2014 年 3 月 10 日星期一 Huawei Next-Generation Network Security Author/ ID: renping/90006721 Dept: Enterprise Networking Marketing Execution Dept Version: V1.0(20140121)
Big Data has Come Big Security programs: Malicious software manufacturing specialization Malicious data mixed in with the normal data More and more APT attacks Web threats APT Big Data Botnet Mobile threats Big Data in Global Big Data in Internet Global Traffic reached 1000PB time One year in 2001 One month in 2004 One week in 2007 One day in 2013 A day to produce the amount of information can be carved with 188 million DVDS Taobao(day) Tens of millions of trades More than 50TB of data 40PB storage data Facebook(day) Upload 300 million photos An increase of more than 500TB of data The new Moore's Law: The volume of data traffic generated every 18 months now equals that for all of human history. -Turing Award-winner Jim Gray Big Data in IOT IOT: The Internet of Things An 8Mbps camera one hour to generate 3.6GB of data, If a city install hundreds of thousands of traffic and security cameras, the amount of data generated each month to reach dozens of PB. 1
Huawei Next-Generation Network Security Awareness Analysis Automation Intelligent Management & Control: 6 dimensions awareness Policy auto-optimization 10101101101 01 10101101100 001 10101100101 1011 10101100101 1011 110101101011 1000 00011101001 10110 10101101011 10110 01101010101 0111 10101100101110100 01010101010 0011 00011101101 1010 10110110110 101 Data collect Application identification Data analysis Layer-7 protection Full-Scale Security Topspeed Entire Network Defense: Big data analysis whole network equipment collaboration High Efficiency and Accuracy: 7 level T T-level performance Over 6000 types of application identification 2
Huawei NGFW Product Portfolio 2014 2013 2014 Higher Performance Tera-Grade NGFW Large-scale application 13 Models 1G-40G FW+APP Performance 20G Full Protection Performance Full Integration NGFW Security Blade USG9000 series USG6000 series S7700/9700/S12700 CE12800 3
Huawei Next-Generation Firewall The highest comprehensive performance NGFW: 7-layer protection performance ( FW+ App): 40Gbps Full Threat Protection Performance : 20Gbps IPSec VPN Performance: 20Gbps New sessions/sec: 400,000 Concurrent Sessions: 12,000,000 All-around threat defense: USG6000 series Next-generation Firewall Over 3500 IPS signature Over 85 million URLs in over 80 categories Cloud & sandbox technical innovation, APT prevention 20% 30% 50% The most number of application identification, 20% higher than other vendors. The highest new sessions per second, 30% higher than other vendors When all threat prevention functions are enabled, the performance drop lower than 50% 4
Borussia Dortmund Adopts a New Business Model Security and service continuity: Huawei end-to-end stadium solutions Huawei's NGFW product provides a complete set of protection measures, including intrusion protection, anti-virus, and anti-ddos, for fans and the stadium's data center to prevent cyber attacks against network services. Differentiated QoS By using Huawei's NGFW and Terminal Security Management (TSM) products, the stadium can accurately differentiate VIP spectators from ordinary ones and thus provide different fan segments with distinct levels of service quality. NGFW can control traffic based on application, thereby limiting or forwarding the traffic of different applications. 5
HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY Copyright 2014 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.