< Home

License Control Items

This section describes FW control items.

License Control Items

Currently, the application of licenses involves the control over functions, resources, and service upgrades.
  • For the control over functions, a license determines whether a certain function is available. Only after a proper license file is loaded, certain functions are available.
  • For the control over resources, a license determines the available number of certain resources. If no license file is loaded, functions are available with only a limited number of resources.
  • For the control over service upgrades, a license determines whether a service can be upgraded. You can upgrade services only after you load a proper license file.
  • For the functions to be available, the content security component control item requires the content security component package be dynamically loaded after the license is activated.
  • For the function to be available, the URL remote query control item requires the URL remote query component package be dynamically loaded after the license is activated.
  • For the function to be available, the cloud sandbox detection control item requires the cloud sandbox detection component package be dynamically loaded after the license is activated.

For how to load the component package on the USG6000E, see Dynamic Loading in Upgrading the System Using the Web UI.

Table 1 shows license control items.

Table 1 License control items

License Control item

Whether Function Is Supported If License Is Not Activated

Control Details If License Is Activated

License Involved Models

First Software Version or Scope Supporting the License

Virtual system

10 virtual systems are supported.

Controlled by the license. The number of purchased resources can be accumulated with the default number of resources provided for free.

USG6600E series and USG6700E series

V600R006C00

Concurrent SSL VPN users

100 concurrent SSL VPN users are supported.

Controlled by the license. The number of purchased resources can be accumulated with the default number of resources provided for free.

All models except USG6510E/6510E-POE

V600R006C00

Content security component (Smart DNS/Audit)

The function is unavailable.

The function is available.

All models

V600R006C00

Flow probe

The function is unavailable.

The function is available.

All models, except the USG6510E/6510E-POE/6530E

V600R006C00

IPS (IPS signature database and Malicious domain name database)

No predefined signature database is available. The IPS function is configurable. However, the signature database is not loaded, no predefined signature is available, and only user-defined signatures are supported. Therefore, the detection capability is limited. The signature database cannot be updated locally or online.

The update service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis. Local update and online update of the signature database are supported.

After the license expires, local update and online update of the signature database are not supported, but the IPS function is available.

All models

V600R006C00

Antivirus (Antivirus signature database)

No predefined signature database is available. The AV function is configurable. However, the signature database is not loaded, no predefined signature is available, and only user-defined signatures are supported. Therefore, the detection capability is limited. The signature database cannot be updated locally or online.

The update service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis. Local update and online update of the signature database are supported.

After the license expires, local update and online update of the signature database are not supported, but the AV function is available.

All models

V600R006C00

URL remote query

The function is unavailable.

The URL remote query service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis.

After the license expires, the URL remote query service becomes unavailable.

All models

V600R006C00

Cloud sandbox detection

The function is unavailable.

The cloud sandbox detection service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis.

After the license expires, the cloud sandbox detection function becomes unavailable.

All models except the USG6510E/6510E-POE

V600R006C00

Threat Protection (intrusion prevention/antivirus /URL remote query)

  • Intrusion prevention: No predefined signature database is available. The IPS function is configurable. However, the signature database is not loaded, no predefined signature is available, and only user-defined signatures are supported. Therefore, the detection capability is limited. The signature database cannot be updated locally or online.
  • Antivirus: No predefined signature database is available. The AV function is configurable. However, the signature database is not loaded, no predefined signature is available, and only user-defined signatures are supported. Therefore, the detection capability is limited. The signature database cannot be updated locally or online.
  • URL remote query: The function is unavailable.

The threat prevention service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis. After the license expires:

  • Intrusion prevention: The intrusion prevention function is still available, but the update service is unavailable.
  • Antivirus: The antivirus function is still available, but the update service is unavailable.
  • URL remote query: The function is unavailable.

All models

V600R006C00

Artificial Intelligence Engine

The function is unavailable.

The predefined signature database is automatically loaded when the device is started. The signature database cannot be updated locally or online.

The function is available, and the signature database can be updated locally or online. The update service is controlled by the purchased license and can be purchased on a 1-year or 3-year basis.

After the license expires, the function is unavailable and the signature database cannot be updated locally or online.

For versions earlier than V600R007C20SPC300, USG6615E/6625E

and USG6575E-B/6605E-B

For V600R007C20SPC300 and later versions, USG6610E/6620E/USG6630E/6650E/USG6635E/6655E/USG6680E/USG6712E/6716E

V600R007C20

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >