Call a Specialist Today! 888-785-4412

ZyXEL USG 20W Wireless Unified Security Gateway
Unified Security Gateway for Small Businesses

ZyXEL USG 20W Wireless Unified Security Gateway

ZyXEL Products
ZyXEL USG 20W
ZyXEL USG 20W
Unified Security Gateway w/2 VPN Tunnels, Wireless N and 3G Card Support
#ZWUSG20W
List Price: $269.99
Our Price: $217.00

Click here to jump to more pricing!

Overview:


Security on a New Level - The Future Is Ahead. Stay Ahead with ZyXEL USGs.

As broadband quickly becomes a necessity in the business world facing network security threats, the breaches evolve into highly sophisticated attacks to paralyze networks and to steal sensitive information. In response to such attacks, small businesses have to meet the great challenge protecting their networks.

The ZyXEL USG 20/20W/50/100/100-PLUS/200 Series is designed for small business to provide real-time inspection and multi-layer network protection to prevent the network from threats. The USG Series embodies Stateful Packet Inspection (SPI) Firewall, Anti-Virus (AV), Intrusion Detection and Prevention (IDP), Content Filtering, Anti-Spam and VPN (IPSec/SSL/L2TP) features in one box. In addition, the USG Series not only offers complete security license to fulfill your demand but also guarantees the continuous firmware upgrades to save your cost. Incorporating comprehensive security features in the connected devices, the USG Series safeguards your organization’s customer and company records, intellectual properties as well as critical resources from both external and internal threats.

  • Robust security without sacrificing performance
  • Comprehensive support to IPv6
  • Robust hybrid VPN (IPSec/SSL/2TP)
    • Zero-configuration remote access with EASY VPN
    • Support L2TP VPN on mobile device (iPhone and Android phone)
  • ICSA Firewall, IPSec certification
  • Content filter stops malware and Web threats
  • Powerful Email security
  • Non-stop Internet access with multiple WAN and 3G backups

Benefits:


Robust security without sacrificing performance

The ZyXEL USG 20/20W/50/100/100-PLUS/200 Series is built with a powerful Integrated High-Performance Security architecture that provides real-time inspection to prevent networks from threats without sacrificing performance. Corporate networks are not only flawlessly secured but also get significant performance enhancements on productivity and efficiency since file loading, emailing and information searching applications are processed at higher speeds.

Comprehensive IPv6 support smoothly connects future-ready networks

The ZyXEL USG Series is IPv6-ready today and is certified with “IPv6 Ready” gold logo. With IPv6 feature enabled, the USG Series ensures businesses with a smooth migration path from the IPv4-based networks to the full IPv6 infrastructure. It assigns IPv6 addresses to clients and passes the IPv6 traffics through the IPv4 environment. The USG Series supports dual-stack and IPv4 tunneling (6rd and 6to4 transition tunnel) implementations for Internet connectivity to access IPv6 applications.

EASY VPN reduces operation cost and time

Establishing a VPN tunnel is a good way to build secure connections among remote offices, branch offices and partners; however it is difficult for non-technical employees, such as sales people, to use because of complicated configuration. The ZyXEL USG Series is equipped with the “EASY VPN” solution to push configuration files to the VPN clients automatically; this eliminates the configuration efforts while securing the access at the same time. In addition, the USG Series supports L2TP VPN technology on iPhones, Android phones and many other mobile devices as L2TP VPN enables employees in remote places to connect to the headquarters with easy and free access.

Content filter for safer Web surfing

The World Wide Web has become the main target for network threats, since the Internet itself is a very effective malware delivery mechanism. With threats hidden directly in contents such as cookies, add-ons and rootkits, it makes malware exceptionally difficult to detect.

The ZyXEL USG Series content filter solution provided by Blue Coat and Commtouch, the leading providers, reduces costs and extends protection by combining a comprehensive, integrated database featuring millions of URLs, IP addresses and domains. With the solution, the USG Series not only enables real-time protection that deters emerging Web threats including malware and phishing, but also blocks or monitors certain sites to maintain employee productivity.

Powerful Email security

The ZyXEL USG Series delivers industry-leading protection, powered by Commtouch, against spam, phishing and virus-laden emails. The extremely high performance of Commtouch technology comes from the unique recurrent pattern detection (RPD) mechanism that possesses its superior capability through analyzing millions of new patterns each day (24x7x365) to block all the associated messages real-time. In addition, the ZyXEL USG applies sender-based IP reputation to remove over 80% of unwanted mails and to take advantage of the zero-hour virus outbreak protection feature, which is capable of blocking or delaying suspicious messages hours before commercial anti-virus signatures are available.

More 3G card support

The ZyXEL USG Series not only supports multiple WAN ports but also 3G networks through USB or PC cards. With 3G connections, the USG Series enables load sharing or failover to deliver highly reliable network connectivity; it also supports more 3G cards with generic driver to ensure excellent interoperability. Since the customers don’t have to purchase specific 3G cards to save cost.

Features:


Firewall
  • ICSA-certified firewall
  • Routing and transparent (bridge) mode
  • Zone-based access control list
  • Stateful packet inspection
  • User-aware policy enforcement
  • SIP/H.323 NAT traversal
  • ALG supports custom ports
IPv6 Support
  • IPv6 Ready gold logo certified
  • Dual stack
  • IPv4 tunneling (6rd and 6to4 transition tunnel)
  • Host/Router/Firewall
Virtual Private Network (VPN)
  • ICSA-certified IPSec VPN
  • Algorithm: AES/3DES/DES
  • Authentication: SHA-1, SHA-2/MD5
  • Key management: Manual key/IKE
  • Perfect forward secrecy (DH groups) support 1, 2, 5
  • IPSec NAT traversal
  • Dead peer detection/relay detection
  • PKI (X.509) certificate support
  • Centralize VPN support
  • Simple wizard support
  • Auto reconnect VPN
  • VPN HA (redundant remote VPN gateways)
SSL VPN
  • Clientless secure remote access
  • Support reverse proxy mode and full tunnel mode
  • Unified policy enforcement
  • Supports two-factor authentication
  • Customizable user portal
Intrusion Detection and Prevention (IDP)*1 (USG 50/100/100-PLUS/200)
  • Routing and transparent (bridge) mode
  • Zone-based IDP inspection
  • Customizable protection profile
  • Protect over 2000 attack
  • Automatic signature updates
  • Custom signatures
  • Protocol anomaly detection and protection
  • Traffic anomaly detection and protection
  • Flooding detection and protection
  • DoS/DDoS protection
Application Intelligence*1 (Application Patrol)
  • Identify more than 600 applications, including IM, P2P, social netowrk, stream media, VoIP, and others
  • Support application granularity control
  • Manage use of Skype/MSN, GoogleTalk, Facebook at business hours, or never
  • Block all use of P2P and Games applications all the time (or during business hours)
  • Bandwidth management for P2P, Stream Media, File Transfer, or particular applications
  • Daily check and auto update application signatures
  • Real-Time statistical reports
Anti-Virus*2 (USG 50/100/100-PLUS/200)
  • Support Kaspersky and ZyXEL Anti-Virus
  • Stream-based Anti-Virus engine
  • Zone base AV protection
  • HTTP/FTP/SMTP/POP3/IMAP4 protocol support
  • Automatic signature updates
  • No file size limitation
  • Blacklist/whitelist support
Anti-Spam
  • Zone to zone protection
  • Transparently intercept mail via SMTP/POP3 protocols
  • POP3/SMTP port configurable
  • Sender-based IP reputation filter
  • Commtouch RPD query
  • Zero-hour virus outbreak protection
  • X-Header support
  • Blacklist/whitelist support
  • Support DNSBL checking
  • Spam tag support
  • Statistics report
High Availability (USG 100/200)
  • Active-Passive mode
  • Device failure detection and notification
  • Support ICMP and TCP ping check
  • Link monitoring
  • Auto-Sync configurations
Content Filtering (BlueCoat and Commtouch)*3
  • Social networking control
  • Web security—Security threat category (powered by BlueCoat)
  • URL blocking, keyword blocking
  • Profile base setting
  • Exempt list (blacklist and whitelist)
  • Blocks java applet, cookies and active X
  • Dynamic URL filtering database (powered by BlueCoat and Commtouch)
  • Unlimited user licenses support
  • Customize warning messages and redirect URL
Networking
  • Routing mode/bridge mode/mixed mode
  • Layer 2 port grouping
  • Ethernet/PPPoE
  • NAT/PAT
  • Tagged VLAN (802.1Q)
  • Virtual interface (alias interface)
  • Policy-based routing (user-aware)
  • Policy-based NAT (SNAT)
  • Dynamic routing (RIP v1/v2, OSPF)
  • DHCP client/server/relay
  • Dynamic DNS support
  • WAN Trunk more than 2 port(USG 50/100/100-PLUS/200)
  • Per host session limit
  • Guaranteed bandwidth
  • Maximum bandwidth
  • Priority-bandwidth utilization
Authentication
  • Local user database
  • Microsoft Windows active directory integrate
  • External LDAP/RADIUS user database
  • Xauth over RADIUS for IPSec VPN
  • Forced user authentication (transparent authentication)
  • IP/MAC address binding
System Management
  • Role-Based administration
  • Multiple administrator login
  • Multi-Lingual web GUI (HTTPS/HTTP)
  • Object-based configuration
  • Command line interface (console/web console/SSH/TELNET)
  • SNMP v2c (MIB-II)
  • System configuration rollback
  • Firmware upgrade via FTP/FTP-TLS/web GUI
Logging/Monitoring
  • Comprehensive local logging
  • Syslog (send to up to 4 servers)
  • E-mail alert (send to up to 2 servers)
  • Real-Time traffic monitoring
  • Built-in daily report
  • Advanced reporting (Vantage Report)
  • Centralized Network Management (Vantage CNM) manageable
Certification
  • Emission (EMC)
    • FCC Part15 (Class B)
    • CE EMC (Class B)

Application Diagram:


High performance

The ZyXEL USG Series is built with a powerful Integrated High Performance Security architecture. It provides real-time inspection to prevent networks from threats without sacrificing performance. Take the USG 50 as an example: its excellent performance delivers sufficient speed boost to meet all small business needs.

High performance

EASY VPN — zero configuration remote access

When establishing VPN tunnels, it could be quite difficult for non-technical employees to use due to the complicated configuration.

The ZyXEL USG Series is equipped with the “EASY VPN” solution to push configuration files to the VPN clients automatically; this eliminates the configuration efforts while securing the access at the same time.

EASY VPN

Content Filter stops malware and Web threats

The ZyXEL USG Content Filter enables businesses to protect their users and networks from malware and abuse such as spyware, phishing attacks and inappropriate P2P or IM usage. It keeps office computers from getting infected by dangerous malware and comprehensively protects business network environments.

Content Filter

Non-stop Internet access with multiple WAN and 3G backups

The ZyXEL USG supports not only WAN traffic load balancing to increase the overall network throughput but also flexible 3G backup as a WAN alternative to enhance network reliability.

Non-stop Internet access

Specifications:

USG 20W Front USG 20W Rear
Model USG20W
Hardware Specifications
10/100/1000 interfaces (Copper) 4 x LAN/DMZ, 1 x WAN
USB ports 1
Card slot -
System Capacity & Performance*1
SPI firewall throughput*2 (Mbps) 175
VPN throughput (AES)*3 (Mbps) 75
UTM throughput (AV+IDP)*4 (Mbps) -
Unlimited user licenses Yes
Max. sessions*5 10,000
New session rate 1,000
Max. concurrent IPSec VPN tunnels 5
Max. concurrent SSL VPN users 1
Included SSL VPN users 1
Customizable zone Yes
IPv6 support Yes
Built-in Wireless LAN
Standards 802.11 b/g/n
Antennas 2 detachable
Wi-Fi throughput*6 (Mbps) 80
Maximum output power 802.11b: 18.5 dBm @ 11 Mbps
802.11g: 15.5 dBm @ 54 Mbps
802.11n: 15.5 dBm @ 20 Mbps
Radio sensitivity 802.11b: ≤ -83 dBm @ 11 Mbps
802.11g: ≤ -70 dBm @ 54 Mbps
802.11n: ≤ -64 dBm @ 20 Mbps
Power Requirement
Input voltage 100 - 240 V AC, 50/60 Hz, 1.5 A
Power rating 16 W Max
Power consumption (watt) 16
Physical Specifications
Item Dimensions (WxDxH)(mm/in.) 216 x 140 x 33/8.50 x 5.51 x 1.30
Weight (kg/lb.) 0.42/0.93
Packing Dimensions (WxDxH)(mm/in.) 305 x 205 x 106/12.01 x 8.07 x 4.17
Weight (kg/lb.) 1.1/2.43
Environmental Specifications
Operating temperature 0°C to 40°C/32°F to 104°F
Storage temperature -30°C to 60°C/-22°F to 140°F
Operating humidity 5% to 90% (non-condensing)
MTBF (hr) 301,502
Note:
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: UTM (AV and IDP) throughput measured using the industry standard IXIA IxLoad testing tool (1,460-byte HTTP packets).
*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*6: Wireless throughput measured using the industry standard IXIA IxLoad testing tool (802.11n, 20 MHz, WPA2-PSK).

Model Comparison:


Model Name USG 20 USG 20W USG 50 USG 100 USG 100 PLUS USG 200
Product Images USG 20 USG 20W USG 50 USG 100 USG 100 PLUS USG 200
Hardware Specifications
10/100/1000 Interfaces (Copper) 4 x LAN/DMZ, 1 x WAN 4 x LAN/DMZ, 1 x WAN 4 x LAN/DMZ, 2 x WAN 5 x LAN/DMZ, 2 x WAN 4 x LAN/DMZ, 2 x WAN 5 x LAN/DMZ, 2 x WAN
USB ports 1 1 2 2 2 2
Card slot - - - 1 - 1
System Capacity & Performance*1
SPI firewall throughput*2 (Mbps) 175 175 225 225 600 250
VPN throughput (AES)*3 (Mbps) 75 75 90 90 150 90
UTM throughput (AV+IDP)*4 (Mbps) - - 30 30 30 40
Unlimited user licenses Yes Yes Yes Yes Yes Yes
Max. sessions*5 10,000 10,000 10,000 20,000 40,000 40,000
New session rate 1,000 1,000 1,200 1,200 1,200 1,200
Max. concurrent IPSec VPN tunnels 5 5 10 50 50 100
Max. concurrent SSL VPN users 1 1 5 25 25 25
Included SSL VPN users 1 1 2 2 2 2
Customizable zone Yes Yes Yes Yes Yes Yes
IPv6 support Yes Yes Yes Yes Yes Yes
Built-in Wireless LAN
Standards - 802.11 b/g/n - - - -
Antennas - 2 detachable - - - -
Wi-Fi throughput*6 (Mbps) - 80 - - - -
Maximum output power - 802.11b: 18.5 dBm @ 11 Mbps
802.11g: 15.5 dBm @ 54 Mbps
802.11n: 15.5 dBm @ 20 Mbps
- - - -
Radio sensitivity - 802.11b: ≤ -83 dBm @ 11 Mbps
802.11g: ≤ -70 dBm @ 54 Mbps
802.11n: ≤ -64 dBm @ 20 Mbps
- - - -
Power Requirement
Input voltage 100 - 240 V AC, 50/60 Hz, 1.5 A 100 - 240 V AC, 50/60 Hz, 1.5 A 100 - 240 V AC, 50/60 Hz, 1.5 A 100 - 240 V AC, 50/60 Hz, 2 A 100 - 240 V AC, 50/60 Hz, 1.5 A 100 - 240 V AC, 50/60 Hz, 2 A
Power rating 15 W Max. 16 W Max. 17 W Max. 20 W Max. 17 W Max. 20 W Max.
Power consumption (watt) 15 16 17 20 17 20
Physical Specifications
Item Dimensions
(WxDxH)(mm/in.)
216 x 140 x 33/8.50 x 5.51 x 1.30 216 x 140 x 33/8.50 x 5.51 x 1.30 242 x 167 x 35.5/9.53 x 6.57 x 1.40 242 x 175 x 35.5/9.53 x 6.89 x 1.40 242 x 167 x 35.5/9.53 x 6.57 x 1.40 242 x 175 x 35.5/9.53 x 6.89 x 1.40
Weight (kg/lb.) 0.38/0.84 0.42/0.93 1.2/2.65 1.2/2.65 1.2/2.65 1.2/2.65
Packing Dimensions
(WxDxH)(mm/in.)
305 x 205 x 106/12.01 x 8.07 x 4.17 305 x 205 x 106/12.01 x 8.07 x 4.17 375 x 238 x 108/14.76 x 9.37 x 4.25 296 x 158 x 241/11.65 x 6.22 x 9.49 375 x 238 x 108/14.76 x 9.37 x 4.25 296 x 158 x 241/11.65 x 6.22 x 9.49
Weight (kg/lb.) 1/2.20 1.1/2.43 2.4/5.29 2.7/5.95 2.4/5.29 3/6.61
Environmental Specifications
Operating temperature 0°C to 40°C/32°F to 104°F
Storage temperature -30°C to 60°C/-22°F to 140°F
Operating humidity 5% to 90% (non-condensing)
MTBF (hr) 323,269 301,502 871,265 323,823 871,265 323,823
Note:
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: UTM (AV and IDP) throughput measured using the industry standard IXIA IxLoad testing tool (1,460-byte HTTP packets).
*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*6: Wireless throughput measured using the industry standard IXIA IxLoad testing tool (802.11n, 20 MHz, WPA2-PSK).

Documentation:

Download the ZyXEL USG 20W Datasheet (PDF).

Pricing Notes:

ZyXEL Products
ZyXEL USG 20W
ZyXEL USG 20W
Unified Security Gateway w/2 VPN Tunnels, Wireless N and 3G Card Support
#ZWUSG20W
List Price: $269.99
Our Price: $217.00
ZyXEL USG 20W Subscriptions
ZyXEL USG20W iCard Content Filtering 1 Year for USG20W (BlueCoat)
#ICCF1YUSG20W
List Price: $79.99
Our Price: $67.00
VPN IPSec VPN Client
ZyXEL ZyWALL IPSec VPN Client
- Windows XP 32-bit, Server 2003 32-bit, Server 2008 32/64-bit, Vista 32/64-bit, 7 32/64-bit, 8 32/64-bit Supported VPN Client - 1 Client
#ZYWALLVPN
List Price: $64.99
Our Price: $55.00