Zyxel ZyWALL 110, ZyWALL 310, ZyWALL 1100 Datasheet

ZyWALL 110/310/1100 and USG20(W)-VPN

VPN Firewall

Networking brings convenience and efficiency to business environments;
however it introduces significant security and safety concerns at the
same time. Today, businesses or branch offices really need a complete yet
affordable solution that not only bridges communications between two
or more remote sites, but also connects multiple VPNs and ensures data
security to prevent the network from threats.

Benefits

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers
to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message
Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient
to guarantee secure outbound communications. With supports to the more
advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the
safest VPN connections in its class to ensure maximum security for business
communications.

The complete range of Zyxel VPN Firewalls deliver reliable, non-stop VPN
service with multi-WAN load balancing and failover safety with USB 3G/4G
support as a backup WAN, providing a non-stop internet connection service.

4 step setup wizard for easy
remote access with robust
SSL, IPSec, and L2TP over
IPSec VPN connectivity.

Auto-provisioned client-to-site
IPsec setup with Easy VPN

More secure VPN connections
with SHA-2 cryptographic

Express Mode with advanced
Cloud Query technology
(Only compatible with
ZyWALL110/310/1100)

Enabled hospitality features
with hotspot, AP management
with support for WiFi 6 feature

SecuReporter, cloud-based
intelligent analytics and
report service

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN

COMMUNITY

BIZ FORUM

To support dynamic, mobile business operations in today’s
BYOD (bring your own device) business environments, the
VPN Firewalls offer unlimited business mobility with Layer-2
Tunneling Protocol (L2TP) VPN for mobile devices. The
VPN Firewall supports L2TP/IPSec VPN on a wide variety
of mobile Internet devices running the iOS, Android and
Windows mobile platforms.

Engineered Express Mode. Uncompromising
performance.

ZyWALL USG series supports Express Mode with advanced
Cloud Query technology which has 30 billion of file ID in
Zyxel security cloud's database and constantly adapts new
malware data every minute via Threat Intelligence Machine
Learning. This innovative design improves the anti-malware
detection efficiency, enables it to verify the file ID within
seconds to get the most optimal threat detection, so
that the ZyWALL USG series can gain higher throughput
performance.

Zero-configuration remote access

Virtual private networks provide businesses a secure
and convenient way of sharing company resources with
partners, customers, or employees on business trips. Yet
typical VPN solutions are hard for non-technical users
to configure, which greatly reduces their usability and
convenience. The Zyxel VPN Firewalls feature Easy VPN to
provide auto-provisioned client-to-site IPSec VPN setup. A
wizard is available with the Zyxel IPSec VPN client-software
that automatically retrieves the VPN configuration file
from the remote Zyxel VPN Firewall and completes the
IPSec VPN setup in 3 simple steps. Zyxel’s Easy VPN lowers
administration effort and allows partner, customers, or
traveling employees to access company servers, email, or
data centers easily and securely.

Best TCO for access expansion

People expect network access regardless of time or location.
As a result, hotspots are in demand in an ever-expanding
assortment of locations. The Zyxel VPN firewalls integrated
with Zyxel AP Controller technology enables users from
a centralized user interface. In addition, Zyxel Hotspot
Management delivers a unified solution for business networks
with user-friendly tools like Billing System, Walled Garden,
Multiple Authentication, 3rd Party Social Login and User
Agreement. With ZyWALL series businesses can now deploy
or expand a managed WiFi network with minimal effort.

Comprehensive Connectivity

ZyWALL series not only can protect your network, but
it also supports Hospitality features including Hotspot,
AP management with integration for WiFi 6 feature, and
concurrent device upgrade. You can buy time-based
bundle or quantity-based license to optimize your initial
investment and maximize the scale in your environment.

Swift and secure firmware upgrades

Locating firmware updates — not to mention identifying
correct versions for your device and managing their
installation — can be a complex and confusing ordeal.
The Zyxel VPN Firewall solves this with its new Cloud Helper
service. Cloud Helper provides a simple step to look for
up-to-date firmware information. New firmware is
immediately made available upon release from our official
database to ensure its authenticity and reliability.

Simplified management procedure

Managing complex configuration settings can be confusing
and time-consuming. Zyxel USG 20-VPN and USG20W-VPN
provides an “easy mode” setting in the GUI for entry-level
and SOHO users. Easy mode provides an icon-based
feature set and attractive dashboard to simplify
management and monitoring of the device. Application
and function settings also have integrated wizards for
user-friendly setup. Zyxel USG 20-VPN and USG20W-VPN
easy mode helps entry-level users and SOHO users
effortlessly take advantage of high-speed and secure
networking.

Zyxel One Network experience

Aiming for relieving our customers from repetitive
operations of deploying and managing a network, Zyxel
One Network is designed to simplify the configuration,
management, and troubleshooting, allowing our customers
to focus on the business priorities. Zyxel One Network
presents an easy-to-use tool, Zyxel One Network Utility
(ZON Utility), to realize speed network setup. Zyxel Smart
Connect allows Zyxel networking equipment to be aware
and recognize each other and further facilitating the
network maintenance via one-click remote functions
such as factory reset or power cycling. Zyxel One Network
redefines the network integration across multiple
networking products from switch to WiFi AP and to Gateway.

Enhanced visibility

SecuReporter is a cloud-based intelligent analytics
and report service with data collection and correlation
capabilities. USG is bundled with 1-year SecuReporter
service, giving 7 days of log retention and visual analytics.
SecuReporter provides multiple analytical perspectives
on overall Threat Trend, Spam Mail, Unsafe Website
Categories, Most Frequent Security Threat (Malware, IDP,
Spam) and user behaviors, delivering holistic visibility for
security professionals.

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN

2

VPN Firewall Quick Finder

Model USG20(W)-VPN ZyWALL 110 ZyWALL 310 ZyWALL 1100

Description SB SB SMB SMB

Firewall Throughput (Mbps) 350 1,600 5,000 6,000

Max. Concurrent Sessions 20,000 150,000 500,000 1,000,000

VPN throughput (Mbps) 90 400 650 800

Max. Concurrent IPSec
VPN Tunnels

Content filtering (CF 2.0)* Ye s Ye s Ye s Ye s

Amazon VPC*

1

Microsoft Azure Yes Ye s Yes Ye s

Cloud CNM SecuReporter* Ye s Ye s Ye s Ye s

Hotspot Management* - Ye s Ye s Ye s

Device HA Pro - Ye s Ye s Ye s

*: With Zyxel service license to enable or extend the feature capacity
*1: ZyWALL/USG still be able to support by CLIs

10 100 300 1,000

Ye s Ye s Ye s Ye s

Subscription Services

The Zyxel VPN Firewall Series provides a complete feature set to perfectly fit different business requirements as well as
to enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity also
empowers IT professionals to customize the system to meet their individual needs.

Anti-Virus Anti-Spam Intrusion Detection

& Prevention

Application

Patrol

Content
Filtering

SecuReporter

AP Controller Hotspot

Management

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 3

Key Applications

VPN application

• High-speed, high-security communications between local
servers, remote devices and cloud-hosted applications
with deployments of the ZyWALL Firewalls.

• Easy-to-use, secure remote access via SSL, IPSec and
L2TP over IPSec VPN.

• The headquarter ZyWALL Series can also establish an
IPSec VPN connection with Amazon VPC/Microsoft Azure
for secured access to leverage the benefits of cloud­based applications and to expend on-premise networks
that extend into the cloud center.

Amazon VPC/

Microsoft Azure

Branch

Office

Headquarters

Hotspot management

• High speed internet access

• Tier of service

• Log record for regulatory compliance

• Premium security control

• Various Network access control (free or paid access,
social login)

*: Hotspot Management supports firmware ZLD4.25 or later.

Remote

Desktop

Network

Extend

Inventory

Server

File

Sharing

ZyWALL 110

VPN Firewall

IPSec VPN Client

for Windows OS

Travelling
Employee

SSL VPN Client for

Windows/Mac OS

Travelling
Employee

IPSec VPN

IPSec VPN HA

IPSec VPN

SSL VPN

Travelling
Employee

ZyWALL 1100

VPN Firewall

L2TP over
IPSec VPN

USG20W-VPN

VPN Firewall

IPSec VPN

System

IPSec VPN

In-House
Staff

BI

Web

Apps

OA, ERP,

CRM System

DMZ Resources

Partner Office

ZyWALL 310

VPN Firewall

SP350E

Service

Gateway

Printer

Switch

Access

Point

Login Login

Guest Network Staff Network

Hotspot Management

Email

Server

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 4

Specifications

Model ZyWALL 110 ZyWALL 310 ZyWALL 1100 USG20-VPN USG20W-VPN

Product photo

Hardware Specifications

Interfaces 4 x LAN/DMZ,

2 x WAN, 1 x OPT

USB ports 2 2 2 1 1

Console port Yes (DB9) Yes (DB9) Yes (DB9) Yes (RJ-45) Yes (RJ-45)

Rack-mountable Yes Ye s Ye s - -

System Capacity & Performance*

1

SPI firewall throughput (Mbps)*21,600 5,000 6,000 350 350

VPN throughput (Mbps)*

3

400 650 800 90 90

VPN IMIX Throughput (Mbps)*3144 280 315 40 40

Max. TCP concurrent sessions*4150,000 500,000 1,000,000 20,000 20,000

Max. concurrent IPSec VPN
tunnels*

5

Concurrent SSL VPN users
(default/max.)*

6

100 300 1,000 10 10

50/150 50/150 250/500 5/15 5/15

VLAN interface 16 64 128 8 8

Concurrent devices logins
(default/max.)*6*

7

200/300 500/800 800/1,500 64 64

Speedtest Performance

SPI firewall throughput (Mbps)*8900 900 930 320 320

WLAN Management

Managed AP number
(default/max.)*

6

Recommend max.

8/40 8/72 8/136 - -

20 20 60 - -

AP in 1 AP Group

Security Service

Anti-virus (AV)*

Intrusion Detection and

6

Ye s Ye s Ye s - -

Ye s Ye s Ye s - -

Prevention (IDP) & Application
Patrol*

Anti-spam*

Content filtering (CF)*6*

SecuReporter Premium*

6

6

9

6

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

Key Features

VPN IKEv2, IPSec,

SSL, L2TP/IPSec

SSL (HTTPS) Inspection Ye s Ye s Ye s - -

2-Factor Authentication Ye s Yes Yes Yes Ye s

EZ Mode Ye s - - Ye s Ye s

Hotspot Management*

Ticket printer support*10/

6

Ye s Ye s Ye s - -

Yes (SP350E)/10 Yes (SP350E)/10 Yes (SP350E)/10 - -

Support Q'ty (max.)

Microsoft Azure Ye s Ye s Yes Yes Ye s

Amazon VPC Ye s Ye s Ye s Ye s Ye s

Device HA Pro Ye s Ye s Yes - -

Link Aggregation (LAG) - Ye s Yes - -

8 (Configurable) 8 (Configurable) 4 x LAN/DMZ,

1 x WAN, 1 x SFP

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

4 x LAN/DMZ,
1 x WAN, 1 x SFP

IKEv2, IPSec,
SSL, L2TP/IPSec

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 5

Model ZyWALL 110 ZyWALL 310 ZyWALL 1100 USG20-VPN USG20W-VPN

Power Requirements

Power input 12 V DC,

3.33 A max.

Max. power consumption

37 58.5 58.5 12 18

110 - 240 V AC,
50/60 Hz,

1.3 A max.

110 - 240 V AC,
50/60 Hz,

1.3 A max.

12 V DC,

2.0 A max.

12 V DC,

2.0 A max.

(watt)

Heat dissipation (BTU/hr) 126.25 199.61 199.61 40.92 61.38

Physical Specifications

Item Dimensions

(WxDxH)
(mm/in.)

Weight
(kg/lb.)

Packing Dimensions

(WxDxH)
(mm/in.)

Weight

300 x 188 x 44/

11.81 x 7.4
x 1.73

430 x 250 x 44/

16.93 x 9.84
x 1.73

430 x 250 x 44/

16.93 x 9.84
x 1.73

216 x 143 x 33/

8.50 x 5.63
x 1.30

216 x 143 x 33/

8.50 x 5.63
x 1.30

2/4.41 3.3/7.28 3.3/7.28 0.88/1.94 0.94/2.06

(Antenna included)

351 x 152 x 245/

13.82 x 5.98
x 9.65

519 x 392 x 163/

20.43 x 15.43
x 6.42

519 x 392 x 163/

20.43 x 15.43
x 6.42

276 x 185 x 98/

10.87 x 7.28
x 3.86

276 x 185 x 98/

10.87 x 7.28
x 3.86

2.83/6.24 4.74/10.45 4.74/10.45 1.41/3.11 1.50/3.31

(kg/lb.)

Included accessories • Power adaptor

• Power cord

• Rack mounting
kit

• Power cord

• Rack mounting
kit

• Power cord

• Rack mounting
kit

• Power adapter

• RJ-45 ­RS-232 cable
for console
connection

• Power adapter

• RJ-45 ­RS-232 cable
for console
connection

• Antenna

Environmental Specifications

Operating
environment

Storage
environment

Temperature 0°C to 40°C/

32°F to 104°F

Humidify 10% to 90%

(non-condensing)

Temperature -30°C to 70°C/

-22°F to 158°F

Humidify 10% to 90%

(non-condensing)

0°C to 40°C/
32°F to 104°F

10% to 90%
(non-condensing)

-30°C to 70°C/

-22°F to 158°F

10% to 90%
(non-condensing)

0°C to 40°C/
32°F to 104°F

10% to 90%
(non-condensing)

-30°C to 70°C/

-22°F to 158°F

10% to 90%
(non-condensing)

0°C to 40°C/
32°F to 104°F

10% to 90%
(non-condensing)

-30°C to 70°C/

-22°F to 158°F

10% to 90%
(non-condensing)

0°C to 40°C/
32°F to 104°F

10% to 90%
(non-condensing)

-30°C to 70°C/

-22°F to 158°F

10% to 90%
(non-condensing)

MTBF (hr) 787,109.3 560,811.5 560,811.5 655,130 655,130

Certifications

EMC FCC Part 15

(Class A), CE EMC
(Class A), C-Tick
(Class A), BSMI

Safety LVD (EN60950-1),

BSMI

*: This matrix with firmware ZLD4.60 or later.
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets); IMIX: UDP throughput based on a combination of 64 byte, 512 byte, and
1424 byte packet sizes.
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool
*5: Including Gateway-to-Gateway and Client-to-Gateway.
*6: With Zyxel service license to enable or extend the feature capacity.
*7: This is the recommend maximum number of concurrent logged-in devices.
*8: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
*9: SafeSearch function in CF need to enable SSL inspection firstly and not for small business models.
*10: With Hotspot Management license support.

FCC Part 15
(Class A), CE EMC
(Class A), C-Tick
(Class A), BSMI

LVD (EN60950-1),
BSMI

FCC Part 15
(Class A), CE EMC
(Class A), C-Tick
(Class A), BSMI

LVD (EN60950-1),
BSMI

FCC Part 15
(Class B), IC, CE
EMC (Class B),
RCM, BSMI

FCC Part 15
(Class B), IC, CE
EMC (Class B),
RCM, BSMI

BSMI, UL BSMI, UL

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 6

Wireless Specifications

Model USG20W-VPN

Standard compliance 802.11 a/b/g/n/ac

Wireless frequency 2.4 GHz/5 GHz

Radio 1

SSID number 8

Maximum transmit power
(Max. total channel)

No. of antenna 3 detachable antennas

Antenna gain • 2 dBi @2.4 GHz

Data rate • 802.11n: Up to 450 Mbps

Frequency band 2.4 GHz (IEEE 802.11 b/g/n):

Receive sensitivity 2.4 GHz:

US (FCC) 2.4 GHz: 25 dBm, 3 antennas

US (FCC) 5 GHz: 25 dBm, 3 antennas

EU (ETSI) 2.4 GHz: 20 dBm (EIRP), 3 antennas

EU (ETSI) 5 GHz: 20 dBm (EIRP), 3 antennas

• 3 dBi @5 GHz

• 820.11ac: Up to 1300 Mbps

• USA (FCC): 2.412 to 2.462 GHz

• Europe (ETSI): 2.412 to 2.472 GHz

• TWN (NCC): 2.412 to 2.462 GHz

• 11 Mbps ≤ -87 dBm

• 54 Mbps ≤ -77 dBm

• HT20 ≤ -71 dBm

• HT40 ≤ -68 dBm

5 GHz (IEEE 802.11 a/n/ac):

• USA (FCC): 5.150 to 5.250 GHz; 5.250 to 5.350 GHz;

5.470 to 5.725 GHz; 5.725 to 5.850 GHz

• Europe (ETSI): 5.15 to 5.35 GHz; 5.470 to 5.725 GHz

• TWN (NCC): 5.15 to 5.25 GHz; 5.25 to 5.35 GHz;

5.470 to 5.725 GHz; 5.725 to 5.850 GHz

5 GHz:

• 54 Mbps ≤ -74 dBm

• HT40, MCS23 ≤ -68 dBm

• VHT40, MCS9 ≤ -62 dBm

• HT20, MCS23 ≤ -71 dBm

• VHT20, MCS8 ≤ -66 dBm

• VHT80, MCS9 ≤ -59 dBm

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 7

Software Features

Security Service

Firewall

• ICSA-certified corporate firewall

• Routing and transparent (bridge)
modes

• Stateful packet inspection

• User-aware policy enforcement

• SIP/H.323 NAT traversal

• ALG support for customized ports

• Protocol anomaly detection and
protection

• Traffic anomaly detection and
protection

• Flooding detection and protection

• DoS/DDoS protection

Intrusion Detection and Prevention
(IDP)

• Routing and transparent (bridge)
mode

• Signature-based and behavior
based scanning

• Customized signatures supported

• Automatic signature updates

Application Patrol

• Granular control over the most
important applications

• Identifies and controls application
behavior

• Supports user authentication

• Real-time statistics

Anti-Virus

• Stream-based scan engine (Stream
Mode/Express Mode)

• HTTP, FTP, SMTP, and POP3 protocol
supported

• No file size limitation

• Automatic signature updates

Anti-Spam

• Transparent mail interception via
SMTP and POP3 protocols

• Spam and Phishing mail detection

• Blacklist and whitelist support

• Supports DNSBL checking

Content Filtering

• HTTPs domain filtering

• SafeSearch support

• Whitelist websites enforcement

• URL blacklist and whitelist with
keyword blocking

• Customizable warning messages and

redirect URL

• Customizable Content Filtering block

page

• URL categories increased to 111

• CTIRU (Counter-Terrorism Internet
Referral Unit) support

VPN

IPSec VPN

• Encryption: DES, 3DES, AES (256-bit)

• Authentication: MD5, SHA1, SHA2
(512-bit)

• Support Route-based VPN Tunnel
Interface (VTI)

• Key management:
IKEv1 (x-auth, mode-config),
IKEv2 (EAP, configuration payload)

• Perfect forward secrecy (DH groups)
support 1, 2, 5, 14, 15-18, 20-21

• IPSec NAT traversal (NAT-T)

• Dead Peer Detection (DPD) and relay
detection

• PSK and PKI (X.509) certificate
support

• VPN concentrator

• Route-based VPN Tunnel Interface
(VTI)

• VPN auto-reconnection

• VPN high availability (Failover, LB)

• L2TP over IPSec

• GRE and GRE over IPSec

• NAT over IPSec

• Zyxel VPN client provisioning

• Support iOS L2TP/IKE/IKEv2 VPN
Client provision

SSL VPN

• Supports Windows and Mac OS X

• Supports full tunnel mode

• Supports 2-Factor authentication

Networking

WLAN Management
(ZyWALL Series support only)

• Supports AP Controller (APC) version

3.60

• Wireless L2 isolation

• Supports auto AP FW update

• Scheduled WiFi service

• Dynamic Channel Selection (DCS)

• Client steering for 5 GHz priority and
sticky client prevention

• Auto healing provides a stable and
reliable coverage

• Customizable captive portal page

• RADIUS authentication

• WiFi Multimedia (WMM) wireless QoS

• CAPWAP discovery protocol

• Multiple SSID with VLAN

• Supports ZyMesh

• Support AP forward compatibility

• Rogue AP Detection

Mobile Broadband

• WAN connection failover via 3G and
4G* USB modems

• Auto fallback when primary WAN
recovers

IPv6 Support

• Dual stack

• IPv4 tunneling (6rd and 6to4
transition tunnel)

• IPv6 addressing

• DNS, DHCPv6 server/client

• Bridge

• VLAN

• PPPoE

• Static/Policy route

• Session control

• Firewall and ADP

• IPSec (IKEv2 6in6, 4in6, 6in4)

• Intrusion Detection and Prevention

(IDP)

• Application Patrol

• Content Filtering

• Anti-Virus, Anti-Malware

• Anti-Spam

Connection

• Routing mode, bridge mode and
hybrid mode

• Ethernet and PPPoE

• NAT and PAT

• NAT Virtual Server Load Balancing

• VLAN tagging (802.1Q)

• Virtual interface (alias interface)

• Policy-based routing (user-aware)

• Policy-based NAT (SNAT)

• Dynamic routing (RIPv1/v2 and OSPF,
BGP)

• DHCP client/server/relay

• Dynamic DNS support

• WAN trunk for more than 2 ports

• Per host session limit

• Guaranteed bandwidth

• Maximum bandwidth

• Priority-bandwidth utilization

• Bandwidth limit per user

• Bandwidth limit per IP

• GRE

• BGP

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 8

Management

Authentication

• Local user database

• Built-in user database

• External user database: Microsoft
Windows Active Directory, RADIUS,
LDAP

• IEEE 802.1x authentication

• Captive portal Web authentication

• XAUTH, IKEv2 with EAP VPN
authentication

• Web-based authentication

• Forced user authentication
(transparent authentication)

• IP-MAC address binding

• SSO (Single Sign-On) support

• Supports 2-factor authentication
with Google Authenticator as the
second factor for administrator
account

System Management

• Role-based administration

• Multiple administrator logins

• Supports Cloud Helper

• Multi-lingual Web GUI (HTTPS and
HTTP)

• Command line interface (console,
Web console, SSH and telnet)

• SNMP v1, v2c, v3

• System configuration rollback

• Configuration auto backup

• Firmware upgrade via FTP, FTP-TLS
and Web GUI

• Dual firmware images

• Cloud CNM SecuManager

Logging/Monitoring

• Comprehensive local logging

• Syslog (send to up to 4 servers)

• Email alerts (send to up to 2 servers)

• Real-time traffic monitoring

• System status monitoring

• Built-in daily report

• Cloud CNM SecuReporter

Zyxel One Network

• ZON Utility

■

IP configuration

■

Web GUI access

■

Firmware upgrade

■

Password configuration

• Smart Connect

■

Location and System Name

update

■

Discover neighboring devices

■

One-click remote management

access to the neighboring Zyxel

devices

Hotspot Management

• ZyWALL 110, ZyWALL 310, and

ZyWALL 1100 support only

• Integrated account generator,
Web-based authentication portal

and billing system

• Supports external RADIUS servers

• Per account bandwidth
management

• User agreement login

• SP350E Service Gateway Printer

enables one-click account and
billing generation

• Built-in billing system

■

Time-to-finish accounting mode

■

Accumulation accounting mode

• Supports PayPal online payment

• Marketing tool

■

Advertisement link

■

Walled garden

■

Portal page

• Billing Replenish

Subscription Services

• Anti-Virus

• Application Patrol & IDP

• Content Filtering

• Anti-Spam

• Hotspot Management

• Managed AP

• SecuReporter Premium

*: For specific models supporting the 3G and
4G dongles on the list, please refer to the Zyxel
product page at 3G dongle document

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 9

Licenses

Security

Product Anti-Virus Application Patrol

& IDP

ZyWALL 110

1 year/2 years 1 year/2 years 1 year/2 years 1 year/2 years 1 year/2 years

Content Filtering Anti-Spam SecuReporter

Premium

ZyWALL 310
ZyWALL 1100

USG20-VPN

- - 1 year/2 years 1 year/2 years 1 year/2 years

USG20W-VPN

1. Licenses can be easily activated, renewed and managed at myZyxel.

2. License bundles may vary according to region. Please contact your local sales representative for more information.

3. ZyWALL Series provides all security services with 30-day trial.

4. USG20(W)-VPN provide Content Filtering and Anti-Spam services with 30-day trial.

Connectivity & Industrial Solution

Product SSL VPN Tunnels SSL VPN Client* IPSec VPN Client

ZyWALL 110
ZyWALL 310
ZyWALL 1100

USG20-VPN
USG20W-VPN

*: Support OS: MAC OS 10.7 or later

Product Concurrent Device Upgrade* Hotspot Management*

ZyWALL 110 100 nodes 1 year/One-time Add 2/4/8 APs

ZyWALL 310 100/300 nodes 1 year/One-time Add 2/4/8 APs

ZyWALL 1100 100/300 nodes 1 year/One-time Add 2/4/8/64 APs

USG20-VPN - - -

USG20W-VPN - - -

*: With firmware ZLD4.20 or later
*1: Hotspot Management supports for ZyWALL 310 and ZyWALL 1100 in firmware ZLD4.20 or later; and for ZyWALL 110 in firmware ZLD4.25 or later.

Add 5/10/50 tunnels For 1/5/10 client(s) For 1/5/10/50 client(s)

Add 5/10 tunnels For 1/5/10 client(s) For 1/5/10/50 client(s)

1

Managed APs

Access Point Compatibility List

Product Unified AP Unified Pro AP

Models • NWA5301-NJ

• NWA5121-NI

• NWA5123-AC HD

• NWA5123-AC

• NWA5123-NI

• WAC5302D-S

Functions

Central management Yes Ye s

Auto provisioning Yes Yes

Data forwarding Local bridge Local bridge/Data tunnel

ZyMesh Yes Yes

*: From APC3.0, commercial gateways supporting APC technology are able to recognize APs with FW release higher than APC3.0 as Forward Compatible

APs. Resellers can introduce newly-available Zyxel APs with basic features supported without upgrading any new controller firmware.

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN 10

• WAC510D

• WAC5302D-Sv2*

• WAC500*

• WAC500H*

• WAC6103D-I

• WAC6503D-S

• WAC6502D-S

• WAC6303D-S

• WAC6553D-E

• WAC6552D-S

• WAC6502D-E

• WAX650S

• WAX610D*

Accessories

SecuExtender Software

Item Description Supported OS

IPSec
VPN Client*

SSL VPN Client* Secured VPN connection between PC/MAC

*: A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official Zyxel website. To continue using the

application, please contact your regional sales representatives and purchase a commercial license for the application.

Service Gateway Printer

Model Feature Supported Model

SP350E • Buttons: 3

*: Hotspot management licenses required

IPSec VPN client software for the ZyWALL
and USG Series with Easy VPN for zero
configuration remote access

and ZyWALL Firewall

• USG FLEX 200

• Paper roll width: 58 (+0/-1) mm

• Interface: 10/100 Mbps RJ-45 port

• USG FLEX 500

• USG FLEX 700

• Power input: 12V DC, 5A max.

• Item dimensions (WxDxH):
176 x 111 x 114 mm
(6.93" x 4.37" x 4.49")

• Item weight: 0.8 kg (1.76 lb.)

• Windows Server 2016

• Windows Server 2019

• Windows 7 (32/64-bit)

• Windows 8 (32/64-bit)

• Windows 10 (32/64-bit)

• Windows 7 (32/64-bit)

• Windows 8 (32/64-bit)

• Windows 10 (32/64-bit)

• MAC OS 10.14

• VPN50

• VPN100

• VPN300

• VPN1000

• USG60(W)

• USG110

• USG210

• USG310

• USG1100

• USG1900

• USG2200 Series

• ZyWALL110

• ZyWALL310

• ZyWALL1100

Transceivers (Optional)

Functions Model Speed Connector Wavelength

USG2200 Series
USG20-VPN/20W-VPN
ATP100/100W/200/500/700/800
USG FLEX 100/100W/200/500/700
VPN50/100/300/1000

Functions Max. Distance Optical Fiber Type DDMI

USG2200 Series
USG20-VPN/20W-VPN
ATP100/100W/200/500/700/800
USG FLEX 100/100W/200/500/700
VPN50/100/300/1000

*: Only USG2200 series supports 10-Gigabit SFP+
*1: SFP-BX1310-10-D and SFP-BX1490-10-D are must used in pairs.

SFP10G-SR* 10-Gigabit SFP+ Duplex LC 850 nm

SFP10G-LR* 10-Gigabit SFP+ Duplex LC 1310 nm

SFP-1000T Gigabit RJ-45 -

SFP-LX-10-D Gigabit LC 1310 nm

SFP-SX-D Gigabit LC 850 nm

SFP-BX1490-10-D*1Gigabit LC 1310 nm(TX)

1490 nm(RX)

SFP-BX1490-10-D*1Gigabit LC 1490 nm(TX)

1310 nm(RX)

300 m/328 yd Multi Mode Yes

10 km/10936 yd Single Mode Ye s

100 m/109 yd Multi Mode -

10 km/10936 yd Single Mode Ye s

550 m/601 yd Multi Mode Ye s

10 km/10936 yd Single Mode Ye s

10 km/10936 yd Single Mode Ye s

For more product information, visit us on the web at www.zyxel.com

Copyright © 2020 Zyxel and/or its affiliates. All rights reserved.
All specifications are subject to change without notice.

Datasheet ZyWALL 110/310/1100 and USG20(W)-VPN

27/10/20