CyberIndexBeta

Product

Chassis-based multi-tenant next-generation firewall for large data centres, scaling to terabit-class throughput with virtual firewall systems per tenant. Hillstone X-Series is a multi-tenant next-generation firewall (NGFW) for service providers and large enterprise data centers. Hillstone’s X-Series next generation firewall supports the largest enterprise and service provider data center needs by providing up to 3.5 Tbps FW throughput supporting 720M concurrent sessions and 1.4 Tbps of IPS. The X-Series provides service providers and enterprises peace-of-mind by ensuring continued data center security across multiple locations and even in the face of widespread outages. It is available as a hardware appliance.

Current Version
5.5R12
Market
EnterpriseService Provider
Licence
Paid
Price
Quote
Record Created
2026-09-20
Last Updated
2026-10-20

Vendor

Hillstone Networks was founded in 2006 by engineers from NetScreen, the firewall company Juniper had bought two years earlier, and it carries that lineage into its products. It operates from two headquarters, Santa Clara and Beijing, and says it serves more than 28,000 customers in over 60 countries, including more than a hundred of the Fortune 500. Its range is built around the firewall: the Hillstone Next-Generation Firewall line for perimeter security and the X-Series Data Center Firewall for high-throughput sites, with a network intrusion prevention system beside them. Its cloud products are CloudEdge for virtual firewalls, CloudHive for east-west traffic inside a virtualised data centre and CloudArmour for workload protection, managed through Hillstone iSource, CloudView, HSM and HSA. It competes directly with the larger firewall vendors in this index on price and throughput, and it is one of the few Chinese-founded network security firms with a substantial presence in Western markets. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2006
Customers
28K organisations
Users
28K deployments
Revenue
≈ $127.6M (2025)

Platforms

Hardware Appliancenative

Target Market

Enterprise primaryService Provider secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 5.5R12platform not recordedreleased 2025-10-16

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 5.5R12evidence
  • 2026-10-08Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-07Pricing plan addedPrice: price on requestevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-20Product updatedAlso sold to: Service Providerevidence
  • 2026-09-20Product updatedSold to: Enterpriseevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.