Internet Security Appliance
Network Security in a Single Box for Offices of up to 50 People

- ICSA-certified Firewall
- Anti-Virus: (ICSA-certified ZyXEL Anti-Virus / Kaspersk)
- IDP
- VPN: (ICSA-certified IPSec / SSL L2TP / IM/P2P Management)
- Anti-Spam
- User-aware Configuration
- Bandwidth Management
- Multiple ISP Links
- ZyWALL OTP Support
- 3G Support

Network Connectivity
The seven Gigabit Ethernet ports include two WAN ports. The ZyWALL USG 200 OPT port can be used as another WAN,LAN,WLAN, or DMZ port.
The extension card slot lets you add an IEEE 802.11b/g wireless LAN or a 3G wireless WAN connection. There are also two USB ports you can use for 3G wireless WAN connections.

Geïntegreerd met totale beveiligingsoplossingen voor bedrijfsvestigingen, kleine kantoren en telewerkers

- ZyNOS ICSA IPSec VPN en FIREWALL gecertificeerd
- Web-based content filtering met Blue Coat service
- Bandbreedtebeheer op beleidsbasis
- Dial-backup met RS-232 op RJ-45 nulmodem poort
- Vier LAN/ DMZ*10/100 auto MDI/MDIX Ethernet poorten
- 24 Mbps doorvoersnelheid met firewall aan en actieve VPN tunnel voor FTTH en ADSL 2+


Virtual Private Network (VPN) verbinding
De ZyWALL 2 Plus ondersteunt IPSec VPN, dat geschikt is voor verbindingen van een externe locatie met een centrale server, tussen bedrijf en telewerker of telewerker en bedrijf. Dataversleuteling via het Internet verzekert veilige transmissie tussen de twee locaties, zodat geen dure huurlijnen meer nodig zijn en wereldwijde verbindingen voor minimale kosten mogelijk zijn.
Met behulp van de redundante IPSec VPN functie kan de ZyWALL 2 Plus backup tunnels naar de belangrijkste sites cre�ren.

Veilige firewall bescherming en Blue Coat
De ZyNOS ICSA Firewall-gecertificeerde ZyWALL 2 Plus levert een robuuste firewall bescherming, op basis van Stateful Packet Inspection (SPI) en Denial of Service (DoS) technologie. De ZyWALL 2 Plus vormt de eerste verdedigingslinie tegen hackers en andere bedreigingen. Een BlueCoat abonnement draagt bij aan de beveiliging van uw PC's tegen spyware, malware en phishing en beschermt uw bedrijf en gezin tegen illegaal en ongewenst surfen.

Maximale bandbreedte beschikbaar
De ZyWALL 2 Plus optimaliseert het bandbreedtegebruik op basis van IP-adressen en/of applicatietypen. Om een goede werking van belangrijke applicaties te verzekeren, wordt aan de diensten en gedefinieerde gebruikers de juiste hoeveelheid bandbreedte toegewezen wanneer die nodig is.

Verkeersomleiding voor reserve breedbandverbinding
De ZyWALL 2 Plus verhoogt de betrouwbaarheid door ondersteuning van fail-over en fail-back technologie. Een door de gebruiker gekozen ISDN of analoge modemverbinding schakelt het verkeer automatisch terug naar de WAN poort zodra de primaire verbinding hersteld is. De backup functie van de ZyWALL 2 Plus verzekert de toegang tot het Internet en verkleint tegelijkertijd de kans op uitval van de verbinding en daaraan gekoppelde verliezen.

Secure Zones technologie*
Dankzij de verbeterde *DMZ zone kunnen kleine kantoren en telewerkers eenvoudig hun toegangsserver of WIFI apparaat gescheiden van het vertrouwde lokale netwerk (LAN) inzetten. De *DMZ zone heeft zijn eigen DHCP service en alle zones zijn op veilige wijze gescheiden door middel van firewall regels.

3G en Wi-Fi Mobile breedband beveiligingsapparaat voor Remote Office (RO), kleine kantoren en telewerkers

- Internet toegang via 3G netwerken (HSDPA, UMTS, GPRS, EDGE)
- Dual-band, Tri-mode Access Point met Wireless 802.11 a/b/g netwerk
- Web-based content filtering service beschikbaar
- Geavanceerde ZyNOSTM ICSA-gecertificeerde SPI firewall en IPSec VPN bescherming
- Te configureren 4-poorts LAN/DMZ/WLAN zones

Internet toegang via 3G netwerken (HSDPA, UMTS, GPRS, EDGE)
De ZyWALL 2WG biedt gebruikers nog gemakkelijker toegang tot het Internet via een 3G-dienst, zodat de beperkingen van het kabelnetwerk opgeheven worden en de last-mile verbinding draadloos plaatsvindt. Ge�ntegreerd in het bekabelde netwerk kan deze oplossing backup WAN en lastbalancering functies op diverse applicaties toepassen, terwijl mobiliteit verzekerd is door de Wi-Fi verbinding.

Virtual Private Network (VPN) verbinding
De ZyWALL 2WG ondersteunt ZyNOS ICSA-gecertificeerd IPSec VPN, dat geschikt is voor verbindingen van externe locaties met de centrale server. Dataversleuteling via het Internet verzekert veilige transmissie tussen de twee locaties, zodat geen dure huurlijnen meer nodig zijn en wereldwijde verbindingen voor minimale kosten mogelijk zijn. Met behulp van de redundante IPSec VPN functie houdt de dialup client van de ZyWALL 2WG de verbinding in stand, ook als de primaire VPN verbinding uitvalt.

Veilige firewall bescherming
De ICSA-gecertificeerde ZyNOS firewall op de ZyWALL 2WG zorgt voor een robuuste en betrouwbare firewall beveiliging met hoge prestaties. Hij werkt op basis van Stateful Packet Inspection en Denial of Service (DoS) en vormt daardoor de eerste verdedigingslinie tegen hackers, netwerkindringers en andere gevaren.

Secure Zones technologie*
De ZyWALL 2WG is uitgerust met de Secure Zone technologie, zodat kleine kantoren en telewerkers eenvoudig hun toegangsserver kunnen inzetten in een DMZ zone die gescheiden is van het vertrouwde lokale netwerk (LAN). De DMZ zone en WLAN zone hebben hun eigen DHCP service en alle zones zijn op veilige wijze gescheiden door middel van firewall regels.

Network Security in a Single Box for Offices of up to 25 People

- VPN: (ICSA-certified IPSec VPN / SSL VPN / L2TP VPN)
- Anti-Virus: (ICSA-certified ZyXEL Anti-Virus / Kaspersky Anti-Virus)
- IDP
- Web security(Security Web access): ZyXEL Security Browsering
- Application firewall
- Scalable UTM/VPN Performance
- IM/P2P Management
- Anti-Spam
- Bandwidth Management
- Along with your regular user name and password, use the ZyWALL OTP (One Time Password). hardware token* to generate a new PIN code each time you log in.

Leading High-Performance UTM solution
The ZyWALL USG 100 employs hardware-acceleration technologies in one box. Powered by high-performance SecuASIC technology and a hardware-based encryption accelerator, the ZyWALL USG 100 delivers leading high-performance, multi-layer threat protections for small business and enterprises alike. Better yet, all ZyWALL USG Series products supports Gigabit Ethernet interfaces.

Robust Hybrid VPN (IPSec and SSL)

The ZyWALL USG 100 provides secure access from remote locations to corporate resources through the Internet for organizations of any size. Through IPSec VPN, companies can secure connections among branch offices, partner sites and headquarters. Road warriors and telecommuters can also use SSL or L2TP VPN to securely access the company network without having to install VPN software.
With flexible and easy connections, mobile employees, vendors and partners are enabled to securely access network resources for improved working efficiency.

Application Firewall

More and more network applications could slip malicious software into your office. The potentially malicious software, such as IM and P2P tools, could cause bandwidth waste or even system damage. With application patrol and bandwidth management features, you can control traffic block or rate limit for online chat or file transfer activities to avoid malicious software from finding its way into your organization.

Web Security (Secure Web Access): ZyXEL Web Bowering

Today, most network threats are likely from within the office, since employees would visit any insecure Web when they're surfing the net. Some Web sites may contain malicious software like Trojan, spyware or warm, and the software would take their tolls; therefore avoiding internal users to surf dangerous Web sites becomes an important task. ZyXEL's Web Bowering feature can quickly search the sites containing malicious software and notify users to keep away from them.

Non-Stop Internet Access with Multiple WAN and 3G as backup

The ZyWALL USG Series not only supports multiple WAN ports but also supports USB 3G or PCMCIA 3G cards. This enables it to provide "active-active" load sharing or "active-passive" failover configuration to deliver highly reliable network connectivity. To minimize the impact of single-point failures, the ZyWALL USG 100 supports device HA (High Availability) to assure network availability.

ICSA Firewall, IPSec, Antivirus Certification

With ICSA-certified SPI Firewall, Anti-Virus and IPSec VPN, the ZyWALL USG 100 enables organizations to take complete control over their network infrastructure and to provide the most up-to-date protection against network threats.

Comprehensive Report System

The built-in report system of ZyWALL USG 100 offers a comprehensive set of real-time and historical reports including firewall, virus and intrusion attacks, bandwidth usage, Web site usage and user activities. With Vantage Report (VRPT), a Web-based reporting system, administrators can easily collect traffic data and analyze a distributed network for organizations to be aware of suspicious activities and to ensure better business productivity.

Internet Security Appliance

Unified Security Gateway for SMB/Mid-Large Organizations

- High-Performance VPN Concentrator
- Proactive Network Protection
- IM / P2P Management
- User-Aware Policy Engine
- Bandwidth Management
- VoIP Security
- High Availability

High-Performance VPN Concentrator Integrating Both IPSec VPN and SSL VPN
ZyWALL USG 1000 is a Unified Security Gateway engineered to provide a variety of security services on top of a robust, hardware-accelerated platform.
By integrating both IPSec VPN and SSL VPN technologies, the ZyWALL USG 1000 allows organizations to establish Virtual Private Network (VPN) connections amongst multiple locations such as remote branch offices, business partner sites and even a remote teleworker getting connected in a potentially unsafe hotel hotspot.
Communication channels are securely encrypted so that information leakage / data theft can be mitigated when transmitting confidential information over insecure networks, such as the Internet.
The Hub and Spoke VPN feature is capable of reducing policy management overhead dramatically in a complex, multi-site corporate network infrastructure.

Proactive Network Protection against Blended Threats
By integrating cutting-edge technologies on a robust platform, the ZyWALL USG 1000 is competent to provide multi-layered protection for security-aware businesses.
The gateway anti-virus security service of the ZyWALL USG 1000 is powered by Kaspersky Labs, whose technology boasts the world's shortest response time against emerging viruses and spyware. As a result, it helps stopping blended threats at the network edge while keeping viruses/spyware out of corporate networks. With a SecuASIC co-processor built-in, the ZyWALL USG 1000 can deliver robust and reliable performance under real-world networking loads.
With the embedded signature-based IDP (Intrusion Detection and Prevention) engine, the ZyWALL USG 1000 performs L7 packet inspection for protocol / traffic anomaly or matched patterns. Thus, the ZyWALL USG 1000 provides comprehensive Intrusion Detection and Prevention capability to proactively detect and block potential worms, viruses, Trojans and VoIP threats, etc.
In response to the ever-evolving threats, up-to-date signatures / patterns are automatically downloaded from rock-solid ZSDN infrastructure and installed on your ZyWALL USG 1000.

Application Patrol to Manage the Use of IM/P2P Applications
The ZyWALL USG 1000 is specially crafted to manage the use of IM/P2P applications in modern networking environment without hassles. Armed with AppPatrol, a central dashboard for managing various types of IM/P2P applications, security staff can easily create fine-grained access policy based on ever-changing security needs: identifying and restricting different access levels of prevailing IM/P2P protocols, restricting time of access for different groups of users, enforcing bandwidth quota against certain types of P2P application and prioritizing VoIP traffics to ensure best call quality over slow WAN ISP links. Altogether, the ZyWALL USG 1000 is an ideal solution to solve the dilemma in terms of productivity and security.

User-Aware Policy Engine Enables Access Granularity
In addition to basic access control capabilities, the intelligent user-aware policy engine on the ZyWALL USG 1000 is designed to make packet-forwarding decisions based on multiple criteria (such as user ID, user group, time of access and network quota, etc.). Furthermore, security staff can apply access policies against a variety of security features such as VPN, Content Filter and Application Patrol.
In conjunction with VLAN and custom security zones, corporate security policies can be effectively enforced to prevent unauthorized access to network resources.

Bandwidth Management Ensures Quality of Service
The ZyWALL USG 1000 provides bandwidth management features for traffic prioritization to guarantee or restrict the bandwidth usage per interface / protocol. Security staff can allocate bandwidth for a variety of applications or computer hosts on the corporate network, regardless of the direction of the connection. For example, it's possible to assign higher priority and larger bandwidth to time-critical applications such as VoIP and video conferencing for quality transmission services. In addition, ZyWALL USG 1000 allows you to keep track of bandwidth usage with comprehensive statistical reports.

VoIP Security: Protecting the Converged Networks
Attracted the benefits, more and more businesses are deploying VoIP applications on their networks. Along with the transition to VoIP also comes with security risks and voice quality issues.
As a VoIP-friendly firewall, the ZyWALL USG 1000 reduces the security risks associated with the adoption of VoIP by offering the SIP/H.323 ALG feature to dynamically open only the required ports during the VoIP calls; once the call is complete, the opened ports are automatically closed to prevent port sniffing. The IDP feature can detect and prevent attacks usually associated VoIP deployment. Ultimately, by constructing VoIP traffic over VPNs with traffic prioritization, security staff could mitigate security breaches while optimizing call quality over existing ISP links.

High Availability Features Guarantee Non-Stop Operations for Mission-Critical Applications
With high availability features, the ZyWALL USG 1000 helps the security staff to easily set up a highly reliable and secure network infrastructure for your business. To minimize the impact of single-point of failures, the ZyWALL USG 1000 supports device HA (High Availability) to assure network availability should any device failure happen.
On the WAN side, the ZyWALL USG 1000 can connect multiple ISP links to ensure Internet availability while a single ISP link may be unreliable. The multiple WAN load balancing features optimizes bandwidth usage over each ISP link.

Unified Security Gateway for Small and Medium-Sized Businesses

- VPN: ( ICSA-certified IPSec VPN /SSL VPN/ L2TP VPN)
- Anti-Virus: (ICSA-certified ZyXEL Anti-Virus /Kaspersky Anti-Virus)
- IDP
- Web security(Security Web access): ZyXEL Security Browsering
- Application firewall
- Scalable UTM/VPN Performance
- IM/P2P Management
- Anti-Spam
- Bandwidth Management


Leading High-Performance UTM solution
The ZyWALL USG 300 employs hardware-acceleration technologies in one box. Powered by high-performance SecuASIC technology and a hardware-based encryption accelerator, the ZyWALL USG 300 delivers leading high-performance, multi-layer threat protections for small business and enterprises alike. Better yet, all ZyWALL USG Series products supports Gigabit Ethernet interfaces.

Robust Hybrid VPN (IPSec and SSL)
The ZyWALL USG 300 provides secure access from remote locations to corporate resources through the Internet for organizations of any size. Through IPSec VPN, companies can secure connections among branch offices, partner sites and headquarters. Road warriors and telecommuters can also use SSL or L2TP VPN to securely access the company network without having to install VPN software.
With flexible and easy connections, mobile employees, vendors and partners are enabled to securely access network resources for improved working efficiency.

Application Firewall
More and more network applications could slip malicious software into your office. The potentially malicious software, such as IM and P2P tools, could cause bandwidth waste or even system damage. With application patrol and bandwidth management features, you can control traffic block or rate limit for online chat or file transfer activities to avoid malicious software from finding its way into your organization.

Web Security (Secure Web Access): ZyXEL Web Bowering
Today, most network threats are likely from within the office, since employees would visit any insecure Web when they're surfing the net. Some Web sites may contain malicious software like Trojan, spyware or warm, and the software would take their tolls; therefore avoiding internal users to surf dangerous Web sites becomes an important task. ZyXEL's Web Bowering feature can quickly search the sites containing malicious software and notify users to keep away from them.

Non-Stop Internet Access with Multiple WAN and 3G as backup
The ZyWALL USG Series not only supports multiple WAN ports but also supports USB 3G or PCMCIA 3G cards. This enables it to provide "active-active" load sharing or "active-passive" failover configuration to deliver highly reliable network connectivity. To minimize the impact of single-point failures, the ZyWALL USG 300 supports device HA (High Availability) to assure network availability.

ICSA Firewall, IPSec, Antivirus Certification
With ICSA-certified SPI Firewall, Anti-Virus and IPSec VPN, the ZyWALL USG 300 enables organizations to take complete control over their network infrastructure and to provide the most up-to-date protection against network threats.

Comprehensive Report System
The built-in report system of ZyWALL USG 300 offers a comprehensive set of real-time and historical reports including firewall, virus and intrusion attacks, bandwidth usage, Web site usage and user activities. With Vantage Report (VRPT), a Web-based reporting system, administrators can easily collect traffic data and analyze a distributed network for organizations to be aware of suspicious activities and to ensure better business productivity.

All-in-one hotspot gateway
De ZyXEL G-4100v2 is een all-in-one hotspot gateway die veilige Internettoegang mogelijk maakt door middel van een vrij of aangepast beleid, naar wens van de ondernemer. Hij beschikt over functies voor authentisering en administratie van draadloze en bekabelde clients en ondersteunt maximaal 100 gelijktijdige gebruikers. De G-4100v2 werkt met de SP-200E afschriftenprinter. De ondernemer drukt op een toets van de SP-200E, waarna die automatisch het account, wachtwoord en de vooraf geconfigureerde Internet toegangsuren genereert en afdrukt. Alle benodigde functies voor hotspot service zijn beschikbaar op de G-4100v2.

Schaalbare en eenvoudig te beheren gebruikersauthentisering en administratie
De G-4100v2 beschikt over een zeer eenvoudig te configureren authentiseringserver. De eigenaar van de hotspot, bijvoorbeeld een café, boekwinkel, hotel of vakantieoord, heeft geen andere apparatuur of software nodig om de hotspot service te leveren - alleen de G-4100v2. Anderzijds ondersteunt de G-4100 v2 ook een RADIUS server voor grootschalige inzet van hotspot service, bijvoorbeeld voor winkelketens, luchthaventerminals of roaming-functies tussen winkels via gecentraliseerde authentisering en administratie.

Beste hotspot gebruikservaring met beveiliging en privacy
Om de gebruikers optimaal van hotspots te laten profiteren, beschikt de G-4100 v2 over een groot aantal netwerkfuncties, zoals IP PnP functie, DHCP server, NAT, MAC address filtering, IP address filtering, enz. De IP PnP technologie biedt de gebruikers de ultieme ervaring van "helemaal geen configuratie nodig". Deze techniek heeft de IP netwerkverbinding tot stand gebracht voordat de gebruiker het weet, zodat de tevredenheid van gebruikers maximaal is en de behoefte aan technische ondersteuning minimaal. De gebruiker hoeft geen IP adres, subnet masker, standaard gateway, web proxy of SMTP server meer in te stellen. Bovendien werken de V-LAN beveiliging voor draadloze en bekabelde clients, NAT, Layer 2 isolatie en MAC, IP address filtering technologieën op de achtergrond mee om de privacy van de gebruikers te beschermen en te voorkomen dat vertrouwelijke informatie publiek wordt.

Op maat gemaakte Hotspot gateway
Dankzij de krachtige marketingfuncties van de G-4100v2 kunnen bedrijven een eigen inlogpagina maken en gebruikers doorsturen naar een advertentie-URL, of beperkte toegang verlenen tot de homepage van de eigenaar. Daarnaast zijn er diverse beheerfuncties zoals SSL inlogpagina, beveiligde remote functie, beheer van LAN en WLAN apparatuur, die speciaal voor de hotspot gateway ontwikkeld zijn. Ten behoeve van eenvoudige inzet ondersteunt de G-4100 v2 PoE; ook de afschriftenprinter SP-200E ondersteunt PoE. Nu kunt u de hotspot oplossing ook inzetten zonder dat er een stopcontact in de buurt is. De G-4100 v2 is niet alleen een op maat gemaakt hotspot product, de ondernemer kan hem ook nog eens aan zijn of haar eigen wensen aanpassen.