Huawei Symantec Technologies Co., Ltd. Huawei Symantec Confidential 35-40pt 25-30pt Secospace BSR/HSR Security Routing Gateway Competition Analysis MTS. - презентация

1 Huawei Symantec Technologies Co., Ltd. Huawei Symantec Confidential 35-40pt 25-30pt Secospace BSR/HSR Security Routing Gateway Competition Analysis MTS Global Security Product Sales Dept. INTERNAL

2 35-40pt R:222 G:100 B: pt (2-5 ) 20-26pt Huawei Symantec Technologies Co., Ltd. Contents Market Environment Sand Table Detailed Competition Analysis Competition Analysis Overview

3 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 3 Huawei Symantec Technologies Co., Ltd. Market Capacity

4 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 4 Huawei Symantec Technologies Co., Ltd. Orientation and Overview Implementing networking and security defense for large and medium-sized enterprises, branches, and SOHO users. Reducing purchase and maintenance costs with powerful integration functions. Customer value 1 Cost reducing Target customers Providing mass network extension space for users. Customer value 2 Scalability Implementing highly flexible networking and office for users' convenient access. Customer value 3 Flexible access Providing effective security defense to safeguard users access. Customer value 4 Bandwidth saving Integrating security, routing, switching, wireless access, and voice. Strength 1 Multi-integration Providing powerful scalability; supporting a maximum of 10 extension slots and various cards. Strength 2 High scalability Supporting flexible 3G and WiFi access. Strength 3 Wireless access Supporting security features such as the VPN, UTM, DDoS, and NAT. Strength 4 Strong security features USG XXXX BSR/HSR

5 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 5 Huawei Symantec Technologies Co., Ltd. Orientation and Overview Orientation Multi-function security routing gateway Networking and security defense for large and medium-sized enterprises, branches, and SOHO users. Features High integration: Integrating security, routing, switching, wireless access, and voice Excellent scalability: Supporting various interface cards, which can be extended to 92 GE+20 FE at most Prominent security: Supporting security features such as the VPN, UTM, DDoS, and NAT

6 35-40pt R:222 G:100 B: pt (2-5 ) 20-26pt Huawei Symantec Technologies Co., Ltd. Contents Market Environment Sand Table Detailed Competition Analysis Competition Analysis Overview

7 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 7 Huawei Symantec Technologies Co., Ltd. Competition Situation USG2100 BSR/HSR USG2100 BSR/HSR Remark USG2200 BSR/HSR USG2200 BSR/HSR USG5150 BSR/HSR USG5150 BSR/HSR Juniper SRX210/240 Juniper SRX210/240 Cisco 1800/1900 Cisco 1800/1900 H3C MSR20-40 MSR30-XX H3C MSR20-40 MSR30-XX Juniper J2320/2350 SRX240 Juniper J2320/2350 SRX240 Cisco 2800/2900 Cisco 2800/2900 H3C MSR 30-40/60 H3C MSR 30-40/60 Juniper J2350/4350/6350 SRX650 Juniper J2350/4350/6350 SRX650 Cisco 3800/3900 Cisco 3800/3900 H3C MSR 50-40/60 H3C MSR 50-40/60 USG5120 BSR/HSR USG5120 BSR/HSR Juniper SRX100/210 Juniper SRX100/210 Cisco 800 Cisco 800 H3C MSR20-1X MSR20-2X H3C MSR20-1X MSR20-2X Cisco JuniperH3C

8 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 8 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSH3CJuniper ProductUSG2120 BSR USG2130 BSR/HSR MSR20-10MSR20-11MSR20-12 MSR20-15 SRX100SRX210 Fixed WAN+LAN interfaces 1 WAN+8 LAN 1 FE+4 FE(1 FE+1 SA)+4 FE (1 FE+1 E1) +4 FE (1 FE+1 ADSL2+) +4 FE 8 FE (LAN)2 GE WAN+6 FE LAN Built-in interface card // //1VPM Card module1 MIC1 MIC+1 Express 1 DSIC 01 mini-PIM, 1 Express card LAN interface density 13 (5+8) 13 8? WiFiNYYYYYAX411 W LAN 3GYYYYYYNY VoiceY in R5 //30 Router performance 160 Kpps 75 Kpps (FW+router) 80 Kpps (FW+router) Firewall performance 150 Mbps 200 Mbps (IMAX) 250 Mbps (IMAX) VPN performance 10 Mbps30 Mbps 65 Mbps75 Mbps SSL VPNYYNNN N NN USB External storage card SD 1G Height1 U

9 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 9 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCisco ProductUSG2120 BSR USG2130 BSR/HSR ISR 1801ISR 1802ISR 1803ISR 1805ISR 1811ISR 1812 Fixed WAN+LAN interfaces 1 WAN+8 LAN (FE, ADSL2/2+) +4 FE (G.SHDSL, FE, VDSL2, 3G, ADSL2/2+, ISDN) +4 FE 1 FE, 1 ADSLoPOT S+8 FE 1 FE, 1 ADSLoISD N+8 FE 1 FE, 1 G.SHDL+8 FE 2 FE+4 FE2 FE+8 FE Built-in interface card // Card module1 MIC1 MIC+1 Express LAN interface density 13 (5+8) 8 FE 6 FE10 FE WiFiNYYYYYYYYY 3GYYNYYYYYYY VoiceY in R5 Router performance 160 Kpps 62 Kbps125 Kpps70 Kpps Firewall performance 150 Mbps 100 Mbps VPN performance 10 Mbps30 Mbps40 Mbps SSL VPNYYNNNNNNNN USB External storage card SD 1G Height1 U

10 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 10 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCiscoH3CJuniper ProductUSG2160 BSR/HSR ISR 1841ISR 1861ISR 2801MSR20-20MSR20-21SRX100SRX210 Fixed WAN+LAN interfaces 1 WAN+8 LAN (G.SHDSL, FE, VDSL2, 3G, ADSL2/2+, ISDN) +4 FE (1 GE+1 FE) +8 FE 2 FE1 FE+8 FE+4 FXS+4 FXO 2 FE2 FE WAN2 FE WAN +8 FE LAN 8 FE (LAN)2 GE WAN+6 FE LAN Built-in interface card 1ESM Card module2 MIC (1 DMIC) 2 HWIC1 HWIC2 HWIC2 SIC 01 mini-PIM+1 Express card LAN interface density 18 (8+2 x 5) 2 FE+2 x 4FE 2 FE+2 x 4 FE 8168? WiFiYYYYYYNNAX411 WLAN 3GYYNYYYYYNY Voice// Router performance 180 Kpps125 Kpps234 Kpps75 Kpps146 Kpps90 Kpps180 Kpps (160 Kpps) 75 Kpps (FW+RT) 80 Kpps (FW+RT) Firewall performance 180 Mbps125 Mbps 127 Mbps150 Mbps 200 Mbps (IMAX) 250 Mbps (IMAX) VPN performance 50 Mbps45 Mbps- 100 Mbps 65 Mbps75 Mbps SSL VPNYYYNNNNNNN USB External storage card SD 1G Height1 U

11 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 11 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCiscoH3CJuniper ProductUSG2205 BSR/HSR ISR 2801ISR 2811MSR20-40MSR MSR30-16SRX210SRX240 Fixed WAN+LAN interfaces 2 GE Combo (1 GE+1 FE) +8 FE 2 GE (1 SFP) WAN 2 FE 2 FE WAN2 FE 2 GE WAN+6 FE LAN 16 GE LAN Built-in interface card 2 ESM+2 VPM+1 VCPM 1 ESM+1 VPM 2 ESM+2 VPM+1 VCPM Card module1 FIC+4 MIC 0 2 EHWIC+1 ISM 2 HWIC4 HWIC+1 NME 4 SIC2 SIC2SIC+ 1 XMIM (1 MIM) 4 SIC (2 DSIC)+1 MIM 1 mini- PIM+1 Express card 4 x mini- PIM LAN interface density WiFiYYYYNYYAX411 WLAN 3GYNYYYYYYYN Voice60?120 Router performance 250 Kpps234 Kpps390 Kpps90 Kpps120 Kpps180 Kpps (160 Kpps) 220 Kpps (180 Kpps) 240 Kpps (180 Kpps) 80 Kpps (FW+RT) 200 Kpps (FW+RT) Firewall performance 400 Mbps127 Mbps130 Mbps200 Mbps 250 Mbps (IMAX) 500 Mbps (IMAX) VPN performance 200 Mbps50 Mbps (AIM- VPN/SSL 160 Mbps) 55Mbps (AIM- VPN/SSL 130 Mbps) 100 Mbps200 Mbps 75 Mbps250 Mbps SSL VPNYYYNNNNNNN USB External storage card Height1 U

12 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 12 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCiscoH3CJuniper ProductUSG2220 BSR/HSR ISR 2811MSR MSR20-40MSR30-10MSR30-16MSR30-20SRX210SRX240 Fixed WAN+LAN interfaces 2 GE Combo (1 GE+1 FE) +8 FE90 2 GE (1 SFP) WAN 2 FE2 FE WAN +8 FE LAN 2 FE WAN2 FE 2 GE WAN2 GE WAN+6 FE LAN 16 GE LAN Built-in interface card 01 ESM2 ESM+2 VPM+1 VCPM 1 ESM+1 VPM 2 ESM+2 VPM+1 VCPM Card module2 FIC+4 MIC 0 2 EHWIC+1 ISM 4 HWIC+1 NME 2 SIC4 SIC2 SIC2SIC+1 XMIM (1 MIM) 4 SIC (2 DSIC)+1 MIM 4 SIC (2 DSIC) +2 MIM 1 mini-PIM+1 Express card 4 x mini-PIM LAN interface density WiFiYYYNNYYYAX411 3GYNYYYYYYYYN Voice/60?120 Router performance 350 Kpps234 Kpps390 Kpps120 Kpps180 Kpps (160 Kpps) 220 Kpps (180 Kpps) 240 Kpps (180 Kpps) 300 Kpps (200 Kpps) 80 Kpps (FW+RT) 200 Kpps (FW+RT) Firewall performance 1G130 Mbps150 Mbps200 Mbps 300 Mbps250 Mbps (IMAX) 500 Mbps (IMAX) VPN performance 350 Mbps55 Mbps (AIM- VPN/SSL 130 Mbps) 100 Mbps 200 Mbps 250 Mbps75 Mbps250 Mbps SSL VPNYYYNNNNNNNN USB External storage card Height1 U

13 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 13 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSH3CJuniper ProductUSG 5120 BSRUSG5120 HSRMSR30-40MSR30-60J2320J2350SRX240 Fixed WAN+LAN interfaces 2 GE +2 GE Combo 2 GE Combo 4 GE 16 GE Built-in interface card 2ESM+3VPM+1 VCPM Card module1 DFIC+2 FIC+4 MIC 2 DFIC+2 FIC+4 MIC 4 SIC (2 DSIC) +4 MIM (1 DMIM+2 MIM) 4 SIC (2DSIC) +6 MIM (2 DMIM+2 MIM) 3 x PIM5 PIM4 mini PIM LAN interface density ??16 GE WiFiYYYYNNN 3GYYYYNNY Voice150 Router performance 600 Kpps800 Kpps360 Kpps 150 Kpps (FW+router) 175 Kpps (FW+router) 200 Kpps Firewall performance 1.5 Gbps2 Gbps600 Mbps 400 Mbps (IMAX) 500 Mbps (IMAX) 1.5 Gbps VPN performance 1 Gbps 250 Mbps (ANDE)/ 60 Mbps (CPU) 125 Mbps (AES 256+SHA- 1/3DES+SHA -1 VPN) 150 Mbps (AES 256+SHA- 1/3DES+SHA-1 VPN) 250 Mbps SSL VPNYYYYNNN USB2 (2.0) 2 (1.1) 222 External storage card Height2 U 3 U1 U

14 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 14 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCisco ProductUSG 5120 BSRUSG5120 HSR Fixed WAN+LAN interfaces 2 GE+2 GE Combo 2 GE2 GE WAN3 GE WAN3 GE (1 SFP) WAN Built-in interface card Card module1 DFIC+2 FIC+4 MIC 2 DFIC+2 FIC+4 MIC 4 HWIC+1 NM 4 EHWIC+1 ISM 4 EHWIC+1 SM+1 ISM 4 EHWIC+2 SM+1 ISM LAN interface density 6080 WiFiYY 3GYYYYYY Voice Router performance 600 Kpps800 Kpps220 Kpps390 Kpps547 Kpps781 Kpps1.17 Mpps Firewall performance 1.5 Gbps2 Gbps530 Mbps VPN performance 1 Gbps 145 Mbps SSL VPN YY YYYYY USB External storage card Height 2 U 1 U2 U

15 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 15 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSH3CJuniper ProductUSG 5150 BSRUSG5150 HSRMSR50-40MSR50-60J2350J4350J6350SRX650 Fixed WAN+LAN interfaces 4 GE Combo 2 GE Combo 4 GE 48 GE Built-in interface card 2 ESM+4 VPM+1 VCPM Card module3 DFIC+2 FIC +4 MIC 4 DFIC+2 FIC +4 MIC 4 SIC+4 FIC4 SIC+6 FIC5 x PIM4 x PIM+2 x EPIM/PIM 2 x PIM+4 x EPIM/PIM 8 GPIM LAN interface density ???48 GE WiFiYYYYNNNN 3GYYYYNNNY Voice Router performance 1200 Kpps1500 Kpps800 Kpps 175 Kpps (FW+RT) 225 Kpps (FW+RT) 400 Kpps (FW+RT) 900 Kpps Firewall performance 3 Gbps4 Gbps1.5 Gbps 500 Mbps (IMAX) 600 Mbps (IMAX) 1 Gbps (IMAX) 7 Gbps VPN performance 2 Gbps 500 Mbps (ANDE)/ 150 Mbps (CPU) 150 Mbps (AES 256+SHA- 1/3DES+SHA-1 VPN) 400 Mbps (AES 256+SHA- 1/3DES+SHA-1 VPN) 900 Mbps (AES 256+SHA- 1/3DES+SHA- 1 VPN) 1.5 Gbps SSL VPNYYYYNNNN USB External storage card Height3 U 4 U1 U2 U

16 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 16 Huawei Symantec Technologies Co., Ltd. Comparison of Hardware Specifications Vendor HSCisco Product USG 5150 BSRUSG5150 HSR Fixed WAN+LAN interfaces 4 GE Combo 2 GE 3 GE (2 SFP) WAN Built-in interface card 3 DFIC+2 FIC4 DFIC+2 FIC 2 X AIM 4 EHWIC+2 SM+1 ISM 4 EHWIC+4 SM+1 ISM Card module 3 DFIC+2 FIC+4 MIC 4 DFIC+2 FIC +4 MIC 4 WIC+2 NM4 WIC+4 NM LAN interface density WiFi YY 3G YYYY Voice Router performance 1200 Kpps1500 Kpps 350 Kpps500 Kpps 1.56 Mpps2.34 Mpps Firewall performance 3 Gbps4 Gbps 855 Mbps1.1 Gbps VPN performance 2 Gbps 175 Mbps185 Mbps SSL VPN YYYY USB 2 (2.0) 22 External storage card SD 1G/2G CF 64/256M Height 3 U

17 35-40pt R:222 G:100 B: pt (2-5 ) 20-26pt Huawei Symantec Technologies Co., Ltd. Contents Market Environment Sand Table Detailed Competition Analysis Competition Analysis Overview

18 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 18 Huawei Symantec Technologies Co., Ltd. SWOT Analysis Excellent integration (integrating security, routing, switching, wireless access, and voice) Powerful scalability (supporting various types of cards, 3G, and WiFi) High port intensity (supporting a maximum of 112 Ethernet ports) Sound security features (VPN, UTM, NAT, and firewall) Cooperating with Symantec and resorting to its brand in the field of network security Strength Weakness Entire solution in networking Sales on the basis of advantages of Huawei in the carrier field Opportunity Peer vendors compete with HS in terms of UTM and voice features HS products support UTM and voice features after the R5 version Threat S W T O The voice and UTM features are not supported for the moment (available in the R5 version)

19 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 19 Huawei Symantec Technologies Co., Ltd. Competition Guide 1 Strength The low-end and mid-range products have the same nature distinctly, and cannot compete with the products of peer vendors in terms of functions. The performance, interface, and price are usually resorted to for competition. The BSR/HSR security routing gateway, positioned as low-end products, supports multiple extension slots and diversified interface types to compete with peer vendors in terms of quantity. The BSR/HSR security routing gateway has fine overall performance. The firewall performance is over 4G, and the routing and switching performance reaches 1.5 Mpps, which lays solid foundation for the competition. Weakness UTM and voice features are insufficient, which will be comprehensively supported in the R5 version.

20 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 20 Huawei Symantec Technologies Co., Ltd. Competition Guide 2 Competition analysis of overseas peer vendors In general, functions are comprehensive and performance is fine. The traditional devices of peer vendors have comprehensive routing and switching functions, but the content security is not outstanding. Roadmap for competing with overseas peer vendors: Shield traditional peer vendors such as Juniper and Cisco by virtue of the interface type and port density that are supported; shield other vendors by virtue of low prices due to their small market share.

21 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 21 Huawei Symantec Technologies Co., Ltd. Competition Guide 3 Competition analysis of Chinese peer vendors The general performance has virtually high indexes, especially the number of concurrent connections that are easy to obtain. The actual measurements of other performance cannot be too high. We have strength in functions, which, however, is degraded by the rapid response of Chinese peer vendors. Chinese peer vendors are relatively weak in hardware development. The BSR/HSR security routing gateway has outstanding strength in supporting diversified interfaces to shield peer vendors. The USG5100 supports interfaces such as ADSL2+, 4GE, 5FE, E1/CE1, SA, 3G, and 16GE+4SFP, most of which cannot be provided by Chinese peer vendors. Roadmap for competing with Chinese peer vendors: Shield peer vendors on hardware first, and then on performance (products of Chinese peer vendors have virtually high performance), for example, guiding users to test performance.

22 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 22 Huawei Symantec Technologies Co., Ltd. Comparison with Counterpart Products of Cisco Counterpart products of Cisco have lower performance in terms of the throughput and number of concurrent connections than the products of HS, and are limited in supporting UTM features. (HS products will support comprehensive UTM features in the R5 version.) You can highlight the strength of HS BSR/HSR security routing gateway from the following aspects: Excellent scalability The BSR/HSR security routing gateway supports diversified types of extension cards (such as the serial port, xDSL, GE, optical interface, WiFi, and 3G), which can be extended to 92GE+20FE. Anti-DDoS security feature The new connections per second of Cisco products are no more than Therefore, DDoS attacks are hard to effectively defend against. The BSR/HSR security routing gateway can defend against the DDoS attacks of hundreds of thousands of packets per second.

23 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 23 Huawei Symantec Technologies Co., Ltd. Comparison with Counterpart Products of Juniper Currently, the BSR/HSR security routing gateway series does not support UTM features, which of Juniper counterpart products, however, are a little more diversified. The performance of Juniper counterpart products differs, part is higher and part is lower. You can highlight the strength of HS BSR/HSR security routing gateway from the following aspects: Excellent scalability The BSR/HSR security routing gateway supports diversified types of extension cards (such as the serial port, xDSL, GE, optical interface, WiFi, and 3G), which can be extended to 92GE+20FE. Anti-DDoS security feature The new connections per second of Juniper products are no more than Therefore, DDoS attacks are hard to effectively defend against. The BSR/HSR security routing gateway can defend against the DDoS attacks of hundreds of thousands of packets per second.

24 35-40pt R:222 G:100 B:34 20pt (2-5 ) 18pt. 13 page 24 Huawei Symantec Technologies Co., Ltd. Benefits The BSR/HSR security routing gateway provides the all-in-one security defense and highly integrated service capabilities: security, routing, switching, and wireless access. The BSR/HSR security routing gateway can effectively defend against the DDoS attacks of hundreds of thousands of packets per second, thus reserving sufficient security space for the increase of users' network traffic. The BSR/HSR security routing gateway, based on the highly-reliable proprietary software platform and multi-core hardware (multiple security operating systems), effectively ensures the continuity of the user services.

25