Based on the legacy security architecture, ZXSG SVFW implements the firewall resources abstraction and pooling, provides elastic expansion, on-demand and automatic deployment. In the core network case, ZXSG SVFW is located between the xGW and the internet to secure the Gi/SGi interface—protecting the packet core against Web threats. Also ZXSG SVFW can be deployed between the xGW and the GRX/IPX network to secure the Gp/S8 interface—protecting the packet core against roaming threats. The ZXSG SVFW provides the following functions:

• Providing the basic firewall functions including packet filter based on ACL, state inspection, ASPF, DDoS, DPI etc.
• Providing the specific functions for GRX/IPX network including GTP/SCTP/DNS/PDP inspection
• Supporting high reliability technology
• Supporting time synchronization of NEs
• Providing management and monitoring functions, such as configuration, performance, alarm, and log
• Supporting to interact with MANO to achieve elastic expansion, automatic deployment and automated healing

Supporting VLAN and VxLAN