USG310/210/110 - Telecom Options

USG310/210/110
Next Generation Unified Security Gateway— Advanced Series
More and more people are relying on smart devices and cloud-based
applications for business communications. This means that high network
availability is critical for business continuity, more Wi-Fi is demanded in the
workplace, and traditional regulatory measures for application usage are
obsolete. Without an effective solution to control, optimize and block social,
productivity and other Web applications, SMBs risk losing work productivity
and exposing company networks to new Web threats.
The new Zyxel USG Advanced Series are Next Generation Firewalls (NGFW)
designed to meet the mobility, anti-malware and policy enforcement
challenges in SMBs. The integrated WLAN controller offers easy WLAN
scalability for the growing demand for Wi-Fi; while WAN and VPN load
balancing and failover ensures non-stop business communications. Zyxel
USGs offer industry-leading Anti-Virus, Anti-Spam, Content Filtering 2.0 and
Application Patrol technology for effective application optimization and
comprehensive network protection.
Next Generation Firewall
(NGFW) for small and mediumsized businesses
Complete network protection
with firewall, Anti-Virus, AntiSpam, Content Filtering 2.0, IDP,
Application Patrol
Robust SSL, IPSec and L2TP over
IPSec VPN connectivity and VPN
high availability (HA)
Unified security policy
Cloud helper provide friendly
firmware upgrade.
Device HA Pro ensures smart
handover
Hotspot management is
supported
Datasheet USG310/210/110
Benefits
Benefits
Impregnable protection and optimization
Swift and secure firmware upgrades
Zyxel USG Advanced Series thoroughly protects
networks with industry-leading firewall, Anti-Malware/
Virus, Anti-Spam, Content Filtering, IDP, and Application
Patrol functionality. Regulate unauthorized use of Web
applications over your network, such as Facebook, Google
apps, and Netflix, among others. Zyxel security measures
are enhanced with SSL Inspection, blocking threats hidden
in SSL-encrypted connections while facilitating deeper
policy enforcement. Furthermore, newly improved Content
Filtering 2.0 enhances HTTPS Domain Filter, Browser
SafeSearch, and Geo IP Blocking for an array of security
enhancements to ensure clean Web connections.
Locating firmware updates — not to mention identifying
correct versions for your device and managing their
installation — can be a complex and confusing ordeal.
The Zyxel USG Series solves this with its new Cloud Helper
service. Cloud Helper provides a simple step to look for upto-date firmware information. New firmware is immediately
made available upon release from our official database to
ensure its authenticity and reliability.
Zyxel One Network experience
Aiming for relieving our customers from repetitive
operations of deploying and managing a network, Zyxel
One Network is designed to simplify the configuration,
management, and troubleshooting, allowing our customers
to focus on the business priorities. Zyxel One Network
presents an easy-to-use tool, Zyxel One Network Utility
(ZON Utility), to realize speed network setup. Zyxel Smart
Connect allows Zyxel networking equipment to be aware
and recognize each other and further facilitating the
network maintenance via one-click remote functions
such as factory reset or power cycling. Zyxel One Network
redefines the network integration across multiple
networking products from switch to Wi-Fi AP and to
Gateway.
Powerful, robust and always-online
Zyxel USG Advanced Series delivers high-access quality
to help businesses satisfy the demand for always-online
communications. For internal deployments, the USG
Advanced Series provides active-passive High-Availability
(HA) service to support device or connection failover.
With Device HA Pro service, the USG Advanced Series
also supports instant failover, so connections are always
maintained when a failover event occurs. For external
deployments, the USG Advanced Series features multiWAN load balancing/failover and a comprehensive mobile
broadband USB modem support list for WAN backup
operations. The USG Advanced Series also supports IPSec
load balancing and failover, providing additional resilience
for mission-critical VPN failover with VTI Interface
deployments.
Stay secure and up-to-date with OneSecurity
Zyxel provides frequent and timely updates in response
to the latest security threats and advisories through
OneSecurity — our free online service portal. OneSecurity
offers informative network security resources and the
know-how to assist businesses and IT administrators in
keeping their network operations safe in the digital age.
Information and resources can be found with one click
via the GUI of Zyxel USG Extreme and ZyWALL series
products. IT staff can quickly and easily catch up on the
latest threats, and then proceed to walkthroughs and
troubleshooting protocols with the help of easy-to-follow
FAQs — all provided to help users secure their networks
and simplify management of our UTM products.
Multi-element service access
The Zyxel USG Advanced Series helps SMBs meet the
connectivity demands of an ever-growing legion of wireless
devices. Each gateway in the series is integrated with a
WLAN controller that enables users to manage up to 34
APs through a centralized user interface. Businesses can
now easily scale up WLAN and provide Wi-Fi in multiple
areas, like meeting rooms and guest reception areas.
Hotspot Management features — such as Billing System,
Walled Garden, Multiple Authentications, 3rd Party Social
Login, and User Agreement — to give businesses with a
single unified solution for all required functionality.
Datasheet USG310/210/110
2
Next-Gen USG Quick Finder
USG1900
USG1100
USG310
USG210
USG110
USG60/60W
Model
USG40/40W
Description
Performance Series
Advanced Series
Multi-WAN
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Unified security
policy
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SSL inspection
-
-
Yes
Yes
Yes
Yes
Yes
Link
Aggregation
(LAG)
Port grouping
-
-
-
-
Yes
Yes
Yes
Yes
Yes
Yes
Yes
-
-
-
Device HA
-
-
Yes
Yes
Yes
Yes
Yes
Device HA Pro
-
-
Yes
Yes
Yes
Yes
Yes
Easy Mode
Yes
Yes
-
-
-
-
-
Cloud Helper
Yes
Yes
Yes
Yes
Yes
Yes
Yes
PCI DSS
Compliance
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Content
Filtering 2.0*1
Hotspot
Management*2
Yes
Yes
Yes
Yes
Yes
Yes
Yes
-
-
Yes
Yes
Yes
Yes
Yes
Extreme Series
*1: SSL Inspection must be enabled for Content Filtering 2.0 Safe Search to function properly.
*2: Hotspot Management supports for USG310/1100/1900 in firmware ZLD4.20 or later, and for USG110/210 in firmware ZLD4.25 or later.
Key Services
2.0
The Zyxel USG Advanced Series provides a complete feature set to perfectly fit different business requirements as well as
to enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity also
empowers IT professionals to customize the system to meet their individual needs.
*: Hotspot Management supports for USG310/1100/1900 in firmware ZLD4.20 or later, and for USG110/210 in firmware ZLD4.25 or later.
3
Feature Highlights
Multi-WAN & Mobile Broadband
SSL Inspection
The Zyxel USG Advanced Series provides non-stop
Internet uptime with multi-WAN and mobile broadband
support. Multi-WAN works with two or more Ethernet WAN
connections for active-active WAN load balancing or
active-passive failover. Comprehensive mobile broadband
USB modems are also supported for WAN backup.
SSL inspection enables the Zyxel Advanced Series to
provide not only comprehensive security, but also deeper
policy enforcement. It enables the USG’s Application
Patrol, IDP, Content Filtering 2.0 and Anti-Virus to inspect
traffic in SSL encrypted connections and block threats
that usually go unseen.
Unified Security Policy
Robust VPN
Unified security policy offers object-based management
and a unified configuration interface for firewall and all
security-related policies. Users can easily apply all policy
criteria to every UTM feature, reduce configuration time,
and get more streamlined policy management.
Zyxel USGs support high-throughput IPSec, L2TP over
IPSec and SSL VPN for a wide range of site-to-client
and site-to-site VPN deployments. Reinforced with the
advanced SHA-2 authentication, the Zyxel USGs provide
the most secure VPN for business communications.
Cloud Helper
Integrated WLAN Controller
Cloud helper could provide the friendly firmware upgrade,
user don’t need to worry where and how to receive the
latest firmware information and file. And the few steps
to download and update the firmware directly, it’s very
convenient to save the setting time.
The integrated WLAN controller supports CAPWAP,
and enables centralized authentication and access
management of multiple APs in the network. The Zyxel USG
Advanced Series can manage 2 APs by default, and up to
34 APs with license upgrade.
Zyxel One Network Utility
PCI DSS Compliance
The ZON utility features smart functions to assist network
management for administrators to perform batch
firmware upgrade for devices, remote reboot of devices
such as ceiling APs or redirect to device GUI for further
configuration with just a click. These troublesome but
necessary management tasks can now be easily done
through just one platform for Wi-Fi APs, switches and
gateways.
The Zyxel USG Series conform Payment Card Industry
Data Security Standard (PCI DSS) is a global standard for
data security of cardholder data that affects a very broad
group of businesses. The PCI DSS Compliance applies to all
entities involved in processing of payment cards, such as
merchants, card issuers, processors, and service providers,
as well as those that process, transmit, or store cardholder
data.
Datasheet USG310/210/110
4
Application Diagram
Anti-malware protection
and application
optimization
• Enabling Anti-Virus, Anti-Spam
and Intrusion Prevention,
business networks gain deep,
extensive protection against
all types of malware threats
• Content Filtering 2.0 enables
businesses to deny access to
Websites that are malicious or
not business-related
• Application Patrol technology
not only enable businesses
to block or throttle nonproductive Web applications,
but also optimize Web
applications that increase
productivity
Non-productive
Web applications
Anti-Virus
Intrusion
Prevention
Anti-Spam
Content
Filtering 2.0
Remote
Desktop
Network
Extend
Inventory
Server
File
Sharing
BI
System
Web
Apps
OA, ERP,
CRM System
Email
Server
DMZ Resources
Application Patrol
Productive Web applications
Unified Security Gateway
Internet
SPAM
Viruses, intrusions,
malicious Websites,
email spam
Workgroup
VPN application
• Branch offices, partners and
home users can deploy Zyxel
USGs/ZyWALLs for site-to-site
IPSec VPN connections
• Branch offices can additional
deploy IPSec VPN HA (load
balancing and failover) for
always online VPN connectivity
• Remote users can securely
access company resources
with their computers or
smartphones via SSL, IPSec
and L2TP over IPSec VPN
• The headquarter USG/ZyWALL
can also establish an IPSec
VPN connection with Microsoft
Azure for secured access
to a variety of cloud-based
applications
Hotspot Management
• High speed internet access
• Tier of service
• Log record for regulatory
compliance
• Premium security control
• Various Network access
control ( free or paid access,
social login)
Microsoft
Azure
Branch
Office
Remote
Desktop
Network
Extend
Inventory
Server
File
Sharing
BI
System
Web
Apps
OA, ERP,
CRM System
Email
Server
Headquarters
USG110
Unified Security
Gateway
IPSec VPN
DMZ Resources
IPSec VPN HA
Partner Office
IPSec VPN Client
for Windows OS
USG1900
Unified Security Gateway
IPSec VPN
IPSec VPN
USG1100
Unified Security Gateway
Travelling
Employee
SSL VPN
SSL VPN Client for
Windows/Mac OS
L2TP over
IPSec VPN
IPSec VPN
In-House
Staff
Travelling
Employee
Travelling
Employee
*: Hotspot Management supports for
USG310 ZLD4.20 or later, and for
USG110/210 in Firmware ZLD4.25 or later.
5
USG40W
Unified Security
Gateway
SP350E
Service
Gateway
Printer
Switch
Access
Point
Login
Login
Guest Network
Staff Network
Hotspot Management
Specifications
Model
Product photo
USG310
USG210
USG110
10/100/1000 Mbps RJ-45 ports
8 (configurable)
4 x LAN/DMZ, 2 x WAN,
1 x OPT
4 x LAN/DMZ, 2 x WAN,
1 x OPT
USB ports
2
2
2
Console port
Yes (DB9)
Yes (DB9)
Yes (DB9)
Rack-mountable
Yes
Yes
Yes
SPI firewall throughput (Mbps)*2
5,000
1,900
1,600
VPN throughput (Mbps)
650
500
400
IDP throughput (Mbps)*4
900
660
590
AV throughput (Mbps)
550
500
450
UTM throughput (AV and IDP)*4
550
500
450
Concurrent devices (default/max.)
500/800
200/300
200/300
Max. TCP concurrent sessions
500,000
200,000
150,000
Max. concurrent IPsec VPN
tunnels*7
300
200
100
Concurrent SSL VPN user no.
(default/max.)*8
50/150
35/150
25/150
Hardware Specifications
System Capacity & Performance
*1
*3
*4
*5
*6
Customizable zones
Yes
Yes
Yes
IPv6 support
Yes
Yes
Yes
VLAN interface
64
32
16
AP Controller (APC) support
Yes
Yes
Yes
Managed AP number
(default/max.)*9
2/34
2/34
2/34
Firewall
Yes
Yes
Yes
Virtual private network (VPN)
Yes (IPSec, SSL, L2TP over
IPSec)
Yes (IPSec, SSL, L2TP over
IPSec)
Yes (IPSec, SSL, L2TP over
IPSec)
Bandwidth Management
Yes
Yes
Yes
WLAN Management
Key Software Features
Logging and Monitoring
Yes
Yes
Yes
SSL (HTTPS) inspection
Yes
Yes
Yes
Unified Security Policy
Yes
Yes
Yes
Cloud Helper
Yes
Yes
Yes
Device HA
Yes
Yes
Yes
Yes
Yes
Yes
Intrusion detection and prevention Yes
(IDP) & Application Patrol
Yes
Yes
Anti-Spam
Yes
Yes
License Service
Anti-Virus (AV)
Yes
Content filtering (CF2.0)
Yes
Yes
Yes
Device HA Pro
Yes
Yes
Yes
Hostpot Management*11
Yes
Yes
Yes
*10
Datasheet USG310/210/110
6
Model
USG310
USG210
USG110
Power input
100 - 240 V AC, 50/
60 Hz, 1.3 A max.
12 V DC, 3.33 A max.
12 V DC, 3.33 A max.
Max. power consumption (watt)
58.5
37.0
37.0
Heat dissipation (BTU/hr)
199.61
199.61
199.61
Dimensions (WxDxH)
(mm/in.)
430 x 250 x 44/
16.93 x 9.84 x 1.73
300 x 178 x 44/
11.81 x 7 x 1.73
300 x 178 x 44/
11.81 x 7 x 1.73
Weight (Kg/lb.)
3.3/7.28
2/4.4
2/4.4
Dimensions (WxDxH)
(mm/in.)
519 x 392 x 163/
20.43 x 15.43 x 6.42
351 x 149 x 243/
13.82 x 5.87 x 9.57
351 x 149 x 243/
13.82 x 5.87 x 9.57
Weight (kg/lb.)
4.8/10.58
3.264/7.20
3.264/7.20
• Power cord
• Rack mounting kit
• Power adapter
• Power cord
• Rack mounting kit
• Power adapter
• Power cord
• Rack mounting kit
0°C to 40°C (32°F to 104°F)
0°C to 40°C (32°F to 104°F)
0°C to 40°C (32°F to 104°F)
Humidity
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
Temperature
-30°C to 70°C
(-22°F to 158°F)
-30°C to 70°C
(-22°F to 158°F)
-30°C to 70°C
(-22°F to 158°F)
Humidity
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
10% to 90%
(non-condensing)
560,811.5
787,109.3
787,109.3
FCC Part 15 (Class A), CE
EMC (Class A), C-Tick
(Class A), BSMI
LVD (EN60950-1), BSMI
FCC Part 15 (Class A), CE
EMC (Class A), C-Tick
(Class A), BSMI
LVD (EN60950-1), BSMI
FCC Part 15 (Class A), CE
EMC (Class A), C-Tick
(Class A), BSMI
LVD (EN60950-1), BSMI
Power Requirements
Physical Specifications
Item
Packing
Included accessories
Environmental Specifications
Operating Temperature
Storage
MTBF (hr)
Certifications
EMC
Safety
Note:
* This matrix with firmware ZLD 4.25 or later.
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: With Zyxel Device Upgrade License, this is the recommend maximum number of concurrent logged-in devices.
*6: Maximum sessions measured while UTM disabled using the industry standard IXIA 1xLoad testing tool.
*7: Including Gateway-to-Gateway and Client-to-Gateway.
*8: With Zyxel SSL VPN License, this is the recommend maximum number of concurrent VPN users.
*9: With Zyxel AP Controller License, this is the recommend maximum AP capacity of concurrent users.
*10: SafeSearch function in CF2.0 need to enable SSL Inspection firstly and not for small business models.
*11: Hotspot Management supports for USG310 in firmware ZLD4.20 or later, and for USG110/210 in firmware ZLD4.25 or later.
7
Features Set
Software Features
Firewall
• ICSA-certified firewall
• Routing and transparent (bridge)
modes
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG support for customized ports
• Protocol anomaly detection and
protection
• Traffic anomaly detection and
protection
• Flooding detection and protection
• DoS/DDoS protection
• RPS-enabled for desirable
performance in chaotic
environments
IPv6 Support
• Dual stack
• IPv4 tunneling (6rd and 6to4
transition tunnel)
• IPv6 addressing
• DNS
• DHCPv6
• Bridge
• VLAN
• PPPoE
• Static routing
• Policy routing
• Session control
• Firewall and ADP
• IPSec VPN
• Intrusion Detection and Prevention
(IDP)
• Application Patrol
• Content Filtering 2.0
• Anti-Virus, Anti-Malware
• Anti-Spam
IPSec VPN
• Authentication: SHA-2 (512-bit), SHA-1
and MD5
• Encryption: AES (256-bit), 3DES and
DES
• Support Route-based VPN Tunnel
Interface (VTI)
• Key management: manual key, IKEv1
and IKEv2 with EAP
• Perfect forward secrecy (DH groups)
support 1, 2, 5, 14
• IPSec NAT traversal
• Dead peer detection and relay
detection
• PKI (X.509) certificate support
Datasheet USG310/210/110
• VPN concentrator
• Simple wizard support
• VPN auto-reconnection
• VPN High Availability (HA): loadbalancing and failover
• L2TP over IPSec
• GRE and GRE over IPSec
• NAT over IPSec
• Zyxel VPN client provisioning
SSL VPN
• Supports Windows and Mac OS X
• Supports full tunnel mode
• HTTP, FTP, SMTP, POP3 and IMAP4
protocol support
• Automatic signature updates
• No file size limitation
• Supports 2-step authentication
• Customizable user portal
Intrusion Detection and Prevention
(IDP)
• Routing and transparent (bridge)
mode
• Signature-based and behaviorbased scanning
• Automatic signature updates
• Customizable protection profile
• Customized signatures supported
Application Patrol
• Granular control over the most
important applications
• Identifies and controls application
behavior
• Supports over 15 application
categories
• Application bandwidth management
• Supports user authentication
• Real-time statistics and reports
• SSL (HTTPS) inspection support
• IDP/ADP support on social networks
such as likes and posts on Facebook
Anti-Virus
• Supports Kaspersky Anti-Virus
signatures
• Identifies and blocks over 650,000
viruses
• Stream-based Anti-Virus engine
• HTTP, FTP, SMTP, POP3 and IMAP4
protocol support
• Automatic signature updates
• No file size limitation
8
Anti-Spam
• Transparent mail interception via
SMTP and POP3 protocols
• Configurable POP3 and SMTP ports
• Sender-based IP reputation filter
• Recurrent Pattern Detection (RPD)
technology
• Zero-hour virus outbreak protection
• X-Header support
• Blacklist and whitelist support
• Supports DNSBL checking
• Spam tag support
• Statistics report
Content Filtering 2.0
• Social media filtering
• Malicious Website filtering
• URL blocking and keyword blocking
• Blacklist and whitelist support
• Blocks java applets, cookies and
ActiveX
• Dynamic, cloud-based URL filtering
database
• Unlimited user license support
• Customizable warning messages and
redirection URL
• HTTPs Domain filtering
• GeoIP Blocking
• Monitors traffics based on country
policy
• URL blocking and keyword blocking
• Supports to SafeSearch (SSL
inspection mustbe enabled for this
function)
SSL Inspection
• Certificate Trust Chain validation
• Support both inbound and outbound
inspection
• Support Anti-virus / Content
Filtering 2.0 / Application Patrol / IDP
inspection
• Support TLS 1.0/1.1/1.2
• Visible bypass list
Unified Security Policy
• Unified policy management interface
• Supported UTM features: Anti-Virus,
Anti-Spam, IDP, Content Filtering 2.0,
Application Patrol, firewall (ACL)
• 3-tier configuration: object-based,
profile-based, policy-based
• Policy criteria: zone, source and
destination IP address, user, time
• Pre-defined UTM profiles for different
user groups
WLAN Management
• Support AP Controller version 1.97
• Supports auto AP FW update
• Wireless L2 isolation
• Scheduled Wi-Fi service
• Dynamic Channel Selection (DCS)
• Client steering for 5GHz priority and
sticky client prevention
• Auto healing provides a stable and
reliable coverage
• IEEE 802.1x authentication
• Captive portal Web authentication
• Customizable captive portal page
• RADIUS authentication
• Wi-Fi Multimedia (WMM) wireless
QoS
• CAPWAP discovery protocol
Hotspot Management
• Integrated account generator, Webbased authentication portal and
billing system
• Supports external RADIUS servers
• Per account bandwidth
management
• User agreement login
• SP350E Service Gateway Printer
enables one-click account and
billing generation
• Built-in billing system
Time-to-finish accounting mode
Accumulation accounting mode
• Supports PayPal online payment
• Marketing tool
Advertisement link
Walled garden
Portal page
■
■
■
■
■
Mobile Broadband
• WAN connection failover via 3G and
4G* USB modems
• Auto fallback when primary WAN
recover
* For specific models supporting the 3G and 4G
dongles on the list, please refer to the Zyxel
product page at 3G dongle document.
Networking
• Routing mode, bridge mode and
hybrid mode
• Ethernet and PPPoE
• NAT and PAT
• VLAN tagging (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIPv1/v2 and OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN trunk for more than 2 ports
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• Bandwidth limit per user
• Bandwidth limit per IP
• GRE
Zyxel One Network
• ZON Utility
IP configuration
Web GUI access
Firmware upgrade
Password configuration
• Smart Connect
Location and system name update
Discover neighboring devices
One-click remote management
access to the neighboring Zyxel
devices
■
■
■
■
■
■
■
Authentication
• Local user database
• Microsoft Windows Active Directory
integration
• External LDAP/RADIUS user
database
• XAUTH, IKEv2 with EAP VPN
authentication
• Web-based authentication
• Forced user authentication
(transparent authentication)
• IP-MAC address binding
• SSO (Single Sign-On) support
9
Device High Availability Pro (HA Pro)
• Devi ure detection and notification
• Supports ICMP and TCP ping check
• Link monitoring
• Configuration auto-sync
• Dedicated Heartbeat Link
• Smart handover
• NAT/Firewall/VPN Sessions
synchronization
System Management
• Authentication: SHA-2 (512-bit), SHA-1
and MD5
• Role-based administration
• Multiple administrator logins
• Supports Cloud Helper
• Multi-lingual Web GUI (HTTPS and
HTTP)
• Command line interface (console,
Web console, SSH and telnet)
• Cloud CNM SecuManager
• SNMP v1, v2c, v3
• System configuration rollback
• Firmware upgrade via FTP, FTP-TLS
and Web GUI
• Dual firmware images
Logging and Monitoring
• Comprehensive local logging
• Syslog (to up to 4 servers)
• Email alerts (to up to 2 servers)
• Real-time traffic monitoring
• Built-in daily report
• Advanced reporting with Vantage
Report
Services
Security
Product
Kaspersky
Anti-Virus
Application Patrol Content Filtering
& IDP
2.0
Anti-Spam
USG310
1 year/2 years
1 year/2 years
1 year/2 years
1 year/2 years
USG210
1 year/2 years
1 year/2 years
1 year/2 years
1 year/2 years
USG110
1 year/2 years
1 year/2 years
1 year/2 years
1 year/2 years
Notes:
1. Zyxel USGs can be purchased with bundled 12-month standard license (Anti-Virus, Anti-Spam, Content Filtering 2.0 and IDP) with
extra 1-month trial.
2. Licenses can be easily activated, renewed and managed at myZyxel
3. License bundles may vary according to region. Please contact your local sales representative for more information.
Connectivity & Industrial Solution
Product
SSL VPN Tunnels
SSL VPN Client *1
IPSec VPN Client
USG310
Add 5/10/50
Tunnels
For 1/5/10 client(s)
For 1/5/10/50
client(s)
USG210
Add 5/10/50
Tunnels
For 1/5/10 client(s)
For 1/5/10/50
client(s)
USG110
Add 5/10/50
Tunnels
For 1/5/10 client(s)
For 1/5/10/50
client(s)
*1: Support OS: MAC OS 10.7 or later
Product
Concurrent Device Hotspot
Upgrade*1
Management*2
Managed APs
Device HA Pro*1
Vantage Report
USG310
100/300 nodes
1 year /One-time
Add 4/8 APs
One-time
For 1/5/25/100
device(s)
USG210
100 nodes
1 year/One-time
Add 4/8 APs
One-time
For 1/5/25/100
device(s)
USG110
100 nodes
1 year/One-time
Add 4/8 APs
One-time
For 1/5/25/100
device(s)
*1: With firmware ZLD 4.20 or later
*2: Hotspot Management supports for USG310 in firmware ZLD4.20 or later, and for USG110/210 in firmware ZLD4.25 or later.
Access Point Compatibility List
Series
Models
NWA5120 Series
NWA5000 Series
NWA3000-N
Series
WAC6500 Series
Unified Access
Point
Managed Access
Point
NWA5160N
NWA5560-N
NWA5550-N
Unified Pro Access
Point
NWA3160-N
NWA3560-N
NWA3550-N
Unified Pro Access
Point
WAC6503D-S
WAC6502D-S
WAC6502D-E
WAC6553D-E
WAC6103D-I
Yes
Yes
Yes
NWA5121-NI
NWA5121-N
NWA5123-NI
NWA5301-NJ
NWA5123-AC
Functions
Central
management
Yes
Auto provisioning
Yes
Yes
Yes
Yes
Data forwarding
Local bridge
Local bridge
Local bridge
Local bridge
Datasheet USG310/210/110
10
Accessories
SecuExtender Software
Item
Description
Supported OS
IPSec VPN Client
IPSec VPN client software for the ZyWALL
and USG Series with Easy VPN for zeroconfiguration remote access
SSL VPN Client
Secured VPN connection between device and
USG/ZyWALL Series with lite setup for Windows
and MAC OS
• Windows XP (32-bit)
• Windows Server 2003 (32-bit)
• Windows Server 2008 (32/64-bit)
• Windows Vista (32/64-bit)
• Windows 7 (32/64-bit)
• Windows 8 (32/64-bit)
• Windows 10 (32/64-bit)
• Windows XP
• Windows 7 (32/64-bit)
• Windows 8/8.1 (32/64-bit)
• Windows 10 (32/64-bit)
• MAC OS 10.7 or later
Notes:
1. A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official Zyxel website. To continue using the application,
please contact your regional sales representatives and purchase a commercial license for the application.
2. SSL VPN client for Windows OS can be downloaded from official Zyxel website. It does not require a license key to activate the application.
Service Gateway Printer
Model
Feature
Supported model
SP350E
• Buttons: 3
• Paper roll width: 58 (+0/-1) mm
• Interface: 10/100 Mbps RJ-45 port
• Power input: 12 V DC, 5 A max.
• Item dimensions (WxDxH): 176 x 111 x 114 mm
(6.93” x 4.37” x 4.49”)
• Item weight: 0.8 kg (1.76 lb.)
USG110
USG210
USG310