Truly Integrated Security for Remote Offices, Retail Locations and Small Businesses

Transcription

1 405 Ansfelden, Austria :: Seite 1 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Truly Integrated Security for Remote Offices, Retail Locations and Small Businesses Allinone Next Generation Firewall (NGFW) for small businesses Antimalware protection with firewall, antivirus, antispam, content filtering, IDP, and nextgeneration application intelligence Robust SSL, IPSec and LTP over connectivity Integrated singleradio (USG40W) or dualradio (USG60W) wireless access point Builtin WLAN controller for centralized management of up to 10 APs The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more WiFi for an exploding amount of smart devices. The use of cloudbased social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to new Web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources. The new ZyXEL USG Performance Series are allinone Next Generation Firewalls (NGFW) specifically designed to fulfill the demands BYOD, malware protection, application regulation, and budget control in small business environments. The builtin wireless AP (USG40W and USG60W) and WLAN controller offer instant wireless hotspot capability and future WLAN scalability. Comprehensive UTM features and application intelligence technology provides deep, extensive protection, while keeping businesses in control of how Web applications are used. The allinone design integrates everything small businesses need, delivering easier, more centralized management and lower total cost of ownership (TCO). Benefits Spend less, get more The ZyXEL USG Performance Series offers small businesses the lowest total cost of ownership. The allinone design provides everything small businesses need: antimalware protection, VPN connectivity, integrated WLAN controller, and builtin wireless access point. This truly integrated security solution eliminates the need to purchase multiple appliances for different functions, and allows small businesses to connect, protect and manage with just one device. Peace of mind security The ZyXEL USG Performance Series delivers enterprisegrade Next Generation Firewall security without the hefty price tag. It provides deep, extensive protection and effective control of Web applications like Facebook, Google Apps and Netflix with such antimalware protection mechanisms as firewall, antivirus, antispam, content filtering, IDP and application intelligence. No longer do small businesses need to worry about threats, spam or social networking sites decreasing productivity. Performance Series Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

2 405 Ansfelden, Austria :: Seite von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Unified Security Performance Series WiFi where you need it Addressing the trend of BYOD, the ZyXEL USG Performance Series helps small businesses provide WiFi wherever there is demand. The USG40W and USG60W feature builtin singleradio and dualradio wireless access points that can provide WiFi for small offices straight out of the box. With an integrated WLAN controller, the USG Performance Series enables businesses to easily provide WiFi in multiple other areas like reception areas and meeting rooms when WiFi demand grows. Single point of management Designed specifically for businesses with limited IT resources, the ZyXEL USG Performance Series helps users connect, protect and manage with reduced complexity. The unified security policy design offers easier, more unified and streamlined management of all the security features; while the integrated WLAN controller provides centralized management of up to 10 APs. All this is integrated into a single solution, making it easy for users to manage VPN, wireless and security all from one device. List USG60 USG60W 6 x GbE RJ45, x USB (dualwan & mobile broadband) 1,000 Mbps firewall throughput 180 Mbps VPN throughput 10 Mbps IDP throughput 90 Mbps AV throughput 90 Mbps AV and IDP throughput 6 x GbE RJ45, x USB (dualwan & mobile broadband) Builtin dualradio AP (80.11 a/b/g/n) 1,000 Mbps firewall throughput 180 Mbps VPN throughput 10 Mbps IDP throughput 90 Mbps AV throughput 90 Mbps AV and IDP throughput USG40 USG40W 5 x GbE RJ45, 1 x USB (dualwan & mobile broadband) 400 Mbps firewall throughput 100 Mbps VPN throughput 55 Mbps IDP throughput 50 Mbps AV throughput 50 Mbps AV and IDP throughput 5 x GbE RJ45, 1 x USB (dualwan & mobile broadband) Builtin singleradio AP (80.11 b/g/n) 400 Mbps firewall throughput 100 Mbps VPN throughput 55 Mbps IDP throughput 50 Mbps AV throughput 50 Mbps AV and IDP throughput Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

3 405 Ansfelden, Austria :: Seite 3 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Performance Series Feature Introduction Builtin Wireless AP Integrated WLAN Controller Built with singleradio and dualradio wireless access The integrated WLAN controller supports CAPWAP, points, the ZyXEL USG40W and USG60W are ideal for and enables centralized authentication and access retail and office environments. The USG60W integrates management of multiple APs in the network. The ZyXEL a/b/g/n technology that delivers WiFi over both USG Performance Series can manage APs by default, the.4 GHz and the 5 GHz spectrums. and up to 10 APs with license upgrade. Policy Application Intelligence Unified security policy offers objectbased management ZyXEL s USG Performance Series can identify, categorize and a unified configuration interface for firewall and all and control over 3,000 social, gaming, productivity, and securityrelated policies. Users can easily apply all policy other Web applications and behaviors. Users can prioritize criteria to every UTM feature, reduce configuration time, productive applications, throttle acceptable ones, and and get more streamlined policy management. block unproductive applications to boost productivity and prevent bandwidth abuse. AntiVirus Intrusion Detection & Prevention (IDP) Powered by Kaspersky SafeStream II gateway antivirus, ZyXEL s IDP system uses Deep Packet Inspection (DPI) ZyXEL USGs provide comprehensive and realtime technology that can scan multiple layers and protocols protection against malware threats before they enter the to inspect vulnerabilities invisible to simple port and network. ZyXEL USGs can identify and block over 650,000 protocolbased firewalls. ZyXEL s IDP eliminates false viruses right at the gate and provide highspeed scanning positives with a database of malware signatures and with streambased virus scanning technology. provides effective protection against intrusions from unknown back doors. AntiSpam Content Filtering With a cloudbased IP reputation system, ZyXEL anti ZyXEL content filtering helps screen access to websites spam can deliver accurate, zerohour spam outbreak that are not business related or malicious. With a massive, protection by analyzing uptotheminute sender cloudbased database of over 140 billion URLs that are reputation data from highly diverse traffic sources. It continuously analyzed and tracked, ZyXEL provides highly can detect spam outbreaks in the first few minutes of accurate, broad and instant protection against malicious emergence regardless of spam language or format. Web content. Robust VPN DualWAN & Mobile Broadband ZyXEL USGs support highthroughput IPSec, LTP over The ZyXEL USG Performance Series provides high Internet IPSec and SSL VPN for a wide range of sitetoclient uptime with dualwan and mobile broadband support. and sitetosite VPN deployments. Reinforced with the DualWAN works with two Ethernet WAN connections for advanced SHA encryption, the ZyXEL USGs provide the activeactive load balancing or activepassive failover. most secure VPN for business communications. Comprehensive mobile broadband USB modems are also supported for WAN backup. 3 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

4 405 Ansfelden, Austria :: Seite 4 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Performance Series Application Diagram Antimalware protection and application optimization Enabling antivirus, antispam and intrusion prevention, business networks gain deep, extensive protection against all types of Nonproductive Web applications Nonproductive Web applications AntiVirus malware threats Content Filtering Intrusion AntiVirus Application Intelligence Prevention & Optimization Content AntiSpam Filtering to deny access to Websites that are malicious or not businessrelated not only enable businesses to block Network Extend Remote Desktop BI System Network Inventory File Extend Sharing Web OA, ERP, Apps CRM System AntiSpam Content filtering enables businesses Application intelligence technology Intrusion Prevention Remote Desktop File Sharing DMZ Resources BI System Web Apps OA, ERP, CRM System Productive Web applications DMZ Resources Application Intelligence & Optimization Internet Inventory Productive Web applications or throttle nonproductive Web applications, but also optimize Internet SPAM Web applications that increase productivity SPAM Viruses, intrusions, malicious Websites, spam Workgroup Viruses, intrusions, malicious Websites, spam Workgroup VPN application Branch offices, partners and home users can deploy ZyXEL USGs for Microsoft Azure sitetosite connections Branch offices can additionally Branch Microsoft Office Azure deploy HA (load balancing and failover) for always online VPN connectivity Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and LTP over USG110 Branch Office USG1900 Remote Desktop BI System Network Inventory File Extend Sharing Web OA, ERP, Apps CRM System USG110 HA Inventory USG1900 Web OA, ERP, CRM System access to a variety of cloudbased Partner Office Partner Office USG1100 USG1100 Home User SSL VPN LTP over DMZ Resources Headquarters HA with Microsoft Azure for secured File Sharing DMZ Resources System Apps Headquarters The headquarter USG can also applications Network Extend BI establish an connection Remote Desktop SSL VPN LTP over USG40W Home User USG40W 4 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

5 405 Ansfelden, Austria :: Seite 5 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Unified Security Performance Series Specifications USG60W USG60 USG40W USG40 4 x LAN/DMZ, x WAN 4 x LAN/DMZ, x WAN 3 x LAN/DMZ, 1 x WAN, 1 x OPT 3 x LAN/DMZ, 1 x WAN, 1 x OPT Hardware Specifications 10/100/1000 Mbps RJ45 ports USB ports Console port Rackmountable 1 1 (DB9) (DB9) (RJ45) (RJ45) (Optional) System Capacity & Performance*1 SPI firewall throughput (Mbps)* 1,000 1, VPN throughput (Mbps)* IDP throughput (Mbps)* AV throughput (Mbps)* UTM throughput (AV and IDP)* Unlimited user licenses 0,000 Max. TCP concurrent sessions*5 40,000 40,000 0,000 New TCP session rate 3,000 3,000 3,000 3,000 Max. UTM (AV & IDP) concurrent sessions*5 40,000 40,000 0,000 0,000 Max. concurrent IPsec VPN tunnels Max. concurrent SSL VPN users Included SSL VPN user no. Customizable zones IPv6 support VLAN interface WLAN Management AP Controller (APC) ver. Managed AP number (default/max.) /10 /10 /10 /10 Wireless Specifications Standard compliance Wireless frequency Radio SSID number Maximum transmit power (Max. total channel) a/b/g/n b/g/n Concurrent.4 & 5 GHz.4 GHz US (FCC).4 GHz 4.3 dbm, antennas 4.3 dbm, antennas US (FCC) 5 GHz 5.8 dbm, antennas 17 dbm, antennas 17 dbm, antennas 5.6 dbm, antennas.4 GHz: TR MIMO 5 GHz: TR MIMO (Detachable, SMAR).4 GHz: TR MIMO (Detachable, SMAR) EU (ETSI).4 GHz EU (ETSI) 5 GHz No. of antenna Antenna gain 3 dbi 3 dbi b/g: 1,, 5.5, 6, 9, 11, 1, 18, 4, 36, 48 and 54 Mbps 80.11a: 6, 9, 1, 18, 4, 36, 48 and 54 Mbps 80.11n: up to 300 Mbps in MCS15 (40 MHz; GI = 400 ns) b/g: 1,, 5.5, 6, 9, 11, 1, 18, 4, 36, 48 and 54 Mbps 80.11n: up to 300 Mbps in MCS15 (40 MHz; GI = 400 ns).4 GHz.4 GHz: 11 Mbps 87 dbm 54 Mbps 77 dbm HT0 71 dbm HT40 68 dbm.4 GHz: 11 Mbps 87 dbm 54 Mbps 77 dbm HT0, MCS15 71 dbm HT40, MCS15 68 dbm 5 GHz 5 GHz: 54 Mbps 75 dbm HT0, MCS15 71 dbm HT40, MCS15 69 dbm Data rate Receive sensitivity 5 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

6 405 Ansfelden, Austria :: Seite 6 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Performance Series USG60W USG60 USG40W USG40 (IPSec, SSL, LTP over IPSec) (IPSec, SSL, LTP over IPSec) (IPSec, SSL, LTP over IPSec) (IPSec, SSL, LTP over IPSec) Firewall AntiVirus (AV) Antispam Content Filtering (CF) Application intelligence and optimization Intrusion Detection and Prevention (IDP) Single SignOn (SSO) 1 V DC, 3.0 A max. 1 V DC, 3.0 A max. 1 V DC,.0 A max. 1 V DC,.0 A max , , , , x 186 x 36/ 10.7 x 7.3 x x 175 x 36/ 9.53 x 6.89 x x 143 x 33/ 8.50 x 5.63 x x 143 x 33/ 8.50 x 5.63 x / / / 0.89/1.96 Key Software Features Virtual Private Network (VPN) Power Requirements Power input Max. power consumption (watt) Others MTBF (hr) Physical Specifications Item dimensions (WxDxH)(mm/in.) Item weight (kg/lb.) *1: Actual performance may vary depending on network conditions and activated applications. *: Maximum throughput based on RFC 544 (1,518byte UDP packets). *3: VPN throughput measured based on RFC 544 (1,44byte UDP packets). *4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460byte HTTP packets). Testing done with multiple flows. *5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. Features Set Software Features DHCPv6 Firewall Bridge ICSAcertified firewall (certification in VLAN Key management: manual key, IKEv1 and IKEv with EAP Perfect forward secrecy (DH groups) support PPPoE progress) 1,, 5 Routing and transparent (bridge) modes Static routing IPSec NAT traversal Stateful packet inspection Policy routing Dead peer detection and relay detection Useraware policy enforcement Session control PKI (X.509) certificate support SIP/H.33 NAT traversal Firewall and ADP VPN concentrator ALG support for customized ports Simple wizard support Protocol anomaly detection and protection Intrusion Detection and Prevention (IDP) VPN autoreconnection Traffic anomaly detection and protection Application intelligence and optimization VPN High Availability (HA): loadbalancing Flooding detection and protection Content filtering DoS/DDoS protection Antivirus, antimalware LTP over IPSec Antispam GRE and GRE over IPSec NAT over IPSec IPv6 Support IPv6 Ready gold logo (certification in and failover ICSAcertified (certification in progress) Dual stack IPv4 tunneling (6rd and 6to4 transition tunnel) IPv6 addressing ZyXEL VPN client provisioning SSL VPN progress) Encryption: AES (56bit), 3DES and DES Supports Windows and Mac OS X Authentication: SHA (51bit), SHA1 and Supports full tunnel mode MD5 Supports step authentication Customizable user portal DNS 6 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

7 405 Ansfelden, Austria :: Seite 7 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Performance Series Intrusion Detection and Prevention (IDP) Policy Authentication Routing and transparent (bridge) mode Unified policy management interface Local user database Signaturebased and behaviorbased Supported UTM features: antivirus, anti Microsoft Windows Active Directory scanning spam, IDP, content filtering, application Automatic signature updates Customizable protection profile Customized signatures supported Application Intelligence and Optimization Granular control over the most important applications intelligence, firewall (ACL) 3tier configuration: objectbased, profilebased, policybased integration External LDAP/RADIUS user database XAUTH, IKEv with EAP VPN authentication Webbased authentication Policy criteria: zone, source and destination IP address, user, time Forced user authentication (transparent authentication) IPMAC address binding WLAN Management ZyXEL AP Controller (APC) 1.0 compliant SSO (Single SignOn) support Client RSSI threshold to prevent sticky clients System Management Supports over 15 application categories IEEE 80.1x authentication Rolebased administration Application bandwidth management Wireless Layer isolation Multiple administrator logins Supports user authentication Captive portal Web authentication Multilingual Web GUI (HTTPS and HTTP) Realtime statistics and reports Customizable captive portal page Command line interface (console, Web AntiVirus Dynamic guest accounts Identifies and controls over 3,000 applications and behaviors Supports Kaspersky antivirus signatures Identifies and blocks over 650,000 viruses Streambased antivirus engine HTTP, FTP, SMTP, POP3 and IMAP4 protocol support Automatic signature updates No file size limitation AntiSpam Transparent mail interception via SMTP and POP3 protocols Configurable POP3 and SMTP ports Senderbased IP reputation filter SNMP vc (MIBII) WiFi Multimedia (WMM) wireless QoS System configuration rollback CAPWAP discovery protocol Firmware upgrade via FTP, FTPTLS and Web ZyXEL Wireless Optimizer (ZWO) AP planning Dual firmware images WAN connection failover via 3G and 4G* USB Logging and Monitoring modems Comprehensive local logging Auto fallback when primary WAN recovers Syslog (to up to 4 servers) * 4G USB modem support available in future firmware upgrades alerts (to up to servers) Realtime traffic monitoring Networking Routing mode, bridge mode and hybrid mode Ethernet and PPPoE Zerohour virus outbreak protection NAT and PAT XHeader support VLAN tagging (80.1Q) Blacklist and whitelist support Virtual interface (alias interface) Supports DNSBL checking Policybased routing (useraware) Spam tag support Policybased NAT (SNAT) Statistics report Dynamic routing (RIPv1/v and OSPF) Content Filtering DHCP client/server/relay Malicious Website filtering URL blocking and keyword blocking Blacklist and whitelist support Blocks java applets, cookies and ActiveX Dynamic, cloudbased URL filtering database GUI Mobile Broadband Recurrent Pattern Detection (RPD) technology Social media filtering console, SSH and TELNET) RADIUS authentication Builtin daily report Advanced reporting with Vantage Report Dynamic DNS support WAN trunk for more than ports Per host session limit Guaranteed bandwidth Maximum bandwidth Prioritybandwidth utilization Unlimited user license support Customizable warning messages and redirection URL 7 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!

8 405 Ansfelden, Austria :: Seite 8 von 8 :: Datenblatt zum Produkt Zyxel ZYXEL Firewall Appliance 10/100/1000 4x LAN/DMZ x WAN UTM Bundle mit DC# :: Unified Security Performance Series Licenses Security Kaspersky AntiVirus Application Intelligence & IDP Content Filtering AntiSpam USG60/60W years years years years USG40/40W years years years years Notes: 1. ZyXEL USGs can be purchased with 13month bundled licenses (antivirus, antispam and content filtering), which include a 1month trial.. Licenses can be easily activated, renewed and managed at myzyxel.com ( 3. License bundles may vary according to region. Please contact your local sales representative for more information. VPN, Management and Reporting SSL VPN Managed APs Client Vantage Report For 1 client For 5 clients For 10 clients For 50 clients For 1 device For 5 devices For 5 devices For 100 devices USG60/60W Add 5 tunnels Add 8 APs USG40/40W Add 5 tunnels Add 8 APs Access Point Compatibility List NWA3000N Series NWA5000 Series NWA510 Series Unified Pro Access Point Managed Access Point Unified Access Point NWA3160N NWA3560N NWA3550N NWA5160N NWA5560N NWA5550N NWA511NI NWA511N NWA513NI Central management Auto provisioning Local bridge Local bridge Local bridge Series Functions Data forwarding Fo r m o re p ro d u c t i n fo r m at i o n, v i s i t u s o n t h e we b at w w w. Zy X E L. co m Copyright 014 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice /14 Fragen zu dem Produkt? Kein Problem wir helfen Ihnen per ([email protected]) gerne weiter!