Huawei NGFW Reviews

I am working as a solution architect in my organization. Whenever we design a total network infrastructure, for ensuring the overall network security, we provide the firewall. 

If the client is asking for an internet firewall, we provide them with one. If they aren't using it for the internet, we offer them separate solutions. The reason behind offering Huawei firewall is strictly based on the customer requirements, and sometimes they want the brand. 

We also have a target to meet since we are a partner, so we pitch them.

The operational management dashboard is easy to use for the customers.

Huawei should improve their threat intelligence. They need to have a more diversified platform and continuously update it with information from all vendors. Without diversified threat intelligence, it is challenging to survive in the market.

I have about three years of experience working with the solution.

On a scale of one to ten, I can give it a seven out of ten.

In terms of scalability, I'd rate it six out of ten.

Technical support from Huawei is a ten. They are frequently engaged with global teams.

Positive

I am not engaged in the implementation part, so I cannot say how complicated it is compared to other solutions to implement or configure.

The ROI has been quite good. They offer a minimum of three years, including a warranty. I have seen customers use it for at least five years without any problems. 

For security products, they have a good amount of lifetime support, and some devices will be supported up to 2031. I believe if they provide updates for security patches and software updates for at least six to seven years, it's a good product.

The pricing is quite cheap compared to other NGFWs like Palo Alto or Cisco.

Based on my experience, I would recommend Huawei NGFW to other people.

I'd rate the solution eight out of ten.

We use the product as a firewall.

All the features are valuable. My customers are satisfied with the solution. The tool helps us to integrate with other brands.

The IPS feature must be improved.

I have been using the solution for four and a half years. I am working with multiple versions of the tool.

I rate the tool’s stability a seven out of ten. Sometimes, we have problems with stability.

I rate the product’s scalability a seven or eight out of ten. Sometimes, we have problems with scalability. Our customers are medium and enterprise-level businesses.

The product is easy to configure and deploy. Our technical people do not see any difficulties in deployment. The deployment takes a few days. Most customers don't buy a single unit of firewall. They buy multiple firewalls.

The tool was cheaper before. Now, there are cheaper firewalls in the market. I rate the pricing a six or seven out of ten on a scale where one is cheap and ten is expensive. We pay a yearly licensing fee for the solution. There are no additional costs associated with the product.

I would recommend the solution to others. Overall, I rate the tool an eight out of ten.

We use Huawei for a firewall and router switching with some components of our network. It's the first line of defense for our infrastructure. Our USG protects the navigation and communication of a lots of people. We have a big fiber channel network with more than 600 kilometers of fiber.

We have our environment and our technical needs, and if those can't be met by our base configuration we need to seek out an additional solution with extra features. In USG, we have both BBN and OBBN as well as some additional security features, like ATS and anti-spam.

We have a lot of experience with the Huawei firewall, so we understand it well.

One issue is integration. Huawei can't detect Indicators of Compromise (IoC). I can get a lot of information about security, but can't automatically input the EP,  domain URL, and file hashes I get from Hackersworld into my blocklist.

It's a limitation. I have raised this issue with Huawei, but the feature isn't anywhere on the roadmap at the moment. I must manually input the rules, but the firewall has limits on the number of rules you can enter. The firewall hangs once you reach that limit.

It's it a big problem for us, but we are almost able to solve it. We are switching to another solution because Huawei doesn't have the security feature we need on its roadmap.

We've been using Huawei for five or six years.

This product is at the end of its life, so I don't think it could be scale up. I'm not sure because I haven't verified it.

Huawei support is excellent. I rate it 10 out of 10. 

Positive

Because five or six years ago, we added a next-generation firewall like USG. It was a traditional firewall in that period. And now, we are going to another solution because we need more feature again.

I don't remember much about the deployment because it was several years ago, but I can say that Huawei was easy to deploy and only took a few days. We converted our old firewall and configured it. 

We deployed it ourselves. 

We haven't yet decided which solution we are going to use next, but we have two goals. The first is automation of IOC rules. The second is the native integration with our SIEM, which Huawei doesn't have. 

It's another big limitation because the Syslog of the firewall is a world in itself. It's difficult to understand how many kind of rules there are in the Syslog. It's difficult to integrate completely if the communication of the Syslog from the SIEM isn't automatic and native. 

I rate Huawei NGFW eight out of 10. It's an excellent product that's stable and simple to use. I don't have anything bad to say about Huawei, but it's only a partial solution for my total needs. 

It's a good product if you don't need a specific security feature. Huawei has its own IoC solution, so they give the customer the opportunity to connect the firewall to a central Huawei system that accepts the IoC data. It could be good for an organization that doesn't have their own security dataset. I have a threat-sharing system, so I would like to use mine, but it's not possible.

The solution is deployed on-premises.

The most useful feature is the performance of the firewalls and networking operations.

For now, we're using Huawei for small and medium enterprises. They're working excellently for now.

I have used Huawei for two years.

I would rate the stability as eight out of ten.

I would rate the scalability as 10 out of 10.

Technical support is good. I would rate them as seven out of ten.

I would rate the initial setup as seven out of ten.

The solution isn't cheap. It's market price.

We've also been working with Cisco.

We chose Huawei because of a customer requirement.

I would rate this solution as seven out of ten. 

I would recommend the solution to any customer. The performance is good, and it can deliver requirements.

It's an excellent competitive solution that has equivalent and sometimes better features compared to vendors such as Cisco and Arista.

We are still really just using the third party NIB and IDS for monitoring. As for the integrated platform, we haven't upgraded the new one.

We've just been playing Huawei initially. Only now are we doing the Huawei firewall call integration and we haven't actually completed that portion yet.

The security is good. It's as effective as anything else on the market.

The support could be improved. As we've gone along, we've realized the support is not effective due to the contracts we have. They need to offer more support upfront, no matter what contract you have.

The solution requires a more interactive dashboard. That would make it easier than playing with configurations the way we have to now.

It would be better if upgrading the solution was easier.

The solution needs four-way deployments and dashboard confirmation.

The product should be able to integrate with products like Ansible.

The stability of the solution is good. It doesn't crash or freeze, and I don't recall experiencing bugs or glitches. It's reliable. Most of our integrations have been okay.

Without a proper contract in place, you can't really access the technical support you need. We haven't been satisfied with the level of service we've received.

I'm also experienced with pfSense, Barracuda, and more of Cisco enterprise firewalls, as well as ASA.

I believe that, although Huawei seems to hold its own against most other products, there are features of Cisco Firepower in particular that don't exist on Huawei's solution.

The pricing is okay, however, support comes as a separate contract, and, if it expires, it can cause issues like what we are facing right now, where you need support and you don't have a contract in place and therefore can't get the help you require.

It's costly, in terms of the support contract. We'd prefer a solution that allowed us toe update or upgrade incrementally and had the support there and ready to go.

In our case, as well, it's a whole setup and not just an appliance, which is maybe why the pricing is so high and why we are facing difficulties.

I haven't worked too closely with the solution, so I don't understand its full capacity.

We have an entire Huawei architecture center. We do have equipment on the firewall side, run by Huawei, however, we haven't upgraded so far, we're just doing it to run parallel assistance with Cisco. 

We just need support from Huawei but we have not paid for the support yet, and we're lacking in that space. For that reason, we're trying to run another Cisco solution.

Due to the fact we are a government organization, we need to only use an on-premise solution, although we are planning to integrate into the public cloud.

I'd rate the solution eight out of ten. It's capabilities, at the end of the day, are quite good. However, we prefer Cisco, as it has a very good support system and users can upgrade incrementally more easily.

The solution's implementation is pretty easy.

Huawei NGFW should have better reporting and a dashboard for the visibility of traffic. Right now, everyone is looking for dashboards and single-click reporting.

I rate the solution’s technical support a seven or eight out of ten. I rate the technical support team's response time a seven out of ten. I rate the support team's product knowledge an eight or nine out of ten.

Neutral

I also work with other products like Cisco, Fortinet, Barracuda, and Sophos.

We implemented the solution for a service provider and got support from Huawei for some difficulties we might have faced.

Banks in Pakistan are actively migrating to Huawei NGFW. We are implementing end-to-end Huawei routing and switching for one of the biggest banks in Pakistan. I would not recommend Huawei NGFW for SMBs (small and medium-sized businesses). In Pakistan, customers look for local support, easy availability of technical resources, and certified resources in the local market.

Currently, we haven't found many certified resources from Huawei for small companies. All the implementation is done by Huawei partners or distributors. Only Huawei partners have certified resources in the local market. The product is new, and Huawei might release some certifications that can give a hands-on.

Overall, I rate the solution seven and a half to eight out of ten.

Huawei was able to assist us in the installation of their product. The installation was very fast.

The usage for the data center wasn't that good. It needs to be improved.

The support is not very good.

The documentation needs to be improved. When they retire old models, they also retire the documentation. However, if you are still using an older model, you still need access to that documentation. And yet, they go ahead and removed it. It's gone. You are therefore stuck with a device with no documentation and technical support that isn't very helpful as they also remove support assistance as well. They tend to use this method to force you into upgrading.

However, even in newer models, we've noticed the documentation isn't the best. It's very limited across the board.

We've been using the product for about two and a half years at this point. We started using it somewhere between 2016 and 2018.

The scalability isn't that great. On top of that, if you want to expand, you need to buy more of the product.

90% of the telecommunication equipment in our organization is Huawei, so it has been used quite extensively.

Their technical support needs to be much better. We couldn't get help when we needed it. We haven't been satisfied with their level of service.

We used to use Cisco's ASA Firewall, however, we discontinued it seven years ago.

We've also stopped using Huawei and are now using Sophos.

The initial setup was pretty straightforward and the deployment was relatively quick due to the fact that we had assistance from Huawei.

We had direct assistance from Huawei.

The licensing was a cause of concern for us. The price ended up being quite high. We weren't expecting it.

We're just customers.

We're using the latest version of the solution.

We haven't been too satisfied with the solution and so we have decided to move from it to Sophos.

I wouldn't recommend the solution. We've had a lot of issues with licensing and support, among other concerns. 

Overall, I'd rate the solution four out of ten.

I use the product to protect the network.

The UI is quite good. I don't need to remember all the command lines, and it's easier for me to update the policies and rules on the firewall.

The solution could be cheaper.

I have been using the solution for three years.

The tool works fine. It has been up and running for three years without a single downtime.

Only two people use the solution in our organization.

I have contacted the support team before deployment. The product is quite stable, so I didn’t have to contact support after deployment. I don’t use complex functions.

I have used Sangfor. I started using Huawei because the company decided to switch to Huawei.

The initial setup is quite easy.

The product is not expensive. It is moderately priced.

I will recommend the tool to others. I am quite satisfied with the product. Overall, I rate the tool a ten out of ten.