ZyXEL Communications ZyXEL ZyWALL 2WE User manual

ZyWALLTM 2WE
Internet Security Gateway with
Wireless Embedded for Tele-Home
The ZyWALL 2WE integrates the ZyWALL family’s
robust Firewall features and Wireless functionality
targeted toward telecommuters and home workers.
ICSA certification for Firewall and IPSec VPN
ensure security as well as interoperability with
ICSA-certified products from other vendors. VPN
features in the ZyWALL 2WE are enhanced,
offering 3DES data encryption rates of 2Mbps and
two VPN connections.
The ZyWALL 2WE with wireless embedded offers
the convenience of wireless access without
sacrificing security and performance. Additional
value-added benefits include Dial Backup and
Traffic Redirect, features that increase reliability by
supporting multiple Internet connections. Superior
reliability, a user-friendly Internet Wizard interface,
and unique design make the ZyWALL 2WE the
best choice in wireless Internet security gateways
for telecommuters and home workers.
VPN (Virtual Private Network) Connection
The ZyWALL 2WE supports ICSA certified IPSec VPN suitable for
remote site to central server deployment. Data encryption over
the Internet ensures secure transmission between two sites,
eliminating the necessity for expensive leased lines, and enabling
global interconnectivity at a minimal expense.
Secured Firewall Protection
The ICSA Firewall certified ZyWALL 2WE provides robust firewall
protection and reliable security. Based on Stateful Packet
Inspection and Denial of Service (DoS) technology, it provides the
first line of defense against hackers, network intruders, and other
hazardous threats.
Mobile Network for Telecommuters
The ZyWALL 2WE provides a wireless LAN environment for
telecommuters who desire freedom, flexibility, and instant access
to network resources. Based on IEEE 802.1x authentication
framework and RADIUS accounting records, the ZyWALL 2WE
offers the convenience of wireless LAN access without sacrificing
the security and reliability expected from cabled Firewall/
VPN solutions.
Traffic Redirection for Broadband Backup Connection*
The ZyWALL 2WE offers users increased reliability by supporting
Fail-Over and Fail-Back technology. Fail-Over and Fail-Back
technology forward WAN port traffic to backup ISDN or Analog
modems in the event of WAN port connection failure. Once
WAN port connections are reestablished, traffic automatically
returns. An additional gateway may also be connected to
the ZyWALL 2WE to ensure availability of the Internet through a
secondary local network. The ZyWALL 2WE backup features
increase reliability while decreasing device maintenance,
IT consulting costs, and daily operation losses.
Broadband Internet Access Sharing
The ZyWALL 2WE is equipped with a four-port 10/100 Ethernet
switch, allowing multiple users to share one broadband Internet
connection without the additional costs associated with external
switches or hubs.
* For future release
Benefits

Features
Specifications
Application Diagram
Rear Panel
65-100-002002
ZyWALLTM 2WE
Internet Security Gateway with Wireless Embedded for Tele-Home
Copyright© 2003 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo, ZyWALL, ZyNOS are registered trademarks of ZyXEL Communications Co. Other trademarks and service names
referenced are properties of their respective holders. All specifications are subject to change without notice.
*for future release
Corporate Headquarters
ZyXEL Communications Co.
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.com
http://www.zyxel.com.tw
North America
ZyXEL Communications Inc.
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.com
Germany
ZyXEL Deutschland GmbH.
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.de
Denmark
ZyXEL Communications A/S
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.dk
Norway
ZyXEL Communications A/S
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.no
Sweden
ZyXEL Communications A/S
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.zyxel.se
China
ZyXEL Communications
Co., Ltd (Shanghai)
Tel: [phone]
Fax: [phone]
Email: [email protected]
Hardware Specification
•Frame Ground
•Power: 12VDC
•LAN 1-4: 10/100Mbps Ethernet
•Reset Button
•WAN: 10/100Mbps Ethernet
•CON/AUX Switch
•RS-232 DB-9F: Console/Dial Back-up
•External Antenna
Operating Environment
• Operating Temperature: 0 ~ 40˚C
• Operating Humidity: 5 ~ 90%
(non-condensing)
Physical Specification
• Dimensions:
161mm(W) x 230mm(L) x 36mm(H)
• Weight: 609g
Virtual Private Network
•Two VPN connections
Firewall Security
•Packet Filter
•Stateful Packet Inspection
•Denial of Service
•Attack Alert and logs
•Access Control of Service
Routing Support
•IP Routing: UDP, TCP, ICMP,
ARP, RIP V1 and RIP V2
•Programmable Static Route
•IP Multicast
IP Management
•DHCP client/server
•Multi-NAT/SUA
Content Filtering
•Java/ActiveX/Cookie/Proxy Blocking
•URL Blocking
ISP Authentication
•RR Manager
•PPPoE
•PPTP
Network Management
•Web-based configurator
•Telnet remote access support
•TFTP/FTP for firmware upgrade/backup
•SNMP support
Application
•Built-in Diagnostic Tool
•DNS proxy
•Internet Time Calibration
•Dynamic DNS
•Traffic Redirect
•Dial Backup*
•UPnP
Wireless
•IEEE802.11b compliant
•64/128-bits WEP Encryption
•IEEE802.1x Port-based
Authentication with RADIUS Client
World Wide Web
(ZyXEL/SSH Sentinel)
ISP
URL Blocking
State
f
ul Ins
p
ectio
n
Denial of
S
ervic
e
Hackers
Virtual Private Network
Internet Security Appliances for Telecommuters/Home Workers
Notebook running
VPN Client Program
Data Base
Internet Server
Mail Server
Web Server
INTERNET
INTERNET
Telecommuters/Home Workers
Headquarters
ZyWALL 2WE
LAN (Trusted Network)
LAN (Trusted Network)
Z
y
WALL 2W
E
ZyWALL