- Independent testing by The Tolly Group reportedly showed Huawei’s SASE solution outperformed rivals in threat detection, endpoint security and multi-branch connectivity.
- Observers caution that certifications don’t guarantee smooth deployment — success still depends on integration, operational discipline and evolving threat landscapes.
Huawei Xinghe SASE secures tolly certification with top-tier threat detection
At the MWC Barcelona 2025 event, Huawei announced that its “Xinghe Intelligent Unified SASE Solution” had been certified by The Tolly Group — a respected independent testing and verification firm.
According to the Tolly evaluation, Huawei’s solution was subjected to 18 typical test cases covering multi-branch secure interconnection, local-branch protection, and security operations & maintenance (O&M). Under these test conditions, the Huawei product reportedly outperformed competing vendors in several key metrics, including threat detection, intelligent collaboration across network components, and endpoint security.
Specifically, the test claimed Huawei firewalls detected 95% of known threat samples drawn from third-party threat databases — compared with 80% detection by “similar products” from other vendors. Remarkably, Huawei was also reportedly the only vendor to detect 100% of “unknown packed variants” generated with common tools.
Huawei said that when a threat is detected at any node — switch, firewall or endpoint — its iMaster NCE-Campus management system coordinates the security response across the entire network, enabling one-click remediation. This unified management and rapid coordination is presented as a key differentiator compared with rival solutions that may rely on disparate tools.
Also read: Huawei’s AI lab denies copying Alibaba’s Qwen model
Also read: Huawei’s revenue soars 22% in 2024 despite US sanctions
Why it’s important
In a corporate environment where cyber-threats are increasingly sophisticated — spanning ransomware, zero-day vulnerabilities, supply-chain attacks and hybrid-work exposures — a robust Secure Access Service Edge (SASE) solution promises to centralise and simplify security operations. Huawei’s certification gives enterprises a reference point when comparing SASE offerings, especially for organisations managing many branches, remote offices or hybrid networks.
Moreover, for regions where security budgets are limited, a well-rated SASE platform may offer a compelling all-in-one alternative to juggling multiple separate security and network tools.
However, industry and network-security professionals often warn that test-bed performance may not reflect real-world conditions. A high detection rate in controlled environments does not guarantee the same level of success in the wild, where threat actors constantly evolve, attack vectors are more varied, and misconfigurations or human error are common.
Enterprises will need to carefully evaluate how well the promised unified security and automated O&M actually performs in their settings — including whether the endpoint-network integration, alert accuracy, latency, and user-experience trade-offs meet real operational needs.
In addition, over-reliance on a single vendor for both network and security layers can introduce vendor lock-in and reduce flexibility. As SASE becomes central to enterprise cybersecurity strategy, organisations must weigh convenience against resilience, transparency and the ability to audit or swap components.

