CyberIndexBeta

Product

Virtual next-generation firewall for hypervisors, private clouds and public clouds including AWS, Azure, Huawei Cloud and Alibaba Cloud. Hillstone CloudEdge comes with a flexible license server to support dynamic scale-up and scale-down scenarios in cloud and carrier environments. As a full-featured NGFW, CloudEdge comes with a rich set of edge protection capabilities for North-South traffic in all clouds. CloudEdge supports SR-IOV to reduce the overhead on virtual systems, allowing both cloud platforms and service provider NFV platforms to run with the highest level of performance. It is available as a cloud instance and a virtual appliance.

Current Version
5.5R12
Market
EnterpriseService Provider
Licence
Paid
Price
Quote
Record Created
2026-09-20
Last Updated
2026-10-20

Vendor

Hillstone Networks was founded in 2006 by engineers from NetScreen, the firewall company Juniper had bought two years earlier, and it carries that lineage into its products. It operates from two headquarters, Santa Clara and Beijing, and says it serves more than 28,000 customers in over 60 countries, including more than a hundred of the Fortune 500. Its range is built around the firewall: the Hillstone Next-Generation Firewall line for perimeter security and the X-Series Data Center Firewall for high-throughput sites, with a network intrusion prevention system beside them. Its cloud products are CloudEdge for virtual firewalls, CloudHive for east-west traffic inside a virtualised data centre and CloudArmour for workload protection, managed through Hillstone iSource, CloudView, HSM and HSA. It competes directly with the larger firewall vendors in this index on price and throughput, and it is one of the few Chinese-founded network security firms with a substantial presence in Western markets. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2006
Customers
28K organisations
Users
28K deployments
Revenue
≈ $127.6M (2025)

Platforms

Cloudnative
Virtual Appliancenative

Target Market

Enterprise primaryService Provider secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High Availabilitynative
Deep Packet InspectionNot known
Central Management Consolenative

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 5.5R12platform not recordedreleased 2025-10-16

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 5.5R12evidence
  • 2026-10-08Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-08Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-08Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-08Capability addedVPN Gateway: built inevidence
  • 2026-10-08Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-07Pricing plan addedPrice: price on requestevidence
  • 2026-09-20Platform addedRuns on Virtual Applianceevidence
  • 2026-09-20Product updatedAlso sold to: Service Providerevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence
  • 2026-09-20Product updatedSold to: Enterpriseevidence
  • 2026-09-20Platform addedRuns on Cloudevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.