Zyxel USG2200 User Manual

ZyWALL USG2200-VPN

VPN Firewall

Zyxel’s USG2200-VPN has been built on a powerful multi-core platform
to deliver high performance that helps growing businesses to overcome
challenges during expansion. In order to satisfy the needs for always-online
communications, USG2200-VPN features multi-WAN load balancing/failover
and a comprehensive mobile broadband USB modem support list for WAN
backup operations. In addition, USG2200-VPN supports IPSec load balancing
and failover to provide additional resiliency for the most mission-critical VPN
deployments.

Benefits

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers
to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message
Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient
to guarantee secure outbound communications. With supports to the more
advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the
safest VPN connections in its class to ensure maximum security for business
communications.

The complete range of Zyxel VPN Firewall delivers reliable, non-stop VPN
services with dual-WAN failover and fallback support. With two WAN
connections—one primary and one for redundancy—the Zyxel VPN Firewall

Up to 25.0 Gbps Firewall
Throughput

Up to 3,000 VPN tunnels
capability

Robust hybrid VPN (IPSec/
SSL/L2TP over IPSec)

More secure VPN
connections with SHA-2
cryptographic

Auto-provisioned client-to­site IPSec setup with Easy
VPN

Device HA Pro ensures
smart handover

Hotspot management
supported

Facebook WiFi, Intelligence
social media authentication

Datasheet ZyWALL USG2200-VPN

COMMUNITY

BIZ FORUM

automatically switches to the backup connection should
the primary link fail, and automatically switches back to
the primary connection once it is back online.

To support dynamic, mobile business operations in today’s
BYOD (bring your own device) business environments,
the VPN Firewall offers unlimited business mobility with
Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices.
The VPN Firewall supports L2TP/IPSec VPN on a wide
variety of mobile Internet devices running the iOS, Android
and Windows mobile platforms.

Swift and secure firmware upgrades

Locating firmware updates — not to mention identifying
correct versions for your device and managing their
installation — can be a complex and confusing ordeal.
The ZyWALL VPN Firewall Series solves this with its new
Cloud Helper service. Cloud Helper provides a simple
step to look for up-to-date firmware information. New
firmware is immediately made available upon release
from our official database to ensure its authenticity and

reliability.

Best TCO for access expansion

People expect network access regardless of time or
location. As a result, hotspots are in demand in an ever­expanding assortment of locations. The USG2200-VPN
integrated with Zyxel AP Controller technology enables
users to manage APs from a centralized user interface.
In addition, Zyxel Hotspot Management delivers a unified
solution for business networks with user-friendly tools like
Billing System, Walled Garden, Multiple Authentication,
3rd Party Social Login and User Agreement. With ZyWALL
USG2200-VPN, businesses can now deploy or expand a
managed WiFi network with minimal effort.

Stay secure and Up-to-Date with OneSecurity

Zyxel provides frequent and timely updates in response
to the latest security threats and advisories through
OneSecurity — our free online service portal. OneSecurity
offers informative network security resources and the
know-how to assist businesses and IT administrators
in keeping their network operations safe in the digital
age. Information and resources can be found with one
click via the GUI of ZyWALL USG Series and VPN Series
products. IT staff can quickly and easily catch up on the
latest threats, and then proceed to walkthroughs and
troubleshooting protocols with the help of easy-to-follow
FAQs — all provided to help users secure their networks
and simplify management of our UTM products.

ZyWALL VPN Series Quick Finder

Model USG20(W)-VPN ZyWALL 110 ZyWALL 310 ZyWA LL 1100 USG2200-VPN

Description SB SMB MB

Firewall throughput
(Mbps)

Max. concurrent
sessions

VPN throughput (Mbps) 90 400 650 800 2,500

Max. concurrent IPSec
VPN tunnels

Content filtering
(CF 2.0)

Amazon VPC

*1

*2

Device HA Pro - Ye s

Hotspot Management

Facebook WiFi Ye s Ye s Ye s Ye s Ye s

*1: With Zyxel service license to enable or extend the feature capacity
*2: ZyWALL/USG still be able to support by CLIs

350 1,600 5,000 6,000 25,000

20,000 150,000 500,000 1,000,000 1,500,000

10 100 300 1,000 3,000

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

*1

*1

- Ye s Ye s Ye s Ye s

Ye s

*1

Activate once
registered

Activate once
registered

Datasheet ZyWALL USG2200-VPN

2

Subscription Services

The ZyWALL VPN Series provides a complete feature set to perfectly fit different business requirements as well as to
enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity also
empowers IT professionals to customize the system to meet their individual needs.

Anti-Spam Content Filtering 2.0

Hotspot

Management

Device HA Pro

Key Applications

VPN application

• Branch offices, partners and home users can deploy Zyxel
USGs/ZyWALLs for site-to-site IPSec VPN connections

• Branch offices/In-house staff can additionally deploy
IPSec VPN HA (load balancing and failover) for always
online VPN connectivity

• Remote users can securely access company resources
with their computers or smartphones via SSL, IPSec and
L2TP over IPSec VPN

• The headquarter USG/ZyWALL can also establish an
IPSec VPN connection with Amazon VPC for secured
access to a variety of cloud-based applications

Amazon VPC

Branch

Office

Headquarters

Hotspot Management

• High speed internet access

• Tier of service

• Log record for regulatory compliance

• Premium security control

• Various Network access control ( free or paid access,
social login)

Remote

Desktop

Network

Extend

Inventory

Server

File

Sharing

ZyWALL 110

VPN Firewall

IPSec VPN Client

for Windows OS

Travelling
Employee

SSL VPN Client for

Windows/Mac OS

Travelling
Employee

IPSec VPN

IPSec VPN HA

IPSec VPN

SSL VPN

Travelling
Employee

USG2200-VPN

VPN Firewall

L2TP over
IPSec VPN

USG20W-VPN

VPN Firewall

IPSec VPN

System

IPSec VPN

In-House
Staff

BI

Web

Apps

OA, ERP,

CRM System

DMZ Resources

Partner Office

ZyWALL 310

VPN Firewall

SP350E

Service

Gateway

Printer

Switch

Access

Point

Login Login

Guest Network Staff Network

Hotspot Management

Email

Server

ZyWALL USG2200-VPN

3Datasheet