ZyXEL Communications ZyXEL ZyWALL 5 User manual

ZyWALL 5
Features
Recommended for
Specifications
Application Diagram
Virtual Private Network
• 10 simultaneous IPSec VPN Connections
Max. 25Mbps 3DES/AES VPN performance
• Manual Key, IKE and PKI (X.509)
• IPSec NAT Traversal
Firewall Security
• Transparent Firewall (bridge mode)
• Stateful Packet Inspection
• DoS and DDoS Protection
• Real-time Attack Alert and Logs
Traffic Management
• Policy-based Traffic Shaping
• Priority-bandwidth Utilization
• Guaranteed and Maximum
Bandwidth Allocation
Content Filtering
• Java/Active X/Cookie/Proxy Blocking
• URL and Keyword Blocking
• Web Content Filtering (Bluecoat)
Network
• DHCP client/relay/server
• PPPoE
• PPTP
System Management
• WebGUI (HTTP and HTTPS)
• Command Line Interface
(Console, Telnet, SSH)
• Firmware Upgrade
(WebGUI, TFTP/FTP/SFTP)
• Vantage Centralized Network Management
Wireless
• IEEE 802.11b/11g compliant
• 128-bits WEP Encryption
• IEEE 802.1x Port-Based Authentication
with RADIUS Client
• IPSec VPN over WLAN
• WPA
Hardware Specification
• Power: 12VDC
• 4-port LAN/DMZ switch:
10/100Mbps Ethernet
• WAN: 10/100Mbps Ethernet
• Reset Button
• RS-232 DB9F: Console
• RS-232 DB9M: Dial Backup
• Extension Card Slot for Wireless &
Optional service*
Physical Specification
• Dimensions:
242(L) x 175(D) x 35.5(H) mm
• Weight: 1,200g
Operating Environment
• Operating Temperature: 5ºC ~ 45ºC
• Operating Humidity: 20% ~ 95%
(non-condensing)
Certification
• EMC: FCC Class B, CE-EMC Class B,
C-Tick Class B, VCCI Class B
• Safety: CSA International, CE EN60950-1
MTBF (Bellcore model)
• 41.7 years
Internet Security Appliance
• Small Offices/Home Offices (SOHO) looking for a cost-effective security appliance and VPN connection
• SOHO requiring reduced operational costs through flexible traffic management
• SOHO needing a dynamically updated database for accurate and effective Web Content Filtering services (powered by Bluecoat)
• SOHO or workgroups requiring transparent firewall for flexible and easy deployment
• SOHO looking for flexible port design with optional DMZ configuration
* For future release
INTERNET
VPN Tunnel
Server
Content
filtering
Firewall
Internet Security Appliance
Branch Office/Remote Office
LAN
(Trusted Network)
World Wide Web
DSL Modem
DSL Modem
Headquarters
Hackers
World Wide Web
Hackers
World Wide Web
Hackers
ZyWALL 70
ZyWALL 35
Content filtering
Firewall
SOHO
ZyWALL 5
Content filtering
Firewall
DSL
Modem

ZyWALL 5
Internet Security Appliance
65-100-003506
Feature Matrix
(*) For future release
Copyright©2005 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo are registered trademarks of ZyXEL Communications Corp. Other trademarks and service names referenced are properties of their respective holders. All specifications are subject to change without notice.
Corporate Headquarters
ZyXEL Communications Corp.
Tel: [phone]
Fax:[phone]
Email: [email protected]
http://www.zyxel.com
http://www.zyxel.com.tw
Denmark
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.dk
Finland
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fi
France
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.fr
Germany
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.de
North America
Tel: [phone]
Fax: [phone]
Email: [email protected]
http://www.us.zyxel.com
Norway
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.no
Spain
Tel: [phone] Fax: [phone]
Email: [email protected]
http:// www.zyxel.es
Sweden
Tel: [phone] Fax: [phone]
Email: [email protected]
http://www.zyxel.se
Model Name ZyWALL 2 ZyWALL 5 ZyWALL 35 ZyWALL 70
Performance
Firewall Throughput 12Mbps 80Mbps 90Mbps 100Mbps
VPN 3DES/AES Throughput 2.2Mbps 25Mbps 40Mbps 50Mbps
User Licenses Unlimited Unlimited Unlimited Unlimited
Concurrent Sessions 1,024 6,000 10,000 10,000
Simultaneous IPSec VPN connection 2 10 35 100
Physical Specification
Ports (10/100Mbps Auto 4xLAN, 1xWAN 4xLAN/DMZ, 4xLAN/DMZ, 1xLAN, 4xDMZ,
sensing & MDI/MDIX) 1xWAN 2xWAN 2xWAN
Extension Card Slot na •, Wireless and •, Wireless and •, Wireless and
Optional Services* Optional Services* Optional Services*
RS-232 console • • • •
Power Supply 12VDC 12VDC 12VDC 100 ~ 240VAC
Rack-Mounted na • • •
Wall-Mounted • • • na
Dimensions (LxDxH, mm) 181 x 128 x 36 242 x 175 x 35.5 242 x 175 x 35.5 355 x 200 x 55
Weight 330g 1,200g 1,200g 2,600g
Mode of Operation
Routing/NAT/SUA Mode • • • •
Transparent Mode na • • •
Dial Backup • • • •
Firewall (ICSA Certified)
IP Protocol/Packet Filter • • • •
DoS and DDoS protections • • • •
Stateful Packet Inspection • • • •
Transparent Firewall na • • •
Web Content Filtering • • • •
VPN (ICSA Certified)
Manual key, IKE • • • •
PKI (X.509) • • • •
Encryption (DES, 3DES and AES) • • • •
Authentication (SHA-1 and MD5) • • • •
IPSec NAT Traversal • • • •
Xauth User Authentication (Internal • • • •
Database and External RADIUS)
Traffic Management
Guaranteed/Maximum Bandwith na • • •
Policy-based Traffic shaping na • • •
Priority-bandwidth utilization na • • •
High Availability (HA)
Auto fail-over, fail-back • • • •
Dial Backup • • • •
Dual WAN ports for WAN na na • •
backup and Load Balance
System Management
WebGUI (HTTP and HTTPS) • • • •
Firmware Upgrade • • • •
(WebGUI, TFTP/FTP/SFTP)
Vantage CNM • • • •
Wireless
IEEE 802.11b Compliant na • • •
IEEE 802.11g Compliant na • • •
IEEE 802.1x Authentication (Internal na • • •
Database and External RADIUS)
Logging/Monitoring
Centralized Logs • • • •
Attack alert • • • •
System status monitoring • • • •
This product is designed for the 2.4 GHz WLAN network throughout the EC region