product-logo

Hillstone X-Series Data Center Firewall

See all products by this partner 

Hillstone X-Series is a multi-tenant next-generation firewall (NGFW) for service providers and large enterprise data centers. With carrier-class performance — scaling up to 1Tbps and supporting 1000 virtual firewall systems for multi-tenant operation — the X-Series is a strong choice for carriers and cloud service providers looking for the utmost infrastructure protection in their data centers while achieving a superior TCO.

Request Information

Compatibility

  • down-arrow Citrix Virtual Apps
    7.5

Product Details

Hillstone Data Center Firewall Suite Value Proposition

Data center and carrier-class performance

Hillstone’s X-Series supports the largest enterprise and service provider data center needs by providing up to 1Tbps FW throughput supporting 480M concurrent sessions and 400 Gbps of IPS. This ensures comprehensive infrastructure protection without compromising the user experience for hundreds of thousands or millions of service provider customers.

Scalable protection through patented architecture

To fit a wide range of performance needs for different sizes of data centers, Hillstone’s X-Series scales from 500 Gbps to 1 Tbps of FW throughput with carrier-grade features. X-Series’ patented Elastic Firewall architecture provides independent processing of network and application layer traffic, facilitating linear scalability for large enterprises and service providers.

Highly available architecture

Hillstone’s Twin-Mode provides consistent and optimized operations in highly-available deployment architectures. The X-Series provides service providers and enterprises peace-of-mind by ensuring continued infrastructure protection across multiple data centers even in the face of data-center-level outages.

Citrix Integration

Virtual Security Control Modules (vSCM) integrate tightly with Citrix CloudPlatform providing IaaS providers with a powerful multitenant, cloud based, virtual security solution. IaaS clients can configure and control their own cloud security via Hillstone’s multi tenant management platform. All virtual modules are managed as a single virtual appliance.

  • Via Citrix CloudPlatform, Hillstone virtual firewall resources can be managed and allocated on demand for each data center tenant
  • Each tenant gets their own independent management interfaces and resources, and scale dynamically
  • Provides peace of mind to enterprise for your security concerns with Cloud and scales your security as you grow

Screenshots

screenshot screenshot

Features

Elastic Security Architecture’s Performance 

  • Processes up to 1.2 Tbps 
  • Processes up to 10 million new sessions per second, and up to 480 million concurrent connections.
  • Provide up to 24 100GE interfaces, 240 10G interfaces, or 48 100GE interface, 96 10G interface expansion capabilities. 
  • Packet forwarding delay <10us

Carrier Grade Reliability

  • Delivers 99.999% carrier-grade reliability
  • Twin-mode high availability
  • Supports multi-mode and single-mode optical port bypass modules
  • Bypass mode for uninterrupted business operations

Leading Virtual Firewall Technology

  • Divides physical firewall into upwards of 1000 virtual firewalls
  • Dynamically customize resource allocation for each virtual firewall

Granular Application Control and Comprehensive Security

  • Advanced in-depth application identification technology identifies thousands of network applications based on protocol features, behavior characteristics, and correlation analysis
  • Intrusion prevention technology detects threats such as Trojans, worms, spyware, vulnerability attacks, and escape attacks, providing users with L2-L7 network security
  • Supports URL filtering, sandboxing, and antivirus 
  • Implement fine-grained, two-layer, eight-level traffic control based on policies and provide elastic QoS functions
  • Enable bandwidth and traffic management through session restrictions, policies, link load balancing, server load balancing, and routing

Strong Network Adaptability

  • Next-generation internet deployment technologies capable, such as DNS64/NAT64, and other transitional technologies
  • Provides full compliance with standard IPsec VPN capabilities and integrates third-generation SSL VPN 
  • Has mature NAT444 capabilities and enhanced NAT functions