User manual ZYXEL ZYWALL 20W BROCHURE

[. . . ] The ZyWALL USG 20/20W/50 Series is a high-performance, deep packet inspection Anti-Spam features in one box. [. . . ] Bandwidth Management lets users prioritize time-sensitive applications like VoIP and video conferencing. The Anti-Spam feature can tag or discard unsolicited commercials or junk e-mails. User-aware configuration allows users to control access to applications or resources and apply security scans by user or user group. Multiple WAN ports let you use multiple ISP links and load balancing to enhance traffic throughput, optimize bandwidth usage and help ensuring continuous uptime if a link goes down. USB ports are provided for 3G WAN connections. ZyWALL USG 20/20W/50 Unified Security Gateway ZyWALL USG 20/20W/50 Unified Security Gateway Features ICSA-certified Firewall · Zone-based access control list · Security zones · Stateful packet inspection · DoS/DDoS protection · User-aware policy enforcement · ALG supports custom ports · Automatic signature updates · Custom signatures · Protocol anomaly detection and protection · Traffic anomaly detection and protection · Flooding detection and protection · DoS/DDoS protection · DHCP client/server/relay · Built-in DNS server · Dynamic DNS Authentication · Internal user database · Microsoft Windows active directory Application Patrol* Hybrid VPN · Encryption: AES/3DES/DES · Authentication: SHA-1/MD5 · Key management: manual key/IKE · Perfect forward secrecy: DH group 1/2/5 · NAT over IPSec VPN · Dead peer detection/relay detection · PKI (X. 509) certificate support · Certificate enrollment (CMP/SCEP) · Xauth authentication · L2TP over IPSec support SSL VPN · SecuExtender (full tunnel mode) · Unified policy enforcement · Supports two-factor authentication · Customizable user portal · Application, IM/P2P, stream base media, VoIP granular access control · Detail access control of IM (chat, file transfer, video) · Application and IM/P2P bandwidth control · User authentication support · IM/P2P signature auto update · Support more than 15 catalogs IM and P2P · Real-Time statistical reports · Maximum/guaranteed bandwidth · External LDAP/RADIUS user database · ZyWALL OTP (One Time Password)*** · Forced user authentication (transparent authentication) System Management · Role-based administration · Multiple administrator login · Multi-lingual web GUI (HTTPS/HTTP) · Object-based configuration · Command line interface (console/web console/SSH/TELNET) Anti-Spam · Zone to zone protection · Transparently intercept mail via SMTP/POP3 protocols · Blacklist/whitelist support · Support DNSBL checking · Statistics report · Comprehensive local logging · Syslog · E-mail alert · SNMP v2c (MIB-II) · Real-time traffic monitoring · System configuration rollback · Text-based configuration file · Firmware upgrade via FTP/FTP-TLS/web GUI Bandwidth Management · Bandwidth priority · Policy-based traffic shaping · Maximum/guaranteed bandwidth · Bandwidth borrowing Content Filtering · URL blocking, keyword blocking · Exempt list (blacklist and whitelist) · Blocks java applet, cookies and active X · Dynamic URL filtering database (powered by BlueCoat)** · Advanced reporting (Vantage Report) · Centralized network management (Vantage CNM) 3G Support · Advanced wireless security transmission with WEP encryption and WPA/WPA2 support Anti-Virus* · Support Kaspersky Anti-Virus · Stream-based Anti-Virus engine · Zone base AV protection · HTTP/FTP/SMTP/POP3/IMAP4 protocol support · Automatic signature updates · No file size limitation · Blacklist/whitelist support User Licenses · Unlimited *: Only for ZyWALL USG 50 and requires a valid subscription **: Requires a valid subscription ***: Sold separately Networking · Routing mode/bridge mode/mixed mode · Layer 2 port grouping · Ethernet/PPPoE/PPTP · Tagged VLAN (802. 1Q) · Virtual interface (alias interface) · Policy-based routing (user-aware) · Policy-based NAT (SNAT/DNAT) · RIP v1/v2 · OSPF Intrusion Detection and Prevention (IDP)* · Routing and transparent (bridge) mode · Zone-based IDP inspection · Customizable protection profile · Protect over 2000 attack Specifications Model Name System Firewall Throughput VPN Throughput (AES) Unlimited User Licenses Sessions Max. Concurrent SSL VPN Users Physical Port USB Inter face Customizable Zone Networking Routing/NAT/SUA Mode Bridge Mode Mix Mode (Routing+Bridge) VLAN Tagging (802. 1q) Wireless Support (802. 11n) 3G Support Security Firewall IPSec VPN SSL VPN Content Filtering Anti-SPAM Anti-Virus IDP/ADP IM/P2P Management Bandwidth Management User-aware Management End Point Security Check High Availability Multiple WANs for Load Balancing Auto Fail-over, Fail-back Authentication Method Local Database Radius LDAP Microsoft AD ZyWALL OTP Management WebGUI (HTTP and HTTPS) Command Line Vantage CNM Vantage Report *: Requires a valid subscription ZyWALL USG 50 100 Mbps 50 Mbps Yes 10, 000 5 5 4 x LAN/DMZ, 2 x WAN (All GbE) 2 Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes* Yes* Yes* Yes Yes Yes Yes Yes ZyWALL USG 20 100 Mbps 30 Mbps Yes 6, 000 2 1 4 x LAN/DMZ, 1 x WAN (All GbE) 1 Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes ZyWALL USG 20W 100 Mbps 30 Mbps Yes 6, 000 2 1 4 x LAN/DMZ, 1 x WAN (All GbE) 1 Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes (WAN + 3G) Yes Yes (WAN + 3G) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Fo r m o re p ro d u c t i n fo r m a t i o n , v i s i t u s o n t h e we b a t w w w. [. . . ] All specifications are subject to change without notice. [. . . ]