How To Sell Hillstone 301. A Series NGFW v5.5r9

Introducing the Hillstone Future-Ready
A-Series Next Generation Firewall
1
What’s the New Reality for NGFW?
© 2022 Hillstone Networks All Rights Reserved | 2

2
What’s the New Reality for NGFW?
Performance becomes a Devices have to be more Policy overload

bottleneck compact creates risk and complexity
Storage space limits analytical Security landscape is constantly

capability changing dramatically

A Future-Ready NGFW

4
A Future-Ready NGFW
A-Series
High Excellent Advanced Threat Smart Policy

Performance Expansion Protection Operation
Capability
NGFW Hardware Architecture

The Hillstone A-Series: An Overview
Product Highlights
• Built on a new generation of firewall hardware

• Product name: architecture.
• SG-6000-A-Series NGFW
• Excellent application security protection performance,
• Released: high-density ports, large-capacity local and optional
• Q1: A1000-A3800, 8 models (4~20G) expansion storage, at a better TCO.
• Q3: A200 (1G)
• A200W (1G, Wi-Fi model)
• Based on Hillstone innovative operating system,
• Q4: A2700, A2800 (10~20G)
22Q1: A5200, A5600 (30~60G) StoneOS.
• A5500, A5800 (40~80G)
• Hillstone’s evolution in AI will continue to provide robust
• Planned: advanced threat detection in the future.
• A7600, A6800 (160~240G)

The Hillstone A-Series NGFW: Specifications
Desktop
SG-6000-A200 SG-6000-A200W SG-6000-A1000 SG-6000-A1100
Firewall Throughput 1 Gbps 1 Gbps 4 Gbps 5 Gbps
Maximum Concurrent Sessions 300,000 300,000 300,000 300,000
New Sessions/s 15,000 15,000 48,000 48,000
IPS Throughput 610 Mbps 610 Mbps 3.4 Gbps 3.7 Gbps
AV Throughput 550 Mbps 550 Mbps 1.8 Gbps 2.0 Gbps
IPsec VPN Throughput 620 Mbps 620 Mbps 2,500 Mbps 2,700 Mbps
SSL Proxy Throughput 15 Mbps 15 Mbps 250 Mbps 250 Mbps
Virtual Systems (Default/Max) N/A N/A N/A N/A
SSL VPN User Number 128 128 128 128
IPsec Tunnel Number 512 512 2,000 2,000
1 × Console Port, 2 × USB3.0
Management Ports 1 × Console Port, 2 × USB3.0 Port
1 × Console Port, 2 x USB 2.0 Ports 1 × Console Port, 2 x USB 2.0 Ports Port, 1 × MGT Port (RJ45)
Fixed I/O Ports 1×SFP, 5×GE 1×SFP, 5×GE 4 × GE 8 × GE (including 1 bypass pair)
Wi-Fi N/A IEEE802.11a/b/g/n/ac N/A N/A

Available Slots for Expansion
NA NA
Modules N/A N/A
Expansion Module Option NA NA
N/A N/A
Twin-mode HA N/A N/A NA NA
Local Storage 4 GB 4 GB 8 GB 8 GB
Expansion Storage Options N/A N/A 256 GB SSD 256 GB SSD
Power Specification 24W, Single AC (default) 24W, Single AC (default) 30W, Single AC 50W, Single AC
Power Supply AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz

AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Form Factor Desktop Desktop Desktop Desktop
Dimensions (W × D × H, mm) 180 × 110 × 28 180 × 110 × 28 270 × 160 × 44 270 × 160 × 44
Dimensions (W × D × H, inches) 7.1 × 4.3 × 1.1 7.1 × 4.3 × 1.1 10.6 × 6.3 × 1.7 10.6 × 6.3 × 1.7
Weight 2.2 lb (0.6 kg) 2.2 lb (0.6 kg) 3.1 lb (1.4 kg) 3.1 lb (1.4 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C)
Relative Humidity 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing
Rackmount
SG-6000-A2000 SG-6000-A2600 SG-6000-A2700 SG-6000-A2800
Firewall Throughput 5 Gbps 5 Gbps 10 Gbps 16 Gbps
Maximum Concurrent Sessions 1 Million 1.2 Million 1,500,000 1,800,000
New Sessions/s 48,000 120,000 130,000 130,000
IPS Throughput 3.2 Gbps 4.5 Gbps 5 Gbps 5 Gbps
AV Throughput 2.0 Gbps 3.7 Gbps 4.2 Gbps 4.2 Gbps
IPsec VPN Throughput 2,700 Mbps 3,000 Mbps 5 Gbps 5.5 Gbps
SSL Proxy Throughput 250 Mbps 750 Mbps 800 Mbps 800 Mbps
Virtual Systems (Default/Max) 1/5 1/5 5 5
SSL VPN User Number 1,000 1,000 1,000 1,000
IPsec Tunnel Number 4,000 6,000 6,000 6,000
1 × Console Port, 2 × USB3.0 Port, 1 × MGT 1 × Console Port, 2 × USB3.0 Port, 1 × MGT 1 × Console Port, 2 × USB3.0 Ports, 1 × MGT 1 × Console Port, 2 × USB3.0 Ports, 1 ×
Management Ports
Port (RJ45) Port (RJ45) Port（RJ45） MGT Port（RJ45）
2 × SFP+ 2 × SFP+
Fixed I/O Ports 8 × GE (including 1 bypass pair) 8 × GE (including 1 bypass pair) 8 × SFP 8 × SFP
8 × GE 8 × GE
Wi-Fi N/A N/A N/A N/A
N/A N/A N/A N/A
Modules
Expansion Module Option N/A N/A N/A N/A
Twin-mode HA N/A N/A N/A N/A

Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500GB / 1TB / 2TB SSD 500GB / 1TB / 2TB SSD
50W, Single AC (default), Dual AC
Power Specification 50W, Single AC (default), Dual AC (optional) 50W, Single AC (default), Dual AC (optional) 50W, Single AC (default), Dual AC (optional)
(optional)
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240V, 50/60 Hz AC 100-240V, 50/60 Hz
Power Supply DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Form Factor Rackmount, 1U Rackmount, 1U Rackmount, 1U Rackmount, 1U
Dimensions (W × D × H, mm) 436 × 320 × 44 436 × 320 × 44 440.0 × 320.0 × 44.0 440.0 × 320.0 × 44.0
Weight 8.6 lb (3.9 kg) 8.6 lb (3.9 kg) 9 bl (4.1 kg) 9 bl (4.1 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 0℃~40℃ 0℃~40℃
Rackmount
SG-6000-A3000 SG-6000-A3600 SG-6000-A3700 SG-6000-A3800
Firewall Throughput (without/with
20 Gbps 20 Gbps 20 / 40 Gbps 20 / 40 Gbps
expansion module)
Maximum Concurrent Sessions 2 Million 3 Million 6 Million 8 Million
New Sessions/s 140,000 140,000 140,000 310,000
IPS Throughput 8.3 Gbps 8.5 Gbps 8.6 Gbps 17.5 Gbps
AV Throughput 4.9 Gbps 5.0 Gbps 5.2 Gbps 9.4 Gbps
IPsec VPN Throughput 6,000 Mbps 6,000 Mbps 6,500m Mbps 12,000 Mbps
SSL Proxy Throughput 950 Mbps 950 Mbps 950 Mbps 2 Gbps
Virtual Systems (Default/Max) 1/5 1/50 1/100 1/100
1 × Console Port, 2 × USB3.0 Port, 1 × MGT 1 × Console Port, 2 × USB3.0 Port, 1 × MGT 1 × Console Port, 2 × USB3.0 Port, 1 × MGT 1 × Console Port, 2 × USB3.0 Port, 1 ×
Management Ports
Port (RJ45), 1 × HA Port (RJ45) Port (RJ45), 1 × HA Port (RJ45) Port (RJ45), 1 × HA Port (RJ45) MGT Port (RJ45), 1 × HA Port (RJ45)
2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE (including
Fixed I/O Ports
bypass pairs) bypass pairs) bypass pairs) 2 bypass pairs)
N/A N/A 1 1
Modules
IOC-A-4SFP+, IOC-A-2MM-BE, IOC-A-2SM- IOC-A-4SFP+, IOC-A-2MM-BE, IOC-
Expansion Module Option N/A N/A
BE A-2SM-BE
Twin-mode HA Yes Yes Yes Yes
Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD
100W, Dual AC (default), Dual DC
Power Specification 100W, Single AC (default), Dual AC (optional) 100W, Single AC (default), Dual AC (optional) 100W, Single AC (default), Dual AC (optional)
(optional), hot swappable power
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Power Supply
DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Weight 13.2 lb (6 kg) 13.2 lb (6 kg) 13.4 lb (6.1 kg) 15 lb (6.8 kg)
Rackmount
SG-6000-A5200 SG-6000-A5500 SG-6000-A5600 SG-6000-A5800
Firewall Throughput (without/with
32/65 Gbps 40/80 Gbps 60/85 Gbps 80/95 Gbps
expansion module)
Maximum Concurrent Sessions 12,000,000 12,000,000 20,000,000 24,000,000
New Sessions/s 400,000 500,000 800,000 930,000
IPS Throughput 20/35 Gbps 25/40 Gbps 35/60 Gbps 45/75 Gbps
AV Throughput 12Gbps 15Gbps 20Gbps 25Gbps
IPsec VPN Throughput 20Gbps 28 Gbps 36Gbps 45 Gbps
SSL Proxy Throughput 5 Gbps 5 Gbps 8.5 Gbps 8.5 Gbps
Virtual Systems (Default/Max) 250 250 500 500
1 × Console Port, 2 × USB3.0 Ports, 2 × HA 1 × Console Port, 2 × USB3.0 Ports, 2 × HA 1 × Console Port, 2 × USB3.0 Ports, 1 × HA 1 × Console Port, 2 × USB3.0 Ports, 1 ×
Management Ports
Port (10GE), 1 × MGT Port (RJ45) Port (10GE), 1 × MGT Port (RJ45) Port (GE), 1 × MGT Port (RJ45) HA Port (GE), 1 × MGT Port (RJ45)
2 × 40GE(QSFP+), 16 × 10GE(SFP+), 8
Fixed I/O Ports 6 × SFP+, 16 × SFP, 8 × GE（2 bypass） 6 × SFP+, 16 × SFP, 8 × GE（2 bypass） 2 × QSFP+, 16 × SFP+, 8 × GE (4 bypass)
× GE(RJ45) (4 bypass)
1 1 1 1
Modules
IOC-A-4SFP+, IOC-A-2QSFP+, IOC-A-2MM- IOC-A-4SFP+, IOC-A-2QSFP+, IOC-A-2MM- IOC-A-4SFP+, IOC-A-2QSFP+, IOC-A-2MM- IOC-A-4SFP+, IOC-A-2QSFP+, IOC-A-
Expansion Module Option
BE, IOC-A-2SM-BE BE, IOC-A-2SM-BE BE, IOC-A-2SM-BE 2MM-BE, IOC-A-2SM-BE
Twin-mode HA Yes Yes Yes Yes
Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD
382W, Dual AC (default), Dual DC
Power Specification 289W, Dual AC (default), Dual DC (optional) 289W, Dual AC (default), Dual DC (optional) 382W, Dual AC (default), Dual DC (optional)
(optional)
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Power Supply
DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Weight 18.7 lb (8.5 kg) 18.7 lb (8.5 kg) 18.7 lb (8.5 kg) 18.7 lb (8.5 kg)

A Future-Ready NGFW
A-Series

Capability

Advanced NGFW Hardware Architecture
Powerful computing Friendly software SSL decryption Front and rear air
foundation guarantees ecology for third-party hardware acceleration ventilation in all
high performance integration capability: alleviates rackmount models
CPU intensive tasks
from servers
Note: the SSL decryption hardware acceleration capability will be available via software upgrade in phase 2. A200 series do NOT support hardware acceleration.
A Future-Ready NGFW
A-Series

Capability

New A-Series Desktop Models Complement the
E-Series Desktop Models
Desktop
Desktop Models: E1600 vs A1000 vs A1100
Platform E1100W A200 A200W E1600 A1000 A1100
11X
1 2 4 5
Firewall Throughput 1 Gbps 1 Gbps 8X
Gbps Gbps Gbps Gbps
Firewall Throughput (64 150 150 280 800 800
96 Mbps 5X
Byte) Mbps Mbps Mbps Mbps Mbps
Maximum Concurrent 300,0 300,00 100,0 300,0 300,0 3X 3X
100,000 2X
Sessions 00 0 00 00 00
New Sessions/s (HTTP 15,00 10,00 48,00 48,00
10,000 15,000
traffic) 0 0 0 0
Firewall Firewall Maximum New Sessions/s IPS Throughput AV Throughput
400 610 610 400 3.4 3.7 Throughput Throughput (64 Concurrent (HTTP traffic)
IPS Throughput (1518 Byte) Byte) Sessions (IPv6)
Mbps Mbps Mbps Mbps Gbps Gbps
300 550 550 300 1.8 2.0
AV Throughput E1600 A1000 A1100
Mbps Mbps Mbps Mbps Gbps Gbps
All performance specifications of A-Series desktop models are improved greatly.
2 times 3 times 5 times 8 times 11 times

firewall throughput maximum new sessions/s IPS throughput AV throughput
concurrent sessions

Upgraded Rackmount Models with Advantages in:
Performance, Expansion Capability, Cost
Rackmount
E16 E17 E230 A200 E28 A26 E286 E366 E39 E39 A27 A28 E52 A300 A36 A37 E556 A38 E566 E576 A520 E596 A550 E616 A560 E636 A580
Platform
06 00 0 0 00 00 0 2 60 65 00 00 60 0 00 00 8 00 0 0 0 0 0 0 0 0 0
20 / 20 /
2 3 4 5 5 5 6 8 10 10 10 16 16 20 20 20 25 32 32/65 40 40/80 60 60/85 80 80/95
Firewall Throughput 40 40
Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
Gbps Gbps
Firewall Throughput 280 280 312 800 907 1.9 834 834 1.1 1.9 2.2 2.3 2.4 2.5 2.5 2.5 3.3 5.5 4.7 5.7 8 13.3 15
8.9G 10G 17.7G 19G
(64 Byte) Mbps Mbps Mbps Mbps Mbps Gbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
Maximum 8,00
200,0 300,0 500,00 1,000, 500,0 1,200 1,000 1,500 1,600 4,800 1,500, 1,800, 4,800 2,000, 3,000 6,000 7,500 10,000 12,000 12,000, 15,000 12,000, 20,000 20,000, 30,000 24,000,
Concurrent 0,00
00 00 0 000 00 ,000 ,000 ,000 ,000 ,000 000 000 ,000 000 ,000 ,000 ,000 ,000 ,000 000 ,000 000 ,000 000 ,000 000
Sessions 0
New Sessions/s 10,00 15,00 60,00 120,0 60,00 75,00 100,0 120,0 130,00 130,00 150,0 140,00 140,0 140,0 220,0 310, 400,00 500,00 400,00 600,00 500,00 800,00 800,00 1,100, 930,00
26,000 48,000
(HTTP traffic) 0 0 0 00 0 0 00 00 0 0 00 0 00 00 00 000 0 0 0 0 0 0 0 000 0
400 600 1 3.2 1.8 4.5 1.8 3 4 4 5 5 5 8.3 8.5 8.6 7 17.5 12 15 20/35 18 25/40 25 35/60 35 45/75
IPS Throughput
Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
300 400 700 2.0 1.2 3.7 1.2 1.6 2.5 3 4.2 4.2 3.5 4.9 5.0 5.2 5 9.4 7 8 12 10 15 20 20 27 25
AV Throughput
Mbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
New Sessions/s IPS Throughput FW Throughput (64 Byte)
2 3 4 5 6 8 10 16 20 25 32 40 60 80 2 3 4 5 6 8 10 16 20 25 32 40 60 80 2 3 4 5 6 8 10 16 20 25 32 40 60 80
Gbps Gbps Gbps
E Series A Series E Series A Series E Series A Series
A Summary of the Current A-Series and E-Series
Desktop
Platform E1100W A200W A200 E1600 A1000 A1100
Firewall Throughput 1 Gbps 1 Gbps 1 Gbps 2 Gbps 4 Gbps 5 Gbps
Firewall Throughput (64 Byte) 96 Mbps 150 Mbps 150 Mbps 280 Mbps 800 Mbps 800 Mbps
Maximum Concurrent Sessions (IPv6) 100,000 300,000 300,000 100,000 300,000 300,000
New Sessions/s (HTTP traffic) 10,000 15,000 15,000 10,000 48,000 48,000
IPS Throughput 400 Mbps 610 Mbps 610 Mbps 400 Mbps 3.4 Gbps 3.7 Gbps
AV Throughput 300 Mbps 550 Mbps 550 Mbps 300 Mbps 1.8 Gbps 2.0 Gbps
A200W is comparable to E1100W.  A200W is a

higher performance desktop model compared to
E1100W, and cannot substitute the E1100W. Both
models supports Wi-Fi mode.
A1000 and A1100 are higher performance desktop

models compared to E1600, but cannot substitute
E1600.  E1600 will not be retired until a
substitutable A-Series model is ready.

A Summary of the Current A-Series and E-Series
Rackmount
E160 E170 E230 A200 E280 A260 E2860 E3662 E396 A270 A280 A300 E396 A360 E526 A370 E556 A380 E566 E576 A520 E596 A550 E616 A560 E6360 A580
Platform 0 0
6 0 0 0 0 0 0 0 5 0 0 0 8 0 0 0 0 0 0 0 0 0
Firewall 10 20 10 20 16 20 / 40 20 20 / 40 25 Gbps 32 Gbps 32/65 40Gbp 40/80 60/85 80 80/95
2 Gbps 3 Gbps 4 Gbps 5 Gbps 5 Gbps 5 Gbps 6 Gbps 8 Gbps 10 Gbps 16 Gbps
Gbps Gbps
60 Gbps
Gbps Gbps
Throughput Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps s Gbps
Firewall
280 280 312 800 907 1.9 834 834 1.1 2.2 2.3 2.5 1.9 2.5 2.4 2.5 3.3 5.5 4.7 5.7 8.9 10 13.3 15 17.7 19
Throughput (64 Mbps Mbps Mbps Mbps Mbps Gbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
8 Gbps
Gbps Gbps Gbps Gbps Gbps Gbps
Byte)
Maximum
200,00 300,00 500,00 1,000, 500,00 1,200, 1,000,0 1,500,0 1,600, 1,500,00 1,800,00 2,000, 4,800, 3,000, 4,800, 6,000, 7,500, 8,000, 10,000,0 12,000,0 12,000,0 15,000 12,000,0 20,000,0 20,000,0 30,000 24,000,0
Concurrent 0 0 0 000 0 000 00 00 000 0 0 000 000 000 000 000 000 000 00 00 00 ,000 00 00 00 ,000 00
Sessions (IPv6)
New Sessions/s 120,00 60,000 75,000 100,00 130,000 130,000 140,00 120,00 140,00 150,00 140,00 220,00 310,00 400,000 500,000 400,000 600,00 500,000 800,000 800,000 1,100, 930,000
10,000 15,000 26,000 48,000 60,000 0 000
(HTTP traffic) 0 0 0 0 0 0 0 0 0
400 600 3.2 1.8 4.5 1.8 8.3 8.5 8.6 17.5 12 15 20/35 25/40 35/60 45/75
IPS Throughput 1 Gbps 3 Gbps 4 Gbps 5 Gbps 5 Gbps 4 Gbps 5 Gbps 7 Gbps 18 Gbps 25 Gbps 35 Gbps
Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
300 400 700 2.0 1.2 3.7 1.2 1.6 2.5 4.2 4.2 4.9 5.0 3.5 5.2 9.4
AV Throughput Gbps Gbps Gbps Gbps 3 Gbps 5 Gbps 7 Gbps 8 Gbps 12Gbps 10 Gbps 15Gbps 20 Gbps 20Gbps 27 Gbps 25Gbps
Mbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
Currently, there are no comparable A-Series A2700 has better performance than E2860 and A5200 is comparable to E5660 and E5760. 
models to E1606 and E1700.  E1606 and E1700 E3662.  A2700 is a substitutable model for A5200 has better IPS/AV performance.
will not be retired until substitutable A-Series E2860 and E3662.
models are ready. A5500 is comparable to E5960.  A5500 has
A2000 is comparable to E2300.  E2300 has better IPS/AV performance.
A2800 has better performance than E3960. 
advantage in optical interfaces. A2000 has
A2800 is a substitutable model for E3960. A5600 is comparable to E6160.  A5600 has
advantages in performance, storage and cost.
better IPS performance.
A2600 is comparable to E2800.  E2800 has A3000-Series have advantages in performance,
an advantage in optical interface. A2600 has interface, storage and cost over comparable E- A5800 is comparable to E6360.  A5800 has
advantages in performance, storage and cost. Series models.  A3000 is a substitutable better concurrent sessions and new sessions/s.
model for E3960, as A3600 is for E3950, A3700
When optical interface is a must, E2300 & is for E5260, and A3800 is for E5560. © 2022 Hillstone Networks All Rights Reserved | 17
E2800 are preferable.
A Future-Ready NGFW
A-Series

Capability
Interface & Storage

Excellent Access Capability with Advanced Interface
Interface
Benefits Value
Highlights
Large amount of fixed, high-speed I/O ports NGFW can also act as a switch and router Cost Savings
Throughput increase by adding expansion module : A3700 &

A3800: 20 Gbps -> 40 Gbps, A5200: 32 Gbps -> 65 Gbps,
A3700/A3800/A5x00 models support expansion A5500: 40 Gbps -> 80 Gbps, A5600: 60 Gbps -> 85 Gbps, Increased Performance
A5800: 80 Gbps -> 95 Gbps
Bypass pair in A1100 and all rackmount models Bypass capability ensures business continuity High Availability
All models provide two USB3.0 interfaces 4G/5G access capability Future Ready
Platform A200 A200W A1000 A1100 A2000 A2600 A2700 A2800 A3000 A3600 A3700 A3800 A5200 A5500 A5600 A5800
2 × 10GE(SFP+) 2 × 10GE(SFP+) 2 × 10GE(SFP+) 2 × 10GE(SFP+) 2 × 40GE(QSFP+),
8 × GE(RJ45) 8 × GE(RJ45) 2 × SFP+ 2 × SFP+ 6 × SFP+, 16 × 6 × SFP+, 16 × 2 × QSFP+, 16
Fixed I/O 8 × GE(RJ45) 8 × GE(SFP) 8 × GE(SFP) 8 × GE(SFP) 8 × GE(SFP) 16 × 10GE(SFP+), 8
5 × GE, 1 × SFP 5 × GE, 1 × SFP 4 × GE (1 bypass (1 bypass 8 × SFP 8 × SFP SFP, 8 × GE（2 SFP, 8 × GE（2 × SFP+, 8 × GE
Ports (1 bypass pair) 16 × GE(RJ45) 16 × GE(RJ45) 16 × GE(RJ45) 16 × GE(RJ45) × GE(RJ45) (4
pair) pair) 8 × GE 8 × GE bypass） bypass） (4 bypass)
(2 bypass pair) (2 bypass pair) (2 bypass pair) (2 bypass pair) bypass)
IEEE802.11a/b/g/
Wi-Fi N/A
n/ac
N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A
Expansion
0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1
Slots
IOC-A-4SFP+,
Expansion IOC-A-4SFP+, IOC-A-4SFP+, IOC-A-4SFP+, IOC-
IOC-A-4SFP+ IOC-A-4SFP+ IOC-A-
IOC-A-2QSFP+, IOC-A-2QSFP+, A-2QSFP+, IOC-A-
Module 0 0 0 0 0 0 0 0 0 0 IOC-A-2MM-BE IOC-A-2MM-BE
IOC-A-2MM-BE, IOC-A-2MM-BE,
2QSFP+, IOC-
2MM-BE, IOC-A-
Option IOC-A-2SM-BE IOC-A-2SM-BE A-2MM-BE,
IOC-A-2SM-BE IOC-A-2SM-BE 2SM-BE
IOC-A-2SM-BE
USB 2 × USB2.0 2 × USB2.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0

Better Analytics and Visibility with Increased Storage
eMMC eMMC Hard Drive
(4/8/64GB) (8/64GB) (256GB to 2T)
Standard Standard Optional
• Store configuration files, signature databases, images, etc. • eMMC stores:

• Store network/event/configuration logs, reports › configuration files, signature databases, images, etc.
• Cloud Sandbox logs or threat logs should be sent to HSM, • Hard drive stores:
HSA or CloudView for longer term storage
› Network/event/configuration/threat/cloud sandbox logs (up to 6 months)
• The storage size of each module is specified by the
› More comprehensive reports
system and cannot be configured
• More analytics capability, including IPS threat packet capture
• The storage size of each module is specified by the system by default,
and it can be configured
Platform A200 A200W A1000 A1100 A2000 A2600 A2700 A2800 A3000 A3600 A3700 A3800 A5200 A5500 A5600 A5800
Local
4 GB 4 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 64 GB 64 GB 64 GB 64 GB
Storage
Expansion 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1
500GB / 1TB 500GB / 1TB 500GB/1TB/2 500GB/1TB/2 500GB/1TB/2 500GB/1TB/2
Storage 0 0 256 GB SSD 256 GB SSD TB / 2 TB TB / 2 TB TB / 2 TB TB / 2 TB TB / 2 TB TB / 2 TB
/ 2TB SSD / 2TB SSD TB SSD TB SSD TB SSD TB SSD
Options SSD SSD SSD SSD SSD SSD
Longer Log Storing Time Deeper Analytics Richer Reports Better Visibility
A Future-Ready NGFW
A-Series

Capability

Advanced Threat Protection for Known and Unknown Malware
IPS blocks vulnerability exploitation
IP Reputation blocks risky IPs from accessing servers
URL Filtering controls user access to specified websites

Anti-Virus responds to known
viruses Botnet C&C Prevention
Anti-Virus prevents users from visiting malicious sites and phishing sites blocks the control channel
Cloud Sandbox responds to and catches intranet bots
Anti-Spam classifies and prevents potential spam unknown viruses
Pre-breach Breach Post-breach
Intrusion IP URL Anti-Spam Anti-Virus Cloud Botnet C2

Prevention Reputation Filtering Sandbox Prevention
AI-based Advanced Threat Protection Features (on roadmap)

Anti-Spam for Real-time Spam
Classification and Prevention
Global Spam Collection (Partner)
Key Features
Real-time Spam Classification and Prevention

Structure Patterns
Supported Spam classification: Confirmed Spam,
Suspected Spam, Bulk Spam, Valid Bulk
Supports encrypted traffic spam detection
Cloud-Based Spam Database Works on both SMTP and POP3 email protocols
Inbound and outbound detection
Email Checksum Query Spam Classification Whitelisting permits emails from trusted domains
Support multiple languages, formats, or content
of the message
Drop Drop

20
Cloud Sandbox for Malicious File Detection and Prevention
Static Analysis/ Behavior Cloud

Pre-Processing Analysis Intelligence
• URL whitelist, file signature • Windows/Android/MacOS simulation • Identify malicious files
verification
• Analysis of behaviors including file • Generate threat logs and reports
• Cloud-based suspicious samples process, registry action, network
activities
• Share threat intelligence
• MD5 query for file behavior;
verification and report • Evasion detection
• Block threats
Malicious Reporting Signature

Files Update
NGFW

Complete Botnet C&C Prevention
Internet
Core Switch Hillstone NGFW C&C Server Hacker
Bot
C2 Address DNS Sinkhole DNS Tunnel DGA Domain

Database Detection Detection Detection

A Future-Ready NGFW
A-Series

Capability

Smart Policy Operation
Policy Group
Automated User 01 Efficient policy management based on
Policy Deployment business requirements
Radius Dynamic Authorization
Automatically issue user policy via CoA message Aggregate Policy
Combining a set of individualized policies
Policy into one unified policy
Lifecycle 02
04
Management
Policy Redundancy Check
Discover redundant policies for deletion Policy Assistant
Refine a general policy into a granular policy
Policy Analysis
Adjust policies by observing hit
03
counts and hit trends
Easy Rapid Launch of New Dynamic Policy Increased Efficiency

Deployment Services Adjustment & Reduced Overhead

Fast, Effective, Efficient Future-Ready Security Protection
with Hillstone A-Series NGFW
High Security Complete Advanced

FAST Performance EFFECTIVE Threat Detection and Future
Leading application layer
Prevention Ready
performance meets real network
Protect against known and unknown
security needs
threats
Expansion as Smart and

FUTURE Needed EFFICIENT Automated Operation
A-Series
High-density ports ensure Security operations made easy
excellent access capability. Security
Better
Large storage options allow for That
TCO
deeper analytics and better Works
visibility

Hillstone Networks is Your Trusted Security Partner
“Hillstone offers a broad network

security portfolio, ideal for
enterprises seeking consolidation
toward a single vendor.”
8 Consecutive in Gartner Magic

Quadrant for Network
Years Firewalls
Source: Gartner (August 2022)

The Product Introduction

30
A200 Front and Rear Panel
Power LED Status LED
USB port Console port SFP GE ports

A200W Front and Rear Panel
USB port Console port SFP

GE ports
Power Status WLAN

LED LED LED
Power LED GE ports LED

Status LED SSD LED
Alarm LED
DC power
Grounding screw interface Power button CLR button Console port USB ports GE ports Security keyhole

Power LED GE ports LED

Status LED Alarm LED SSD LED
Management port LED
DC power
Grounding screw interface Power button CLR button USB ports Console port Management port GE ports Security keyhole

A2000 A2600 Front Panel
Power button Power LED Alarm LED USB ports Air inlet
A2000
A2600
SSD expansion slot

CLR button Console port
GE ports
Status LED SSD LED Power
Management port
supply LED

A2000 A2600 Rear Panel
A2000
A2600
Grounding screw Fan tray Power socket

Power button Power LED Alarm LED USB ports Air inlet
A2700
A2800
SSD expansion slot
CLR button GE ports
Console port SFP ports SFP+ ports
Status LED SSD LED Power
Management port
supply LED

A2700
A2800
Grounding screw Fan tray Power socket Power socket

A3000 A3600 A3700 A3800 Front Panel
Power supply LED
SSD expansion slot

Fan LED CLR button Management port Air inlet
Power button
A3000
A3600
A3700
A3800 SSD LED
Power LED USB ports
Console port GE ports SFP ports SFP+ ports
Alarm LED HA port
Status LED
HA Status LED

A3000 A3600 A3700 A3800 Rear Panel
A3000
A3600
Grounding screw Fan tray Power socket
A3700
Grounding screw
General expansion slot Fan tray Power socket
A3800
Grounding screw Removable, hot Power socket

Removable, hot swappable
General expansion slot Removable fan tray swappable fan trays power supply modules
Power LED
Power
Alarm LED supply LED
SSD expansion slot USB ports Air inlet
Fan LED
A5200
A5500
HA LED Console port GE ports

SFP ports
Power button Status LED Management port SFP+ ports
SSD LED HA ports
CLR button

A5200
A5500
Removable, hot Removable, hot swappable
General expansion slot Removable fan tray swappable fan trays Power socket power supply modules
Grounding screw

Power LED
Power
SSD expansion slot Alarm LED supply LED
USB ports
Fan LED Air inlet
A5600
A5800
HA LED SFP+ ports
Console port GE ports
SFP ports
Power button Status LED Management port
SSD LED HA port
CLR button

A5600
A5800
Grounding screw Removable, hot Power socket Removable, hot swappable

General expansion slot Removable fan tray swappable fan trays power supply modules

Expansion Modules
• A3700, A3800, A5200, A5500, A5600 and A5800 provide expansion slots for expansion modules.
• There are a total of 4 expansion modules available.
IOC-A-4SFP+ IOC-A-2MM-BE IOC-A-2SM-BE IOC-A-2QSFP+
4 SFP+ expansion module Multi-mode bypass expansion Single-mode bypass

2QSFP+ expansion Module
(adaptive to SFP module) module expansion module
Expansion SSD: Images
256 GB SSD 480 GB / 960 GB / 1.92 TB SSD

For A1000, A1100 For A2000, A2600, A2700, A2800, A3000, A3600, A3700, A3800, A5200, A5500, A5600, A5800
Notes
• Management
• The A-Series devices can be managed via console, telnet, ssh, http, and https channels.
• The default management port of A1000 is eth0/0 port, while all other models have MGT
port as the management port.
• Ssh and https are available by default.
• Hot Swap
• The expansion module is not hot-swappable.
• All optical modules are hot-swappable.
• A3800 supports removable fan trays, and the fan trays are hot-swappable.
• A3800, A5x00 supports removable power modules, and the power modules are hot-
swappable. The power modules of A3800 and A5x00 are not interchangeable.

+1 408 508 6750
inquiry@hillstonenet.com
5201 Great America Pkwy, #420
Santa Clara, CA 95054
www.hillstonenet.com
48

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Copyright:

Available Formats

You might also like

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Copyright:

Available Formats

Introducing the Hillstone Future-Ready

A-Series Next Generation Firewall

© 2022 Hillstone Networks All Rights Reserved | 2

Performance becomes a Devices have to be more Policy overload

Storage space limits analytical Security landscape is constantly

© 2022 Hillstone Networks All Rights Reserved | 3

© 2022 Hillstone Networks All Rights Reserved | 4

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 5

• Built on a new generation of firewall hardware

© 2022 Hillstone Networks All Rights Reserved | 6

Wi-Fi N/A IEEE802.11a/b/g/n/ac N/A N/A

Power Supply AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz

Twin-mode HA N/A N/A N/A N/A

© 2022 Hillstone Networks All Rights Reserved | 10

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 11

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 13

All performance specifications of A-Series desktop models are improved greatly.

2 times 3 times 5 times 8 times 11 times

© 2022 Hillstone Networks All Rights Reserved | 14

New Sessions/s IPS Throughput FW Throughput (64 Byte)

Firewall Throughput 1 Gbps 1 Gbps 1 Gbps 2 Gbps 4 Gbps 5 Gbps

A200W is comparable to E1100W.  A200W is a

A1000 and A1100 are higher performance desktop

© 2022 Hillstone Networks All Rights Reserved | 16

High Excellent Advanced Threat Smart Policy

Interface & Storage

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 18

Throughput increase by adding expansion module : A3700 &

© 2022 Hillstone Networks All Rights Reserved | 19

• Store configuration files, signature databases, images, etc. • eMMC stores:

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 21

IPS blocks vulnerability exploitation

IP Reputation blocks risky IPs from accessing servers

URL Filtering controls user access to specified websites

Pre-breach Breach Post-breach

Intrusion IP URL Anti-Spam Anti-Virus Cloud Botnet C2

AI-based Advanced Threat Protection Features (on roadmap)

© 2022 Hillstone Networks All Rights Reserved | 22

Real-time Spam Classification and Prevention

© 2022 Hillstone Networks All Rights Reserved | 23

Static Analysis/ Behavior Cloud

Malicious Reporting Signature

© 2022 Hillstone Networks All Rights Reserved | 24

Core Switch Hillstone NGFW C&C Server Hacker

C2 Address DNS Sinkhole DNS Tunnel DGA Domain

© 2022 Hillstone Networks All Rights Reserved | 25

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 26