eudemon

1000E-X series defends against DDoS attacks at speeds of up to millions of packets per second,

 providing effective DDoS defense for users' service systems. Based on its powerful protocol

analysis capability, the Eudemon 1000E-X series accurately identifies and controls many DDoS

attacks such as SYN, UDP, ICMP, and DNS floods, and CC attacks. It also identifies and defends

against worm-infected traffic. By integrating Huawei’s proprietary ICA, the Eudemon 1000E-X

series precisely identifies DDoS traffic without affecting users' access, providing genuine security

 protection on complicated networks. All these confirm that the Eudemon 1000E-X series is the

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 4/9

 Huawei Eudemon1000E-X series Firewall

industry’s leading DDoS defense solution. 

  Accurate P2P Control

P2P traffic is a broadband killer. Disrupting service applications, it is a key concern for mostorganizations. In practice, controlling P2P traffic is extremely difficult due to protocol flexibility.

Utilizing Huawei’s powerful network protocol analysis capability, the Eudemon 1000E-X series

 precisely identifies up to 50 types of P2P traffic. It supports library upgrades and with each

upgrade, the number of protocols that can be identified increases. In so doing, the Eudemon

1000E-X series controls the P2P traffic of abundant protocols at Kbps-level speeds. Moreover, the

Eudemon 1000E-X series controls different modes of P2P traffic such as single user-based,

group-based, and global control, effectively safeguarding bandwidth resources. By helping users

 plan network traffic, it dramatically enhances a network’s application value.

Leading UTM Functions

  IPS Intrusion Detection

Using Symantec's advanced IPS detection engine, the IPS Intrusion Detection function

efficiently and accurately scans network packets. Any IPS evasion and deception techniques are

also accurately identified. With advanced software and hardware platforms, and a rich signature

library, the Eudemon 1000E-X series unified security gateway rapidly and accurately identifies

any application layer attacks mixed in with normal traffic. Symantec's global deployment of

honeypot systems catches the latest attacks, worms, Trojans and other threats, instantly extracting

their signatures and providing timely updates. The Eudemon 1000E-X series unified security

gateway offers zero-attack defense capability.

  Anti-Virus Anti-Virus

Using Symantec's advanced virus detection engine, an Anti-Virus function efficiently and

accurately detects viruses hidden in network traffic. Advanced software and hardware platforms,

and a rich Accessible Virus library provide the Eudemon 1000E-X series with unique antivirus

capabilities allowing it to identify compression shelling and other techniques to evade detection.

Symantec's global distribution network of analysis virus monitoring, and professional team of

the virus, Eudemon 1000E-X series of unified security gateways can obtain the latest virus

signatures and the latest anti-virus engines timely. Eudemon 1000E-X series unified security

gateway can keep high efficiency and precise antivirus ability.

  URL Filtering

Using an advanced matching engine, the URL filtering function greatly shortens URL match

times and makes URL filtering more efficient. A huge URL classification database and powerful

URL classification capabilities allow for accurate URL filtering. A flexible security policy allows

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 5/9

 Huawei Eudemon1000E-X series Firewall

the URL filtering function to apply to most scenarios. Friendly, easy configuration greatly

improves the URL filtering function's usability. Thanks to all these features, the Eudemon

1000E-X series unified security gateway offers powerful functionality together with ease of

operation and maintenance.

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 6/9

 Huawei Eudemon1000E-X series Firewall

Typical Application

Typical networking diagram of the Eudemon 1000E-X Series

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 7/9

 Huawei Eudemon1000E-X series Firewall

Product Specification

Eudemon 1000E-X3 Eudemon 1000E-X5 Eudemon 1000E-X6

Maximum Throughput 6 Gbps 10Gbps 15 Gbps

 Number of New connections

 per Second100K 150K 200K

 Number of concurrent

connections200M 300M 400M

 Number of Policies 30K 30K   30K  

L2TP/GRE/SSL/IPSec VPN Support  Support  Support 

IPSec VPN Performance 4 Gbps 5 Gbps 7 Gbps

 Number of IPSec VPN

Tunnels15K 15K 15K

 Number of SSL VPN

concurrent users500 500 500

MPLS VPN Support  Support  Support 

 Number of GTP Tunnels 200K 200K   200K  

IPv6 Support  Support  Support 

 Number fo virtual firewalls 100 100 100

IPS Support  Support  Support 

Anti-Virus Support  Support  Support 

URL Filtering Support  Support  Support 

Anti-Spam Support  Support  Support 

 Number of Fixed Interfaces 4GE(electric) +4GE Combo 4GE(electric)+4GE Combo4GE(electric)+8GE(optical)

+4GE Combo

 Number of Expansion solts 2*FIC solts 2*FIC solts2*MIC solts

6*FIC solts

Dimensions (W x D x H) 1U: 442×560×43.6mm 1U: 442×560×43.6mm 3U: 442×414.1×130.5mm

Weight 8.9KG 8.9KG 18KG

Rated VoltageAC：100～240V 50/60Hz AC：100～240V 50/60Hz AC：100～240V 50/60Hz

DC：-48～-60V DC：-48～-60V DC：-48～-60V

Maximum Power 100 W 100W 300W

MTBF 74.53 years 74.53 years  74.53 years 

Ordering Information

MODEL NUMBER DESCRIPTION

Base System

SU5M001UAH00 Eudemon 1000E X3 Standard Configuration 8GE AC Host

SU5M001UDH00 Eudemon 1000E X3 Standard Configuration 8GE DC Host

SU5M001UAH01 Eudemon 1000E X5 Standard Configuration 8GE AC Host

SU5M001UDH01 Eudemon 1000E X5 Standard Configuration 8GE DC Host

SU5M003UAH00 Eudemon 1000E X6 Standard Configuration 16GE AC Host

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 8/9

 Huawei Eudemon1000E-X series Firewall

SU5M003UDH00 Eudemon 1000E X6 Standard Configuration 16GE DC Host

E1000E-X Interface Modules

FIC-8GE 8GE Electric Ports Interface Card

SU5D0E8GFF00 8GE Optical Ports FIC Interface Card

FIC-2SFP+ 2*10GE Optical Ports FIC Interface CardFIC-2SFP+&8GE 2*10GE Optical Ports+8GE Electric Ports Interface Card

FIC-4GE-BYPASS 4GE Electric Ports Bypass Card

SU5DF2BY0200 2 Link LC/UPC Singlemode Optical Interface Bypass Protect Card

SU5DF2BY0100 2 Link LC/UPC Multimode Optical Interface Bypass Protect Card

DMIC-2SFP+ 2*10GE Optical Ports DMIC Interface Card

E1000E-X License

FWES00GTPF01 GTP Function

FWES005VFW01 Quantity of Virtual Firewall(5 Vsys)

FWES010VFW01 Quantity of Virtual Firewall(10 Vsys)

FWES025VFW01 Quantity of Virtual Firewall(25 Vsys)

FWES050VFW01 Quantity of Virtual Firewall(50 Vsys)

FWES100VFW01 Quantity of Virtual Firewall(100 Vsys)

FWCS010VPN01 Quantity of VPN Tunnels(10 Tunnels)

FWCS100VPN01 Quantity of VPN Tunnels(100 Tunnels)

FWCS500VPN01 Quantity of VPN Tunnels(500 Tunnels)

FWCS01KVPN01 Quantity of VPN Tunnels(1000 Tunnels)

FWCS02KVPN01 Quantity of VPN Tunnels(2000 Tunnels)

FWCS05KVPN01 Quantity of VPN Tunnels(5000 Tunnels)

FWCS10KVPN01 Quantity of VPN Tunnels(10000 Tunnels)

FWES010SSL00 Quantity of SSL VPN Conncurrent Users(10 Users)

FWES020SSL00 Quantity of SSL VPN Conncurrent Users(20 Users)

FWES050SSL00 Quantity of SSL VPN Conncurrent Users(50 Users)

FWES100SSL00 Quantity of SSL VPN Conncurrent Users(100 Users)

FWES150SSL00 Quantity of SSL VPN Conncurrent Users(150 Users)

FWES200SSL00 Quantity of SSL VPN Conncurrent Users(200 Users)

SU5S012IPS00 Eudemon1000E X3 IPS Update Service Subscribe 12 Months

SU5S036IPS00 Eudemon1000E X3 IPS Update Service Subscribe 36 Months

SU5S0012AV00 Eudemon1000E X3 Anti-Virus Update Service Subscribe 12 Months

SU5S0036AV00 Eudemon1000E X3 Anti-Virus Update Service Subscribe 36 Months

SU5S012UFM00 Eudemon1000E X3 URL Filtering Update Service Subscribe 12 Months

SU5S036UFM00 Eudemon1000E X3 URL Filtering Update Service Subscribe 36 Months

SU5S12MAIL00 Eudemon1000E X3 Anti-Spam Update Service Subscribe 12 Months

SU5S36MAIL00 Eudemon1000E X3 Anti-Spam Update Service Subscribe 36 Months

SU5S12UTMG00 Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36UTMG00 Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S012IPS01 Eudemon1000E X5 IPS Update Service Subscribe 12 Months

SU5S036IPS01 Eudemon1000E X5 IPS Update Service Subscribe 36 MonthsSU5S0012AV01 Eudemon1000E X5 Anti-Virus Update Service Subscribe 12 Months

7/21/2019 Eudemon 1000E-X5_

http://slidepdf.com/reader/full/eudemon-1000e-x5 9/9

 Huawei Eudemon1000E-X series Firewall

SU5S0036AV01 Eudemon1000E X5 Anti-Virus Update Service Subscribe 36 Months

SU5S012UFM01 Eudemon1000E X5 URL Filtering Update Service Subscribe 12 Months

SU5S036UFM01 Eudemon1000E X5 URL Filtering Update Service Subscribe 36 Months

SU5S12MAIL01 Eudemon1000E X5 Anti-Spam Update Service Subscribe 12 Months

SU5S36MAIL01 Eudemon1000E X5 Anti-Spam Update Service Subscribe 36 MonthsSU5S12UTMG01 Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36UTMG01 Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S012IPS02 Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months

SU5S036IPS02 Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months

SU5S0012AV02 Eudemon1000E X6 URL Filtering Update Service Subscribe 12 Months

SU5S0036AV02 Eudemon1000E X6 URL Filtering Update Service Subscribe 36 Months

SU5S012UFM02 Eudemon1000E X6 Anti-Spam Update Service Subscribe 12 Months

SU5S036UFM02 Eudemon1000E X6 Anti-Spam Update Service Subscribe 36 Months

SU5S12MAIL02 Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 12 Months

SU5S36MAIL02 Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 36 Months

SU5S12UTMG02 Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months

SU5S36UTMG02 Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months

Copyright © Huawei Technologies Co., Ltd. 2011.

All rights reserved.

The information in this document is subject to change without notice. Every effort has been made in the

 preparation of this document to ensure accuracy of the contents, but all statements, information, and

recommendations in this document do not constitute the warranty of any kind, express or implied.