Huawei USG6625E-AC Core Firewall, 20 Gbps Throughput, 6×10 GE SFP+, 6×GE SFP & 16×GE RJ45

Q1: What models are included in the Huawei USG6600 Series, and how are they sold?

A: The series includes various fixed-frame models (e.g., USG6615F, USG6625F, USG6635F, USG6655F, USG6685F) and larger chassis like USG6710F/6725F. These are fixed and sold as complete units; no separate module slots — all interfaces are onboard and cannot be added post-purchase.

Q2: Is the module‑based design available in the USG6600 Series?

A: No. The USG6600 Series are fixed‑configuration appliances. There are no separate module slots — all network interfaces, acceleration engines, and power supplies are integrated and not field‑expandable.

Q3: What kind of performance (throughput) can I expect?

A: Throughput ranges from 15 Gbps (USG6615F) up to 50 Gbps (USG6655F) for IPv4 traffic, with NGFW throughput (firewall + IPS + AV) from roughly 4–25 Gbps depending on model .

Q4: Does it support IPv6 and dual‑stack?

A: Yes — all models support IPv4/IPv6 dual‑stack operation. Some models also support advanced IPv6 features like SRv6.

Q5: What security functions are integrated?

A: The firewall integrates NGFW features — firewall, IPS, antivirus, URL filtering, application awareness (over 6,000 applications), APT sandboxing, Anti‑DDoS, VPN support (IPSec, SSL, GRE), data leak prevention, and bandwidth management.

Q6: How does intelligence and threat detection work?

A: The USG6600F models include AI-driven security — sandbox-based unknown threat detection, intelligent signature generation from cloud, application-based DPI, and simplified security policy management via SmartPolicy.

Q7: Can the firewall protect encrypted traffic?

A: Yes — it supports SSL inspection (HTTPS) and integrates with sandbox/cloud for threat detection in encrypted traffic.

Q8: What are the interface types and fixed-port configurations?

A: Depending on model, you get ports like 8 GE combo, 4 GE, 6–10 10 GE SFP+ (USG6600F), or higher-speed options such as 25/40/100 GE on larger models.

Q9: Does it support high availability?

A: Yes — dual AC power supplies are supported in larger models (e.g., USG6625F and above). Redundant power and failover capabilities ensure continuous operation.

Q10: What about VPN and SD-WAN support?

A: It supports high-performance IPSec VPN (up to 30–65 Gbps depending on model), SSL VPN, and Secure SD-WAN with centralized management capabilities.

Q11: How many concurrent sessions and SSL VPN users can it handle?

A: Concurrent sessions range from 10–50 million, new sessions/sec up to ~500k–1.5M, and SSL VPN support ranges from thousands up to 30,000 users depending on model.

Q12: What about virtualization and multi-tenancy?

A: Each device supports up to 2048 virtual firewalls (vsys), enabling multi-tenant deployments on a single appliance.

Q13: Is there centralized management?

A: Yes — supports Huawei SecoManager, NCE-Campus, Qiankun Cloud, with web UI for visibility, policy tuning, threat insights and O&M automation.

Q14: What are the hardware specs and storage options?

A: Standard 1U rack-mount chassis; 8–16 GB ECC memory in base models; optional SSD/HDD storage; dual PSU on higher-end models; operating in 0–45 °C environments.

Q15: What licenses are required?

A: Base system includes firewall/VPN; additional feature licenses (e.g., IPS, AV, URL filtering, Anti-DDoS, virtual firewalls, SSL VPN users) and IPv6/SD-WAN/industrial controls require subscription-based licensing.

Q16: What deployment scenarios are ideal?

A: Suitable for enterprise/data-center borders, WAN gateway for branches, SD-WAN edge, VPN concentrator, and multi‑tenant virtualized environments.