RG-CF30XS High Performance. Built for Pros.
Dual-Engine Architecture, Elastic Scalability, 8-in-1 Full Security Capability, Cloud Management
Dual-Engine Architecture
The CPU and SPU architecture enables full threat protection with low performance overhead. The SPU, a programmable decryption chip, delivers 90%+ encrypted traffic inspection with rich security features, enabling maximum protection while minimizing CPU consumption.
Multi-WAN + LTE Design. Connectivity Everywhere. (LTE Model Only)
Wired & Wireless WAN, High level Protection for All Businesses. Intelligent Load Balancing: Automatically distributes traffic across multiple links, maximizing overall bandwidth utilization. Auto Failover: If one link goes down, another takes over in milliseconds, ensuring minimum business disruption.
Elastic Scalability
With software licenses, the RG-CF30 series can scale full threat protection throughput flexibly from 700 Mbps to 1000 Mbps In addition, a high-performance free SSL VPN is provided, supporting up to 1,125 users at no extra cost
Massive Storage for Long-Term Log Retention
*Built-in 64 GB eMMC for RG-CF30XS
*External Hard Drive Expansion
Eight-in-One Security License to Deliver Comprehensive Network Protection
-
-
1
AI Analyzer
AI Analyzer
1 -
AI Analyzer
Built into the firewall, AI Analyst continuously monitors unknown threat behaviors, achieving over 90% detection rate for RDP and SSH brute-force attacks.
-
-
-
2
Google Threat Intelligence (GTI)
Google Threat Intelligence (GTI)
2 -
Google Threat Intelligence (GTI)
Heavy-duty Protection: Ruijie's IPS signature library covers over 15,000 entries for detecting various cyber threats. Stay Ahead of Attacks: With more than 90 classifications, including mining malware and ransomware, our IPS is at the forefront of security technology. Continuous Improvement: Weekly updates and a leading number of monthly additions ensure that your network security is always one step ahead.
-
-
-
3
Ruijie Threat Intelligence (RTI)
Ruijie Threat Intelligence (RTI)
3 -
Ruijie Threat Intelligence (RTI)
RTI plays a key role in cybersecurity by collecting, analyzing, and disseminating information on potential threats from multiple sources. Ruijie CF series firewalls leverage a local RTI signature library and employ RTI for threat hunting to identify undetected threats or attackers on a network.
-
-
-
4
Web Application
Firewall (WAF)
Web Application Firewall (WAF)
4 -
Web Application
Protects against the OWASP Top 10 web attacks with 4000+ signatures; supports both attack detection and semantic detection, effectively identifying unknown threats.
Firewall (WAF)
-
-
-
5
Intrusion Prevention (IPS)
Intrusion Prevention (IPS)
5 -
Intrusion Prevention (IPS)
Heavy-duty Protection: Ruijie's IPS signature library covers over 15,000 entries for detecting various cyber threats. Stay Ahead of Attacks: With more than 90 classifications, including mining malware and ransomware, our IPS is at the forefront of security technology. Continuous Improvement: Weekly updates and a leading number of monthly additions ensure that your network security is always one step ahead.
-
-
-
6
Antivirus (AV)
Antivirus (AV)
6 -
Antivirus (AV)
Millions of Signatures: Ruijie TIANMU Security Lab cooperates with a leading antivirus company and has developed over 10 million AV signatures for the Z series firewalls. Accurate Detection: With an accuracy rate of 99.97% and a zero false positive rate, Ruijie's AV technology is widely recognized for its high precision.
-
-
-
7
URL Filtering
URL Filtering
7 -
URL Filtering
URL Identification: Ruijie firewall's URL signature library can precisely categorize web traffic in real time. Secure Web Access: You can configure custom security policies to permit or deny access to web resources. Threat Interception: The NGFW detects and blocks malicious websites to prevent phishing and malware threats.
-
-
-
8
Application Control
Application Control
8 -
Application Control
Comprehensive Traffic Management: Our NGFW's application control signature library can recognize 7200+ applications. With Deep Packet Inspection (DPI), the NGFW can accurately identify and control P2P traffic, automatically detects and blocks malicious applications and attack payloads, safeguarding your network against emerging threats.
-
AI Security Dashboard
Effortless Visibility and Control, Designed for Everyone with No Extra Cost
Skip the commercial analytics platform. Our cloud AI correlates massive alerts, auto-generates high-precision incidents (99.9%), and auto-traces the root cause across the network, assets, and origin, slashing response time from days to minutes.
Gain effortless, comprehensive visibility into your network’s security posture, trends, and ROI— no manual data wrangling.
Cloud, Make Your Business Easy
AnyLink: Connect Anywhere, Anytime
No extra license, full SD-WAN features are supported by CF series firewalls. AnyLink is a Reyee cloud technology that helps small and medium businesses route traffic across multiple WAN links more efficiently, securely, and cost-effectively. It uses software-defined networking to automate and optimize data flow between multiple locations, such as branch CCTV and retail chain cashier systems.
Policy Manager, Simple Firewall Onboarding
-
-
Port Scan
-
During deployment, use Port Scan to automatically identify the IP address and port number of a specific service.
-
-
-
Traffic Learning
-
Enable Traffic Learning to automatically detect the service access relationship on the live network.
-
-
-
Policy Generation
-
Generate access control policies based on ports with one click, and complete firewall onboarding without high level security knowledge.
-
Policy Execution After Simulation,Policy Optimization Anytime
Verify policies using real traffic in Policy Simulation Space without affecting actual services or compromising network performance. Apply policies to the live network with one click after verification.
Intelligent Diagnostic Center, One-Click Fault Locating
The intelligent diagnostic center supports automated analysis of network faults and provides a one-stop troubleshooting wizard for O&M personnel to quickly locate and resolve faults

