secure and always online networking for small- to medium-sized … · 2020-06-04 · powered by...

8
More and more people are relying on smart devices and cloud-based applications for business communications. This means that high network availability is critical for business continuity, more Wi-Fi is demanded in the workplace, and traditional regulatory measures for application usage are obsolete. Without an effective solution to control, optimize and block social, productivity and other Web applications, SMBs risk losing work productivity and exposing company networks to new Web threats. The new ZyXEL USG Advanced Series are Next Generation Firewalls (NGFW) designed to meet the mobility, anti-malware and policy enforcement challenges in SMBs. The integrated WLAN controller offers easy WLAN scalability for the growing demand for Wi-Fi; while WAN and VPN load balancing and failover ensures non- stop business communications. ZyXEL USGs offer industry- leading anti-virus, anti-spam, content filtering and application intelligence technology for effective application optimization and comprehensive network protection. Benefits Always online The ZyXEL USG Advanced Series offers SMBs high network availability for always online communications. It features multi-WAN load balancing and failover, and a comprehensive mobile broadband USB modem support list for WAN backup. On top of that, the Series supports IPSec load balancing and failover to provide added resiliency for the most mission-critical VPN deployments. Protection and optimization The ZyXEL USG Advanced Series provides extensive anti-malware protection and effective control of Web applications—like Facebook, Google Apps and Netflix—with industry-leading firewall, anti-virus, anti-spam, content filtering, IDP and application intelligence. These security measures are enhanced with SSL inspection, which helps block threats that are hidden in SSL encrypted connections and facilitates deeper policy enforcement. • High-performance, high-value Next Generation Firewall (NGFW) for small and medium-sized businesses • Complete network protection with firewall, anti-virus, anti- spam, content filtering, IDP, next-generation application intelligence and SSL inspection • Robust SSL, IPSec and L2TP over IPSec VPN connectivity and VPN high availability (HA) • Built-in WLAN controller for centralized AP management and effortless WLAN scalability of up to 34 APs • Comprehensive mobile broadband USB modem compatibility and multi-WAN load-balancing, failover and fall back support • ZyXEL One Network is supported USG310/210/110 Unified Security Gateway— Advanced Series Secure and Always Online Networking for Small- to Medium-sized Businesses

Upload: others

Post on 26-Jun-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

More and more people are relying on smart devices and cloud-based applications for business

communications. This means that high network availability is critical for business continuity, more

Wi-Fi is demanded in the workplace, and traditional regulatory measures for application usage

are obsolete. Without an effective solution to control, optimize and block social, productivity and

other Web applications, SMBs risk losing work productivity and exposing company networks to

new Web threats.

The new ZyXEL USG Advanced Series are Next Generation Firewalls

(NGFW) designed to meet the mobility, anti-malware and policy

enforcement challenges in SMBs. The integrated WLAN controller

offers easy WLAN scalability for the growing demand for Wi-Fi;

while WAN and VPN load balancing and failover ensures non-

stop business communications. ZyXEL USGs offer industry-

leading anti-virus, anti-spam, content filtering and application

intelligence technology for effective application optimization and

comprehensive network protection.

Benefits

Always onlineThe ZyXEL USG Advanced Series offers SMBs high network availability for always online

communications. It features multi-WAN load balancing and failover, and a comprehensive mobile

broadband USB modem support list for WAN backup. On top of that, the Series supports IPSec load

balancing and failover to provide added resiliency for the most mission-critical VPN deployments.

Protection and optimizationThe ZyXEL USG Advanced Series provides extensive anti-malware protection and effective control of

Web applications—like Facebook, Google Apps and Netflix—with industry-leading firewall, anti-virus,

anti-spam, content filtering, IDP and application intelligence. These security measures are enhanced with

SSL inspection, which helps block threats that are hidden in SSL encrypted connections and facilitates

deeper policy enforcement.

• High-performance,high-valueNext Generation Firewall (NGFW) for small and medium-sized businesses

• Completenetworkprotectionwith firewall, anti-virus, anti-spam, content filtering, IDP, next-generation application intelligence and SSL inspection

• RobustSSL,IPSecandL2TPoverIPSec VPN connectivity and VPN highavailability(HA)

• Built-inWLANcontrollerforcentralized AP management and effortless WLAN scalability of up to 34 APs

• Comprehensivemobilebroadband USB modem compatibility and multi-WAN load-balancing, failover and fall back support

• ZyXELOneNetworkissupported

USG310/210/110Unified Security Gateway— Advanced Series

Secure and Always Online Networking for Small- to Medium-sized Businesses

Page 2: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

2

USG1900USG1100

USG310USG210

USG110USG60/60W

Model USG40/40WDescription Performance Series Advanced Series Extreme SeriesFirewall throughput 400 Mbps 1.0 Gbps 1.6 Gbps 1.9 Gbps 5.0 Gbps 6.0 Gbps 7.0 GbpsVPN throughput 100 Mbps 180 Mbps 400 Mbps 500 Mbps 650 Mbps 800 Mbps 900 MbpsUTM throughput(AV and IDP) 50 Mbps 90 Mbps 250 Mbps 300 Mbps 400 Mbps 500 Mbps 600 Mbps

Max. TCP concurrent sessions 20,000 40,000 60,000 80,000 100,000 500,000 500,000

Wi-Fi802.11 b/g/n

2.4 GHz(USG40W)

802.11 a/b/g/nConcurrent2.4 & 5 GHz (USG60W)

- - - - -

Managed AP number(default/max.) 2/18 2/18 2/34 2/34 2/34 2/66 2/66

Multi-WAN Yes Yes Yes Yes Yes Yes YesUnified security policy Yes Yes Yes Yes Yes Yes Yes

SSL inspection - - Yes Yes Yes Yes YesDevice HA - - Yes Yes Yes Yes YesPort grouping Yes Yes Yes Yes - - -Single sign-on (SSO) Yes Yes Yes Yes Yes Yes Yes

Next-Gen USG Quick Finder

Streamlined managementUnified security policy streamlines the configuration of firewall and every security feature to offer faster, easier and more consistent policy management. From a single interface, users can apply all policy criteria to every UTM feature with reduced complexity. The integrated WLAN controller also enables users to management up to 34 APs from a centralized user interface.

More Wi-FiAddressing the trend of BYOD, the ZyXEL USG Advanced Series helps SMBs satisfy the Wi-Fi demand for an exploding amount of smart devices. The Series is integrated with a WLAN controller that enables businesses to easily scale up the WLAN and provide Wi-Fi in multiple areas like meeting rooms and guest reception areas.

ZyXEL One Network experienceAiming for relieving our customers from repetitive operations of deploying and managing a network, ZyXEL One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. ZyXEL One Network presents an easy-to-use tool, ZyXEL One Network Utility (ZON Utility), to realize speed network setup. ZyXEL Smart Connect allows ZyXEL networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

OneSecurity.com ServiceZyXEL provides regular updates in response to the latest security threats and advisories, and a service portal that offers free, informative network security resource and know-how to help businesses and IT departments to protect their networks and operations from security risks of the digital age. The ZyXEL USG and ZyWALL Series of products are integrated with OneSecurity.com service in the product GUI, so the IT staff can quickly and easily catch up with any new threats, and therefore proceed with walkthrough and troubleshooting actions with assistance from FAQs to better secure networks and easily manager UTM products.

USG310/210/110Unified Security Gateway—Advanced Series

Page 3: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

3

Multi-WAN & Mobile BroadbandTheZyXELUSGAdvancedSeriesprovidesnon-stop

Internetuptimewithmulti-WANandmobilebroadband

support.Multi-WANworkswithtwoormoreEthernet

WANconnectionsforactive-activeWANloadbalancing

oractive-passivefailover.Comprehensivemobile

broadbandUSBmodemsarealsosupportedforWAN

backup.

VPN High Availability (HA)ZyXELUSGsfeatureVPNHAtosatisfythedemandsof

themostmission-criticalVPNdeployments.Supporting

advancedGREoverIPSectechnology,userscandeploy

twoIPSecVPNtunnelsforactive-activeVPNload

balancingoractive-passivefailover.

Unified Security PolicyUnifiedsecuritypolicyoffersobject-basedmanagement

andaunifiedconfigurationinterfaceforfirewallandall

security-relatedpolicies.Userscaneasilyapplyallpolicy

criteriatoeveryUTMfeature,reduceconfigurationtime,

andgetmorestreamlinedpolicymanagement.

Anti-VirusPoweredbyKasperskySafeStreamIIgatewayanti-virus,

ZyXELUSGsprovidecomprehensiveandreal-time

protectionagainstmalwarethreatsbeforetheyenterthe

network.ZyXELUSGscanidentifyandblockover650,000

virusesrightatthegateandprovidehigh-speedscanning

withstream-basedvirusscanningtechnology.

Anti-SpamWithacloud-basedIPreputationsystem,ZyXELanti-

spamcandeliveraccurate,zero-hourspamoutbreak

protectionbyanalyzingup-to-the-minutesender

reputationdatafromhighlydiversetrafficsources.It

candetectspamoutbreaksinthefirstfewminutesof

emergenceregardlessofspamlanguageorformat.

ZyXEL One Network UtilityTheZONutilityfeaturessmartfunctionstoassistnetwork

managementforadministratorstoperformbatch

firmwareupgradefordevices,remoterebootofdevices

suchasceilingAPsorredirecttodeviceGUIforfurther

configurationwithjustaclick.Thesetroublesomebut

necessarymanagementtaskscannowbeeasilydone

throughjustoneplatformforWi-FiAPs,switchesand

gateways.

Feature Introduction

Robust VPNZyXELUSGssupporthigh-throughputIPSec,L2TPover

IPSecandSSLVPNforawiderangeofsite-to-client

andsite-to-siteVPNdeployments.Reinforcedwiththe

advancedSHA-2encryption,theZyXELUSGsprovidethe

mostsecureVPNforbusinesscommunications.

Integrated WLAN ControllerTheintegratedWLANcontrollersupportsCAPWAP,

andenablescentralizedauthenticationandaccess

managementofmultipleAPsinthenetwork.TheZyXEL

USGAdvancedSeriescanmanage2APsbydefault,and

upto34APswithlicenseupgrade.

Application IntelligenceZyXEL’sUSGAdvancedSeriescanidentify,categorize

andcontrolsocial,gaming,productivity,andother

Webapplicationsandbehaviors.Userscanprioritize

productiveapplications,throttleacceptableones,and

blockunproductiveapplicationstoboostproductivity

andpreventbandwidthabuse.

SSL InspectionSSLinspectionenablestheZyXELAdvancedSeriesto

providenotonlycomprehensivesecurity,butalsodeeper

policyenforcement.ItenablestheUSG’sapplication

intelligence,IDP,contentfilteringandanti-virustoinspect

trafficinSSLencryptedconnectionsandblockthreats

thatusuallygounseen.

Content FilteringZyXELcontentfilteringhelpsscreenaccesstowebsites

thatarenotbusinessrelatedormalicious.Withamassive,

cloud-baseddatabaseofover140billionURLsthatare

continuouslyanalyzedandtracked,ZyXELprovideshighly

accurate,broadandinstantprotectionagainstmalicious

Webcontent.

USG310/210/110Unified Security Gateway—Advanced Series

Page 4: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

4

USG310/210/110Unified Security Gateway—Advanced Series

Application Diagram

Anti-malware protection and application optimization• Enabling anti-virus, anti-spam and

intrusion prevention, business

networks gain deep, extensive

protection against all types of

malware threats

• Content filtering enables businesses

to deny access to Websites that are

malicious or not business-related

• Application intelligence technology

not only enable businesses to block

or throttle non-productive Web

applications, but also optimize

Web applications that increase

productivity

VPN application• Branch offices, partners and home

users can deploy ZyXEL USGs/

ZyWALLs for site-to-site IPSec VPN

connections

• Branch offices can additionally

deploy IPSec VPN HA (load

balancing and failover) for always

online VPN connectivity

• Remote users can securely access

company resources with their

computers or smartphones via SSL,

IPSec and L2TP over IPSec VPN

• The headquarter USG/ZyWALL

can also establish an IPSec VPN

connection with Microsoft Azure

for secured access to a variety of

cloud-based applications

Internet

Uni�ed Security Gateway

RemoteDesktop

NetworkExtend

BISystem

WebApps

InventoryServer

FileSharing

OA, ERP,CRM System

EmailServer

DMZ Resources

Workgroup

Productive Web applications

Non-productiveWeb applications

Viruses, intrusions, malicious Websites,

email spam

SPAM

Anti-Virus IntrusionPrevention

Anti-Spam ContentFiltering

Application Intelligence& Optimization

RemoteDesktop

NetworkExtend

BISystem

WebApps

InventoryServer

FileSharing

OA, ERP,CRM System

EmailServer

DMZ Resources

Headquarters

BranchO�ce

PartnerO�ce

SSL VPN

IPSec VPN

IPSec VPN

IPSec VPN

IPSec VPN

IPSec VPN HA

L2TP overIPSec VPN

USG40WUni�ed Security Gateway

USG110Uni�ed Security Gateway

USG1100Uni�ed Security Gateway

USG1900Uni�ed Security Gateway

Traveling Employee

Traveling Employee

Traveling Employee

Home User

MicrosoftAzure

Internet

Uni�ed Security Gateway

RemoteDesktop

NetworkExtend

BISystem

WebApps

InventoryServer

FileSharing

OA, ERP,CRM System

EmailServer

DMZ Resources

Workgroup

Productive Web applications

Non-productiveWeb applications

Viruses, intrusions, malicious Websites,

email spam

SPAM

Anti-Virus IntrusionPrevention

Anti-Spam ContentFiltering

Application Intelligence& Optimization

RemoteDesktop

NetworkExtend

BISystem

WebApps

InventoryServer

FileSharing

OA, ERP,CRM System

EmailServer

DMZ Resources

Headquarters

BranchO�ce

PartnerO�ce

SSL VPN

IPSec VPN

IPSec VPN

IPSec VPN

IPSec VPN

IPSec VPN HA

L2TP overIPSec VPN

USG40WUni�ed Security Gateway

USG110Uni�ed Security Gateway

USG1100Uni�ed Security Gateway

USG1900Uni�ed Security Gateway

Traveling Employee

Traveling Employee

Traveling Employee

Home User

MicrosoftAzure

IPSec VPN Client for Windows OS

SecuExtender SSL VPN Client for Windows/Mac OS

Page 5: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

5

Model USG310 USG210 USG110

Product photo

HardwareSpecifications10/100/1000MbpsRJ-45ports 8 (configurable) 4 x LAN/DMZ, 2 x WAN, 1 x OPT 4 x LAN/DMZ, 2 x WAN, 1 x OPTUSB ports 2 2 2Consoleport Yes (DB9) Yes (DB9) Yes (DB9)Rack-mountable Yes Yes YesSystemCapacity&Performance*1

SPI firewall throughput (Mbps)*2 5,000 1,900 1,600VPN throughput (Mbps)*3 650 500 400IDP throughput (Mbps)*4 450 350 300AV throughput (Mbps)*4 400 300 250UTM throughput (AV and IDP)*4 400 300 250Max.TCPconcurrentsessions*5 100,000 80,000 60,000Max. concurrent IPsec VPN tunnels*6*7 300 200 100Max. concurrent SSL VPN users*8 150 150 150Included SSL VPN user no.*8 50 35 25Customizablezones Yes Yes YesIPv6 support Yes Yes YesVLAN interface 64 32 16WLAN Management*9

APController(APC)support Yes Yes YesManaged AP number (default/max.)*7 2/34 2/34 2/34Key Software FeaturesFirewall Yes Yes YesVirtual private network (VPN) Yes (IPSec, SSL, L2TP over IPSec) Yes (IPSec, SSL, L2TP over IPSec) Yes (IPSec, SSL, L2TP over IPSec)Anti-virus (AV) Yes Yes YesIntrusion detection and prevention (IDP) Yes Yes YesAnti-spam Yes Yes YesContentfiltering(CF) Yes Yes YesHA Yes Yes YesBandwidth Management Yes Yes YesPowerRequirementsPower input 100 - 240 V AC, 50/60 Hz, 1.3 A max. 12 V DC, 3.33 A max. 12 V DC, 3.33 A max.Max. power consumption (watt) 58.5 37.0 37.0Heatdissipation(BTU/hr) 199.61 199.61 199.61Physical Specifications

ItemDimensions(WxDxH)(mm/in.) 430 x 250 x 44/16.93 x 9.84 x 1.73 300 x 178 x 44/11.81 x 7 x 1.73 300 x 178 x 44/11.81 x 7 x 1.73Weight (Kg/lb.) 3.3/7.28 2/4.4 2/4.4

PackingDimensions(WxDxH)(mm/in.) 519 x 392 x 163/20.43 x 15.43 x 6.42 351 x 149 x 243/13.82 x 5.87 x 9.57 351 x 149 x 243/13.82 x 5.87 x 9.57Weight (kg/lb.) 4.8/10.58 3.264/7.20 3.264/7.20

Included accessories • Power cord• Rack mounting kit

• Power adapter• Power cord• Rack mounting kit

• Power adapter• Power cord• Rack mounting kit

Environmental Specifications

OperatingTemperature 0°C to 40°C (32°F to 104°F) 0°C to 40°C (32°F to 104°F) 0°C to 40°C (32°F to 104°F)Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing)

StorageTemperature -30°C to 70°C (-22°F to 158°F) -30°C to 70°C (-22°F to 158°F) -30°C to 70°C (-22°F to 158°F)Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing)

MTBF (hr) 560,811.5 787,109.3 787,109.3Certifications

EMC FCC Part 15 (Class A), CE EMC(Class A), C-Tick (Class A), BSMI

FCC Part 15 (Class A), CE EMC(Class A), C-Tick (Class A), BSMI

FCC Part 15 (Class A), CE EMC(Class A), C-Tick (Class A), BSMI

Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI

*1: Actual performance may vary depending on network conditions and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *6: Including Gateway-to-Gateway and Client-to-Gateway.*7: With firmware ZLD 4.15 or later.*8: With firmware ZLD 4.13 or later.*9: With firmware ZLD 4.11 or later.

USG310/210/110Unified Security Gateway—Advanced Series

Specifications

Page 6: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

6

USG310/210/110Unified Security Gateway—Advanced Series

Features Set

Software FeaturesFirewall•ICSA-certifiedfirewall•Routingandtransparent(bridge)modes•Statefulpacketinspection•User-awarepolicyenforcement•SIP/H.323NATtraversal•ALGsupportforcustomizedports•Protocolanomalydetectionandprotection•Trafficanomalydetectionandprotection•Floodingdetectionandprotection•DoS/DDoSprotection•RPS-enabledfordesirableperformancein

chaotic environments

IPv6 Support•Dualstack•IPv4tunneling(6rdand6to4transition

tunnel)•IPv6addressing•DNS•DHCPv6•Bridge•VLAN•PPPoE•Staticrouting•Policyrouting•Sessioncontrol•FirewallandADP•IPSecVPN•IntrusionDetectionandPrevention(IDP)•Applicationintelligenceandoptimization•Contentfiltering•Anti-virus,anti-malware•Anti-spam

IPSec VPN•ICSA-certifiedIPSecVPN•Encryption:AES(256-bit),3DESandDES•SupportsgeneratingSHA2Certificate•Authentication:SHA-2(512-bit),SHA-1and

MD5•Keymanagement:manualkey,IKEv1andIKEv2withEAP•Perfectforwardsecrecy(DHgroups)support

1, 2, 5, 14•IPSecNATtraversal•Deadpeerdetectionandrelaydetection•PKI(X.509)certificatesupport•VPNconcentrator•Simplewizardsupport•VPNauto-reconnection•VPNHighAvailability(HA):load-balancing

and failover•L2TPoverIPSec•GREandGREoverIPSec•NAToverIPSec•ZyXELVPNclientprovisioning

SSL VPN•SupportsWindowsandMacOSX•Supportsfulltunnelmode

•Supports2-stepauthentication•Customizableuserportal

Intrusion Detection and Prevention (IDP)•Routingandtransparent(bridge)mode•Signature-basedandbehavior-based

scanning•Automaticsignatureupdates•Customizableprotectionprofile•Customizedsignaturessupported•SSL(HTTPS)inspectionsupport

Application Intelligence and Optimization•Granularcontroloverthemostimportant

applications•Identifiesandcontrolsapplicationbehavior•Supportsover15applicationcategories•Applicationbandwidthmanagement•Supportsuserauthentication•Real-timestatisticsandreports•SSL(HTTPS)inspectionsupport•IDP/ADPsupportonsocialnetworkssuchas

likes and posts on Facebook

Anti-Virus•SupportsKasperskyanti-virussignatures•Identifiesandblocksover650,000viruses•Stream-basedanti-virusengine•HTTP,FTP,SMTP,POP3andIMAP4protocol

support•Automaticsignatureupdates•Nofilesizelimitation•SSL(HTTPS)inspectionsupport

Anti-Spam•TransparentmailinterceptionviaSMTPand

POP3 protocols•ConfigurablePOP3andSMTPports•Sender-basedIPreputationfilter•RecurrentPatternDetection(RPD)technology•Zero-hourvirusoutbreakprotection•X-Headersupport•Blacklistandwhitelistsupport•SupportsDNSBLchecking•Spamtagsupport•Statisticsreport

Content Filtering•Socialmediafiltering•MaliciousWebsitefiltering•URLblockingandkeywordblocking•Blacklistandwhitelistsupport•Blocksjavaapplets,cookiesandActiveX•Dynamic,cloud-basedURLfilteringdatabase•Unlimiteduserlicensesupport•CustomizablewarningmessagesandredirectionURL•SSL(HTTPS)inspectionsupport

Unified Security Policy•Unifiedpolicymanagementinterface•SupportedUTMfeatures:anti-virus,anti-

spam, IDP, content filtering, application

intelligence, firewall (ACL)•3-tierconfiguration:object-based,profile-

based, policy-based•Policycriteria:zone,sourceanddestinationIP

address, user, time•Pre-definedUTMprofilesfordifferentuser

groups

WLAN Management•Support AP Controller version 1.95•SupportsautoAPFWupdate•WirelessL2isolation•ScheduledWi-Fiservice•DynamicChannelSelection(DCS)•Clientsteeringfor5GHzpriorityandsticky

client prevention•Autohealingprovidesastableandreliable

coverage•IEEE802.1xauthentication•CaptiveportalWebauthentication•Customizablecaptiveportalpage•RADIUSauthentication•Wi-FiMultimedia(WMM)wirelessQoS•CAPWAPdiscoveryprotocol

Mobile Broadband•WANconnectionfailovervia3Gand4G*USB

modems•AutofallbackwhenprimaryWANrecovers* 4G USB modem support available in future firmware upgrades

Networking•Routingmode,bridgemodeandhybrid

mode•EthernetandPPPoE•NATandPAT•VLANtagging(802.1Q)•Virtualinterface(aliasinterface)•Policy-basedrouting(user-aware)•Policy-basedNAT(SNAT)•Dynamicrouting(RIPv1/v2andOSPF)•DHCPclient/server/relay•DynamicDNSsupport•WANtrunkformorethan2ports•Perhostsessionlimit•Guaranteedbandwidth•Maximumbandwidth•Priority-bandwidthutilization•Bandwidthlimitperuser•BandwidthlimitperIP

ZyXEL One Network•ZONUtility ■ IP configuration ■ Web GUI access ■ Firmware upgrade ■ Password configuration•SmartConnect ■ Discover neighboring devices ■ One-click remote management access to the neighboring ZyXEL devices

Page 7: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

7

Licenses

Security

Product Kaspersky Anti-Virus Application Intelligence & IDP Content Filtering Anti-Spam

USG310 1 year2 years

1 year2 years

1 year2 years

1 year2 years

USG210 1 year2 years

1 year2 years

1 year2 years

1 year2 years

USG110 1 year2 years

1 year2 years

1 year2 years

1 year2 years

Notes:1. ZyXEL USGs can be purchased with bundled 12-month standard license (anti-virus, anti-spam, content filtering and IDP) with extra 1-month trial.2. Licenses can be easily activated, renewed and managed at myZyXEL.com 2.03. License bundles may vary according to region. Please contact your local sales representative for more information.

VPN, Management and Reporting

Product SSL VPN Tunnels SecuExtender SSL VPN Client *1 IPSec VPN Client Managed APs *2 Vantage Report

USG310

Add 5 TunnelsAdd 10 TunnelsAdd 50 Tunnels

For 1 clientFor 5 clientsFor 10 clients

For 1 clientFor 5 clientsFor 10 clientsFor 50 clients

Add 4 APsAdd 8 APs

For 1 deviceFor 5 devicesFor 25 devicesFor 100 devices

USG210

USG110

*1: Support OS: MAC OS 10.7 or later *2: With firmware ZLD 4.10 or later

Authentication

•Localuserdatabase

•MicrosoftWindowsActiveDirectory

integration

•ExternalLDAP/RADIUSuserdatabase

•XAUTH,IKEv2withEAPVPNauthentication

•Web-basedauthentication

•Forceduserauthentication(transparent

authentication)

•IP-MACaddressbinding

•SSO(SingleSign-On)support

Device High Availability (HA)

•Active-passivefailovermode

•Devicefailuredetectionandnotification

•SupportsICMPandTCPpingcheck

•Linkmonitoring

•Configurationauto-sync

System Management

•Role-basedadministration

•Multipleadministratorlogins

•Multi-lingualWebGUI(HTTPSandHTTP)

•Commandlineinterface(console,Web

console,SSHandtelnet)

•SNMPv1,v2c,v3

•CloudCNMSecuManager*

*Available in Q2, 2016

•Systemconfigurationrollback

•FirmwareupgradeviaFTP,FTP-TLSandWeb

GUI

•Dualfirmwareimages

Logging and Monitoring

•Comprehensivelocallogging

•Syslog(toupto4servers)

•Emailalerts(toupto2servers)

•Real-timetrafficmonitoring

•Built-indailyreport

•AdvancedreportingwithVantageReport

Access Point Compatibility List

SeriesNWA5120 Series NWA5000 Series NWA3000-N Series WAC6500 Series

Unified Access Point Managed Access Point Unified Pro Access Point Unified Pro Access Point

Model

NWA5121-NINWA5121-NNWA5123-NINWA5301-NJ

NWA5160NNWA5560-NNWA5550-N

NWA3160-NNWA3560-NNWA3550-N

WAC6503D-SWAC6502D-SWAC6502D-EWAC6553D-E

Functions

Central management Yes Yes Yes Yes

Auto provisioning Yes Yes Yes Yes

Data forwarding Localbridge Localbridge Localbridge Localbridge

USG310/210/110Unified Security Gateway—Advanced Series

Page 8: Secure and Always Online Networking for Small- to Medium-sized … · 2020-06-04 · Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time

F o r m o r e p r o d u c t i n f o r m a t i o n , v i s i t u s o n t h e w e b a t w w w . Z y X E L . c o m

Copyright © 2016 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.

5-100-00816002 01/16

Accessories

USG310/210/110Unified Security Gateway—Advanced Series

Item Description Supported OS

IPSec VPN Client IPSec VPN client software for the ZyWALL and USG Series with Easy VPN for zero-configuration remote access

• Windows XP (32-bit)• Windows Server 2003 (32-bit)• Windows Server 2008 (32/64-bit)• Windows Vista (32/64-bit)• Windows 7 (32/64-bit)• Windows 8 (32/64-bit) • Windows 10 (32/64-bit)

SecuExtender—SSL VPN Client

SSL VPN client software for the ZyWALL and USG Series with auto-installation in Windows, and lite set up for MAC user

• Windows OS• MAC OS 10.7 or later

Notes:1. A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official ZyXEL website. To continue using the application, please contact your regional sales representatives and

purchase a commercial license for the application.2. SSL VPN client for Windows OS is pushed from USG/ZyWALL device and launches automatically. It does not require a license key to activate the application.