How To Sell Hillstone 301. A Series NGFW v5.5r9

Introducing the Hillstone Future-Ready
A-Series Next Generation Firewall
1
What’s the New Reality for NGFW?
© 2022 Hillstone Networks All Rights Reserved | 2

2
What’s the New Reality for NGFW?
Performance becomes a
Devices have to be more Policy overload
bottleneck compact creates risk and complexity
Storage space limits analytical Security landscape is constantly

capability changing dramatically

A Future-Ready NGFW

4
A Future-Ready NGFW
A-Series
High Excellent Advanced Threat Smart Policy

Performance Expansion Protection Operation
Capability
NGFW Hardware Architecture

The Hillstone A-Series: An Overview
Product Highlights
• Built on a new generation of firewall hardware

architecture.
• Product name:
• SG-6000-A-Series NGFW • Excellent application security protection performance,
high-density ports, large-capacity local and optional
• Released: expansion storage, at a better TCO.
• 21Q1: A1000-A3800, 8 models (4~20G)
• 21Q3: A200 (1G)
• Based on Hillstone innovative operating system,
• A200W (1G, Wi-Fi model)
StoneOS.
• 21Q4: A2700, A2800 (10~20G)
• 22Q1: A5100 (20~30G)
• A5200, A5600 (30~60G) • Hillstone’s evolution in AI will continue to provide robust
• A5500, A5800 (40~80G) advanced threat detection in the future.
•

The Hillstone A-Series NGFW: Specifications
Desktop
SG-6000-A200 SG-6000-A200W SG-6000-A1000 SG-6000-A1100
Firewall Throughput 1 Gbps 1 Gbps 4 Gbps 5 Gbps
Maximum Concurrent Sessions 300,000 300,000 300,000 300,000
New Sessions/s 15,000 15,000 48,000 48,000
IPS Throughput 610 Mbps 610 Mbps 3.4 Gbps 3.7 Gbps
NGFW Throughput 400 Mbps 400 Mbps 1.5 Gbps 1.7 Gbps
Threat Protection Throughput 200 Mbps 200 Mbps 800 Mbps 800 Mbps
AV Throughput 550 Mbps 550 Mbps 1.8 Gbps 2.0 Gbps
IPsec VPN Throughput 620 Mbps 620 Mbps 2,500 Mbps 2,700 Mbps
SSL Proxy Throughput 15 Mbps 15 Mbps 250 Mbps 250 Mbps
Virtual Systems (Default/Max) N/A N/A N/A N/A
SSL VPN User Number 128 128 128 128
IPsec Tunnel Number 512 512 2,000 2,000
1 × Console Port, 2 × USB3.0
Management Ports 1 × Console Port, 2 × USB3.0 Port
1 × Console Port, 2 x USB 2.0 Ports 1 × Console Port, 2 x USB 2.0 Ports Port, 1 × MGT Port (RJ45)
Fixed I/O Ports 4 × GE 8 × GE (including 1 bypass pair)
1×SFP, 5×GE 1×SFP, 5×GE
Wi-Fi N/A N/A
N/A IEEE802.11a/b/g/n/ac
Available Slots for Expansion
NA NA
Modules N/A N/A
Expansion Module Option NA NA
N/A N/A
Twin-mode HA N/A N/A NA NA
Local Storage 4 GB 4 GB 8 GB 8 GB
Expansion Storage Options N/A N/A 256 GB SSD 256 GB SSD
Power Specification 24W, Single AC (default) 24W, Single AC (default) 30W, Single AC 50W, Single AC
Power Supply AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz

AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Form Factor Desktop Desktop Desktop Desktop
Weight 2.2 lb (0.6 kg) 2.2 lb (0.6 kg) 3.1 lb (1.4 kg) 3.1 lb (1.4 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C)
Relative Humidity 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing

Rackmount
SG-6000-A2000 SG-6000-A2600 SG-6000-A2700 SG-6000-A2800
Firewall Throughput 5 Gbps 5 Gbps 10 Gbps 16 Gbps
Maximum Concurrent Sessions 1 Million 1.2 Million 1,500,000 1,800,000
New Sessions/s 48,000 120,000 130,000 130,000
IPS Throughput 3.2 Gbps 4.5 Gbps 5 Gbps 8 Gbps
NGFW Throughput 1.7 Gbps 2.5 Gbps 3 Gbps 4.5 Gbps
Threat Protection Throughput 800 Mbps 1.8 Gbps 2 Gbps 2.8 Gbps
AV Throughput 2.0 Gbps 3.7 Gbps 4.2 Gbps 4.2 Gbps
IPsec VPN Throughput 2,700 Mbps 3,000 Mbps 5 Gbps 5.5 Gbps
SSL Proxy Throughput 250 Mbps 750 Mbps 800 Mbps 800 Mbps
Virtual Systems (Default/Max) 1/5 1/5 5 5
SSL VPN User Number 1,000 1,000 1,000 1,000
IPsec Tunnel Number 4,000 6,000 6,000 6,000
1 × Console Port, 2 × USB3.0 Port, 1 × 1 × Console Port, 2 × USB3.0 Port, 1 × 1 × Console Port, 2 × USB3.0 Ports, 1 × 1 × Console Port, 2 × USB3.0
Management Ports
MGT Port (RJ45) MGT Port (RJ45) MGT Port （ RJ45 ） Ports, 1 × MGT Port （ RJ45 ）
2 × SFP+ 2 × SFP+
Fixed I/O Ports 8 × GE (including 1 bypass pair) 8 × GE (including 1 bypass pair) 8 × SFP 8 × SFP
8 × GE 8 × GE
N/A N/A N/A N/A
Modules
Expansion Module Option N/A N/A N/A N/A
Twin-mode HA N/A N/A N/A N/A
Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500GB / 1TB / 2TB SSD 500GB / 1TB / 2TB SSD
50W, Single AC (default), Dual AC 50W, Single AC (default), Dual AC 50W, Single AC (default), Dual AC 50W, Single AC (default), Dual AC
Power Specification
(optional) (optional) (optional) (optional)
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240V, 50/60 Hz AC 100-240V, 50/60 Hz
Power Supply
DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Form Factor Rackmount, 1U Rackmount, 1U Rackmount, 1U Rackmount, 1U
Weight 8.6 lb (3.9 kg) 8.6 lb (3.9 kg) 9 bl (4.1 kg) 9 bl (4.1 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 0℃~40℃ 0℃~40℃

Rackmount
SG-6000-A3000 SG-6000-A3600 SG-6000-A3700 SG-6000-A3800
Firewall Throughput (without/with
20 Gbps 20 Gbps 20 / 40 Gbps 20 / 40 Gbps
expansion module)
Maximum Concurrent Sessions 2 Million 3 Million 6 Million 8 Million
New Sessions/s 140,000 140,000 140,000 310,000
IPS Throughput 10 Gbps 10 Gbps 10 Gbps 20 Gbps
NGFW Throughput 5.5 Gbps 5.5 Gbps 6 Gbps 12 Gbps
Threat Protection Throughput 3 Gbps 3 Gbps 3.1 Gbps 6 Gbps
AV Throughput 4.9 Gbps 5.0 Gbps 5.2 Gbps 9.4 Gbps
IPsec VPN Throughput 6,000 Mbps 6,000 Mbps 6,500 Mbps 12,000 Mbps
SSL Proxy Throughput 950 Mbps 950 Mbps 950 Mbps 2 Gbps
Virtual Systems (Default/Max) 1/5 1/50 1/100 1/100
SSL VPN User Number 2,000 4,000 6,000 8,000
IPsec Tunnel Number 8,000 10,000 16,000 20,000
1 × Console Port, 2 × USB3.0 Port,
1 × Console Port, 2 × USB3.0 Port, 1 × 1 × Console Port, 2 × USB3.0 Port, 1 × 1 × Console Port, 2 × USB3.0 Port, 1 ×
Management Ports 1 × MGT Port (RJ45), 1 × HA Port
MGT Port (RJ45), 1 × HA Port (RJ45) MGT Port (RJ45), 1 × HA Port (RJ45) MGT Port (RJ45), 1 × HA Port (RJ45)
(RJ45)
2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE (including 2 2 × SFP+, 8 × SFP, 16 × GE
Fixed I/O Ports
bypass pairs) bypass pairs) bypass pairs) (including 2 bypass pairs)
N/A N/A 1 1
Modules
IOC-A-4SFP+, IOC-A-2MM-BE, IOC-A- IOC-A-4SFP+, IOC-A-2MM-BE,
Expansion Module Option N/A N/A
2SM-BE IOC-A-2SM-BE
Twin-mode HA Yes Yes Yes Yes
Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD
100W, Single AC (default), Dual AC 100W, Single AC (default), Dual AC 100W, Single AC (default), Dual AC 100W, Dual AC (default), Dual DC
Power Specification
(optional) (optional) (optional) (optional), hot swappable power
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Power Supply
DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Form Factor Rackmount, 1U Rackmount, 1U Rackmount, 1U Rackmount, 1U
Weight 13.2 lb (6 kg) 13.2 lb (6 kg) 13.4 lb (6.1 kg) 15 lb (6.8 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C)

Rackmount
SG-6000-A5100 SG-6000-A5200 SG-6000-A5500 SG-6000-A5600 SG-6000-A5800
Firewall Throughput
25/50 Gbps 32/65 Gbps 40/80 Gbps 60/85 Gbps 80/95 Gbps
(without/with expansion module)
Maximum Concurrent Sessions 8,000,000 12,000,000 12,000,000 20,000,000 24,000,000
New Sessions/s 350,000 400,000 500,000 800,000 930,000
IPS Throughput * 20/25 Gbps 20/35 Gbps 25/40 Gbps 35/60 Gbps 45/75 Gbps
NGFW Throughput 9 Gbps 20 Gbps 25 Gbps 29 Gbps 32 Gbps
Threat Protection Throughput 6 Gbps 12 Gbps 15 Gbps 18 Gbps 20 Gbps
AV Throughput 12Gbps 12Gbps 15Gbps 20Gbps 25Gbps
IPsec VPN Throughput 15Gbps 20Gbps 28 Gbps 36Gbps 45 Gbps
SSL Proxy Throughput 3 Gbps 5 Gbps 5 Gbps 8.5 Gbps 8.5 Gbps
Virtual Systems (Default/Max) 1/250 1/250 1/250 1/500 1/500
SSL VPN User Number 10,000 10,000 10,000 10,000 10,000
IPsec Tunnel Number 20,000 20,000 20,000 20,000 20,000
1 × Console Port, 2 × USB3.0 Ports, 1 × Console Port, 2 × USB3.0 Ports, 1 × Console Port, 2 × USB3.0 Ports, 1 × Console Port, 2 × USB3.0 Ports, 1 × Console Port, 2 × USB3.0
Management Ports 2 × HA Port (10GE), 1 × MGT Port 2 × HA Port (10GE), 1 × MGT Port 2 × HA Port (10GE), 1 × MGT Port 1 × HA Port (GE), 1 × MGT Port Ports, 1 × HA Port (GE), 1 ×
(RJ45) (RJ45) (RJ45) (RJ45) MGT Port (RJ45)
6 × SFP+, 16× SFP, 8× GE 6 × SFP+, 16 × SFP, 8 × GE （ 2 6 × SFP+, 16 × SFP, 8 × GE （ 2 2 × QSFP+, 16 × SFP+, 8 × GE (4 2 × QSFP+, 16 × SFP+, 8 ×
Fixed I/O Ports
(including 2 bypass pairs) bypass ） bypass ） bypass) GE(RJ45) (4 bypass)
1 1 1 1 1
Modules
IOC-A-4SFP+, IOC-A-2QSFP+,
IOC-A-4SFP+, IOC-A-2QSFP+, IOC- IOC-A-4SFP+, IOC-A-2QSFP+, IOC- IOC-A-4SFP+, IOC-A-2QSFP+, IOC- IOC-A-4SFP+, IOC-A-2QSFP+, IOC-
Expansion Module Option IOC-A-2MM-BE, IOC-A-2SM-
A-2MM-BE, IOC-A-2SM-BE A-2MM-BE, IOC-A-2SM-BE A-2MM-BE, IOC-A-2SM-BE A-2MM-BE, IOC-A-2SM-BE
BE
Twin-mode HA Yes Yes Yes Yes Yes
Local Storage 64 GB 64 GB 64 GB 64 GB 64 GB
Expansion Storage Options 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD 500 GB / 1 TB / 2 TB SSD
289W, Dual AC (default), Dual DC 289W, Dual AC (default), Dual DC 289W, Dual AC (default), Dual DC 382W, Dual AC (default), Dual DC 382W, Dual AC (default), Dual
Power Specification
(optional) (optional) (optional) (optional) DC (optional)
AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz
Power Supply
DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V DC -36~-72 V
Form Factor Rackmount, 1U Rackmount, 1U Rackmount, 1U Rackmount, 1U Rackmount, 1U
Weight 18.7 lb (8.5 kg) 18.7 lb (8.5 kg) 18.7 lb (8.5 kg) 18.7 lb (8.5 kg) 18.7 lb (8.5 kg)
Temperature 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C) 32-104°F (0-40°C)
Relative Humidity 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing 10-95% non-condensing
* IPS throughput for A5100/A5200/A5500/A5600/A5800 are tested on R8 release. © 2022 Hillstone Networks All Rights Reserved | 10
A Future-Ready NGFW
A-Series

Capability

Advanced NGFW Hardware Architecture
Powerful computing Friendly software SSL decryption Front and rear air
foundation guarantees ecology for third-party hardware acceleration ventilation in all
high performance integration capability: alleviates rackmount models
CPU intensive tasks
from servers
Note: the SSL decryption hardware acceleration capability will be available via software upgrade in phase 2. A200 series do NOT support hardware acceleration.

A Future-Ready NGFW
A-Series

Capability

New A-Series Desktop Models Complement the
E-Series Desktop Models
Desktop
Desktop Models: E1600 vs A1000 vs A1100
Platform E1100W A200 A200W E1600 A1000 A1100
11X
1 2 4 5
Firewall Throughput 1 Gbps 1 Gbps 8X
Gbps Gbps Gbps Gbps
Firewall Throughput (64 150 150 280 800 800
96 Mbps
Byte) Mbps Mbps Mbps Mbps Mbps 5X
Maximum Concurrent 300,0 300,00 100,0 300,0 300,0 3X 3X
100,000 2X
Sessions 00 0 00 00 00
New Sessions/s (HTTP 15,00 10,00 48,00 48,00
10,000 15,000
traffic) 0 0 0 0
Firewall Firewall Maximum New Sessions/s IPS Throughput AV Throughput
400 610 610 400 3.4 3.7
IPS Throughput Throughput Throughput (64 Concurrent (HTTP traffic)
Mbps Mbps Mbps Mbps Gbps Gbps (1518 Byte) Byte) Sessions
300 550 550 300 1.8 2.0 (IPv6)
AV Throughput
Mbps Mbps Mbps Mbps Gbps Gbps E1600 A1000 A1100
All performance specifications of A-Series desktop models are improved greatly.
2 times 3 times 5 times 8 times 11 times

firewall throughput maximum new sessions/s IPS throughput AV throughput
concurrent sessions

Upgraded Rackmount Models with Advantages in: Performance, Expansion Capability, Cost
Rackmount
E16 E17 E230 A200 E28 A26 E286 E366 E39 E39 A27 A28 E52 A300 A36 A37 E556 A38 E566 A510 E576 A520 E596 A550 E616 A560 E636 A580
Platform
06 00 0 0 00 00 0 2 60 65 00 00 60 0 00 00 8 00 0 0 0 0 0 0 0 0 0 0
20 /
20 /
Firewall 2 3 4 5 5 5 6 8 10 10 10 16 16 20 20
40
20 40 25 25/50 32 32/65 40 40/80 60 60/85 80 80/95
Throughput Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbp Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
Gbps
s
Firewall 280 280 907 5.5
312 800 1.9 834 834 1.1 1.9 2.2 2.3 2.4 2.5 2.5 2.5 3.3 4.7 6.5 5.7 8 8.9 10 13.3 15 17.7 19
Throughput (64 Mbp Mbp Mbp Gbp
Mbps Mbps Gbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gpbs Gbps Gbps Gbps Gbps
Byte) s s s s
Maximum 1,20 1,60 4,80 4,80 3,00 6,00 8,00
Concurrent
200, 300, 500,0 1,000, 500,
0,00
1,000 1,500 0,00 0,00
1,500, 1,800,
0,00
2,000,
0,00 0,00
7,500
0,00
10,00 8,000,0 12,00 12,000, 15,00 12,000, 20,00 20,000, 30,00 24,000,
000 000 00 000 000 ,000 ,000 000 000 000 ,000 0,000 00 0,000 000 0,000 000 0,000 000 0,000 000
Sessions 0 0 0 0 0 0 0
New Sessions/s 10,0 15,0 26,00 48,00 60,0 120, 60,00 75,00 100, 120, 130,0 130,0 150, 140,0 140, 140, 220,0 310, 400,0 350,00 500,0 400,00 600,0 500,00 800,0 800,00 1,100, 930,00
(HTTP traffic) 00 00 0 0 00 000 0 0 000 000 00 00 000 00 000 000 00 000 00 0 00 0 00 0 00 0 000 0
400 600 20
IPS Throughput Mbp Mbp
1 3.2 1.8 4.5 1.8 3 4 4 5 8 5 10 10 10 7
Gbp
12 20/25 15 20/35 18 25/40 25 35/60 35 45/75
Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
s s s
New
300 Sessions/s
400
700 2.0 1.2 3.7 1.2 1.6 2.5 3 4.2 4.2 3.5
IPS Throughput
4.9 5.0 5.2 5
9.4
7 12 8
FW12Throughput
10 15
(64 Byte)
20 20 27 25
AV Throughput Mbp Mbp Gbp
Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
s s s
New Sessions/s IPS Throughput FW Throughput (64 Byte)
2 3 4 5 6 8 10 16 20 25 32 40 60 80 2 3 4 5 6 8 10 16 20 25 32 40 60 80 2 3 4 5 6 8 10 16 20 25 32 40 60 80
15
A Summary of the Current A-Series and E-Series
Desktop
Platform E1100W A200W A200 E1600 A1000 A1100
Firewall Throughput 1 Gbps 1 Gbps 1 Gbps 2 Gbps 4 Gbps 5 Gbps
Firewall Throughput (64 Byte) 96 Mbps 150 Mbps 150 Mbps 280 Mbps 800 Mbps 800 Mbps
Maximum Concurrent Sessions (IPv6) 100,000 300,000 300,000 100,000 300,000 300,000
New Sessions/s (HTTP traffic) 10,000 15,000 15,000 10,000 48,000 48,000
IPS Throughput 400 Mbps 610 Mbps 610 Mbps 400 Mbps 3.4 Gbps 3.7 Gbps
AV Throughput 300 Mbps 550 Mbps 550 Mbps 300 Mbps 1.8 Gbps 2.0 Gbps
A200W is comparable to E1100W.  A200W is a

higher performance desktop model compared to
E1100W, and cannot substitute the E1100W. Both
models supports Wi-Fi mode.
A1000 and A1100 are higher performance desktop

models compared to E1600, but cannot substitute
E1600.  E1600 will not be retired until a
substitutable A-Series model is ready.

A Summary of the Current A-Series and E-Series
Rackmount
E160 E170 E230 A200 E280 A260 E2860 E3662 E396 A270 A280 A300 E396 A360 E526 A370 E556 A380 E566 A510 E576 A520 E596 A550 E616 A560 E6360 A580
Platform 6 0 0 0 0 0 0 0 0 0 5 0 0 0 8 0 0 0 0 0 0 0 0 0 0
Firewall 2 3 4 5 5 5 6 Gbps 8 Gbps 10 10 Gbps 16 Gbps 20 10 20 16 20 / 40 20 20 / 40 25 Gbps 25/50 32 Gbps 32/65 40Gbp 40/80
60 Gbps
60/85 80 80/95
Throughput Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps s Gbps Gbps Gbps Gbps
Firewall 834 834 2.2 2.3 6.5

280 280 312 800 907 1.9 1.1 2.5 1.9 2.5 2.4 2.5 3.3 5.5 4.7 5.7 8 8.9 10 13.3 15 17.7 19
Throughput (64 Mbps Mbps Mbps Mbps Mbps Gbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
Byte)
Maximum
200,00 300,00 500,00 1,000, 500,00 1,200, 1,000,0 1,500,0 1,600, 1,500,0 1,800,0 2,000, 4,800, 3,000, 4,800, 6,000, 7,500, 8,000, 10,000, 8,000,0 12,000, 12,000, 15,000 12,000, 20,000, 20,000, 30,000 24,000,0
Concurrent 0 0 0 000 0 000 00 00 000 00 00 000 000 000 000 000 000 000 000 00 000 000 ,000 000 000 000 ,000 00
Sessions (IPv6)
New Sessions/s 10,000 15,000 26,000 48,000 60,000
120,00 60,000 75,000 100,00 130,000 130,000 140,00 120,00 140,00 150,00 140,00 220,00 310,00 400,000 350,000 500,000 400,000 600,00 500,000 800,000 800,000 1,100, 930,000
(HTTP traffic) 0 0 0 0 0 0 0 0 0 0 000
400 600 1 3.2 1.8 4.5 1.8 4 10 4 10 5 10 7 20 12 20/25 15 20/35 25/40 35/60 45/75
IPS Throughput Mbps Mbps Gbps Gbps Gbps Gbps Gbps
3 Gbps
Gbps
5 Gbps 8 Gbps
Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
18 Gbps
Gbps
25 Gbps
Gbps
35 Gbps
Gbps
300 400 700 2.0 1.2 3.7 1.2 1.6 2.5 4.2 4.2 4.9 3 5.0 3.5 5.2 5 9.4 7 12 8
AV Throughput Mbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
12Gbps 10 Gbps 15Gbps 20 Gbps 20Gbps 27 Gbps 25Gbps
Currently, there are no comparable A-Series A2700 has better performance than E2860 and A5100 is comparable to E5660.  A5100 has
models to E1606 and E1700.  E1606 and E3662.  A2700 is a substitutable model for better IPS/AV performance.
E1700 will not be retired until substitutable A- E2860 and E3662.
Series models are ready. A5200 is comparable to E5760.  A5200 has
better IPS/AV performance.
A2000 is comparable to E2300.  E2300 has
A2800 has better performance than E3960. 
advantage in optical interfaces. A2000 has A5500 is comparable to E5960.  A5500 has
A2800 is a substitutable model for E3960.
advantages in performance, storage and cost. better IPS/AV performance.
A3000-Series have advantages in A5600 is comparable to E6160.  A5600 has

A2600 is comparable to E2800.  E2800 has
better IPS performance.
an advantage in optical interface. A2600 has performance, interface, storage and cost over
advantages in performance, storage and cost. comparable E-Series models.  A3000 is a A5800 is comparable to E6360.  A5800 has
substitutable model for E3960, as A3600 is for better concurrent sessions and new sessions/s.
When optical interface is a must, E2300 & E3950, A3700 is for E5260, and A3800 is for
E2800 are preferable. E5560.
A Future-Ready NGFW
A-Series

Capability
Interface & Storage

Excellent Access Capability with Advanced Interface
Interface
Benefits Value
Highlights
Large amount of fixed, high-speed I/O ports NGFW can also act as a switch and router Cost Savings
Throughput increase by adding expansion module : A3700 &

A3700/A3800/A5x00 models support A3800: 20 Gbps -> 40 Gbps, A5100: 25 Gbps -> 50 Gbps A5200:
expansion 32 Gbps -> 65 Gbps, A5500: 40 Gbps -> 80 Gbps, A5600: 60 Increased Performance
Gbps -> 85 Gbps, A5800: 80 Gbps -> 95 Gbps
Bypass pair in A1100 and all rackmount models Bypass capability ensures business continuity High Availability
All models provide two USB3.0 interfaces 4G/5G access capability Future Ready
Platform A200 A200W A1000 A1100 A2000 A2600 A2700 A2800 A3000 A3600 A3700 A3800 A5100 A5200 A5500 A5600 A5800
2 × 10GE(SFP+) 2 × 10GE(SFP+) 2 × 10GE(SFP+) 2 × 10GE(SFP+) 6 × SFP+, 16 × 6 × SFP+, 16 × 6 × SFP+, 16 ×
Fixed I/O 8 × GE(RJ45) 8 × GE(RJ45) 2 × SFP+ 2 × SFP+ 2 × QSFP+, 16 2 × QSFP+, 16 ×
8 × GE(RJ45) 8 × GE(SFP) 8 × GE(SFP) 8 × GE(SFP) 8 × GE(SFP)
5 × GE, 1 × SFP 5 × GE, 1 × SFP 4 × GE (1 bypass (1 bypass 8 × SFP 8 × SFP SFP, 8 × GE （ 2 SFP, 8 × GE （ 2 SFP, 8 × GE （ 2 × SFP+, 8 × SFP+, 8 × GE(RJ45)
Ports (1 bypass pair)
pair) pair) 8 × GE 8 × GE
16 × GE(RJ45) 16 × GE(RJ45) 16 × GE(RJ45) 16 × GE(RJ45)
bypass ） bypass ） bypass ） GE (4 bypass) (4 bypass)
(2 bypass pair) (2 bypass pair) (2 bypass pair) (2 bypass pair)
IEEE802.11a/b/
Wi-Fi N/A
g/n/ac
N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A
Expansion 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1
Slots
IOC-A-4SFP+,
Expansion IOC-A-4SFP+, IOC-A-4SFP+, IOC-A-4SFP+, IOC-A-4SFP+, IOC-
IOC-A-4SFP+ IOC-A-4SFP+ IOC-A-
IOC-A-2QSFP+, IOC-A-2QSFP+, IOC-A-2QSFP+, A-2QSFP+, IOC-A-
Module 0 0 0 0 0 0 0 0 0 0 IOC-A-2MM-BE IOC-A-2MM-BE
IOC-A-2MM-BE, IOC-A-2MM-BE, IOC-A-2MM-BE,
2QSFP+, IOC-
2MM-BE, IOC-A-
Option IOC-A-2SM-BE IOC-A-2SM-BE A-2MM-BE,
IOC-A-2SM-BE IOC-A-2SM-BE IOC-A-2SM-BE 2SM-BE
IOC-A-2SM-BE
USB 2 × USB2.0 2 × USB2.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0 2 × USB3.0

Better Analytics and Visibility with Increased Storage
eMMC eMMC Hard Drive
(4/8/64GB) (8/64GB) (256GB to 2T)
Standard Standard Optional
• Store configuration files, signature databases, images, • eMMC stores:

etc.
› configuration files, signature databases, images, etc.
• Store network/event/configuration logs, reports
• Hard drive stores:
• Cloud Sandbox logs or threat logs should be sent to HSM,
› Network/event/configuration/threat/cloud sandbox logs (up to 6
HSA or CloudView for longer term storage
months)
• The storage size of each module is specified by the
› More comprehensive reports
system and cannot be configured
• More analytics capability, including IPS threat packet capture
• The storage size of each module is specified by the system by default,
and it can be configured
Platform A200 A200W A1000 A1100 A2000 A2600 A2700 A2800 A3000 A3600 A3700 A3800 A5100 A5200 A5500 A5600 A5800
Local
4 GB 4 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 8 GB 64 GB 64 GB 64 GB 64 GB 64 GB
Storage
Expansion 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1 500 GB / 1 500GB/ 500GB/ 500GB/ 500GB/ 500GB/
500GB / 1TB 500GB / 1TB
Storage 0 0 256 GB SSD 256 GB SSD TB / 2 TB TB / 2 TB
/ 2TB SSD / 2TB SSD
TB / 2 TB TB / 2 TB TB / 2 TB TB / 2 TB 1TB/2TB 1TB/2TB 1TB/2TB 1TB/2TB 1TB/2TB
Options SSD SSD SSD SSD SSD SSD SSD SSD SSD SSD SSD
Longer Log Storing Time Deeper Analytics Richer Reports Better Visibility
A Future-Ready NGFW
A-Series

Capability

Advanced Threat Protection for Known and Unknown Malware
IPS blocks vulnerability exploitation
IP Reputation blocks risky IPs from accessing servers
URL Filtering controls user access to specified websites

Anti-Virus responds to known
viruses Botnet C&C Prevention
Anti-Virus prevents users from visiting malicious sites and phishing blocks the control channel
sites Cloud Sandbox responds to and catches intranet bots
unknown viruses
Anti-Spam classifies and prevents potential spam
Pre-breach Breach Post-breach
Intrusion IP URL Anti-Spam Anti-Virus Cloud Botnet C2

Prevention Reputation Filtering Sandbox Prevention
AI-based Advanced Threat Protection Features (on roadmap)

Anti-Spam for Real-time Spam Classification and
Prevention
Global Spam Collection (Partner)

Key Features
Real-time Spam Classification and Prevention

Structure Patterns
Supported Spam classification: Confirmed Spam,

Suspected Spam, Bulk Spam, Valid Bulk
Supports encrypted traffic spam detection
Cloud-Based Spam Database Works on both SMTP and POP3 email protocols
Inbound and outbound detection
Email Checksum Query Spam Classification Whitelisting permits emails from trusted domains
Support multiple languages, formats, or content
of the message
Drop Drop

20
Cloud Sandbox for Malicious File Detection and Prevention
Static Analysis/ Behavior Cloud

Pre-Processing Analysis Intelligence
• URL whitelist, file signature • Windows/Android/MacOS • Identify malicious files
verification simulation
• Generate threat logs and reports
• Cloud-based suspicious samples • Analysis of behaviors including file
process, registry action, network • Share threat intelligence
• MD5 query for file behavior;
verification and report
activities • Block threats
• Evasion detection
Malicious Reporting Signature

Files Update
NGFW

Complete Botnet C&C Prevention
Internet
Core Switch Hillstone NGFW C&C Server Hacker
Bot
C2 Address DNS Sinkhole DNS Tunnel DGA Domain

Database Detection Detection Detection

A Future-Ready NGFW
A-Series

Capability

Smart Policy Operation
01 Policy Group
Automated User Efficient policy management based on
Policy Deployment business requirements
Radius Dynamic Authorization
Automatically issue user policy via CoA message Aggregate Policy
Combining a set of individualized policies
Policy into one unified policy
Lifecycle 02
04
Management
Policy Redundancy Check
Discover redundant policies for deletion Policy Assistant
Refine a general policy into a granular policy
Policy Analysis
Adjust policies by observing hit 03
counts and hit trends
Easy Rapid Launch of New Dynamic Policy Increased Efficiency

Deployment Services Adjustment & Reduced Overhead

Fast, Effective, Efficient Future-Ready Security Protection with Hillstone A-Series NGFW
High Security Complete Advanced

FAST Performance EFFECTIVE Threat Detection and Future
Leading application layer Ready
Prevention
performance meets real network
Protect against known and unknown
security needs
threats
Expansion as Smart and

FUTURE Needed EFFICIENT Automated Operation A-Series
High-density ports ensure Security operations made easy
Security
excellent access capability. Better
Large storage options allow for That
TCO
deeper analytics and better Works
visibility

Hillstone Networks is Your Trusted Security Partner
“Hillstone offers a broad network

security portfolio, ideal for
enterprises seeking consolidation
toward a single vendor.”
8 Consecutive in Gartner Magic

Quadrant for Network
Years Firewalls
Source: Gartner (August 2022)

The Product Introduction

30
A200 Front and Rear Panel
Power LED Status LED
USB port Console port SFP GE ports

A200W Front and Rear Panel
USB port Console port SFP

GE ports
Power Status WLAN

LED LED LED
Power LED GE ports LED

Status LED SSD LED
Alarm LED
DC power
Grounding screw interface Power button CLR button Console port USB ports GE ports Security keyhole

Power LED GE ports LED

Status LED Alarm LED SSD LED
Management port LED
DC power
Grounding screw interface Power button CLR button USB ports Console port Management port GE ports Security keyhole

A2000 A2600 Front Panel
Power button Power LED Alarm LED USB ports Air inlet
A2000
A2600
SSD expansion slot

CLR button Console port
GE ports
Status LED SSD LED Power
Management port
supply LED

A2000 A2600 Rear Panel
A2000
A2600
Grounding screw Fan tray Power socket

Power button Power LED Alarm LED USB ports Air inlet
A2700
A2800
SSD expansion slot
CLR button GE ports
Console port SFP ports SFP+ ports
Status LED SSD LED Power
Management port
supply LED

A2700
A2800
Grounding screw Fan tray Power socket Power socket

A3000 A3600 A3700 A3800 Front Panel
Power supply
LED
SSD expansion slot
Fan LED CLR button Management port Air inlet
Power button
A3000
A3600
A3700
A3800 SSD LED
Power LED USB ports
Console port GE ports SFP ports SFP+ ports
Alarm LED HA port
Status LED
HA Status LED

A3000 A3600 A3700 A3800 Rear Panel
A3000
A3600
Grounding screw Fan tray Power socket
A3700
Grounding screw
General expansion slot Fan tray Power socket
A3800
Grounding screw Removable, hot Power socket

Removable, hot swappable
General expansion slot Removable fan tray swappable fan trays power supply modules
A5100 A5200 A5500 Front Panel
Power LED
Power
Alarm LED supply LED
SSD expansion slot USB ports Air inlet
Fan LED
A5100
A5200
A5500
HA LED Console port GE ports
SFP ports
Power button Status LED Management port SFP+ ports
SSD LED HA ports
CLR button

A5100 A5200 A5500 Rear Panel
A5100
A5200
A5500
Removable, hot Removable, hot swappable
General expansion slot Removable fan tray swappable fan trays Power socket power supply modules
Grounding screw

Power LED
Power
SSD expansion slot Alarm LED supply LED
USB ports
Fan LED Air inlet
A5600
A5800
QSFP+ ports
HA LED Console port GE ports
SFP+ ports
Power button Status LED Management port
SSD LED HA port
CLR button

A5600
A5800
Grounding screw Removable, hot Power socket Removable, hot swappable

General expansion slot Removable fan tray swappable fan trays power supply modules

Expansion Modules
• A3700, A3800, A5200, A5500, A5600 and A5800 provide expansion slots for expansion modules.
• There are a total of 4 expansion modules available.
IOC-A-4SFP+ IOC-A-2MM-BE IOC-A-2SM-BE IOC-A-2QSFP+
4 SFP+ expansion module Multi-mode bypass expansion Single-mode bypass

2QSFP+ expansion module
(adaptive to SFP module) module expansion module
Expansion SSD: Images
500 GB / 1 TB / 2 TB SSD
256 GB SSD
For A2000, A2600, A2700, A2800, A3000, A3600, A3700, A3800, A5100, A5200, A5500, A5600,
For A1000, A1100
A5800
Notes
• Management
• The A-Series devices can be managed via console, telnet, ssh, http, and https channels.
• The default management port of A1000 is eth0/0 port, while all other models have MGT
port as the management port.
• Ssh and https are available by default.
• Hot Swap
• The expansion module is not hot-swappable.
• All optical modules are hot-swappable.
• A3800 supports removable fan trays, and the fan trays are hot-swappable.
• A3800, A5x00 supports removable power modules, and the power modules are hot-
swappable. The power modules of A3800 and A5x00 are not interchangeable.

+1 408 508 6750
inquiry@hillstonenet.com
5201 Great America Pkwy, #420
Santa Clara, CA 95054
www.hillstonenet.com
48

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Copyright:

Available Formats

You might also like

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

How To Sell Hillstone 301. A Series NGFW v5.5r9

Uploaded by

Copyright:

Available Formats

Introducing the Hillstone Future-Ready

A-Series Next Generation Firewall

© 2022 Hillstone Networks All Rights Reserved | 2

Storage space limits analytical Security landscape is constantly

© 2022 Hillstone Networks All Rights Reserved | 3

© 2022 Hillstone Networks All Rights Reserved | 4

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 5

• Built on a new generation of firewall hardware

© 2022 Hillstone Networks All Rights Reserved | 6

Power Supply AC 100-240 V 50/60 Hz AC 100-240 V 50/60 Hz

© 2022 Hillstone Networks All Rights Reserved | 7

© 2022 Hillstone Networks All Rights Reserved | 8

© 2022 Hillstone Networks All Rights Reserved | 9

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 11

© 2022 Hillstone Networks All Rights Reserved | 12

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 13

All performance specifications of A-Series desktop models are improved greatly.

2 times 3 times 5 times 8 times 11 times

© 2022 Hillstone Networks All Rights Reserved | 14

New Sessions/s IPS Throughput FW Throughput (64 Byte)

Firewall Throughput 1 Gbps 1 Gbps 1 Gbps 2 Gbps 4 Gbps 5 Gbps

A200W is comparable to E1100W.  A200W is a

A1000 and A1100 are higher performance desktop

© 2022 Hillstone Networks All Rights Reserved | 16

Firewall 834 834 2.2 2.3 6.5

A3000-Series have advantages in A5600 is comparable to E6160.  A5600 has

High Excellent Advanced Threat Smart Policy

Interface & Storage

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 18

Throughput increase by adding expansion module : A3700 &

© 2022 Hillstone Networks All Rights Reserved | 19

• Store configuration files, signature databases, images, • eMMC stores:

High Excellent Advanced Threat Smart Policy

NGFW Hardware Architecture

© 2022 Hillstone Networks All Rights Reserved | 21

IPS blocks vulnerability exploitation

IP Reputation blocks risky IPs from accessing servers

URL Filtering controls user access to specified websites

Pre-breach Breach Post-breach

Intrusion IP URL Anti-Spam Anti-Virus Cloud Botnet C2

AI-based Advanced Threat Protection Features (on roadmap)

© 2022 Hillstone Networks All Rights Reserved | 22

Global Spam Collection (Partner)

Real-time Spam Classification and Prevention

Supported Spam classification: Confirmed Spam,

© 2022 Hillstone Networks All Rights Reserved | 23

Static Analysis/ Behavior Cloud

Malicious Reporting Signature

© 2022 Hillstone Networks All Rights Reserved | 24

Core Switch Hillstone NGFW C&C Server Hacker

C2 Address DNS Sinkhole DNS Tunnel DGA Domain