Zyxel ZyWALL USG 300

ZyWALL USG 300 is a comprehensive security gateway that integrates safety functions required for small and medium-sized businesses. Combining IPSec VPN and SSL VPN, the ZyWALL USG 300 is an ideal solution for businesses that need intensive VPN applications across distributed networks. It does not matter whether you are in a remote branch office or at an unreliable hotel hotspot. ZyWALL USG 300 can establish secure communication tunnels with IPSec or SSL security.

With integrated advanced technologies and robust platform, the ZyWALL USG 300 ready to provide multi-layered protection for your network. The device includes Kaspersky Labs Anti-Virus, which offers up to date database of Internet threats (viruses, malware, ..). With dual SecuASIC (security co-processor), the ZyWALL USG 300 reliable protection for heavily loaded networks. With IDP (Intrusion Detection & Prevention) ensures reliable detection of network attacks and take necessary steps to ensure protection against these threats. IDP engine can effectively detect protocol or traffic anomalies, pattern matching, and in the case of malicious attacks.

Smart and user-friendly interface ZyWALL USG 300 is designed to allow the easy creation of rules based on multiple criteria.
ZyWALL USG 300 provides bandwidth management and traffic prioritization. It is thus possible to guarantee or restrict bandwidth. Through a graphical interface, you can easily allocate bandwidth for different applications or users of the corporate network. The zones can be monitored with comprehensive statistics on them.
More and more businesses are deploying VoIP applications and their benefits. Switching to VoIP also comes with security risks and problems with voice quality. ZyWALL USG 300 reduces the security risks associated with the operation of VoIP communication technologies using SIP/H.323 ALG.
ZyWALL USG 300 allows you to easily configure reliable and secure network for your business. In the event of failure of any part of the network is capable of using HA (High Availability) to minimize the impact of such a situation and ensure network availability to the maximum extent. This gateway can be connected to the Internet through multiple lines (providers). This makes it possible to ensure availability of the Internet and if a single ISP fails.

Specifications:

Main advantages:
Hybrid VPN
Complex protection against Internet attacks
IM/P2P Management
User-friendly environment
Bandwidth Management
VoIP security

Features and functions:
SPI Firewall with throughput: 200 Mbps
IPSec VPN (AES) Throughput: 100 Mbps
Maximum current NAT Sessions: 60,000
Maximum IPSec VPN Tunnel: 200
Maximum SSL VPN Tunnel: 25
Session Rate: 2,000 (sessions/sec)

Gateway Anti-Virus:
Stream-Based Gateway Anti-Virus * from ZyXEL or Kaspersky Labs *
Includes Top Active Viruses in the Wild List
Scans HTTP/FTP/SMTP/POP3/IMAP4
Automatic Signature Update
No file size limit
Blacklist/Whitelist

Application Patrol *:
IM/P2P Granular Access Control
Combines Scheduling/Rate-Limit/User-Aware
IM/P2P live support
Real-time reporting and statistics reports

Detection and intrusion prevention *
In-line Mode (Routing/Bridge)
Zone-Based IDP control
Customizable Protection Profile
Deep packet inspection strings
Automatic Update chains
Adjustable encryption
Traffic anomaly: scanning, detection and overflow protection
Anomalie Protocol: HTTP/ICMP/TCP/UDP

Content Filtering:
URL blocking, keyboard lock
List of exceptions (Blacklist and Whitelist)
Blocks Java Applet, Cookies and Active X
Dynamic URL filtering database (BlueCoat) *

VPN:
IPSec VPN
Encryption (AES/3DES/DES)
Authentication (SHA-1/MD5)
Key Management (Manual Key/IKE)
Perfect Forward Secrecy (DH Group 1/2/5)
NAT over IPSec
Dead Peer Detection/Replay Detection
PKI (X.509)
Registration certificates (CMP/SCEP)
Xauth Authentication
L2TP over IPSec Support
SSL VPN
Without clients secure remote access (Reverse Proxy Mode)
SecuExtender (Full Tunnel Mode)
Unified Policy
Supports two-factor authentication
Adjustable client portal

Network functions:
Routing Mode/Bridge Mode/Mixed Mode
Layer 2 Port Grouping
Ethernet/PPPoE/PPTP
A tagged VLAN (802.1Q)
Virtual Interface (Alias \u200b\u200bInterface)
Policy-Based Routing (User-Aware)
Policy-Based NAT (SNAT/DNAT)
RIP v1/v2
OSPF
IP Multicasting (IGMP v1/v2)
DHCP Client/Server/Relay
Built-in DNS Server
Dynamic DNS

Bandwidth Management:
Bandwidth Priority
Policy-Based profiling operation
Maximum/Guaranteed Bandwidth
Hire Bandwidth

SPI Firewall:
Zone-Based access control list
Adjustable Security Zone
Stateful packet inspection
DoS/DDoS Protection
User-Aware Policy Enforcement
ALG support for selected ports

Authentication:
Internal User Database
Microsoft Windows Active Directory
External LDAP/RADIUS user database
ZyWALL OTP (One Time Password) **