|
|
|
 ZyXEL
ZyWALL USG 200
|
|

| ZyXEL Product |
Part Number |
|
| ZyXEL ZyWALL USG 200 |
| ZyXEL ZyWALL USG 200 -100 VPN Tunnels, SSL VPN, 7 Gigabit
Ports, High Availability |
#ZWUSG200
Our Price: $786.00 |
|
ZyXEL
ZyWALL USG 200 Overview:
Network Security in a Single Box for Offices
of up to 50 People
The ZyWALL USG 100/200 series is a high performance,
deep packet inspection security platform for small to
medium sized offices. It embodies a firewall, Intrusion
Detection and Prevention (IDP), content filtering, anti-virus,
anti-spam, and VPN in one box. This multi-layered security
safeguards your organization’s customer and company
records, intellectual property, and critical resources
from external and internal threats. Its fanless design
allows noiseless heat dissipation, making it perfect
for your desk.
Features & Benefits:
Features :
- ICSA-certified Firewall
- Anti-Virus:
- ICSA-certified ZyXEL Anti-Virus
- Kaspersk
- IDP
- VPN:
- ICSA-certified IPSec
- SSL
- L2TP
- IM/P2P Management -
- Anti-Spam -
- User-aware Configuration -
- Bandwidth Management
- Multiple ISP Links
- ZyWALL OTP Support
- 3G Support
Benefits:
- The ICSA-certified, stateful inspection firewall
protects the network and vital Internet services
like e-mail, Web browsing, servers, and file transfers.
- For protection against viruses and spyware,
choose the ICSA-certified ZyXEL Anti-Virus or one
powered by Kaspersky Labs.
- The IDP engine protects your network from intrusions
such as Trojans and worms.
- Use IPSec VPN to secure connections to branch
offices, partners, and headquarters. Road warriors
and telecommuters can use SSL or L2TP VPN to securely
access the company network without having to install
VPN software.
- Application Patrol controls who can use what
IM and P2P applications like MSN and BitTorrent,
and even who can use specific features within an
application.
- The anti-spam feature can tag or discard unsolicited
commercial or junk e-mail.
- User-aware configuration lets you control access
to applications or resources and apply security
scans by user or user group.
- Bandwidth management lets you prioritize time-sensitive
applications like VoIP and video conferencing.
- Multiple WAN ports let you use multiple ISP
links and load balancing to enhance traffic. Throughput,
optimize bandwidth usage, and help ensure continuous
uptime if a link goes down.
- Along with your regular user name and password,
use the ZyWALL OTP (One Time Password). hardware
token *to generate a new PIN code each time you
log in.
- Use the extension card slot and USB ports for
multiple 3G wireless WAN connections.
*: Sold separately
Application Diagram:
Network Security

Network Connectivity
The seven Gigabit Ethernet ports include two WAN
ports. The ZyWALL USG 200 OPT port can be used as another
WAN, LAN, WLAN, or DMZ port. The extension card slot
lets you add an IEEE 802.11b/g wireless LAN or a 3G
wireless WAN connection. There are also two USB ports
you can use for 3G wireless WAN connections.

Model Comparison:
|
Model Name |
ZyWALL USG 100 |
ZyWALL USG 200 |
|
Recommended Number
of Users |
Up to 25 |
Up to 50 |
|
Firewall Throughput |
100 Mbps |
150 Mbps |
|
VPN Throughput
(AV + IDP + Firewall) |
50 Mbps |
75 Mbps |
|
Sessions (Maximum
Concurrent) |
24 Mbps |
40 Mbps |
|
New Sessions
per Second |
20,000 |
40,000 |
|
IPSec VPN Tunnels
(Maximum Concurrent) |
50 |
100 |
|
SSL VPN Tunnels
(Maximum Concurrent) |
2, upgradeable to
5** |
2, upgradeable to
10** |
|
7 Gigabit Ethernets
Ports |
WLAN1, WAN2 5 LAN/WLAN/DMZ
Ports |
WLAN1, WAN2 OPT
Port (Use as WAN/LAN/LAN2/DMZ) 4 LAN/WLAN/DMZ
Ports |
|
Features Common to Both Models |
ICSA-certified
Firewall
- Zone-Based Access Control List
- Security Zones
- Stateful Packet Inspection
- DoS/DDoS Protection
- User-Aware Policy Enforcement
- ALG Supports Custom Ports
Intrusion Detection and Prevention
- In-line Mode (Routing/Bridge)
- Zone-Based IDP Inspection
- Customizable Protection Profile
- Signature-based Deep Packet
Inspection
- Automatic Signature Updates**
- Custom Signatures
- Traffic Anomaly Detection and
Protection
- Flooding Detection and Protection
- Protocol Anomaly Detection and
Protection: HTTP/ICMP/TCP/UDP
Anti-Virus
- ICSA-Certified ZyXEL Anti-Virus
or Kaspersky Anti-Virus
- Stream-Based Anti-Virus
- Covers Top Active Viruses in
the Wild List
- Scans HTTP/FTP/SMTP/POP3/IMAP4
- Automatic Signature Updates**
- No File Size Limitation
- Blacklist/Whitelist Support
Hybrid VPN
ICSA-certified IPSec VPN
- Encryption: AES/3DES/DES
- Authentication: SHA-1/MD5
- Key Management: Manual Key/IKE
- Perfect Forward Secrecy: DH
Group 1/2/5
- NAT over IPSec VPN
- Dead peer Detection/Relay Detection
- PKI (X.509) Certificate Support
- Certificate Enrollment (CMP/SCEP)
- Xauth Authentication
- L2TP over IPSec Support
SSL VPN
- Clientless Secure Remote Access
(Reverse Proxy Mode)
- SecuExtender (Full Tunnel Mode)
|
- Unified Policy Enforcement
- Supports Two-factor Authentication
- Customizable User Portal
Application Patrol
- IM/P2P Granular Access Control
- Apply Schedules, Bandwidth Management
- User-Aware
- IM/P2P Up-to-Date Support (based
on IDP signatures)**
- Real-Time Statistical Reports
Bandwidth Management
- Bandwidth Priority
- Policy-Based Traffic Shaping
- Maximum/Guaranteed Bandwidth
- Bandwidth Borrowing
Anti-Spam
- Zone to Zone Protection
- Transparently intercept mail
via SMTP/POP3 protocols
- Blacklist/Whitelist support
- Support DNSBL checking
- Statistics report
High Availability
- Device HA (Active-Passive Mode)
- Device Failure Detection
- Link Monitoring
- Auto-Sync Configurations
- Multiple WAN Load Balancing
- VPN HA (Redundant Remote VPN
Gateways)
Content Filtering
- URL Blocking, Keyword Blocking
- Exempt List (Blacklist and Whitelist)
- Blocks Java Applet, Cookies
and Active X
- Dynamic URL Filtering Database
(Powered by BlueCoat)**
User Licenses
Networking
- Routing Mode/Bridge Mode/Mixed
Mode
- Layer 2 Port Grouping
- Ethernet/PPPoE/PPTP
|
- Tagged VLAN (802.1Q)
- Virtual Interface (Alias Interface)
- Policy-Based Routing (User-Aware)
- Policy-Based NAT (SNAT/DNAT)
- RIP v1/v2
- OSPF
- IP Multicasting (IGMP v1/v2)
- DHCP Client/Server/Relay
- Built-in DNS Server
- Dynamic DNS
Authentication
- Internal User Database
- Microsoft Windows Active Directory
- External LDAP/RADIUS User Database
- ZyWALL OTP (One Time Password)***
- Forced User Authentication (Transparent
Authentication)
System Management
- Role-Based Administration
- Multiple Administrator Login
- Multi-Lingual Web GUI (HTTPS/HTTP)
- Object-Based Configuration
- Command Line Interface (Console/Web
Console/SSH/TELNET)
- Comprehensive Local Logging
- Syslog (send to up to 4 servers)
- E-mail Alert (send to up to
2 servers)
- SNMP v2c (MIB-II)
- Real-Time Traffic Monitoring
- System Configuration Rollback
- Text-Based Configuration File
- Firmware upgrade via FTP/FTP-TLS/Web
GUI
- Advanced Reporting (Vantage
Report)
- Centralized Network Management
(Vantage CNM)
3G Support
- Advanced Wireless Security Transmission
with WEP Encryption and WPA/WPA2
Support
- PCMCIA: Sierra Wireless AC850*
- USB: Huawei E220*
*: Not included.
**: Requires a valid subscription.
***: Sold separately. |
Specifications:
Certifications
- ICSA Certified Firewall
- ICSA Certified IPSec VPN
- ICSA Certified Anti-Virus
Standards Compliance
- HSF (Hazardous Substance Free):
RoHS and WEEE
- EMC: FCC Part 15 Class B, CE-EMC
Class B, C-Tick Class B, VCCI Class
B
- Safety: CSA International (ANS/UL60950-1,
CSA60950-1, EN60950-1, IEC60950-1)/ul>
|
Hardware Specifications
- Memory size: 256 MB DDR2 RAM/256
MB Flash
- Interface: GbE x 7 (RJ-45 with LED)
- Interface: Auto-negotiation and
Auto MDI/MDI-X
- Console: RS-232 (DB9F)
- AUX: RS-232 (DB9M)
- LED Indicator: PWR, SYS, AUX, CARD
- Reset Button
- Expansion Card Slot
- 2 USB Ports
|
Physical Specifications
- Rack Mountable (rack-mount kit included)
- Dimensions: 242 (W) x 175 (D) x
35.5 (H) mm/ 9.5 (W) x 6.9 (D) x 1.4
(H) inch
- Weight: 1.2 Kg/2.6 lbs
Environmental Specifications
- Operating temperature: 0ºC ~ 50ºC/32ºF
~ 122ºF
- Storage temperature: -30ºC ~ 60ºC/-22ºF
~ 140ºF
- Operating humidity: 5% ~ 90% (noncondensing)
Power Requirements
- Input: 100 ~ 240 V; 1.2 A, 50 ~
60 Hz
- Output: 12 V; 3.5 A
|
| ZyXEL Product |
Part Number |
|
| ZyXEL ZyWALL SSL 200 |
| ZyXEL ZyWALL USG 200 -100 VPN Tunnels, SSL VPN, 7 Gigabit
Ports, High Availability |
#ZWUSG200
Our Price: $786.00 |
|
| ZyXEL ZyWALL iCard |
| ZyWALL iCard SSL 10 to 25 - SSL License Upgrade
from 10 Tunnels to 25 Tunnels |
#SSL10ICARD
Our Price: $128.95 |
|
| ZyXEL OTP Tokens &
Software - Learn More |
ZyWALL OTP Token Starter
- One Time Password 2 Token and Software Pack |
#ZWOTPSTART
Our Price: $98.00 |
|
ZyWALL OTP Token 5U
- One Time Password Token 5 Token Pack
| #ZWOTP5U
Our Price: $240.00 |
|
ZyWALL OTP Token 10U
- One Time Password Token 10 Token Pack
| #ZWOTP10U
Our Price: $462.00 |
|
| VPN IPSec VPN Client
|
| ZyWALL IPSec VPN Client - Vista Supported VPN Client - 1
Client |
#ZYWALLVPN
Our Price: $49.00 |
|
| ZyWALL IPSec VPN Client - Vista Supported VPN Client -
5 Clients |
#ZYWALLVPN5
Our Price: $194.00 |
|
| ZyWALL IPSec VPN Client - Vista Supported VPN Client - 10 Clients |
#ZYWALLVPN10
Our Price: $320.00 |
|
| ZyWALL IPSec VPN Client - Vista Supported VPN
Client - 50 Clients |
#ZYWALLVPN50
Our Price: $1,280.00 |
|
|
|