ZyXEL Communications ZyXEL ZyWALL 35 User manual

ZyWALL 35
Features
Recommended for
Specifications
Application Diagram
Virtual Private Network
• 35 simultaneous IPSec VPN Connections
• Max. 40Mbps 3DES/AES VPN performance
• Manual Key, IKE and PKI (X.509)
• IPSec NAT Traversal
• Xauth User Authentication
Firewall Security
• Transparent Firewall (bridge mode)
• Stateful Packet Inspection
• DoS and DDoS Protection
• Real-time Attack Alert and Logs
Content Filtering
• Java/Active X/Cookie/Proxy Blocking
• URL and Keyword Blocking
• Web Content Filtering (Bluecoat)
Traffic Management
• Policy-based Traffic Shaping
• Priority-bandwidth Utilization
• Guaranteed Bandwidth Management
• Maximum Bandwidth Management
High Availability
• Dual WAN ports Auto fail-over and
fail-back
• Dual WAN ports for Load Balancing
• Dial Backup
Network
• DHCP client/relay/server
• PPPoE
• PPTP
System Management
• WebGUI (HTTP and HTTPS)
• Command Line Interface
(Console, Telnet, SSH)
• Firmware Upgrade
(WebGUI, TFTP/FTP/SFTP)
• Vantage Centralized Network Management
Wireless
• IEEE 802.11b/11g compliant
• 128-bits WEP Encryption
• IEEE 802.1x Port-Based Authentication
with RADIUS Client
• IPSec VPN over WLAN
• WPA
Hardware Specification
• Power: 12VDC
• 4-port LAN/DMZ switch:
10/100Mbps Ethernet
• WAN1 & WAN2: 10/100Mbps Ethernet
• Reset Button
• RS-232 DB9F: Console
• RS-232 DB9M: Dial Backup
• Extension Card Slot for Wireless &
Optional service*
Physical Specification
• Dimensions
242(L) x 175(D) x 35.5(H) mm
• Weight: 1,200g
Operating Environment
• Operating Temperature: 0 ~ 50ºC
• Operating Humidity: 20 ~ 95%
(non-condensing)
MTBF (Bellcore Model)
• 41.8 years
Internet Security Appliance
• Small and Medium Businesses looking for a cost-effective and easy-to-deploy security appliance and VPN connection
• Businesses requiring reduced operational costs through flexible traffic management
• Businesses needing a dynamically updated database for accurate and effective Web Content Filtering services
(powered by Bluecoat)
• Businesses that want to increase network efficiency, reliability and perform bandwidth load balancing
• Businesses looking for flexible port design with optional DMZ configuration
* For future release
INTERNET
VPN Tunnel
Server
Content
filtering
Firewall
Internet Security Appliance
Branch Office/Remote Office
LAN
(Trusted Network)
World Wide Web
DSL Modem
DSL Modem
Headquarters
Hackers
World Wide Web
Hackers
World Wide Web
Hackers
ZyWALL 70
ZyWALL 35
Content filtering
Firewall
SOHO
ZyWALL 5
Content filtering
Firewall
DSL
Modem

ZyWALL 35
Internet Security Appliance
65-100-003501
Feature Matrix
(*) For future release
Copyright©2005 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo are registered trademarks of ZyXEL Communications Corp. Other trademarks and service names referenced are properties of their respective holders. All specifications are subject to change without notice.
Corporate Headquarters
ZyXEL Communications Corp.
Tel: [phone]
Fax:[phone]
Email: [email protected]
http://www.zyxel.com
http://www.zyxel.com.tw
Denmark
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.dk
Finland
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fi
France
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fr
Germany
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.de
North America
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.us.zyxel.com
Norway
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.no
Spain
Tel: [phone] Fax: [phone]
Email: [email protected]
http:// www.zyxel.es
Sweden
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.se
Model Name ZyWALL 2 ZyWALL 2WE ZyWALL 10W ZyWALL 35 ZyWALL 70
Performance
Firewall Throughput 12Mbps 12Mbps 30Mbps 90Mbps 100Mbps
VPN 3DES/AES Throughput 2.2Mbps 2.2Mbps 16Mbps 40Mbps 50Mbps
User Licenses Unlimited Unlimited Unlimited Unlimited Unlimited
Concurrent Sessions 1,024 1,024 1,024 10,000 10,000
Simultaneous IPSec VPN connection 2 2 10 35 70
Physical Specification
Ports (10/100Mbps Auto sensing & 4xLAN, 1xWAN 4xLAN, 1xWAN 1xLAN, 1xWAN 4xLAN/DMZ, 1xLAN, 4xDMZ,
MDI/MDIX) 2xWAN 2xWAN
Extension Card Slot na na •, Wireless Services •, Wireless and •, Wireless and
Optional Services* Optional Services*
RS-232 console • • • • •
Power Supply 12VDC 12VDC 12VDC 12VDC 100~240VAC
Rack-Mounted na na na • •
Wall-Mounted • • • • na
Dimensions (L x D x H, mm) 181 x 128 x 36 233 x 155 x 30 233 x 155 x 30 242 x 175 x 35.5 355 x 200 x 55
Weight 330g 525g 525g 1,200g 2,600g
Others na 2 antenna na na na
Mode of Operation
Routing/NAT/SUA Mode • • • • •
Transparent Mode na na na • •
Dial Backup • • • • •
Firewall (ICSA Certified)
IP Protocol/Packet Filter • • • • •
DoS and DDoS protections • • • • •
Stateful Packet Inspection • • • • •
Transparent Firewall na na na • •
Web Content Filtering • • • • •
VPN (ICSA Certified)
Manual key, IKE • • • • •
PKI (X.509) • na • • •
Encryption (DES, 3DES and AES) • • • • •
Authentication (SHA-1 and MD5) • • • • •
IPSec NAT Traversal • • • • •
XAuth User Authentication (Internal • • • • •
Database and External RADIUS)
Traffic Management
Guaranteed/Maximum Bandwith na na na • •
Policy-based Traffic shaping na na • • •
Priority-bandwidth utilization na na na • •
High Availability (HA)
Auto fail-over, fail-back • • • • •
Dial Backup • • • • •
Dual WAN ports for WAN backup na na na • •
and Load Balance
System Management
WebGUI (HTTP and HTTPS) • HTTP only • • •
Firmware Upgrade •WebGUI, • • •
(WebGUI, TFTP/FTP/SFTP) TFPT, FTP
Vantage CNM • na • • •
Wireless
IEEE 802.11b Compliant na • • • •
IEEE 802.11g Compliant na na na • •
IEEE 802.1x Authentication (Internal na • • • •
Database and External RADIUS)
Logging/Monitoring
Centralized Logs • • • • •
Attack alert • • • • •
System status monitoring • • • • •
This product is designed for the 2.4 GHz WLAN network throughout the EC region