No.1 market share
No.1 firewall market share
Learn More
Network security
HiSecEngine USG12000 Series AI Firewalls
The HiSecEngine USG12000 series is the industry's first terabit-level Artificial Intelligence (AI) firewall launched by Huawei for mitigating known and unknown threats at the network edge in real-time. It is typically deployed at the egress of cloud computing data centers, large enterprises, and campus networks to provide industry-leading protection capabilities. An advanced hardware architecture design and an array of energy conservation technologies slash energy consumption, while a full lineup of Line Interface Processing Units (LPUs) — with a per-slot interface density of up to 18 x 100 GE — meets heavy-bandwidth traffic requirements. The series provides comprehensive, carrier-grade high-reliability architecture, supporting a multitude of reliability mechanisms, such as dual Main Processing Unit (MPU) backup, Hot Standby (HSB), Non-Stop Routing (NSR), and Graceful Restart (GR). A hardware-based software integrity check mechanism prevents unauthorized software from running, ultimately building a secure foundation for the network. With terabit-level service processing power and a suite of security features — covering Network Address Translation (NAT), Carrier-Grade NAT (CGN), Virtual Private Network (VPN), virtualization, and content security — HiSecEngine USG12000 equips enterprises to handle the heavy bandwidth traffic and diverse service threats of the intelligent era. View 3D Model
Huawei Firewalls Continuously Lead Technological Innovation
Vulnerability management system certification
Leader
Learn More
Gartner® Magic Quadrant for Network Firewalls
Ranked in the "Challengers Quadrant" for six consecutive years.
Learn More
Gartner Peer Insights Customers' Choice
Highest score among the selected vendors
Learn More
Three Reasons for Choosing Huawei Firewalls
Exceptional Performance
- Adaptive Security Engine (ASE): Dynamically allocates resources across service modules to maximize resource utilization and enhance overall performance.
- NP, pattern matching, and encryption/decryption co-processing engines: Improve small-packet forwarding performance, reduce forwarding latency, and enhance capabilities in application identification, intrusion detection, and services such as IPsec.
Cutting-Edge Technologies in Huawei Xinghe AI Unified SASE Solution
Intelligent Defense
- Hundreds of millions of virus samples: The AI-powered Content-based Detection Engine (CDE) covers a vast database of virus samples, effectively defending against virus attacks.
- AI security detection algorithm: AI detection algorithms are deployed at local gateways, enabling deep analysis of malicious behavior. This allows rapid identification of unknown virus variants, achieving a 95% detection rate for unknown threats.
Simplified O&M
- Unified O&M: A centralized controller enables unified policy orchestration and automated alarm correlation analysis. Combined with cloud-network-edge coordination, it enables threat response within seconds.
- Simplified O&M: A newly defined security interface with threat visualization presents key information, such as device status, alarms, traffic, and threat events in an intuitive way, simplifying O&M.
Huawei Network Security Firewalls Ranked No. 1 in China Market Share for First Half of 2025
Voices of Customers
★★★★★Huawei Firewall: Highly Reliable Intelligent Gateway
What attracts us most is the high reliability of Huawei's USG series firewalls. These firewalls feature redundant power modules and fans, support hot-swapping, and utilize a dual-node cluster deployment model to ensure the high reliability of IPsec VPN tunnels.
— Director of a Municipal Government Network Department
★★★★★Huawei Firewall: Intelligent URL Filtering
Huawei's USG firewall has been the best choice so far. Its built-in URL filtering feature covers over 500 million URLs, ensuring a safe and healthy Internet experience for both teachers and students.
— Director of the Information Center, a University
★★★★★ Huawei Firewall: Real-Time Advanced Threat Protection
We prioritize the detection performance of firewalls. Huawei's USG firewall delivers a very high threat detection rate with minimal false alarms, significantly reducing operational workload.
— O&M Lead, IT Department, a Bank
★★★★★ Huawei Firewall: Unified Security Gateway
Huawei's USG integrates SRv6, zero trust, and firewall capabilities into a single solution. The Huawei USG firewall offers powerful advantages and outstanding performance, ensuring secure and stable operation of the entire manufacturing system, from network access to production data transmission.
— IT Manager, a Manufacturing Enterprise
★★★★★Huawei Firewall: Efficient Virus Detection and Easy-to-Manage Security Gateway
Huawei's USG firewall is quick to deploy and easy to maintain. It effectively blocks network intrusions and safeguards core business systems. Its visualized operations and dynamic defense features are highly practical, significantly boosting our security operations efficiency. — Director of the Information Center, an Energy Enterprise
Specifications · USG12004
| Interface | 24-port 10GBase SFP+ + 2-port 100GBase-QSFP28 LPU 24-port 10GBase SFP+ + 4-port 100GBase-QSFP28 LPU 48-port 10GBase SFP+ LPU |
|---|---|
| Rack Unit | 9.8U |
| Dimensions (H x W x D) | 438 x 442 x 874 mm |
| Input Rated Voltage | DC: –48 V/–60 V AC: 220 V; 50/60 Hz HVDC: 240 V/380 V |
| Input Voltage Range | DC: –40 V to –72 V AC: 176–290 V; 45–65 Hz HVDC: 188–288 V/260–400 V |
| Maximum Input Current | DC: 58.5 A @ –40 V AC: 16 A @ 200 V; 18.5 A @ 176 V HVDC: 18 A @ 188 V; 13 A @ 260 V |
| Fan Type | Pluggable fan module |
| Power Supply Redundancy | Supported |
| Weight (with Base Configuration, Excluding Packing Materials) | USG12004-DC: 81 kg USG12004-AC: 76 kg |
| Weight (with Full Configuration, Excluding Packaging Materials) | USG12004-DC: 141.4 kg USG12004-AC: 142.6 kg |
Specifications · USG12008
| Interface | 4-Port 400GBase-QSFP-DD LPU 24-port 10GBase SFP+ + 2-port 100GBase-QSFP28 LPU 24-port 10GBase SFP+ + 4-port 100GBase-QSFP28 LPU 48-port 10GBase SFP+ LPU 18-port 100GBase-QSFP28 LPU |
|---|---|
| Rack Unit | 15.8U |
| Dimensions (H x W x D) | 703 x 442 x 874 mm |
| Input Rated Voltage | DC: –48 V/–60 V AC: 220 V; 50/60 Hz HVDC: 240 V/380 V |
| Input Voltage Range | DC: –40 V to –72 V AC: 176–290 V; 45–65 Hz HVDC: 188–288 V/260–400 V |
| Maximum Input Current | DC: 62 A @ –40 V AC: 16 A @ 200 V; 18.5 A @ 176 V HVDC: 18 A @ 188 V; 13 A @ 260 V |
| Fan Type | Pluggable fan module |
| Power Supply Redundancy | Supported |
| Weight (with Base Configuration, Excluding Packing Materials) | USG12008-DC: 100 kg USG12008-AC: 94 kg |
| Weight (with Full Configuration, Excluding Packaging Materials) | USG12008-DC: 245.6 kg USG12008-AC: 244.8 kg |
Specifications · USG12004-F
| Interface | 2-port 100G QSFP28 and 24-port 100M/1G/12GBASE-X interface card (SFP+) LPU 24-port 100M/1G/10GBASE-X interface card (SFP+) LPU |
|---|---|
| Rack Unit | 8U |
| Dimensions without packaging (H x W x D) [mm(in.)] | Without cable management frames: 352.8 mm x 442 mm x 515.5 mm With cable management frames: 352.8 mm x 442 mm x 585.5 mm |
| Maximum power consumption [W] | 1560 W |
| Maximum heat dissipation [BTU/hour] | 5322.94 BTU/hour |
| MTBF [year] | 32.04 year |
| MTTR [hour] | 2.42 hour |
| Availability | 0.9999954 |
Specifications · USG12008-F
| Interface | 2-port 100G QSFP28 and 24-port 100M/1G/12GBASE-X interface card (SFP+) LPU 24-port 100M/1G/10GBASE-X interface card (SFP+) LPU |
|---|---|
| Rack Unit | 13 U |
| Dimensions without packaging (H x W x D) [mm(in.)] | Without cable management frames: 575 mm x 442 mm x 515.5 mm With cable management frames: 575 mm x 442 mm x 585.5 mm |
| Maximum power consumption [W] | 2914 W |
| Maximum heat dissipation [BTU/hour] | 9942.98 BTU/hour |
| MTBF [year] | 30.65 year |
| MTTR [hour] | 2.42 hour |
| Availability | 0.9999954 |
Specifications
| Power supply mode | AC built-in, HVDC built-in, DC built-in |
|---|---|
| Rated input voltage [V] | AC: 220 V, 50 Hz/60 Hz, High-voltage DC: 240 V, DC: -48 V/-60 V |
| Input voltage range [V] | AC: 176 V to 290 V, 45 Hz to 65 Hz, High-voltage DC: 188 V to 288 V, DC: -40 V to -72 V |
| Maximum input current [A] | AC: 16 A for the voltage of 200 V or 18.5 A for the voltage of 176 V, High-voltage DC: 18 A for the voltage of 188 V , DC: 63 A for the voltage of -40 V |
| Interface | 16-port 100GBase-QSFP28 + 24-port 10GBase-SFP+ LPU 8-port 100GBase-QSFP28 + 24-port 10GBase-SFP+ LPU 4-port 40G/100GBase-QSFP28 and 24-port 100M/1G/10GBase-SFP+ Interface Card |
| Rack Unit | 8.8U |
| Dimensions (H x W x D) | 392.12 x 442 x 515.5 mm |
| Input Rated Voltage | DC: -48 V/-60 V/48 V AC: 110 V/220 V; 50/60 Hz HVDC: 240 V/336 V |
| Input Voltage Range | DC: -38.4 V to -72 V or 38.4 V to 57.6 V AC: 90 V to 290 V; 45Hz to 65Hz HVDC: 190 V to 400 V |
| Maximum Input Current | DC: 63 A AC/HVDC: 10 A or 16 A |
| Fan Type | Pluggable fan module |
| Power Supply Redundancy | Supported |
| Weight (with Base Configuration, Excluding Packing Materials) | 33.6kg |
| Weight (with Full Configuration, Excluding Packaging Materials) | 68.52kg |
