ZyXEL® Firewall USG200 Gateway

Leading High-Performance UTM solution
The ZyWALL USG 200 employs hardware-acceleration technologies in one box. Powered by high-performance SecuASIC technology and a hardware-based encryption accelerator, the ZyWALL USG 200 delivers leading high-performance, multi-layer threat protections for small business and enterprises alike. Better yet, all ZyWALL USG Series products supports Gigabit Ethernet interfaces.

Robust Hybrid VPN (IPSec and SSL)
The ZyWALL USG 200 provides secure access from remote locations to corporate resources through the Internet for organizations of any size. Through IPSec VPN, companies can secure connections among branch offices, partner sites and headquarters. Road warriors and telecommuters can also use SSL or L2TP VPN to securely access the company network without having to install VPN software.
With flexible and easy connections, mobile employees, vendors and partners are enabled to securely access network resources for improved working efficiency.

Application Firewall
More and more network applications could slip malicious software into your office. The potentially malicious software, such as IM and P2P tools, could cause bandwidth waste or even system damage. With application patrol and bandwidth management features, you can control traffic block or rate limit for online chat or file transfer activities to avoid malicious software from finding its way into your organization.

Web Security (Secure Web Access): ZyXEL Web Bowering
Today, most network threats are likely from within the office, since employees would visit any insecure Web when they're surfing the net. Some Web sites may contain malicious software like Trojan, spyware or warm, and the software would take their tolls; therefore avoiding internal users to surf dangerous Web sites becomes an important task. ZyXEL's Web Bowering feature can quickly search the sites containing malicious software and notify users to keep away from them.

Non-Stop Internet Access with Multiple WAN and 3G as backup
The ZyWALL USG Series not only supports multiple WAN ports but also supports USB 3G or PCMCIA 3G cards. This enables it to provide "active-active" load sharing or "active-passive" failover configuration to deliver highly reliable network connectivity. To minimize the impact of single-point failures, the ZyWALL USG 200 supports device HA (High Availability) to assure network availability.

ICSA Firewall, IPSec Certification
With ICSA-certified SPI Firewall and IPSec VPN, the ZyWALL USG 200 enables organizations to take complete control over their network infrastructure and to provide the most up-to-date protection against network threats.

Comprehensive Report System
The built-in report system of ZyWALL USG 200 offers a comprehensive set of real-time and historical reports including firewall, virus and intrusion attacks, bandwidth usage, Web site usage and user activities. With Vantage Report (VRPT), a Web-based reporting system, administrators can easily collect traffic data and analyze a distributed network for organizations to be aware of suspicious activities and to ensure better business productivity.

ICSA-certified Firewall

    * Zone-Based Access Control List
    * Security Zones
    * Stateful Packet Inspection
    * DoS/DDoS Protection
    * User-Aware Policy Enforcement
    * ALG Supports Custom Ports

Intrusion Detection and Prevention

    * In-line Mode (Routing/Bridge)
    * Zone-Based IDP Inspection
    * Customizable Protection Profile
    * Signature-based Deep Packet Inspection
    * Automatic Signature Updates*
    * Custom Signatures
    * Traffic Anomaly Detection and Protection
    * Flooding Detection and Protection
    * Protocol Anomaly Detection and Protection:HTTP/ICMP/TCP/UDP

Anti-Virus

    * ZyXEL Anti-Virus or Kaspersky Anti-Virus
    * Stream-Based Anti-Virus
    * Covers Top Active Viruses in the Wild List
    * Scans HTTP/FTP/SMTP/POP3/IMAP4
    * Automatic Signature Updates*
    * No File Size Limitation
    * Blacklist/Whitelist Support

Hybrid VPN

    * ICSA-certified IPSec VPN
          o Encryption: AES/3DES/DES
          o Authentication: SHA-1/MD5
          o Key Management: Manual Key/IKE
          o Perfect Forward Secrecy: DH Group 1/2/5
          o NAT over IPSec VPN
          o Dead peer Detection/Relay Detection
          o PKI (X.509) Certificate Support
          o Certificate Enrollment (CMP/SCEP)
          o Xauth Authentication
          o L2TP over IPSec Support
    * SSL VPN
          o Clientless Secure Remote Access(Reverse Proxy Mode)
          o SecuExtender (Full Tunnel Mode)
          o Unified Policy Enforcement
          o Supports Two-factor Authentication
          o Customizable User Portal

Application Patrol

    * IM/P2P Granular Access Control
    * Apply Schedules, Bandwidth Management
    * User-Aware
    * IM/P2P Up-to-Date Support (based on IDP signatures)*
    * Real-Time Statistical Reports

Bandwidth Management

    * Bandwidth Priority
    * Policy-Based Traffic Shaping
    * Maximum/Guaranteed Bandwidth
    * Bandwidth Borrowing

Anti-Spam

    * Zone to Zone Protection
    * Transparently intercept mail via SMTP/POP3 protocols
    * Blacklist/Whitelist support
    * Support DNSBL checking
    * Statistics report

High Availability

    * Device HA (Active-Passive Mode)
    * Device Failure Detection
    * Link Monitoring
    * Auto-Sync Configurations
    * Multiple WAN Load Balancing
    * VPN HA (Redundant Remote VPN Gateways)

Content Filtering

    * URL Blocking, Keyword Blocking
    * Exempt List (Blacklist and Whitelist)
    * Blocks Java Applet, Cookies and Active X
    * Dynamic URL Filtering Database (Powered by BlueCoat)*

User Licenses

    * Unlimited

Networking

    * Routing Mode/Bridge Mode/Mixed Mode
    * Layer 2 Port Grouping
    * Ethernet/PPPoE/PPTP
    * Tagged VLAN (802.1Q)
    * Virtual Interface (Alias Interface)
    * Policy-Based Routing (User-Aware)
    * Policy-Based NAT (SNAT/DNAT)
    * RIP v1/v2
    * OSPF
    * IP Multicasting (IGMP v1/v2)
    * DHCP Client/Server/Relay
    * Built-in DNS Server
    * Dynamic DNS

Authentication

    * Internal User Database
    * Microsoft Windows Active Directory
    * External LDAP/RADIUS User Database
    * ZyWALL OTP (One Time Password)**
    * Forced User Authentication (Transparent Authentication)

System Management

    * Role-Based Administration
    * Multiple Administrator Login
    * Multi-Lingual Web GUI (HTTPS/HTTP)
    * Object-Based Configuration
    * Command Line Interface (Console/Web Console/SSH/TELNET)
    * Comprehensive Local Logging
    * Syslog (send to up to 4 servers)
    * E-mail Alert (send to up to 2 servers)
    * SNMP v2c (MIB-II)
    * Real-Time Traffic Monitoring
    * System Configuration Rollback
    * Text-Based Configuration File
    * Firmware upgrade via FTP/FTP-TLS/Web GUI
    * Advanced Reporting (Vantage Report)
    * Centralized Network Management (Vantage CNM)

3G Support

    * Advanced Wireless Security Transmission with WEP Encryption and WPA/WPA2 Support
    * PCMCIA: Sierra Wireless AC850***
    * USB: Huawei E220***

Certifications

    * ICSA Certified Firewall
    * ICSA Certified IPSec VPN

Standards Compliance

    * HSF (Hazardous Substance Free): RoHS and WEEE
    * EMC: FCC Part 15 Class B, CE-EMC Class B, C-Tick Class B, VCCI Class B
    * Safety: CSA International (ANS/UL60950-1,CSA60950-1, EN60950-1, IEC60950-1)

Hardware Specifications

    * Memory size: 256 MB DDR2 RAM/256 MB Flash
    * Interface: GbE x 7 (RJ-45with)
    * Interface: Auto-negotiation and Auto MDI/MDI-X
    * Console: RS-232 (DB9F)
    * AUX: RS-232 (DB9M)
    * LED Indicator: PWR, SYS, AUX, CARD
    * Reset Button
    * Expansion Card Slot
    * 2 USB Ports

Physical Specifications

    * Rack Mountable (rack-mount kit included)
    * Dimensions: 242 (W) x 175 (D) x 35.5 (H) mm/9.5 (W) x 6.9 (D) x 1.4 (H) inch
    * Weight: 1.2 Kg/2.6 lbs

Environmental Specifications

    * Operating temperature: 0ºC ~ 50ºC/32ºF ~ 122ºF
    * Storage temperature: -30ºC ~ 60ºC/-22ºF ~ 140ºF
    * Operating humidity: 5% ~ 90% (noncondensing)

Power Requirements

    * Input: 100 ~ 240 V; 1.2 A, 50 ~ 60 Hz
    * Output: 12 V; 3.5 A