Hillstone X10800 Next-Generation Data Center Firewall

Hillstone X10800 Data Center Firewall



The Hillstone X10800 Data Center Firewall is characterized by:


Carrier-Grade reliability

The hardware and software of the X10800 data center firewall delivers 99.999% carrier-grade reliability. It can support active/active or active/passive mode redundant deployment solutions to ensure uninterrupted service during single failure. The entire system adopts a modular design, supporting control module redundancy, service module redundancy, interface module redundancy and switching module redundancy, and all modules are hot-swappable.



Leading virtual firewall technology

The X10800 data center firewall can logically divide a physical firewall into upwards of 1000 virtual firewalls for the data center’s virtualization needs, providing virtual firewall support capabilities for large data centers. Each virtual firewall system of X10800 data center firewalls not only has independent system resources, but also can be individually and granularly managed to provide independent security management planes for different services or users.



Granular application control and comprehensive security

The X10800 data center firewall uses advanced in-depth application identification technology to accurately identify thousands of network applications based on protocol features, behavior characteristics, and correlation analysis, including hundreds of mobile applications and encrypted P2P applications. The X10800 data center firewall provides intrusion prevention technology based on deep application identification, protocol detection, and attack principle analysis. In addition, The X10800 data center firewall supports URL filtering for tens of millions of URL signature library.



Strong network adaptability

The X10800 data center firewall fully supports next-generation Internet deployment technologies (including dual-stack, tunnel, DNS64/NAT64 and other transitional technologies). It also has mature NAT444 capabilities to support static mapping of fixed-port block of external network addresses to intranet addresses. In addition, the X10800 data center firewall provides full compliance with standard IPSec VPN capabilities and integrates third-generation SSL VPN to provide users with high-performance, high-capacity, and full-scale VPN solution.