Huawei's six comprehensive border security protection capabilities for SD-WAN or converged gateway routers typically include:
Built-in Firewall – Provides basic packet filtering and security zoning.
Remote URL Filtering – Uses cloud-based services to filter harmful websites.
Antivirus – Detects and blocks malicious files.
IPS (Intrusion Prevention System) – Detects and blocks known threats and attack signatures.
Application-level ACL – Allows granular control of applications beyond Layer 4 (e.g., blocking TikTok, WhatsApp, etc.).
Data leakage prevention (DLP) and behavioral analytics may also be included depending on the security license.
However, "Data encryption" is a broader category not specifically named among the six security protection items in Huawei's SD-WAN documentation. Encryption (e.g., IPsec VPN) is used for secure tunnels but is not listed as one of the six application-layer protections.
[Reference:, Huawei HCSA-IP Network V4.0 Study Guide, Chapter: “Huawei Network Security Products and Solutions”, Section: “Border Security Capabilities in SD-WAN”, Huawei SD-WAN Product Solution White Paper, , ]