arial bold 32 arial bold 26 arial 22 arial 20 arial 18 arial 16 copyright © 2014 zyxel...

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16

Copyright © 2014 ZyXEL Communications Corporation. All rights reserved.

Arial Bold 20

Next Generation USG Series

Unified UTM PowerGet full control over your network with the new ZyXEL USG series

GSBU/ ZyXEL Communications Corp.April, 2014

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Table of Contents

Introducing Next-Gen USG Series Technology Details

Anti-Virus Anti-Spam Content Filtering Intrusion Detection & Prevention Application Intelligence VPN SSL Inspection

Profile Overview Competition Analysis Why ZyXEL Ordering Information

• Ultra-high Performance• Unified Security Policy• Single-sign-on• WLAN Controller• High Availability• Bundled License &

myZyXEL.com 2.0

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


A Most Danger Just Happened

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet…..

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Threats actually happens every day…

2013 security timeline

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


And it will never ends…

More and more new applications, plus more creative threats!

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


What’s NG Firewall?

UTM needs to be renewed!

To stay ahead of more and new threats

Next generation firewall

Gartner “Magic Quadrant” defines the capabilities of a next-gen firewall

Deep packet inspection

Intrusion detection

Application identification

Granular control

Reduced complexity

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Anti-malware protection

Deeper inspection

Ultra-high performance

Broad coverage of VPN applications

To policy with ease

Enhanced user experience

Non-stop availability

Next Generation USG

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Gateway Level Protection

Reasons your network still needs strong protection at Gateway point:

Endpoint software, ex. AV, can be disabled by end-users

Not all devices on the network have endpoint protection software; ex. printer and other peripherals

Mobile devices are a risk

Endpoints are often out of date

Guest systems need protection too!

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Anti-Malware Protection

Best-of-breed technologies

In-house In-house In-house In-house In-house



Anti-Virus

Anti-Spam

Content Filterin

gIDP

App Mgmt

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


TECHNOLOGY DETAILSNext-Gen USG Series

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


World Best Anti-Virus Anti-VirusAnti-Virus

GOLD zero-day protection awards from AV-Comparatives

First-class detection rates AV-Comparatives consistently awards

Kaspersky the highest possible rating (Advanced+)

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


World Best Anti-Virus

Integrate Kaspersky’s newest SafeStream II gateway anti-virus

Blocks unknown threats and over 650,000 viruses at the gateway

Fast stream-based scanning provides real-time protection with no file size limitation

Optimum frequency of updates 10 to 25 per day and each are less than 50 KB best frequency-to-content ratio

Fast response time and the best defense from new & unknown threats.

Anti-VirusAnti-Virus

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Spam Is Still There… Around 3 out of every 4 emails are Spam

Most of these deliver threats, but ‘traditional’ Spam content is still there

Impacts to users>Cluttered inboxes>Unnecessary exposure to threats, e.g. Phishing> Lost communications & productivity

Impact to business (IT)>Increased support burden>Increased infrastructure load>User complains


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Cloud-based Anti-Spam

Proven, high-performance protection with strict content privacy

Identify new spam, malware and phishing attacks - the moment they emerge

Recurrent Pattern Detection™ (RPD) technology blocks spam based on its most fundamental characteristics - mass distribution and repeating patterns

Global detection from a patented content and language agnostic solution

Powered by the GlobalView™ Cloud Deployed across 12 carrier-grade data centers Gathering billions of Internet transaction daily

Anti-SpamAnti-Spam

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


How It WorksRPD looks at the ‘macro picture’ across the global Internet and output to GlobalView Cloud

Next-Gen USG Series

Anti-SpamAnti-Spam

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Web: The Primary Attack Factor

92%(1)Malware attacks come from the Web

54%(1)Attacks die in less than 24 hours

50%(1)Companies are hit by targeted attacks

85%(3)Malware comes from legitimate sites

72%(2)Companies are hit by Web attacks

ATTA

CK

S

¹ M86 Security, 2011² Verizon Data Breach Report, 2012³ Websense, 2012

Content Content FilteringFiltering

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Core Of Content Filtering

RELEVANT COVERAGEFull detail on the URLs you need – not the ones you don’t

FRESH DATABase decisions on the state of the web right now

MASSIVE SCALABILITYGlobal coverage with low latency

Global URLs

LocallURLs


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Cloud-based Content Filtering

Sets the performance standard for URL filtering applications:

Broad, high-accuracy coverage

Near zero latency

Real-time threat identification

Customize cache by location

Custom categorization Next-Gen USG Series


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Threat PreventionThreat prevention and blocking malicious traffic is the 1st step to keep your biz safe.

Threat Prevention

Traffic Shaping

ApplicationControl

Step 1: Block malicious trafficStep 2: Allocate network bandwidth properlyStep 3: Granular control to applications

IDPIDP

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Single-Pass Scanning Engine:3-in-1 DPI engine Multi-Functional,Low Latency,High Performance.

Intrusion Detection & Prevention

Intrusion Detection & Prevention

Leading IDP Engine

Intrusion Preventio

nAnti-Virus

Application Recognitio

n

Packet

Traditional solutions:High Latency, Low Performance, Difficult to Integrate with Multi-Vendors

Packet

Vendor A Vendor B Vendor C

Classification

Powered by

Next-Gen USG Series

IDPIDP


Application Intelligence & Optimization

Application Intelligence & Optimization

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Full coverage of IDP

DoS/DDoSDoS/DDoSDoS/DDoSDoS/DDoS Buffer OverflowBuffer OverflowBuffer OverflowBuffer Overflow

Access ControlAccess ControlAccess ControlAccess Control ScanScanScanScan

Trojan/BackdoorTrojan/BackdoorTrojan/BackdoorTrojan/Backdoor Virus/WormVirus/WormVirus/WormVirus/Worm

Web AttackWeb AttackWeb AttackWeb Attack OtherOtherOtherOther

IDPIDP

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Advanced IDP Technology

Intrusion detection and prevention (IDP)

Layer 7 context-aware threat analyzing

Behavior analysis for encrypted threats and applications

Protection for both client-side and server-side vulnerabilities

Provide anomaly-based and vulnerability-based threats protection

Awards-winning engine (certified by NSS and ICSA)

Support both Exploit-based and Vulnerability-based protection

Support Web Attacks like XSS and SQL Injection

Management/Reporting system

IDPIDP

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


App Intelligence (1)

The dilemma of control v.s. vulnerability:

Internet and social media applications are main source of attacks and vulnerabilities

They are also modern tools to improve productivity

Challenges to IT now is to manage a bunch of applications without hindering productivity

App App IntelligenceIntelligence

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


App Intelligence (2)

Granular, precise and flexible control Identify, categorize and control over 3,000 Web apps and

behaviors Various control mode: Prioritize, BWM (bandwidth

mgmt) , Block Effective policy enforcement over social media, gaming, P2P

and other Web apps

Industry-leading signature development per week update

App App IntelligenceIntelligence

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Protected Cloud AccessChallenges in adopting cloud service and applications

Retrieving data in cloud from multiple sites or during travel shall be protected from data breach

Server/ applications in cloud

Internet

HeadquartersBranch

Mobile User

VPNVPN

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


USG series supports various VPN algorithm and adaptive to different VPN connectivity

IPSec VPN

SSL VPN

Headquarters

InternetMobile User

BranchBranch

Commuter

Hybrid VPN!

L2TP VPN

IPSec VPNGRE over IPSec VPN

VPNVPN

L2TP over IPSec GRE over IPSec

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


EASY VPN

Zero-touch client configuration required

Pre configured profile assigned to user according to their privilege

VPNVPN

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


VPN EnhancementNext-gen USG series comes with more enhancements

Future Proof IPv6 IPSec VPNAble to establish IPSec VPN tunnels between IPv6 network environments

Fast Hand-shaking IKEv2 IPSec VPNMore efficient: faster negotiation, faster rekey time, less IOP issues (build-in DPD, NAT-T protocol)More secure: DoS (IP spoofing) protection, EAP user authentication support

Easier Deployment IPSec VPN user-based PSKAssign a unique ID and PSK (pre-shared key) for every client siteMore secure for different sites

High Compatibility SSL VPN client for Mac OS XMac computers running on OS X are now supported

VPNVPN

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


SSL Hides Threats…Challenges from SSL encryption:

SSL encrypted connections are potential security blind spots

Sophisticated threats, bots and other malware hide in SSL encrypted connections to avoid inspection

Without SSL inspection, Web applications that use HTTPS (e.g. Facebook, Dropbox, Gmail, etc.) cannot be blocked, throttled or prioritized

SSL SSL InspectionInspection

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


SSL Inspection

Benefits of enforcing SSL inspection

Deeper policy enforcement Apply application control policies even for SSL encrypted

traffic

Block invisible threats Stop threats, bots and other malware that usually go unseen

inside SSL encrypted traffic

Comply with user privacy regulations Create an exclude list to bypass traffic that is related to user

privacy

Visible certificate cache list enables users to add items in the exclude list quick and easily


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


How It Works

Client Server

SSL connection SSL connection

EncryptEncryptDecryptDecrypt

ScanContent filtering

IDPAnti-virus

Application Intelligence

ScanContent filtering

IDPAnti-virus

Application Intelligence

USG


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Don’t Be the Bottleneck

Gateway performance is challenged due to

Multi-media is taking majority of Internet traffics

Global IP traffic to grow by triple from 2012 to 2017

Broadband infrastructure keeps upgrading

PerformancPerformancee

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Ultra-high PerformanceFaster, better, stronger

New multi-core hardware platform

Multi-core and higher frequency CPUs

Higher system throughput level

PerformancPerformancee

Next Generation USG Series

Model USG40(W) USG60(W) USG110 USG210 USG310 USG1100 USG1900

Firewall throughput (RFC2544)

400 Mbps 1.0 Gbps 1.6 Gbps 1.9 Gbps 5.0 Gbps 6.0 Gbps 7.0 Gbps

VPN throughput 100 Mbps 180 Mbps 400 Mbps 500 Mbps 650 Mbps 800 Mbps 900 Mbps

Legacy USG Series

Model USG50 USG100USG100-

PLUSUSG200 USG300 USG1000 USG2000

Firewall throughput (RFC2544)

225 Gbps 225 Mbps 600 Mbps 250 Mbps 350 Mbps 400 Mbps 2000 Mbps

VPN throughput 90 Mbps 90 Mbps 150 Mbps 90 Mbps 130 Mbps 180 Mbps 600 Mbps

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Overwhelming Policies

In the past…

Users had to configure policies for each UTM feature separately in multiple pages

Unified Unified PolicyPolicy

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Repetitive Policies

Also…

Users also had to configure the same policies for different Web applications one at a time

This meant a lot of repetitive work and redundant effort


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


One-glance Policing

Unified Security PolicyIntegrates firewall and all UTM features into a single configuration flow

Zone

Source IP

Destination IP

Destination port

User

Time

App. intelligence

Content filtering

IDP

Anti-virus

Anti-spam

SSL inspection


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Unified Security Policy

One-Glance configuringUsers can apply a policy across firewall and every UTM feature from a single interface

UTM Profiles

UTM Profiles

Firewall Rules

Firewall Rules


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Unified Security Policy

Consolidated policingUsers can also create policies and easily add all the Web applications that need to be regulated

Redundant effort is eliminated, configuration time is reduced


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Enhanced User ExperienceSingle sign-on

Sign in once for domain and Internet authentication

Supports Microsoft Active Directory

SSO agent supports Windows 7 Pro (and above), Server 2008, Server 2008 R2, Server 2012

SSOSSO

Benefits to end-usersSign in once to access multiple servicesReduces password fatigue and time spent re-entering passwords for the same identity

Benefits to ITsReduces IT help desk calls about passwordsCompatible with native Microsoft Windows featuresNo need to inject or replace any Microsoft AD components

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Single-sign-on

Internet

User

USG

SSO agentMicrosoft AD

domain controllers

11

22

33

44

55

66

77

User logs in domainUser logs in domain

DC forwards user login info to SSO agent

DC forwards user login info to SSO agent

SSO agent queries group info from DCSSO agent queries group info from DC

USG sends acknowledgement to SSO agent

USG sends acknowledgement to SSO agent

SSO agent forwards user login info to USG

SSO agent forwards user login info to USG

User attempts to send traffic through USG

User attempts to send traffic through USG

USG allows Internet access based on user-aware policy match

USG allows Internet access based on user-aware policy match

Users need to install the ZyXEL SSO agent on a Windows platform server and configure corresponding settings on the USG

SSOSSO

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Integrated WLAN Controller

Investment protection plus easy to deploy Wi-Fi

Centralized AP provisioning, authentication, firmware upgrade

Supported amount of managed APs:

USG40(W)

USG60(W)

USG110 USG210 USG310USG110

0USG190

0

Default (free)

2 2 2 2 2 2 2

Maximum 10 10 18 18 18 18 18

License upgrade

Add 8 Add 8 Add 8 Add 8 Add 8 Add 8 Add 8

Series NWA3000-N Series NWA5000 Series NWA5120 Series

ModelNWA3160-NNWA3560-NNWA3550-N

NWA5160NNWA5560-NNWA5550-N

NWA5121-NINWA5121-NNWA5123-NI

ControllerController

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Integrated WLAN Controller No extra device integration and configuration needed

No worries about interoperability

Other solutions ZyXEL’s solution

Gateway

WLAN controll

er

Next-gen USG Series

ControllerController

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Non-stop Availability

3-tier high availability

Driving highest business robustness

High High AvailabilityAvailability

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Mobile Broadband Back-up

USG series supports various mobile broadband clients to provide WAN connectivity back-up

WAN resiliency with active-active Ethernet WAN load balancing or active-passive failover

Supports more 3G/4G USB modems for WAN backup (drivers downloadable from cloud)

WAH1000


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


VPN High Availability (1)

Utilizes GRE over IPSec and GRE trunk technology

Provides resilient IPSec VPNs with active-active load balancing or active-passive failover

WAN1 WAN2

WAN1 WAN2

WAN1

Internet

HQ Network

Remote Office ANetwork

Remote Office BNetwork


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Provides resilient IPSec VPNs with active-active load balancing or active-passive failover

VPN High Availability (2)

IP networkGRE Trun

k

GRE Trun

k

GRE Tunnel 1

GRE Tunnel 2Site A Site B


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Device High Availability

Active-passive device backup and failover

Available on Advanced and Extreme Series (USG110 to USG1900)

ISP2

ISP1

LAN WAN

Switch

USG (Master, Active)

USG (Backup, Standby)

Switch

SwitchDSL CPE/Router

DSL CPE/RouterFailover


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Bundled Security Services

Default bundles with 13-month service license, including 30-day trial

One-click to quickly activate the services; no additional purchasing required

Service license types Karspersky anti-virus Anti-spam Content filtering IDP & Application Intelligence Managed AP scale-up

Security Security LicensesLicenses

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


License Mgmt – MyZyXEL.com 2.0

ZyXEL cloud-based license management platform


Internet

End Customers’ Networks

Channel Partner

serviceservice

serviceserviceserviceservice

serviceservice

serviceservice

serviceserviceserviceservice

Registration & activation

Management Service

Status synchronized

Data Center

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


MyZyXEL.com 2.0 Allows You…

Saving the OPEX of Managing Your Businesses

Tiered registration and management portals When providing services to multiple networks, ZyXEL

channel partners can manage network via signal platform Preventing multiple log-in’s to view customers’ status

Batch information upload Device registration, license key and service activation Via uploading .csv file

Reporting Expired services, activated services, registered devices By user-defined


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


We deliver what our customers’ need!

Top Customer Requirements

1. More throughput

2. HTTPS packet detection capability

3. Control over unknown applications

4. Better anti-virus detection rate

5. Apple Time Machine compatibility

6. Support for more mobile broadband USB modems (3G/4G)

7. Easier configuration flow

Next-gen USG series get you protected ahead from threats.

Robust security

Fast performance

Easy management

High availability

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


New USG PortfolioFu

nctio

nalit

y

Scalability / Performance

Extreme Series•USG1900•USG1100

Extreme Series•USG1900•USG1100

Small Businesse

s

Medium to Large

Businesses

Performance Series

Advanced Series

Extreme Series

Advanced Series•USG310•USG210•USG110

Advanced Series•USG310•USG210•USG110

Performance Series•USG60W•USG60•USG40W•USG40

Performance Series•USG60W•USG60•USG40W•USG40

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS, USB, WAN, LAN/DMZ, OPT

Power:12VDC100~240VAC

Interface:(1) WAN:10/100/1000(3) LAN/DMZ: 10/100/1000, Configurable(1) OPT: 10/100/1000,(1) USB: 2.0, for mobile broadband dongle(1) CONSOLE: RJ45 connector

Product Introduction – USG40

Metal HousingFAN-less

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS, USB, WLAN, WAN, LAN/DMZ, OPT


Interface:(1) WAN:10/100/1000(3) LAN/DMZ: 10/100/1000, Configurable(1) OPT: 10/100/1000,(1) USB: 2.0, for mobile broadband dongle(1) CONSOLE: RJ45 connector

Product Introduction – USG40W

Antenna:Numbers: 2

WiFi: 11n2.4G


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS


Interface:(2) WAN:10/100/1000(4) LAN/DMZ: 10/100/1000, Configurable(1) USB: 2.0, for mobile broadband dongle



Interface:Console: DB9

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS


Interface:(2) WAN:10/100/1000(4) LAN/DMZ: 10/100/1000, Configurable(1) USB: 2.0, for mobile broadband dongle

Product Introduction – USG60W


Interface:Console: DB9 Antenna:

Numbers: 4

WiFi: 11n2.4G5GDual bandDual radio

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS


Interface:(2) WAN:10/100/1000(1) OPT: 10/100/1000(4) LAN/DMZ: 10/100/1000, Configurable(1) USB: 2.0, for mobile broadband dongle


Metal Housing

Interface:Console: DB9 CF Card Slot:

For Storage

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS

Power:100~240VAC

Interface:(8) 10/100/1000, Configurable(2) USB: 2.0, for mobile broadband dongle(1) Console: DB9


Metal Housing

CF Card Slot:For Storage

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


LEDs:PWR, SYS

Power:100~240VAC



Metal Housing


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


USG40/40W Competition Landscape

Competitive Comparison & Analysis

FortinetFG-30D/FW-30D

WatchGuard XTM25/25-W

SonicWALL TZ105/105W

• FW throughput: 200Mbps• VPN throughput: 75Mbps• IDP throughput: 60Mbps• AV throughput: 40Mbps• 8,000 concurrent

connections• Maximum VPN tunnels: 5• Maximum Managed AP: 1

• FW throughput: 800Mbps• VPN throughput:

350Mbps• IDP throughput: 150Mbps• AV throughput: 40Mbps• 200,000 concurrent

connections• Maximum VPN tunnels:

20• Maximum Managed AP: 5





Price

Features / Capacity / Throughput

Best Price-Performance

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


• FW throughput: 1000Mbps• VPN throughput: 180Mbps• IDP throughput: 120Mbps• AV throughput: 90Mbps• 40,000 concurrent connections• Maximum VPN tunnels: 20• Maximum Managed AP: 10• WiFi: 2.4G/5G dual radio/band

(USG60W)

USG60/60W Competition Landscape



Price

FortinetFG-40C/FW-40C


SonicWALL TZ205/205W







20• Maximum Managed AP: 5


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


USG110 Competition Landscape


FortinetFG-60D/FW-60D


SonicWALL TZ215



• FW throughput: 1500Mbps

• VPN throughput: 1000Mbps

• IDP throughput: 200Mbps• AV throughput: 50Mbps• 500,000 concurrent


50• Maximum Managed AP:

10





Price



Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


USG210 Competition Landscape


FortinetFG-80C/FW-80C

WatchGuard XTM330

SonicWALL NSA220



• FW throughput: 1900Mbps

• VPN throughput: 1000Mbps

• IDP throughput: 350Mbps• AV throughput: 190Mbps• 1,000,000 concurrent


200• Maximum Managed AP:

32






Price


Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Why ZyXEL?

1. Field-proven reliabilityThe first-choice solution for over 500,000 companies around the world

2. Faster, better, strongerUltra-fast firewall, VPN and UTM performance

3. Best-in-class malware protectionIndustry-leading Anti-virus, anti-spam, content filtering, IDP

4. Control social networkingGranularity like allow Facebook but block Facebook games

5. Block unseen threatsSSL inspection offers deeper policy enforcement

6. Always online connectivity3-tire high availability – mobile broadband WAN, VPN HA and device HA

7. Easy VPNZero-touch configurations in VPN clients

8. More Wi-Fi for everyoneIntegrated WLAN controller for centralized AP management

9. Streamlined managementUnified security policy offer easier, more streamlined UTM management

10. Spend less, get moreIntegrated solution lowers capital and operational expenditure

Ten reasons why you should choose ZyXEL USGs

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Licenses

Security

ProductKaspersky Anti-Virus

IDPContent Filtering

Anti-Spam

USG19001 year2 years

1 year2 years

1 year2 years

1 year2 years

USG11001 year2 years

1 year2 years

1 year2 years

1 year2 years

USG3101 year2 years

1 year2 years

1 year2 years

1 year2 years

USG2101 year2 years

1 year2 years

1 year2 years

1 year2 years

USG1101 year2 years

1 year2 years

1 year2 years

1 year2 years

USG60(W)1 year2 years

1 year2 years

1 year2 years

1 year2 years

USG40(W)1 year2 years

1 year2 years

1 year2 years

1 year2 years

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Licenses

VPN, management and reporting

Product SSL VPN Managed APIPSec VPN

ClientVantage Report

USG1900Add 50 tunnels

Add 8 APs

For 1 clientFor 5 clientsFor 10 clientsFor 50 clients

For 1 deviceFor 5 devices

For 25 devicesFor 100 devices


Add 8 APs


Add 8 APs


Add 8 APs


Add 8 APs

USG60(W) Add 5 tunnels Add 8 APs

USG40(W) Add 5 tunnels Add 8 APs

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Ordering Guide

Part Number EAN UPC

Model EU US

USG1900 UTM bundle

USG1900-EU0102F

USG1900-US0102F

4718937578962 760559121549

USG1100 UTM bundle

USG1100-EU0102F

USG1100-US0102F

4718937578689 760559121532

USG310 UTM bundleUSG310-EU0102F

USG310-US0102F

4718937578665 760559121341

USG210 UTM bindleUSG210-EU0102F

USG210-US0102F

4718937578986 760559121525

USG110 UTM bundleUSG110-EU0102F

USG110-US0102F

4718937578627 760559121327

USG60W UTM bundleUSG60W-EU0102F

USG60W-US0102F

4718937579068 760559121518

USG60WUSG60W-EU0101F

USG60W-US0101F

4718937575190 760559121310

USG60 UTM bundle USG60-EU0102F USG60-US0102F 4718937579044 760559121501

USG60 USG60-EU0101F USG60-US0101F 4718937575237 760559121303

USG40W UTM bundleUSG40W-EU0102F

USG40W-US0102F

4718937579020 760559121495

USG40WUSG40W-EU0101F

USG40W-US0101F

4718937576241 760559121297

USG40 UTM bundle USG40-EU0102F USG40-US0102F 4718937579006 760559121488

USG40 USG40-EU0101F USG40-US0101F 4718937576197 760559121280

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


APPENDIXNext-Gen USG Series

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


USG vs. Next Generation USGs

Key Features Next Generation USG Series USG Series

Firewall & NAT (with ADP) Yes Yes

IPv6 Host, router, FW, IPSec, UTM Host, router, FW

VPN (IPSec/SSL/L2TP over IPSec) Yes/Yes/Yes Yes/Yes/Yes

IPSec IKEv2 Yes -

SSL for Mac OS Yes -

Security policy Unified policy settings page Separate settings pages

Anti-virus (signature no.) Karspersky AV SSII (over 650,000) KAV (3,200); ZAV (15,000)

Anti-spam Yes Yes

IDP with application intelligence Yes/Yes Yes/Yes

No. of identifiable applications Over 3,000 Over 600

Content filtering Yes Yes

Bandwidth management Yes (per IP, per user) Yes

3G USB modems (for WAN) Yes (remote updatable) Yes (update with device date code)

Multi-WAN load balancing Yes (WAN & WAN; WAN & 3G) Yes (WAN & WAN; WAN & 3G)

SSL inspection Yes -

Integrated WLAN controller Yes -

SSO (single sign-on) Yes -

Device dual image Yes -

Arial Bold 32

Arial 22

Arial 20

Arial 18

Arial 16


Arial Bold 20

Make the World Connect

www.zyxel.com

arial bold 32 arial bold 26 arial 22 arial 20 arial 18 arial 16 copyright © 2014 zyxel...

Documents

arial bold

generation usg slide

security timeline slide

endpoint protection

strong protection

new threats

new applications

endpoint software