Description
More and more people are relying on smart devices and cloud-based applications for business communications. This means that high network availability is critical for business continuity, more Wi-Fi is demanded in the workplace, and traditional regulatory measures for application usage are obsolete. Without an effective solution to control, optimize and block social, productivity and other web applications, SMBs risk losing work productivity and exposing company networks to new web threats.
The ZyXEL USG Advanced Series are Next Generation Firewalls (NGFW) designed to meet the mobility, anti-malware and policy enforcement challenges in SMBs. The integrated WLAN controller offers easy WLAN scalability for the growing demand for Wi-Fi; while WAN and VPN load balancing and failover ensures nonstop business communications. ZyXEL USGs offer industry-leading anti-virus, anti-spam, content filtering and application intelligence technology for effective application optimization and comprehensive network protection.
-
Multi-WAN and mobile broadband
The ZyXEL USG Advanced Series provides non-stop Internet uptime with multi-WAN and mobile broadband support. Multi-WAN works with two or more Ethernet WAN connections for active-active WAN load balancing or active-passive failover. Comprehensive mobile broadband USB modems are also supported for WAN backup. -
Robust VPN
ZyXEL USGs support high-throughput IPSec, L2TP over IPSec and SSL VPN for a wide range of site-to-client and site-to-site VPN deployments. Reinforced with the advanced SHA-2 encryption, the ZyXEL USGs provide the most secure VPN for business communications. -
VPN High Availability (HA)
ZyXEL USGs feature VPN HA to satisfy the demands of the most mission-critical VPN deployments. Supporting advanced GRE over IPSec technology, users can deploy two IPSec VPN tunnels for active-active VPN load balancing or active-passive failover. -
Integrated WLAN controller
The integrated WLAN controller supports CAPWAP, and enables centralized authentication and access management of multiple APs in the network. The ZyXEL USG Advanced Series can manage 2 APs by default, and up to 18 APs with license upgrade. -
Unified security policy
Unified security policy offers object-based management and a unified configuration interface for firewall and all security-related policies. Users can easily apply all policy criteria to every UTM feature, reduce configuration time, and get more streamlined policy management. -
Application intelligence
ZyXEL's USG Advanced Series can identify, categorize and control over 3,000 social, gaming, productivity, and other Web applications and behaviors. Users can prioritize productive applications, throttle acceptable ones, and block unproductive applications to boost productivity and prevent bandwidth abuse. -
Anti-virus
Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time protection against malware threats before they enter the network. ZyXEL USGs can identify and block over 650,000 viruses right at the gate and provide high-speed scanning with stream-based virus scanning technology. -
SSL inspection
SSL inspection enables the ZyXEL Advanced Series to provide not only comprehensive security, but also deeper policy enforcement. It enables the USG's application intelligence, IDP, content filtering and anti-virus to inspect traffic in SSL encrypted connections and block threats that usually go unseen. -
Anti-spam
With a cloud-based IP reputation system, ZyXEL anti-spam can deliver accurate, zero-hour spam outbreak protection by analyzing up-to-the-minute sender reputation data from highly diverse traffic sources. It can detect spam outbreaks in the first few minutes of emergence regardless of spam language or format. -
Content filtering
ZyXEL content filtering helps screen access to websites that are not business related or malicious. With a massive, cloud-based database of over 140 billion URLs that are continuously analyzed and tracked, ZyXEL provides highly accurate, broad and instant protection against malicious web content.
Specifications
Summary
- Product Description
- Zyxel USG310 - UTM Bundle - security appliance - with 1 year AV+IDP, AS, CF
- Device Type
- Security appliance
- Bundled Services
- 1 year AV+IDP, AS, CF
- Licence Qty
- 25 SSL VPN users
- Form Factor
- Rack-mountable
- Localisation
- United Kingdom
- Data Link Protocol
- Ethernet, Fast Ethernet, Gigabit Ethernet
- Performance
- Firewall throughput: 5 Gbps , VPN throughput: 650 Mbps , Intrusion detection and prevention throughput: 450 Mbps , Antivirus throughput: 400 Mbps , Unified Threat Management (UTM) throughput: 400 Mbps
- Capacity
- User licences: unlimited , Concurrent IPSec VPN tunnels: 300 , Concurrent sessions: 100000 , Concurrent SSL VPN users: 105 , Virtual interfaces (VLANs): 64 , New sessions: 12000 , Manageable access points: 2 (maximum 18)
- Power
- AC 120/230 V (50/60 Hz)
- Dimensions (WxDxH)
- 43 cm x 25 cm x 4.4 cm
- Weight
- 3.3 kg
Detailed Specification
General
- Device Type
- Security appliance
- Bundled Services
- 1 year AV+IDP, AS, CF
- Width
- 43 cm
- Depth
- 25 cm
- Height
- 4.4 cm
- Weight
- 3.3 kg
- Localisation
- United Kingdom
Networking
- Form Factor
- Rack-mountable
- Connectivity Technology
- Wired
- Data Link Protocol
- Ethernet, Fast Ethernet, Gigabit Ethernet
- Network / Transport Protocol
- L2TP, IPSec, PPPoE, SMTP, DHCP, POP3, IMAP4
- Routing Protocol
- OSPF, RIP-1, RIP-2, GRE
- Remote Management Protocol
- Telnet, SNMP 2c, HTTP, HTTPS, SSH
- Performance
- Firewall throughput: 5 Gbps , VPN throughput: 650 Mbps , Intrusion detection and prevention throughput: 450 Mbps , Antivirus throughput: 400 Mbps , Unified Threat Management (UTM) throughput: 400 Mbps
- Capacity
- User licences: unlimited , Concurrent IPSec VPN tunnels: 300 , Concurrent sessions: 100000 , Concurrent SSL VPN users: 105 , Virtual interfaces (VLANs): 64 , New sessions: 12000 , Manageable access points: 2 (maximum 18)
- Status Indicators
- Port status, power, system
- Features
- Firewall protection, DMZ port, routing, DHCP support, NAT support, VPN support, PAT support, SNAT support, load balancing, LDAP support, VLAN support, Syslog support, DoS attack prevention, content filtering, ALG support, dynamic DNS server, manageable, stackable, E-mail alert, IPv6 support, antivirus analysis, High Availability, firmware upgradable, DDos attack prevention, tunnelling, IPSec Virtual Private Network (VPN), Wi-Fi Multimedia (WMM) support, anti-spam protection, Access Control List (ACL) support, Quality of Service (QoS), Dead Peer Detection (DPD), IPSec NAT-Traversal (NAT-T), SSH support, VPN failover, DHCP server, IPv4 support, 3G USB Dongle Support, DHCP relay, IP-MAC binding, CAPWAP support, DHCP client, dual firmware images, static routing, tagged VLAN, Captive Portal, Generic Routing Encapsulation (GRE), Intrusion Detection and Prevention (IDP), VPN concentrator, VPN load-balancing, VPN auto-reconnection, Single Sign-On (SSO) support
- Encryption Algorithm
- DES, Triple DES, MD5, IKE, SSL, SHA-1, PKI, 256-bit AES, IKEv2, 512-bit SHA-2
- Authentication Method
- Secure Shell (SSH), RADIUS, X.509 certificates, LDAP, Active Directory, Extensible Authentication Protocol (EAP), XAUTH authentication
- Compliant Standards
- IEEE 802.1Q, X.509
Expansion / Connectivity
- Interfaces
- 8 x 1000Base-T - RJ-45 , 2 x USB - Type A , 1 x console - DB-9
Miscellaneous
- MTBF
- 560,811.5 hours
- Compliant Standards
- BSMI, EN 60950-1, FCC Part 15 A, C-Tick Class A, LVD, EMC Class A
Power
- Power Device
- External power adapter
- Voltage Required
- AC 120/230 V (50/60 Hz)
- Power Consumption Operational
- 58.5 Watt
Manufacturer Warranty
- Service & Support
- Virus definitions update - 1 year , Intrusion definitions update - 1 year , URL Database update - 1 year , Spam filter update - 1 year