ZyXEL Communications ZYWALL 35 User Manual

ZyWALL 35

Internet Security Appliance

Recommended for

• Small and Medium Businesses looking for a cost-effective and easy-to-deploy security appliance and VPN connection

• Businesses requiring reduced operational costs through flexible traffic management

• Businesses needing a dynamically updated database for accurate and effective Web Content Filtering services

(powered by Bluecoat)

• Businesses that want to increase network efficiency, reliability and perform bandwidth load balancing

• Businesses looking for flexible port design with optional DMZ configuration

Features

Virtual Private Network

• 35 simultaneous IPSec VPN Connections

• Max. 40Mbps 3DES/AES VPN performance

• Manual Key, IKE and PKI (X.509)

• IPSec NAT Traversal

• Xauth User Authentication

Firewall Security

• Transparent Firewall (bridge mode)

• Stateful Packet Inspection

• DoS and DDoS Protection

• Real-time Attack Alert and Logs

Content Filtering

• Java/Active X/Cookie/Proxy Blocking

• URL and Keyword Blocking

• Web Content Filtering (Bluecoat)

Traffic Management

• Policy-based Traffic Shaping

• Priority-bandwidth Utilization

• Guaranteed Bandwidth Management

• Maximum Bandwidth Management

High Availability

• Dual WAN ports Auto fail-over and

fail-back

• Dual WAN ports for Load Balancing

• Dial Backup

Network

• DHCP client/relay/server

• PPPoE

• PPTP

System Management

• WebGUI (HTTP and HTTPS)

• Command Line Interface

(Console, Telnet, SSH)

• Firmware Upgrade

(WebGUI, TFTP/FTP/SFTP)

• Vantage Centralized Network Management

Wireless

• IEEE 802.11b/11g compliant

• 128-bits WEP Encryption

• IEEE 802.1x Port-Based Authentication

with RADIUS Client

• IPSec VPN over WLAN

• WPA

Specifications

Hardware Specification

• Power: 12VDC

• 4-port LAN/DMZ switch:

10/100Mbps Ethernet

• WAN1 & WAN2: 10/100Mbps Ethernet

• Reset Button

• RS-232 DB9F: Console

• RS-232 DB9M: Dial Backup

• Extension Card Slot for Wireless &

Optional service*

Physical Specification

• Dimensions

242(L) x 175(D) x 35.5(H) mm

• Weight: 1,200g

Application Diagram

Internet Security Appliance

World Wide Web

LAN

(Trusted Network)

Server

ZyWALL 70

Headquarters

Content
filtering

Firewall

DSL Modem

DSL Modem

Hackers

INTERNET

VPN Tunnel

World Wide Web

Operating Environment

• Operating Temperature: 0 ~ 50ºC

• Operating Humidity: 20 ~ 95%

(non-condensing)

MTBF (Bellcore Model)

• 41.8 years

* For future release

Hackers

DSL
Modem

ZyWALL 35

Branch Office/Remote Office

Content filtering

Firewall

ZyWALL 5

Content filtering

Firewall

SOHO

World Wide Web

Hackers

Feature Matrix

Model Name ZyWALL 2 ZyWALL 2WE ZyWALL 10W ZyWALL 35 ZyWALL 70

Performance
Firewall Throughput 12Mbps 12Mbps 30Mbps 90Mbps 100Mbps
VPN 3DES/AES Throughput 2.2Mbps 2.2Mbps 16Mbps 40Mbps 50Mbps
User Licenses Unlimited Unlimited Unlimited Unlimited Unlimited
Concurrent Sessions 1,024 1,024 1,024 10,000 10,000
Simultaneous IPSec VPN connection 2 2 10 35 70

Physical Specification

Ports (10/100Mbps Auto sensing &
MDI/MDIX) 2xWAN 2xWAN

Extension Card Slot na na •, Wireless Services
Optional Services* Optional Services*

RS-232 console • • • • •
Power Supply 12VDC 12VDC 12VDC 12VDC 100~240VAC
Rack-Mounted na na na • •
Wall-Mounted • • • • na
Dimensions (L x D x H, mm) 181 x 128 x 36 233 x 155 x 30 233 x 155 x 30 242 x 175 x 35.5 355 x 200 x 55
Weight 330g 525g 525g 1,200g 2,600g
Others na 2 antenna na na na
Mode of Operation
Routing/NAT/SUA Mode • • • • •
Transparent Mode na na na • •
Dial Backup • • • • •
Firewall (ICSA Certified)
IP Protocol/Packet Filter • • • • •
DoS and DDoS protections • • • • •
Stateful Packet Inspection • • • • •
Transparent Firewall na na na • •
Web Content Filtering • • • • •
VPN (ICSA Certified)
Manual key, IKE • • • • •
PKI (X.509) • na • • •
Encryption (DES, 3DES and AES) • • • • •
Authentication (SHA-1 and MD5) • • • • •
IPSec NAT Traversal • • • • •

Internet Security Appliance

ZyWALL 35

XAuth User Authentication (Internal
Database and External RADIUS)
Traffic Management
Guaranteed/Maximum Bandwith na na na • •
Policy-based Traffic shaping na na • • •
Priority-bandwidth utilization na na na • •
High Availability (HA)
Auto fail-over, fail-back • • • • •
Dial Backup • • • • •
Dual WAN ports for WAN backup
and Load Balance
System Management
WebGUI (HTTP and HTTPS) • HTTP only • • •
Firmware Upgrade
(WebGUI, TFTP/FTP/SFTP) TFPT, FTP
Vantage CNM • na • • •
Wireless
IEEE 802.11b Compliant na • • • •
IEEE 802.11g Compliant na na na • •
IEEE 802.1x Authentication (Internal
Database and External RADIUS)
Logging/Monitoring
Centralized Logs • • • • •
Attack alert • • • • •
System status monitoring • • • • •

(*) For future release

4xLAN, 1xWAN 4xLAN, 1xWAN 1xLAN, 1xWAN

4xLAN/DMZ, 1xLAN, 4xDMZ,

•, Wireless and •, Wireless and

• • • • •

na na na • •

WebGUI,

•

• • •

na • • • •

This product is designed for the 2.4 GHz WLAN network throughout the EC region

Corporate Headquarters
ZyXEL Communications Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
http://www.zyxel.com
http://www.zyxel.com.tw

Copyright©2005 ZyXEL Communications Corporation. All rights reserved. ZyXEL, the ZyXEL logo are registered trademarks of ZyXEL Communications Corp. Other trademarks and service names referenced are properties of their respective holders. All specifications are subject to change without notice.

Denmark

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.dk

Finland

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.fi

France

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.fr

Germany

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.de

North America

Tel: [phone]
Fax: [phone]
Email: [e-mail]
http://www.us.zyxel.com

Norway

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.no

Spain

Tel: [phone] Fax: [phone]
Email: [e-mail]
http:// www.zyxel.es

Sweden

Tel: [phone] Fax: [phone]
Email: [e-mail]
http://www.zyxel.se

65-100-003501