| Key Specifications |
|---|
| Customizing Security Reports | The security report can be exported |
| Net weight | 6Kg 10Kg 14Kg 19Kg 19Kg 14Kg |
| Expansion Slot | 1 2 4 8 8 4 |
| Power supply power | 60W 350W 350W 550W 550W 350W |
| Device Management Source Address Restriction | Source address access can be restricted |
| Memory Configuration | 8G 16G 16G 32G 64G 16G |
| Product Specifications |
|---|
| Model | AFC2020-G2 AFC2040-G2 AFC2100-G2 AFC2200-G2 AFC2400-G2 AFC2100-D-G2 |
| Interface | 1GE*6 1GE*8+SFP*8 1GE*2 1GE*2 1GE*2 1GE*2 |
| Expansion Slot | 1 2 4 8 8 4 |
| Memory Configuration | 8G 16G 16G 32G 64G 16G |
| Hard Drive | 1TB |
| Form Factor | 1U 2U 2U 2U 2U 2U |
| Dimensions (D×W ×H) | 435mmx450mmx44.5mm 438mmx470mmx88mm 600mmx440mmx88mm 550mmx440mmx88mm 550mmx440mmx88mm 600mmx440mmx88mm |
| Net weight | 6Kg 10Kg 14Kg 19Kg 19Kg 14Kg |
| Ambient temperature | 0℃-40℃ (Storage Temperature:-20℃-80℃) |
| Ambient humidity | Operating: 10 to 90%, non-condensing |
| Power supply power | 60W 350W 350W 550W 550W 350W |
| Product Specifications |
|---|
| Status Monitoring | Real-time input and output traffic, connection count, and intercepted traffic display for all devices in the cluster |
| Traffic Traction and Black Holes | Support for BGP traffic diversion |
| Flowback | PBR Flowback |
| Attack Defense | Attack Rule Threshold Customization (supports custom input and output syn, tcp, udp, icmp, IP protection trigger thresholds) |
| Filter Rules | Supports configuration of access control policies based on (geographic location, source IP address, destination IP address, source port number, destination port number, protocol number, and flag bits). |
| HTTP Protection Plug-in | Support for user-agnostic js authentication |
| Game Protection Plugin | Maximum number of connections limit for source and destination addresses |
| DNS Protection Plug-in | DNS Domain Name Black and White Lists |
| Static Sampling Plugin | udp sampling plugin (automatic defense against udp flood attacks) |
| Deployment Method | Supports transparent tandem deployment, bypass dual-arm deployment, bypass single-arm deployment, bypass dual-arm deployment, and supports single mixed-mode deployment; routing mode deployment, a single device can be freely switched to work mode according to the actual environment |
| Attack Traceability | Supports logging of the attack source address and proactively analyzing the geographic location and routes to which the attack source IP belongs |
| Support for unified cluster management | You can uniformly view, manage, and configure the device status and network data situation of each sub-node, and the maximum management cluster capacity has no upper limit. |
| Customizing Security Reports | The security report can be exported |
| Log Report | Attack log (attack event start-end time, attack moment peak, interception peak, packet count, interception packet count, attack source IP) |
| Customized System Identification | Easy identification and humanized management of multi-node and multi-cluster users. |
| Device Management Source Address Restriction | Source address access can be restricted |
| Catalog Description |
|---|
| Description | H3C SecPath AFC2400-G2 Anomaly Flow Cleaner Appliance, Including System Software License |
| Key Features |
|---|
| Feature 1 | Multiple Attack Defense Capabilities Traffic-based defense types support against SYN Flood, UDP Flood, ICMP Flood, ACK Flood, DNS Flood, HTTP Flood, SIP Flood, and other traffic-based attacks |
| Feature 2 | Supports single packet attacks on Smurf, Ping of death, Teardrop, IP fragment, Winnuke, Traceroute, etc. |
| Feature 3 | Application layer protocol defense supports protection against HTTP/HTTPS/DNS/CC attacks, supports DNS request first packet drop function |
| Feature 4 | Supports customized protocol types to protect against specific application layer protocols, such as protection against online gaming, voice, instant messaging related protocols, etc. |
| Feature 5 | Supports slow attacks such as HTTP slow header, HTTP slow post, and connection count limitation |
| Ordering Information |
|---|
| Base Configuration | |
| 0150A22S | NS-Sec Path AFC2400-G2+LIS; H3C Sec Path AFC2400-G2 Anomaly Traffic Filtering System, including system functions licensing |
| Extension Module | |
| 9801A1KC | NSQM1IPCTGPFC4A; Type: Extension Module |
| SFP+ 10G Port | |
| 0231A0A8 | SFP-XG-LX-SM1310; SFP+ 10G Module (1310nm, 10km, LC); Type: SFP+ 10G Port |
| 0231A1RQ | SFP-XG-LX-SM1310-D; SFP+ 10G Module (1310nm, 10km, LC); Type: SFP+ 10G Port |
| 0231A0A6 | SFP-XG-SX-MM850-A; SFP+ 10G Module (850nm, 300m, LC); Type: SFP+ 10G Port |
| 0231A1RP | SFP-XG-SX-MM850-D; SFP+ 10G Module (850nm, 300m, LC); Type: SFP+ 10G Port |
| 0231A2L4 | SFP-XG-SX-MM850-E; SFP+ 10G Module (850nm, 300m, LC); Type: SFP+ 10G Port |
| Extension Module | |
| 9801A1KD | NSQM1IPCGT4GP4A; H3C Sec Path IPC 4-port Gigabit Ethernet electrical interface (RJ45)+4-port Gigabit Ethernet Optical Interface (SFP)Module; Type: Extension Module |
| SFP Gigabit Port | |
| 02312173 | SFP-GE-LH80-SM1550; Single-mode SFP optical module (1550 nm, 80 km, LC); Type: SFP Gigabit Port |
| 0231A563 | SFP-GE-LX-SM1310-A; Single-mode SFP GE optical module (1310 nm, 10 km, LC); Type: SFP Gigabit Port |
| 0231A962 | SFP-GE-LX-SM1310-D; Single-mode SFP GE optical module (1310 nm, 10 km, LC); Type: SFP Gigabit Port |
| 02312170 | SFP-GE-LH40-SM1310; Single-mode SFP GE optical module (1310 nm, 40 km, LC); Type: SFP Gigabit Port |
| 0231A963 | SFP-GE-LH40-SM1310-D; Single-mode SFP GE optical module (1310 nm, 40 km, LC); Type: SFP Gigabit Port |
| 02312172 | SFP-GE-LH40-SM1550; Single-mode SFP optical module (1550 nm, 40 km, LC); Type: SFP Gigabit Port |
| 0231A964 | SFP-GE-LH80-SM1550-D; Single-mode SFP optical module (1550 nm, 80 km, LC); Type: SFP Gigabit Port |
| 0231A562 | SFP-GE-SX-MM850-A; Multi-mode SFP-GE optical module (850 nm, 0.55 km, LC); Type: SFP Gigabit Port |
| 0231A961 | SFP-GE-SX-MM850-D; Multi-mode SFP-GE optical module (850 nm, 0.55 km, LC); Type: SFP Gigabit Port |
| 0231A085 | SFP-GE-T; SFP GE Electrical Port Module (100m, RJ45); Type: SFP Gigabit Port |
| 0231A960 | SFP-GE-T-D; SFP GE Electrical Port Module (100m, RJ45); Type: SFP Gigabit Port |
| Extension Module | |
| 9801A1KE | H3C afcnew Series Product; Type: Extension Module |
| 9801A1KF | NSQM1IPCQG2A; Type: Extension Module |
| QSFP+ Port | |
| 0231A2E4 | QSFP-40G-LR4-WDM1300; QSFP+ 40G optical module (1310 nm, 10 km, LR4, LC); Type: QSFP+ Port |
| 0231A4Q7 | QSFP-40G-BIDI-SR-MM850; QSFP+ 40G BIDI Optical Module (850nm, 100m, SR); Type: QSFP+ Port |
| 0231A4PB | QSFP-40G-LR4L-WDM1300; QSFP+ 40G Optical Module (1310nm, 2km, LR4L, LC); Type: QSFP+ Port |
| 0231A2NF | QSFP-40G-SR4-MM850; Type: QSFP+ Port |
| 0231A2KL | QSFP-40G-CSR4-MM850; Type: QSFP+ Port |
| Extension Module | |
| 9801A1KG | H3C afcnew Series Product; Type: Extension Module |
| 9801A1KH | NSQM1IPCGT8A; H3C Sec Path IPC 8-Port Gigabit Ethernetelectrical interface Module (RJ45); Type: Extension Module |
| 9801A1KJ | NSQM1IPCGTPFC8A; H3C Sec Path IPC 8-Port Gigabit Ethernetelectrical interface Module (RJ45, 4 Pair Bypass); Type: Extension Module |
| 9801A1KK | NSQM1IPCGP8A; Type: Extension Module |
| 9801A1KL | NSQM1IPCGTPFC4GP4A; H3C Sec Path IPC 4-port Gigabit Ethernet electrical interface (RJ45, 2 Pair Bypass)+4-port Gigabit Ethernet Optical Interface (SFP)Module; Type: Extension Module |
| 9801A1KM | NSQM1IPCTG4A; Type: Extension Module |
| SFP+ 10G Port | |
| 0231A2L3 | SFP-XG-LX-SM1310-E; SFP+ 10G Module (1310nm, 10km, LC); Type: SFP+ 10G Port |
| Power Supply | |
| 9801A1JJ | R2A-DV0550; H3C 550W AC Power Supply Module; Type: Power Supply |
| Cable | |
| 04042967 | CAB-CON-1.8m; Configuration Serial Cable—1.8 m (DB9 Female to 8-pin Ethernet Port); Type: Cable |
| 0404A1EE | CAB-Console-1.8m-W31R; Configuration Port Cable-1.8m (RJ45P) (UL2725(3C28AWG)) (USB AP); Type: Cable |
| Product Identity |
|---|
| Brand | H3C |
| Series | H3C Security Product |