Log ind
Du er her
USG serien er den 3-generation af ZyXEL's ZyWALL serie.
USG 100 er en kræftfuld firewall, med indbygget deep packet inspection.
Firewall'en er designet til små og mellem virksomheder. (10~25PC'er)
Den har indbygget SPI Firewall, Anti-Virus, (IDP), Content Filtering, Anti-Spam, og VPN (IPSec/SSL/L2TP).
Op til 50 samtidig IPSec VPN tunnler, samt 2 SSL VPN (Op til 5 med licens).
Brug for hjælp med opsætning, ring til vores support på 20307545.
Unified Security Gateway for Small and Medium-sized Companies |
|
Secure connectivityGiven the prevalence and importance of information technology (IT) systems today and the nature and scale of both the opportunities and risks associated with significant deployments of new networking technologies, organizations are forced to evaluate solutions to build up a safer infrastructure to secure online transactions, in which involve exchange of valuable information. The infrastructure should be tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers. |
Network resilienceISP links broken, hardware and software failure on the gateway, dead VPN tunnels—these are severe challenges IT staff face when designing the network infrastructure. In short, we need to take fault tolerance on the network path into consideration when build up a highly available network infrastructure for non-stop operations. |
Proactive protectionThe evolving Web environment not only makes managing appropriate surfing and bandwidth use more difficult, but also introduces new security threats for the filtering functionality to pinpoint on. The ZyWALL USG Content Filter leverages the next-generation Web filtering technology by combining URL filtering and anti-malware technologies into a collaborative cloud defense architecture powered by BlueCoat, which is capable of protecting user productivity while blocking malware downloads and Web threats. |
ManageabilityWith ZyWALL USG and Vantage CNM (Centralized Network Management), users can achieve the following objects to reduce operational costs:
|
Policy complianceWith numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company employees to share files and chat online during work hours. Rapid file sharing not only compromises network safety with the sharing of questionable files containing malicious viruses, but may also violate copyright issues and create legal hassles. |
|
Firewall
Virtual Private Network(VPN)
SSL VPN
Intrusion Detection and Prevention(IDP)
Anti-Virus
Application Patrol
Anti-Spam
|
High Availability
Content Filtering
Networking
Authentication
System Management
Logging/Monitoring
|
|
Performance and Capacity • SPI firewall throughput: 180Mbps • VPN AES/3DES throughput: 90Mbps • UTM throughput: 30Mbps • Concurrent sessions: 20,000 • New session rate: 1,000 (sessions/sec) • Simultaneous IPSec VPN tunnels: up to 50 • Simultaneous SSL VPN tunnels: 2/5 (included/max)
Security and Authentication • Anti-Virus: Stream-based AV engine • Dual support: ICSA-Certified Anti-Virus and Kaspersky Anti-Virus • Supports HTTP/SMTP/POP3/IMAP4/FTP • Automatic Signature Update • No file size limitation • Blacklist/Whitelist • DoS/DDoS prevention • ALG supports SIP/H.323, FTP, IPSec, L2TP, MSN, PPTP and RTP • Access granularity: ip/port/location/user/group/time/network quota • Customizable security zone • Force user authentication (transparent authentication): user-aware access policy management • User database: RADIUS, LDAP, Microsoft Active Directory and local user database • Application Patrol: Portless application management • IM/P2P application management: blocking, scheduling, rate-limiting bandwidth • Intrusion Detection and Prevention (inline mode or bridge mode) • Zone-based, customizable protection profile • Traffic anomaly for scan detection and flood detection • Protocol anomaly: HTTP/ICMP/TCP/UDP • Malformed packet protection • Signature-based L3-L7 deep packet inspection • Automatic update for latest signatures • Custom signature supported • VoIP over VPN • URL blocking, keyword blocking, exempt list • Blocks Java Applet, cookies, Active X • URL filtering by querying dynamic database
VPN • Route-based IPSec VPN • Hardware-Accelerated encryptions: AES, 3DES, DES • Authentication: MD5, SHA-1 • Key management: Manual key/IKE • PKI: PKCS #7, #10 & #12 • Certificate enrollment: CMP, SCEP • Perfect forward secrecy: DH Group 1, 2 and 5 • NAT traversal • NAT over IPSec • DPD (Dead Peer Detection) and replay detection • Split DNS tunnel • X-auth authentication: RADIUS, LDAP, Microsoft Active Directory and local user database • Integrated SSL VPN • Clientless Secure Remote Access • SecuExtender: Supports virtually all applications • Supports RADIUS/LDAP/Microsoft AD/Local User Database • Supports ZyWALL OTP (One Time Password) |
Networking • Routing mode and bridge mode can co-exist • Port grouping (L2) • Supports 802.1q tagged VLAN • Encapsulation: Ethernet/PPPoE/PPTP • Supports virtual interface (alias interface) • Policy-based routing • NAT: SNAT, DNAT • Supports dynamic routing protocols: RIP v1/v2 and OSPF • IP Multicasting • DHCP client/server/relay • Built-in DNS server • Dynamic DNS • NTP client • HTTP redirect • Policy-based traffic shaping • Maximum bandwidth • Bandwidth priority
Redundancy • Device HA (High Availability) • Device failure detection • Auto-sync Configurations • Supports Multiple ISP links • Multiple WAN Load balancing • VPN High Availability supports redundant remote VPN gateways
Management • Intuitive Web-based GUI: https/http • Dashboard for system status monitoring • Role-based administration: supports multiple privileges and simultaneous logins • Object-based architecture • Text-based configuration file • Full-function CLI: Accessible from console/Web Console/SSH/telnet • Product registration and service activation from within myZyXEL.com • Centralized & comprehensive local logging • Log exportable: syslog (up to 4 external syslog servers) • SNMP v2c with MIB-II • E-mail alert • Real-time monitoring: Traffic snapshot and SA monitor • Firmware upgrade: FTP, FTP-TLS, WebGUI • System configuration rollback • Supports Vantage Report 3.1* for advanced reporting • Supports Vantage CNM 3.0* for centralized management *: Future release |