Description
The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more Wi-Fi for an exploding amount of smart devices. The use of cloud-based social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources.
The ZyXEL USG performance series are all-in-one Next Generation Firewalls (NGFW) specifically designed to fulfill the demands BYOD, malware protection, application regulation, and budget control in small business environments. The built-in wireless AP and WLAN controller offer instant wireless hotspot capability and future WLAN scalability. Comprehensive UTM features and application intelligence technology provides deep, extensive protection, while keeping businesses in control of how Web applications are used. The all-in-one design integrates everything small businesses need, delivering easier, more centralized management and lower total cost of ownership (TCO).
-
Unified security policy
Unified security policy offers object-based management and a unified configuration interface for firewall and all security-related policies. Users can easily apply all policy criteria to every UTM feature, reduce configuration time, and get more streamlined policy management. -
Anti-virus
Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time protection against malware threats before they enter the network. ZyXEL USGs can identify and block over 650,000 viruses right at the gate and provide high-speed scanning with stream-based virus scanning technology. -
Anti-spam
With a cloud-based IP reputation system, ZyXEL anti- spam can deliver accurate, zero-hour spam outbreak protection by analyzing up-to-the-minute sender reputation data from highly diverse traffic sources. It can detect spam outbreaks in the first few minutes of emergence regardless of spam language or format. -
Robust VPN
ZyXEL USGs support high-throughput IPSec, L2TP over IPSec and SSL VPN for a wide range of site-to-client and site-to-site VPN deployments. Reinforced with the advanced SHA-2 encryption, the ZyXEL USGs provide the most secure VPN for business communications. -
Integrated WLAN controller
The integrated WLAN controller supports CAPWAP, and enables centralized authentication and access management of multiple APs in the network. -
Application intelligence
ZyXEL's USG Performance Series can identify, categorize and control over 3,000 social, gaming, productivity, and other Web applications and behaviors. Users can prioritize productive applications, throttle acceptable ones, and block unproductive applications to boost productivity and prevent bandwidth abuse. -
Intrusion Detection and Prevention (IDP)
ZyXEL's IDP system uses deep packet inspection (DPI) technology that can scan multiple layers and protocols to inspect vulnerabilities invisible to simple port- and protocol-based firewalls. ZyXEL's IDP eliminates false positives with a database of malware signatures and provides effective protection against intrusions from unknown back doors. -
Content filtering
ZyXEL content filtering helps screen access to websites that are not business related or malicious. With a massive, cloud-based database of over 140 billion URLs that are continuously analyzed and tracked, ZyXEL provides highly accurate, broad and instant protection against malicious Web content. -
Dual-WAN and mobile broadband
The ZyXEL USG Performance Series provides high Internet uptime with dual-WAN and mobile broadband support. Comprehensive mobile broadband USB modems are also supported for WAN backup.
Specifications
Summary
- Product Description
- Zyxel USG60 - security appliance
- Device Type
- Security appliance
- Licence Qty
- 2 SSL VPN users
- Form Factor
- Rack-mountable
- Localisation
- Europe
- Data Link Protocol
- Ethernet, Fast Ethernet, Gigabit Ethernet
- Performance
- Firewall throughput: 1000 Mbps , VPN throughput: 180 Mbps , Intrusion detection and prevention throughput: 120 Mbps , Antivirus throughput: 90 Mbps
- Capacity
- User licences: unlimited , Concurrent IPSec VPN tunnels: 20 , Concurrent sessions: 40000 , Concurrent SSL VPN users: 12 , Virtual interfaces (VLANs): 16 , New sessions: 3000 , Manageable access points: 10
- Dimensions (WxDxH)
- 24.2 cm x 17.5 cm x 3.6 cm
- Weight
- 1.25 kg
- Manufacturer Warranty
- 5-year warranty
Detailed Specification
General
- Device Type
- Security appliance
- Width
- 24.2 cm
- Depth
- 17.5 cm
- Height
- 3.6 cm
- Weight
- 1.25 kg
- Localisation
- Europe
Networking
- Form Factor
- Rack-mountable
- Connectivity Technology
- Wired
- Data Link Protocol
- Ethernet, Fast Ethernet, Gigabit Ethernet
- Network / Transport Protocol
- L2TP, IPSec, PPPoE, SMTP, DHCP, POP3, IMAP4
- Routing Protocol
- OSPF, RIP-1, RIP-2, GRE
- Remote Management Protocol
- Telnet, SNMP 2c, HTTP, HTTPS, SSH
- Performance
- Firewall throughput: 1000 Mbps , VPN throughput: 180 Mbps , Intrusion detection and prevention throughput: 120 Mbps , Antivirus throughput: 90 Mbps
- Capacity
- User licences: unlimited , Concurrent IPSec VPN tunnels: 20 , Concurrent sessions: 40000 , Concurrent SSL VPN users: 12 , Virtual interfaces (VLANs): 16 , New sessions: 3000 , Manageable access points: 10
- Status Indicators
- Port status, power, system
- Features
- Firewall protection, DMZ port, routing, DHCP support, NAT support, VPN support, PAT support, SNAT support, load balancing, LDAP support, VLAN support, Syslog support, DoS attack prevention, content filtering, ALG support, dynamic DNS server, manageable, stackable, E-mail alert, IPv6 support, antivirus analysis, High Availability, firmware upgradable, DDos attack prevention, tunnelling, IPSec Virtual Private Network (VPN), Wi-Fi Multimedia (WMM) support, anti-spam protection, Access Control List (ACL) support, Quality of Service (QoS), Dead Peer Detection (DPD), IPSec NAT-Traversal (NAT-T), SSH support, VPN failover, DHCP server, IPv4 support, 3G USB Dongle Support, DHCP relay, IP-MAC binding, CAPWAP support, DHCP client, dual firmware images, static routing, tagged VLAN, Captive Portal, Generic Routing Encapsulation (GRE), Intrusion Detection and Prevention (IDP), VPN concentrator, VPN load-balancing, VPN auto-reconnection, Single Sign-On (SSO) support
- Encryption Algorithm
- DES, Triple DES, MD5, IKE, SSL, SHA-1, PKI, 256-bit AES, IKEv2, 512-bit SHA-2
- Authentication Method
- Secure Shell (SSH), RADIUS, X.509 certificates, LDAP, Active Directory, Extensible Authentication Protocol (EAP), XAUTH authentication
- Compliant Standards
- IEEE 802.1Q, X.509
Expansion / Connectivity
- Interfaces
- 4 x 1000Base-T - RJ-45 (LAN / DMZ) , 2 x 1000Base-T - RJ-45 (WAN) , 2 x USB - Type A , 1 x console - DB-9
Miscellaneous
- MTBF
- 815,463.9 hours
- Compliant Standards
- ICSA IPSec certified, ICSA Firewall certified, ICSA Antivirus
Power
- Power Device
- External power adapter
- Power Consumption Operational
- 19 Watt
Manufacturer Warranty
- Service & Support
- Limited warranty - 5 years