Security

Quick Sales Guide

 Preparing for the next
wave of cyberattacks

How Safe is Your Network Security Zyxel Security Portfolio

Network? that Works Business Scale Small Small and Medium-sized Medium-sized
Businesses Businesses Businesses

Today, network attacks have become more Businesses deploy network security appliances for Model Series
sophisticated and targeted. Social networking two main purposes: to protect company resources
applications have also opened up more channels against a multitude of threats and to enable secured
for data breach than ever before. With the rise of communications between multiple locations via Virtual
ATP
BYOD (Bring Your Own Device), threats to business Private Network (VPN). For many years, Zyxel’s highly-
networks come from both outside and inside. It is now acclaimed Unified Security Gateway (USG) Series has ATP200 ATP500 ATP800
increasingly challenging for businesses to keep up with helped businesses satisfy all these demands. Fortifying
the changing threat landscape; and this is especially businesses against a new generation of threats, Zyxel
true for small-and medium-sized businesses, which do is offering a new line of ZyWALL ATP Firewall Series
not have the staff and resources of larger corporations. and Nebula SD-WAN solution that deliver unmatched
Small-and medium-sized businesses need a solution capacity, performance and protection for businesses of
that is efficient, inexpensive and provides an array of all sizes. USG
techniques to combat sophisticated network attacks. USG60 (W) USG310 USG1900
USG40 (W) USG210 USG1100
USG110

VPN2S ZyWALL 310 ZyWALL 1100

ZyWALL 110
VPN

USG20W-VPN VPN300
USG20-VPN VPN100
VPN50

NSG
NSG50 NSG200 NSG300
NSG100

2 Quick Sales Guide Security Quick Sales Guide Security 3

 Zyxel security solutions
More Security
With SD-WAN, businesses receive end-to-end encryption with endpoint
authentication for all network-wide. The more in-depth traffic data also
empowers administrators are to identify and thwart cyberattacks more

ATP Firewalls VPN Firewalls rapidly.

The ZyWALL ATP Firewall Series is empowered with The ZyWALL VPN Firewall Series complies with GDPR
smart cloud intelligence giving seamless protection regulations and features a robust VPN gateway with
against all those Advanced Persistent Threats,
achieving ultimate in-depth defense of future unknown
the ability to access enterprise information across the
corporate sites and connect business partners, cloud
Less Work
attacks. providers as well as telecommuters. SD-WAN’s unified infrastructure allows policies and quality of service
standards to be centrally managed, eliminating the need for tedious,
time-consuming manual configuration.

UTM Firewalls Nebula SD-WAN

Zyxel’s UTM Firewall Series offers businesses with Combining the flexibility of cloud-based technology Less Expenditure
robust, user-aware security all in one package. It offers and its high-speed deployment benefit, the Nebula SD-
multithreat protection and effective policy enforcement WAN solution helps IT administrators to simplify branch It might seem too good to be true, but SD-WAN can also reduce CAPEX by
through a wide range of mechanisms. The all-in-one network deployment. With the variety of optimization optimizing the use of less expensive resources such as cable, fiber, and
design helps businesses to minimize management design for Internet connectivity and applications, the mobile connections. It’s especially affordable when contrasted with the
efforts and total cost of ownership (TCO) while Nebula SD-WAN also enables the ZyWALL VPN Series MPLS alternative.
maximizing network security. to support online application growth, efficiency WAN
bandwidth usage and increase network agility.

Nebula Cloud Security Services

Managed Security and Licenses
Gateway
Built with remote management and ironclad security Flexible licensing options for your security devices.
for organizations with increasing distributed sites, the Choose the perfect one that best suit your business
Zyxel Nebula Cloud Managed Security Gateway Series needs. Our security licenses include, but not limited to:
provides extensive protection every small- to mid-size security, connectivity, management & reporting and
business would need. vertical solution licenses.

4 Quick Sales Guide Security

 Security Services and Licenses
Services Key Features Services Key Features
Security Service Vertical Solutions
Anti-Virus/Malware Scan files for viruses, trojans, worms, malwares before they reach your network. Hotspot • Authentication with Wall Garden
• Stream-based scan technology without file size limitation Management • Advertisement and SMS billing & free time service accounting for guest
• Daily data feed of top-ranked threats • Support SP350E printer manager support purple WiFi and third-party social log in
• Billing replenishment

Anti-Spam/Email Security Fast detect with cloud-based database/mail fingerprints to block spam/phising mail AP Controller • Integrated AP controller as central management to provide flexible deployment
with malicious contents options
• IP reputation filter provides low latency reacrion • AP auto discovery and provisioning
• Support black/white listing for custom policies • AP forwarding compatibility
• Cloud-based database provide real-time protection

Content Filtering Cloud-based real-time access control for inappropriate, unproductive, illegal and Device High • Device failure detection and notification
malicious websites Availability Pro • Configuration auto-sync and link monitoring
• Categorized website access management for increased efficiency • Smart handover through dedicated Heartbeat Link
• Granular policies controlled by IP addres, user, group, or schedule • NAT/Firewall/VPN Sessions synchronization

Intrusion Detection Deep-packet inspection across all ports and protocols at gateway to against known VPN Client Software
and Prevention (IDP) attacks from network SecuExtender • Providing solutions of both SSL VPN and IPSec VPN remote access
• Shields vulnerabilities before they can be exploited and eliminates the operational Software • Enhanced layered security incorporating Zyxel security appliances
pains of emergency patching • Easy and intelligent installation
• Customized signature support to create your own rules
• Constant signature auto-updates

Application Patrol Automatically categorize and manage the network applications usage
• Graunlar policies control by IP addres, user, group, schedule
Single Sign-On Service
• Profile based policy to ensure network quality and easy manage bussiness rule
SSO Agent • Simplified single sign in to multiple resources
• Improved user experience without repetitive logging in between various web browsers
• Secure communication via shared key encryption for data transmission protection
• Login mechanism works with any protocol, not just HTTP
Geo Enforcer Manage network traffic by mapping IP address to geographical regions to prevent
fraud or cyber attacks
• Geographical visability for traffic statictics and logs
• IPv6 address support Management & Analytics
• Automatic IP/geography database update Cloud CNM • Perform management and backup configuration from a centralized center
SecuManager • Apply manual or scheduled firmware upgrades to all managed gateways
• VPN provisioning with different scenarios
Sandboxing Cloud-based sandbox technology against unkown threats • Centralized display and management of event/alarm notifications
• Comprehensive inspection for a wide range file types • Manage a wide set of system restore/backup and monitoring
• Cloud-based sandbox provide instant protection without needing a dedicated
hardware or software upgrade
Cloud CNM • Cloud-based real-time monitoring and alerts
SecuReporter • Effective event correlation and user behavior analytics
• Intuitive dashboard and customizable report
Botnet Filter Block botnet infection and prevent drive-by download from infected websites
• IP/URL feeds to detect/block botnet commands and control activities
• Cloud-based URL feeds to block access to anomalous websites

Nebula SD-WAN
Nebula SD-WAN • Advanced WAN technology boosts throughput performance
• Improve network quality without extra bandwidth investment
• Quick installation, remote control, and centralized monitoring

6 Quick Sales Guide Security Quick Sales Guide Security 7

 Security Feature Matrix
Compatible Security Security Feature
Appliances
Anti-Virus/Malware Anti-Spam/ Content Filtering Intrusion Detection Application Patrol Geo Enforcer Sandboxing Botnet Filter
Email Security and Prevention (IDP)

Scan files at the gateway Fast detection to block Improve security by Deep-packet inspection Automatically categorize Manage network traffic Cloud-based sandbox Block botnet infection and
for viruses and other spam/phising mail with blocking access to against known attacks and manage the network by mapping IP address to technology against unkown prevent drive-by download
threats malicious contents malicious or risky web from network application usage geographical regions threats from infected websites
sites
ATP200 Yes Yes Yes Yes Yes Yes Yes Yes
ATP500 Yes Yes Yes Yes Yes Yes Yes Yes
ATP800 Yes Yes Yes Yes Yes Yes Yes Yes
USG40/40W/60/60W Yes Yes Yes Yes Yes - - -
USG110/210/310 Yes Yes Yes Yes Yes - - -
USG1100/1900 Yes Yes Yes Yes Yes - - -
VPN2S - - Yes - - - - -
VPN50 - - Yes - - Yes - -
VPN100 - - Yes - - Yes - -
VPN300 - - Yes - - Yes - -
ZyWALL110/310/1100 Yes Yes Yes Yes Yes - - -
USG20 (W)-VPN - Yes Yes - - - - -
NSG50/100/200/300 Yes - Yes Yes Yes - - -

Compatible Security Vertical Solutions VPN Client Software Single Sign-On Service Management & Analytics Nebula SD-WAN
Appliances

Hotspot Management AP Controller Device High Availability SecuExtender SSO Agent Cloud CNM Cloud CNM Nebula SD-WAN
Pro Software SecuManager SecuReporter

Various Network Access AP auto discovery and Device failure detection SSL VPN and IPSec VPN Simplified single sign in to Central and scalable Cloud-based intelligent Simplify the delivery of WAN
Control provisioning and failover remote access tool multiple resources management system analytics and report services across the organization
service
ATP200 - Yes - Yes Yes Yes Yes -
ATP500 - Yes Yes Yes Yes Yes Yes -
ATP800 - Yes Yes Yes Yes Yes Yes -
USG40/40W/60/60W - Yes - Yes Yes Yes Yes -
USG110/210/310 Yes Yes Yes Yes Yes Yes Yes -
USG1100/1900 Yes Yes Yes Yes Yes Yes Yes -
VPN2S - - - Yes (SecuExtender - - - -
IPSecVPN_Windows)
VPN50 - Yes - Yes Yes Yes Yes Yes*
VPN100 Yes Yes Yes Yes Yes Yes Yes Yes*
VPN300 Yes Yes Yes Yes Yes Yes Yes Yes*
ZyWALL110/310/1100 Yes Yes Yes Yes Yes Yes Yes -
USG20 (W)-VPN - - - Yes Yes Yes Yes -
NSG50/100/200/300 - - - Yes - - - -
* After upgrading firmware to SD-OS v10.01 or after

8 Quick Sales Guide Security Quick Sales Guide Security 9

 Specifications
ZyWALL ATP Firewalls ZyWALL UTM Firewalls
Model ATP200 ATP500 ATP800 Model USG40 USG40W USG60 USG60W
Hardware Specifications Hardware Specifications
10/100/1000 Mbps RJ-45 ports 4 x LAN/DMZ, 2 x WAN, 7 (Configurable), 12 (Configurable), Interfaces 3 x LAN/DMZ, 1 x WAN, 3 x LAN/DMZ, 1 x WAN, 4 x LAN/DMZ, 2 x WAN 4 x LAN/DMZ, 2 x WAN
1 x SFP 1 x SFP 2 x SFP (Configurable) 1 x OPT 1 x OPT
USB3.0 ports 2 2 2 USB ports 1 1 2 2
Console port Yes (DB9) Yes (DB9) Yes (DB9) Console port Yes (RJ-45) Yes (RJ-45) Yes (DB9) Yes (DB9)
Rack-mountable Yes Yes Yes Rack-mountable - - Yes Yes
Fanless Yes - - Fanless Yes Yes Yes Yes
System Capacity & Performance*1 System Capacity & Performance*1
SPI firewall throughput (Mbps)*2 2,000 2,600 8,000 SPI firewall throughput (Mbps)*2 400 400 1000 1000
VPN throughput (Mbps)*3 500 900 1,500 VPN throughput (Mbps)*3 100 100 180 180
IDP throughput (Mbps)*4 1,200 1,700 2,700 IDP throughput (Mbps)*4 95 95 150 150
AV throughput (Mbps)*4 450 700 1,200 AV throughput (Mbps)*4 50 50 90 90
UTM throughput (AV and IDP)*4 450 700 1,200 UTM throughput (AV and IDP)*4 50 50 90 90
Max. TCP concurrent sessions*5 600,000 1,000,000 2,000,000 Max. TCP concurrent sessions*5 50,000 50,000 100,000 100,000
Max. concurrent IPSec VPN tunnels*5 40 200 1,000 Max. concurrent IPSec VPN 20 20 40 40
Concurrent SSL VPN users 10 50 100 tunnels*6
VLAN interface 16 64 128 Concurrent SSL VPN users 5/15 5/15 5/20 5/20
(default/max.)*7
WLAN Management
VLAN interface 8 8 16 16
Managed AP number (1 Year bundled)*6 18 34 130
Concurrent devices logins 64 64 128 128
Security Service (default/max.)*7*8
Anti-Malware Yes Yes Yes WLAN Management
Intrusion Detection and Prevention (IDP) & Yes Yes Yes Managed AP number 2/18 2/18 2/18 2/18
Application Patrol (default/max.)*7
Email Security Yes Yes Yes Security Service
Application Security Yes Yes Yes Anti-virus (AV)*7 Yes Yes Yes Yes
Sandboxing Yes Yes Yes Intrusion detection and prevention Yes Yes Yes Yes
Web Security Yes Yes Yes (IDP) & Application Patrol*7
Key Features Anti-spam*7 Yes Yes Yes Yes
VPN IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec Content filtering (CF 2.0)*7*9 Yes Yes Yes Yes
SSL (HTTPS) Inspection Yes Yes Yes Key Features
2-Factor Authentication Yes Yes Yes VPN IKEv2, IPSec, SSL, L2TP/ IKEv2, IPSec, SSL, L2TP/ IKEv2, IPSec, SSL, L2TP/ IKEv2, IPSec, SSL, L2TP/
Amazon VPC Yes Yes Yes IPSec IPSec IPSec IPSec
Device HA Pro - Yes Yes SSL (HTTPS) inspection - - - -
Cloud CNM SecuReporter Yes Yes Yes EZ Mode Yes Yes Yes Yes
Power Requirements Hotspot Management*7 - - - -
Power input 12 V DC, 2.5 A max. 12 V DC, 4.17 A 100-240 V AC, 50/60 Hz, Ticket printer support*10/ - - - -
2.5 A max. Support Q'ty (max.)
Max. power consumption (watt) 13.3 24.1 46 Amazon VPC Yes Yes Yes Yes
Heat dissipation (BTU/hr) 45.38 82.23 120.1 Facebook WiFi Yes Yes Yes Yes
Physical Specifications Device HA Pro 123123123123123313 - - - -
Item Dimensions (WxDxH)(mm/in.) 272 x 187 x 36/10.7 x 7.36 x 1.42 300 x 188 x 44/11.81 x 7.4 x 1.73 430 x 250 x 44/16.93 x 9.84 x 1.73 Link Aggregation (LAG) - - - -
Weight (kg/lb.) 1.4/3.09 1.65/3.64 3.3/7.28 2-Factor Authentication Yes Yes Yes Yes
Packing Dimensions (WxDxH)(mm/in.) 427 x 247 x 73/16.81 x 9.72 x 2.87 351 x 152 x 245/13.82 x 5.98 x 9.65 519 x 392 x 163/20.43 x 15.43 x 6.42 Cloud CNM SecuReporter Yes Yes Yes Yes
Weight (kg/lb.) 2.23 (W/O bracket) 2.83/6.24 4.8/10.58 Power Requirements
2.42 (W/ bracket) Power input 12 V DC, 2.0 A max. 12 V DC, 2.0 A max. 12 V DC, 2.5 A max. 12 V DC, 2.5 A max.
Included accessories • Power adapter • Power adapter • Power cord Max. power consumption (watt) 14 17 19 28
• Rack mounting kit • Power cord • Rack mounting kit Heat dissipation (BTU/hr) 47.77 58.01 64.83 95.54
(optional, by regions) • Rack mounting kit
Physical Specifications
Environmental Specifications
Item Dimensions 216 x 143 x 33/ 216 x 143 x 33/ 242 x 175 x 36/ 272 x 187 x 36/
Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F (WxDxH)(mm/in.) 8.50 x 5.63 x 1.30 8.50 x 5.63 x 1.30 9.53 x 6.89 x 1.42 10.7 x 7.36 x 1.42
environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing) Weight (kg/lb.) 0.89/1.96 0.91/2 1.25/2.76 1.46/3.23
Storage Temperature -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F Packing Dimensions 381 x 261 x 79/ 381 x 261 x 79/ 394 x 240 x 101/ 427 x 247x 73/
environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing) (WxDxH)(mm/in.) 15.00 x 8.50 x 3.11 15.00 x 8.50 x 3.11 15.51 x 9.45 x 3.98 16.81 x9.72 x 2.87
MTBF (hr) 529,688.2 529,688.2 947,736 Weight (kg/lb.) 1.57/3.46 1.63/3.59 2.25/4.96 2.23 (W/O bracket)
Acoustic noise - 24.5 dBA on < 25°C operating 25.3 dBA on < 25°C operating 2.42 (W/ bracket)
temperature, 41.5 dBA on full FAN temperature, 46.2 dBA on full FAN Included accessories • Power adapter • Power adapter • Power adapter • Power adapter
speed. speed. • DB9- RJ-45 for console • DB9 - RJ-45 cable for • Rack mounting kit • Rack mounting kit
Certifications connection console connection (optional, by regions)
• Antenna • Antenna
EMC FCC Part 15 (Class B), FCC Part 15 (Class A), FCC Part 15 (Class A),
CE EMC (Class B), CE EMC (Class A), CE EMC (Class A), Environmental Specifications
C-Tick (Class B), BSMI C-Tick (Class A), BSMI C-Tick (Class A), BSMI Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F
Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI environment Humidity 10% to 90% 10% to 90% 10% to 90% 10% to 90%
Note: (non-condensing) (non-condensing) (non-condensing) (non-condensing)
*: This matrix with firmware ZLD4.32 or later. *4: AV and IDP throughput measured using the industry standard HTTP Storage Temperature -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F
*1: Actual performance may vary depending on network conditions and activated performance test (1,460-byte HTTP packets). Testing done with multiple flows. environment Humidity 10% to 90% 10% to 90% 10% to 90% 10% to 90%
applications. *5: Maximum sessions measured using the industry standard IXIA IxLoad testing (non-condensing) (non-condensing) (non-condensing) (non-condensing)
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). tool
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *6: After Gold Pack has expired, it will support only 2 APs. MTBF (hr) 414329.4 386931.7 815463.9 497644
Certifications
EMC FCC Part 15 (Class B), FCC Part 15 (Class A), FCC Part 15 (Class B), FCC Part 15 (Class A),
CE EMC (Class B), CE EMC (Class A), CE EMC (Class B), CE EMC (Class A),
C-Tick (Class B), BSMI C-Tick (Class A), BSMI C-Tick (Class B), BSMI C-Tick (Class A), BSMI
Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI
Note:
*: This matrix with firmware ZLD4.32 or later. *5: Maximum sessions measured using the industry standard IXIA IxLoad testing
*1: Actual performance may vary depending on network conditions and activated tool.
applications. *6: Including Gateway-to-Gateway and Client-to-Gateway.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *7: With Zyxel service license to enable or extend the feature capacity.
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *8: This is the recommend maximum number of concurrent logged-in devices.
*4: AV and IDP throughput measured using the industry standard HTTP *9: SafeSearch function in CF2.0 need to enable SSL inspection firstly and not for
performance test (1,460-byte HTTP packets). Testing done with multiple flows. small business models.
*10: With Hotspot Management license support.

10 Quick Sales Guide Security Quick Sales Guide Security 11

 ZyWALL UTM Firewalls Advanced ZyWALL VPN Firewalls
Model USG110 USG210 USG310 USG1100 USG1900 Model VPN2S VPN50 VPN100 VPN300
Hardware Specifications Hardware Specifications
Interfaces 4 x LAN/DMZ, 2 x WAN, 4 x LAN/DMZ, 2 x WAN, 8x GbE (configurable) 8x GbE (configurable) 8x GbE (configurable) VPN Firewall interfaces 3 x LAN, 1 x OPT, 1 x WAN 4 x LAN/DMZ, 1 x WAN, 4 x LAN/DMZ, 2 x WAN, 7 x GbE (Configurable),
1 x OPT 1 x OPT 1 x SFP 1 x SFP 1 x SFP
USB ports 2 2 2 2 2 Nebula SD-WAN interfaces - 4 x LAN/DMZ (1 Configurable), 4 x LAN/DMZ (1 Configurable), 7 x GbE (Configurable),
Console port Yes (DB9) Yes (DB9) Yes (DB9) Yes (DB9) Yes (DB9) 1 x WAN, 1 x SFP 2 x WAN, 1 x SFP 1 x SFP
Rack-mountable Yes Yes Yes Yes Yes USB3.0 ports 2 x USB 2.0 1 2 2
Fanless - - - - - Console port - Yes (RJ-45) Yes (DB9) Yes (DB9)
System Capacity & Performance*1 Rack-mountable - - Yes Yes
SPI firewall throughput (Mbps)*2 1600 1900 5000 6000 7000 System Capacity & Performance*1
VPN throughput (Mbps)*3 400 500 650 800 900 SPI firewall throughput (Mbps)*2 1,500 800 2,000 2,600
IDP throughput (Mbps)*4 590 660 900 1000 1200 VPN throughput (Mbps)*3 35 150 500 1,000
AV throughput (Mbps)*4 450 500 550 650 710 Max. TCP concurrent sessions*4 50,000 400,000 800,000 2,000,000
UTM throughput (AV and IDP)*4 450 500 550 650 710 Max. concurrent IPSec VPN tunnels *5 20 50 100 300
Max. TCP concurrent sessions*5 150,000 200,000 500,000 1,000,000 1,000,000 Concurrent SSL VPN users - 10/50 30/200 50/300
(default/max.)*6
Max. concurrent IPSec VPN 100 200 300 1000 2000
tunnels*6 VLAN interface 16 8 16 64
Concurrent SSL VPN users 25/150 35/150 50/150 250/500 250/750 Concurrent devices logins - 64 200/300 500/800
(default/max.)*7 (default/max.)*6*7
VLAN interface 16 32 64 128 128 WLAN Management
Concurrent devices logins 200/300 200/300 500/800 800/1,500 1,500/2,000 Managed AP number (default/max.)*6 - 4/36 4/68 4/132
(default/max.)*7*8 Security Service
WLAN Management Content filtering*6*8 1 Year Free 1 Year Free 1 Year Free 1 Year Free
Managed AP number 2/34 2/34 2/34 2/130 2/130 Geo Enforcer *6 - 1 Year Free 1 Year Free 1 Year Free
(default/max.)*7 Key Features
Security Service DPI Firewall Yes Yes Yes Yes
Anti-virus (AV)*7 Yes Yes Yes Yes Yes VPN IKEv2, IPSec, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/
Intrusion detection and Yes Yes Yes Yes Yes IPSec
prevention (IDP) & Application SSL (HTTPS) inspection - - Yes Yes
Patrol*7
EZ Mode - Yes - -
Anti-spam*7 Yes Yes Yes Yes Yes
Hotspot Management*6 - Yes*12 Yes*12 Yes*12
Content filtering (CF 2.0)*7*9 Yes Yes Yes Yes Yes
Ticket printer support*9/ - - Yes (SP350E) /10 Yes (SP350E) /10
Key Features Support Q'ty (max.)
VPN IKEv2, IPSec, SSL, IKEv2, IPSec, SSL, IKEv2, IPSec, SSL, IKEv2, IPSec, SSL, IKEv2, IPSec, SSL, Amazon VPC - Yes Yes Yes
L2TP/IPSec L2TP/IPSec L2TP/IPSec L2TP/IPSec L2TP/IPSec
Facebook WiFi - Yes Yes Yes
SSL (HTTPS) inspection Yes Yes Yes Yes Yes
Device HA Pro*10 - - Yes Yes
EZ Mode - - - - -
2-Factor Authentication - Yes Yes Yes
Hotspot Management*7 Yes Yes Yes Yes Yes
SD-WAN Feature*11
Ticket printer support*10/ Yes (SP350E) /10 Yes (SP350E) /10 Yes (SP350E) /10 Yes (SP350E) /10 Yes (SP350E) /10
Support Q'ty (max.) Dynamic Path Selection - Yes Yes Yes
Amazon VPC Yes Yes Yes Yes Yes WAN Optimization - Yes Yes Yes
Facebook WiFi Yes Yes Yes Yes Yes Zero Touch Provision (ZTP) - Yes Yes Yes
Device HA Pro Yes Yes Yes Yes Yes Auto VPN Site-to-Site - Yes Yes Yes
Link Aggregation (LAG) - - Yes Yes Yes Client-to-Site - Yes Yes Yes
2-Factor Authentication Yes Yes Yes Yes Yes App Patrol - Yes Yes Yes
Cloud CNM SecuReporter Yes Yes Yes Yes Yes Content Filter - Yes Yes Yes
Power Requirements Geo Enforcer (GeoIP) - Yes Yes Yes
Power input 12 V DC, 3.33 A max. 12 V DC, 3.33 A max. 100 - 240 V AC, 50/ 100 - 240 V AC, 50/ 100 - 240 V AC, 50/ Management - Yes Yes Yes
60 Hz, 1.3 A max. 60 Hz, 1.3 A max. 60 Hz, 1.3 A max. Monitor/Log Storage - Yes Yes Yes
Max. power consumption (watt) 37 37 58.5 58.5 58.5 Power Requirements
Heat dissipation (BTU/hr) 126.25 126.25 199.61 199.61 199.61 Power input 110 to 240 V AC, 12 V DC, 2.0 A max. 12 V DC, 2.5 A max. 12 V DC, 4.17 A max.
Physical Specifications 50/60 Hz, 1.5 A max.
Item Dimensions 300 x 188 x 44/ 300 x 188 x 44/ 430 x 250 x 44/ 430 x 250 x 44/ 430 x 250 x 44/ Max. power consumption (watt) 13.1 12 13.3 24.1
(WxDxH)(mm/in.) 11.81 x 7.4 x 1.73 11.81 x 7.4 x 1.73 16.93 x 9.84 x 1.73 16.93 x 9.84 x 1.73 16.93 x 9.84 x 1.73 Heat dissipation (BTU/hr) 44.7 40.92 45.38 82.23
Weight (kg/lb.) 2/4.4 2/4.4 3.3/7.28 3.3/7.28 3.3/7.28 Physical Specifications
Packing Dimensions 351 x 149 x 243/ 351 x 152 x 245/ 519 x 392 x 163/ 519 x 392 x 163/ 519 x 392 x 163/ Item Dimensions 210 x 115 x 33/ 216 x 143 x 33/ 272 x 187 x 36/ 300 x188 x 44/
(WxDxH)(mm/in.) 13.82 x 5.98 x 9.65 13.82 x 5.98 x 9.65 20.43 x 15.43 x 6.42 20.43 x 15.43 x 6.42 20.43 x 15.43 x 6.42 (WxDxH)(mm/in.) 8.27 x 6.06 x 1.57 8.50 x 5.63 x 1.30 10.7 x 7.36 x 1.42 16.93 x 7.4 x 1.73
Weight (kg/lb.) 3.264/7.20 3.264/7.20 4.8/10.58 4.8/10.58 4.8/10.58 Weight (kg/lb.) 0.495/1.09 0.88/1.94 1.4/3.09 1.65/3.64
Included accessories • Power adapter • Power adapter • Power cord • Power cord • Power cord Packing Dimensions 288 x 189 x 83/ 276 x 185 x 98/ 427 x 247x 73/ 351 x 152 x 245/
• Power cord • Power cord • Rack mounting kit • Rack mounting kit • Rack mounting kit (WxDxH)(mm/in.) 11.34 x 7.44 x 3.27 10.87 x 7.28 x 3.86 16.81 x9.72 x 2.87 13.82 x 5.98 x 9.65
• Rack mounting kit • Rack mounting kit
Weight (kg/lb.) 1.13/2.49 1.41/3.11 2.23 (W/O bracket) / 2.83/6.24
Environmental Specifications 2.42 (W/ bracket)
Operating Temperature 0°C to 40°C/ 0°C to 40°C/ 0°C to 40°C/ 0°C to 40°C/ 0°C to 40°C/ Included accessories Power adapter • Power adapter • Power adapter • Power adapter
environment 32°F to 104°F 32°F to 104°F 32°F to 104°F 32°F to 104°F 32°F to 104°F • RJ-45 - RS-232 cable for • Rack mounting kit (optional, • Power cord
Humidity 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90% console connection by regions) • Rack mounting kit
(non-condensing) (non-condensing) (non-condensing) (non-condensing) (non-condensing) Environmental Specifications
Storage Temperature -30°C to 70°C/ -30°C to 70°C/ -30°C to 70°C/ -30°C to 70°C/ -30°C to 70°C/ Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F
environment -22°F to 158°F -22°F to 158°F -22°F to 158°F -22°F to 158°F -22°F to 158°F environment Humidity 20% to 95% 10% to 90% 10% to 90% 10% to 90%
Humidity 10% to 90% 10% to 90% 10% to 90% 10% to 90% 10% to 90% (non-condensing) (non-condensing) (non-condensing) (non-condensing)
(non-condensing) (non-condensing) (non-condensing) (non-condensing) (non-condensing)
Storage Temperature -30°C to 60°C/-22°F to -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to
MTBF (hr) 787109.3 787109.3 560811.5 560811.5 560811.5 environment 140°F 158°F
Certifications Humidity 20% to 95% 10% to 90% 10% to 90% 10% to 90%
EMC FCC Part 15 (Class A), FCC Part 15 (Class A), FCC Part 15 (Class A), FCC Part 15 (Class A), FCC Part 15 (Class A), (non-condensing) (non-condensing) (non-condensing) (non-condensing)
CE EMC (Class A), CE EMC (Class A), CE EMC (Class A), CE EMC (Class A), CE EMC (Class A), MTBF (hr) 44,000 44,000 529688.2 529688.2
C-Tick (Class A), C-Tick (Class A), C-Tick (Class A), C-Tick (Class A), C-Tick (Class A),
BSMI BSMI BSMI BSMI BSMI Certifications
Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1),BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), EMC FCC Part 15B (Class B), FCC Part 15 (Class B), FCC Part 15 (Class B), FCC Part 15 (Class A),
BSMI FCC Part 68, IC, CE EMC (Class B), CE EMC (Class B), CE EMC (Class A),
CE EMC (Class B) RCMc BSMI C-Tick (Class B), BSMI C-Tick (Class A), BSMI
Note:
*: This matrix with firmware ZLD4.32 or later. *5: Maximum sessions measured using the industry standard IXIA IxLoad testing Safety CE LVD BSMI, UL LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI
*1: Actual performance may vary depending on network conditions and activated tool. Note:
applications. *6: Including Gateway-to-Gateway and Client-to-Gateway. *: The matrix with firmware ZLD 4.31 and OPAL BE 1.12 or later *7: This is the recommend maximum number of concurrent logged-in devices.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *7: With Zyxel service license to enable or extend the feature capacity. *1: Actual performance may vary depending on network conditions and activated *8: SafeSearch function in Content Filtering need to enable SSL inspection firstly
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *8: This is the recommend maximum number of concurrent logged-in devices. applications. and not for small business.
*4: AV and IDP throughput measured using the industry standard HTTP performance *9: SafeSearch function in CF2.0 need to enable SSL inspection firstly and not for *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *9: With Hotspot Management license support.
test (1,460-byte HTTP packets). Testing done with multiple flows. small business models. *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *10: ZyWALL VPN100 or above supports Device HA Pro once registered.
*10: With Hotspot Management license support. *4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool *11: After device upgrading firmware to SD-OS v10.01 and was transformed to SD-
*5: Including Gateway-to-Gateway and Client-to-Gateway. WAN mode.
*6: With Zyxel service license to enable or extend the feature capacity. *12: After upgrading firmware to SD-OS v10.02 or after.

12 Quick Sales Guide Security Quick Sales Guide Security 13

 ZyWALL VPN Firewalls ZyWALL VPN Firewalls
Model ZyWALL 110 ZyWALL 310 ZyWALL 1100 Model USG20-VPN USG20W-VPN
Hardware Specifications Hardware Specifications
Interfaces 4 x LAN/DMZ, 2 x WAN, 1 x OPT 8 (Configurable) 8 (Configurable) Interfaces 4 x LAN/DMZ, 1 x WAN, 1 x SFP 4 x LAN/DMZ, 1 x WAN, 1 x SFP
USB3.0 ports 2 2 2 USB3.0 ports 1 1
Console port Yes (DB9) Yes (DB9) Yes (DB9) Console port Yes (RJ-45) Yes (RJ-45)
Rack-mountable Yes Yes Yes Rack-mountable - -
System Capacity & Performance*1 System Capacity & Performance*1
SPI firewall throughput (Mbps)*2 1600 5000 6000 SPI firewall throughput (Mbps)*2 350 350
VPN throughput (Mbps)*3 400 650 800 VPN throughput (Mbps)*3 90 90
Max. TCP concurrent sessions*4 150,000 500,000 1,000,000 Max. TCP concurrent sessions*4 20,000 20,000
Max. concurrent IPSec VPN tunnels *5 100 300 1000 Max. concurrent IPSec VPN tunnels *5 10 10
Concurrent SSL VPN users 25/150 50/150 250/500 Concurrent SSL VPN users 5/15 5/15
(default/max.)*6 (default/max.)*6
VLAN interface 16 64 128 VLAN interface 8 8
Concurrent devices logins 200/300 500/800 800/1,500 Concurrent devices logins 64 64
(default/max.)*6*7 (default/max.)*6*7
WLAN Management WLAN Management
Managed AP number (default/max.)*6 2/34 2/34 2/130 Managed AP number (default/max.)*6 - -
Security Service Security Service
Anti-virus (AV)*6 Yes Yes Yes Anti-virus (AV)*6 - -
Intrusion detection and prevention Yes Yes Yes Intrusion detection and prevention - -
(IDP) & Application Patrol*6 (IDP) & Application Patrol*6
Anti-spam*6 Yes Yes Yes Anti-spam*6 Yes Yes
Content filtering (CF 2.0)*6*8 Yes Yes Yes Content filtering (CF 2.0)*6*8 Yes Yes
Key Features Key Features
VPN IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec VPN IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec
SSL (HTTPS) inspection Yes Yes Yes SSL (HTTPS) inspection - -
EZ Mode - - - EZ Mode Yes Yes
Hotspot Management*6 Yes Yes Yes Hotspot Management*6 - -
Ticket printer support*9/ Yes (SP350E) /10 Yes (SP350E) /10 Yes (SP350E) /10 Ticket printer support*9/ - -
Support Q'ty (max.) Support Q'ty (max.)
Amazon VPC Yes Yes Yes Amazon VPC Yes Yes
Facebook WiFi Yes Yes Yes Facebook WiFi Yes Yes
Device HA Pro Yes Yes Yes Device HA Pro*10 - -
Link Aggregation (LAG) - Yes Yes Link Aggregation (LAG) - -
2-Factor Authentication Yes Yes Yes 2-Factor Authentication Yes Yes
Cloud CNM SecuReporter Yes Yes Yes Cloud CNM SecuReporter Yes Yes
Power Requirements Power Requirements
Power input 12 V DC, 3.33 A max. 110-240 V AC, 50/60 Hz, 1.3 A max. 110-240 V AC, 50/60 Hz, 1.3 A max. Power input 12 V DC, 2.0 A max. 12 V DC, 2.0 A max.
Max. power consumption (watt) 37 58.5 58.5 Max. power consumption (watt) 12 18
Heat dissipation (BTU/hr) 126.25 199.61 199.61 Heat dissipation (BTU/hr) 40.92 61.38
Physical Specifications Physical Specifications
Item Dimensions 300 x 188 x 44/ 430 x 250 x 44/ 430 x 250 x 44/ Item Dimensions 216 x 143 x 33/ 216 x 143 x 33/
(WxDxH)(mm/in.) 11.81 x 7.4 x 1.73 16.93 x 9.84 x 1.73 16.93 x 9.84 x 1.73 (WxDxH)(mm/in.) 8.50 x 5.63 x 1.30 8.50 x 5.63 x 1.30
Weight (kg/lb.) 2/4.41 3.3/7.28 3.3/7.28 Weight (kg/lb.) 0.88/1.94 0.94/2.06 (Antenna included)
Packing Dimensions 351 x 152 x 245/ 519 x 392 x 163/ 519 x 392 x 163/ Packing Dimensions 276 x 185 x 98/ 276 x 185 x 98/
(WxDxH)(mm/in.) 13.82 x 5.98 x 9.65 20.43 x 15.43 x 6.42 20.43 x 15.43 x 6.42 (WxDxH)(mm/in.) 10.87 x 7.28 x 3.86 10.87 x 7.28 x 3.86
Weight (kg/lb.) 2.83/6.24 4.74/10.45 4.74/10.45 Weight (kg/lb.) 1.41/3.11 1.50/3.31
Included accessories • Power adapter • Power adapter • Power cord Included accessories • Power adapter • Power adapter
• Power cord • Rack mounting kit • Rack mounting kit • RJ-45 - RS-232 cable for console connection • RJ-45 - RS-232 cable for console connection
• Rack mounting • Antenna
Environmental Specifications Environmental Specifications
Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F
environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing) environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing)
Storage Temperature -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F Storage Temperature -30°C to 70°C/-22°F to 158°F -30°C to 70°C/-22°F to 158°F
environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing) 10% to 90% (non-condensing) environment Humidity 10% to 90% (non-condensing) 10% to 90% (non-condensing)
MTBF (hr) 787109.3 560811.5 560811.5 MTBF (hr) 44000 44000
Certifications Certifications
EMC FCC Part 15 (Class A), FCC Part 15 (Class A), FCC Part 15 (Class A), EMC FCC Part 15 (Class B), IC, CE EMC (Class B), FCC Part 15 (Class B), IC, CE EMC (Class B),
CE EMC (Class A),C-Tick (Class A), CE EMC (Class A), C-Tick (Class A), CE EMC (Class A), C-Tick (Class A), RCM, BSMI RCM,BSMI
BSMI BSMI BSMI Safety BSMI, UL BSMI, UL
Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI Note:
Note: *: This matrix with firmware ZLD4.31 or later.
*: This matrix with firmware ZLD4.32 or later. *1: Actual performance may vary depending on network conditions and activated applications.
*1: Actual performance may vary depending on network conditions and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *5: Including Gateway-to-Gateway and Client-to-Gateway.
*5: Including Gateway-to-Gateway and Client-to-Gateway. *6: With Zyxel service license to enable or extend the feature capacity.
*6: With Zyxel service license to enable or extend the feature capacity. *7: This is the recommend maximum number of concurrent logged-in devices.
*7: This is the recommend maximum number of concurrent logged-in devices. *8: SafeSearch function in Content Filtering need to enable SSL inspection firstly and not for small business.
*8: SafeSearch function in Content Filtering need to enable SSL inspection firstly and not for small business. *9: With Hotspot Management license support.
*9: With Hotspot Management license support.

14 Quick Sales Guide Security Quick Sales Guide Security 15

 Wireless Specifications Nebula Cloud Managed Security Gateways
Model VPN Firewall Unified Security Gateway Model NSG50 NSG100 NSG200 NSG300
USG20W-VPN USG40W USG60W Hardware Specifications
Standard compliance 802.11 a/b/g/n/ac 802.11 b/g/n 802.11 a/b/g/n 10/100/1000 Mbps RJ-45 ports 4 x LAN (GbE), 4 x LAN (GbE), 5 x LAN (GbE), 6 x Individual LAN (GbE),
2 x WAN (1 x SFP, 1 x GbE) 2 x WAN (GbE) 2 x WAN (GbE) 2 x WAN (GbE)
Wireless frequency 2.4/5 GHz 2.4 GHz Concurrent 2.4 & 5 GHz
USB ports 1 2 2 2
Radio 1 1 2
Console port Yes (RJ-45) Yes (DB9) Yes (DB9) Yes (DB9)
SSID number 8 8 16
Rack-mountable - Yes Yes Yes
Maximum transmit • US (FCC) 2.4 GHz: • US (FCC) 2.4 GHz: • US (FCC) 2.4 GHz:
power (Max. total 25 dBm, 3 antennas 24.3 dBm, 2 antennas 24.3 dBm, 2 antennas Wall-mountable Yes - - -
channel) • US (FCC) 5 GHz: • EU (ETSI) 2.4 GHz: • US (FCC) 5 GHz: Fanless Yes Yes No No
25 dBm, 3 antennas 19.6 dBm (EIRP), 2 antennas 25.8 dBm, 2 antennas System Capacity & Performance*1
• EU (ETSI) 2.4 GHz: • EU (ETSI) 2.4 GHz:
20 dBm (EIRP), 3 antennas 18.6 dBm (EIRP), 2 antennas SPI firewall throughput (Mbps)*2 300 450 1,250 4,000
• EU (ETSI) 5 GHz: • EU (ETSI) 5 GHz: VPN throughput (Mbps)*3 100 150 500 750
20 dBm (EIRP), 3 antennas 28.4 dBm (EIRP), 2 antennas
IDP throughput (Mbps)*4 110 160 500 950
No. of antenna 3 detachable antennas 2.4 GHz: 2T2R MIMO 2.4 GHz: 2T2R MIMO
(Detachable, SMA-R) 5 GHz: 2T2R MIMO (Detachable, SMA-R) AV throughput (Mbps)*4 50 90 300 450
Antenna gain 2 dBi @2.4 GHz 3 dBi 3 dBi SP throughput (Mbps, AV and IDP)*4 50 90 300 450
3 dBi @5 GHz Unlimited user Yes Yes Yes Yes
Data rate • 802.11n up to 450 Mbps • 802.11b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 • 802.11b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 Max. TCP concurrent sessions*5 20,000 40,000 80,000 500,000
• 820.11ac up to 1300 Mbps and 54 Mbps and 54 Mbps Max. TCP session rate 2,000 2,000 8,000 10,000
• 802.11n: up to 300 Mbps in MCS15 • 802.11a: 6, 9, 12, 18, 24, 36, 48 and 54 Mbps
(40 MHz; GI = 400 ns) • 802.11n: up to 300 Mbps in MCS15 Max. concurrent IPsec VPN tunnels*6 10 40 200 300
(40 MHz; GI = 400 ns) VLAN interface 8 16 16 16
Frequency band 2.4 GHz (IEEE 802.11 b/g/n) 2.4 GHz (IEEE 802.11 b/g/n) 2.4 GHz (IEEE 802.11 b/g/n) Key Software Features
• USA (FCC): 2.412 to 2.462 GHz • USA (FCC): 2.412 to 2.462 GHz • USA (FCC): 2.412 to 2.462 GHz Firewall Yes Yes Yes Yes
• Europe (ETSI): 2.412 to 2.472 GHz • Europe (ETSI): 2.412 to 2.472 GHz • Europe (ETSI): 2.412 to 2.472 GHz
• TWN (NCC): 2.412 to 2.462 GHz • TWN (NCC): 2.412 to 2.462 GHz • TWN (NCC): 2.412 to 2.462 GHz Virtual Private Network (VPN) Yes (IPSec, L2TP over Yes (IPSec, L2TP over Yes (IPSec, L2TP over Yes (IPSec, L2TP over
IPSec) IPSec) IPSec) IPSec)
5 GHz (IEEE 802.11 a/n/ac) 5 GHz (IEEE 802.11 a/n)
• USA (FCC): 5.15 to 5.25 GHz; • USA: 5.150 to 5.250 GHz; 5.725 to 5.850 Application Patrol Yes Yes Yes Yes
5.250 to 5.350 GHz; 5.470 to 5.725 GHz; GHz Intrusion Detection and Prevention (IDP) Yes Yes Yes Yes
5.7250 to 5.850 GHz • European (ETSI): 5.15 to 5.35 GHz;
• Europe (ETSI): 5.15 to 5.35 GHz; 5.470 to 5.725 GHz Bandwidth management Yes Yes Yes Yes
5.470 to 5.725 GHz • Taiwan (TW): 5.25 to 5.35 GHz; Logging and Monitoring Yes Yes Yes Yes
• TWN (NCC): 5.15 to 5.25 GHz; 5.725 to 5.850 GHz Content Filtering Yes Yes Yes Yes
5.250 to 5.350 GHz; 5.470 to 5.725 GHz;
5.7250 to 5.850 GHz Anti-Virus Yes Yes Yes Yes
Receive sensitivity 2.4 GHz: 2.4 GHz: 2.4 GHz: WAN Failover Yes Yes Yes Yes
• 11 Mbps ≤ -87 dBm • 11 Mbps ≤ -87 dBm • 11 Mbps ≤ -87 dBm Power Requirements
• HT20, MCS15 ≤ -71 dBm • 54 Mbps ≤ -74 dBm • 54 Mbps ≤ -74 dBm Power input 12 V DC, 2.0 A max. 12 V DC, 3.0 A max. 12 V DC, 3.33 A max. 100 - 240 V AC, 50/60 Hz,
• 54 Mbps ≤ -74 dBm • HT20, MCS15 ≤ -71 dBm • HT20 ≤ -71 dBm 1.3 A max.
• HT40, MCS15 ≤ -67 dBm • HT40, MCS15 ≤ -68 dBm • HT40 ≤ -68 dBm
Max. power consumption (watt) 12.0 19.0 37.0 58.5
5 GHz: 5 GHz:
• 54 Mbps ≤ -74 dBm • 54 Mbps ≤ -75 dBm Heat dissipation (BTU/hr) 40.95 64.83 199.61 199.61
• HT40, MCS23 ≤ -68 dBm • HT20, MCS15 ≤ -71 dBm Physical Specifications
• VHT40, MCS9 ≤ -62 dBm • HT40, MCS15 ≤ -69 dBm Item Dimensions 216 x 143 x 33/ 242 x 175 x 36/ 300 x 178 x 44/ 430 x 250 x 44/
• HT20, MCS23 ≤ -71 dBm (WxDxH)(mm/in.) 8.50 x 5.63 x 1.30 9.53 x 6.89 x 1.42 11.81 x 7.0 x 1.73 16.93 x 9.84 x 1.73
• VHT20, MCS8 ≤ -66 dBm
• VHT80, MCS9 ≤ -59 dBm Weight (kg/lb.) 1.04/2.29 1.25/2.76 2.0/4.4 3.3/7.28
Packing Dimensions 276 x 185 x 98/ 394 x 240 x 101/ 351 x 243 x 149/ 519 x 392 x 163/
(WxDxH)(mm/in.) 10.87 x 7.28 x 3.86 15.51 x 9.45 x 3.98 13.82 x 9.57 x 5.87 20.43 x 15.43 x 6.42
Weight (kg/lb.) 1.41/3.11 2.25/4.96 3.264/7.20 4.8/10.58
Included accessories • Power adapter (with • Power adapter • Power cord • Power cord
plug) • Rack mounting kit • Power adapter • Rack mounting kit
• RJ45-RS232 console • Rack mounting kit
cable
Environmental Specifications
Operating Temperature 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F 0°C to 40°C/32°F to 104°F
Humidify 10% to 90% 10% to 90% 10% to 90% 10% to 90%
(non-condensing) (non-condensing) (non-condensing) (non-condensing)
Storage Temperature -30°C to 70°C/-22°F to -30°C to 70°C/-22°F to -30°C to 70°C/-22°F to -30°C to 70°C/-22°F to
158°F 158°F 158°F 158°F
Humidify 10% to 90% 10% to 90% 10% to 90% 10% to 90%
(non-condensing) (non-condensing) (non-condensing) (non-condensing)
MTBF (hr) 44,000.0 815,463.90 787,109.3 560,811.50
Certifications
EMC FCC Part 15 (Class B), IC, FCC Part 15 (Class B), CE FCC Part 15 (Class A), CE FCC Part 15 (Class A), CE
CE EMC (Class B), RCM, EMC (Class B), C-Tick EMC (Class A), C-Tick EMC (Class A), C-Tick
BSMI (Class B), BSMI (Class A), BSMI (Class A), BSMI
Safety BSMI, UL LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI
Note:
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets), and without enabling Intrustion Detection and Prevention.
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets), and without enabling Intrusion Detection and Prevention.
*4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing were done with
multiple sessions.
*5: Maximum sessions measured using the industry-standard IXIA IxLoad testing tool.
*6: Including Gateway-to-Gateway and Client-to-Gateway

16 Quick Sales Guide Security Quick Sales Guide Security 17

 Compatibility & Accessories
Access Point Supported Model List
Model Central management Auto provisioning Data forwarding ZyMesh Model Access Point Service Gateway Printer Transceivers Direct Attach Cables
Unified AP NWA5121-N Yes Yes Local bridge Yes
Managed AP Service Hotspot Management Optional Optional
NWA5121-NI
Required License Required
NWA5123-AC
NWA5123-AC HD* ATP200 Yes - Yes -
NWA5123-NI ATP500 Yes - Yes -
NWA5301-NJ ATP800 Yes - Yes -
WAC5302D-S VPN50 Yes Yes* Yes -
Unified Pro AP WAC6103D-I Yes Yes Local bridge/ Yes VPN100 Yes Yes* Yes -
WAC6303D-S* Data tunnel VPN300 Yes Yes* Yes -
WAC6502D-E USG20(W)-VPN - - Yes -
WAC6502D-S USG40(W) Yes - - -
WAC6503D-S
USG60(W) Yes - - -
WAC6553D-E
USG110 Yes Yes - -
*: Forward Compatible AP: Starting from APC3.0, commercial gateways supporting APC technology are able to recognize APs with APC3.0 firmware
USG210 Yes Yes - -
version or higher. Resellers can introduce newly-available Zyxel APs with basic features supported without upgrading any new controller firmware
USG310 Yes Yes - -
USG1100 Yes Yes - -
USG1900 Yes Yes - -
USG2200 Yes Yes Yes Yes
ZyWALL110 Yes Yes - -
Service Gateway Printer ZyWALL310 Yes Yes - -
Model Buttons Paper roll width Interface Power input Item dimensions Item weight ZyWALL1100 Yes Yes - -
(WxDxH) * After upgrading firmware to SD-OS v10.02 or later
SP350E 3 58 (+0/-1) mm 10/100 Mbps 12 V DC, 176 x 111 x 114 0.8 kg (1.76 lb.)
RJ-45 port 3 A max. (6.93" x 4.37" x 4.49")
Note: Hotspot management licenses required

License for VPN Client Service

Transceivers (Optional)*
Speed Model Connector Wavelength Max. Distance DDMI SecuExtender Software
10-Gigabit SFP+ SFP10G-SR* Duplex LC 850 nm 300 m (328 yd) Yes Item Description Supported OS
SFP10G-LR* Duplex LC 1310 nm 10 km (10936 yd) Yes IPSec VPN Client* IPSec VPN client software for the ZyWALL Windows XP (32-bit)
Gigabit SFP-1000T RJ-45 - 100 m (109 yd) - and USG Series with Easy VPN for zero Windows Server 2003 (32-bit)
SFP-LX-10-D LC 1310 nm 10 km (10936 yd) - configuration remote access Windows Server 2008 (32/64-bit)
SFP-SX-D LC 850 nm 550 m (601 yd) - Windows Vista (32/64-bit)
*: only USG2200-VPN supports 10-Gigabit SFP+ Windows 7 (32/64-bit)
Windows 8 (32/64-bit)
Windows 10 (32/64-bit)
SSL VPN Client* Secured VPN connection between PC/ Windows XP
MAC and ZyWALL Firewall Windows 7 (32/64-bit)
Windows 8/8.1 (32/64-bit)
Direct Attach Cables (Optional)* Windows 10 (32/64-bit)
Model Connector Cable Length MAC OS 10.7 - 10.13
*: A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official Zyxel website.
DAC10G-1M* SFP+ to SFP+ 1m (39.37 inch) To continue using the application, please contact your regional sales representatives and purchase a commercial license for the application.
DAC10G-3M* SFP+ to SFP+ 3m (118.11 inch)
*only USG2200-VPN supports SFP+ interface

18 Quick Sales Guide Security Quick Sales Guide Security 19

Corporate Headquarters
Zyxel Communications Corp.
Tel: +886-3-578-3942
Fax: +886-3-578-2439
Email: [email protected]
http://www.zyxel.com

Europe Asia The Americas

Zyxel Belarus Zyxel Norway Zyxel China (Shanghai) Zyxel Middle East FZE Zyxel USA
Tel: +375 17 334 6099 Tel: +47 22 80 61 80 China Headquarters Tel: +971 4 372 4483 North America Headquarters
Fax: +375 17 334 5899 Fax: +47 22 80 61 81 Tel: +86-021-61199055 Cell: +971 562146416 Tel: +1-714-632-0882
Email: [email protected] Email: [email protected] Fax: +86-021-52069033 Email: [email protected] Fax: +1-714-632-0858
http://www.zyxel.by http://www.zyxel.no Email: [email protected] http://www.zyxel-me.com Email: [email protected]
http://www.zyxel.cn http://us.zyxel.com

Zyxel BeNeLux Zyxel Poland Zyxel China (Beijing) Zyxel Philippine Zyxel Brazil
Tel: +31 23 555 3689 Tel: +48 223 338 250 Tel: +86-010-62602249 Email: [email protected] Tel: +55 (11) 3373-7470
Fax: +31 23 557 8492 Hotline: +48 226 521 626 Email: [email protected] http://www.zyxel.com.ph Fax: +55 (11) 3373-7510
Email: [email protected] Fax: +48 223 338 251 http://www.zyxel.cn Email: [email protected]
http://www.zyxel.nl Email: [email protected] http://www.zyxel.com/br/pt/
http://www.zyxel.be http://www.zyxel.pl

Zyxel Bulgaria Zyxel Romania Zyxel China (Tianjin) Zyxel Singapore

(Bulgaria, Macedonia, Tel: +40 31 0809 888 Tel: +86-022-87890440 Tel: +65 6339 3218
Albania, Kosovo) Fax: +40 31 0809 890 Fax: +86-022-87892304 Hotline: +65 6339 1663
Tel: +3592 4443343 Email: [email protected] Email: [email protected] Fax: +65 6339 3318
Email: [email protected] http://www.zyxel.ro http://www.zyxel.cn Email: [email protected]
http://www.zyxel.bg http://www.zyxel.com.sg

Zyxel Czech Republic Zyxel Russia Zyxel India Zyxel Taiwan (Taipei)
Tel: +420 241 091 350 Tel: +7 (495) 539-9935 Tel: +91-11-4760-8800 Tel: +886-2-2739-9889
Hotline: +420 241 774 665 Fax: +7 (495) 542-8925 Fax: +91-11-4052-3393 Fax: +886-2-2735-3220
Fax: +420 241 091 359 Email: [email protected] Email: [email protected] Email: [email protected]
Email: [email protected] http://www.zyxel.ru http://www.zyxel.in http://www.zyxel.com.tw
http://www.zyxel.cz

Zyxel Denmark A/S Zyxel Slovakia Zyxel Kazakhstan Zyxel Thailand

Tel: +45 39 55 07 00 Tel: +421 220 861 847 Tel: +7-727-2590-699 Tel: +66-(0)-2831-5315
Fax: +45 39 55 07 07 Hotline: +421 220 861 848 Fax: +7-727-2590-689 Fax: +66-(0)-2831-5395
Email: [email protected] Fax: +421 243 193 990 Email: [email protected] Email: [email protected]
http://www.zyxel.dk Email: [email protected] http://www.zyxel.kz http://www.zyxel.co.th
http://www.zyxel.sk

Zyxel Finland Zyxel Sweden A/S Zyxel Korea Corp. Zyxel Vietnam
Tel: +358 9 4780 8400 Tel: +46 8 55 77 60 60 Tel: +82-2-890-5535 Tel: (+848) 35202910
Email: [email protected] Fax: +46 8 55 77 60 61 Fax: +82-2-890-5537 Fax: (+848) 35202800
http://www.zyxel.fi Email: [email protected] Email: [email protected] Email: [email protected]
http://www.zyxel.se http://www.zyxel.kr http://www.zyxel.com/vn/vi/

Zyxel France Zyxel Switzerland Zyxel Malaysia

Tel: +33 (0)4 72 52 97 97 Tel: +41 (0)44 806 51 00 Tel: +603 2282 1111
Fax: +33 (0)4 72 52 19 20 Fax: +41 (0)44 806 52 00 Fax: +603 2287 2611
Email: [email protected] Email: [email protected] Email: [email protected]
http://www.zyxel.fr http://www.zyxel.ch http://www.zyxel.com.my

Zyxel Germany GmbH Zyxel Turkey A.S.

Tel: +49 (0) 2405-6909 0 Tel: +90 212 314 18 00
Fax: +49 (0) 2405-6909 99 Fax: +90 212 220 25 26
Email: [email protected] Email: [email protected]
http://www.zyxel.de http://www.zyxel.com.tr

Zyxel Hungary & SEE Zyxel UK Ltd.

Tel: +36 1 848 0690 Tel: +44 (0) 118 9121 700
Email: [email protected] Fax: +44 (0) 118 9797 277
http://www.zyxel.hu Email: [email protected]
http://www.zyxel.co.uk

Zyxel Iberia Zyxel Ukraine

Tel: +34 911 792 100 Tel: +380 (50) 440 88 61
Email: [email protected] Email: [email protected]
http://www.zyxel.es http://www.zyxel.ua

Zyxel Italy
Tel: +39 011 2308000
Email: [email protected]
http://www.zyxel.it

For more product information, visit us on the web at www.zyxel.com

Copyright © 2019 Zyxel Communications Corp. All rights reserved. Zyxel, Zyxel logo are registered
trademarks of Zyxel Communications Corp. All other brands, product names, or trademarks mentioned
are the property of their respective owners. All specifications are subject to change without notice. 5-000-00019004 01/19