ZyXEL Communications ZyWALL 70 User manual

ZyWALL 70
Features
Recommended for
Specifications
Application Diagram
Virtual Private Network
• 100 simultaneous IPSec VPN Connections
• Max. 50Mbps 3DES/AES VPN performance
• Manual Key, IKE and PKI (X.509)
• IPSec NAT Traversal
Firewall Security
• Transparent Firewall (bridge mode)
• Stateful Packet Inspection
• DoS and DDoS Protection
• Real-time Attack Alert and Logs
Traffic Management
• Dual WAN auto fail-over, fall-back,
policy router
• Dual WAN Load Balancing
• Policy-based Traffic Shaping
• Priority-bandwidth Utilization
• Guaranteed and Maximum
Bandwidth Allocation
Content Filtering
• Java/Active X/Cookie/Proxy Blocking
• URL and Keyword Blocking
• Web Content Filtering (Bluecoat)
Network
• DHCP client/relay/server
• PPPoE
• PPTP
System Management
• WebGUI (HTTP and HTTPS)
• Command Line Interface
(Console, Telnet, SSH)
• Firmware Upgrade
(WebGUI, TFTP/FTP/SFTP)
• Vantage Centralized Network Management
Wireless (Optional)
• IEEE 802.11b/11g compliant
• 128-bits WEP Encryption
• IEEE 802.1x Port-Based Authentication
with RADIUS Client
• IPSec VPN over WLAN
• WPA
Hardware Specification
• Power: 100 ~ 240 VAC
• LAN: 10/100 Mbps Ethernet
• WAN1 & WAN2: 10/100 Mbps Ethernet
• 4-port DMZ: 10/100 Mbps Ethernet
• Reset Button
• RS-232 DB9F: Console
• RS-232 DB9M: Dial Backup
• Extension Card Slot for Wireless ready
& optional service*
Physical Specification
• Dimensions:
355(L) x 200(D) x 55(H) mm
• Weight: 2,600g
Operating Environment
• Operating Temperature: 5 ~ 45ºC
• Operating Humidity: 20 ~ 95%
(non-condensing)
Certification
• EMC: FCC Class B, CE-EMC Class B,
C-Tick Class B, VCCI Class B
• Safety: CSA International, CE EN60950-1
MTBF (Bellcore model)
• 40.9 years
Internet Security Appliance
• Small and Medium Businesses looking for a cost-effective security appliance and VPN concentrator
• Businesses that have two Internet connections and require non-stop Internet services
• Businesses that are concerned about ease-of-use and remote management through a secure connection
• Organizations with up to 200 users
• Businesses that need a dynamically updated database to provide accurate web content filtering services (powered by Bluecoat)
* For future release
Internet
VPN Tunnel
Server
Content
filtering
Firewall
Internet Security Appliance
Branch Office/Remote Office
LAN
(Trusted Network)
World Wide Web
DSL Modem
DSL Modem
Headquarters
Hackers
World Wide Web
Hackers
World Wide Web
Mobile User
(Notebook with ZyWALL
Remote Security Client)
Hackers
ZyWALL 70
ZyWALL 35
Content filtering
Firewall
SOHO
ZyWALL 5
Content filtering
Firewall
DSL
Modem

ZyWALL 70
Internet Security Appliance
Copyright©2005 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo are registered trademarks of ZyXEL Communications Corp. Other trademarks and service names referenced are properties of their respective holders. All specifications are subject to change without notice. 65-100-007006
Feature Matrix
(*) For future release
Model Name ZyWALL 2 ZyWALL 5 ZyWALL 35 ZyWALL 70
Performance
Firewall Throughput 12Mbps 80Mbps 90Mbps 100Mbps
VPN 3DES/AES Throughput 2.2Mbps 25Mbps 40Mbps 50Mbps
User Licenses Unlimited Unlimited Unlimited Unlimited
Concurrent Sessions 1,024 6,000 10,000 10,000
Simultaneous IPSec VPN connection 2 10 35 100
Physical Specification
Ports (10/100Mbps Auto 4xLAN, 1xWAN 4xLAN/DMZ, 4xLAN/DMZ, 1xLAN, 4xDMZ,
sensing & MDI/MDIX) 1xWAN 2xWAN 2xWAN
Extension Card Slot -•, Wireless and •, Wireless and •, Wireless and
Optional Services* Optional Services* Optional Services*
RS-232 console • • • •
Power Supply 12VDC 12VDC 12VDC 100 ~ 240VAC
Rack-Mounted - • • •
Wall-Mounted • • • -
Dimensions (LxDxH, mm) 181 x 128 x 36 242 x 175 x 35.5 242 x 175 x 35.5 355 x 200 x 55
Weight 330g 1,200g 1,200g 2,600g
Mode of Operation
Routing/NAT/SUA Mode • • • •
Transparent Mode - • • •
Dial Backup • • • •
Firewall (ICSA Certified)
IP Protocol/Packet Filter • • • •
DoS and DDoS protections • • • •
Stateful Packet Inspection • • • •
Transparent Firewall - • • •
Web Content Filtering • • • •
VPN (ICSA Certified)
Manual key, IKE • • • •
PKI (X.509) • • • •
Encryption (DES, 3DES and AES) • • • •
Authentication (SHA-1 and MD5) • • • •
IPSec NAT Traversal • • • •
Xauth User Authentication (Internal • • • •
Database and External RADIUS)
Traffic Management
Guaranteed/Maximum Bandwith - • • •
Policy-based Traffic shaping - • • •
Priority-bandwidth utilization - • • •
High Availability (HA)
Auto fail-over, fall-back • • • •
Dial Backup • • • •
Dual WAN ports for WAN - - • •
backup and Load Balance
System Management
WebGUI (HTTP and HTTPS) • • • •
Firmware Upgrade • • • •
(WebGUI, TFTP/FTP/SFTP)
Vantage CNM • • • •
Wireless
IEEE 802.11b Compliant - • • •
IEEE 802.11g Compliant - • • •
IEEE 802.1x Authentication (Internal - • • •
Database and External RADIUS)
Logging/Monitoring
Centralized Logs • • • •
Attack alert • • • •
System status monitoring • • • •
Corporate Headquarters
ZyXEL Communications Corp.
Tel: [phone]
Fax:[phone]
Email: [email protected]
http://www.zyxel.com
http://www.zyxel.com.tw
Denmark
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.dk
Finland
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fi
France
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fr
Germany
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.de
North America
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.us.zyxel.com
Norway
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.no
Spain
Tel: [phone] Fax: [phone]
Email: [email protected]
http:// www.zyxel.es
Sweden
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.se