Has the ability to maintain continuous and stable operation in the face of various failures and load changes, supporting dual-machine hot backup protocols such as VRRP, VGMP, and HRP, and providing multiple dual-machine deployment modes. It supports HELLO packet and fault detection mechanisms; when the active firewall fails, the standby firewall can automatically take over to ensure the continuity of network communication.

Built-in Web application protection function supports configuring anti-attack strategies for internal network Web servers, resisting various Web application attacks such as OS command injection, SQL injection, cross-site scripting (XSS) attacks, server vulnerability attacks, PHP code injection, malicious access violating HTTP protocols, buffer overflow, worms, and Trojan backdoors. It effectively protects Web servers through built-in default templates and automatic learning functions.

Integrates functions such as firewall, Intrusion Prevention System (IPS), Anti-Virus (AV), Anti-Denial of Service (Anti-DDoS), URL filtering, and Web page filtering, capable of defending against 0Day and unknown threat attacks; has X-Forwarded-For parsing capability to identify the original IP address of accessing clients in application proxy or load balancing mode; supports comprehensive policy editing, allowing policy matching from multiple dimensions such as source security zone, destination security zone, and five-tuple to obtain policy hit information.

Can identify specific applications in network traffic, including HTTP, HTTPS, FTP, FTPS, DNS, SSH, RDP, SIP, H.323, etc.; supports custom port editing for applications, and formulates blacklist/whitelist protection strategies and refined access control strategies based on application identification.

Integrates SD-WAN technology, enabling one-click completion of multi-branch VPN networking and zero-configuration launch of branch terminals, meeting the needs of multi-branch VPN networking and business migration to the cloud.