ZyXEL E-iCard, Kaspersky AV, 1Y, USG 1000

Unleash the true potential of the advanced ZyXEL Security Products
IF you want
To unleash UTM Functions
Unleash the full potential of your ZyWALL 5/35 by
For
ZyWALL 5
enabling the UTM features.
Plug the provided Turbo Card into the slot you find in
ZyWALL 35
Please order
Turbo Card+AV+IDP, 1 year
Part no (first buy)
Renewal part no
Part no (first buy)
Renewal part no
91-995-004005 B
91-995-004002G
Gateway Content Filtering
IF you want
ZyWALL 2 Plus
iCard Content Filtering, 1 year
91-995-003002G
91-995-003002G
ZyWALL 2 WG
iCard Content Filtering, 1 year
91-995-045001B
91-995-045001B
For
Please order
Turbo Card+AV+IDP, 2 years
91-995-005005 B
91-995-005002G
ZyWALL Gateway Content Filtering is an integrated
Turbo Card+AV+IDP, 1 year
91-995-004004 B
91-995-004001G
security option to regulate leisure browsing or porn
ZyWALL 5
iCard Content Filtering, 1 year
91-995-003002G
91-995-003002G
traffic during work hours to decrease non-productive
iCard Content Filtering, 1 year
91-995-003002G
91-995-003002G
bandwidth consumption and prevent viruses and
ZyWALL 5 UTM
ZyWALL 35
iCard Content Filtering, 1 year
91-995-003001G
91-995-003001G
spyware from forcing your computer to connect with
ZyWALL 35 UTM
iCard Content Filtering, 1 year
91-995-003001G
91-995-003001G
iCard Content Filtering, 1 year
91-995-006003G
91-995-006003G
iCard Content Filtering, 2 years
91-995-069001B
91-995-069001B
iCard Content Filtering, 1 year
91-995-145001B
91-995-145001B
iCard Content Filtering, 2 years
91-995-140001B
91-995-140001B
iCard Content Filtering, 1 year
91-995-144001B
91-995-144001B
iCard Content Filtering, 2 years
91-995-139001B
91-995-139001B
iCard Content Filtering, 1 year
91-995-050001B
91-995-050001B
iCard Content Filtering, 2 years
91-995-070001B
91-995-070001B
iCard Content Filtering, 1 year
91-995-066001B
91-995-066001B
Turbo Card+AV+IDP, 2 years
91-995-005004 B
91-995-005001G
the back of your ZyWALL and it will have all the power
necessary to run all UTM services simultaneous.
unwanted websites.
(Only required for ZyWALL 5/35’s with no Turbo Card
ZyWALL 1050
installed in the back of the unit)
ZyWALL USG 100
ZyWALL 5/35 includes 90 days trial licenses of AntiVirus
& IDP/Anti-Spam and 30 days trial on CF. If licenses are
ZyWALL USG 200
bought, the user will get additional 90 days trial licenses
for AntiVirus & IDP/Anti-Spam trial after end of license
ZyWALL USG 300
period.
Gateway Anti-Virus
iCard Kaspersky Anti-Virus, 1 year
91-995-055001B
91-995-055001B
ZyWALL Gateway Anti-Virus service is an easy-to-
iCard Kaspersky Anti-Virus, 2 years
91-995-056001B
91-995-056001B
iCard Content Filtering, 2 years
91-995-071001B
91-995-071001B
iCard ZyXEL Anti-Virus, 1 year
91-995-146001B*
91-995-146001B*
iCard Content Filtering, 1 year
91-995-141001B
91-995-141001B
virus/spyware from entering your network.
iCard ZyXEL Anti-Virus, 2 years
91-995-128001B*
91-995-128001B*
iCard Content Filtering, 2 years
91-995-138001B
91-995-138001B
For protection against viruses and spyware, ZyWALL USG
iCard Kaspersky Anti-Virus, 1 year
91-995-137001B
91-995-137001B
More SSL VPN Tunnels
iCard 10 to 25 SSL Tunnels
91-995-031001B
One time buy
100/200/2000 could be chose the ICSA-certified ZyXEL
iCard Kaspersky Anti-Virus, 2 years
91-995-135001B
91-995-135001B
Remote access has never been so easy. Utilizing only a
iCard 5 to 25 SSL Tunnels
91-995-054001B
iCard ZyXEL Anti-Virus, 1 year
91-995-133001B
91-995-133001B
standard web browser, users can easily and secure
iCard 5 to 50 SSL Tunnels
91-995-052001B
iCard ZyXEL Anti-Virus, 2 years
91-995-127001B
91-995-127001B
access e-mail, files, applications,web servers and any
iCard 25 to 50 SSL Tunnels
91-995-053001B
iCard Kaspersky Anti-Virus, 1 year
91-995-136001B
91-995-136001B
resources on the corporate network from any location.
iCard 5 to 125 SSL Tunnels
91-995-116001B*
iCard Kaspersky Anti-Virus, 2 years
91-995-134001B
91-995-134001B
With industry strength security and encryption
iCard 25 to 125 SSL Tunnels
91-995-115001B*
iCard ZyXEL Anti-Virus, 1 year
91-995-132001B
91-995-132001B
algorithms, the ZyWALL’
L’s SSL VPN feature ensures your
iCard 50 to 125 SSL Tunnels
91-995-114001B*
iCard 2 to 5 SSL Tunnels
91-995-113001B
One time buy
iCard 2 to 10 SSL Tunnels
91-995-112001B
One time buy
iCard 2 to 10 SSL Tunnels
91-995-067001B
iCard 2 to 25 SSL Tunnels
91-995-111001B*
iCard 10 to 25 SSL Tunnels
91-995-110001B*
manage, signature-based security feature which sops
Anti-Virus or one powered by Kaspersky Labs.
ZyWALL 1050
ZyWALL USG 100
ZyWALL USG 200
ZyWALL USG 300
ZyWALL USG 1000
ZyWALL USG 2000
Gateway IDP
ZyWALL 1050
ZyWALL Gateway Intrusion Detection/Prevention service
is an easy-to-manage, signature-based security feature
ZyWALL USG 100
91-995-126001B
91-995-058001B
iCard Kaspersky Anti-Virus, 2 years
91-995-057001B
91-995-057001B
iCard ZyXEL Anti-Virus, 1 year
91-995-131001B*
91-995-131001B*
iCard ZyXEL Anti-Virus, 2 years
91-995-125001B*
91-995-125001B*
iCard 5 to 25 SSL Tunnels
91-995-060001B
iCard Kaspersky Anti-Virus, 1 year
91-995-065001B
91-995-065001B
iCard 5 to 50 SSL Tunnels
91-995-059001B
iCard Kaspersky Anti-Virus, 2 years
91-995-064001B
91-995-064001B
iCard 5 to 250 SSL Tunnels
91-995-109001B*
iCard ZyXEL Anti-Virus, 1 year
91-995-130001B*
91-995-130001B*
iCard 25 to 50 SSL Tunnels
91-995-061001B
iCard ZyXEL Anti-Virus, 2 years
91-995-124001B*
91-995-124001B*
iCard 25 to 250 SSL Tunnels
91-995-108001B*
iCard Kaspersky Anti-Virus, 1 year
91-995-143001B
91-995-143001B
iCard 50 to 250 SSL Tunnels
91-995-107001B*
iCard Kaspersky Anti-Virus, 2 years
91-995-142001B
91-995-142001B
iCard 5 to 50 SSL Tunnels
91-995-106001B
iCard ZyXEL Anti-Virus, 1 year
91-995-129001B
91-995-129001B
iCard 5 to 250 SSL Tunnels
91-995-105001B
iCard ZyXEL Anti-Virus, 2 years
91-995-123001B
91-995-123001B
iCard 5 to 750 SSL Tunnels
91-995-104001B
iCard IDP, 1 year
91-995-004003G
91-995-004003G
iCard 50 to 250 SSL Tunnels
91-995-103001B
iCard IDP, 2 years
91-995-005003G
91-995-005003G
iCard 50 to 750 SSL Tunnels
91-995-102001B
iCard IDP, 1 year
91-995-122001B
91-995-122001B
iCard 250 to 750 SSL Tunnels
91-995-101001B
Software client 1 license
91-996-031001B
Software client 5 licenses
91-996-033001B
Software client 10 licenses
91-996-034001B
Software client 50 licenses
91-996-032001B
CNM, 10 nodes
91-996-043001B
CNM, 25 nodes
91-996-044001B
CNM, 50 nodes
91-996-045001B
CNM, 100 nodes
91-996-046001B
CNM, 300 nodes
91-996-047001B
CNM, 1000 nodes
91-996-048001B
Vantage Report, 1 device
91-996-029001B
Vantage Report, 5 devices
91-996-028001B
Vantage Report, 25 devices
91-996-030001B
Vantage Report, 100 devices
91-996-027001B
91-995-119001B
91-995-119001B
91-995-121001B
91-995-121001B
Gateway Anti-Virus and IDP
ZyWALL Gateway Anti-Virus and Intrusion Detection/
ZyWALL P1
Prevention service (AV+IDP) is an easy-to-manage,
signature-based, integrated security option that
ZyWALL 5 UTM
provides protection against application layer attacks.
(Requires Turbo Card installed in ZyWALL 5/35)
ZyWALL 35 UTM
Gateway Anti-Spam
ZyWALL Gateway Anti-Spam is an integrated security
ZyWALL 5 UTM
option, utilizing spam identification engines with more
than one million filter checks to identify spam with hign
ZyWALL 35 UTM
ZyWALL USG 100
ZyWALL USG 200
privacy of data.
91-995-058001B
iCard IDP, 1 year
ZyWALL USG 2000
ZyWALL 1050
91-995-126001B
iCard IDP, 2 years
ZyWALL USG 1000
ZyWALL SSL10
iCard Kaspersky Anti-Virus, 1 year
attacks/exploits.
ZyWALL USG 300
ZyWALL USG 2000
iCard ZyXEL Anti-Virus, 2 years
which mitigates threats from ever-evolving
ZyWALL USG 200
ZyWALL USG 1000
iCard IDP, 2 years
91-995-118001B
91-995-118001B
iCard IDP, 1 year
91-995-048001B
91-995-048001B
iCard IDP, 2 years
91-995-049001B
91-995-049001B
iCard IDP, 1 year
91-995-062001B
91-995-062001B
iCard IDP, 2 years
91-995-063001B
91-995-063001B
iCard IDP, 1 year
91-995-120001B
91-995-120001B
iCard IDP, 2 years
91-995-117001B
91-995-117001B
iCard Anti-Virus + IDP, 1 year
91-995-028001B
91-995-028001B
iCard Anti-Virus + IDP, 2 years
91-995-029001B
91-995-029001B
iCard Anti-Virus + IDP, 1 year
91-995-004002G
91-995-004002G
iCard Anti-Virus + IDP, 2 years
91-995-005002G
91-995-005002G
iCard Anti-Virus + IDP, 1 year
91-995-004001G
91-995-004001G
iCard Anti-Virus + IDP, 2 years
91-995-005001G
91-995-005001G
iCard Anti-Spam, 1 year
91-995-006002G
91-995-006002G
iCard Anti-Spam, 2 years
91-995-007002G
91-995-007002G
iCard Anti-Spam, 1 year
91-995-006001G
91-995-006001G
iCard Anti-Spam, 2 years
91-995-007001G
91-995-007001G
ZyWALL USG 300
ZyWALL USG 1000
ZyWALL USG 2000
IPSec VPN Client
Ideal for remote teleworkers to access company resources
in a secure manner. Software client from SafeNet to be
installed on client PC’s.
’
Vantage CNM
A robust centralized Network Management System.
1. Centralized UTM Management for License and Policy
2. Enforcements and One-Click VPN configuration
3. Group Device Configuration for mass deployments:
firmware upgrades, Policy installations and backup/
restore, Real-time monitoring, alerting and com
prehensive graphic reporting
Vantage Report
A comprehensive Reporting System.
1. Quickly and conveniently collect and/or analyze log
orientated by devices across distributed networks
2. Highly accessible and easy-to-use architecture provides IT staff a simple method to monitor/analyze
network traffic associated with ZyWALL devices.
*Availability: Q3, 2008
Client PC’s
All ZyWALL models
All ZyWALL models
ZyWALL Quick Sales Guide
Spring 2008
One time buy
One time buy
One time buy
One time buy
One time buy
One time buy
One time buy
**: You could also order E-iCard (with different P/N) for all above licenses.
accuracy rate.
(Requires Turbo Card installed in ZyWALL 5/35)
For more produc t information, visit us on the web at www.ZyXEL.com
Copyright © 2008 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands,
product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.
65-100-010121B
02/08
ZyWALL USG Series Feature Matrix
ZyWALL Feature Matrix
Infrastructure Security
ZyWALL USG 2000
ZyWALL USG 1000
ZyWALL USG 300
Maintain Control: Unified Security Gateway helps you win the battle
Home Office/SOHO
ZyWALL USG 200
ZyWALL USG 100
ZyWALL P1
Graphic
ZyWALL 2 Plus
Infrastructure Security
ZyWALL 2WG
ZyWALL 5 UTM
ZyWALL 35 UTM
SSL
ZyWALL 1050
Graphic
System
System
Firewall Throughput
2,000 Mbps
350 Mbps
200 Mbps
150 Mbps
100 Mbps
Firewall Throughput
80 Mbps
24 Mbps
24 Mbps
50 Mbps
60 Mbps
300 Mbps
VPN Throughput (AES)
500 Mbps
*1
150 Mbps
100 Mbps
75 Mbps
50 Mbps
VPN Throughput (AES)
30 Mbps
24 Mbps
24 Mbps
25 Mbps
30 Mbps
150 Mbps
UTM Throughput
(AV+IDP+Firewall)
400 Mbps
*2
100 Mbps
48 Mbps
24 Mbps
24 Mbps
12 Mbps
14 Mbps
100 Mbps
UTM Throughput
5 Mbps
24 Mbps
(AV+IDP+Firewall)
Unlimited User Licenses
Unlimited User Licenses
˗
˗
˗
˗
˗
1,000,000
500,000
60,000
40,000
20,000
2,000
1,000
200
100
50
Max. Concurrent
IPSec VPN tunnels
750
50 (250 )
10 (25 )
10
5
Max. Concurrent
SSL VPN users
(6) 10/100/1000 GbE
(2) Dual-Personality GbE
(SFP/RJ45)
(5) 10/100/1000 GbE
(7) 10/100/1000 GbE
4 x LAN/DMZ,
2 x WAN, 1 x OPT
(All GbE)
5 x LAN/DMZ,
2 x WAN
(All GbE)
˗
˗
˗
˗
˗
Sessions
Max. Concurrent IPSec
VPN Tunnels
Max. Concurrent SSL
VPN Users
Physical Port
Challenges that may Drain Your IT Resource
ZyWALL SSL 10
Customizable Zone
*3
*3
Networking
Sessions
˗
˗
˗
˗
˗
˗
1,500
3,000
3,000
4,000
10,000
128,000
1
5
5
10
35
1,000
*1
Wireless
Physical Port
50 (125 )
25
4 x LAN,
1 x WAN
4 x LAN,
1 x WAN
4 x LAN/DMZ,
1 x WAN
4 x LAN/DMZ,
1 x WAN
4 x LAN/DMZ,
2 x WAN
(5) 10/100/1000
GbE
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
Customizable Zone
˗
˗
˗
˗
˗
Ethernet
Bridge Mode
˗
˗
˗
˗
˗
3G (Optional)
Mix Mode (Routing+Bridge)
˗
˗
˗
˗
˗
Networking
x
x
x
x
x
x
x
VLAN Tagging (802.1q)
˗
˗
˗
˗
˗
Routing/NAT/SUA Mode
˗
˗
˗
˗
˗
˗
˗
˗
˗
Bridge Mode
˗
˗
˗
˗
˗
˗
˗
˗
Mix Mode (Routing+Bridge)
˗
VLAN Tagging (802.1q)
˗
*3
˗
*3
˗
*3
˗
Security
˗
˗
˗
˗
˗
˗
Security
x
x
x
x
x
x
x
IPsec VPN
˗
˗
˗
˗
˗
Firewall
˗
˗
˗
˗
˗
˗
˗
SSL VPN
˗
˗
˗
˗
˗
IPsec VPN
˗
˗
˗
˗
˗
˗
Content Filtering
˗
˗
˗
˗
˗
SSL VPN
Anti-SPAM
˗
˗
˗
˗
˗
Content Filtering
˗
˗
˗
˗
˗
Anti-Virus
˗
˗
˗
˗
˗
Anti-SPAM
˗
˗
*1
˗
IDS/IDP
˗
˗
˗
˗
˗
Anti-Virus
˗
˗
˗
˗
IM/P2P Management
˗
˗
˗
˗
˗
IDS/IDP
˗
˗
˗
˗
Bandwidth Management
˗
˗
˗
˗
˗
IM/P2P
˗
˗
˗
˗
User-aware Management
˗
˗
˗
˗
˗
Bandwidth Management
˗
˗
˗
˗
˗
˗
User-aware Management
˗
A/P
A/P
A/P
A/P
A/P
VPN HA
˗
˗
˗
˗
˗
Multiple WANs for
Load Balancing
˗
˗
˗
˗
˗
Auto Fail-over, Fail-back
˗
˗
˗
˗
˗
Balancing
Dial Backup
˗
˗
˗
˗
˗
Auto Fail-over, Fail-back
˗
˗
Redundant Power Module
˗
Dial Backup
˗
Device HA
Device HA
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
˗
The ZyWALL USG series is a high performance, deep packet inspection security solution for small business to enterprise. It embodies a Stateful Packet
Inspection (SPI) firewall, Anti-Virus, Intrusion Detection and Prevention (IDP), Content Filtering, Anti-Spam, and VPN (IPSec/SSL/L2TP) in one box. This multilayered security safeguards your organization’s customer and company records, intellectual property, and critical resources from external and internal threats.
ZyWALL USG series deploys hardware-acceleration technology in one box. Powered by high-performance SecuASIC technology and a hardware-based
encryption accelerator, the ZyWALL USG series delivers leading high performance and multi-layer threat protection for small business to enterprises. All
ZyWALL USG series support Gigabit Ethernet interfaces.
The ZyWALL USG series can provide secure access from remote locations to corporate resources through the Internet for organizations of any size. Using IPSec
VPN companies can secure connections to branch offices, partners, and headquarters. Road warriors and telecommuters can use SSL or L2TP VPN to securely
access the company network without having to install VPN software.
3. Managing IM/P2P Abuse
˗
For increasing network efficiency and business productivity, the IM/P2P application needs to be well managed. The ZyWALL USG series support Application
Patrol which controls who can use IM and P2P applications like MSN™ and BitTorrent™, and even who can use specific features within an application.
4. Non-Stop Internet Access with Multiple WAN and 3G as backup
˗
(3G)
The ZyWALL USG not only supports multiple WAN ports but also supports USB 3G or PCMCIA 3G card. This enables it to provide “active-active” load sharing or
“active-passive” failover configuration to deliver highly reliable network connectivity. To minimize the impact of single-point failures, the ZyWALL USG series
support device HA (High Availability) to assure network availability.
Authentication Method
Local Database
˗
˗
˗
˗
˗
Local database
˗
˗
˗
˗
˗
˗
˗
Radius
˗
˗
˗
˗
˗
Radius
˗
˗
˗
˗
˗
˗
˗
LDAP
˗
˗
˗
˗
˗
LDAP
˗
˗
Microsoft AD
˗
˗
˗
˗
˗
Microsoft AD
ZyWALL OTP
˗
˗
˗
˗
˗
ZyWALL OTP
Management
˗
˗
˗
˗
˗
˗
˗
˗
˗
WebGUI (HTTP and HTTPS)
˗
˗
˗
˗
˗
˗
˗
Command Line
˗
˗
˗
˗
˗
˗
˗
˗
Command Line
˗
˗
˗
˗
˗
Vantage CNM
˗
˗
˗
˗
˗
˗
Vantage CNM
˗
˗
˗
˗
˗
Vantage Report
˗
˗
˗
˗
˗
˗
Vantage Report
˗
˗
˗
˗
˗
˗
˗
˗
˗
Note: *1: Available In future firmware release
5. ICSA Firewall, IPSec, Antivirus Certification
With ICSA certified SPI Firewall, Anti-Virus and IPSec VPN, the ZyWALL USG series enables organizations to take complete control of their network
infrastructure and provide the most up-to-date protection against the network threats.
6. Comprehensive Report System
Management
WebGUI
(HTTP and HTTPS)
Note: *1: With SEM-DUAL/SEM-VPN module
*2: With SEM-DUAL/SEM-UTM module
*3: Available In future firmware release
As mass-mailing software companies
mushroom on the Internet, your network is
bombarded with massive amounts of junk
mails (spam). Without intelligent detection
and proactive blocking, users have to go
through the tedious and time-consuming
task of sieving through the overflowing
mailbox, and such scenario leads to serious
productivity loss.
2. Robust Hybrid VPN (IPSec and SSL)
˗
Multiple WANs for Load
Authentication Method
ISP links broken, hardware and
software failure on the gateway,
dead VPN tunnels - these are
severe challenges IT staff face
when designing the network
infrastructure. In short, we need
to take fault tolerance on the
network path into consideration
when build up a highly available
network infrastructure for nonstop operations.
˗
High Availability
VPN HA
4. Network Resilience
With numerous file-sharing (P2P)
and Instant Messaging (IM)
applications, it is easier for company
employees to share files and chat
online during work hours. Rapid file
sharing not only compromises
network safety with the sharing of
questionable files containing
malicious viruses, but may also
violate copyright issues and create
legal hassles.
1. Leading, High Performance UTM solution
Firewall
High Availability
3. Policy Compliance
Malicious virus, worm, exploits could
cripple corporate networks and halt
business transactions. In addition to severe
financial loss, you also risk leakage of
confidential information.
ZyWALL USG Series Advantages
Routing/NAT/SUA Mode
3G Support
2. Proactive Protection
Given the prevalence and importance of
information technology (IT) systems
today and the nature and scale of both
the opportunities and risks associated
with significant deployments of new
networking technologies, organizations
are forced to evaluate solutions to build
up a safer infrastructure to secure online
transactions, in which involve exchange
of valuable information. The
infrastructure should be tailored to
meet operation requirements for
expanding remote sites as well as
mobile teleworkers.
˗
1 x LAN,
1 x WAN
WAN Type
Wireless Card Support
1. Secure Connectivity
ZyWALL USG series build-in report system which offers a comprehensive set of real-time and historical reports, including firewall, virus and intrusion attacks,
bandwidth usage, web site usage, and user activity. Furthermore, with the web-based reporting system, Vantage Report (VRPT), administrators can easily
collect traffic data and analyze a distributed network, so organizations are aware of suspicious activity and to ensure increase business productivity.