USG60/60W/40/40W
Next Generation Unified Security Gateway— Performance Series
While technology has certainly simplified many aspects of our lives, there
is more than one side the story. Advancements in how people work and
collaborate can often create major challenges for small businesses. These
include managing the rapidly growing number of smart devices accessing
networks, prioritizing and blocking a wide range of cloud-based productivity
applications, and guarding against daily web-based intrusions and attacks.
As threats evolve and challenges diversify, it becomes more difficult for small
businesses stay on top of these changes with limited IT resources at their
disposal.
The new Zyxel USG Performance Series are all-in-one next-generation
firewalls (NGFW) specifically designed with comprehensive UTM features
that including malware protection, application regulation, and budget
control in small business environments. The built-in wireless AP (USG40W
and USG60W) and WLAN controller offer instant wireless hotspot capability
and future WLAN scalability. The Zyxel USG Series supports VPN, allowing
businesses to securely access resources with their partner offices or
headquarters. The all-in-one design integrates everything small businesses
need, delivering easier and more centralized management with a lower total
cost of ownership (TCO).
Datasheet USG60/60W/40/40W
All-in-one Next Generation
Firewall (NGFW) for small
businesses
Complete network protection
with Anti-Virus, Anti-Spam,
Contetnt Filtering 2.0, IDP and
Application Patrol
Robust SSL, IPSec and L2TP over
IPSec VPN connectivity
Unified Security Policy
Integrated single-radio
(USG40W) or dual-radio
(USG60W) wireless access point
Cloud helper provides the
friendly firmware upgrade to
ensure its authenticity and
reliability.
Benefits
Peace of mind security
Simplified management procedure
The Zyxel USG Performance Series delivers enterprisegrade Next Generation Firewall security without the hefty
price tag. It provides deep, extensive protection and
effective control of Web applications—like Facebook,
Google Apps and Netflix—with such anti-malware
protection mechanisms as firewall, Anti-Virus, Anti-Spam,
Content Filtering, IDP and Application Patrol. Newly added
Content Filtering 2.0 supports Geo IP Blocking to help
propel detection rates from strength to strength. No longer
do small businesses need to worry about threats, spam or
social networking sites decreasing productivity.
Managing complex configuration settings can be
confusing and time-consuming. The Zyxel USG
Performance Series provides an “easy mode” setting in the
GUI for entry-level and SOHO users. Easy mode provides
an icon-based feature set and attractive dashboard
to simplify management and monitoring of the device.
Application and function settings also have integrated
wizards for user-friendly setup. Zyxel USG Performance
Series easy mode helps entry-level users and SOHO users
effortlessly take advantage of high-speed and secure
networking.
Wi-Fi where you need it
Zyxel One Network experience
Addressing the trend of BYOD, the Zyxel USG Performance
Series helps small businesses provide Wi-Fi wherever there
is demand. The USG40W and USG60W feature built-in
single-radio and dual-radio wireless access points that
can provide Wi-Fi for small offices straight out of the box.
An integrated WLAN controller with Zyxel AP Controller
technology enables users to manage up to 18 access points
from a centralized user interface. The USG Performance
Series enables businesses to easily provide Wi-Fi in
multiple other areas like reception areas and meeting
rooms when Wi-Fi demand grows.
Aiming for relieving our customers from repetitive
operations of deploying and managing a network, Zyxel
One Network is designed to simplify the configuration,
management, and troubleshooting, allowing our customers
to focus on the business priorities. Zyxel One Network
presents an easy-to-use tool, Zyxel One Network Utility
(ZON Utility), to realize speed network setup. Zyxel Smart
Connect allows Zyxel networking equipment to be aware
and recognize each other and further facilitating the
network maintenance via one-click remote functions
such as factory reset or power cycling. Zyxel One Network
redefines the netw ork integration across multiple
networking products from switch to Wi-Fi AP and to
Gateway.
Swift and secure firmware upgrades
Locating firmware updates — not to mention identifying
correct versions for your device and managing their
installation — can be a complex and confusing ordeal.
The Zyxel USG Series solves this with its new Cloud Helper
service. Cloud Helper provides a simple step to look for upto-date firmware information. New firmware is immediately
made available upon release from our official database to
ensure its authenticity and reliability.
Datasheet USG60/60W/40/40W
Stay secure and up-to-date with OneSecurity
Zyxel provides frequent and timely updates in response
to the latest security threats and advisories through
OneSecurity — our free online service portal. OneSecurity
offers informative network security resources and the
know-how to assist businesses and IT administrators in
keeping their network operations safe in the digital age.
Information and resources can be found with one click
via the GUI of Zyxel USG Extreme and ZyWALL series
products. IT staff can quickly and easily catch up on the
latest threats, and then proceed to walkthroughs and
troubleshooting protocols with the help of easy-to-follow
FAQs — all provided to help users secure their networks
and simplify management of our UTM products.
2
Next-Gen USG Quick Finder
USG1900
USG1100
USG310
USG210
USG110
USG60/60W
Model
USG40/40W
Description
Performance Series
Advanced Series
Multi-WAN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Unified security
policy
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SSL inspection
-
-
Yes
Yes
Yes
Yes
Yes
Link
Aggregation
(LAG)
Port grouping
-
-
-
-
Yes
Yes
Yes
Yes
Yes
Yes
Yes
-
-
-
Device HA
-
-
Yes
Yes
Yes
Yes
Yes
Device HA Pro
-
-
Yes
Yes
Yes
Yes
Yes
Easy Mode
Yes
Yes
-
-
-
-
-
Cloud Helper
Yes
Yes
Yes
Yes
Yes
Yes
Yes
PCI DSS
Compliance
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Content
Filtering 2.0*1
Hotspot
Management*2
Yes
Yes
Yes
Yes
Yes
Yes
Yes
-
-
Yes
Yes
Yes
Yes
Yes
Extreme Series
*1: SSL Inspection must be enabled for Content Filtering 2.0 Safe Search to function properly.
*2: Hotspot Management supports for USG310/1100/1900 in firmware ZLD4.20 or later, and for USG110/210 in firmware ZLD4.25 or later.
Key Services
2.0
The Zyxel USG Performance Series provides a complete feature set to perfectly fit different business requirements as well
as to enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity
also empowers IT professionals to customize the system to meet their individual needs.
Datasheet USG60/60W/40/40W
3
Feature Highlights
Built-in Wireless AP
Dual-WAN & Mobile Broadband
Built with single-radio and dual-radio wireless access
points, the Zyxel USG40W and USG60W are ideal for retail
and office environments. The USG60W integrates 802.11
a/b/g/n technology that delivers Wi-Fi over both the 2.4
GHz and the 5 GHz spectrums.
The Zyxel USG Performance Series provides high Internet
uptime with dual-WAN and mobile broadband support.
Dual-WAN works with two Ethernet WAN connections for
active-active load balancing or active-passive failover.
Comprehensive mobile broadband USB modems are also
supported for WAN backup.
Unified Security Policy
Robust VPN
Unified security policy offers object-based management
and a unified configuration interface for firewall and all
security-related policies. Users can easily apply all policy
criteria to every UTM feature, reduce configuration time,
and get more streamlined policy management.
Zyxel USGs support high-throughput IPSec, L2TP over
IPSec and SSL VPN for a wide range of site-to-client
and site-to-site VPN deployments. Reinforced with the
advanced SHA-2 authentication, the Zyxel USGs provide
the most secure VPN for business communications.
Cloud Helper
Integrated WLAN Controller
The Cloud helper provides friendly firmware upgrades so
users don’t need to worry about how and where to receive
the latest firmware information and files. With just a few
steps to download and update the firmware directly, it’s
very convenient and time-efficient.
The integrated WLAN controller supports CAPWAP,
and enables centralized authentication and access
management of multiple APs in the network. The Zyxel USG
Performance Series can manage 2 APs by default, and up
to 18 APs with license upgrade.
Zyxel One Network Utility
PCI DSS Compliance
The ZON utility features smart functions to assist network
management for administrators to perform batch
firmware upgrade for devices, remote reboot of devices
such as ceiling APs or redirect to device GUI for further
configuration with just a click. These troublesome but
necessary management tasks can now be easily done
through just one platform for Wi-Fi APs, switches and
gateways.
The Zyxel USG Series conforms to the Payment Card
Industry Data Security Standard (PCI DSS), which is a
global cardholder data security standard influential to
a very broad group of businesses. The PCI Compliance
applies to all entities such as merchants, card issuers,
processors, and service providers involve in payment card
processing tasks like validation, transmission and storage
of cardholder data.
Fanless
Easy Mode
The Zyxel USG Performance Series features a robust
fanless design to prevent dirt and dust from entering
operating environments to cause potentially catastrophic
failures. The fanless design of USGs offers zero-noise
cooling and non-overheating features to ensure silent
operation in small or quiet office environments.
The Zyxel USG Performance Series provides friendly GUI
to increase user experience, users can set up/configure
device more quickly and enjoy high-speed and secure
networking. Integrated Wizards help user to activate
various application or functions quickly for the most used
features.
Datasheet USG60/60W/40/40W
4
Application Diagram
Anti-malware protection
and application
optimization
Non-productive
Web applications
•Enabling Anti-Virus, Anti-Spam
and Intrusion Prevention,
business networks gain deep,
extensive protection against
all types of malware threats
•Content Filtering 2.0 enables
businesses to deny access to
Websites that are malicious or
not business-related
•Application Patrol technology
not only enable businesses
to block or throttle nonproductive Web applications,
but also optimize Web
applications that increase
productivity
Non-productive
Web applications
Anti-Virus
Intrusion
Prevention
Anti-Spam
Content
Filtering 2.0
Network
Extend
Inventory
Server
File
Sharing
BI
System
Web
Apps
OA, ERP,
CRM System
Email
Server
Remote
Desktop
BI
System
Intrusion
Application
Patrol
Anti-Virus
Prevention
Anti-Spam
Remote
Desktop
Network
Extend
Inventory
Server
File
Sharing
DMZ Resources
OA, ERP,
CRM System
Web
Apps
Email
Server
Productive Web applications
DMZ Resources
Content
Filtering
Application Intelligence
& Optimization
Productive Web applications
Unified Security Gateway
Internet
Internet
SPAM
Unified Security Gateway
SPAM
Viruses, intrusions,
malicious
Websites,
Viruses,
intrusions,
malicious
Websites,
email
spam
Workgroup
Workgroup
email spam
VPN application
• Branch offices, partners and
home users can deploy Zyxel
USGs/ZyWALLs for site-to-site
IPSec VPN connections
• Branch offices can additional
deploy IPSec VPN HA (load
balancing and failover) for
always online VPN connectivity
•Remote users can securely
access company resources
with their computers or
smartphones via SSL, IPSec
and L2TP over IPSec VPN
•The headquarter USG/ZyWALL
can also establish an IPSec
VPN connection with Microsoft
Azure for secured access
to a variety of cloud-based
applications
Microsoft
Azure
Branch
Office
Microsoft
Azure
Branch
Office
Headquarters
Remote
Headquarters
USG1900
Unified Security Gateway
File
Sharing
OA, ERP,
Email
Partner
OfficeServer
CRM
System
DMZ Resources
Partner Office
USG1100
Unified Security Gateway
SSL VPN
IPSec VPN
SSL VPN Client for
Windows/Mac OS
USG1900
IPSec VPN
L2TP overSecurity Gateway
Unified
IPSec VPN
Travelling
Employee
In-House
Staff
SSL VPN
IPSec VPN
L2TP over USG40W
Travelling
Employee
IPSec VPNUnified Security
Gateway
Home
User
Datasheet USG60/60W/40/40W
Web
Apps
IPSec VPN
IPSec VPNTravelling
Client
for Windows
OS
Employee
Travelling
Employee
File
Sharing
Inventory
Network
BI
System
IPSec VPN
VPN
IPSec IPSec
VPN HA
VPN Client for
Windows/Mac OS
Inventory
Server
DMZ Resources
IPSec VPN HA
Travelling
Employee
SecuExtender
SSL
Network
Extend
OA, ERP, Server
Email
BIDesktop
Web Extend
System
Apps CRM System Server
IPSec VPN
USG110
Unified Security
Gateway
USG110
VPN Client
UnifiedIPSec
Security
for
Windows OS
Gateway
Remote
Desktop
USG40W
Unified Security
Gateway
Travelling
Employee
5
IPSec
VPN
SP350E
Service
Gateway
Printer
Switch
USG1100
Access
Unified
Security Gateway
Point
Login
Login
SP350E
Switch
Guest Network
Staff Network
Service
Gateway
Hotspot Management
Printer
Access
Point
Login
Login
Guest Network
Staff Network
Hotspot Management
Specifications
Model
USG60
USG60W
USG40
USG40W
10/100/1000 Mbps RJ-45
ports
4 x LAN/DMZ,
2 x WAN
4 x LAN/DMZ,
2 x WAN
3 x LAN/DMZ,
1 x WAN, 1 x OPT
3 x LAN/DMZ,
1 x WAN, 1 x OPT
USB ports
2
2
1
1
Product photo
Hardware Specifications
Console port
Yes (DB9)
Yes (DB9)
Yes (RJ-45)
Yes (RJ-45)
Rack-mountable
Yes
Yes
-
-
Fanless
Yes
Yes
Yes
Yes
System Capacity & Performance
*1
SPI firewall throughput
(Mbps)*2
1,000
1,000
400
400
VPN throughput (Mbps)*3
180
180
100
100
IDP throughput (Mbps)
120
120
55
55
AV throughput (Mbps)
90
90
50
50
UTM throughput
(AV and IDP)*4
90
90
50
50
Concurrent devices
(default/max.)*5
128
128
64
64
Max. TCP concurrent
sessions*6
100,000
100,000
50,000
50,000
Max. concurrent IPsec VPN 40
tunnels*7
40
20
20
Concurrent SSL VPN user
no. (default/max.)*8
5/20
5/20
5/15
5/15
Customizable zones
Yes
Yes
Yes
Yes
*4
*4
IPv6 support
Yes
Yes
Yes
Yes
VLAN interface
16
16
8
8
AP Controller (APC)
support
Yes
Yes
Yes
Yes
Managed AP number
(default/max.)*9
2/18
2/18
2/18
2/18
Firewall
Yes
Yes
Yes
Yes
Virtual private network
(VPN)
Yes
(IPSec, SSL, L2TP over
IPSec)
Yes
Yes
(IPSec, SSL, L2TP over
IPSec)
Yes
Yes
(IPSec, SSL, L2TP over
IPSec)
Yes
Yes
(IPSec, SSL, L2TP
over IPSec)
Yes
WLAN Management
Key Software Features
Bandwidth Management
Logging and Monitoring
Yes
Yes
Yes
Yes
Unified Security Policy
Yes
Yes
Yes
Yes
Easy Mode
Yes
Yes
Yes
Yes
Cloud Helper
Yes
Yes
Yes
Yes
Datasheet USG60/60W/40/40W
6
Model
USG60
USG60W
USG40
USG40W
Anti-Virus (AV)
Yes
Yes
Yes
Yes
Intrusion detection and
prevention (IDP)
& Application Patrol
Yes
Yes
Yes
Yes
Anti-Spam
Yes
Yes
Yes
Yes
Content filtering
(CF2.0)*10
Yes
Yes
Yes
Yes
Power input
12 V DC, 3.0 A max.
12 V DC, 3.0 A max.
12 V DC, 2.0 A max.
12 V DC, 2.0 A max.
Max. power
consumption (watt)
19.0
28.0
14.0
17.0
Heat dissipation (BTU/
hr)
64.83
95.54
47.77
58.01
Dimensions
(WxDxH)
(mm/in.)
242 x 175 x 36/
9.53 x 6.89 x 1.42
272 x 171 x 36/
10.71 x 6.73 x 1.42
216 x 143 x 33/
8.50 x 5.63 x 1.30
216 x 143 x 33/
8.50 x 5.63 x 1.30
Weight
(kg/lb.)
1.25/2.76
1.46/3.23
0.89/1.96
0.91/2
Dimensions
(WxDxH)
(mm/in.)
394 x 240 x 101/
15.51 x 9.45 x 3.98
427 x 247 x 73/
16.81 x 9.72 x 2.87
381 x 216 x 79/
15.00 x 8.50 x 3.11
381 x 216 x 79/
15.00 x 8.50 x 3.11
Weight
(kg/lb.)
2.25/4.96
2.23/4.92
(without bracket)
2.42/5.34
(with bracket)
1.57/3.46
1.63/3.59
• Power adapter
• Rack mounting kit
• Power adapter
• Power adapter
• DB9 - RJ-45
• Rack mounting kit
(optional, by regions) cable for console
connection
• Antenna
• Power adapter
• DB9 - RJ-45 cable for
console connection
• Antenna
License Service
Power Requirements
Physical Specifications
Item
Packing
Included accessories
Environmental Specifications
Operating
Temperature
0°C to 40°C
(32°F to 104°F)
0°C to 40°C
(32°F to 104°F)
0°C to 40°C
(32°F to 104°F)
0°C to 40°C
(32°F to 104°F)
Humidity
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
Temperature
-30°C to 70°C
(-22°F to 158°F)
-30°C to 70°C
(-22°F to 158°F)
-30°C to 70°C
(-22°F to 158°F)
-30°C to 70°C
(-22°F to 158°F)
Humidity
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
815,463.9
497,644
414,329.4
386,931.7
EMC
FCC Part 15 (Class
B), CE EMC (Class B),
C-Tick (Class B), BSMI
FCC Part 15 (Class
B), CE EMC (Class B),
C-Tick (Class B), BSMI
FCC Part 15 (Class
B), CE EMC (Class B),
C-Tick (Class B), BSMI
FCC Part 15 (Class
B), CE EMC (Class B),
C-Tick (Class B), BSMI
Safety
LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI
Storage
MTBF (hr)
Certifications
Note:
* This matrix with firmware ZLD 4.20 or later.
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: With Zyxel Device Upgrade License, this is the recommend maximum number of concurrent logged-in devices.
*6: Maximum sessions measured while UTM disabled using the industry standard IXIA 1xLoad testing tool.
*7: Including Gateway-to-Gateway and Client-to-Gateway.
*8: With Zyxel SSL VPN License, this is the recommend maximum number of concurrent VPN users.
*9: With Zyxel AP Controller License, this is the recommend maximum AP capacity of concurrent users.
*10: SafeSearch function in CF2.0 need to enable SSL Inspection firstly and not for small business models.
Datasheet USG60/60W/40/40W
7
Wireless Specifications
Model
USG60W
USG40W
Standard compliance
802.11 a/b/g/n
802.11 b/g/n
Wireless frequency
Concurrent 2.4 & 5 GHz
2.4 GHz
Radio
2
1
SSID number
16
8
US (FCC)
2.4 GHz
24.3 dBm, 2 antennas
24.3 dBm, 2 antennas
US (FCC)
5 GHz
25.8 dBm, 2 antennas
-
EU (ETSI)
2.4 GHz
18.6 dBm (EIRP), 2 antennas
19.6 dBm (EIRP), 2 antennas
EU (ETSI)
5 GHz
28.4 dBm (EIRP), 2 antennas
-
No. of antenna
2.4 GHz: 2T2R MIMO
5 GHz: 2T2R MIMO
(Detachable, SMA-R)
2.4 GHz: 2T2R MIMO
(Detachable, SMA-R)
Antenna gain
3 dBi
3 dBi
Data rate
802.11 b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 and
54 Mbps
802.11a: 6, 9, 12, 18, 24, 36, 48 and 54 Mbps
802.11n: up to 300 Mbps in MCS15
(40 MHz; GI = 400 ns)
802.11 b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 and
54 Mbps
802.11n: up to 300 Mbps in MCS15
(40 MHz; GI = 400 ns)
2.4 GHz
11 Mbps ≤ -87 dBm
54 Mbps ≤ -74 dBm
HT20 ≤ -71 dBm
HT40 ≤ -68 dBm
11 Mbps ≤ -87 dBm
54 Mbps ≤ -74 dBm
HT20, MCS15 ≤ -71 dBm
HT40, MCS15 ≤ -68 dBm
5 GHz
54 Mbps ≤ -75 dBm
HT20, MCS15 ≤ -71 dBm
HT40, MCS15 ≤ -69 dBm
-
Maximum
transmit
power
(Max. total
channel)
Receive
sen-sitivity
Features Set
Software Features
Firewall
• ICSA-certified firewall
• Routing and transparent (bridge)
modes
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG support for customized ports
• Protocol anomaly detection and
protection
• Traffic anomaly detection and
protection
• Flooding detection and protection
• DoS/DDoS protection
• RPS-enabled for desirable
performance in chaotic
environments
• IPv6 addressing
• DNS
• DHCPv6
• Bridge
• VLAN
• PPPoE
• Static routing
• Policy routing
• Session control
• Firewall and ADP
• IPSec VPN
• Intrusion Detection and Prevention
(IDP)
• Application Patrol
• Content Filtering 2.0
• Anti-Virus, Anti-Malware
• Anti-Spam
IPv6 Support
• Dual stack
• IPv4 tunneling (6rd and 6to4
transition tunnel)
IPSec VPN
• Authentication: SHA-2 (512-bit), SHA-1
and MD5
Datasheet USG60/60W/40/40W
8
• Encryption: AES (256-bit), 3DES and
DES
• Support Route-based VPN Tunnel
Interface (VTI)
• Key management: manual key, IKEv1
and IKEv2 with EAP
• Perfect forward secrecy (DH groups)
support 1, 2, 5, 14
• IPSec NAT traversal
• Dead peer detection and relay
detection
• PKI (X.509) certificate support
• VPN concentrator
• Simple wizard support
• VPN auto-reconnection
• VPN High Availability (HA): loadbalancing and failover
• L2TP over IPSec
• GRE and GRE over IPSec
• NAT over IPSec
• Zyxel VPN client provisioning
SSL VPN
• Supports Windows and Mac OS X
• Supports full tunnel mode
• Supports 2-step authentication
• HTTP, FTP, SMTP, POP3 and IMAP4
protocol support
• Automatic signature updates
• No file size limitation
• Customizable user portal
Intrusion Detection and Prevention
(IDP)
• Routing and transparent (bridge)
mode
• Signature-based and behaviorbased scanning
• Automatic signature updates
• Customizable protection profile
• Customized signatures supported
Application Patrol
• Granular control over the most
important applications
• Identifies and controls application
behavior
• Supports over 15 application
categories
• Application bandwidth management
• Supports user authentication
• Real-time statistics and reports
• IDP/ADP support on social networks
such as likes and posts on Facebook
Anti-Virus
• Supports Kaspersky Anti-Virus
signatures
• Identifies and blocks over 650,000
viruses
• Stream-based Anti-Virus engine
• HTTP, FTP, SMTP, POP3 and IMAP4
protocol support
• Automatic signature updates
• No file size limitation
Anti-Spam
• Transparent mail interception via
SMTP and POP3 protocols
• Configurable POP3 and SMTP ports
• Sender-based IP reputation filter
• Recurrent Pattern Detection (RPD)
technology
• Zero-hour virus outbreak protection
• X-Header support
• Blacklist and whitelist support
• Supports DNSBL checking
• Spam tag support
• Statistics report
Content Filtering 2.0
• Social media filtering
• Malicious Website filtering
• URL blocking and keyword blocking
• Blacklist and whitelist support
Datasheet USG60/60W/40/40W
• Blocks java applets, cookies and
ActiveX
• Dynamic, cloud-based URL filtering
database
• Unlimited user license support
• Customizable warning messages and
redirection URL
• HTTPs Domain filtering
• GeoIP Blocking
• Monitors traffics based on country
policy
• URL blocking and keyword blocking
Unified Security Policy
• Unified policy management interface
• Supported UTM features: Anti-Virus,
Anti-Spam, IDP, Content Filtering 2.0,
Application Patrol, firewall (ACL)
• 3-tier configuration: object-based,
profile-based, policy-based
• Policy criteria: zone, source and
destination IP address, user, time
• Pre-defined UTM profiles for different
user groups
WLAN Management
• Support AP Controller (APC) version
1.97
• Wireless L2 isolation
• Supports auto AP FW update
• Scheduled Wi-Fi service
• Dynamic Channel Selection (DCS)
• Client steering for 5GHz priority and
sticky client prevention
• Auto healing provides a stable and
reliable coverage
• IEEE 802.1x authentication
• Captive portal Web authentication
• Customizable captive portal page
• RADIUS authentication
• Wi-Fi Multimedia (WMM) wireless
QoS
• CAPWAP discovery protocol
Mobile Broadband
• WAN connection failover via 3G and
4G* USB modems
• Auto fallback when primary WAN
recovers
* For specific models supporting the 3G and 4G
dongles on the list, please refer to the Zyxel
product page at 3G dongle document.
Networking
• Routing mode, bridge mode and
hybrid mode
• Ethernet and PPPoE
• NAT and PAT
• VLAN tagging (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIPv1/v2 and OSPF)
9
• DHCP client/server/relay
• Dynamic DNS support
• WAN trunk for more than 2 ports
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• Bandwidth limit per user
• Bandwidth limit per IP
• GRE
Authentication
• Local user database
• Microsoft Windows Active Directory
integration
• External LDAP/RADIUS user
database
• XAUTH, IKEv2 with EAP VPN
authentication
• Web-based authentication
• Forced user authentication
(transparent authentication)
• IP-MAC address binding
• SSO (Single Sign-On) support
System Management
• Authentication: SHA-2 (512-bit), SHA-1
and MD5
• Role-based administration
• Multiple administrator logins
• Supports Cloud Helper
• Multi-lingual Web GUI (HTTPS and
HTTP)
• Command line interface (console,
Web console, SSH and telnet)
• SNMP v1, v2c, v3
• System configuration rollback
• Firmware upgrade via FTP, FTP-TLS
and Web GUI
• Dual firmware images
• Cloud CNM SecuManager
Logging and Monitoring
• Comprehensive local logging
• Syslog (to up to 4 servers)
• Email alerts (to up to 2 servers)
• Real-time traffic monitoring
• Built-in daily report
• Advanced reporting with Vantage
Report
Zyxel One Network
• ZON Utility
IP configuration
Web GUI access
Firmware upgrade
Password configuration
• Smart Connect
Location and system name update
Discover neighboring devices
One-click remote management
access to the neighboring Zyxel
devices
■
■
■
■
■
■
■
Services
Security
Product
Kaspersky
Anti-Virus
IDP & Application
Patrol
Content Filtering
2.0
Anti-Spam
USG60/60W
1 year/2 years
1 year/2 years
1 year/2 years
1 year/2 years
USG40/40W
1 year/2 years
1 year/2 years
1 year/2 years
1 year/2 years
Notes:
1. Zyxel USGs can be purchased with bundled 12-month standard license (Anti-Virus, Anti-Spam, Content Filtering and IDP) with
extra 1-month trial.
2. Licenses can be easily activated, renewed and managed at myZyxel.
3. License bundles may vary according to region. Please contact your local sales representative for more information.
Connectivity & Industrial Solution
Product
SSL VPN Tunnels
SSL VPN Client*1
IPSec VPN Client
Managed APs
Vantage Report
USG60/60W
Add 5/10 Tunnels
For 1/5/10 client(s)
For 1/5/10/50
client(s)
Add 4/8 APs
For 1/5/25/100
device(s)
USG40/40W
Add 5/10 Tunnels
For 1/5/10 client(s)
For 1/5/10/50
client(s)
Add 4/8 APs
For 1/5/25/100
device(s)
*1: Support OS: MAC OS 10.7 or later
Access Point Compatibility List
Series
Models
NWA5120 Series
NWA5000 Series
NWA3000-N
Series
WAC6500 Series
Unified Access
Point
Managed Access
Point
NWA5160N
NWA5560-N
NWA5550-N
Unified Pro Access
Point
NWA3160-N
NWA3560-N
NWA3550-N
Unified Pro Access
Point
WAC6503D-S
WAC6502D-S
WAC6502D-E
WAC6553D-E
WAC6103D-I
NWA5121-NI
NWA5121-N
NWA5123-NI
NWA5301-NJ
NWA5123-AC
Functions
Central
management
Yes
Yes
Yes
Yes
Auto provisioning
Yes
Yes
Yes
Yes
Data forwarding
Local bridge
Local bridge
Local bridge
Local bridge
Datasheet USG60/60W/40/40W
10
Accessories
SecuExtender Software
Item
IPSec
VPN Client
SSL VPN Client
Description
IPSec VPN client software for the ZyWALL
and USG Series with Easy VPN for zeroconfiguration remote access
Supported OS
• Windows XP (32-bit)
• Windows Server 2003 (32-bit)
• Windows Server 2008 (32/64-bit)
• Windows Vista (32/64-bit)
• Windows 7 (32/64-bit)
• Windows 8 (32/64-bit)
• Windows 10 (32/64-bit)
•
Windows XP
Secured VPN connection between device and
•
USG/ZyWALL Series with lite setup for Windows Windows 7 (32/64-bit)
• Windows 8/8.1 (32/64-bit)
and MAC OS
• Windows 10 (32/64-bit)
• MAC OS 10.7 or later
Notes:
1. A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official Zyxel website. To continue using the application,
please contact your regional sales representatives and purchase a commercial license for the application.
2. SSL VPN client for Windows OS can be downloaded from official Zyxel website. It does not require a license key to activate the application.
Datasheet USG60/60W/40/40W
11
For more product information, visit us on the web at www.zyxel.com
Copyright © 2017 Zyxel Communications Corp. All rights reserved. Zyxel, Zyxel logo are registered
trademarks of Zyxel Communications Corp. All other brands, product names, or trademarks mentioned
are the property of their respective owners. All specifications are subject to change without notice.
Datasheet USG60/60W/40/40W
5-100-00817009
03/17
Download PDF
Similar pages