ZyXEL ZyWALL USG 20

Safety gate of the latest series of firewalls Zyxel representing industrial equipment class that provides an integrated and comprehensive security for small organizations. It offers the perfect solution especially for small businesses without a dedicated IT department, where the issue of security a big challenge. ZyWALL USG 20 offers stateful firewall (SPI), antivirus, IDP (Intrusion Detection and Prevention), content filter, Antispam and VPN (IPSec/SSL). This set multi-layer security protects the organization's records, intellectual property, and critical resources from internal and external threats.

Model ZyWALL USG 20 is built on a completely new platform with integrated powerful processor, which deserves a more rapid deep packet inspection. The content filter with adjustable level of protection provides control of data in real time during operation. He takes care to ensure that all data through the network, was perfectly checked and dangerous data blocked, and without prejudice to the bandwidth and speed applications (such as downloading files, email, data retrieval). The device also protects the network from the risk of viruses and other Internet threats using the unique features clean-traffic.

A very useful feature to maintain productivity of your employees is to control access to social networks. Cheers and exclusive technology ZyXEL IntelliEnergy Green Technology that automatically detects network traffic, monitor device status and its temperature, and adjusts power consumption. This "green technology" reduces energy consumption by up to 80%!

Specifications:

Features:
Unified Security Gateway (1-5 PC users)
Hardware Gigabit Ethernet
Powerful multi-layered protection against network threats
Hybrid VPN (IPSec and SSL) for secure connections
Support 3G USG adapter for backup WAN connection

Firewall:
ICSA Certification
Routing mode and transparent mode (bridge)
Access Control List (ACL) based on zones
Stateful Packet Inspection
NAT, PAT
NAT rules-based
VLAN tagging
Application of the rules by users
NAT Traversal SIP/H.323
ALG support user ports

Virtual Private Network (VPN):
IPSec VPN certified by ICSA
PPTP, IPSec
Algorithms: AES/3DES/DES
Authentication: SHA-1/MD5
Key Management: Manual Key/IKE
Technology Perfect Forward Secrecy: DH Group 1/2/5
IPSec NAT Traversal
Dead Peer Detection/Relay Detection
Support for certificate PKI (X.509)
Management support VPN
Setup Guide
Auto reconnect VPN
VPN HA (backup remote VPN gateway)

SSL VPN:
Clientless secure remote access
Support Full Tunnel mode
Unified Rules of Use
Support for two-factor authentication *
Customizable interface (user portal)

Antispam:
Protection zones by
Transparent interception of mail via SMTP/POP3 protocols
Support lists Blacklist/Whitelist
Support DNSBL checking
It supports tagging spam
Statistical listings

Content Filtering:
Controlling access to social networks
Web security (secure access): ZyXEL Security Browsering *
URL blocking, keyword blocking
Setting-based profiles
Exception List (Blacklist and Whitelist)
Blocking Java applets, cookies and Active X components
Database for dynamic URL filtering (powered by BlueCoat) *
Support unlimited user licenses
Customizable warning messages and redirect URL

Network connection:
Routing mode/bridge mode/mixed mode
Grouping port Layer 2
Ethernet/PPPoE
Tagged VLAN (802.1Q)
Virtual interface (alias interface)
Routing rules-based (with a resolution of users, user-aware)
NAT-based rules (SNAT)
Dynamic routing (RIP v1/v2, OSPF)
DHCP client/server/relay
Dynamic DNS
Limit the session by the host computer
Guaranteed bandwidth
The maximum bandwidth
Bandwidth usage by priority

Authentication:
Local user database
Microsoft Windows Active Directory
The external user database LDAP/RADIUS
Xauth over RADIUS for IPSec VPN
Forced user authentication (transparent authentication)
Interconnection of IP addresses/MAC

System Management:
Role-based administration
Multiple Administrator Login
Multi-language web interface (HTTPS/HTTP)
Object-oriented configuration
Command line interface (console/web console/SSH/TELNET)
SNMP v2c (MIB-II)
Restoring the previous configuration system (rollback)
Upgrade the firmware via FTP/FTP-TLS/Web GUI

Records/monitoring:
Comprehensive local records (logging)
Syslog (send to up to 4 servers)
Warning over email (sending up to 2 servers)
Monitoring data stream in real time
Daily Dump (built-in function)
Advanced listings (Vantage Report) *
Centralized Network Management (Vantage CNM) *

Performance and capacity:
SPI Firewall Throughput * 1: 100 Mbps
VPN (3DES) throughput * 2: 30 Mbps
WiFi Throughput: 60 Mbps
Unlimited user licenses
Max. number of sessions * 3: 6000
New Session: 900
Max. number of simultaneous IPSec VPN tunnels: 5
Max. number of concurrent SSL VPN users: 1
Number of SSL VPN users in the default configuration: 1
Editable zones

Hardware specifications:
4x RJ-45 (10/100/1000 Mbit/s LAN/DMZ)
1x RJ-45 (10/100/1000 Mbit/s WAN)

Power:
Input: 100-240 V, 50-60 Hz, 1.2 A
Power Consumption: 15 W max

Physical Specifications
Dimensions: 215 (W) x 140 (h) x 33 (H) mm
Weight: 0.38 kg

* This option may be charged a fee or require you to purchase additional hardware
* 1Testovací methodology: Maximum throughput based on RFC 2544 (UDP packets, 1518 bytes). Actual speeds may vary depending on network conditions and active services.
* 2Propustnost VPN (AES) was measured with UDP packets of size 1424 bytes, based on RFC 2544th
* 3Maximum number of sessions measurements using Ixia IxLoad test tool