Zyxel LIC-SAPC Datasheet

Security Service
and License

Solution Brief

Ultimate defense against

65%

7%

7%

6%

4%

11%

unknown threats

Zyxel Security
Service

Zyxel security service, empowered by cloud AI

intelligence, toughens every cyber fabric in your

business network with best-in-breed UTM performance

and flexible options not only for business of all sizes but

also for various verticals, empowering your network with

reliable connectivity, cutting-edge cloud manageability,

robust protection against all cyber threats, along with

informative analytics and reporting service.

Why Choose
Zyxel

Businesses deploy network security appliances for

two main purposes: to protect company resources

against a multitude of threats and to enable secured

communications between multiple locations via Virtual

Private Network (VPN). For many years, Zyxel’s highly-

acclaimed Unified Security Gateway (USG) Series has

helped businesses accomplish all these demands.

Fortifying businesses against a new generation of

threats, Zyxel is offering a new line of ZyWALL ATP

Firewall and USG FLEX series that delivers unmatched

capacity, performance and protection for businesses of

all sizes.

Zyxel Security Cloud

37,000,000,000

URL database for managed

category service

800,000,000

Domain database for managed

category service

96%

of bad IP addresses showed

malicious activities more than once

4,000,000,000

IP address database for security

category service

1,200,000,000

Unique malware hashes

125%

Malware targeting Windows 7

increased by 125%

5,000,000

End users protected by ZyWALL

640%

Phishing URL grew

2

Solution Brief Security Service and License

Multi-layered Technology Stops
Various Types of Threat

Anti-Malware

Zyxel Firewall is designed with multi-layer protection

against multiple types of threats from in and out. ATP

series features Sandboxing, Malware Blocker, Reputation

Filter, and Intrusion Prevention block external attacks

while Application Patrol and Web Filtering empower you

to restrict users’ inappropriate application usage or web

access. The leading DNS Content Filter helps businesses

eliminate blind spots against encrypted traffic with

TLS1.3. All together safeguarding your network without

any unattended gaps.

URL Threat Filter

Malicious IP

Anti-Spam

Sandboxing

Solution Brief Security Service and License

Intrusion
Detection &
Prevention

3

Subscription services

.ZIP

Reputation
Filter

70% of Threats can be Stopped by Reputation Service

Reputation Filter consist of IP Reputation, DNS Filter,

and URL threat filter, matches up IP/domain/URL

addresses with the always-up-to-date cloud reputation

database and determines if an address is reputable

or not. This improves blocking efficiency, restricts

access to malicious domain/URL, and blocks access

from compromised sources, thus providing granular

protection against ever-evolving cyber threats.

DNS Threat Filter completes the Reputation Services

DNS Filter is an inexpensive approach to mitigate the

risk of downloading a web-based threat by blocking

access to URL/domain known to malicious content.

By effectively relieving HTTPS traffic, work better

together with IP and URL reputation, as a complete set

of Reputation solution for threat preventions. It also

reduces the risk of phishing attacks – thus enhancing

an organization’s online security posture further.

Sandboxing

Why Use Sandboxing for Protection?

Cyber attacks are becoming more sophisticated, and

it is no longer a challenge to break through traditional

security defense lines. You are likely running several

security technologies to protect your organization

from attacks, however, you may still be at risk from

the unknown.

Defeat the Unknown Threats

Sandboxing is an isolated cloud environment to contain

unknown files that cannot be identified by existing

security service on device and to emulate those

unknown files to identify whether they are malicious or

not. Key values from sandboxing is to inspect packet

behavior in isolation so the potential threat does not

enter the network at all, and to identify new malware

types which the conventional static security mechanism

may not detect. Cloud sandboxing with Zyxel ATP

Firewall Series is a preventive measure for zero-day

attacks of all sorts.

IPS/IDP

IPS/IDP is a network security and threat prevention

technology that helps businesses to establish timely

security measures against known attacks while fully

safeguarding a network environment with anomaly

traffic detection and prevention. The IPS/IDP guards

your business from a wide range of attacks and

suspicious activities such as SQL injection, DoS, and

malicious backdoor applications.

Anti-Malware

ZyWALL series not only supports a stream-based

engine that scans files at the gateway for viruses and

other threats but also runs cloud query simultaneously

to leverage the multiple-sourced databases

from Zyxel security cloud, a machine learning threat

intelligence that can adapt to newly identified unknown

threats. This hybrid mode protection effectively

maximizes malware detection rate without sacrificing

throughput.

.ZIP

.ZIP

Unknown

Threats

New threat information

Contain

unknown files

.ZIP

Update

into database

.ZIP

Execute

files in virtual
environment

Analyse

file content
and behavior

Identify

Malicious
attacks

Defense

Intelligence

Solution Brief Security Service and License Solution Brief Security Service and License

4 5

Stay ahead of threats

Application
Patrol

Application Patrol identifies and controls

thousands of applications and its behavior to

better prioritize, throttle and block applications to

boost productivity and prevent bandwidth abuse. The

service leverages Deep Packet Inspection module,

controls employee network use and covers 30

categories of applications, allowing businesses to

customize management protocols based on specific

applications and behaviors.

Web

Email Security/
Anti-Spam

To ensure uninterrupted email communications,

Zxyel Anti-Spam can filter out malware and spam to

provide the most thorough protection for any end point

under an internal network. Anti-Spam utilizes several

techniques to filter email, detecting on both SMTP and

POP3 packets through local rules and a real-time cloud

database. Reduces unsolicited e-mail and increases

business productivity by allowing you to block spam on

the network edge.

Geo

Collaborative
Detection & Response

A New Connected Security Frontier

Collaborative Detection & Response (CDR) identifies

threats and risks posed in the organization workforce,

workload, and workplace. Depending on the attack

frequency and threat level, it generates a protection

rule. The integrated cloud threat intelligence takes a

great leap forward to adopt this generated protection

rule to automatically stop threats at the network edge

by blocking or quarantining, preventing damage to

the network. It’s a perfect fit for SMB(s) to address the

requirements of a decentralized, IoT-driven network

infrastructure.

Filtering

Improve security by blocking access to malicious or

risky web sites, control access with integrated firewall

policy for highly granular blocking and filtering with

the Zyxel’s Web Filtering/Content Filtering. Integrates

with evolving cloud database to protect your business

defense undesirable access to malicious, hacked, or

inappropriate websites with technologies including

URL filtering, HTTPS domain filter, safe search, and Geo

IP blocking. A newly added DNS content filter offers a

better approach to inspect web access, particularly

when the website is deploying ESNI (Encrypted Server

Name Indication) where the traditional URL filtering fails

to identify the destination domain.

Enforcer

Geo Enforcer identifies the country of origin of

incoming traffic by examining its IP address. Monitors

traffic and analyzes log data of IP address locations

while denying access from unnecessary or potentially

dangerous traffic. You can also block specific high-risk

agents or internet service providers to protect your

network. More security for your business network with

less management time required.

Zyxel

Security Cloud

10/100/1000

USB

P1

P2 P3 P4 P5 P6 P7 P8

1 2

PWR

LNK

SYS

RESET

ACT

10/100/1000

P1 P2 P3 P4 P5 P6 P7 P8 P9 P10 P11 P12

PWR

RESET

SYS

2

1

CONSOLE

P13

P14

LNK

LNK

ACT

ACT

Solution Brief Security Service and License

6

Solution Brief Security Service and License

7

Visualize threats

Same security

analytics and reports

SecuReporter

Cloud–Based Analytics Service

The Zyxel CNM SecuReporter is a cloud-based

intelligent analytics and report service with collection

and correlation features designed for ZyWALL product

lines. It provides network administrators with a

centralized view of network activities and potential

threats within the entire network, enabling

IT professionals to proactively monitor network status,

block, or stop an attack.

A 360 Degree Analysis of Your Cybersecurity

The number of cybersecurity threats and their

complexities are growing, which drives the need

for 360-degree visibility for monitoring network.

SecuReporter offers multiple dimensions of analytics on

abnormal behaviors across your business. Analyze the

time trend, threat type, signature, and email subject leads

for precise detection. Monitor malicious activity from

source IP and destination IP for bidirectional analysis.

across networks

Secure WiFi

Same Security Across Networks

Businesses striking a balance on productivity and

security protection becomes a priority with growing

number of devices. Whether it is a wired, wireless, or a

IoT device, the Secure WiFi service ensures the same

network controls which can be applied to headquarters

and other remote workplaces. Easily and securely

extend working experience as if you were in the office

with the adoption of secure tunneling and strict two-

factor authentication.

Work Like You’re at the Office

Secure WiFi service is used to build a secure L2 tunnel for

Work-From-Home user to the office guaranteeing the

same security level, the same user experience, the same

WiFi and even the same IP address in the office, which

boosts up productivity and eases IT support. The Secure

WiFi service also unlocks the number of managed APs to

maximum for the ATP/USG FLEX/VPN firewall.

Remote Workplaces Office Networks

Remote AP USG FLEX Series

Secure Tunnel

Solution Brief Security Service and License

8

Solution Brief Security Service and License

9

Pick a bundle.
No more hassle

License by Bundle

A bundle license consists of multiple services that are

grouped together. They are designed for your best

convenience when you need to ensure your network is

Security Connectivity

Firewall
Series

ATP Gold Security

USG FLEX UTM Security

USG UTM Security

NSG Nebula Security

*: Pack Purchasing Options:

• Secure WiFi

• Hospitality Pack incl. Hotspot Management and Concurrent Device Upgrade

• Nebula Professional Pack

• Nebula Plus Pack

Pack Licensed Service Licensed Service

Pack

Pack

Pack

Pack

Anti-Malware/
Virus

Scan files at
the gateway
for viruses and
other threats

● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ● ●

Web Filtering/
Content
Filtering

Block access
to malicious or
risky web sites

Sandboxing Reputation

Cloud-based
sandbox
technology
against
unknown
threats

empowered with holistic functionality such as seamless

threat protection or full connectivity features. Pick the

right bundle and experience less hassle.

Filter

Block botnet
infection and
prevent drive­by download
from infected
websites via
IP and URL
detection

IPS/IDP Application

Deep-packet
inspectionw
against known
attacks from
network

Patrol

Automatically
categorize
and manage
the network
application
usage

Geo Enforcer Email Security/

Manage
network traffic
by mapping
IP address to
geographical
regions

Anti-Spam

Fast detection
to block spam/
phishing mail
with malicious
contents

SecuReporter
Premium

Cloud-based
security
analytics and
report with
30-day log
retention

Security
Profile Sync

An easy-to­use tool to help
business sync
up security
profiles across
multiple
networks

Collaborative
Detection &
Response

Automatically
contain
threats at the
network edge

Secure WiFi Hotspot

Secure tunnel
and managed
AP service

*

Management

Various
Network
Access Control

*

●

Concurrent
Device
Upgrade

Top up allowed
number of
connected
clients

*

●

Nebula
Professional
Pack

A full feature
set of cloud
configuration,
deployment,
monitoring
and
management

*

●

*

Nebula
Plus
Pack

A new feature
set includes
the most
frequently
requested
advanced
features

*

●

*

●

Solution Brief Security Service and License

10

Solution Brief Security Service and License

11

Licensed Service by Model

Security

Compatible Security
Appliances

ATP100(W)/200

ATP500/700/800

USG FLEX 100(W)

USG FLEX 200

USG FLEX 500/700

USG40(W)

USG60(W)

USG110/210/310

USG1100/1900/2200

USG20(W)-VPN

ZyWALL 110/310/1100

NSG50/100/200/300

VPN50

VPN100/300/1000

Licensed Service

Web Filtering/
Content Filtering

Block access to
malicious or risky
web sites

● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ●

● ● ●

● ● ●

Geo Enforcer Application Patrol Anti-Malware/Virus IPS/IDP Email Security/

Manage network
traffic by mapping
IP address to
geographical regions

Automatically
categorize and
manage the network
application usage

Scan files at the
gateway for viruses
and other threats

Deep-packet inspection
against known attacks
from network

Anti-Spam

Fast detection to
block spam/phishing
mail with malicious
contents

Security Profile Sync Collaborative

An easy-to-use tool
to help business sync
up security profiles
across multiple
networks

Detection & Response

Automatically
contain threats at
the network edge

SecuReporter
Premium

Cloud-based security
analytics and report
with 30-day log
retention

Sandboxing Reputation Filter

Cloud-based sandbox
technology against
unknown threats

Block botnet infection
and prevent drive­by download from
infected websites via
IP and URL detection

Connectivity Default Support for Registered Devices

Compatible
Security Appliances

ATP100(W)/200

ATP500/700/800

USG FLEX 100(W)

USG FLEX 200

USG FLEX 500/700

USG40(W)

USG60(W)

USG110/210/310

USG1100/1900/2200

USG20(W)-VPN

ZyWALL 110/310/1100

NSG50/100/200/300

VPN50

VPN100/300/1000

*: NSG50/100/200 support IPSec VPN only.

Licensed Service Licensed Service

SecuExtender
VPN Client

SSL VPN
and IPSec
VPN remote
access tool

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ●

●

*

● ● ● ● ● ● ● ● ●

● ● ● ● ● ● ● ● ● ● ● ● ●

Secure WiFi Hotspot

Secure tunnel
and managed
AP service

Management

Various
Network
Access
Control

Concurrent
Device
Upgrade

Top up
allowed
number of
connected
clients

Nebula
SD-WAN

Simplify the
delivery of
WAN services
across the
organization

Nebula
Professional
Pack

A full feature
set of cloud
configuration,
deployment,
monitoring
and
management

● ● ● ● ● ●

Nebula
Plus
Pack

A new feature
set includes
the most
frequently
requested
advanced
features

Amazon VPC Microsoft

Easy network
integration
with AWS

Azure

Easy network
integration
with Azure

Managed AP
Serice

AP auto
discovery and
provisioning

2-Factor
Authentication

Add an extra
layer of
protection
to mitigate
the risk of
credential
leakage or
brute force
attack

Single Sign-On SSL (HTTPS)

Simplified
single sign in
to multiple
resources

Inspection

Unlock
encrypted
sessions, scan
encrypted
packets, find
threats, and
block them

Device High
Availability
Pro

Device
failure
detection
and failover

SecuReporter Zyxel One

Cloud-based
security
analytics and
report with
7-day log
retention

Network

A Unified
installation
tool for Zyxel
switches,
WLAN and
gateways

Nebula
Base
Pack

License­free feature
set with a
rich set of
management
features

Solution Brief Security Service and License

12

Solution Brief Security Service and License

13

Like us, follow us

Forum

Facebook

Twitter

Yout ube

Instagram

Corporate Headquarters

Zyxel Networks Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com

Europe Asia The Americas

Zyxel Belarus

Tel: [phone]
Email: [e-mail]
www.zyxel.by

Zyxel Norway

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.no

Zyxel China (Shanghai)
China Headquarters

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel Middle East FZE

Tel: [phone]
Cell: [phone]
Email: [e-mail]
www.zyxel-me.com

Zyxel USA
North America Headquarters

Tel: [phone]
Fax: [phone]
Email: [e-mail]
us.zyxel.com

Facebook

Post your questions to Facebook
anytime. Support is available in
English.

facebook.com/zyxel

Forum

Post questions to our forum
community and Zyxel officials.
Submit ideas for future product
features or releases!

community.zyxel.com

Twitter

Post your questions to Twitter
anytime. Support is available in
English.

twitter.com/ZyxelHome

YouTube

Watch Zyxel's videos on product
updates, step-by-step tutorials,
and the latest trends in networking
technology.

youtube.com/zyxelvideo

Instagram

Follow our Instagram to get the
latest event and information.

zyxelworldwide

Pinterest

Follow us for the latest updates on
Zyxel products for your home!

zyxelworldwide

Zyxel BeNeLux

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.nl
www.zyxel.be

Zyxel Bulgaria
(Bulgaria, Macedonia,
Albania, Kosovo)

Tel: [phone]
Email: [e-mail]
www.zyxel.bg

Zyxel Czech Republic

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cz

Zyxel Denmark A/S

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.dk

Zyxel Finland

Tel: [phone]
Email: myynti@zyxel.fi
www.zyxel.fi

Zyxel France

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.fr

Zyxel Poland

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.pl

Zyxel Romania

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.ro

Zyxel Russia

Tel: [phone]
Email: [e-mail]
www.zyxel.ru

Zyxel Slovakia

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
http://www.zyxel.sk

Zyxel Sweden A/S

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.se

Zyxel Switzerland

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.ch

Zyxel China (Beijing)

Tel: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel China (Tianjin)

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel India

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.in

Zyxel Kazakhstan

Tel: [phone]
Email: [e-mail]
www.zyxel.kz

Zyxel Korea Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.kr

Zyxel Malaysia

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.my

Zyxel Philippine

Email: [e-mail]
www.zyxel.com.ph

Zyxel Singapore

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.sg

Zyxel Taiwan (Taipei)

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.tw

Zyxel Thailand

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.co.th

Zyxel Vietnam

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com/vn/vi/

Zyxel Brazil

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com/br/pt/

Solution Brief Security Service and License

14

Zyxel Germany GmbH

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.de

Zyxel Hungary & SEE

Tel: [phone]
Email: [e-mail]
www.zyxel.hu

Zyxel Iberia

Tel: [phone]
Email: [e-mail]
www.zyxel.es

Zyxel Italy

Tel: [phone]
Email: [e-mail]
www.zyxel.it

Zyxel Turkey A.S.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.tr

Zyxel UK Ltd.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.co.uk

Zyxel Ukraine

Tel: [phone]
Email: [e-mail]
www.zyxel.ua

For more product information, visit us on the web at www.zyxel.com

Copyright © 2021 Zyxel and/or its affiliates. All rights reserved.
All specifications are subject to change without notice.

5-000-00020019 04/21