Dynamic Loading
Dynamic loading enables the system to provide new or enhanced functions or services even if the system software is not upgraded, keeping the system up-to-date without interrupting service continuity.
Definition
Software upgrade is the most commonly used method to add services and functions to a network but faces the following challenges:
- The upgrade process is complex. To ensure a successful software upgrade, you must verify that source and target software versions are compatible, consider all service configurations, and back up associated data. The upgrade process is complex and error-prone.
- Services are interrupted during the upgrade, which affects user experience.
Dynamic loading is a method for deploying new functions to running systems without software upgrades.
Component Package Overview
The FW supports component packages of multiple types to deliver different functions. Whether a component package can be loaded on a model is controlled by the license.
Component Package Type |
Function |
Involved Models |
Whether Component Package Load Is Controlled by License |
|---|---|---|---|
Content security package (Basic) |
File blocking, data filtering, mail filtering, application behavior control, URL session log, and SSL-encrypted traffic detection |
All models |
Loading the component package is not controlled by the license. NOTE:
The content security component package has been contained in the system software package. After the system software package is loaded on the FW, the component package is automatically loaded. To upgrade the component package, you can either upgrade the system software package or directly upgrade the component package. |
Content security package (Enhanced) |
Audit and smart DNS |
All models |
Loading the component package is controlled by the license. |
Flow probe component package |
- |
Models excluding the USG6510E/6510E-POE/6530E |
Loading the component package is controlled by the license. |
URL remote query package |
URL remote query, URL reputation, feedback enhancement, and DNS category remote query |
All models |
Loading the component package is not controlled by the license. |
Cloud sandbox component package |
- |
Models excluding the USG6510E/6510E-POE |
Loading the component package is not controlled by the license. |
Weak security algorithm component package |
Weak security authentication or encryption algorithms such as MD5, DES, and 3DES, which are used in IPSec, SNMP, SSH and other features |
All models |
Loading the component package is not controlled by the license. |
Threat intelligence linkage component package |
IPS threat intelligence linkage |
Models excluding the USG6510E/6510E-POE/6530E |
Loading the component package is not controlled by the license. |
Obtaining Weak Security Algorithm Component Package
- Log in to Huawei support website, and select the corresponding product node in the software download area.
- Select software of the required version.
- Click Download next to the product_version_WEAKEA.mod file of the required version.
Ensure that the system software version and component package version match. Otherwise, the component package cannot be loaded.
Obtaining Component Package Except Weak Security Algorithm Component Package
- Access Huawei security platform (domain name: isecurity.huawei.com). Choose . Select the corresponding product and version.
- Download the required component package file.
Ensure that the system software version and component package version match. Otherwise, the component package cannot be loaded.