Security Level Huawei Symantec Technologies Co., Ltd. Huawei Symantec Confidential 35-40pt 25-30pt 200#-##-## Competition Analysis of the USG2000 2010-04-13. - презентация

1 Security Level Huawei Symantec Technologies Co., Ltd. Huawei Symantec Confidential 35-40pt 25-30pt 200#-##-## Competition Analysis of the USG

2 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 2 Huawei Symantec Technologies Co., Ltd. Contents Product Overview of the USG2000 Competition Analysis of the USG2000 Market Opportunities of the USG2000

3 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 3 Huawei Symantec Technologies Co., Ltd. Advantages ALL IN ONE integrating various functions: first security gateway integrating the functions of routing, switching, security, and wireless (WiFi and 3G) access in the industry Extensive interfaces offering brilliant scalability: most comprehensive interface types in the industry, including 1 x FE, 1 x E1/CE1, 5 x FE, 1 x ADSL2+, 3G, 1 x GE, 2 x E1/CE1, and SA interfaces Excellent performance providing enterprises with smooth network transmission: highest integrated performance in the industry Progressive wireless function all-wireless office: first security gateway supporting all-wireless interconnection in the industry Comprehensive VPN solution ensuring secure multi-region interconnection: a security gateway supporting VPN technologies such as GRE, L2TP, IPSec, SSL, and MPLS, which meets various VPN networking requirements Features of the USG2000 Series Product orientation The USG2000 is oriented to the 100M mid-range and low-end security gateway market, and mainly applies to small and medium- sized enterprises. The USG2200 is of high performance and enhanced functions, which provides enterprises with effective and reliable networks. Main performance indicators Throughput: 150M to 1G Concurrent connections: to New connections per second: 1200 to VPN performance: 40M to 500M USG2130 USG2200 USG2160 USG2110

4 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 4 Huawei Symantec Technologies Co., Ltd. Card Mapping USG2110USG2130USG2130WUSG2160USG2160WUSG2200 1FE 5FE ADSL2+ E1/CE1 SA 3G Built-in WiFi WiFi card 1GE LPU 2CE1 LPU 4GE 16GE+4SFP 18FE+2SFP

5 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 5 Huawei Symantec Technologies Co., Ltd. Contents Product Overview of the USG2000 Competition Analysis of the USG2000 Market Opportunities of the USG2000

6 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 6 Huawei Symantec Technologies Co., Ltd. 1G 100M 200M 600M Performance Rival Analysis 400M ASA5505: 150M ASA5510: 300M NS5GT: 75M SSG5: 160M SSG20: 160M SSG140: 350M ASA5520: 450M ASA5540: 650M SSG320: 450M SSG350: 550M SSG520: 650M ASA5550: 1.2G SSG550: 1G SRX210: 750M SRX240: 1.5G FG60B: 100M FG80C: 350M FG110C: 500M UTM-1 136: 400M F100-C: 10M USG2110: 140M UTM-1 276: 600M UTM-1 576: 1.1G F100-S: 80M F100-M: 150M F100-A-SI: 200M F100-E: 400M F1000-C/S/A: 1G USG2130: 200M USG2160: 200M USG2210: 400M USG2220: 600M USG2230: 800M USG2250: 1G FG300A: 400M FG800: 1G NSA 2400: 600M NSA 240: 600M

7 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 7 Huawei Symantec Technologies Co., Ltd. Main parameters compare(1) support × not support FeatureHSCiscoJuniperFortinetH3C USG2110USG2130USG2160ASA5505SSG5SSG20FG-60BF100-M throughput (Mbps) Max connections (k) /16* connection per second Small packet throughput (Mbps) IPSEC VPN throughput (Mbps) Number of IPSEC tunnel /40* Max current users of SSL VPN× Memory (M)128M256M512M256M Interface 1FE WAN 4FE LAN 1FE WAN 8FE LAN 8FE7FE5FE 9FE 6LAN,2W AN,1DMZ 3FE Wireless×optional × Other interface×1MIC2MIC× × 2Mini-PIM 3G WAN 1MIM IPS× AV×××× URL-filtering× ×× × AS×× P2P

8 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 8 Huawei Symantec Technologies Co., Ltd. Main parameters compare(2) FeatureHSCiscoJuniperFortinetH3C USG2210ASA5510SSG140FG-80CF100-A-SI throughput (Mbps) Max connections (k) connection per second Small packet throughput (Mbps) IPSEC VPN throughput (Mbps) Number of IPSEC tunnel Max current users of SSL VPN Memory (M)2G256M Interface 2GE +2GE, +10FE 5FE +4GE 8FE 2GE 2GE+7FE (6LAN,1DMZ) 7FE Wirelessoptional× Other interface 4MIC+2FIC 4PIM 1MIM IPS× AV× URL-filtering× AS× P2P support × not support

9 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 9 Huawei Symantec Technologies Co., Ltd. Main parameters compare(3) FeatureHSCiscoJuniperFortinetCheckpointH3C USG2220ASA5520SSG320SSG350FG300AFG110C UTM UTM F100-E throughput (Mbps) Max connections (k) connection per second Small packet throughput (Mbps) IPSEC VPN throughput (Mbps) Number of IPSEC tunnel Max current users of SSL VPN Memory (M)2G 512M Interface 2FE +2GE,+10F E 4GE 1FE +4GE 4GE 2GE 4FE 2GE,8FE4GE 4FE Wirelessoptional ××-- Other interface 4MIC+2FIC 3PIM5PIM 1MIM IPS× AV× URL-filtering× AS× P2P support × not support

10 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 10 Huawei Symantec Technologies Co., Ltd. Main parameters compare(4) FeatureHSCiscoJuniperFortinet Checkpoint H3C USG2230USG2250ASA5540ASA5550 SSG52 0 SSG55 0 SRX210FG800 UTM F1000 -C/S/A throughput (Mbps)8001G6501.2G6501G7501G1.1G1G Max connections (k) connection per second Small packet throughput (Mbps) IPSEC VPN throughput (Mbps) Number of IPSEC tunnel Max current users of SSL VPN Memory (M)2G 1G4G 512M Interface 2GE +2GE,+10 FE 4GE,1FE, +4GE 8GE4GE 2GE+6F E 4GE2GE Wirelessoptional ××-- Other interface 4MIC+2FI C 4PIM+ 2EPIM 2PIM+ 4EPIM 2MIM IPS×× AV×× URL-filtering×× AS×× P2P support × not support

11 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 11 Huawei Symantec Technologies Co., Ltd. Competition Induction of the USG2000 (1) Strength of the USG2000 Technology generalization on mid-range and low-end products is obvious. As a result, rival products cannot be defeated through functions. Performance, interface types, and price become the common methods. The USG2000 is oriented to the mid-range and low-end market. To compete with rival products, our products provide extensive LPU types. Several low-end rival products do not support LPUs. Therefore, we can take this advantage to beat the rival products. The USG2000 series provides good general performance, especially the USG2200. The performance of the USG2200 can reach 1G in the test, ensuring the competitiveness for the competition. Weakness of the USG2000 Poor UTM function the self-developed UTM function only supports the IPS and AS functions.

12 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 12 Huawei Symantec Technologies Co., Ltd. Competition Induction of the USG2000 (2) Competition analysis of international rivals The general function is comprehensive and the performance is good. Products of traditional device vendors provide comprehensive routing and switching functions. Their content security function, however, is ordinary. Products of few rivals such as Fortinet provide good content security function, but their performance is poor. Products of few rivals such as Checkpoint provide both high performance and good content security function, but the product series is not extensive. Roadmap to compete with international rivals: We can beat Juniper and Cisco in low-end products through interface types; to beat Fortinet, which is good in UTM function, we can take the advantage of performance; other rivals account for lower market share, we can beat them through business services.

13 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 13 Huawei Symantec Technologies Co., Ltd. Competition Induction of the USG2000 (3) Competition analysis of Chinese rivals General performance indicators are high but actually low, especially the number of concurrent connections; other performance in the test is not high. We have advantages in functions, but Chinese rivals ' quick response weakens our function advantage. Due to the poor hardware development, we can beat Chinese rivals through the extensive interface types of the USG2000. Products of high technology cannot provide comprehensive functions. For example, the UTM function is generally unavailable. In addition, the rival products are mostly OEMed, and protocols such as MPLS, and BGP are not supported. Roadmap to beat Chinese rivals: We can beat them through hardware advantages and integrated functions such as MPLS, BGP, and SSL VPN.

14 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 14 Huawei Symantec Technologies Co., Ltd. Contents Product Overview of the USG2000 Competition Analysis of the USG2000 Market Opportunities of the USG2000

15 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 15 Huawei Symantec Technologies Co., Ltd. Security Defense for Small and Medium-sized Enterprises USG2000 Operator OMC Internet FE E1/CE1 ADSL2+ 3G uplink USG2000 USG2160 USG200 0 Serving as the firewall for small and medium- sized enterprises, the USG2000 provides NAT and attack defense functions UTM feature to protect the intranet WiFi function to facilitate the networking Enterprise intranet WiFi

16 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 16 Huawei Symantec Technologies Co., Ltd. VPN Access In the VPN solution, the USG2000, serving as one end of the VPN, establishes VPN tunnels between the headquarters and branches, and provides the encryption function. IPSec VPN tunnel E1ADSL Internet Headquarter s FE USG2000 USG2000 USG2000 USG5000

17