Zyxel ZyWALL USG 1000 Firewall 19", 5x Gigabit Ethernet, AV,IDP, Hybrid VPN(50x SSL/1000x IPSec VPN)

Zyxel ZyWALL USG 1000 Firewall 19", 5x Gigabit Ethernet, AV,IDP, Hybrid VPN(50x SSL/1000x IPSec VPN)

De Zyxel ZyWALL USG 1000 is de meest uitgebreide firewall van Zyxel van dit moment. De firewall is uitgerust met een uitgebreid werkgeheugen wat zorgt voor unieke prestaties. De SSL VPN server (50x SSL VPN) maken de USG 1000 tot de beste keuze voor bedrijven met veel mobiele (thuis)werkers.

De beveiliging van uw bedrijfsnetwerk is nu heel solide regelbaar. Maakt u zich vanaf heden geen zorgen meer over de betrouwbaarheid van uw netwerk. De Zyxel ZyWALL USG 1000 is hét beveiligingsproduct voor ondernemingen waar digitale veiligheid een key issue is.

Unlimited users UTM upgrade mogelijkheden Multiple WAN Loadbalancing 5 Gigabit poorten 1000 IPSec VPN 2 SSL VPN tunnels (max.50) Unieke prestaties

Bedrijven worden steeds afhankelijker van hun digitale netwerk. Dit komt niet alleen tot uiting in de hoeveelheid informatie die digitaal beschikbaar is, maar ook de “gevoeligheid” van deze informatie. Vaak wordt de beveiliging van dit netwerk over het hoofd gezien, terwijl het essentieel is dat deze informatie “niet op straat komt te liggen”.

Routershop speelt in op deze tendens door de introductie van de Zyxel ZyWALL USG 1000. Dit beschermt niet alleen uw netwerk voor aanvallen van buitenaf, maar helpt u ook bij het beschermen van het interne netwerk. De Zyxel ZyWALL USG 1000 is een geavanceerde Firewall voor bedrijven die grote eisen stellen aan de beveiliging van hun netwerk.
Dit alles komt tot uiting in de uitgebreide mogelijkheden van de Zyxel ZyWALL USG 1000, namelijk: SPI firewall doorvoer van 300Mbps, VPN AES/3DES doorvoer van 100Mbps, IDP doorvoer van 100 Mbps en de mogelijkheid van 1.000 VPN tunnels tegelijkertijd.

De ZyWALL USG 1000 is ook in combinatie met Unified Threat Management(UTM) beschikbaar. Neem hiervoor even contact met ons op.

Omschrijving

High-Performance VPN Concentrator Integrating Both IPSec VPN and SSL VPN
ZyWALL USG 1000 is a Unified Security Gateway engineered to provide a variety of security services on top of a robust, hardware-accelerated platform.
By integrating both IPSec VPN and SSL VPN technologies, the ZyWALL USG 1000 allows organizations to establish Virtual Private Network (VPN) connections amongst multiple locations such as remote branch offices, business partner sites and even a remote teleworker getting connected in a potentially unsafe hotel hotspot.
Communication channels are securely encrypted so that information leakage / data theft can be mitigated when transmitting confidential information over insecure networks, such as the Internet.
The Hub and Spoke VPN feature is capable of reducing policy management overhead dramatically in a complex, multi-site corporate network infrastructure.

Proactive Network Protection against Blended Threats
By integrating cutting-edge technologies on a robust platform, the ZyWALL USG 1000 is competent to provide multi-layered protection for security-aware businesses.
The gateway anti-virus security service of the ZyWALL USG 1000 is powered by Kaspersky Labs, whose technology boasts the world's shortest response time against emerging viruses and spyware. As a result, it helps stopping blended threats at the network edge while keeping viruses/spyware out of corporate networks. With a SecuASIC co-processor built-in, the ZyWALL USG 1000 can deliver robust and reliable performance under real-world networking loads.
With the embedded signature-based IDP (Intrusion Detection and Prevention) engine, the ZyWALL USG 1000 performs L7 packet inspection for protocol / traffic anomaly or matched patterns. Thus, the ZyWALL USG 1000 provides comprehensive Intrusion Detection and Prevention capability to proactively detect and block potential worms, viruses, Trojans and VoIP threats, etc.
In response to the ever-evolving threats, up-to-date signatures / patterns are automatically downloaded from rock-solid ZSDN infrastructure and installed on your ZyWALL USG 1000.

Application Patrol to Manage the Use of IM/P2P Applications
The ZyWALL USG 1000 is specially crafted to manage the use of IM/P2P applications in modern networking environment without hassles. Armed with AppPatrol, a central dashboard for managing various types of IM/P2P applications, security staff can easily create fine-grained access policy based on ever-changing security needs: identifying and restricting different access levels of prevailing IM/P2P protocols, restricting time of access for different groups of users, enforcing bandwidth quota against certain types of P2P application and prioritizing VoIP traffics to ensure best call quality over slow WAN ISP links. Altogether, the ZyWALL USG 1000 is an ideal solution to solve the dilemma in terms of productivity and security.

User-Aware Policy Engine Enables Access Granularity
In addition to basic access control capabilities, the intelligent user-aware policy engine on the ZyWALL USG 1000 is designed to make packet-forwarding decisions based on multiple criteria (such as user ID, user group, time of access and network quota, etc.). Furthermore, security staff can apply access policies against a variety of security features such as VPN, Content Filter and Application Patrol.
In conjunction with VLAN and custom security zones, corporate security policies can be effectively enforced to prevent unauthorized access to network resources.

Bandwidth Management Ensures Quality of Service
The ZyWALL USG 1000 provides bandwidth management features for traffic prioritization to guarantee or restrict the bandwidth usage per interface / protocol. Security staff can allocate bandwidth for a variety of applications or computer hosts on the corporate network, regardless of the direction of the connection. For example, it's possible to assign higher priority and larger bandwidth to time-critical applications such as VoIP and video conferencing for quality transmission services. In addition, ZyWALL USG 1000 allows you to keep track of bandwidth usage with comprehensive statistical reports.

VoIP Security: Protecting the Converged Networks
Attracted the benefits, more and more businesses are deploying VoIP applications on their networks. Along with the transition to VoIP also comes with security risks and voice quality issues.
As a VoIP-friendly firewall, the ZyWALL USG 1000 reduces the security risks associated with the adoption of VoIP by offering the SIP/H.323 ALG feature to dynamically open only the required ports during the VoIP calls; once the call is complete, the opened ports are automatically closed to prevent port sniffing. The IDP feature can detect and prevent attacks usually associated VoIP deployment. Ultimately, by constructing VoIP traffic over VPNs with traffic prioritization, security staff could mitigate security breaches while optimizing call quality over existing ISP links.

High Availability Features Guarantee Non-Stop Operations for Mission-Critical Applications
With high availability features, the ZyWALL USG 1000 helps the security staff to easily set up a highly reliable and secure network infrastructure for your business. To minimize the impact of single-point of failures, the ZyWALL USG 1000 supports device HA (High Availability) to assure network availability should any device failure happen.
On the WAN side, the ZyWALL USG 1000 can connect multiple ISP links to ensure Internet availability while a single ISP link may be unreliable. The multiple WAN load balancing features optimizes bandwidth usage over each ISP link.

Specificaties
Performance and Capacity

• SPI firewall throughput: 350Mbps
• VPN AES/3DES throughput: 150Mbps
• IDP/UTM throughput: 100Mbps
• Concurrent sessions: 500,000
• New session rate: 7,000 (sessions/sec)
• Simultaneous VPN tunnels: 1,000

Security and Authentication

• DoS/DDoS prevention
• ALG supports SIP/H.323, FTP, IPSec, L2TP, MSN, PPTP and RTP
• Access granularity: ip/port/location/user/group/time/network quota
• Customizable security zone
• Force user authentication (transparent authentication): user-aware access policy management
• User database: RADIUS, LDAP, Microsoft Active Directory and local user database
• Application Patrol: portless application management
• IM/P2P application management: blocking, scheduling, rate-limiting bandwidth
• Intrusion Detection and Prevention (inline mode or bridge mode)
• Zone-based, customizable protection profile
• Traffic anomaly for scan detection and flood detection
• Protocol anomaly: HTTP/ICMP/TCP/UDP
• Malformed packet protection
• Signature-based L3-L7 deep packet inspection
• Automatic update for latest signatures
• Custom signature supported
• VoIP over VPN
• URL blocking, keyword blocking, exempt list
• Blocks Java Applet, cookies, Active X
• URL filtering by querying dynamic database
• Gateway Anti-Virus scanning*

VPN

• Route-based IPSec VPN
• Supports Hub and Spoke VPN
• Hardware-accelerated encryption: AES, 3DES, DES
• Authentication: MD5, SHA-1
• Key management: Manual key/IKE
• PKI: PKCS #7, #10&#12
• Certificate enrollment: CMP, SCEP
• Perfect forward secrecy: DH Group 1, 2 and 5
• NAT traversal
• NAT over IPSec
• DPD (Dead Peer Detection) and replay detection
• Split DNS tunnel
• Xauth authentication: RADIUS, LDAP, Microsoft Active Directory and local user database
• Integrated SSL VPN*

Networking

• Routing mode and bridge mode can co-exist
• Port grouping (L2)
• Supports 802.1q tagged VLAN
• Encapsulation: Ethernet/PPPoE/PPTP
• Supports virtual interface (alias interface)
• Policy-based routing
• NAT: SNAT, DNAT
• Supports dynamic routing protocols: RIP v1/v2 and OSPF
• IP Multicasting
• DHCP client/server/relay
• Built-in DNS server
• Dynamic DNS
• NTP client
• HTTP redirect
• Policy-based traffic shaping
• Maximum bandwidth
• Bandwidth priority

Redundancy

• Device HA (High Availability)
• Device failure detection
• Auto-sync configurations
• Supports multiple ISP links
• Link failure detection
• Multiple WAN load balancing
• VPN High Availability supports redundant remote VPN gateways

Management

• Intuitive Web-based GUI: https/http
• Dashboard for system status monitoring
• Role-based administration: supports multiple privileges and simultaneous logins
• Object-based architecture
• Text-based configuration file
• Full-function CLI: Accessible from console/WebConsole/ssh/telnet
• Product registration and service activation from within myZyXEL.com
• Centralized&comprehensive local logging
• Log exportable: syslog (up to 4 external syslog servers)
• SNMP v2c with MIB-II
• E-mail alert
• Real-time monitoring: Traffic snapshot and SA monitor
• Firmware upgrade: FTP, FTP-TLS, WebGUI
• System configuration rollback
• Supports Vantage Report 3.0 for advanced reporting
• Supports Vantage CNM 3.0 for centralized management

Hardware Specifications

• Memory size: 512MB system memory, 512MB onboard flash
• Five Gigabit Ethernet interfaces, RJ-45 connector with LED indicator
• Supports auto-negotiation and auto MDI/MDI-X
• RS-232, DB9F console port
• RS-232, DB9M dial backup
• LED Indicator: PWR, SYS, ACT, HDD
• Power switch and reset button
• CardBus expansion slot
• Mini-PCI expansion slot
• USB: USB 2.0 x 2 (future)
• HDD: Optional IDE, 2.5” (future)

Physical Specifications

• Rack-mountable, 19-inch
• Dimension: 430.7 (W) x 292.0 (D) x 43.5 (H) mm
• Weight: 4,700g

Power Requirement

• Input voltage: 100-240VAC, 50/60Hz, 1A max
• Power rating: 80 Watt max

snowboard

Specificaties

Reviews