ZyXEL Communications ZYWALL 2 WG User manual

Internet Security
Appliance
zywall 2wg
Internet Access through 3G
Networks (HSDPA, UMTS,
GPRS, EDGE, EVDO, CDMA)
Dual-band,Tri-mode Access
Point with Wireless
802.11a/b/g Network
Web-based Content Filtering
Services Available
Advanced ZyNOSTM ICSA
Certified SPI Firewall and IPSec
VPN Protection
Configurable 4-Port
LAN/DMZ/WLAN Zones
■
■
■
■
■
Benefits
3G and Wi-Fi Mobile Broadband Security
Appliance for Remote Office (RO)/SOHO
Internet access through 3G networks
(HSDPA, UMTS, GPRS, EDGE, EVDO, CDMA)
The ZyWALL 2WG provides users even more convenient Internet access with 3G service to
eliminate the limitation of the wired network and extends the last-mile service wirelessly.
Incorporated the wired environment, the solution can apply Backup WAN and Load Balancing
features to various applications while offering more mobility with Wi-Fi connectivity. The
ZyWALL 2WG supports both HSDPA/CDMA Cellular networks. For a list of specific cards
supported, please see specifications.
Virtual Private Network (VPN) Connection
The ZyWALL 2WG supports ZyNOS ICSA-certified IPSec VPN suitable for deployments from
remote sites to the central server. As data encryption over the Internet ensures secure
transmission between two sites without expensive leased lines, global interconnectivity can
be achieved at a minimal cost. Thanks to the Redundant IPSec VPN feature, the ZyWALL
2WG’s dialup client will keep the connection running even the primary VPN connection fails.
Secured Firewall Protection
The ICSA-certified ZyNOS Firewall on the ZyWALL 2WG provides robust, reliable firewall
security with high performance. Based on Stateful Packet inspection and Denial of Service
(DoS) technology, it provides the first-line defense against hackers, network intruders and
other hazardous threats.
Secure Zone Technology
The ZyWALL 2WG offers the Secure Zone technology that SOHO users can simply deploy
access servers in a DMZ zone separated from the trusted local network (LAN). The DMZ
zone and WLAN zone have their own DHCP service, and all zones are securely segregated
by firewall rules.

Specifications
264856 - 08192005
For more product information, visit us on the web www.US.ZyXEL.com
Tel: [phone] • Fax: [phone] •Email: [email protected] • http://www.us.zyxel.com
ZyXEL North America
Copyright © 2007 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo is a registered trademark of ZyXEL Communications Corp. All
other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without
notice.
System Specifications
Mode of Operation
• Routing Mode
• Transparent Mode (Bridge)
• NAT (Network Address Translation)
• Dial Backup
Virtual Private Network
• 5 simultaneous IPSec VPN Connections
• DES/3DES/AES encryption
• Manual Key, IKE and PKI (X.509)
• IPSec NAT Traversal
• Xauth User Authentication
• Redundant VPN connection (VPN HA)
Firewall Security
• Transparent Firewall (Bridge mode)
• Stateful Packet Inspection
• DoS and DDoS Protection
• Real-time Attack Alert and Logs
Content Filtering
• Java/AactiveX/Cookie/ Proxy Blocking
• URL and Key word Blocking
• Web Content Filtering
Network
• DHCP client/server/relay
• PPPoE
• PP
System Management
• Web GUI (HTTP, HTTPS)
• Command Line Interface (Console, Telnet, SSH)
• Vantage Centralized Network Management
Wireless
• IEEE 802.11a/b/g compliant
• MAC Filter
• 64/128-bits WEP encryption
• IEEE 802.1x (EAP-MD5/TLS/TTLS/PEAP)
• WPA/WPA-PSK/WPA2/WPA2-PSK
• Roaming
• Configurable output power
Hardware Specifications
• Status LED Indicator: PWR, LAN/DMZ 1 ~ 4,
WAN, AUX, WLAN, CARD
• Power adapter: 12 VDC
• Reset Button: Yes
• LAN/DMZ: 4-port switch, 10/100 Mbps Auto
MDI/MDIX
• WAN: 10/100 Mbps Auto MDI/MDIX
• Dial Backup: RS-232 on RJ-45 Null Modem Port
• Console: RS-232 on RJ-45 Port
Physical Specifications
• Dimensions: 220 (W) x 148 (D) x 30.5 (H) mm
• Weight: 517 g
Environmental Specifications
• Operating Temperature: 0C ~ 50C
• Operating Humidity: 20% ~ 95% (non-condensing)
• Storage Temperature: -30C ~ 60C
• Storage Humidity: 20% ~ 95% (non-condensing)
Certification
• EMC: FCC Part 15 Class B, CE-EMC Class B,
C-Tick Class B, VCCI Class B
• Safety: CSA International, CE EN60950-1
(UL60950-1, CSA60950-1, EN60950-1, IEC60950-1)
• C-Tick
• VCCI
• Green Product and WEEE comply with
Supported Cards
EVDO
• Sierra Wireless 595 AirCard*
• Sprint AirCard 595*
• Verizon AirCard 595*
• Telus AirCard 595*
HSDPA
• Sierra Wireless 860 AirCard*
• Cingular/AT&T AirCard 860*
• Sierra Wireless 875 AirCard*
• Cingular/AT&T AirCard 875*
Application Diagram
Wi-Fi Security
- WEP/WPA/WPA2
- 802.1x EAP Auth.
3G Data Card Access
- Primary WAN
- Backup WAN
- Dual WAN (LB)
ZyWALL 2WG Internet
ZyWALL 70 UTM
3G Card
Remote Office Central Office/HQ
IPSec
Tunnel
IPSec
Tunnel
Internet
*We are neither affiliated any of the above brand name or trade marks nor doing promotion of their products. The above name or trademark belongs to the respective owner.