ZyXEL Communications ENTERPRISE NETWORK CENTER User manual

Enterprise
Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise
Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Key Features
Ł
All-new Platform:“3rd”
Generation ZyWALL
Ł
22x Faster than Previous-
Generation ZyWALL Firewalls
Ł
New Generation UTM Solution
Ł
Robust Hybrid VPN
(IPSec and SSL)
Ł
Application Firewall
Ł
Web Security (Security Web
Access): ZyXEL Safe Browsing
Ł
Non-Stop Internet Access with
Multiple WAN and 3G Backups
Ł
ICSA Firewall,IPSec Certification
Ł
Comprehensive Report System
Ł
Best-of-breed Security Solution
Ł
Free Anti-Spam Service
Ł
ZyXEL Security Distribution
Network (ZSDN)
Key Benefits
Secure Connectivity
Given the prevalence and importance of information technology (IT) systems today and the nature and
scale of both the opportunities and risks associated with significant deployments of new networking
technologies, organizations are forced to evaluate solutions to build up a safer infrastructure to secure
online transactions, in which involve exchange of valuable information.The infrastructure should be
tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers.
Proactive Protection
Malicious virus, worm, exploits could cripple corporate networks and halt business transactions. In addition
to severe financial loss,you also risk leakage of confidential information.
As mass-mailing software companies mushroom on the Internet,your network is bombarded with massive
amounts of junk mails (spam).Without intelligent detection and proactive blocking, users have to go
through the tedious and time-consuming task of sieving through the overflowing mailbox,and such
scenario leads to serious productivity loss.
Policy Compliance
With numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company
employees to share files and chat online during work hours.Rapid file sharing not only compromises
network safety with the sharing of questionable files containing malicious viruses,but may also violate
copyright issues and create legal hassles.
Network Resilience
ISP links broken, hardware and software failure on the gateway,dead VPN tunnels—these are severe
challenges IT staff face when designing the network infrastructure.In short, we need to take fault tolerance
on the network path into consideration when build up a highly available network infrastructure for non-
stop operations.
Manageability
With Vantage CNM (Centralized Network Management), users can achieve the follow objects:
• Easy VPN management and diagnostic capability
• Complete security policies and UTM management
• Low TCO of massive deployment and device maintenance
• Active monitoring,alerting and comprehensive graphic reports
The solution provides an efficient centralized management system for enterprises of any size to reduce
operational costs regardless of the number of branch offices or remote locations.
Cost-effectiveness
With the adoption of ZyXEL’s USG device,the follow costs can be saved:
• Device hardware maintenance fee:ZyXEL provides a one more year hardware warranty out of factory.
• FreeSoftware upgrade:now ZyXEL provides free software upgrade for you to enjoy complete protection
without additional expanse.
The ZyWALL USG (Unified Security Gateway) Series is the“third generation”ZyWALL featuring
an all-new platform. It provides the performance 22 times faster than the previous-generation
ZyWALL firewalls, as well as a deep packet inspection security solution for small businesses to
enterprises alike.It embodies a Stateful Packet Inspection (SPI) firewall,Anti-Virus,Intrusion
Detection and Prevention (IDP),Content Filtering, Anti-Spam, and VPN (IPSec/SSL/L2TP) in one
box.This multilayered security safeguards your organization’s customer and company records,
intellectual property, and critical resources from external and internal threats.
65-100-000046B 10/09
For more product information, visit us on the web at www.ZyXEL.com
Copyright © 2009 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of
ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their
respective owners. All specifications are subject to change without notice.

Key Applications
ZyWALL USG Clean-traffic Architecture
The ZyWALL USG’s clean-traffic architecture
protects against network risks such as viruses,
worms,Trojan Horses, spyware, phishing attacks
and other emerging Internet threats.With the
clean-traffic architecture,enterprises users are
assured to have clean and secure network
environments.
High Performance
22x faster than previous-generation
ZyWALL firewalls
New Generation UTM Solution
The ZyWALL USG Series deploys hardware-
acceleration technology in one box.Powered
by high-performance SecuASIC technology
and a hardware-based encryption
accelerator, the ZyWALL USG Series delivers
industry-leading performance and multi-
layer threat protection for small businesses
and enterprises.The ZyWALL USG Series
provides integrated Unified Threat
Management security features such as Anti-
Virus (include Kaspersky Anti-Virus & ZyXEL
Anti-Virus), IDP, Anti-Spam, Content Filtering
and Firewall,VPN.All ZyWALL USG Series
products support the Gigabit Ethernet.
Robust Hybrid VPN (IPSec and SSL)
The ZyWALL USG Series can provide secure
access between remote locations and
corporate resources through the Internet for
organizations of any size.Using IPSec VPN,
companies can secure connections to branch
offices, partners and headquarters. Road
warriors and telecommuters can use SSL or
L2TP VPN to safely access the company
network without having to install VPN
software.The Series provides a flexible and
easy way to enable mobile employees,
vendors and partners to confidently access
your network resource for better efficiency.
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Content Filter
Anti-Virus
Anti-Spam
Firewall
Inbound Threats Outbound Threats
VPN
N
e
t
w
o
r
k
Intrusion Detection
and Prevention
Branch
B
r
a
n
c
h
Headquarters
IPSec VPN
SSL VPN
Mobile User
Client
Internet
Network
Extend
Application Server
(Inventory, Store...)
Web-based
Application
Remote
Desktop
File
Share
OA, ERP System
CRM System
BI
System
Email
Server
Server Farm
400
350
300
250
200
150
100
50
0
UTM throughput in Mbps
0
Traffic Out
Defragment
le
a
n
ra
ffi
c
Update
ALG DNAT Routing
Forwarding Engine
Network
I/O Engine
Stateful Firewall
ADP (PA/TA)
Application Classifier
IDP
Anti Virus
Application Patrol
Content Filter
SNAT BWM
Traffic Out
AS
T
hre
at
Databas
e
The New Generation USG Firewall
22x faster than previous
generation ZyWALL firewalls
Z
y
WALL
5
UTM
Z
y
WALL
35
UTM
Z
y
WALL
70
UTM
Z
yWALL USG 10
0
Z
yWALL USG 20
0
Z
yWALL USG 30
0
ZyWALL USG 1000
ZyWALL USG 2000

Non-stop Internet Access with
Multiple WAN and 3G Backups
The ZyWALL USG not only supports
multiple WAN ports but also 3G through
USB or PCMCIA cards.This feature enables
“active-active”load sharing or “active-
passive”failover configuration to deliver
highly reliable network connectivity.
Application Firewall
More and more network applications bring
malicious software into your office.This kind
of unwanted software, especially IM/P2P
applications, may cause bandwidth waste or
even system damage.Using the application
patrol and bandwidth management features,
you can have full control over traffic blocking
or rate limit settings.
Web Security (Secure Web Access):
ZyXEL Safe Browsing
There are increasing network threats coming
from internal sources,since your employees
could surf unknown Web sites located
anywhere.Some Web sites contain malicious
software like Trojan horses, spywares or
worms that could take tolls to your company;
thus finding ways to keep internal users from
surfing dangerous Web sites is becoming an
important issue. ZyXEL Safe Browsing feature
can pinpoint the Web sites with malicious
software and warn the users to stay away
from potential threats.
Device HA: Master Fails and Backup Takes Over
High Availability
High availability is essential in enterprise
networks. It ensures a system or component
can be continuously operational for a desirably
long length of time.
The ZyWALL USG series provide high
availability feature as:
• Multiple WAN ports and configure load
balancing between these ports.
• An auxiliary (backup) Internet connection as
known as out of band Management .
• A backup ZyWALL in the event the master
ZyWALL fails (device HA).
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
To minimize the impact of single-point failures,
the ZyWALL USG Series supports device HA
(High Availability) to assure network availability.
19
2
.
1
68.
1
.1
Master
Backup
192.
1
68.
1
.1
1.1.1.1
A
LAN
B
1.1.1.1
Network
P
rov
i
der
(
IP VPN
)
LAN
ZyWALL USG 300
Unified Security
Gateway
Vantage CNM
Centralized Network
Management
Remote Office
Corporate
Headquarters
BRAS
Host by SI or Customer
Operating in
Active/Passive Mode
3G
N
etwor
k
WAN2 (3G)
WAN1
Primary
Backup
ADSL Fiber
Last-Mile
IPSec or GRE Tunnel for
Secure Connection
ZyWALL USG fail
over and fail back
between WAN1
(ADSL/Fiber) &
WAN2 (3G WAN)
Web Server
I
nterne
t
I
nternet
2. Query
1. Internet Access
3. Response
4
. Access or
D
en
y
ZyXEL Integrated Database
ZyXEL Database
3rd-Party Database
(Bluecoat + Google)
ZyWALLUSG300
PWR
SYS
AUX
RESET
CARD1
CARD2
10/100/1000
1234567USB
1
2
CONSOLE
AUX
ZyWALLUSG300
PWR
SYS
AUX
RESET
CARD1
CARD2
10/100/1000
1234567USB
1
2
CONSOLE
AUX
ZyWALLUSG300
PWR
SYS
AUX
RESET
CARD1
CARD2
10/100/1000
1234567USB
1
2
CONSOLE
AUX
Corporate
N
etwor
k
Non-Business Related Business Related
Bus
i
ness Related A
pp
l
i
cat
i
on
s
Non-Bus
i
ness Related A
pp
l
i
cat
i
ons
I
nterne
t
Application Control Policy
Allow Business Related Bandwidth Limit IM P2P Block

Comprehensive Reporting System
The ZyWALL USG Series has a built-in reporting
system that offers a comprehensive set of real-
time and historical reports including firewall, virus
and intrusion attacks, bandwidth usage,Web site
usage and user activities. Furthermore, with
Vantage Report (VRPT), aWeb-based reporting
system, administrators can easily collect traffic
data and analyze a distributed network for their
organizations to become more aware of
suspicious activities and to ensure better
business productivity.
Best-of-breed Security solution
The ZyWALL USG Series offers network
protection combining multiple best-of-breed
technologies into a single security solution;
these technologies are provided by well-known
industrial partners such as:
• Anti-Virus: Kaspersky
• Content Filter: Bluecoat, Google
• IP Sec VPN Client:TheGreenBow
With the best-of-breed security solution, the
ZyWALL USG Series delivers industry-leading
performance and multi-layer threat protection
for small businesses and enterprises.
USG Built-in Reporting System
ZyWALL USG series provides built-in reporting system to collect data and view various statistics
about traffic passing through your ZyWALL.
Vantage Report Centralize Reporting System
Vantage Report is a cost-effective solution that allows administrators to easily monitor and
analyze report of ZyWALL Internet Security Appliances from any location. It delivers rich formats
of statistical report for IT staff with thorough understanding about bandwidth usage, security
event and web traffic analysis.
Monitor
Best-of Breed Technoloies
ZyXEL Security
R
es
p
onse Team Security Information Center
(Ema
i
l Bullet
i
ns)
R
e
g
istration Center
(HTTPS or HTTP)
Check Policy
and Advisory
All New ZyWALL USG Series
Statistical Report
Free Anti-Spam Service
ZyXEL’s Anti-spam service eliminates spam,
phishing, virus and malware threats
through a unified security architecture
without dropping legitimate messages.
With ZyXEL’s free anti-spam service,
enterprises can save time and resources
dealing with unwanted email to reduce
operational costs.
ZyXEL Security Distribution Network
(ZSDN) Ensures Rapid Response to
New Threats
ZSDN Provides Up-to-Date Protection
• The myZyXEL.com Web site delivers a
convenient,centralized way to register all
ZyWALL units and Security Services.
• The ZyXEL Security Update Servers operates
24x7 to automatically deliver updated signature
databases to ZyWALL units around the world.
• The mySecurityZone portal provides
comprehensive, searchable information
regarding viruses and system vulnerabilities,
and it provides a wealth of information
resources that keep customers up-to-date on
the latest vulnerabilities and countermeasures.
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Registration & Activation
1. Login
2. MAC
3. RegType ( Trial)
4. License Key
1. SKU
2. Expiration Date
1
1
4
Request
Download
4
5
Download
Signature
5
3
3
2
2
World Update Server
World Update S
mySecurityZone
m
yZyXEL.com
A
n
t
i
-
V
i
r
u
s
C
o
n
t
e
n
t
F
i
l
t
e
r
I
P
S
e
c
V
P
N
C
l
i
e
n
t
Mail GoodGood
Ant
i
-S
p
am Serv
i
ce
Spam
mySecurity
zone
my
.com

Specifications Features
Firewall
• ICSA-certified Firewall
• Routing and transparent (bridge) mode
• Zone-based access control list
• Stateful packet inspection
• NAT, PAT
• Policy base NAT
• VLAN tagging
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG supports custom ports
Virtual Private Network (VPN)
• ICSA-certified IPSec VPN
• PPTP, L2TP, IPSec
• Algorithm: AES/3DES/DES
• Authentication: SHA-1/MD5
• Key management: Manual key/IKE
• Perfect forward secrecy (DH groups) support
1, 2, 5
• IPSec NAT traversal
• Dead peer detection/relay detection
• PKI (X.509) certificate support
• Centralize VPN support
• Simple wizard support
• Auto reconnect VPN
SSL VPN
• Clientless secure remote access
• Support reverse proxy mode and full tunnel
mode
• Unified policy enforcement
• Supports two-factor authentication
• Customizable user portal
Intrusion Detection and Prevention
(IDP)
• Routing and transparent (bridge) mode
• Zone-based IDP inspection
• Customizable protection profile
• Protect over 2000 attack
• Automatic signature updates
• Custom signatures
• Protocol anomaly detection and protection
• Traffic anomaly detection and protection
• Flooding detection and protection
• DoS/DDoS protection
Anti-Virus
• Support Kaspersky and ZyXEL Anti-Virus
• Stream-based Anti-Virus engine
• Zone base AV protection
• HTTP/FTP/SMTP/POP3/IMAP4 protocol support
• Automatic signature updates
• No file size limitation
• Blacklist/whitelist support
Application Patrol
• Application, IM/P2P, stream base media, VoIP
granular access control
• Detail access control of IM (chat, file transfer,
video)
• Application and IM/P2P bandwidth control
• User authentication support
• IM/P2P signature auto update
• Support more than 15 catalogs IM and P2P
• Real-Time statistical reports
• Maximum/guaranteed bandwidth
Anti-Spam
• Zone to zone protection
• Transparently intercept mail via SMTP/POP3
protocols
• Blacklist/whitelist support
• Support DNSBL checking
• Spam tag support
• Statistics report
High Availability
• Active-Passive mode
• Device failure detection and notification
• Support ICMP and TCP ping check
• Link monitoring
• Auto-Sync configurations
• VPN HA (redundant remote VPN gateways)
Content Filtering
• Web security—ZyXEL safe browsing
• URL blocking, keyword blocking
• Profile base setting
• Exempt list (blacklist and whitelist)
• Blocks java applet,cookies and active X
• Dynamic URL filtering database (powered by
BlueCoat)
• Unlimited user licenses support
• Customize warning messages and redirect URL
Networking
• Routing mode/bridge mode/mixed mode
• Layer 2 port grouping
• Ethernet/PPPoE
• Tagged VLAN (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIP v1/v2, OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN Trunk more than 2 port
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
Authentication
• Local user database
• Microsoft Windows active directory integrate
• External LDAP/RADIUS user database
• Xauth over RADIUS for IPSec VPN
• Forced user authentication (transparent
authentication)
• IP/MAC address binding
System Management
• Role-Based administration
• Multiple administrator login
• Multi-Lingual web GUI (HTTPS/HTTP)
• Out-of-band management (AUX)
• Object-based configuration
• Command line interface (console/web
console/SSH/TELNET)
• SNMP v2c (MIB-II)
• System configuration rollback
• Firmware upgrade via FTP/FTP-TLS/web GUI
Logging/Monitoring
• Comprehensive local logging
• Syslog (send to up to 4 servers)
• E-mail Alert (send to up to 2 servers)
• Real-Time traffic monitoring
• Built-in daily report
• Advanced reporting (Vantage Report)
• Centralized network management Vantage
(CNM) manageable
Note: *1: With SEM-DUAL/SEM-VPN module
*2: With SEM-DUAL/SEM-UTM module
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Unified Security Gateway Series
Model ZyWALL USG 100 ZyWALL USG 200 ZyWALL USG 300 ZyWALL USG 1000 ZyWALL USG 2000
Product Photo
Features
•
Unified Security
Gateway for SME
(
200~500 PC Users
)
•
Gigabit Firewall with
F
iber interface (SFP)
•
Scalable VPN/UTM
p
erformance
•
Support Kaspers
ky
and ZyXEL anti-virus
•
Re
d
un
d
ant power
m
odul
e
•
Unified Security
Gateway for SME
(
75~200 PC Users
)
•
Providing Hybrid VPN
(IPSec/SSL VPN) an
d
robust UTM securit
y
s
ervi
c
e
s
•
High-per
f
ormance
m
ulti-la
y
er threat
p
rotect
i
o
n
•
Non-stop operat
i
ons
o
f mission-critical
app
l
ication
s
•
Excellent
m
anageability with
obj
ect, text-
b
ase
d
an
d
c
entralized
•
Unified Security
G
ateway for SME
(
50~75 PC Users
)
•
Providing Hybrid VPN
(IPSec/SSL VPN) an
d
robust UTM securit
y
s
ervi
c
e
s
•
High-per
f
ormance
multi-la
y
er threat
protect
i
o
n
•
User-aware po
l
ic
y
engine enables access
granu
l
arity
•
Excellent
manageability with
o
bj
ect, text-
b
ase
d
an
d
centralized
•
Unified Security
Gateway for SME
(
10~50 PC Users
)
•
High-performance
m
u
l
ti-
l
ayer t
h
reat
p
rotection
•
Hy
b
ri
d
VPN (IPSec, SSL
a
n
d
L2TP) secures
connection
h
ea
d
quarter
s
•
Support Kaspers
ky
a
nd ZyXEL anti-virus
•
F
l
exi
bl
e OPT (option)
p
ort (onl
y
f
or USG 200)
•
Unified Security
G
ateway for SME
(
10~50 PC Users
)
•
High-performance
mu
l
ti-
l
ayer t
h
reat
protectio
n
•
Hy
b
ri
d
VPN (IPSec, SSL
a
n
d
L2TP) secures
connection
h
ea
d
quarter
s
•
Support Kaspers
ky
a
nd ZyXEL anti-viru
s
Hardware Specifications
1
0/100/1000 Inter
f
aces
5
x LAN
/
DMZ, 2 x WA
N
4 x LAN
/
DMZ, 2 x WAN,
7
5
6
(
Copper)
(
A
ll
G
b
E
)
1 x OPT
(
A
ll
G
b
E
)
D
ualPersonality GbE
-
-
-
-
2
(
SFP/RJ45
)
US
B Port
s
2
2
2
2
2
SEM Slo
t
-
-
-
-
1
(
Securit
y
Extension Module
)
Car
d
S
l
ot
1
1
1
1
1
System Performance
F
irewall Throu
g
hpu
t
1
00 Mb
p
s
1
50 Mb
p
s
2
00 Mb
p
s
3
50 Mb
p
s 2,000 Mb
p
s
VPN Throughput (AES)
5
0 Mb
p
s 75 Mb
p
s
1
00 Mb
p
s 150 Mb
p
s 400 Mb
p
s
AV Throughpu
t
*1
40 Mb
p
s
5
0 Mb
p
s
7
0 Mb
p
s 120 Mb
p
s 400 Mb
p
s
I
DP T
h
roug
h
pu
t
*2
5
0 M
b
ps 65 M
b
ps
7
5 M
b
ps 100 M
b
ps 400 M
b
ps
U
TM T
h
roug
h
put
3
5 Mbps 45 Mbps
7
0 Mbps 100 Mbps 400 Mbps
(
AV+IDP+F
i
rewall)
*
2
U
nl
i
m
it
e
d
Us
er L
ic
en
s
e
s
Y
e
s
Y
e
s
Y
e
s
Y
e
s
Y
e
s
M
a
x
S
e
ssio
n
s
20,000 40,000 60,000
5
12,000 1,000,00
0
M
a
x
.
Co
n
cu
rren
t
5
0
1
00
200
1
,
000
2
,
000
I
P
S
e
c
VPN T
u
nne
ls
M
a
x
.
Co
n
cu
rren
t
5
1
0
2
5
2
5
0
7
5
0
SS
L VPN
Us
er
s
Custo
m
i
z
ab
le Z
o
ne
Y
e
s
Y
e
s
Y
e
s
Y
e
s
Y
e
s
Power Requirement
I
nput Volta
ge
1
00 ~ 240
V,
1
00 ~ 240
V,
1
00
~ 24
0
VA
C
100 ~ 240 VAC
,
100 ~ 240
V,
50 ~ 60
H
z, 1.2
A
50~ 60
H
z, 1.2
A
50/60 Hz, 0.55 ~ 0.3 A
5
0/60 Hz, 1 A Max 50 ~ 60
H
z, 3 ~ 6
A
P
ower Rat
i
ng 2
0
W
Ma
x 2
0
W
Ma
x
35
W
Ma
x
80
W
Ma
x
200
W
Environmental Specifications
Operatin
g
Temperature
0
°
C
~ 50
°
C
0
°
C
~ 50
°
C
0
°
C
~ 5
0
°
C
0
°
C
~ 4
0
°
C
0
°
C
~ 40
°
C
S
tora
g
e Temperatur
e
-
30
°
C
~ 6
0
°
C
-
30
°
C
~ 60
°
C
-30
°
C
~ 60
°
C
-30
°
C
~ 6
0
°
C
-
30
°
C
~ 6
0
°
C
Operat
i
ng Hum
i
d
i
t
y
5% ~ 90%
5
% ~ 90%
2
0% ~ 90%
5
% ~ 90% 5% ~ 90%
(non-con
d
ensin
g
) (non-con
d
ensin
g
)
(
non-con
d
ensin
g
) (non-con
d
ensin
g
) (non-con
d
ensin
g
)
Physical Specifications
D
imensions
2
42 x 17
5
x
35.5
242 x 17
5
x
35.5
4
30
x 2
0
1 x 42
4
31 x 292 x 43.5
4
30 x 487 x 8
9
(
W
)
x
(
D
)
x
(
H
)
m
m
Wei
g
ht, k
g
1
.
2
1
.
2
2
.
8
4
.
7
10
.
5

Security Licenses
All services are also available on E-iCard
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(100/200/300/1000/2000 Series)
Transceiver
Accessories
Security Extension Module (USG 2000 only)
System Performance
UTM Performance 400 Mbps 100 Mbps
VPN Performance 400 Mbps 400 Mbps
Max. IPSec VPN Tunnels 2000 2000
Max SSL VPN Users 750 750
Environmental Specifications
Operating Temperature 0°C ~ 40°C 0°C ~ 40°C
Storage Temperature -30°C ~ 60°C -30°C ~ 60°C
Operating Humidity 5% ~ 90% (non-condensing) 5% ~ 90% (non-condensing)
Physical Specifications
Dimensions 199.2 x 212 x 36.3 199.2 x 212 x 36.3
(W) x (D) x (H) mm
Weight, g 410 410
SEM-DUAL SEM-VPN
F
or customers in need of intensive VPN a
pp
lications to
b
uild up might
y
VPN concentrator in central site while
requires highest level o
f
redundanc
y
. Specialized in VPN
a
pp
lications, the SEM-VPN accelerates VPN
p
er
f
ormance
.
•
Advanced VPN Cr
y
pto to Boost up VPN Performance
•
V
PN Per
f
ormance: up to 400 Mbps (IPSec, large packet)
•
S
imu
l
taneous IPSec VPN Tunne
l
s: Up to 2,000 IPSec VPN
T
unne
l
s
•
S
imu
l
taneous SSL VPN Users:U
p
to 750* SSL VPN User
s
*: SSL VPN user license sold separatel
y
; 5 included
.
F
or customers require
f
ull securit
y
f
eatures both VPN
an
d
UTM t
h
reat protections.T
h
e SEM-DUAL un
l
eas
h
es
f
ull horse power o
f
the ZyWALL USG 2000 plat
f
orm with
m
ighty VPN and UTM performance
.
•
SecuASIC CIP-3001
f
or UTM Acceleration
(
Anti- Virus
a
n
d
IDP
)
•
Advanced VPN Crypto to Boost up VPN Per
f
ormance
•
U
TM Performance: up to 400 Mbps (HTTP, lar
g
e packet)
•
V
PN Per
f
ormance: up to 400 Mbps (IPSec, large packet)
•
Simu
l
taneous IPSec VPN Tunne
l
s: Up to 2,000 IPSec
VPN Tunne
l
s
•
Simultaneous SSL VPN Users:U
p
to 750* SSL VPN User
s
*: SSL VPN user license sold separatel
y
; 5 included
.
Product Photo
Model
Features
Please Order
iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years
iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years
iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years
iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years
iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years
iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years
iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years
iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years
iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years
iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years
iCard IDP, 1 year iCard IDP, 2 years
iCard IDP, 1 year iCard IDP, 2 years
iCard IDP, 1 year iCard IDP, 2 years
iCard IDP, 1 year iCard IDP, 2 years
iCard IDP, 1 year iCard IDP, 2 years
iCard Content Filtering, 1 year iCard Content Filtering, 2 years
iCard Content Filtering, 1 year iCard Content Filtering, 2 years
iCard Content Filtering, 1 year iCard Content Filtering, 2 years
iCard Content Filtering, 1 year iCard Content Filtering, 2 years
iCard Content Filtering, 1 year iCard Content Filtering, 2 years
iCard 2 to 5 SSL Tunnels
iCard 2 to 10 SSL Tunnels
iCard 2 to 10 SSL Tunnels iCard 2 to 25 SSL Tunnels
iCard 10 to 25 SSL Tunnels
iCard 5 to 25 SSL Tunnels iCard 5 to 50 SSL Tunnels
iCard 5 to 250 SSL Tunnels iCard 25 to 50 SSL Tunnels
iCard 25 to 250 SSL Tunnels iCard 50 to 250 SSL Tunnels
iCard 5 to 50 SSL Tunnels iCard 5 to 250 SSL Tunnels
iCard 5 to 750 SSL Tunnels iCard 50 to 250 SSL Tunnels
iCard 50 to 750 SSL Tunnels iCard 250 to 750 SSL Tunnels
Software client 1 license
Software client 5 licenses
Software client 10 licenses
Software client 50 licenses
If You Want
Gateway Ant
i
V
i
ru
s
Zy
WALL Gatewa
y
Anti-Virus service is an eas
y
-to- manage,
s
ignature-based securit
y
feature which sops virus/sp
y
ware
f
rom entering
y
our network.
F
or protection against viruses and sp
y
ware, Z
y
WALL USG
1
00/200/2000 could be chose the Z
y
XEL Anti-Virus or one
p
owered b
y
Kaspersk
y
Labs
.
Gateway ID
P
Zy
WALL Gatewa
y
Intrusion Detection/Prevention service is
an eas
y
-to-manage, signature-based securit
y
feature which
m
iti
g
ates threats from ever-evolvin
g
attacks/exploits.
Gatewa
y
Content Filtering
Zy
WALL Gatewa
y
Content Fi
l
tering is an integrate
d
securit
y
o
ption to regulate leisure browsing or porn tra
ff
ic during
wor
k
h
ours to
d
ecrease non-
p
ro
d
uctive
b
an
d
wi
d
t
h
c
onsumption and prevent viruses and sp
y
ware
f
rom
f
orcing
y
our computer to connect with unwanted websites.
Mo
re
SS
L VPN T
u
nne
ls
R
emote access has never been so eas
y
. Utilizing onl
y
a
s
tandard web browser, users can easil
y
and secure access e
-
m
ail,
f
iles, applications, web servers and an
y
resources on the
c
orporate network
f
rom an
y
location.With industr
y
strength
security and encryption algorithms, the ZyWALL
’
L
L
s SSL VPN
’
f
eature ensures
y
our privac
y
o
f
data
.
I
PSec VPN Cl
i
en
t
I
deal
f
or remote teleworkers to access compan
y
resources
i
n a secure manner.Software client from SafeNet to be
i
n
stall
e
d
o
n
cl
ien
t
P
C
’
s.
’
Vantage CN
M
A ro
b
ust centra
l
ize
d
Networ
k
Management S
y
stem
.
1
. Centralized UTM Management
f
or License and Polic
y
2. En
f
orcements and One-Click VPN con
f
iguration
3
. Group Device Configuration for mass deployments
:
firmware upgrades,Policy installations and
b
ac
k
up/restore, Rea
l
-time monitorin
g
, a
l
ertin
g
an
d
com
pre
h
ensive
g
rap
h
ic reportin
g
.
Vantage
R
eport
A comprehensive Reporting System.
1
. Quickly and conveniently collect and/or analyze log
o
rientated by devices across distributed network
s
2. Highly accessible and easy-to-use architecture provides I
T
s
taff a simple method to monitor/analyze network traffic
associated with ZyWALL devices.
For
ZyWALL USG 100
ZyWALL USG 100
ZyWALL USG 200
ZyWALL USG 200
ZyWALL USG 300
ZyWALL USG 300
ZyWALL USG 1000
ZyWALL USG 1000
ZyWALL USG 2000
ZyWALL USG 2000
ZyWALL USG 100
ZyWALL USG 100
ZyWALL USG 200
ZyWALL USG 200
ZyWALL USG 300
ZyWALL USG 300
ZyWALL USG 1000
ZyWALL USG 1000
ZyWALL USG 2000
ZyWALL USG 2000
All ZyWALL
Models
All ZyWALL
Models
Client PC’s
CNM, 10 nodes
CNM, 25 nodes
CNM, 50 nodes
CNM, 100 nodes
CNM, 300 nodes
CNM, 1000 nodes
Vantage Report, 1 device
Vantage Report, 5 devices
Vantage Report, 25 devices
Vantage Report, 100 devices
Operational Ranges
Model Name Wavelength Connector 62.5 um 50 um 9/10 um Supply
Multi-Mode Fiber Multi-Mode Fiber Single-Mode Fiber Voltage Current
S
FP-
SX
-17
d
Bm
850
nm
LC
220
m
550
m
3.
1
5
~
3.
4
5
V
300
m
A
S
FP-LX-1
0
-20
d
Bm 1
3
1
0
nm
LC
5
5
0
m
-
-
-
-
-
5
5
0
m
1
0
km
3.15 ~ 3.45
V
3
00 m
A
S
FP-LHX-1
3
1
0
-4
0
-2
3
d
Bm 1
3
1
0
nm
LC
40
k
m
3.
1
5
~
3.
4
5
V
300
m
A
S
FP-ZX-
80
-24
d
Bm 1
550
nm
LC
80
km
3.
1
5
~
3.
4
5
V
300
m
A
Optical
Receiver
Sensitivity
Transmission Distance vs. Fiber Cable Sepcification
Max