Whether the upgrade of the application signature databases on the USG2000 and USG5000 series requires a license

3

The upgrade of the application signature databases on the USG2000 and USG5000 series does not require a license.

Other related questions:
Whether the upgrade of the application signature databases on the USG6000 series requires a license
The upgrade of the application signature databases on the USG6000 series does not require a license.

Whether the SSL VPN function of the USG2000 and USG5000 series requires a license
In the USG2000 and USG5000 series, the SSL VPN function is not subject to a license. However, the number of SSL VPN concurrent users is controlled by a license. The number of SSL VPN concurrent users permitted by the license varies depending on device models: USG2130/USG2130W/USG2110-X and USG2130HSR/USG2130HSR-W: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 20. USG2160/USG2160W and USG2160HSR/USG2160HSR-W: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 50. USG2200 and USG2200HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 100. USG5120, USG5110HSR, and USG5120HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 150. USG5150/USG5160, and USG5150HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 200. USG5500: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 500.

Whether the anti-virus function of the USG2000, USG5000, and USG6000 series requires a license
The anti-virus function of the USG2000, USG5000, and USG6000 series requires a license.

How to upgrade the SAC signature database on an AR

The signature database file and system software are separated on Huawei devices. So the signature database file can be loaded and upgraded without affecting normal operation of other services. By default, the signature database file is named sacrule.dat, and it cannot be changed. To upgrade the signature database, contact Huawei local offices or engineers.
Note: There must be an interval of at least 20 seconds between running the sac enable signature and sac update signature commands. When specifying the name of a signature database, enter the complete path and file name to ensure that the configuration can be restored. The signature database file must use .dat as the file name extension. When the sac update signature command is run multiple times to update the signature database file, only the last configuration takes effect.
An example is as follows:
<Huawei>system-view
[Huawei] sac update signature flash:/sacrule.dat
Info: The SAC signature lib update successful.

Whether the USG5000 requires a license for IPSec VPN
IPSec license for USG firewalls: 1. If the license is not activated, IPSec cannot be used on the USG5300. The web UI and CLI are invisible. After a formal license is purchased and activated, up to 15000 tunnels are supported. 2. The USG5000 does not require a license for the IPSec feature.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top