ZyXEL Communications ZyXEL ZyWALL USG-1000 Bedienungsanleitung

ZyWALL USG

300/1000/2000

Unified Security Gateway

ZyWALL USG

300/1000/2000

Unified Security Gateway

■

Ultra-high performance and

protection

■

Comprehensive support to IPv6

■

Supported various VPN

solutions (IPSec/SSL/2TP)

- Zero-configuration remote

access with EASY VPN

- Support L2TP VPN on mobile

device (iPhone and Android

phone)

■

ICSA Firewall, IPSec certification

■

Real-time,dynamic malware

protection

■

High Availability (HA)

Utilizing networks to access internal and external mission-critical applications are common,

and important as well, for small and medium-sized businesses. As faster networks bring more

convenience and efficiency, businesses are facing challenges from sophisticated attacks and

even cybercrime that would cause interrupted communications,degraded performance and

loss of valuable information; however traditional firewalls are not capable of protecting

business from such network attacks.

The ZyWALL USG 300/1000/2000 Series are security platforms that offers ultra-high

performance, deep packet inspection and all-in-one multi-threat protection not only to block

the latest attack combinations including intrusion attempts, viruses, worms, phishing,

spyware,spam and many other malware types effectively,but also to secure remote access

among branch offices,partners and customers.The ZyWALL USG’s real-time threat detection

and continuous update services provide the fastest response speed in the networking

industry to deter the evolving security threats before the business is affected.The ZyWALL

USG 300/1000/2000 Series is ideal for small- and medium-size businesses to safeguard their

network environments.

Benefits

Ultra-high performance and protection to secure business networks

The ZyWALL USG 300/1000/2000 Series delivers wire-speed performance and integrated threat

management for wired networks.The USG Series provides firewall throughputs of from 350 Mbps to

2 Gbps that enables businesses to protect critical applications and networks without affecting

availability or performance. In addition, the USG’s unique built-in clean-traffic architecture can

prevent risks such as viruses,worms,Trojan Horses, spyware, phishing attacks and other emerging

Internet threats. In short, the architecture can assure clean and secure network environments for

business users.

Comprehensive IPv6 support to ensure investment protection

The ZyWALL USG Series is IPv6-ready today and is certified with “IPv6 Ready” gold

logo.With IPv6 feature enabled,the USG Series ensures businesses with a smooth

migration path from the IPv4-based networks to the full IPv6 infrastructure. It assigns

IPv6 addresses to clients and passes the IPv6 traffics through the IPv4 environment.

The USG Series supports dual-stack and IPv4 tunneling (6rd and 6to4 transition tunnel)

implementations for Internet connectivity to access IPv6 applications.The comprehensive IPv6

features built into the USG Series ensure not only future-ready connectivity but also investment

protection for businesses.

Security on a New Level

-The Future Is Ahead. Stay Ahead with ZyXEL USGs.

ZyWALL USG

300/1000/2000

Unified Security Gateway

ZyWALL USG

300/1000/2000

Unified Security Gateway

Various VPN solutions to simplify secure access

Establishing VPN tunnels is a good solution to provide a safe way to access necessary network resources remotely with any device anytime, anywhere.

However due to the complicated configuration, it could be quite difficult for non-technical employees such as sales people to use.The ZyWALL USG Series is

equipped with the“EASY VPN”solution to push configuration files to the VPN clients automatically; this eliminates the configuration efforts while securing the

access at the same time. In addition, the USG Series supports L2TP VPN technology on iPhones, Android phones and many other mobile devices as L2TP VPN

enables employees in remote places to connect to the headquarters with easy and free access.

Real-time, dynamic malware protection to safeguard business networks

Web security powered by BlueCoat and Commtouch

With more valuable information being placed on the data cloud, impacts from the ever-growing cybercrime should be treated seriously. As modern malware

become very sophisticated and difficult to repel, the ZyWALL USG’s content filter from Blue Coat and Commtouch, the leading solution provider, reduces costs

and extends protection by integrating a comprehensive, continuously updated database featuring millions of URLs, IP addresses and domains.With the

content filter, the USG Series not only enables real-time protection to deter emerging Web threats including malware,phishing and Zombies/bots,but also

monitors or blocks certain sites to maintain employee productivity.

Email security powered by Commtouch

The ZyWALL USG Series delivers industry-leading protection, powered by Commtouch, against spam, phishing and virus-laden emails.The extremely high

performance of Commtouch technology comes from the unique recurrent pattern detection (RPD) mechanism that possesses its superior capability through

analyzing millions of new patterns each day (24x7x365) to block all the associated messages real-time. In addition, the ZyWALL USG applies sender-based IP

reputation to remove over 80% of unwanted mails and to take advantage of the zero-hour virus outbreak protection feature,which is capable of blocking or

delaying suspicious messages hours before commercial anti-virus signatures are available.

High Availability (HA) ensures non-stop business operations

Loss of mission-critical connection can cause serious, and sometimes disastrous, consequences to businesses.The ZyWALL USG 300/1000/2000 Series provides

HA features to guarantee a secure, reliable connection between the protected network and the Internet.

• Multiple WAN ports and configurable load balancing between ports.

• An auxiliary (backup) Internet connection known as out-of-band management.

• A backup ZyWALL in case the master ZyWALL fails (Device HA).

Unique clean-traffic architecture

The ZyWALL USG’s clean-traffic architecture

protects against network risks like viruses,

worms,Trojan Horses, spyware, phishing attacks

and other emerging Internet threats.With the

clean-traffic architecture,enterprises users are

assured to have clean and secure network

environments.

Key Applications

Traffic Out

Clean

Traffic

Update

DNAT Routing

Forwarding Engine

Network

I/O Engine

Fragment

Network

I/O Engine

Traffic In

Threat

Database

Defragment BWMSNAT

Stateful Firewall

Anomaly Detection and Prevention

(PA/TA)

Application Classifier

Intrusion Detection and Prevention

Anti-Virus

Application Patrol

Content Filter

Anti-Spam

P2P

Virus

Spyware

Phishing

Easy provisioning for ZyWALL IPSec VPN client

- USG automatically provides configuration file to the client.

EASY VPN — zero configuration

remote access

When establishing VPN tunnels, it could be

quite difficult for non-technical employees to

use due to the complicated configuration.

The ZyWALL USG Series is equipped with the

“EASY VPN”solution to push configuration files

to the VPN clients automatically; this eliminates

the configuration efforts while securing the

access at the same time.

Content Filter stops malware and

Web threats

The ZyWALL USG Content Filter enables

businesses to protect their users and networks

from malware and abuse such as spyware,

phishing attacks and inappropriate P2P or IM

usage. It keeps office computers from getting

infected by dangerous malware and

comprehensively protects business network

environments.

Granular control over social

networking applications

Social networking applications such as Facebook,

Twitter and YouTube have become an Internet

phenomenon allowing people to quickly

connect and share information with each other.

However, social networking applications could

eclipse business productivity considerably

without flexible management.The ZyWALL USG

Series prevents the Internet connection from

being abused to minimize bandwidth waste or

human resource policy violations.The ZyWALL

USG Series provides granular control over the

usage of social networking applications.

ZyWALLUSG300

PWR

SYS

AUX

RESET

CARD1

CARD2

10/100/1000

1234567USB

CONSOLE

AUX

Without social network control

Low Productivity High Productivity

With social network control

te to S

VPN

Client to Site

IPSec VPN

Internet

Branch

ZyWALLUSG300

PWR

SYS

AUX

RESET

CARD1

CARD2

10/100/1000

1234567USB

CONSOLE

AUX

Mobile User

Branch

ZyWALLUSG300

PWR

SYS

AUX

RESET

CARD1

CARD2

10/100/1000

1234567USB

CONSOLE

AUX

User

Server Farm

ZyWALL USG

Unified Security

Gateway

Network

Extend

Application Server

(Inventory, Store...)

Web-based

Application

Remote

Desktop

File

OA, ERP System

CRM System

System

Server

Headquarters

IPSec

VPN Client

IPSec

VPN Client

Conguration File

Firewall

• ICSA-certified firewall

• Routing and transparent (bridge) mode

• Zone-based access control list

• Stateful packet inspection

• User-aware policy enforcement

• SIP/H.323 NAT traversal

• ALG supports custom ports

IPv6 Support

• IPv6 Ready gold logo certified

• Dual stack

• IPv4 tunneling (6rd and 6to4 transition tunnel)

• Host/Router/Firewall

Virtual Private Network (VPN)

• ICSA-certified IPSec VPN

• Algorithm: AES/3DES/DES

• Authentication: SHA-1/MD5

• Key management: Manual key/IKE

• Perfect forward secrecy (DH groups)

support 1, 2, 5

• IPSec NAT traversal

• Dead peer detection/relay detection

• PKI (X.509) certificate support

• Centralize VPN support

• Simple wizard support

• Auto reconnect VPN

• VPN HA (redundant remote VPN gateways)

Note:

*1:Testing Methodologies:Maximum performance based on RFC 2544 (UDP packets,1,518 bytes).

*2: VPN (AES) throughput measured using UDP traffic with 1,424 bytes packet size,based on RFC 2544.

*3: UTM (AV+IDP) throughput measured using industry standard IXIA IxLoad test tool against HTTP protocol with 1,460 bytes packet size.Testing done with multiple flows.

*4: Max sessions measured using industry standard IXIA IxLoad test tool.

*5: With SEM-DUAL or SEM-VPN module

*6: With SEM-DUAL module

Specifications

Hardware Specifications

10/100/1000 Interfaces (Copper) 7 5 6

Dual Personality GbE (SFP/RJ45) - - 2

USB Ports 2 2 2

SEM Slot (Security Extension Module) - - 1

Card Slot 2 1 1

System Capacity & Performance

SPI Firewall Throughput*1 (Mbps) 350 400 2,000

VPN Throughput (3DES)*2 (Mbps) 130 180 600

UTM Throughput (AV+IDP)*3 (Mbps) 80 100 400

Unlimited User Licenses Yes Yes Yes

Max. Sessions*4 60,000 500,000 1,000,000

New Session Rate 1,500 12,000 20,000

Max. Concurrent IPSec VPN Tunnels 200 1,000 2,000

Max. Concurrent SSL VPN Users 25 250 750

Included SSL VPN Users 2 5 5

Customizable Zone Yes Yes Yes

IPv6 Support Yes Yes Yes

Power Requirement

Input Voltage 100 - 240 V AC, 50/60 Hz, 0.55 - 0.3 A 100 - 240 V AC, 50/60 Hz, 1 A Max 100 - 240 V AC, 50 - 60 Hz, 3 - 6 A

Power Rating 35 W Max 80 W Max 200 W Max

Physical Specifications

Item dimensions (WxDxH)(mm/in.) 430 x 201 x 42/ 431 x 292 x 43.5/ 430 x 487 x 89/

16.93 x 7.91 x 1.65 16.97 x 11.50 x 1.71 16.93 x 19.17 x 3.50

Item weight (kg/lb.) 2.8/6.17 4.7/10.36 10.5/23.15

Packing dimensions (WxDxH)(mm/in.) 539 x 184 x 321/ 529 x 411 x 194/ 607 x 551 x 295/

21.22 x 7.24 x 12.64 20.83 x 16.18 x 7.64 23.90 x 21.70 x 11.6

Packing weight (kg/lb.) 6/13.22 6.5/14.33 14.2/31.31

Environmental Specifications

Operating temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F

Storage temperature -30°C to 60°C/-22°F to 140°F -30°C to 60°C/-22°F to 140°F -30°C to 60°C/-22°F to 140°F

Operating humidity 5% to 90% (Non-condensing) 5% to 90% (Non-condensing) 5% to 90% (Non-condensing)

Product Photo

Model ZyWALL USG 300 ZyWALL USG 1000 ZyWALL USG 2000

Features

SSL VPN

• Clientless secure remote access

• Support reverse proxy mode and full tunnel

mode

• Unified policy enforcement

• Supports two-factor authentication

• Customizable user portal

Intrusion Detection and Prevention

(IDP)

• Routing and transparent (bridge) mode

• Zone-based IDP inspection

• Customizable protection profile

• Protect over 2000 attack

• Automatic signature updates

• Custom signatures

• Protocol anomaly detection and protection

• Traffic anomaly detection and protection

• Flooding detection and protection

• DoS/DDoS protection

Anti-Virus

• Support Kaspersky and ZyXEL Anti-Virus

• Stream-based Anti-Virus engine

• Zone base AV protection

• HTTP/FTP/SMTP/POP3/IMAP4 protocol support

• Automatic signature updates

• No file size limitation

• Blacklist/whitelist support

Application Patrol

• Application, IM/P2P, stream base media, VoIP

granular access control

• Detail access control of IM (chat, file transfer,

video)

• Application and IM/P2P bandwidth control

• User authentication support

• IM/P2P signature auto update

• Support more than 15 catalogs IM and P2P

• Real-Time statistical reports

• Maximum/guaranteed bandwidth

Anti-Spam

• Zone to zone protection

• Transparently intercept mail via SMTP/POP3

protocols

• POP3/SMTP port configurable

• Sender-based IP Reputation Filter

• Commtouch RPD Query

• Zero-hour Virus Outbreak Protection

• X-Header Support

• Blacklist/whitelist support

• Support DNSBL checking

• Spam tag support

• Statistics report

High Availability

• Active-Passive mode

• Device failure detection and notification

• Support ICMP and TCP ping check

• Link monitoring

• Auto-Sync configurations

Content Filtering

• Support BlueCoat and Commtouch

• Social networking control

• Web security—Security threat category

(powered by BlueCoat)

• URL blocking, keyword blocking

• Profile base setting

• Exempt list (blacklist and whitelist)

• Blocks java applet,cookies and active X

• Dynamic URL filtering database (powered by

BlueCoat and Commtouch)

• Unlimited user licenses support

• Customize warning messages and redirect URL

Networking

• Routing mode/bridge mode/mixed mode

• Layer 2 port grouping

• Ethernet/PPPoE

• NAT/PAT

• Tagged VLAN (802.1Q)

• Virtual interface (alias interface)

• Policy-based routing (user-aware)

• Policy-based NAT (SNAT)

• Dynamic routing (RIP v1/v2, OSPF)

• DHCP client/server/relay

• Dynamic DNS support

• WAN Trunk more than 2 port

• Per host session limit

• Guaranteed bandwidth

• Maximum bandwidth

• Priority-bandwidth utilization

Authentication

• Local user database

• Microsoft Windows active directory integrate

• External LDAP/RADIUS user database

• Xauth over RADIUS for IPSec VPN

• Forced user authentication (transparent

authentication)

• IP/MAC address binding

System Management

• Role-Based administration

• Multiple administrator login

• Multi-Lingual web GUI (HTTPS/HTTP)

• Object-based configuration

• Command line interface (console/web

console/SSH/TELNET)

• SNMP v2c (MIB-II)

• System configuration rollback

• Firmware upgrade via FTP/FTP-TLS/web GUI

Logging/Monitoring

• Comprehensive local logging

• Syslog (send to up to 4 servers)

• E-mail alert (send to up to 2 servers)

• Real-Time traffic monitoring

• Built-in daily report

• Advanced reporting (Vantage Report)

• Centralized Network Management (Vantage

CNM) manageable

Certification

• Safety

■

CSA International

• Emission (EMC)

■

FCC Part15 (Class A)

■

CE EMC (Class A)

Note:

*1: Available for USG 50/100/200 models with a ZyWALL Intrusion

Detection/Prevention(IDP) subscription.

*2: Available for USG 50/100/200 models with a ZyWALL Anti-Virus

subscription.

*3: Available for all USG models with a ZyWALL Content Filtering

subscription.

ZyWALL USG

300/1000/2000

Unified Security Gateway

ZyWALL USG

300/1000/2000

Unified Security Gateway

5-100-00811008 01/12

For more product information, visit us on the web at www.ZyXEL.com

ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their

respective owners. All specifications are subject to change without notice.

ZyWALL USG

300/1000/2000

Unified Security Gateway

ZyWALL USG

300/1000/2000

Unified Security Gateway

Please visit http://www.zyxel.com/products_services/smb_security_appliances_and_services.shtml and find the following path:

ZyWALL Unified Security Gateways USG product pages to see the 3G Card Compatibility List for supported USB devices.

3G Card Support

Transceiver

Model Name

SFP-SX-D

SFP-LX-10-D

SFP-LHX1310-40-D

SFP-ZX-80-D

Note:

*1: VPN (AES) HTTP protocol with 1,460 bytes packet size.Testing done with multiple flows.

*2: UTM (AV+IDP) throughput measured using industry standard IXIA IxLoad test tool against.

Accessories

Security Extension Module (USG 2000)

Receiver Characteristics

Optical

Budget

7.5 dB

10.5 dB

21 dB

24 dB

Maximum

Launch Power

-4 dBm

+3 dBm

+5 dBm

-3 dBm

Optical Receiver

Sensibility

-17 dBm

-23 dBm

-24 dBm

-20 dBm

Maximum

Input Power

-3 dBm

Minimum

Launch Power

-9.5 dBm

-2 dBm

0 dBm

-9.5 dBm

Wavelength

850 nm

1310 nm

1550 nm

Connector

550 m

10 km

40 km

80 km

Max

Transmission

Distance

Laser Transmitter Characteristics

SEM-DUAL SEM-VPN

For customers requiring intensive VPN applications to

build a mighty VPN concentrator in the central site and

the highest level of redundancy, the specialized

SEM-VPN application greatly accelerates VPN

performance.

• Advanced VPN Crypto to boost VPN performance

For customers requiring full security features of both

VPN and UTM threat protections, the SEM-DUAL

unleashes the full VPN and UTM performance of the

ZyWALL USG 2000 platform.

• SecuASIC CIP-3001 for UTM acceleration (Anti-Virus

and IDP)

• Advanced VPN Crypto to boost VPN performance

Product Photo

Model

Features

System Performance

VPN Throughput (AES)*1 (Mbps) 600 600

UTM Throughput (AV+IDP)*2 (Mbps) 400 100

Max. IPSec VPN Tunnels 2,000 2,000

Max SSL VPN Users 750 750

Physical Specifications

Dimensions (WxDxH)(mm/in.) 199.2 x 212 x 36.3/7.84 x 8.35 x 1.43 199.2 x 212 x 36.3/7.84 x 8.35 x 1.43

Weight (g/lb.) 410/0.91 410/0.91

Environmental Specifications

Operating temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F

Storage temperature -30°C to 60°C/-22°F to 140°F -30°C to 60°C/-22°F to 140°F

Operating humidity 5% to 90% (Non-condensing) 5% to 90% (Non-condensing)

Andere Handbücher für ZyXEL ZyWALL USG-1000

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere ZyXEL Communications Tor Handbücher

ZyXEL Communications

ZyXEL Communications P-2302HWUDL-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Prestige 661H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660H-T1 v3s Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications SBG3310 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications FSG2200HNU Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications UAG Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660HWP-Dx Handbuch

ZyXEL Communications

ZyXEL Communications P-661H-D Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL USG Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications SBG Series Handbuch

ZyXEL Communications

ZyXEL Communications P-2302HWUDL-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Internet Security Gateway ZyWALL 100 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-793H 601156 Referenzhandbuch

ZyXEL Communications

ZyXEL Communications Unified Security Gateway ZyWALL 300 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL USG Series Montage- und Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302R-P1C Referenzhandbuch

ZyXEL Communications

ZyXEL Communications P-870H-51a v2 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VMG8623-T50B Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660N-T1A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYWALL 20W - Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications p-2302r series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-661HNU-FX Bedienerhandbuch

ZyXEL Communications

ZyXEL Communications P-660HW-T - V2 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302HWDL-P1 Handbuch

Beliebte Tor Handbücher anderer Marken

LST

LST M500RFE-AS Bedienungsanleitung

Kinnex

Kinnex Media Gateway Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace 2N StarGate Bedienungsanleitung

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Bedienungsanleitung

Telsey

Telsey CPVA 500 - SIP Bedienungsanleitung

RTA

RTA 460A-NNA4 Technisches Datenblatt

Shaw

Shaw Gateway HDPVR Bedienungsanleitung

ABB

ABB VSN900 Kurzanleitung

Commander

Commander Pulse Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Bedienungsanleitung

NETGEAR

NETGEAR C6300BD Bedienungsanleitung

Amit

Amit CDW531AM Bedienungsanleitung

HMS

HMS Netbiter EasyConnect EC150 Bedienungsanleitung

Huawei

Huawei EchoLife HG620 Bedienungsanleitung

AT&T

AT&T U-verse 3801 Gebrauchs- und Pflegehandbuch

Logic IO

Logic IO RTCU MX2 turbo Bedienungsanleitung

Suttle

Suttle MediaMAX MXM-521 Bedienungsanleitung

RTA

RTA 460MCBC-N2E Technisches Datenblatt