As we all know, Fortinet is one of the best firewall manufacturers, but Huawei firewall is not bad. See the figure 1, we can find Huawei firewall is in the middle area among competitors.
Maybe we can consider Huawei Firewalls when choosing a firewall. For this consideration, we share comparison charts here.
Table 1. Huawei Firewall functions vs. Fortinet Firewall functions.
| Model | Fortinet FortiGate | Huawei USG |
| Internet | ||
| Routing mode | Support | Support |
| Transparent mode | Support | Support |
| Mixed mode | Support | Support |
| Bypass detection (sniffer) mode | Support | Not Support |
| NAT | Support | Support |
| Load balancing | Support | Some models don’t support. |
| Link aggregation | Support | Support |
| VLAN | Support | Support |
| IPv6 | Support | Support |
| RIP | Support | Support |
| OSPF | Support | Support |
| BGP | Support | Support |
| IS-IS | Support | Support |
| Multicast routing | Support | Support |
| Virtualization | Support | Support |
| Web proxy server | Support | Not Support |
| ICAP client | Support | Not Support |
| Security | ||
| Firewall | Support | Support |
| Application control | Support | Support |
| Flow control | Support | Support |
| Anti-virus | Support | Some models don’t support. |
| IPS | Support | Support |
| DOS defense | Support | Support |
| URL filtering | Support | Some models don’t support. |
| Web classification filtering | Support | Some models don’t support. |
| DLP | Support | Not Support |
| Anti-spam | Support | Some models don’t support. |
| VOIP filtering | Support | Not Support |
| Vulnerability scanning | Support | Not Support |
| Terminal access control (NAC) | Support | Not Support |
| Wifi control and security | Support | Not Support |
| Wan optimization | Support | Not Support |
| IPSEC VPN | Support | Support |
| SSL VPN | Support | Some models don’t support. |
| PPTP VPN | Support | Not Support |
| L2TP VPN | Support | Support |
| MPLS VPN | Not Support | Support |
| GRE | Support | Support |
| User management | ||
| Local user | Support | Support |
| Radius | Support | Support |
| LDAP | Support | Some models don’t support. |
| TACACS | Support | Support |
| Windows domain | Support | Some models don’t support. |
| Built-in Otp dynamic password | Support | Not Support |
| Digital certificate | Support | Support |
| Single sign-on (SSO) | Support | Some models don’t support. |
| Device mac address identification | Support | Some models don’t support. |
| User reputation system | Support | Not Support |
| License | ||
| ICSA firewall | √ | √ |
| ICSA antivirus | √ | × |
| ICSA IPS | √ | × |
| ICSA IPSEC VPN | √ | × |
| ICSA SSL VPN | √ | × |
| ICSA NGFW assessment | √ | × |
| NSS UTM | √ | × |
| NSS NGFW | √ | × |
| NSS IPS | √ | × |
| IPV6 ready phase-2 | √ | √ |
Table 2. Huawei Firewall models vs. Fortinet Firewall models.
| Fortinet | Description | Huawei | Description |
| FG-1000D | Fortinet FG-1000D 2 x 10GE SFP+ slots, 16 x GE SFP Slots, 16 x GE RJ45 ports, 2 x GE RJ45 Management ports, SPU NP6 and CP8 hardware accelerated, 1 x 256GB SSD onboard storage, dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-100E | Fortinet FG-100E 20 x GE RJ45 ports (including 2 x WAN ports, 1 x DMZ port, 1 x Mgmt port, 2 x HA ports, 14 x switch ports), 2 x Shared Media pairs (Including 2 x GE RJ45 ports, 2 x SFP slots). Max managed FortiAPs (Total / Tunnel) 64 / 32 | USG6585E | Huawei Firewall, 2 x 10GE (SFP+) + 8 x GE Combo + 2 x GE WAN, Optional, SSD (M.2) card supported, 240 GB |
| FG-1200D | Fortinet FG-1200D 4 x 10GE SFP+ slots, 16 x GE SFP slots, 18 x GE RJ45 ports (including 16 ports, 2 x management/HA ports), SPU NP6 and CP8 hardware accelerated, 240GB SSD onboard storage, dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-1500D | Fortinet FG-1500D 8 x 10GE SFP+ slots, 16 x GE SFP slots, 18 x GE RJ45 ports (including 16 x ports, 2 x management/HA ports), SPU NP6 and CP8 hardware accelerated, 480GB SSD onboard storage | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-2000E | Fortinet FG-2000E 6 x 10GE SFP+ slots, 34 x GE RJ45 ports (including 32 x ports, 2 x management/HA ports), SPU NP6 and CP9 hardware accelerated, 480GB SSD onboard storage | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-2500E | Fortinet FG-2500E 10 x 10GE SFP+ slots, 2 x 10GE bypass SFP+ (LC Adapter), 34 x GE RJ45 ports (including 32 x ports, 2 x management/HA ports), SPU NP6 and CP9 hardware accelerated, 480GB SSD onboard storage | USG6716E | Huawei Firewall, USG6716E Host(20*(SFP+) + 2*QSFP+2*QSFP28+2*HA) |
| FG-3000D | Fortinet FG-3000D 16 x 10GE SFP+ slots, 2 x GE RJ45 Management, SPU NP6 and CP8 hardware accelerated, 480GB SSD onboard storage, and dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-300E | Fortinet FG-300E 18 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 16 x switch ports), 16 x GE SFP slots, SPU NP6 and CP9 hardware accelerated | USG6655E | Huawei Firewall, 16 10/100/1000M autosensing Ethernet electrical ports, 12 10GE autosensing Ethernet optical ports, 2 40GE autosensing Ethernet optical ports |
| FG-30E | Fortinet FG-30E 5 x GE RJ45 ports (Including 1 x WAN port, 4 x Switch ports), Max managed FortiAPs (Total / Tunnel) 2 / 2 | USG6510E | Huawei Firewall, |
| FG-3100D | Fortinet FG-3100D 32 x 10GE SFP+ slots, SPU NP6 and CP8 hardware accelerated, 480GB SSD internal storage, and dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-3200D | Fortinet FG-3200D 48 x 10GE SFP+ slots, 2 x GE RJ45 Management, SPU NP6 and CP8 hardware accelerated, 960GB SSD onboard storage, and dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-3700D | Fortinet FG-3700D 4x 40GE QSFP+ slots , 28x 10GE SFP+ slots, 2x GE RJ45 Management, SPU NP6 and CP8 hardware accelerated, 4 TB (2x 2TB) HDD onboard storage, and dual AC power supplies | USG6716E | Huawei Firewall, USG6716E Host(20*(SFP+) + 2*QSFP+2*QSFP28+2*HA) |
| FG-5000D | Fortinet FG-5000D firewalls | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-5001E | Fortinet FG-5001E Security blade with 2 x 40GE QSFP+ slots, 2 x 10GE SFP+ slots, 2x GE RJ45 management port, FortiASIC NP6 and CP9 hardware accelerated | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
| FG-500E | Fortinet FG-500E 2 x 10GE SFP+ slots, 10 x GE RJ45 ports (including 1 x MGMT port, 1 X HA port, 8 x switch ports), 8 x GE SFP slots, SPU NP6 and CP9 hardware accelerated | USG6655E | Huawei Firewall, 16 10/100/1000M autosensing Ethernet electrical ports, 12 10GE autosensing Ethernet optical ports, 2 40GE autosensing Ethernet optical ports |
| FG-50E | Fortinet FG-50E 7 x GE RJ45 ports (Including 2 x WAN port, 5 x Switch ports), Max managed FortiAPs (Total / Tunnel) 10 / 5 | USG6530E | Huawei Firewall, 10 10/100/1000M autosensing Ethernet electrical ports, 2 10GE autosensing Ethernet optical ports, compatible with GE Ethernet optical ports |
| FG-600D | Fortinet FG-600D 2 x 10GE SFP+ slots, 8 x GE RJ45 ports, 8 x GE SFP slots, SPU NP6 and CP8 hardware accelerated, 120GB onboard SSD storage | USG6655E | Huawei Firewall, 16 10/100/1000M autosensing Ethernet electrical ports, 12 10GE autosensing Ethernet optical ports, 2 40GE autosensing Ethernet optical ports |
| FG-60E | Fortinet FG-60E 10 x GE RJ45 ports (including 7 x Internal Ports, 2 x WAN Ports, 1 x DMZ Port) | USG6530E | Huawei Firewall, 10 10/100/1000M autosensing Ethernet electrical ports, 2 10GE autosensing Ethernet optical ports, compatible with GE Ethernet optical ports |
| FG-7030E | Fortinet FG-7030E, (2x FPMs, 1x FIM Chassis) | USG6716E | Huawei Firewall, USG6716E Host(20*(SFP+) + 2*QSFP+2*QSFP28+2*HA) |
| FG-800D | Fortinet FG-800D 22x GE RJ45 ports, 4x GE RJ45 with Bypass Protection, 8x GE SFP slots, 2x 10G SFP+ slots, SPU NP6 and CP8 hardware accelerated, 240GB onboard SSD Storage | USG6655E | Huawei Firewall, 16 10/100/1000M autosensing Ethernet electrical ports, 12 10GE autosensing Ethernet optical ports, 2 40GE autosensing Ethernet optical ports |
| FG-80E | Fortinet FG-80E 14 x GE RJ45 ports (including 1 x DMZ port, 1 x Mgmt port, 1 x HA port, 12 x switch ports), 2 x Shared Media pairs (Including 2 x GE RJ45 ports, 2 x SFP slots). Max managed FortiAPs (Total/Tunnel) 32/16 | USG6530E | Huawei Firewall, 10 10/100/1000M autosensing Ethernet electrical ports, 2 10GE autosensing Ethernet optical ports, compatible with GE Ethernet optical ports |
| FG-900D | Fortinet FG-900D 2 x 10GE SFP+ slots, 16 x GE SFP slots, 16 x GE RJ45 ports, 2 x GE RJ45 management ports, SPU NP6 and CP8 hardware accelerated, 256GB SSD onboard storage, dual AC power supplies | USG6680E | Huawei Firewall, HDD/SSD Slot, 28 x 10 GE (SFP+), 4 x 40 GE (QSFP+), 2 x HA (SFP+), 1 x USB 3.0, 1 x GE (RJ45) management port, Console port |
After read their comparison, which will you choose, Huawei firewalls or Fortinet firewalls?
Welcome to leave your answers and tell us the reason.
Related Topics:
Cisco Firewalls vs. Huawei Firewalls
An SMB Network Solution with Cisco Firewalls
The Next-Generation Firewall of Fortinet
