ZyXEL Communications Wireless 11AC VPN Firewall with SFP port - USG20W-VPN

USG20-VPN / USG20W-VPN provide safer and reliable VPN connections. Networking brings convenience and efficiency to business environments; however it introduces significant security and safety concerns at the same time. Today; small businesses or branch offices really need a complete yet affordable solution that not only bridges communications between two or more remote sites; but also connects multiple VPNs and ensures data security to prevent the network from threats.

• Comprehensive supports to IPv6
• Robust hybrid VPN (IPSec/SSL/ L2TP)
• 802.11 ac with single-radio dualband (2.4G/5G) Wi-Fi support
• High-performance SPI Firewall
• Bandwidth management
• High Availability (HA) with multi-WAN failover and loadbalancing

Safer; More Reliable Vpn Connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN encryption algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2); the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.

Unlimited Business Mobility

To support dynamic; mobile business operations in today's BYOD (bring your own device) business environments; the VPN Firewalls offer unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP VPN on a wide variety of mobile Internet devices running the iOS; Android and Windows mobile platforms.

ZyXEL One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network; ZyXEL One Network is designed to simplify the configuration; management; and troubleshooting; allowing our customers to focus on the business priorities. ZyXEL One Network presents an easy-to-use tool; ZyXEL One Network Utility (ZON Utility); to realize speed network setup. ZyXEL Smart Connect allows ZyXEL networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

OneSecurity.com Service

ZyXEL provides regular updates in response to the latest security threats and advisories; and a service portal that offers free; informative network security resource and know-how to help businesses and IT departments to protect their networks and operations from security risks of the digital age. The ZyXEL USG and ZyWALL Series of products are integrated with OneSecurity.com service in the product GUI; so the IT staff can quickly and easily catch up with any new threats; and therefore proceed with walkthrough and troubleshooting actions with assistance from FAQs to better secure networks and easily manager UTM products.

VPN Application

• Branch offices; partners and home users can deploy ZyXEL USGs/ZyWALLs for site-to-site IPSec VPN connections
• Branch offices/In-house staff can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
• Remote users can securely access company resources with their computers or smartphones via SSL; IPSec and L2TP over IPSec VPN
• The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications

Specifications:

Hardware Specifications

• 10/100/1000 Mbps RJ-45 ports: 1 x WAN; 1 x SFP; 4 x LAN/DMZ
• USB ports: 1
• Console port: Yes (RJ-45)

System Capacity & Performance

• SPI firewall throughput (Mbps): 350
• VPN throughput (Mbps): 90
• Max. TCP concurrent sessions: 20000
• Max. concurrent IPSec VPN tunnels: 10
• Max. concurrent SSL VPN users: 15
• Included SSL VPN user no.: 5
• Customizable zones: Yes
• IPv6 support: Yes

Wireless Specifications

• Standard compliance: IEEE 802.11ac/n compliance
• Wireless frequency: 2.4 GHz/5 GHz
• Radio: 1
• SSID number: 8
• Maximum transmit power: US (FCC) 2.4 GHz: 25 dBm; 3 antennas; US (FCC) 5 GHz: 25 dBm; 3 antennas; EU (ETSI) 2.4 GHz: 20 dBm (EIRP); 3 antennas; EU (ETSI) 5 GHz: 20 dBm (EIRP); 3 antennas
• No. of antenna: 3 detachable antennas
• Antenna gain: 2 dBi @2.4 GHz; 3 dBi @5 GHz
• Data rate: 802.11n Up to 450 Mbps; 820.11ac Up to 1300 Mbps
• Receive sensitivity: 2.4 GHz: 11 Mbps = -87 dBm; 54 Mbps = -74 dBm; HT20; MCS15 = -71 dBm; HT40; MCS15 = -67 dBm / 5 GHz: 54 Mbps = -74 dBm; HT20; MCS23 = -71 dBm; HT40; MCS23 = -68 dBm; VHT20; MCS8 = -66 dBm; VHT40; MCS9 = -62 dBm; VHT80; MCS9 = -59 dBm

Key Software Features

• Firewall: Yes
• Virtual private network (VPN): Yes (IPSec; SSL; L2TP over IPSec)
• Anti-spam: Subscription based
• Content Filtering (CF): Subscription based
• Bandwidth management: Yes
• Logging and monitoring: Yes
• Unified security policy: Yes
• System management: Yes

Power Requirements

• Power input: 12 V DC; 2.0 A max.
• Max. power consumption (watt): 18
• Heat dissipation (BTU/hr): 61.38

Physical Specifications

• Dimensions (W x D x H)(mm/in.): 216 x 143 x 33/ 8.50 x 5.63 x 1.30
• Weight (kg/lb.): 1.14/2.51 (Antenna included)
• Included accessories: Power adapter; RJ45 -RS232 cable for console connection; Antenna

Environmental Specifications

• Operating Temperature: 0 degreeC to 40 degreeC (32 degreeF to 104 degreeF)
• Operating Humidity: 10% to 90% (non-condensing)
• Storage Temperature: -30 degreeC to 70 degreeC (-22 degreeF to 158 degreeF)
• Storage Humidity: 10% to 90% (non-condensing)
• MTBF (hr): 44000

Certifications

• EMC: FCC Part 15 (Class B); IC; CE EMC (Class B); RCM; BSMI
• Safety: BSMI; UL

Firewall

• ICSA-certified firewall (certification in progress)
• Routing and transparent (bridge) modes
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG support for customized ports
• Protocol anomaly detection and protection
• Traffic anomaly detection and protection
• Flooding detection and protection
• DoS/DDoS protection

IPv6 Support

• Dual stack
• IPv4 tunneling (6rd and 6to4 transition tunnel)
• IPv6 addressing
• DNS
• DHCPv6
• Bridge
• VLAN
• PPPoE
• Static routing
• Policy routing
• Session control
• Firewall and ADP
• IPSec VPN
• Content filtering
• Anti-spam

IPSec VPN

• ICSA-certified IPSec VPN (certification in progress)
• Encryption: AES (256-bit); 3DES and DES
• Supports generating SHA2 Certificate
• Authentication: SHA-2 (512-bit); SHA-1 and MD5
• Key management: manual key; IKEv1 and IKEv2 with EAP
• Perfect forward secrecy (DH groups) support 1; 2; 5
• IPSec NAT traversal
• Dead peer detection and relay detection
• PKI (X.509) certificate support
• VPN concentrator
• Simple wizard support
• VPN auto-reconnection
• VPN High Availability (HA): load-balancing and failover
• L2TP over IPSec
• GRE and GRE over IPSec
• NAT over IPSec
• ZyXEL VPN client provisioning

SSL VPN

• Supports Windows and Mac OS X
• Supports full tunnel mode
• Supports 2-step authentication
• Customizable user portal

Networking

• Routing mode; bridge mode and hybrid mode
• Ethernet and PPPoE
• NAT and PAT
• VLAN tagging (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIPv1/v2 and OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN trunk for more than 2 ports
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• Bandwidth limit per user
• Bandwidth limit per IP

WLAN Management

• Wireless L2 isolation
• Wi-Fi Multimedia (WMM) wireless QoS
• IEEE 802.1x authentication
• RADIUS authentication
• CAPWAP discovery protocol
• Scheduled Wi-Fi service
• Dynamic Channel Selection (DCS)
• Captive portal Web authentication
• Multiple SSID with VLAN

Authentication

• Built-in user database
• Microsoft Windows Active Directory integration
• External LDAP/RADIUS user database
• XAUTH; IKEv2 with EAP VPN authentication
• Web-based authentication
• Forced user authentication (transparent authentication)
• IP-MAC address binding
• SSO (Single Sign-On) support

Logging/Monitoring

• Comprehensive local logging
• Syslog (send to up to 4 servers)
• Email alerts (send to up to 2 servers)
• Real-time traffic monitoring
• System status monitoring
• Built-in daily report
• Advanced reporting (Vantage Report)

System Management

• Role-based administration
• Multiple administrator logins
• Multi-lingual Web GUI (HTTPS and HTTP)
• Command line interface (console; Web console; SSH and telnet)
• SNMP v1; v2c; v3
• System configuration rollback
• Firmware upgrade via FTP; FTP-TLS and Web GUI
• Dual firmware images
• Cloud CNM SecuManager

Optional Security Services

• Content filtering
• Anti-Spam

ZyXEL One Network

• ZON Utility: IP configuration; Web GUI access; Firmware upgrade; Password configuration
• Smart Connect: Discover neighboring devices; One-click remote management access to the neighboring ZyXEL devices