Huawei showcased its Xinghe Intelligent Unified SASE Solution, an AI-powered cybersecurity system designed to tackle the rising threat of AI-driven attacks.
Cyber threats such as ransomware and malware compromise enterprises globally, and the need for more sophisticated security has become critical. AI-based cyber-attacks are more intelligent and covert compared to previous forms. According to IT security research institute AV-Test statistic, over 100 million AI-based cyber threats are developed annually. In 2024, US$42 billon was taken through ransomware, making cyber security a major concern for C-suite executives.
The leading vendor said traditional single-point firewall protections are proving inadequate as enterprises accelerate their digital transformation. With up to 85% of enterprises now deploying services in the cloud, the shift in network architecture from direct branch-to-HQ connections to branch-to-cloud connections has increased the attack surface and security risks.
Huawei’s Xinghe Intelligent Unified SASE Solution integrates network and security capabilities to enable companies’ comprehensive protection for multi-site and remote working.
This AI-enabled system comprises four layers: cloud, network, edge, and endpoint.
At the core of the cloud layer is Huawei’s AI security brain, a network-security converged management platform. The network layer includes a security gateway supporting large-scale SD-WAN networking and an SSE security resource pool. The edge layer features an intelligent security gateway equipped with Site AI, which enhances the detection of unknown threats. On endpoints such as PCs and servers, Huawei’s HiSec Endpoint security software ensures robust protection.
The solution offers industry-leading security protection capabilities with a threat detection rate of up to 95%. Huawei’s iMaster NCE-Campus enables unified management of network and security capabilities, integrating with switches, firewalls, and HiSec Endpoint (EDR) devices for rapid threat response and network-wide immunity.
Customer success
The Xinghe Intelligent Unified SASE Solution has already been deployed to over 100 enterprises globally, such as direct selling company Personal Collection in the Philippines, Mexican government agency CAPFUE, and the City of Ekurhuleni in South Africa. In Mexico, the solution secures the connections between CAPFUE’s headquarters and its 13 branches, achieving an unknown threat detection rate of 95%.
In South Africa, the City of Ekurhuleni’s power distribution bureau has benefited from a 50% increase in protection performance compared to other vendors, ensuring secure transmission of heavy service traffic across more than 200 branch sites. Meanwhile, in the Philippines, Personal Collection leverages the solution to achieve unified operations and maintenance (O&M) of network and security devices across more than 650 stores.
Xinghe Intelligent Unified SASE key capabilities
On the cloud level, Huawei’s Qiankun Security Service Platform plays a key role in boosting security operation efficiency. It leverages over 20 years of Huawei’s network security expertise and utilises a cloud-edge collaboration AI security architecture to automatically handle 99% of threat events. The platform improves security operation efficiency by ten times, offering unified management of network and security capabilities such as SD-WAN, firewalls, and zero-trust access.
In terms of the network layer, it enables the convergence of network and security functions, thus providing a unified viewpoint of networks, security, and assets (including end points), users and applications. It also supports multi-VPN instance access by extending Border Gateway Protocol Ethernet Virtual Private Network (BGP EVPN), ensuring service solation for different tenants. Through integration of BGP with Internet Key Exchange (IKE), the solution enables automatic tunnel creation between branches, allowing for rapid site deployment within minutes.
To ensure a seamless user experience, Huawei has deployed Points of Presence (PoPs) in the Middle East, Africa, Asia Pacific, and Latin America, allowing customers to access security services such as Zero Trust Network Access (ZTNA), Firewall-as-a-Service (FWaaS), and Secure Web Gateway (SWG) from the nearest PoP to minimise latency.
At the edge, the security gateway employs a lightweight AI detection engine that identifies 95% of unknown threats with zero false negatives. Huawei’s in-house lightweight variant unpacking engine and AI algorithm enhance threat detection capabilities by 15% over the industry average, according to IT testing firm Tolly. Furthermore, Huawei’s dedicated security processor and three built-in hardware acceleration engines enable high-performance threat detection in milliseconds, delivering speeds three times higher than the industry average.
On the endpoint level, Huawei’s OneAgent security system offers comprehensive protection against ransomware, with the company’s AI antivirus engine and endpoint-side source tracing graph engine. The system ensures zero data leakage, full ransomware detection, and rapid recovery of encrypted files through real-time file backups and one-click restoration capabilities.
The growing complexity of enterprise security environments necessitates a robust and intelligent approach. Networks today involve numerous devices from different vendors, generating as many as 10,000 alarms daily—only a fraction of which can be manually processed. Huawei’s iMaster NCE-Campus and Qiankun collaboration solution address this challenge by using AI-driven security intelligence to achieve a 99% automatic threat-handling rate, far surpassing the industry average of 70%. This significantly enhances operational efficiency and ensures a more comprehensive security posture.
In industries such as finance, where low-latency collaboration is essential, Huawei’s strategic PoP deployments help minimise video conferencing delays and enhance enterprise connectivity. Meanwhile, the education sector benefits from Huawei’s SiteAI-powered USG6500F firewalls, which protect primary and secondary school networks from the growing number of malicious websites—now estimated to exceed 500 million.
End-user devices remain one of the weakest links in enterprise security, with 56% of attacks originating from endpoints. Huawei’s HiSec Endpoint addresses this by integrating antivirus, ZTNA, and Network Access Control (NAC) capabilities into a single-agent solution. This eliminates the need for multiple security products while ensuring dynamic authentication and robust defence mechanisms.
Huawei’s Xinghe Intelligent Unified SASE Solution sets a new benchmark in multi-branch security, offering enterprises a more intelligent, automated, and comprehensive approach to network security in the AI era. As cyber threats continue to evolve, AI-powered defences such as these will play an essential role in safeguarding businesses worldwide.
