ZyXEL 70 User Manual

ZyWALL 70

Internet Security Appliance

Recommended for

• Small and Medium Businesses looking for a cost-effective security appliance and VPN concentrator

• Businesses that have two Internet connections and require non-stop Internet services

• Businesses that are concerned about ease-of-use and remote management through a secure connection

• Organizations with up to 200 users

• Businesses that need a dynamically updated database to provide accurate web content filtering services (powered by Bluecoat)

Features

Virtual Private Network

• 100 simultaneous IPSec VPN Connections

• Max. 50Mbps 3DES/AES VPN performance

• Manual Key, IKE and PKI (X.509)

• IPSec NAT Traversal

Firewall Security

• Transparent Firewall (bridge mode)

• Stateful Packet Inspection

• DoS and DDoS Protection

• Real-time Attack Alert and Logs

Traffic Management

• Dual WAN auto fail-over, fall-back,

policy router

• Dual WAN Load Balancing

• Policy-based Traffic Shaping

• Priority-bandwidth Utilization

• Guaranteed and Maximum

Bandwidth Allocation

Content Filtering

• Java/Active X/Cookie/Proxy Blocking

• URL and Keyword Blocking

• Web Content Filtering (Bluecoat)

Network

• DHCP client/relay/server

• PPPoE

• PPTP

System Management

• WebGUI (HTTP and HTTPS)

• Command Line Interface

(Console, Telnet, SSH)

• Firmware Upgrade

(WebGUI, TFTP/FTP/SFTP)

• Vantage Centralized Network Management

Wireless (Optional)

• IEEE 802.11b/11g compliant

• 128-bits WEP Encryption

• IEEE 802.1x Port-Based Authentication

with RADIUS Client

• IPSec VPN over WLAN

• WPA

Specifications

Hardware Specification

• Power: 100 ~ 240 VAC

• LAN: 10/100 Mbps Ethernet

• WAN1 & WAN2: 10/100 Mbps Ethernet

• 4-port DMZ: 10/100 Mbps Ethernet

• Reset Button

• RS-232 DB9F: Console

• RS-232 DB9M: Dial Backup

• Extension Card Slot for Wireless ready

& optional service*

Physical Specification

• Dimensions:

355(L) x 200(D) x 55(H) mm

• Weight: 2,600g

Operating Environment

• Operating Temperature: 5 ~ 45ºC

Application Diagram

Internet Security Appliance

World Wide Web

LAN

(Trusted Network)

Server

ZyWALL 70

Headquarters

Content
filtering

Firewall

DSL Modem

DSL Modem

(Notebook with ZyWALL

Remote Security Client)

Hackers

Mobile User

Internet

VPN Tunnel

World Wide Web

• Operating Humidity: 20 ~ 95%

(non-condensing)

Certification

• EMC: FCC Class B, CE-EMC Class B,

C-Tick Class B, VCCI Class B

• Safety: CSA International, CE EN60950-1

MTBF (Bellcore model)

• 40.9 years

* For future release

Hackers

DSL
Modem

ZyWALL 35

Branch Office/Remote Office

Content filtering

Content filtering

Firewall

Firewall

ZyWALL 5

SOHO

World Wide Web

Hackers

Feature Matrix

Model Name ZyWALL 2 ZyWALL 5 ZyWALL 35 ZyWALL 70

Performance
Firewall Throughput 12Mbps 80Mbps 90Mbps 100Mbps
VPN 3DES/AES Throughput 2.2Mbps 25Mbps 40Mbps 50Mbps
User Licenses Unlimited Unlimited Unlimited Unlimited
Concurrent Sessions 1,024 6,000 10,000 10,000
Simultaneous IPSec VPN connection 2 10 35 100

Physical Specification

Ports (10/100Mbps Auto
sensing & MDI/MDIX) 1xWAN 2xWAN 2xWAN

Extension Card Slot

Optional Services* Optional Services* Optional Services*
RS-232 console • • • •
Power Supply 12VDC 12VDC 12VDC 100 ~ 240VAC
Rack-Mounted - • • •
Wall-Mounted • • • ­ Dimensions (LxDxH, mm) 181 x 128 x 36 242 x 175 x 35.5 242 x 175 x 35.5 355 x 200 x 55
Weight 330g 1,200g 1,200g 2,600g

Mode of Operation

Routing/NAT/SUA Mode • • • •
Transparent Mode - • • •
Dial Backup • • • •
Firewall (ICSA Certified)
IP Protocol/Packet Filter • • • •
DoS and DDoS protections • • • •
Stateful Packet Inspection • • • •
Transparent Firewall - • • •
Web Content Filtering • • • •
VPN (ICSA Certified)
Manual key, IKE • • • •
PKI (X.509) • • • •
Encryption (DES, 3DES and AES) • • • •
Authentication (SHA-1 and MD5) • • • •
IPSec NAT Traversal • • • •
Xauth User Authentication (Internal
Database and External RADIUS)
Traffic Management
Guaranteed/Maximum Bandwith - • • •

Internet Security Appliance

ZyWALL 70

Policy-based Traffic shaping - • • •
Priority-bandwidth utilization - • • •
High Availability (HA)
Auto fail-over, fall-back • • • •
Dial Backup • • • •
Dual WAN ports for WAN
backup and Load Balance
System Management
WebGUI (HTTP and HTTPS) • • • •
Firmware Upgrade
(WebGUI, TFTP/FTP/SFTP)
Vantage CNM • • • •
Wireless
IEEE 802.11b Compliant - • • •
IEEE 802.11g Compliant - • • •
IEEE 802.1x Authentication (Internal
Database and External RADIUS)
Logging/Monitoring
Centralized Logs • • • •
Attack alert • • • •
System status monitoring • • • •

(*) For future release

4xLAN, 1xWAN

4xLAN/DMZ, 4xLAN/DMZ, 1xLAN, 4xDMZ,

•, Wireless and •, Wireless and •, Wireless and

-

• • • •

- - • •

• • • •

- • • •

Corporate Headquarters
ZyXEL Communications Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
http://www.zyxel.com
http://www.zyxel.com.tw

Copyright©2005 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo are registered trademarks of ZyXEL Communications Corp. Other trademarks and service names referenced are properties of their respective holders. All specifications are subject to change without notice.

Denmark

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.dk

Finland

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.fi

France

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.fr

Germany

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.de

North America

Tel: [phone]
Fax: [phone]
Email: [e-mail]
http://www.us.zyxel.com

Norway

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.no

Spain

Tel: [phone] Fax: [phone]
Email: [e-mail]
http:// www.zyxel.es

Sweden

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.se

65-100-007006