ZyXEL Communications ZYWALL 2 WG User manual

Benefits
Internet Security
Appliance
zywall 2wg
łInternet Access through 3G
Networks (HSDPA, UMTS,
GPRS, EDGE)
łDual-band,Tri-mode Access
Point with Wireless
802.11a/b/g Network
łWeb-based Content Filtering
Services Available
łAdvanced ZyNOSTM ICSA
Certified SPI Firewall and IPSec
VPN Protection
łConfigurable 4-Port
LAN/DMZ/WLAN Zones
Internet Access through 3G Networks (HSDPA, UMTS, GPRS, EDGE)
ZyWALL 2WG provides users even more convenient Internet access with 3G service to eliminate the
limitation of the wired network and extends the last-mile service wirelessly. Incorporated the wired
environment,the solution can apply Backup WAN and Load Balancing features to various applications
while offering more mobility with Wi-Fi connectivity.
Virtual Private Network (VPN) Connection
The ZyWALL 2WG supports ZyNOS ICSA-certified IPSec VPN suitable for deployments from remote sites to
the central server. As data encryption over the Internet ensures secure transmission between two sites
without expensive leased lines,global interconnectivity can be achieved at a minimal cost.Thanks to the
Redundant IPSec VPN feature,the ZyWALL 2WG’s dialup client will keep the connection running even the
primary VPN connection fails.
Secured Firewall Protection
The ICSA-certified ZyNOS Firewall on the ZyWALL 2WG provides robust, reliable firewall security with high
performance. Based on Stateful Packet inspection and Denial of Service (DoS) technology, it provides the
first-line defense against hackers, network intruders and other hazardous threats.
Secure Zone Technology
The ZyWALL 2WG offers the Secure Zone technology that SOHO users can simply deploy access servers in
a DMZ zone separated from the trusted local network (LAN).The DMZ zone and WLAN zone have their
own DHCP service, and all zones are securely segregated by firewall rules.
3G and Wi-Fi Mobile Broadband Security
Appliance for Remote Office (RO)/SOHO

Specifications
Application Diagram
System Specifications
Mode of Operation
• Routing Mode
• Transparent Mode (Bridge)
• NAT (Network Address Translation)
• Dial Backup
Virtual Private Network
• 5 simultaneous IPSec VPN Connections
• DES/3DES/AES encryption
• Manual Key,IKE and PKI (X.509)
• IPSec NAT Traversal
• Xauth User Authentication
• Redundant VPN connection (VPN HA)
Firewall Security
• Transparent Firewall (Bridge mode)
• Stateful Packet Inspection
• DoS and DDoS Protection
• Real-time Attack Alert and Logs
Content Filtering
• Java/AactiveX/Cookie/ Proxy Blocking
• URL and Key word Blocking
• Web Content Filtering
Network
• DHCP client/server/relay
• PPPoE
• PPTP
System Management
• Web GUI (HTTP, HTTPS)
• Command Line Interface (Console,Telnet, SSH)
• Firmware Upgrade (Web GUI,TFTP/FTP/SFTP)
• Vantage Centralized Network Management
Wireless
• IEEE 802.11a/b/g compliant
• MAC Filter
• 64/128-bits WEP encryption
• IEEE 802.1x (EAP-MD5/TLS/TTLS/PEAP)
• WPA/WPA-PSK/WPA2/WPA2-PSK
• Roaming
• Configurable output power
Hardware Specifications
• Status LED Indicator: PWR,LAN/DMZ 1 ~ 4,
WAN, AUX,WLAN, CARD
• Power adapter: 12 VDC
• Reset Button:Yes
• LAN/DMZ: 4-port switch, 10/100 Mbps Auto
MDI/MDIX
• WAN: 10/100 Mbps Auto MDI/MDIX
• Dial Backup: RS-232 on RJ-45 Null Modem Port
• Console: RS-232 on RJ-45 Port
Physical Specifications
• Dimensions: 220 (W) x 148 (D) x 30.5 (H) mm
• Weight: 517 g
Environmental Specifications
• Operating Temperature: 0°C ~ 50°C
• Operating Humidity: 20% ~ 95%
(non-condensing)
• Storage Temperature: -30°C ~ 60°C
• Storage Humidity: 20% ~ 95%
(non-condensing)
Certification
• EMC: FCC Part 15 Class B, CE-EMC Class B,
C-Tick Class B,VCCI Class B
• Safety: CSA International,CE EN60950-1
(UL60950-1, CSA60950-1, EN60950-1,
IEC60950-1)
• C-Tick
• VCCI
• Green Product and WEEE comply with
For more product information, visit us on the web www.ZyXEL.com
65-100-010115G 01/07
Copyright © 2007 ZyXEL Communications Corp. All rights reserved.ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp.All other brands,
product names, or trademarks mentioned are the property of their respective owners.All specifications are subject to change without notice.
WiFi Security
- WEP/WPA/WPA2
- 802.1x EAP Auth.
3G Data Card Access
- Primary WAN
- Backup WAN
- Dual WAN (LB)
ZyWALL 2WG
ZyW
Internet
3
G
Ca
r
d
Rem
ot
e
O
ffi
ce
C
entral Office/H
Q
IPSec
Tunnel
IPSec
Tunnel
Internet