Interface

1 configuration port（CON）

2 USB interface

8 Gigabit Ethernet electrical port

2 2Combo containing a management port）

2 Bypass interface

1 configuration port（CON）

2 USB interface

2 MGMT interface

18 Gigabit Ethernet electrical port

8 Combo interface

4 Bypass interface

2 Gigabit Ethernet Optical port

1 configuration port（CON）

2 USB interface

1 MGMT interface

16 Gigabit Ethernet electrical port

4 Combo interface

6 Gigabit Ethernet Optical port

2 Gigabit Ethernet Optical port

1 configuration port（CON）

1 Micro USB interface

2 USB interface

2 MGMT interface

14 Gigabit Ethernet electrical port

12 Gigabit Ethernet Optical port

4 Gigabit Ethernet Optical port

1 configuration port（CON）

2 USB interface

1 MGMT interface

16 Gigabit Ethernet electrical port

4 Combo interface

4 Gigabit Ethernet Optical port

6 Gigabit Ethernet Optical port

1 configuration port（CON）

1 Micro USB interface

2 USB interface

2 MGMT interface

14 Gigabit Ethernet electrical port

8 Gigabit Ethernet Optical port

8 Gigabit Ethernet Optical port

Expansion slot

No

No

2

2/4

2

Four 

Ambient temperature

Working: 0 to 45℃

Non-operating: -40 to 70℃

Operating mode

Routing mode, transparent mode, mixed mode

AAA service

Portal authentication, RADIUS authentication, HWTACACS authentication, PKI /CA (X.509) authentication, domain authentication, CHAP authentication, and PAP authentication

Firewall

SOP virtual firewall technology, support the CPU, memory, storage, and other hardware resources are divided into the fully virtualized

Safe zoning

Can the defense of Land, Smurf And Fraggle, Ping of Death, Tear Drop, IP Spoofing, IP fragmented packets, ARP spoofing, ARP active reverse lookup, TCP packet flags unlawful super large ICMP packet, address scan, port scan, SYN Flood, UPD Flood, ICMP Flood, DNS Flood, etc. a variety of malicious attacks

Basic and extended access control list

Based on the time period of Access Control List

Based on User, Application Access Control List

ASPF application-layer packet filtering

Static and dynamic blacklist function

IP and MAC binding function

MAC-based Access Control List

Support 802. 1q VLAN transparent transmission

Virus protection

Based on the characteristics of the virus were detected

Support the virus database manually and automatically upgrade

Message stream processing mode

Supports HTTP, FTP, SMTP, POP3, and IMAP

Support virus type: Trojan, Email-Worm, IM-Worm, P2P-Worm, Trojan And AdWare, Virus, etc.

Support the virus log and report

The depth of invasion defense

Support for hacker attacks, worms/viruses, Trojan horses, malicious code, spyware/adware, DoS/DDoS and other common attack defense

Supports buffer overflow, SQL injection, IDS/IPS evasion attack defense

To support the attack signature database classification according to the type of attack, the target system for classification, grading（division of high, medium, low, prompt fourth grade）

To support the attack signature database manually and automatically upgrade TFTP and HTTP

Support for BT and other P2P/IM the identification and control

E-mail/Web page/application layer filtering

Mail filtering

SMTP e-mail address filter

Title of e-mail filtering

Mail content filtering

Mail attachment filtering

Web filtering

HTTP URL filtering

HTTP content filtering

Application layer filtering

Java Blocking

ActiveX Blocking

SQL injection attack prevention

NAT

Support for multiple internal addresses are mapped to the same public address

Support for multiple internal address is mapped to multiple public addresses

Support internal address to public IP address mapping

Supported source and destination addresses at the same time conversion

Support external network host to access the Internal Server

Support the internal address is mapped directly to the interface to public IP address

Support DNS mapping function

Can be configured to support NAT of the effective time

Support multiple NAT ALG, including DNS, FTP, H. 323, ILS, MSN, NBT, PPTP, SIP, etc.

VPN

L2TP VPN、IPSec VPN、GRE VPN、SSL VPN

IPv6

IPv6-based stateful firewall and attack prevention

IPv6 Protocol: IPv6 forwarding, ICMPv6, the PMTU, the Ping6, and DNS6, the TraceRT6, the Telnet6, DHCPv6 Client, DHCPv6 Relay, etc.

IPv6 routing: RIPng, OSPFv3, and BGP4+, static routing, policy routing, PIM-SM, PIM-DM, etc.

IPv6 security: NAT-PT, IPv6 Tunnel, IPv6 Packet Filter, Radius, IPv6 Inter-domain policy, IPv6 connection limits, etc.

High reliability

Support SCF 2:1 virtualization

Supports dual-system state hot backup Active/Active and Active/Backup two kinds of work mode

Supports dual-configuration synchronization

Supports IKE status synchronization through IPSec VPN

Support VRRP

Easy to maintain

Support command line-based configuration management

Support Web remote configuration management

Support H3C SSM Security Management Center device management

Supports standard network management SNMPv3, and is compatible with SNMP v1 and v2

Intelligent security policy

Environmental and certification

The support of the European strict RoHS environmental protection certification