Zyxel USG1900 User Manual
Powerful, Robust Anti-malware Protection for
Medium- to Large-sized Businesses
• High-performance, high-value
Next Generation Firewall (NGFW)
for medium and large-sized
businesses and campuses
• Anti-malware protection
with rewall, anti-virus, antispam, content ltering, IDP,
next-generation application
intelligence and SSL inspection
• Robust SSL, IPSec and L2TP over
IPSec VPN connectivity and VPN
High Availability (HA)
• Unied security policy
streamlines the conguration and
management eorts
• Built-in WLAN controller for
centralized AP management and
eortless WLAN scalability of up
to 66 APs
• ZyXEL One Network is supported
• The brand-new rmware update
— ZLD4.20 — supports Cloud
Helper, PCI DSS compliance,
Hotspot Management and Device
HA Pro
As a business grows, so does the scope of its network. New users and devices connect at an ever-
increasing rate. Add to this an array of applications, like cloud-based services, and one begins
to understand the challenge facing today’s enterprises. It’s a continuous cycle — demand for
high network availability increases alongside the need for more Internet access, not to mention
additional user controls and improved security measures.
The new ZyXEL USG Extreme Series is a line of next-generation rewalls (NGFW) designed to meet
this challenge head-on withhighavailability, anti-malware protection,
access management, and consolidated policy enforcement for
medium- to large-sized businesses and campuses. The ZyXEL USG
Extreme Series provides WAN and VPN load balancing, failover
to ensure nonstop business communications, and our Hotspot
Management solution for secure network connectivity with easy
access.
Benets
Powerful, Robust and Always-Online
ZyXEL USG Extreme Series delivers high-access quality to help businesses satisfy
the demand for always-online communications. For internal deployments, the USG Extreme Series
provides active-passive High-Availability (HA) service to support device or connection failover. With
Device HA Pro service, the USG Extreme Series also supports instant failover, so connections are always
maintained when a failover event occurs. For external deployments, the USG Extreme Series features
multi-WAN load balancing/failover and a comprehensive mobile broadband USB modem support list for
WAN backup operations. The Extreme Series also supports IPSec load balancing and failover, providing
additional resilience for mission-critical VPN failover with VTI Interface deployments.
USG1900/1100
Unied Security Gateway—
Extreme Series
Impregnable Protection and Optimization
ZyXEL USG Extreme Series thoroughly protects networks with industry-leading rewall, Anti-
Malware/Virus, Anti-spam, Content Filtering, IDP, and Application Intelligence functionality. Regulate
unauthorized use of Web applications over your network, such as Facebook, Google apps, and Netix,
among others. ZyXEL security measures are enhanced with SSL Inspection, blocking threats hidden in
SSL-encrypted connections while facilitating deeper policy enforcement. Furthermore, newly improved
Content Filtering 2.0 enhances HTTPS Domain Filter, Browser SafeSearch, and Geo IP Blocking for an
array of security enhancements to ensure clean Web connections.
USG1900/1100
Unied Security Gateway—Extreme Series
Best TCO for Access Expansion
People expect network access regardless of time or location. As a result, hotspots are in demand in an ever-expanding assortment of locations. The ZyXEL
USG Extreme Series integrated with ZyXEL AP Controller technology enables users to manage up to 66 APs from a centralized user interface. In addition,
ZyXEL Hotspot Management delivers a unied solution for business networks with user-friendly tools like Billing System, Walled Garden, Multiple
Authentication, 3rd Party Social Login and User Agreement. With ZyXEL USG Extreme Series, businesses can now deploy or expand a managed Wi-Fi
network with minimal eort.
Swift and Secure Firmware Upgrades
Locating rmware updates — not to mention identifying correct versions for your device and managing their installation — can be a complex and
confusing ordeal. The ZyXEL USG Series solves this with its new Cloud Helper service. Cloud Helper provides a simple step to look for up-to-date rmware
information. New rmware is immediately made available upon release from our ocial database to ensure its authenticity and reliability.
ZyXEL One Network experience
Aiming for relieving our customers from repetitive operations of deploying and managing a network, ZyXEL One Network is designed to simplify the
conguration, management, and troubleshooting, allowing our customers to focus on the business priorities. ZyXEL One Network presents an easy-to-use
tool, ZyXEL One Network Utility (ZON Utility), to realize speed network setup. ZyXEL Smart Connect allows ZyXEL networking equipment to be aware and
recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL One
Network redenes the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.
Stay Secure and Up-to-Date with OneSecurity.com
ZyXEL provides frequent and timely updates in response to the latest security threats and advisories through OneSecurity.com — our free online service
portal. OneSecurity.com oers informative network security resources and the know-how to assist businesses and IT administrators in keeping their
network operations safe in the digital age. Information and resources can be found with one click via the GUI of ZyXEL USG Extreme and ZyWALL series
products. IT sta can quickly and easily catch up on the latest threats, and then proceed to walkthroughs and troubleshooting protocols with the help of
easy-to-follow FAQs — all provided to help users secure their networks and simplify management of our UTM products.
Next-Gen USG Quick Finder
USG1900
USG1100
USG310
USG210
USG110
USG60/60W
Model
Description Performance Series Advanced Series Extreme Series
Multi-WAN Yes Yes Yes Yes Yes Yes Yes
Unified security
policy
SSL inspection - - Yes Yes Yes Yes Yes
Link Aggregation
(LAG)
Port grouping Yes Yes Yes Yes - - -
Device HA - - Yes Yes Yes Yes Yes
Device HA Pro - - Yes Yes Yes Yes Yes
Easy Mode Yes Yes - - - - -
Cloud Helper Yes Yes Yes Yes Yes Yes Yes
PCI DSS Compliance Yes Yes Yes Yes Yes Yes Yes
Content Filtering
*
2.0
Hotspot
Management
* SSL Inspection must be enabled for Content Filtering 2.0 Safe Search to function properly.
USG40/40W
Yes Yes Yes Yes Yes Yes Yes
- - - - Yes Yes Yes
Yes Yes Yes Yes Yes Yes Yes
- - - - Yes Yes Yes
2
USG1900/1100
Unied Security Gateway—Extreme Series
License Features
The ZyXEL USG Extreme Series provides a complete feature set to perfectly t dierent business requirements as well as to enable the maximum
performance and security with an all-in-one appliance. Comprehensive network modularity also empowers IT professionals to customize the system to
meet their individual needs.
Feature Highlights
Multi-WAN & Mobile Broadband
The ZyXEL USG Extreme Series provides non-stop
Internet uptime with multi-WAN and mobile broadband
support. Multi-WAN works with two or more Ethernet
WAN connections for active-active WAN load balancing
or active-passive failover. Comprehensive mobile
broadband USB modems are also supported for WAN
backup.
Unied Security Policy
Unied security policy oers object-based management
and a unied conguration interface for rewall and all
security-related policies. Users can easily apply all policy
criteria to every UTM feature, reduce conguration time,
and get more streamlined policy management.
Cloud Helper
The Cloud helper provides friendly rmware upgrades
so users don’t need to worry about how and where to
receive the latest rmware information and les. With
just a few steps to download and update the rmware
directly, it’s very convenient and time-ecient.
ZyXEL One Network Utility
The ZON utility features smart functions to assist network
management for administrators to perform batch
rmware upgrade for devices, remote reboot of devices
such as ceiling APs or redirect to device GUI for further
conguration with just a click. These troublesome but
necessary management tasks can now be easily done
through just one platform for Wi-Fi APs, switches and
gateways.
SSL Inspection
SSL inspection enables the ZyXEL Extreme Series to
provide not only comprehensive security, but also deeper
policy enforcement. It enables the USG’s application
intelligence, IDP, content ltering and anti-virus to inspect
trac in SSL encrypted connections and block threats
that usually go unseen.
Robust VPN
ZyXEL USGs support high-throughput IPSec, L2TP over
IPSec and SSL VPN for a wide range of site-to-client
and site-to-site VPN deployments. Reinforced with the
advanced SHA-2 cryptographic , the ZyXEL USGs provide
the most secure Policy-based and route-based VPN for
business communications.
Integrated WLAN Controller
The integrated WLAN controller supports CAPWAP,
and enables centralized authentication and access
management of multiple APs in the network. The ZyXEL
USG Extreme Series can manage 2 APs by default, and up
to 66 APs with license upgrade.
PCI-DSS Compliance
The ZyXEL USG Series conforms to the Payment Card
Industry Data Security Standard (PCI DSS), which is a
global cardholder data security standard inuential to a
very broad group of businesses. The PCI DSS Compliance
applies to all entities such as merchants, card issuers,
processors, and service providers involve in payment card
processing tasks like validation, transmission and storage
of cardholder data.
3
Loading...