Interface

1 configuration port

（CON）

1 RJ45 management port 2 external USB host

Interface

8 Gigabit Ethernet electrical port

1 configuration port

（CON）

1 RJ45 management port 2 external USB host

Interface

8 Gigabit Ethernet electrical ports 2 Gigabit Combo

1 configuration port（CON）

1 RJ45 management port

2 external USB host interface 15 Gigabit Ethernet electrical port

8 Gigabit Ethernet Optical port  

1 configuration port（CON）

1 RJ45 management port

2 external USB host interface 15 Gigabit Ethernet electrical port

8 Gigabit Ethernet Optical port

2 Gigabit Ethernet Optical port

Expansion slot

N/A

One  

Storage medium

N/A

1*（480G SSD/500G HDD）

1*（480G SSD/500G HDD/1T HDD）

2*（480G SSD/500G HDD/1T HDD） 

Operating mode

Routing mode, transparent mode, mixed mode

AAA service

service

Portal authentication, RADIUS authentication, HWTACACS authentication, PKI /CA (X.509) authentication, domain authentication, CHAP authentication, and PAP authentication

Firewall

SOP  virtual firewall technology, support the CPU, memory, storage, and  other hardware resources are divided into the fully virtualized security  zoning

Can  the defense of Land, Smurf And Fraggle, Ping of Death, Tear Drop, IP  Spoofing, IP fragmented packets, ARP spoofing, ARP active anti - 

Based on the characteristics of the virus were detected  

Support the virus database manually and automatically upgrade  

Virus protection

Message stream processing mode  

Supports HTTP, FTP, SMTP, POP3 protocols  

Support virus type: Trojan, Email-Worm, IM-Worm, P2P-Worm, Trojan And AdWare, Virus, etc.  

Support the virus log and report  

Support  for hacker attacks, worms/viruses, Trojan horses, malicious code,  spyware/adware, DoS/DDoS and other common attack defense  

Supports buffer overflow, SQL injection, IDS/IPS evasion attack defense  

Depth into the

Invasion defense

To  support the attack signature database classification according to the  type of attack, the target system for classification, grading（division  of high, medium, low, prompt fourth grade）  

To support the attack signature database manually and automatically upgrade TFTP and HTTP  

Support for BT and other P2P/IM the identification and control  

Mail filtering  

SMTP e-mail address filter  

Title of e-mail filtering  

Mail content filtering  

Mail/

Web/ application layer

Mail attachment filtering web filtering  

HTTP URL filtering  

Filter

HTTP/HTTPS content filtering  

Application layer filtering  

Java Blocking  

ActiveX Blocking  

SQL injection attack prevention  

NAT

Support  for multiple internal addresses are mapped to the same public network  address to support multiple internal address is mapped to multiple  public addresses to support the internal address to public IP address  mapping  

Supported  source and destination addresses at the same time conversion support  external network host to access the Internal Server  

Support the internal address is mapped directly to the interface public IP address support DNS mapping function  

Can be configured to support NAT of the effective time  

Support multiple NAT ALG, including DNS, FTP, H. 323, ILS, MSN, NBT, PPTP, SIP, etc.  

VPN

L2TP VPN, IPSec VPN, GRE VPN, SSL VPN  

High reliability

Support SCF 2:1 virtualization

Supports  dual-system state hot backup Active/Active and Active/Backup two  operating modes supports dual-configuration synchronization

Supports IKE status synchronization through IPSec VPN

Support VRRP

Easy to maintain

Support command line-based configuration management

Support Web remote configuration management

Support H3C SSM Security Management Center device management

Supports standard network management SNMPv3, and is compatible with SNMP v1 and v2

Intelligent security policy

Environmental and certification

The support of the European strict RoHS environmental protection certification