Installation Manual
H3C SecPath F1000-E Firewall
Chapter 1 Product Overview
1-1
Chapter 1 Product Overview
1.1 Overview
1.1.1 Introduction
The H3C SecPath F1000-E Firewall (hereinafter referred to as the F1000-E) is a new
generation, professional firewall product developed by Hangzhou H3C Technologies
Co., Ltd. (hereinafter referred to as H3C) for enterprise users. In addition to traditional
firewall functions, the F1000-E supports virtual firewall, security zone, attack protection,
P2P flow control, and URL filtering, ensuring effective protection of network security.
Using the application specific packet filter (ASPF), the F1000-E can monitor connection
processes and detect illegal operations, and implement dynamic packet filtering by
applying ACL rules. The F1000-E supports a variety of virtual private network (VPN)
services, such as IPSec VPN, to construct various forms of VPNs. The F1000-E
provides abundant routing capabilities, and supports various routing protocols including
Routing Information Protocol (RIP), Open Shortest Path First (OSPF), and Border
Gateway Protocol (BGP). Employing a high-performance multi-core processor, the
F1000-E supports a maximum of 20 GE interfaces, providing a good extendibility.
To ensure reliability and convenience for networking applications, the F1000-E:
z
Uses two power supply modules for 1+1 redundancy backup
z
Supports both AC and DC power inputs
z
Supports hot swap of service interface cards to allow convenient network
maintenance, upgrade and optimization
z
Supports active/standby hot backup
z
Supports Active/Active and Active/Passive work modes
z
Provides internal temperature monitoring
z
Supports Quidview and Web-based network management systems
The F1000-E provides four Combo ports flexible optical-electrical interface switchover.
The F1000-E provides two high-speed interface module (HIM) slots for high-speed
interfaces. Currently the device supports HIM-4GBE and HIM-8GBE interface modules.
1.1.2 Main Features
I. Powerful hardware platform
The F1000-E uses a multi-core processor of the MIPS 64-bit architecture and a built-in
high-performance VPN accelerator to ensure safe and reliable operation in a Gigabit
network environment.