Other features
| Authentication method |
Internal User Database/Microsoft Windows Active Directory/External LDAP / RADIUS User Database/ZyWALL OTP (One Time Password)/Force User Authentication (Transparent Authentication) |
| Interface |
GbE x 5 (RJ-45, with LED) |
| Special features |
Gateway Anti-Virus:\n- Stream-Based Gateway Anti-Virus Powered by Kaspersky Labs\n- Covers Top Active Viruses in the Wild List\n- Scans HTTP/FTP/SMTP/POP3/IMAP4\n- Automatic Signature Update\n- No File Size Limitation\n- Blacklist/Whitelist |
| Safety |
CSA International (ANS/UL60950-1, CSA60950-1, EN60950-1, IEC60950-1) |
| Electromagnetic compatibility |
FCC Part 15 Class A, CE-EMC Class A, C-Tick Class A, VCCI Class A |
| Networking features |
Ethernet / PPPoE / PPTP/Tagged VLAN (802.1Q) |
Security
| VPN support |
IPSec VPN: \n- Encryptions (AES / 3DES / DES); \n- Authentication (SHA-1 / MD5); \n- Key Management (Manual Key / IKE); \n- Perfect Forward Secrecy (DH Group 1 / 2 / 5); \n- NAT over IPSec; \n- Dead Peer Detection / Replay Detection; \n- PKI (X.509);\n- Certificate Enrollment (CMP / SCEP); \n- Xauth Authentication; \n- L2TP Over IPSec Support.\nSSL VPN: \n- Clientless Secure Remote Access (Reverse Proxy Mode); \n- SecuExtender (Full Tunnel Mode); \n- Unified Policy Enforcement; \n- Supports Two Factor Authentication; \n- Customizable User Portal. |
| Content filtering |
URL Blocking, Keyword Blocking, Exempt List (Blacklist and Whitelist), Blocks Java Applet, Cookies, Active X, Dynamic URL Filtering Database (BlueCoat) |
Data transmission
| VPN throughput |
150 Mbit/s |
| Firewall throughput |
350 Mbit/s |
Networking
| Number of VPN connections |
20000 |
| VPN tunnels quantity |
1000 |
Protocols
| Management protocols |
HTTP, HTTPS, Console, Telnet, SSH, Web GUI, TFTP/FTP/SFTP |
Additionally
| Wireless technologies |
Wired |
ZyWALL USG 1000 - Internet Security Appliance
High-Performance VPN Concentrator Integrating Both IPSec VPN and SSL VPN
ZyWALL USG 1000 is a Unified Security Gateway engineered to provide a variety of security services on top of a robust, hardware-accelerated platform.
By integrating both IPSec VPN and SSL VPN technologies, the ZyWALL USG 1000 allows organizations to establish Virtual Private Network (VPN) connections amongst multiple locations such as remote branch offices, business partner sites and even a remote teleworker getting connected in a potentially unsafe hotel hotspot.
Communication channels are securely encrypted so that information leakage / data theft can be mitigated when transmitting confidential information over insecure networks, such as the Internet.
The Hub and Spoke VPN feature is capable of reducing policy management overhead dramatically in a complex, multi-site corporate network infrastructure.
Proactive Network Protection against Blended Threats
By integrating cutting-edge technologies on a robust platform, the ZyWALL USG 1000 is competent to provide multi-layered protection for security-aware businesses.
The gateway anti-virus security service of the ZyWALL USG 1000 is powered by Kaspersky Labs, whose technology boasts the world's shortest response time against emerging viruses and spyware. As a result, it helps stopping blended threats at the network edge while keeping viruses/spyware out of corporate networks. With a SecuASIC co-processor built-in, the ZyWALL USG 1000 can deliver robust and reliable performance under real-world networking loads.
With the embedded signature-based IDP (Intrusion Detection and Prevention) engine, the ZyWALL USG 1000 performs L7 packet inspection for protocol / traffic anomaly or matched patterns. Thus, the ZyWALL USG 1000 provides comprehensive Intrusion Detection and Prevention capability to proactively detect and block potential worms, viruses, Trojans and VoIP threats, etc.
In response to the ever-evolving threats, up-to-date signatures / patterns are automatically downloaded from rock-solid ZSDN infrastructure and installed on your ZyWALL USG 1000.
Application Patrol to Manage the Use of IM/P2P Applications
The ZyWALL USG 1000 is specially crafted to manage the use of IM/P2P applications in modern networking environment without hassles. Armed with AppPatrol, a central dashboard for managing various types of IM/P2P applications, security staff can easily create fine-grained access policy based on ever-changing security needs: identifying and restricting different access levels of prevailing IM/P2P protocols, restricting time of access for different groups of users, enforcing bandwidth quota against certain types of P2P application and prioritizing VoIP traffics to ensure best call quality over slow WAN ISP links. Altogether, the ZyWALL USG 1000 is an ideal solution to solve the dilemma in terms of productivity and security.
User-Aware Policy Engine Enables Access Granularity
In addition to basic access control capabilities, the intelligent user-aware policy engine on the ZyWALL USG 1000 is designed to make packet-forwarding decisions based on multiple criteria (such as user ID, user group, time of access and network quota, etc.). Furthermore, security staff can apply access policies against a variety of security features such as VPN, Content Filter and Application Patrol.
In conjunction with VLAN and custom security zones, corporate security policies can be effectively enforced to prevent unauthorized access to network resources.
Bandwidth Management Ensures Quality of Service
The ZyWALL USG
