User manual ZYXEL ZYWALL USG 20W FICHE TECHNIQUE

[. . . ] This multilayered security safeguards your organization's customer and company records, intellectual property, and critical resources from external and internal threats. Robust hybrid VPN (IPSec and SSL) Content filter stops malware and Web threats Product SSL VPN 5 to 50 SSL Tunnels 5 to 250 SSL Tunnels USG 2000 5 to 750 SSL Tunnels 50 to 250 SSL Tunnels 50 to 750 SSL Tunnels 250 to 750 SSL Tunnels 5 to 25 SSL Tunnels 5 to 50 SSL Tunnels USG 1000 5 to 250 SSL Tunnels 25 to 50 SSL Tunnels 25 to 250 SSL Tunnels 50 to 250 SSL Tunnels 2 to 10 SSL Tunnels USG 300 USG 200 USG 100 USG 50 USG 20 USG 20W 2 to 25 SSL Tunnels 10 to 25 SSL Tunnels 2 to 10 SSL Tunnels 2 to 5 SSL Tunnels 2 to 5 SSL Tunnels For Client PC's Software client 1 license Software client 5 licenses Software client 10 licenses Software client 50 licenses IPSec VPN Client Application Firewall (except USG 20/20W) Granular control over social networking applications Non-stop Internet access with multiple WAN and 3G backups Benefits Secure connectivity Given the prevalence and importance of information technology (IT) systems today and the nature and scale of both the opportunities and risks associated with significant deployments of new networking technologies, organizations are forced to evaluate solutions to build up a safer infrastructure to secure online transactions, in which involve exchange of valuable information. The infrastructure should be tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers. ICSA Firewall, IPSec certification Comprehensive report system ZyXEL Security Distribution Network (ZSDN) Proactive protection The evolving Web environment not only makes managing appropriate surfing and bandwidth use more difficult, but also introduces new security threats for the filtering functionality to pinpoint on. The ZyWALL USG Content Filter leverages the next-generation Web filtering technology by combining URL filtering and anti-malware technologies into a collaborative cloud defense architecture powered by BlueCoat, which is capable of protecting user productivity while blocking malware downloads and Web threats. Policy compliance With numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company employees to share files and chat online during work hours. Rapid file sharing not only compromises network safety with the sharing of questionable files containing malicious viruses, but may also violate copyright issues and create legal hassles. 3G Card Support Please visit http://www. zyxel. com/products_services/smb_security. shtml and find the following path: ZyWALL Unified Security Gateways USG product pages to see the 3G Card Compatibility List for supported USB devices. Network resilience ISP links broken, hardware and software failure on the gateway, dead VPN tunnels -- these are severe challenges IT staff face when designing the network infrastructure. [. . . ] OS patch level The result is Access Internet SSL-VPN-Tunnel * The USG's new EPS feature helps to ensure that all clients meet the corporate security policies; e. g. it checks if AV software is installed. New generation UTM solution The ZyWALL USG Series deploys hardware-acceleration technology in one box. Powered by high-performance SecuASIC technology and a hardware-based encryption accelerator, the ZyWALL USG Series delivers industry-leading performance and multi-layer threat protection for small businesses and enterprises. The ZyWALL USG Series provides integrated Unified Threat Management security features such as Anti-Virus (include Kaspersky Anti-Virus & ZyXEL Anti-Virus), IDP, Anti-Spam, Content Filtering and Firewall, VPN. All ZyWALL USG Series products support the Gigabit Ethernet. Firewall ZyXEL Firewall ZyXEL Firewall Content Filter stops malware and Web threats The ZyWALL USG Content Filter enables Network P2P Virus IM businesses to protect their users and networks from malware and abuse such as spyware, phishing attacks and inappropriate P2P or IM Inbound Threats Intrusion Detection and Prevention Content Filter Kaspersky Anti-Virus & ZyXEL Anti-Virus stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers ZyXEL IDP detects/stops Worms, Trojans, DoS (L4 & L7), Recon, Scans Outbound Threats usage. It keeps office computers from getting infected by dangerous malware and Phishing ZyXEL IDP detects/stops Worms, Trojans comprehensively protects business network environments. Bluecoat to block to Spyware/Phishing/ Unapproved Site Access Kaspersky Anti-Virus & ZyXEL Anti-Virus stops Viruses, file-based Trojans, Spyware, Adware, Keyloggers Anti-Virus Anti-Spam Stops Spam Mail Spyware VPN ZyXEL SSL/IPSec VPN ZyXEL SSL/IPSec VPN 2 3 ZyWALL USG 20/ 20W/50/100/200/ 300/1000/2000 Unified Security Gateway Robust hybrid VPN (IPSec and SSL) The ZyWALL USG Series can provide secure access between remote locations and corporate resources through the Internet for organizations of any size. Using IPSec VPN, companies can secure connections to branch offices, partners and headquarters. Road warriors and telecommuters can use SSL or L2TP VPN to safely access the company network without having to install VPN software. The Series provides a flexible and easy way to enable mobile employees, vendors and partners to confidently access your network resource for better efficiency. Branch Headquarters IPSec VPN Granular control over social networking applications Server Farm Social networking applications such as Facebook, Twitter and YouTube have become an Internet phenomenon allowing people to quickly Client Mobile User SSL VPN Web-based Application Server Application (Inventory, Store. . . ) Remote Desktop Network Extend Email Server BI System File Share OA, ERP System CRM System Without social network control With social network control connect and share information with each other. However, social networking applications could eclipse business productivity considerably without flexible management. The ZyWALL USG Series prevents the Internet connection from being abused to minimize bandwidth waste or human resource policy violations. The ZyWALL USG Series provides granular control over the usage of social networking applications. PWR Internet ZyWALL AUX USG 300 SYS CARD1 CARD2 1 RESET 2 3 10/100/1000 4 5 6 7 1 2 USB AUX CONSOLE Branch Low Productivity High Productivity Application Firewall More and more network applications bring malicious software into your office. This kind of unwanted software, especially IM/P2P applications, may cause bandwidth waste or even system damage. Using the application patrol and bandwidth management features, you can have full control over traffic blocking or rate limit settings. Corporate Network Internet Non-Business Related Business Related High performance The ZyXEL USG Series is built with a powerful Integrated High Performance Security architecture, a proven architecture designed for ultrafast Gigabit fiber; it provides real-time inspection to prevent networks from threats without sacrificing performance. Corporate networks are not only flawlessly secured but also get significant performance enhancements on productivity and efficiency, since file loading, emailing and information searching applications Application Control Policy are processed at higher speeds. Take the USG 50 as an example: its excellent performance Business Related Applications Allow Business Related Non-Business Related Applications Bandwidth Limit IM P2P Block 0 ZyWALL 5 FG-30B TZ100 ZyWALL USG 50 0 ZyWALL 5 FG-30B TZ100 ZyWALL USG 50 25 2500 50 5000 75 7500 100 Competitive Comparison: Firewall Throughput in Mbps 10000 Competitive Comparison: Sessions delivers sufficient speed boost to meet all small business needs. * Source: Performance figures from ZyXEL, SonicWALL and Fortinet Websites. 4 5 ZyWALL USG 20/ 20W/50/100/200/ 300/1000/2000 Unified Security Gateway High Availability (HA) HA is essential to enterprise networks. It ensures a system or a component to remain continuously operational for a reasonable, desirable period. [. . . ] *4: 11n (20 MHz), security type: WPA2-PSK *5: Max sessions measured using industry standard IXIA IxLoad test tool. *6: With SEM-DUAL or SEM-VPN module *7: With SEM-DUAL module 8 9 ZyWALL USG 20/ 20W/50/100/200/ 300/1000/2000 Unified Security Gateway Features Firewall · ICSA-certified firewall · Routing and transparent (bridge) mode · Zone-based access control list · Stateful packet inspection · User-aware policy enforcement · SIP/H. 323 NAT traversal · ALG supports custom ports · Zone base AV protection · HTTP/FTP/SMTP/POP3/IMAP4 protocol support · Automatic signature updates · No file size limitation · Blacklist/whitelist support Accessories Networking · Routing mode/bridge mode/mixed mode · Layer 2 port grouping · Ethernet/PPPoE · NAT/PAT · Tagged VLAN (802. 1Q) · Virtual interface (alias interface) · Policy-based routing (user-aware) · Policy-based NAT (SNAT) · Dynamic routing (RIP v1/v2, OSPF) · DHCP client/server/relay · Dynamic DNS support · WAN Trunk more than 2 port (except USG20/20W) · Per host session limit · Guaranteed bandwidth · Maximum bandwidth · Priority-bandwidth utilization System Performance VPN Throughput (AES) (Mbps) UTM Throughput (AV+IDP) (Mbps) Max. IPSec VPN Tunnels Max SSL VPN Users Physical Specifications Dimensions (W x D x H)(mm/in. ) Weight (g/lb. ) Environmental Specifications Operating temperature Storage temperature Operating humidity 0°C to 40°C/32°F to 104°F -30°C to 60°C/-22°F to 140°F 5% to 90% (Non-condensing) 0°C to 40°C/32°F to 104°F -30°C to 60°C/-22°F to 140°F 5% to 90% (Non-condensing) 199. 2 x 212 x 36. 3/7. 84 x 8. 35 x 1. 43 410/0. 91 199. 2 x 212 x 36. 3/7. 84 x 8. 35 x 1. 43 410/0. 91 *9 *8 Security Extension Module (USG 2000) Model SEM-DUAL SEM-VPN Product Photo Application Patrol (except USG20/20W) · Application, IM/P2P, stream base media, VoIP granular access control · Detail access control of IM (chat, file transfer, video) · Application and IM/P2P bandwidth control · User authentication support · IM/P2P signature auto update · Support more than 15 catalogs IM and P2P · Real-Time statistical reports · Maximum/guaranteed bandwidth For customers requiring full security features of both VPN and UTM threat protections, the SEM-DUAL unleashes the full VPN and UTM performance of the Features For customers requiring intensive VPN applications to build a mighty VPN concentrator in the central site and the highest level of redundancy, the specialized SEM-VPN application greatly accelerates VPN performance. · Advanced VPN Crypto to boost VPN performance Virtual Private Network (VPN) · ICSA-certified IPSec VPN · Algorithm: AES/3DES/DES · Authentication: SHA-1/MD5 · Key management: Manual key/IKE · Perfect forward secrecy (DH groups) support 1, 2, 5 · IPSec NAT traversal · Dead peer detection/relay detection · PKI (X. 509) certificate support · Centralize VPN support · Simple wizard support · Auto reconnect VPN · VPN HA (redundant remote VPN gateways) ZyWALL USG 2000 platform. [. . . ]