Huawei USG5500 Unifies Security Gateway Specification reference

Transcription

1 Huawei USG5500 Unifies Security Gateway Specification reference Huawei Technologies Co. Ltd

2

3 Overall Unit Specifications Hardware Specification USG5520S USG5530S USG5530 USG5550 USG5560 Size (Width Depth Height) 1U 1U 3U, 3U 3U 442 mm 560 mm 43.6 mm 442 mm 560 mm 43.6 mm 442 mm mm mm 442 mm mm mm 442 mm mm mm Fixed interface 4 GE electrical interface + 4 GE 4 GE electrical interface + 4 GE 4 GE electrical interface + 4 GE 4 GE electrical interface + 4 GE 4 GE electrical interface + 4 GE + 8 GE optical interface Out-of-band management interface 1 GE interface 1 GE interface 1 GE interface 1 GE interface 1 GE interface USB port SD card slot Console port Expansion slot 2 FICs 2 FICs 6 FICs,2 MICs 5 FICs,2 MICs 5 FICs Maximum number of interfaces 4 10GE interface + 24 GE interface [fixed interface + 2 FICs (2 10GE interface + 8 GE interface) interface card] 4 10GE interface + 24 GE interface [fixed interface + 2 FICs (2 10GE interface + 8 GE interface) interface card] 14 10GE interface + 64 GE interface [fixed interface + 1 DMIC 2 10GE interface card + 6 FICs (2 10GE interface + 8 GE interface) interface card] 12 10GE interface + 56 GE interface [fixed interface + 1 DMIC 2 10GE interface card + 5 FICs (2 10GE interface + 8 GE interface) interface card] 12 10GE interface + 56 GE interface [fixed interface + 5 FICs (2 10GE interface + 8 GE interface) interface card] Central processing unit (CPU) XLR MHz XLR MHz XLR MHz XLR MHz XLR MHz Random access memory (RAM) 2 2 GB 2 2 GB 2 2 GB 2 2 GB 2 2 GB Nonvolatile random access memory (NVRAM) 512 KB 512 KB 512 KB 512 KB 512 KB Flash 64 MB 64 MB 64 MB 64 MB 64 MB Compact flash memory card 2 GB 2 GB 2 GB 2 GB 2 GB Hard disk None None None None None Switched network capacity 256 Gbps 256 Gbps 256 Gbps 256 Gbps 256 Gbps Backplane capacity 256 Gbps 256 Gbps 256 Gbps 256 Gbps 256 Gbps Weight 10 kg 10 kg 18 kg 18 kg 18 kg Power module Standard duplicate power supply with AC or DC (optional) Standard duplicate power supply with AC or DC (optional) Standard duplicate power supply with AC or DC (optional) Standard duplicate power supply with AC or DC (optional) Standard duplicate power supply with AC or DC (optional) Rated input voltage (AC) 100 V to 240 V, 50 Hz to 60 Hz 100 V to 240 V, 50 Hz to 60 Hz 100 V to 240 V, 50 Hz to 60 Hz 100 V to 240 V, 50 Hz to 60 Hz 100 V to 240 V, 50 Hz to 60 Hz Maximum input voltage (AC) 90 V to 264 V, 47 Hz to 63 Hz 90 V to 264 V, 47 Hz to 63 Hz 90 V to 264 V, 47 Hz to 63 Hz 90 V to 264 V, 47 Hz to 63 Hz 90 V to 264 V, 47 Hz to 63 Hz Rated input voltage (DC) 48 V to 60 V 48 V to 60 V 48 V to 60 V 48 V to 60 V 48 V to 60 V Maximum input voltage (DC) 36 V to 72 V 36 V to 72 V 36 V to 72 V 36 V to 72 V 36 V to 72 V Power 150 W 150 W 300 W 300 W 300 W Ambient temperature Long term: 0 to 45 Ambient humidity 5% to 95%, non-condensing 5% to 95%, non-condensing 5% to 95%, non-condensing 5% to 95%, non-condensing 5% to 95%, non-condensing Mean time between failures (MTBF) years years years years years Mean time to repair (MTTR) 0.5 hours 0.5 hours 0.5 hours 0.5 hours 0.5 hours Reliability % % % % %

4 IPv4 route Static route Routing Information Protocol (RIP) Intermediate System to Intermediate System (IS-IS) Protocol Open Shortest Path First (OSPF) Border Gateway Protocol (BGP) Multiprotocol BGP (MBGP) Multiprotocol Label Switching (MPLS)/BGP virtual private network (VPN) BGP VPN-IPV4 Protocol Independent Multicast-Dense Mode (PIM-DM) Protocol Independent Multicast-Sparse Mode (PIM-SM) Internet Group Management Protocol (IGMP) Static multicast route IPv4 policy-based routing IPv4 routing policy Security features of IPv4 Firewall Network Address Translation (NAT) Anti-DDoS capability (basic anti-ddos capability) (basic anti-ddos capability) (basic anti-ddos capability) (basic anti-ddos capability) (basic anti-ddos capability) IP Security VPN Layer 2 Tunneling Protocol (L2TP) VPN Secure Sockets Layer (SSL) VPN Intelligent protection switching (IPS) Anti-virus Web filtering (including URL filtering) filtering (including anti-spam) Point-to-point (P2P)/IM controlling GPRS Tunneling Protocol (GTP) features Security access control gateway (SACG) MPLS L3 VPN Label Distribution Protocol (LDP) LSPM MPLS L3 VPN IPv6 transition technology Dual stack IPv4 over IPv6 manual tunnel IPv6 over IPv4 manual tunnel IPv6 over IPv4 automatic tunnel IPv6 over IPv4 Generic Routing Encapsulation (GRE) tunnel

5 IPv6 over IPv4 6to4 tunnel IPv6 rapid deployment (6RD) NAT64 IPv6 route Static route Routing Information Protocol next generation (RIPng) OSPFv3 BGP-4+ IS-ISv6 IPv6 policy-based routing IPv6 routing policy Security features of IPv6 Access control list 6 (ACL6) Police 6 IPv6 application specific packet filter (ASPF) and application level gateway (ALG) Reliability BOOTROM backup Host software backup Factory configuration recovery Dual-system hot backup Hot swap of power and fan modules Binding of ports Authentication and certificates Sales permit issued by the Ministry of Public Security Classified certificate issued by State Secrets Bureau China Information Technology Security Authentication Center (CNITSEC) ICSA authentication Not supported Not supported Not supported Not supported Not supported ISCCC authentication Restriction of the use of certain hazardous substances (RoHS) Waste electrical and electronic equipment (WEEE) REACH CE-CERT FCC-DOC UL CB VCCI IC C-TICK License

6 Control of the GTP functions by using the License Control of the number of virtual firewalls by using the License Control of the number of IPSec VPN tunnels by using the License Control of the number of SSL VPN concurrent users by using the License Control of the IPS update services by using the License Control of the AV update services by using the License Control of the anti-spam update services by using the License Control of the URL filtering update services by using the License Control of the UTM function update services by using the License

7 Hardware Specifications Specification and Features USG5520S/5530S USG5530 USG5550 USG5560 Remarks Firewall hardware specification Size 1 U model 3 U model 3 U model 3 U model Central processing unit (CPU) XLR MHz XLR MHz XLR MHz XLR MHz Nonvolatile random access memory (NVRAM) 512 KB 512 KB 512 KB 512 KB Random access memory (RAM) 2 2 GB 2 2 GB 2 2 GB 2 2 GB Flash 64 MB 64 MB 64 MB 64 MB Size (W D H) 1 U: 442 mm 560 mm 43.6 mm 3 U: 442 mm mm mm 3 U: 442 mm mm mm 3 U: 442 mm mm mm Fixed Ethernet interface 4 GE electrical interface + 4 GE 4 GE electrical interface + 4 GE 4 GE electrical interface+ 4 GE 4 GE electrical interface + 8 GE optical interface + 4 GE Console port Interface rate is bps, default Interface rate is bps, rate is 9600 bps, stop bit is 1, and data bit default rate is 9600 bps, stop bit is 1, is 8. and data bit is 8. Interface rate is bps, default rate is 9600 bps, stop bit is 1, and data bit is 8. USB 2.0 port Number of expansion slots 2 FICs 6 FICs 2 MICs 5 FICs 2 MICs Interface rate is bps, default rate is 9600 bps, stop bit is 1, and data bit is 8. Input voltage (AC) AC: 100 V to 240 V, 50/60 Hz AC: 100 V to 240 V, 50/60 Hz AC: 100 V to 240 V, 50/60 Hz AC: 100 V to 240 V, 50/60 Hz Maximum input voltage (AC) AC: 90 V to 264 V, 47 Hz to 63 Hz AC: 90 V to 264 V, 47 Hz to 63 Hz AC: 90 V to 264 V, 47 Hz to 63 Hz AC: 90 V to 264 V, 47 Hz to 63 Hz Rated input voltage (DC) DC: 48 V to 60 V DC: 48 V to 60 V DC: 48 V to 60 V DC: 48 V to 60 V Maximum input voltage (DC) DC: 36 V to 72 V DC: 36 V to 72 V DC: 36 V to 72 V DC: 36 V to 72 V Maximum consumption 150 W 300 W 300 W 300 W Weight 10 kg 18 kg 18 kg 18 kg Alarm indication Real-time clock Ambient temperature for operation 5 FICs Ambient humidity for operation 5% to 95%, non-condensing 55% to 95%, non-condensing 55% to 95%, non-condensing 55% to 95%, non-condensing Ambient temperature for storage 0 to 45 0 to 45 0 to 45 0 to 45 Ambient humidity for storage 5% to 95%, non-condensing 55% to 95%, non-condensing 55% to 95%, non-condensing 55% to 95%, non-condensing Mean time between failures (MTBF) years years years years Mean time to repair (MTTR) 0.5 hours 0.5 hours 0.5 hours 0.5 hours Reliability % % % % Cards Two vertically adjacent slots can be integrated into one DFIC. Two longitudinally adjacent MIC can be integrated into one DMIC. 2 10GE interface card (0302G308) Not supported Not supported Only X6 and X7 integrated devices support using one DMIC card respectively. 2 10GE interface card (0302G335) It is classified as FIC card. 8 GE optical interface card It is classified as FIC card. 8 GE electrical interface card It is classified as FIC card. 2 10GE + 8GE electrical interface card It is classified as FIC card. 4 GE BYPASS card It is classified as FIC card and is only applied to the transparent mode. 2 link LC/UPC single-mode optical interface bypass protect card It is classified as FIC card and is only applied to the transparent mode. 2 link LC/UPC multi-mode optical interface bypass protect card USB 3G data card Encryption card It is classified as FIC card and is only applied to the transparent mode. The 3G data card is inserted into the USB port and supports three 3G modes: WCDMA, CDMA2000, and TD-SCDMA. It is classified as FIC card and is only sold in China. 18 FE electrical interface + 2 GE optical interface card 16 GE electrical interface + 4 GE optical interface card It is classified as DFIC card and low-rate card. It is classified as DFIC card and low-rate card.

8 FW Security Specification(IPv4) Security Primary Specification USG5520S USG5530S USG5530 USG5550 USG5560 Remarks Maximum throughput of the integrated device (bps) 6 Gbps 10 Gbps 15 Gbps 25 Gbps 32 Gbps Mixed packet throughput 3 Gbps 5 Gbps 7 Gbps 25 Gbps 32 Gbps Small packet (64-byte) rate (bidirectional) 1.5 Gbps 2 Gbps 3 Gbps 10 Gbps 10 Gbps Packet forwarding rate (pps) 2.25 Mpps 3 Mpps 4.5 Mpps 15 Mpps 15 Mpps Number of new connections per second 100,000/s 150,000/s 200,000/s 200,000/s 200,000/s Maximum number of concurrent connections 2,000,000 3,000,000 4,000,000 4,000,000 4,000,000 Working mode Routing mode Support Support Transparent mode Support Support Composite mode Support Support Security domain Number of default security domains Number of security domains Root firewall: 32 (4 fixed firewalls and 28 Virtual firewall: 8 (4 fixed firewalls and 4 Root firewall: 32 (4 fixed firewalls and 28 Virtual firewall: 8 (4 fixed firewalls and 4 Root firewall: 32 (4 fixed firewalls and 28 Virtual firewall: 8 (4 fixed firewalls and 4 Root firewall: 32 (4 fixed firewalls and 28 Virtual firewall: 8 (4 fixed firewalls and 4 Range for the configuration of user-defined security domain precedence Number of the interfaces that can be added in the domain Virtual firewall Maximum number of virtual firewalls Number of interfaces supported by the virtual firewall Forwarding across different virtual firewalls in the routing mode Support Configuration multi-instance Support Security domain multi-instance Support ACL multi-instance Support Address group multi-instance Support Service set multi-instance Support Session multi-instance Support Servermap multi-instance Support Blacklist multi-instance Support Virtual routing and forwarding (VRF) Support NAT multi-instance Support IPSEC VPN multi-instance Support L2TP VPN multi-instance Support GRE VPN multi-instance Support When IPv4 over IPv6 tunneling is used, multiple VPN instances can be bound. (When IPv4 over IPv6 tunneling is used, a VPN instance can be bound.) (When IPv4 over IPv6 tunneling is used, a VPN instance can be bound.) (When IPv4 over IPv6 tunneling is used, a VPN instance can be bound.) (When IPv4 over IPv6 tunneling is used, a VPN instance can be bound.) Network Time Protocol (NTP) multi-instance Support WEB multi-instance Support SLB multi-instance Support Network management multi-instance Support Management of virtual system users Support Multi-instance of virtual system user login log Support Multi-instance of virtual system user operation log Support Management of the virtual system by the system users with Telnet Support Management of the virtual system by the system users with SSH Support Management of the virtual system by the system users with WEB Support Blacklist Static blacklist Support Number of static blacklist entries Dynamic blacklist Support Number of dynamic blacklist entries Authentication failure blacklist Support Designating number of failed authentication attempts Support Adding the user's IP address to the blacklist when the user fails to log in by using Telnet and SSH Support Designating number of failed login attempts Support Root firewall: 32 (4 fixed firewalls and 28 Virtual firewall: 8 (4 fixed firewalls and 4 (When IPv4 over IPv6 tunneling is used, a VPN instance can be bound.)

9 Blacklist of Web user login failure Support IP-Sweep blacklist Support Port-Scan blacklist Support ACL policy for blacklist association Support Packet filtering Independent ACL rule in each inter-domain inbound direction Independent ACL rule in each inter-domain outbound direction Default filtering rule of the firewall Unique default rule based on inter-domain MAC address-based access rule configured on the interface Setting of the packet filtering functions in the designated domain Access Control List (ACL) Layer-2 ACL Number of ACLs and rules Support 14 ACLs totally and each ACL supports 128 rules. Support 14 ACLs totally and each ACL supports 128 rules. Support 14 ACLs totally and each ACL supports 128 rules. Support 14 ACLs totally and each ACL supports 128 rules. Filtering based on the COS Filtering based on the destination MAC address Filtering based on the LSAP Filtering based on the source MAC address and source mask Filtering based on the type code and type wildcard Layer-3 ACL Filtering of the source address of IP packets Filtering of the destination address of IP packets Filtering of ICMP message types Filtering of ICMP message codes Filtering of the source and destination port numbers of TCP packets Filtering of the source and destination port numbers of UDP packets Support 14 ACLs totally and each ACL supports 128 rules. Packet precedence filtering (Support the filtering for (Support the filtering for (Support the filtering for (Support the filtering for (Support the filtering for TOS/Precedence.) TOS/Precedence.) TOS/Precedence.) TOS/Precedence.) TOS/Precedence.) Use of time range-based ACL rules (The time range-based ACL (The time range-based ACL (The time range-based ACL (The time range-based ACL (The time range-based ACL does not apply the IPSec Policy.) does not apply the IPSec Policy.) does not apply the IPSec Policy.) does not apply the IPSec Policy.) does not apply the IPSec Policy.) Address group Mask Wildcard mask Nesting of address group Address object (The address group of object (The address group of object (The address group of object (The address group of object (The address group of object type) type) type) type) type) Number of address elements for configuration in each address object Number of items in the address set 10,000 10,000 10,000 10,000 10,000 Maximum number of address groups 512 (Group-address-set address group) 512 (Group-address-set address group) 512 (Group-address-set address group) 512 (Group-address-set address group) 512 (Group-address-set address group) Number of the addresses of each address group Maximum number of the address group elements 100, , , , ,000 Service set 1024 (Service object can define the 1024 (Service object can define the 1024 (Service object can define the 1024 (Service object can define the 1024 (Service object can define the Number of service objects protocol for data flow, source port, and protocol for data flow, source port, and protocol for data flow, source port, and protocol for data flow, source port, and protocol for data flow, source port, and destination port. Service object is included destination port. Service object is included destination port. Service object is included destination port. Service object is included destination port. Service object is included in the service set.) in the service set.) in the service set.) in the service set.) in the service set.) Service set nesting Number of service groups Number of predefined service objects Number of items in the service 10,000 10,000 10,000 10,000 10,000 ACL acceleration After the ACL rules are changed, the service using the ACL takes effect automatically. Counting of the hits of the rule The ACL supports field description. The rule supports field description. Basic ACL groups marked with numerals Advanced ACL groups marked with numerals Number of ACL rules in each ACL group 30,000 30,000 30,000 30,000 30,000 Number of ACL rules with logs Maximum number of definable ACLs 30,000 30,000 30,000 30,000 30,000 Time range Absolute time ranges Periodical time ranges Number of configurable time ranges Maximum number of absolute times allowed in each time range Maximum number of cycle times allowed in each time range After the packets hit the blacklist, find out the ACL policy associated with the blacklist. If the packet hits the ACL policy which allows it pass through, then it passes through; otherwise, the packets are filtered and dropped.

10 UTM Performance and Features Item Functions USG5520S USG5530S USG5530 USG5550 USG5560 Unified Threat Management (UTM) Performance Intelligent Protection Switching (IPS) performance Anti-Virus performance Uniform Resource Locater(URL) performance IPS Intrusion Prevention IPS Antivirus URL filtering Anti-spam Data throughput (UDP) 1 Gbps 1.5 Gbps 2 Gbps 2 Gbps 2 Gbps Data throughput (HTTP) 700 Mbps 800 Mbps 900 Mbps 900 Mbps 900 Mbps Capacity of the signature repository Data throughput (HTTP) 700 Mbps 800 Mbps 900 Mbps 900 Mbps 900 Mbps Capacity of the anti-virus library 40 K 40 K 40 K 40 K 40 K Virus that can be detected 9 M + 9 M + 9 M + 9 M + 9 M + URL category Number of the URL entries 65 M 65 M 65 M 65 M 65 M URL category database of the malicious websites 42 K 42 K 42 K 42 K 42 K URL category database of the phishing websites 13 K 13 K 13 K 13 K 13 K Number of the local Cache entries of the URL 100 K 100 K 100 K 100 K 100 K Number of the local hot library entries of the URL 100 K 100 K 100 K 100 K 100 K Deployment mode Protection mode Alarm mode Capacity of the signature repository 2000 plus 2000 plus 2000 plus 2000 plus 2000 plus Fragment reassembly Flow reassembly Feature-based intrusion prevention Protocol anomaly detection Protocol identification User-defined IPS signature Global IPS enabling switch Setting category-based response modes

11 Setting response modes based on a single signature forcibly Applied in the interdomain (either inbound or outbound) and intradomain Response mode adopted by the new signature after the upgrade shall be consistent with that of the class that the signature belongs to. Anti-Virus Setting privileged IPS: specifying a certain existing IPS policy as a privileged policy IPS virtualization Virtual firewall detected by IPS IPS detects the transmission packets of each virtual firewall. Number of the IPS policies supported by the virtual firewall Six global IPS policies Six global IPS policies Six global IPS policies Six global IPS policies Six global IPS policies Provision of the IPS policies template Display of the signatures according to different categories Query of signatures Signature repository upgrade Automatic upgrade Manual upgrade Local upgrade Version rollback Global antivirus enabling switch Grade setting for the virus scanning Level 1 to level 3 Level 1 to level 3 Level 1 to level 3 Level 1 to level 3 Level 1 to level 3 Scanning files uploaded or downloaded through HTTP Scanning files uploaded or downloaded through FTP Scanning SMTP mail attachments Scanning POP3 mail attachments Size of files scanned 20 MB 20 MB 20 MB 20 MB 20 MB Scanning compressed files Compressed file types (the maximum (the maximum (the maximum (the maximum (the maximum number of files to be number of files to be number of files to be number of files to be number of files to be scanned is 100) scanned is 100) scanned is 100) scanned is 100) scanned is 100) Compressed supported: Mac binary, Apple Single, ZIP, OLESS -- Structured Storage (MS Office documents), OLE1 (not the same as OLESS), GZIP, LHA, RAR, ARJ, TNEF, LZ, AMG, TAR, RTF, BZIP2, PDF, and TEXT (MIME, BinHex, UUE, MBOX) formats Compressing supported: Mac binary, Apple Single, ZIP, OLESS -- Structured Storage (MS Office documents), OLE1 (not the same as OLESS), GZIP, LHA, RAR, ARJ, TNEF, LZ, AMG, TAR, RTF, BZIP2, PDF, and TEXT (MIME, BinHex, UUE, MBOX) formats Compressing supported: Mac binary, Apple Single, ZIP, OLESS -- Structured Storage (MS Office documents), OLE1 (not the same as OLESS), GZIP, LHA, RAR, ARJ, TNEF, LZ, AMG, TAR, RTF, BZIP2, PDF, and TEXT (MIME, BinHex, UUE, MBOX) formats Compressing supported: Mac binary, Apple Single, ZIP, OLESS -- Structured Storage (MS Office documents), OLE1 (not the same as OLESS), GZIP, LHA, RAR, ARJ, TNEF, LZ, AMG, TAR, RTF, BZIP2, PDF, and TEXT (MIME, BinHex, UUE, MBOX) formats Compressing Setting of decompressed layer 2 20 layer 2 20 layer 2 20 layer 2 20 layer 2 20 layer formats supported: Mac binary, Apple Single, ZIP, OLESS -- Structured Storage (MS Office documents), OLE1 (not the same as OLESS), GZIP, LHA, RAR, ARJ, TNEF, LZ, AMG, TAR, RTF, BZIP2, PDF, and TEXT (MIME, BinHex, UUE, MBOX)

12 WEB filtering Scanning packed viruses Setting refined virus scanning policies of HTTP Setting refined virus scanning policies of SMTP protocol Setting refined virus scanning policies of POP3 protocol Common configurations for policies The policy is applied in the interdomain in inbound or outbound direction. The user can query the virus list of the current signature files. Virus URL collection AV virtualization Virtual firewall detected by AV AV detects the transmission packets of each virtual firewall. Number of the AV policies supported by the virtual firewall Six global IPS policies Six global AV policies Six global AV policies Six global AV policies Six global AV policies Configuration of the AV policy within the root firewall and application of that within the virtual firewall instance Anti virus database and anti-virus engine upgrade Automatic upgrade Manual upgrade Local upgrade Version rollback URL filtering URL standardization Classification filtering based on remote URL Classification filtering based on local URL URL keyword filtering Providing URL blacklist and whitelist Providing global URL filtering configuration Providing inter-domain switch of the global URL filtering Providing default processing action configuration of the URL policies Providing configuration for the content of the push page Providing URL filtering policies setting of the fine grain Number of the URL polices of the fine grain Configuration parameters of the URL filtering policies at least comprises: on/off for each sub-function and action of classification. Both prohibition and permission of the response mode are available. In the prohibition mode, the page push is available. Application in the web policies Default action configuration

13 filtering Adjustment of the user-defined classification priority URL visiting design URL hot library URL filtering virtualization WEB filtering WEB content and keyword filtering Keyword of the search engine filtering, Google, Yahoo, Bing, and Baidu, Google, Yahoo, Bing, and Baidu, Google, Yahoo, Bing, and Baidu, Google, Yahoo, Bing, and Baidu Anti-spam Blacklist and whitelist filtering based on the local IP(SMTP) SMTP supports filtering of the local IP whitelist. Number of the whitelists SMTP supports filtering of the local IP blacklist. Number of the blacklists Whitelist shall prevail when an IP simultaneously appears in the blacklist and whitelist. Anti-Spam filtering based on the remote RBL(SMTP) Response action setting Blocking, alarming, and discharging Blocking, alarming, and discharging Blocking, alarming, and discharging Blocking, alarming, and discharging content filtering, Google, Yahoo, Bing, and Baidu Blocking, alarming, and discharging type webmail webmail (163/Yahoo), smtp, webmail (163/Yahoo), smtp, webmail (163/Yahoo), smtp, webmail (163/Yahoo), smtp, (163/ahoo), smtp, and POP3 and POP3 and POP3 and POP3 and POP3 Receiver/sender keyword filtering Keyword filtering of the subject and content Attachment files name/capacities/extensions/number of attachments shall be filtered according to users. Response mode SMTP response mode: return the blocking answerback code and reason; POP3 response mode: write a new to replace the blocked for the receiver; Webmail response mode: discharging and blocking SMTP response mode: return the blocking answerback code and reason; POP4 response mode: write a new to replace the blocked for the receiver; Webmail response mode: discharging and blocking SMTP response mode: return the blocking answerback code and reason; POP5 response mode: write a new to replace the blocked for the receiver; Webmail response mode: discharging and blocking SMTP response mode: return the blocking answerback code and reason; POP5 response mode: write a new to replace the blocked for the receiver; Webmail response mode: discharging and blocking filtering virtualization SMTP response mode: return the blocking answerback code and reason; POP5 response mode: write a new to replace the blocked for the receiver; Webmail response mode: discharging and blocking