ZyXEL USG110
Contents
1. My A lt Ny LOWE Ny i Ny Secure and Always Online Networking Small to Medium sized Businesses High performance high value Next Generation Firewall NGFW for small and medium sized businesses Anti malware protection with firewall anti virus anti spam content filtering IDP next generation application intelligence and SSL inspection Robust SSL IPSec and L2TP over IPSec VPN connectivity and VPN high availability HA Built in WLAN controller for centralized AP management and effortless WLAN scalability of up to 18 APs Comprehensive mobile broadband USB modem compatibility and multi WAN load balancing failover and fall back support ZyXEL 4 Breen USG310 210 110 Unified Security Gateway Advanced Series More and more people are relying on smart devices and cloud based applications for business communications This means that high network availability is critical for business continuity more Wi Fi is demanded in the workplace and traditional regulatory measures for application usage are obsolete Without an effective solution to control optimize and block social productivity and other Web applications SMBs risk losing work productivity and exposing company networks to new Web threats The new ZyXEL USG Advanced Series are Next Generation Firewalls NGFW designed to meet the mobility anti malware and policy enforcement challenges in SMBs The integrated WLAN controller offers ea2. access to a variety of cloud based applications za O co Remote Network Inventory File lesion Desktop Extend Server Sharing cmavis i BI Web OA ERP Email NETFLIY Anti Virus ntrusion System Apps CRM System Server m a as Anti Spam TE DMZ Resources i D Application Intelligence nes SOA Productive Web applications Google Apps for Business J Office365 ORACLE Wweboffice gt B a B Workgroup Unified Security Gateway k Viruses intrusions malicious Websites email spam 9 I n CJ lt O Microsoft a ea oO Azure Remote Network Inventory File Desktop Extend Server Sharing e Branch BAZ as O amp bi amp BI Web Pca eil t t USG1900 ystem pps ystem Server IPSec VPN Unified Security USG110 Gateway DMZ Resources Unified Security Gateway Headquarters IPSec VPN HA IPSec VPN Partner 1 7 Office USG1100 Unified Security IPSec VPN IPSec VPN Traveling Gateway Employee SSL VPN L2TP over z o IPSec VPN Traveling m E Employee USG40W Unified Security Traveling Gateway Employee ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Specifications Model USG310 USG210 USG110 Hardware Specifications 10 100 1000 Mbps RJ 45 ports auc T E E Rack mountable es ves ves O System Capacity amp Performance SPIfirewali throughput Mbps 5000 9 tO UTMthroughput AV and 1DP J 008 Included SSLVPNuserno S o o 5 Custom
3. WANs VPN High Availability HA Unified Security Policy Anti Virus Anti Spam Multi WAN amp Mobile Broadband The ZyXEL USG Advanced Series provides non stop Internet uptime with multi WAN and mobile broadband support Multi WAN works with two or more Ethernet WAN connections for active active WAN load balancing or active passive failover Comprehensive mobile broadband USB modems are also supported for WAN backup VPN High Availability HA ZyXEL USGs feature VPN HA to satisfy the demands of the most mission critical VPN deployments Supporting advanced GRE over IPSec technology users can deploy two IPSec VPN tunnels for active active VPN load balancing or active passive failover Unified Security Policy Unified security policy offers object based management and a unified configuration interface for firewall and all security related policies Users can easily apply all policy criteria to every UTM feature reduce configuration time and get more streamlined policy management Anti Virus Powered by Kaspersky SafeStream II gateway anti virus ZyXEL USGs provide comprehensive and real time protection against malware threats before they enter the network ZyXEL USGs can identify and block over 650 000 viruses right at the gate and provide high speed scanning with stream based virus scanning technology Anti Spam With a cloud based IP reputation system ZyXEL anti spam can deliver accurate zero hour spa
4. and more consistent policy management From a single interface users can apply all policy criteria to every UTM feature with reduced complexity The integrated WLAN controller also enables users to management up to 18 APs from a centralized user interface More Wi Fi Addressing the trend of BYOD the ZyXEL USG Advanced Series helps SMBs satisfy the Wi Fi demand for an exploding amount of smart devices The Series is integrated with a WLAN controller that enables businesses to easily scale up the WLAN and provide Wi Fi in multiple areas like meeting rooms and guest reception areas Model List USG310 USG210 Unified Security Gateway Unified Security Gateway ee a a a Se D iii ri e 8 x GbE RJ 45 2 x USB multi WAN amp mobile broadband e 7 x GbE RJ 45 2 x USB multi WAN amp mobile broadband e 5 000 Mbps firewall throughput e 1 900 Mbps firewall throughput e 650 Mbps VPN throughput e 500 Mbps VPN throughput e 450 Mbps IDP throughput e 350 Mbps IDP throughput e 400 Mbps AV throughput e 300 Mbps AV throughput e 400 Mbps AV and IDP throughput e 300 Mbps AV and IDP throughput USG110 Unified Security Gateway e 7 x GbE RJ 45 2 x USB multi WAN amp mobile broadband e 1 600 Mbps firewall throughput e 400 Mbps VPN throughput e 300 Mbps IDP throughput e 250 Mbps AV throughput e 250 Mbps AV and IDP throughput ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Feature Introduction Multiple
5. user database e Microsoft Windows Active Directory integration e External LDAP RADIUS user database e XAUTH IKEv2 with EAP VPN authentication e Web based authentication e Forced user authentication transparent authentication e IP MAC address binding e SSO Single Sign On support Licenses Security Device High Availability HA e Active passive failover mode e Device failure detection and notification e Supports ICMP and TCP ping check e Link monitoring e Configuration auto sync System Management e Role based administration e Multiple administrator logins e Multi lingual Web GUI HTTPS and HTTP e Command line interface console Web console SSH and TELNET e SNMP v2c MIB II Application Intelligence e System configuration rollback e Firmware upgrade via FTP FTP TLS and Web GUI e Dual firmware images Logging and Monitoring e Comprehensive local logging e Syslog to up to 4 servers e Email alerts to up to 2 servers e Real time traffic monitoring e Built in daily report e Advanced reporting with Vantage Report Model Kaspersky Anti Virus Content Filtering Anti Spam amp IDP 1 year 1 year 1 year 1 year 2 years 2 years 2 years 2 years 1 year 1 year 1 year 1 year 2 years 2 years 2 years 2 years 1 year 1 year 1 year 1 year 2 years 2 years 2 years 2 years Notes 1 ZyXEL USGs can be purchased with 13 month bundled licenses anti virus anti spam and content filtering which incl
6. Customizable protection profile e Customized signatures supported e SSL HTTPS inspection support Application Intelligence and Optimization e Granular control over the most important applications e Identifies and controls over 3 000 applications and behaviors e Supports over 15 application categories e Application bandwidth management e Supports user authentication e Real time statistics and reports e SSL HTTPS inspection support Anti Virus e Supports Kaspersky anti virus signatures e Identifies and blocks over 650 000 viruses e Stream based anti virus engine e HTTP FTP SMTP POP3 and IMAP4 protocol support e Automatic signature updates e No file size limitation e SSL HTTPS inspection support Anti Spam e Transparent mail interception via SMTP and POP3 protocols e Configurable POP3 and SMTP ports e Sender based IP reputation filter e Recurrent Pattern Detection RPD technology e Zero hour virus outbreak protection e X Header support e Blacklist and whitelist support e Supports DNSBL checking e Spam tag support e Statistics report Content Filtering e Social media filtering e Malicious Website filtering e URL blocking and keyword blocking e Blacklist and whitelist support e Blocks java applets cookies and ActiveX e Dynamic cloud based URL filtering database e Unlimited user license support e Customizable warning messages and redirection URL e SSL HTTPS inspection support Unified
7. Security Policy e Unified policy management interface e Supported UTM features anti virus anti spam IDP content filtering application intelligence firewall ACL e 3 tier configuration object based profile based policy based e Policy criteria Zone source and destination IP address user time WLAN Management e ZyXEL AP Controller APC 1 0 compliant e Client RSSI threshold to prevent sticky clients e IEEE 802 1x authentication Wireless Layer 2 isolation e Captive portal Web authentication e Customizable captive portal page e Dynamic guest accounts e RADIUS authentication e Wi Fi Multimedia WMM wireless QoS e CAPWAP discovery protocol e ZyXEL Wireless Optimizer ZWO AP planning Mobile Broadband e WAN connection failover via 3G and 4G USB modems e Auto fallback when primary WAN recovers 4G USB modem support available in future firmware upgrades Networking e Routing mode bridge mode and hybrid mode e Ethernet and PPPoE e NAT and PAT e VLAN tagging 802 1Q e Virtual interface alias interface e Policy based routing user aware e Policy based NAT SNAT e Dynamic routing RIPv1 v2 and OSPF e DHCP client server relay e Dynamic DNS support e WAN trunk for more than 2 ports e Per host session limit e Guaranteed bandwidth e Maximum bandwidth e Priority bandwidth utilization ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Authentication e Local
8. c in SSL encrypted connections and block threats that usually go unseen Content Filtering ZyXEL content filtering helps screen access to websites that are not business related or malicious With a massive cloud based database of over 140 billion URLs that are continuously analyzed and tracked ZyXEL provides highly accurate broad and instant protection against malicious Web content ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Application Diagram Anti malware protection and application optimization e Enabling anti virus anti spam and intrusion prevention business networks gain deep extensive protection against all types of malware threats e Content filtering enables businesses to deny access to Websites that are malicious or not business related e Application intelligence technology not only enable businesses to block or throttle non productive Web applications but also optimize Web applications that increase productivity VPN application e Branch offices partners and home users can deploy ZyXEL USGs for site to site IPSec VPN connections e Branch offices can additionally deploy IPSec VPN HA load balancing and failover for always online VPN connectivity e Remote users can securely access company resources with their computers or smartphones via SSL IPSec and L2TP over IPSec VPN e The headquarter USG can also establish an IPSec VPN connection with Microsoft Azure for secured
9. izablezones J es es S O IPv6support es S S es VLAN interface g gt O WLAN Management AP Controller APO ver o Jo o oo o o oo S w SOS Key Software Features Firewall es es S SO Antivirus es es es antispam ves e ContentFiltering CF es es es Application intelligence and optimization Ys es es O Power Requirements Others MTBF hr 560 811 5 787 109 3 787 109 3 Physical Specifications Item dimensions WxDxH mm in 430 x 250 x 44 16 93 x 9 84 x 1 73 300 x 178 x 44 11 81 x 7 x 1 73 300 x 178 x 44 11 81 x 7 x 1 73 Item weight kg Ib 3 3 7 28 2 4 4 2 4 4 1 Actual performance may vary depending on network conditions and activated applications 2 Maximum throughput based on RFC 2544 1 518 byte UDP packets 3 VPN throughput measured based on RFC 2544 1 424 byte UDP packets 4 AV and IDP throughput measured using the industry standard HTTP performance test 1 460 byte HTTP packets Testing done with multiple flows 5 Maximum sessions measured using the industry standard IXIA IxLoad testing tool ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Features Set Software Features Firewall e ICSA certified firewall certification in progress e Routing and transparent bridge modes e Stateful packet inspection e User aware policy enforcement e SIP H 323 NAT traversal e ALG support for customized ports e Protocol anomaly detection and protec
10. m outbreak protection by analyzing up to the minute sender reputation data from highly diverse traffic sources It can detect spam outbreaks in the first few minutes of emergence regardless of spam language or format Integrated WLAN Controller Application Intelligence SSL Inspection Content Filtering Robust VPN ZyXEL USGs support high throughput IPSec L2TP over IPSec and SSL VPN for a wide range of site to client and site to site VPN deployments Reinforced with the advanced SHA 2 encryption the ZyXEL USGs provide the most secure VPN for business communications Integrated WLAN Controller The integrated WLAN controller supports CAPWAP and enables centralized authentication and access management of multiple APs in the network The ZyXEL USG Advanced Series can manage 2 APs by default and up to 18 APs with license upgrade Application Intelligence ZyXEL s USG Advanced Series can identify categorize and control over 3 000 social gaming productivity and other Web applications and behaviors Users can prioritize productive applications throttle acceptable ones and block unproductive applications to boost productivity and prevent bandwidth abuse SSL Inspection SSL inspection enables the ZyXEL Advanced Series to provide not only comprehensive security but also deeper policy enforcement It enables the USG s application intelligence IDP content filtering and anti virus to inspect traffi
11. sy WLAN scalability for the growing demand for Wi Fi while WAN and VPN load balancing and failover ensures non stop business communications ZyXEL USGs offer industry leading anti virus anti spam content filtering and application intelligence technology for effective application optimization and comprehensive network protection Benefits Always online The ZyXEL USG Advanced Series offers SMBs high network availability for always online communications It features multi WAN load balancing and failover and a comprehensive mobile broadband USB modem support list for WAN backup On top of that the Series supports IPSec load balancing and failover to provide added resiliency for the most mission critical VPN deployments Protection and optimization The ZyXEL USG Advanced Series provides extensive anti malware protection and effective control of Web applications like Facebook Google Apps and Netflix with industry leading firewall anti virus anti spam content filtering IDP and application intelligence These security measures are enhanced with SSL inspection which helps block threats that are hidden in SSL encrypted connections and facilitates deeper policy enforcement Nabs labs GED stc Basic QY rewa sme ZyXEL USG310 210 110 Unified Security Gateway Advanced Series Streamlined management Unified security policy streamlines the configuration of firewall and every security feature to offer faster easier
12. tion e Traffic anomaly detection and protection e Flooding detection and protection e DoS DDOS protection IPv6 Support e IPv6 Ready gold logo certification in progress e Dual stack e IPv4 tunneling 6rd and 6to4 transition tunnel e IPv6 addressing e DNS e DHCPv6 e Bridge e VLAN e PPPoE e Static routing e Policy routing e Session control e Firewall and ADP e IPSec VPN e Intrusion Detection and Prevention IDP e Application intelligence and optimization e Content filtering e Anti virus anti malware e Anti spam IPSec VPN e ICSA certified IPSec VPN certification in progress e Encryption AES 256 bit 3DES and DES e Authentication SHA 2 512 bit SHA 1 and MD5 e Key management manual key IKEv1 and IKEv2 with EAP e Perfect forward secrecy DH groups support 1 2 5 e IPSec NAT traversal e Dead peer detection and relay detection e PKI X 509 certificate support e VPN concentrator e Simple wizard support e VPN auto reconnection e VPN High Availability HA load balancing and failover e L2TP over IPSec e GRE and GRE over IPSec e NAT over IPSec e ZYXEL VPN client provisioning SSL VPN e Supports Windows and Mac OS X e Supports full tunnel mode e Supports 2 step authentication e Customizable user portal Intrusion Detection and Prevention IDP e Routing and transparent bridge mode e Signature based and behavior based scanning e Automatic signature updates e
13. ude a 1 month trial 2 Licenses can be easily activated renewed and managed at myZyXEL com www myzyxel com 3 License bundles may vary according to region Please contact your local sales representative for more information VPN Management and Reporting Model SSL VPN Managed APs IPSec VPN Client Vantage Report For 1 device For 5 devices For 25 devices For 100 devices For 1 client For 5 clients For 10 clients For 50 clients Access Point Compatibility List NWA3000 N Series NWA5000 Series NWA5120 Series Series Unified Pro Access Point Managed Access Point Unified Access Point NWA3160 N NWA3560 N NWA3550 N NWA5160N NWA5560 N NWA5550 N NWA5121 NI NWA5121 N NWA5123 NI Functions Data forwarding Local bridge Local bridge Local bridge are Copyright 2014 ZyXEL Communications Corp All rights reserved ZyXEL ZyXEL logo are registered trademarks 5 100 00814001 05 14 C of ZyXEL Communications Corp All other brands product names or trademarks mentioned are the property of ZU ad their respective owners All specifications are subject to change without notice
Download Pdf Manuals
Related Search