Huawei USG6000 Upgrade Manual page 5

HUAWEI USG6000&USG9500
Upgrade Guide
Personal Data Declaration
Some personal data may be obtained or used during operation or fault location of your
purchased products, services, features. Huawei Technologies Co., Ltd. alone is unable to
collect or save the content of users' communications. It is suggested that you activate the user
data-related functions based on the applicable laws and regulations in terms of purpose and
scope of usage. You are obligated to take considerable measures to ensure that the content of
users' communications is fully protected when the content is being used and saved.
Feature Usage Declaration
The IPSec VPN, DSPVN and SSL VPN functions are not provided in versions shipped to
Russia in accordance with Russian laws.
l
l
l
l
l
l
l
l
Issue 01 (2018-01-16)
The features such as antivirus, IPS, file blocking, data filtering, application behavior
control, mail filtering, url session logs and URL filtering may involve the collection of
users' communication contents such as the browsed websites and transmitted files. You
are advised to clear unnecessary sensitive information in a timely manner.
Antivirus and IPS support attack evidence collection to analyze data packets for viruses
or intrusions. However, the attack evidence collection process may involve the collection
of user's communication content. The device provides dedicated audit administrators to
obtain collected attack evidence. Other administrators do not have such permissions.
Please keep the audit administrator account safe and clear the attack evidence collection
history in time.
The audit function is used to record online behaviors, including the collection or storage
of browsed web pages, BBS or microblog posts, HTTP/FTP file transfer, email receiving
and sending, and IM messages. The device provides dedicated audit administrators to
configure audit policies and view audit logs. Other administrators do not have such
permissions. Please keep the audit administrator account safe.
Port mirroring and NetStream are vital to fault diagnosis and traffic statistics and
analysis, but may involve the collection of user's communication content. The product
provides permission control over such functions. You are advised to clear traffic records
after fault diagnosis and traffic analysis.
The quintuple packet capture function can capture the whole packet content, which may
cause the disclosure of users' personal data. When using this function, you must comply
with related national laws and regulations and take sufficient measures to protect users'
personal data. For example, the technical support personnel cannot perform packet
capture without prior consent of customers; in addition, they must delete captured
packets immediately after the fault locating is complete. Huawei will not bear any legal
obligations or liabilities for the security events (such as personal data leaks) that are not
caused by Huawei's misconduct.
Data feedback function (user experience plan ) may involve transferring or processing
users' communication contents or personal data. Huawei Technologies Co., Ltd. alone is
unable to transfer or process the content of users' communications and personal data. It is
suggested that you activate the user data-related functions based on the applicable laws
and regulations in terms of purpose and scope of usage.
The device can transfer files through FTP, TFTP, SFTPv1, SFTPv2, and FTPS. Using
FTP, TFTP or SFTPv1 has potential security risks. SFTPv2 or FTPS is recommended.
Telnet and STelnetv1&v2 can be used to log in to the device. Using Telnet or STelnetv1
has potential security risks. STelnetv2 is recommended.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
About This Document
iv