User manual ZYXEL ENTERPRISE SECURITY BROCHURE

[. . . ] ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice. [. . . ] This feature enables "active-active" load sharing or "activepassive" failover configuration to deliver highly reliable network connectivity. LAN ZyWALL PWR AUX Operating in Active/Passive Mode IPSec or GRE Tunnel for Secure Connection WAN2 (3G) 3G Network USG 300 SYS CARD1 CARD2 1 RESET 2 3 10/100/1000 4 5 6 7 1 2 USB AUX CONSOLE Corporate Network Internet ZyWALL USG 300 Unified Security Gateway Remote Office WAN1 ZyWALL USG fail over and fail back between WAN1 (ADSL/Fiber) & WAN2 (3G WAN) Network Provider (IP VPN) BRAS Vantage CNM Centralized Network Management Host by SI or Customer Application Control Policy Primary ADSL Fiber Last-Mile Corporate Headquarters Business Related Applications Allow Business Related Non-Business Related Applications Bandwidth Limit IM P2P Block Backup Web Security (Secure Web Access): ZyXEL Safe Browsing There are increasing network threats coming from internal sources, since your employees could surf unknown Web sites located anywhere. Some Web sites contain malicious software like Trojan horses, spywares or worms that could take tolls to your company; thus finding ways to keep internal users from surfing dangerous Web sites is becoming an important issue. ZyXEL Safe Browsing feature can pinpoint the Web sites with malicious software and warn the users to stay away from potential threats. 1. Response ZyXEL Database 3rd-Party Database (Bluecoat + Google) High Availability High availability is essential in enterprise networks. It ensures a system or component can be continuously operational for a desirably long length of time. The ZyWALL USG series provide high Internet ZyXEL Integrated Database Device HA: Master Fails and Backup Takes Over LAN A 192. 168. 1. 1 ZyWALL PWR AUX availability feature as: · Multiple WAN ports and configure load balancing between these ports. · An auxiliary (backup) Internet connection as 1. 1. 1. 1 SYS CARD1 CARD2 USG 300 1 RESET 2 3 10/100/1000 4 5 6 7 1 2 USB AUX CONSOLE Master B ZyWALL PWR AUX Internet Backup USG 300 SYS CARD1 CARD2 1 RESET 2 3 10/100/1000 known as out of band Management . · A backup ZyWALL in the event the master ZyWALL fails (device HA). To minimize the impact of single-point failures, the ZyWALL USG Series supports device HA (High Availability) to assure network availability. 192. 168. 1. 1 4 5 6 7 1 2 USB AUX CONSOLE 1. 1. 1. 1 Enterprise Security ZyWALL Unified Security Gateway Series (100/200/300/1000/2000 Series) Comprehensive Reporting System The ZyWALL USG Series has a built-in reporting system that offers a comprehensive set of realtime and historical reports including firewall, virus and intrusion attacks, bandwidth usage, Web site usage and user activities. Furthermore, with Vantage Report (VRPT), a Web-based reporting system, administrators can easily collect traffic data and analyze a distributed network for their organizations to become more aware of suspicious activities and to ensure better business productivity. USG Built-in Reporting System ZyWALL USG series provides built-in reporting system to collect data and view various statistics about traffic passing through your ZyWALL. Free Anti-Spam Service ZyXEL's Anti-spam service eliminates spam, phishing, virus and malware threats through a unified security architecture without dropping legitimate messages. With ZyXEL's free anti-spam service, enterprises can save time and resources dealing with unwanted email to reduce operational costs. Spam Anti-Spam Service Mail Good Vantage Report Centralize Reporting System Vantage Report is a cost-effective solution that allows administrators to easily monitor and analyze report of ZyWALL Internet Security Appliances from any location. It delivers rich formats of statistical report for IT staff with thorough understanding about bandwidth usage, security event and web traffic analysis. Monitor Statistical Report ZyXEL Security Distribution Network (ZSDN) Ensures Rapid Response to New Threats ZSDN Provides Up-to-Date Protection · The myZyXEL. com Web site delivers a convenient, centralized way to register all ZyWALL units and Security Services. · The ZyXEL Security Update Servers operates 24x7 to automatically deliver updated signature databases to ZyWALL units around the world. · The mySecurityZone portal provides comprehensive, searchable information regarding viruses and system vulnerabilities, and it provides a wealth of information resources that keep customers up-to-date on the latest vulnerabilities and countermeasures. World Update S Server ZyXEL Security Response Team Security Information Center (Email Bulletins) mySecurity zone mySecurityZone 3 4 5 1 (HTTPS or HTTP) my . com myZyXEL. com 2 Best-of-breed Security solution The ZyWALL USG Series offers network protection combining multiple best-of-breed technologies into a single security solution; these technologies are provided by well-known industrial partners such as: · Anti-Virus: Kaspersky · Content Filter: Bluecoat, Google · IP Sec VPN Client: TheGreenBow 1 Registration & Activation An 3 4 5 t i- V ir u s 1. Concurrent SSL VPN Users Customizable Zone Power Requirement Input Voltage Power Rating Environmental Specifications Operating Temperature Storage Temperature Operating Humidity Physical Specifications Dimensions (W) x (D) x (H) mm Weight, kg 5 x LAN/DMZ, 2 x WAN (All GbE) 2 1 100 Mbps 50 Mbps 40 Mbps 50 Mbps 35 Mbps Yes 20, 000 50 5 Yes 100 ~ 240 V, 50 ~ 60 Hz, 1. 2 A 20 W Max 0°C ~ 50°C -30°C ~ 60°C 5% ~ 90% (non-condensing) 4 x LAN/DMZ, 2 x WAN, 1 x OPT (All GbE) 2 1 150 Mbps 75 Mbps 50 Mbps 65 Mbps 45 Mbps Yes 40, 000 100 10 Yes 100 ~ 240 V, 50~ 60 Hz, 1. 2 A 20 W Max 0°C ~ 50°C -30°C ~ 60°C 5% ~ 90% (non-condensing) 7 2 1 200 Mbps 100 Mbps 70 Mbps 75 Mbps 70 Mbps Yes 60, 000 200 25 Yes 100 ~ 240 VAC 50/60 Hz, 0. 55 ~ 0. 3 A 35 W Max 0°C ~ 50°C -30°C ~ 60°C 20% ~ 90% (non-condensing) 5 2 1 350 Mbps 150 Mbps 120 Mbps 100 Mbps 100 Mbps Yes 512, 000 1, 000 250 Yes 100 ~ 240 VAC, 50/60 Hz, 1 A Max 80 W Max 0°C ~ 40°C -30°C ~ 60°C 5% ~ 90% (non-condensing) 6 2 2 1 1 2, 000 Mbps 400 Mbps 400 Mbps 400 Mbps 400 Mbps Yes 1, 000, 000 2, 000 750 Yes 100 ~ 240 V, 50 ~ 60 Hz, 3 ~ 6 A 200 W 0°C ~ 40°C -30°C ~ 60°C 5% ~ 90% (non-condensing) · IPSec NAT traversal · Dead peer detection/relay detection · PKI (X. 509) certificate support · Centralize VPN support · Simple wizard support · Auto reconnect VPN Anti-Spam · Zone to zone protection · Transparently intercept mail via SMTP/POP3 protocols · Blacklist/whitelist support · Support DNSBL checking System Management · Role-Based administration · Multiple administrator login · Multi-Lingual web GUI (HTTPS/HTTP) · Out-of-band management (AUX) · Object-based configuration · Command line interface (console/web console/SSH/TELNET) · SNMP v2c (MIB-II) · System configuration rollback · Firmware upgrade via FTP/FTP-TLS/web GUI SSL VPN · Clientless secure remote access · Support reverse proxy mode and full tunnel mode · Unified policy enforcement · Supports two-factor authentication · Customizable user portal · Spam tag support · Statistics report High Availability · Active-Passive mode · Device failure detection and notification · Support ICMP and TCP ping check · Link monitoring · Auto-Sync configurations · VPN HA (redundant remote VPN gateways) Intrusion Detection and Prevention (IDP) · Routing and transparent (bridge) mode · Zone-based IDP inspection · Customizable protection profile · Protect over 2000 attack · Automatic signature updates · Custom signatures · Protocol anomaly detection and protection · Traffic anomaly detection and protection · Flooding detection and protection · DoS/DDoS protection Content Filtering · Web security--ZyXEL safe browsing · URL blocking, keyword blocking · Profile base setting · Exempt list (blacklist and whitelist) · Blocks java applet, cookies and active X · Dynamic URL filtering database (powered by BlueCoat) · Unlimited user licenses support · Customize warning messages and redirect URL Logging/Monitoring · Comprehensive local logging · Syslog (send to up to 4 servers) · E-mail Alert (send to up to 2 servers) · Real-Time traffic monitoring · Built-in daily report · Advanced reporting (Vantage Report) · Centralized network management Vantage (CNM) manageable 242 x 175 x 35. 5 1. 2 242 x 175 x 35. 5 1. 2 430 x 201 x 42 2. 8 431 x 292 x 43. 5 4. 7 430 x 487 x 89 10. 5 Note: *1: With SEM-DUAL/SEM-VPN module *2: With SEM-DUAL/SEM-UTM module Enterprise Security ZyWALL Unified Security Gateway Series (100/200/300/1000/2000 Series) Accessories Security Extension Module (USG 2000 only) Model SEM-DUAL SEM-VPN Security Licenses If You Want Gateway AntiVirus ZyWALL Gateway Anti-Virus service is an easy-to- manage, signature-based security feature which sops virus/spyware from entering your network. [. . . ] ' Optical Receiver Wavelength Connector Sensitivity -17 dBm -20 dBm -23 dBm -24 dBm 850 nm 1310 nm 1310 nm 1550 nm LC LC LC LC Transmission Distance vs. Fiber Cable Sepcification 62. 5 um Multi-Mode Fiber 220 m 550 m 50 um Multi-Mode Fiber 550 m 550 m 9/10 um Single-Mode Fiber 10 km 40 km 80 km Operational Ranges Supply Voltage 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V Max Current 300 mA 300 mA 300 mA 300 mA Vantage CNM A robust centralized Network Management System. Centralized UTM Management for License and Policy 2. [. . . ]