Key Features
Ł
All-new Platform: “3rd”
Generation ZyWALL
Ł
22x Faster than PreviousGeneration ZyWALL Firewalls
Ł
New Generation UTM Solution
Ł
Robust Hybrid VPN
(IPSec and SSL)
Ł
Application Firewall
Ł
Web Security (Security Web
Access): ZyXEL Safe Browsing
Ł
Non-Stop Internet Access with
Multiple WAN and 3G Backups
Ł
ICSA Firewall, IPSec Certification
Ł
Comprehensive Report System
Ł
Best-of-breed Security Solution
Ł
Free Anti-Spam Service
Ł
ZyXEL Security Distribution
Network (ZSDN)
The ZyWALL USG (Unified Security Gateway) Series is the “third generation” ZyWALL featuring
an all-new platform. It provides the performance 22 times faster than the previous-generation
ZyWALL firewalls, as well as a deep packet inspection security solution for small businesses to
enterprises alike. It embodies a Stateful Packet Inspection (SPI) firewall, Anti-Virus, Intrusion
Detection and Prevention (IDP), Content Filtering, Anti-Spam, and VPN (IPSec/SSL/L2TP) in one
box. This multilayered security safeguards your organization’s customer and company records,
intellectual property, and critical resources from external and internal threats.
Key Benefits
Secure Connectivity
Given the prevalence and importance of information technology (IT) systems today and the nature and
scale of both the opportunities and risks associated with significant deployments of new networking
technologies, organizations are forced to evaluate solutions to build up a safer infrastructure to secure
online transactions, in which involve exchange of valuable information. The infrastructure should be
tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers.
Proactive Protection
Malicious virus, worm, exploits could cripple corporate networks and halt business transactions. In addition
to severe financial loss, you also risk leakage of confidential information.
As mass-mailing software companies mushroom on the Internet, your network is bombarded with massive
amounts of junk mails (spam). Without intelligent detection and proactive blocking, users have to go
through the tedious and time-consuming task of sieving through the overflowing mailbox, and such
scenario leads to serious productivity loss.
Policy Compliance
With numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company
employees to share files and chat online during work hours. Rapid file sharing not only compromises
network safety with the sharing of questionable files containing malicious viruses, but may also violate
copyright issues and create legal hassles.
For more product information, visit us on the web at www.ZyXEL.com
Copyright © 2009 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of
ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their
respective owners. All specifications are subject to change without notice.
65-100-000046B 10/09
Enterprise
Enterprise
Security
Security
ZyWALL Unified Security
ZyWALL Unified Security
Gateway Series
Gateway Series
(100/200/300/1000/2000 Series)
(100/200/300/1000/2000 Series)
Network Resilience
ISP links broken, hardware and software failure on the gateway, dead VPN tunnels—these are severe
challenges IT staff face when designing the network infrastructure. In short, we need to take fault tolerance
on the network path into consideration when build up a highly available network infrastructure for nonstop operations.
Manageability
With Vantage CNM (Centralized Network Management), users can achieve the follow objects:
• Easy VPN management and diagnostic capability
• Complete security policies and UTM management
• Low TCO of massive deployment and device maintenance
• Active monitoring, alerting and comprehensive graphic reports
The solution provides an efficient centralized management system for enterprises of any size to reduce
operational costs regardless of the number of branch offices or remote locations.
Cost-effectiveness
With the adoption of ZyXEL’s USG device, the follow costs can be saved:
• Device hardware maintenance fee: ZyXEL provides a one more year hardware warranty out of factory.
• FreeSoftware upgrade: now ZyXEL provides free software upgrade for you to enjoy complete protection
without additional expanse.
Key Applications
Enterprise Security
Enterprise Security
ZyWALL Unified Security
ZyWALL Unified Security
Gateway Series
Gateway Series
(100/200/300/1000/2000 Series)
(100/200/300/1000/2000 Series)
ZyWALL USG Clean-traffic Architecture
The ZyWALL USG’s clean-traffic architecture
protects against network risks such as viruses,
worms, Trojan Horses, spyware, phishing attacks
and other emerging Internet threats. With the
clean-traffic architecture, enterprises users are
assured to have clean and secure network
environments.
Traffic Out
Network
I/O Engine
Defragment
hre
ALG DNAT Routing
e
Update
Forwarding Engine
SNAT BWM
Stateful Firewall
ADP (PA/TA)
Application Classifier
IDP
Anti Virus
Application Patrol
Content Filter
AS
Traffic Out
lean
ffi
High Performance
22x faster than previous-generation
ZyWALL firewalls
400
350
300
250
200
150
100
UTM throughput in Mbps
The New Generation USG Firewall
22x faster than previous
generation ZyWALL firewalls
50
5
35
70
yWALL USG 10
yWALL USG 20
yWALL USG 30
ZyWALL USG 1000
ZyWALL USG 2000
New Generation UTM Solution
The ZyWALL USG Series deploys hardware-
acceleration technology in one box. Powered
by high-performance SecuASIC technology
and a hardware-based encryption
accelerator, the ZyWALL USG Series delivers
industry-leading performance and multi-
layer threat protection for small businesses
and enterprises. The ZyWALL USG Series
provides integrated Unified Threat
Management security features such as Anti-
Virus (include Kaspersky Anti-Virus & ZyXEL
Anti-Virus), IDP, Anti-Spam, Content Filtering
and Firewall, VPN. All ZyWALL USG Series
products support the Gigabit Ethernet.
Intrusion Detection
and Prevention
Content Filter
Anti-Virus
Anti-Spam
Firewall
VPN
Inbound Threats Outbound Threats
Robust Hybrid VPN (IPSec and SSL)
The ZyWALL USG Series can provide secure
access between remote locations and
corporate resources through the Internet for
organizations of any size. Using IPSec VPN,
companies can secure connections to branch
offices, partners and headquarters. Road
warriors and telecommuters can use SSL or
L2TP VPN to safely access the company
network without having to install VPN
software. The Series provides a flexible and
easy way to enable mobile employees,
vendors and partners to confidently access
your network resource for better efficiency.
Mobile User
IPSec VPN
h
Branch
Client
SSL VPN
Headquarters
Email
Server
Web-based
Application
Server Farm
BI
System
Application Server
(Inventory, Store...)
File
Share
Remote
Desktop
OA, ERP System
CRM System
Network
Extend