Enterprise Unified Service Gateway

Enterprise Network Insight Platform

USG X Series

XDR,SOAR,
SOC, OSS …

Service OS Platform

Restful API Restful API

Supervisor Console

Network
Dashboard Management
MANO Grasp the key metrics of Visualize matrix and port
Network Management resources, realize
Platform and Visualization automatic integration,
Matrix. accelerate node
deployment, and intuitively
grasp node status.
Performance
Monitor
Rich network, service,
policy, application report,
master network, service
load and application
usage, simplify traffic
allocation.
Alarms&Events Configuration REST API
Define alarm rules and Quickly builds network Workflow automation and
view alarms and system defense and visual matrix, business closed-loop
events in a centralized and simplifies service implementation through
manner to quickly discover definition, deployment, and REST apis to automate
and rectify faults management. routine tasks

Enterprise-level unified business gateway, realize comprehensive network visualization, optimize

network security architecture, and efficiently handle network security risks.
© SINOVATIO Corporation. All rights reserved.
Typical Scenario - State Information Center

➢ Construct state information center, the traffic size is about 160Gbps;

➢ Need to deploy lots of video detection and security analysis tools in machine room B. The number of SPAN sessions of the core switch is
insufficient, and it is impossible to continue to access more security tools.

Machine Room A Machine Room B

Data Core Switch Video Core Switch
Public Zone

Public Zone
Internet Zone

XX Platform
Core
Transmission Switch

Internet
Zone
Database
...
APT DNS Detect DNS Detect APT
... DNS ... DNS DNS ... DNS ... Securty Audit
...
Email Detect Video Detect APT Video Detect
IDS
... ... ... ...
... Core Switch

© SINOVATIO Corporation. All rights reserved.

Typical Scenario - State Information Center

Project Deployment System Value

➢ 4 USG probes ➢ One time collection, distributed to different security tools as needed, eliminated traffic
➢ 2 MANO servers competition, and solved the problem of insufficient SPAN ports of the switch;
➢ According to the tool category, the advanced preprocessing functions, such as traffic de
Function duplication and video traffic filtering, are enabled as needed, which effectively improve the tool
➢ Traffic de-duplication, video traffic efficiency;
filtering, SSL offloading. ➢ Based on the MANO unified view, it greatly reduces the difficulty of network monitoring for cross
regional traffic management, scheduling and orchestration.
Machine Room A Machine Room B
Data Core Switch Video Core Switch
Public Zone

Public Zone
Internet Zone

XX Platform
Core
Transmission Switch
FlowWare MANO

Zone
Internet
Database
...
APT DNS Detect DNS Detect APT
... DNS ... DNS DNS ... DNS ... Security Audit
...
Email Detect Video Detect APT Video Detect
IDS
... ... ... ...
... Core Switch

© SINOVATIO Corporation. All rights reserved.

 Hardware Data Sheet
USG X Series Product
Product Appearance
USG X10
USG X20
Product Advantage
Advanced hardware&software architecture
• Modular sub-card design, adapt to different network and tool interface;
• Separation architecture of control&forwarding, redundant key components to ensure high availability;
• Cluster networking, distributed scalability, secure large-scale delivery and traffic visualization;
• Sinovatio fully owns intellectual property rights, and all software and key hardware components are
autonomous and controllable.
Low carbon, compact and leading performance
• Standard 1U box design, low power consumption and space occupation, environment protection;
• Supports up to 24*100GE, or 4*100GE plus 48*25GE/10GE for flexible expansion;
• Built-in BYPASS, TAP unit, with the industry's highest integration and cost performance;
• The throughput of the basic function is up to 2.4Tbps, and the throughput of the advanced
function is up to 160Gbps.
Multiple protection, safe and carefree
• Advanced architecture design, based on 15+ years and 1500+Tbps of practical experience;
• Built-in physical bypass protection provides power outage protection;
• Users are not aware of tool protection. When a security tool breaks down, is upgraded,
maintained, or expanded, it can be automatically bypassed or restored;
• If the active device fails, the standby device is quickly switched over to ensure service continuity;
• Tools are 1:1 and N:1 redundant to maximize security service availability.
www.sinovatio.com
USG X Series Product
Extreme tool optimization capability
• Intelligent traffic optimization based on advanced filtering strategy and advanced preprocessor
maximizes tool efficiency and finds problems and risks faster;
• Application awareness, combined with centralized management and orchestration system,
achieves seven-layer application visibility and facilitates tool efficiency optimization;
• Subscriber awareness, through the association of signaling and user data to obtain subscriber
identity, focusing on high-value customers;
• Fully supports data center Overlay technology such as VXLAN and NVGRE to improve tool
network compatibility;
• Unified TLS/SSL uninstallation, once decryption, all tool encryption traffic can be seen,
eliminate visibility blind area, improve tool efficiency and reduce network delay.
Low investment, high output
• Integrated deployment inline and bypass to minimize construction costs;
• Policy-based intelligent traffic scheduling enables the tool to see the most important data in the
network and improve the efficiency of the tool;
• One-time deployment provides fair traffic visualization capabilities for multiple tools, eliminates
traffic competition among tools, and reduces collection costs.
• Decouple the tool from the network and deploy the tool resource pool to ensure resource reuse
and protect user investment.
Centralized management and orchestration
• Build a secure delivery platform and traffic visibility platform, accelerate the deployment of the
unified service gateway, and manage and monitor all network nodes in a unified manner;
• Easily build network defense and visual matrix, realize plug&play of security and performance
monitoring tools, elastic scaling of tool resource pool, and optimization of tool efficiency;
• Intent-based policy blueprint simplifies traffic filtering and allocation through batch configuration
and visual orchestration;
• Rich performance report and dashboard, intuitive monitoring system operation, reduce the cost
of human operation and maintenance;
• Workflow automation and business logic closed-loop are implemented through REST API,
which improves the efficiency of event response and facilitates third-party integration.
www.sinovatio.com
© SINOVATIO Corporation. All rights reserved.
 USG X Series Product
Hardware Data Sheet USG X Series Product

Interface Extension Module Product Specification

Type X10A X10B X20A X20B
USG Interface Extension Description
Module Management Port 1×Console，2×RJ45
Modularization ● ● ● ●
X10A BPS-4LXS-16XS 4*SM 10GE BYPASS, and 16*10GE SFP+ or GE SFP
X10B Interface Extension Module 2 2 2 2
BPS-4LXM-16XS 4*MM 10GE BYPASS, and 16*10GE SFP+ or GE SFP
Physcial 100G 4 4 24 24
BPS-4LGS-16GS 4*SM GE BYPASS, and 16*GE SFP Interface
40G 4 4 24 24
BPS-4LGM-16GS 4*MM GE BYPASS, and 16*GE SFP
10G 64 64 96 96
BPS-1LLS-4LQ 1*SM 40GE BYPASS, and 4*40GE QSFP+
10/100/1000M 48 48 NA NA
BPS-1MLM-4LQ 1*MM 40GE BYPASS, and 4*40GE QSFP+
Built-in BYPASS ● ● ● ●
PIU-2CQ-24XS 2*100GE QSFP28 or 40GE QSFP+, and 24*10GE SFP+ or
Built-in TAP ● ● ● ●
GE SFP
Performance Basic(Gbps) 720 720 2400 2400
PIU-2XS-24GS 2*10GE SFP+, and 24*GE SFP
Advanced(Gbps) 80 40 160 80
X20A BPS-4LYS-16YS 4*SM 25GE BYPASS, and 16*25GE SFP28 or 10GE SFP+
Reliability MTBF > 40000 hours
X20B
MTTR < 30 minutes
BPS-4LYM-16YS 4*MM 25GE BYPASS, and 16*25GE SFP28 or 10GE SFP+
Hot plug Supports hot plug of power modules
Management ports are in 1:1 redundancy mode
BPS-4LXS-16XS 4*SM 10GE BYPASS, and 16*10GE SFP+ or GE SFP Redundancy
Power supplies are in 1+1 redundancy mode
BPS-4LXM-16XS 4*MM 10GE BYPASS, and 16*10GE SFP+ or GE SFP Power Maximum Power
340W 280W 600W 450W
consumption Consumption
BPS-2LCS-8CQ 2*SM 100GE BYPASS, and 8*100GE QSFP28 or 40GE
AC: 100V~240V, 50~60Hz, DC: -57V~-40V, HVDC:
QSFP+ Input Voltage
240V/336V
BPS-1MCM-4CQ 1*MM 100GE BYPASS, and 4*100GE QSFP28 or 40GE Size/weight Height 1U
QSFP+
Size(cm)
44.2 x 4.4 x 73.5 44.2 x 4.4 x 83.5
BPS-2LLS-8LQ 2*SM 40GE BYPASS, and 8*40GE QSFP+ (W*H*D)

BPS-1LLS-4LQ 1*SM 40GE BYPASS, and 4*40GE QSFP+ Weight < 16kg <18kg
Work Operating
BPS-1MLM-4LQ 1*MM 40GE BYPASS, and 4*40GE QSFP+ 0 ~ +40℃
Environment Temperature
PIU-12CQ 12*100GE QSFP28 or 40GE QSFP+ Storage Temperature -40℃~+70℃
PIU-2CQ-24YS 2*100GE QSFP28 or 40GE QSFP+, and 24*25GE SFP28 or Relative Humidity 0%~95%, condensation
10GE SFP+ Quake-proof Withstand a magnitude 7 earthquake

© SINOVATIO Corporation. All rights reserved.

www.sinovatio.com www.sinovatio.com