ZyXEL Communications ZyWALL USG 20 Brochure & Specs page 5

Features
Firewall
• ICSA-certified firewall
• Routing and transparent (bridge) mode
• Zone-based access control list
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG supports custom ports
IPv6 Support
• IPv6 Ready gold logo certified
• Dual stack
• IPv4 tunneling (6rd and 6to4 transition tunnel)
• Host/Router/Firewall
Virtual Private Network (VPN)
• ICSA-certified IPSec VPN
• Algorithm: AES/3DES/DES
• Authentication: SHA-1/MD5
• Key management: Manual key/IKE
• Perfect forward secrecy (DH groups)
support 1, 2, 5
• IPSec NAT traversal
• Dead peer detection/relay detection
• PKI (X.509) certificate support
• Centralize VPN support
• Simple wizard support
• Auto reconnect VPN
• VPN HA (redundant remote VPN gateways)
SSL VPN
• Clientless secure remote access
• Support reverse proxy mode and full tunnel
mode
• Unified policy enforcement
• Supports two-factor authentication
• Customizable user portal
Intrusion Detection and Prevention
*1
(IDP) (ZyWALL 50/100/200)
• Routing and transparent (bridge) mode
• Zone-based IDP inspection
• Customizable protection profile
• Protect over 2000 attack
• Automatic signature updates
• Custom signatures
• Protocol anomaly detection and protection
• Traffic anomaly detection and protection
• Flooding detection and protection
• DoS/DDoS protection
*2
Anti-Virus (ZyWALL 50/100/200)
• Support Kaspersky and ZyXEL Anti-Virus
• Stream-based Anti-Virus engine
• Zone base AV protection
• HTTP/FTP/SMTP/POP3/IMAP4 protocol support
• Automatic signature updates
• No file size limitation
• Blacklist/whitelist support
*1
Application Patrol (ZyWALL
50/100/200)
• Application, IM/P2P, stream base media, VoIP
granular access control
• Detail access control of IM (chat, file transfer,
video)
• Application and IM/P2P bandwidth control
• User authentication support
• IM/P2P signature auto update
• Support more than 15 catalogs IM and P2P
• Real-Time statistical reports
• Maximum/guaranteed bandwidth
Anti-Spam
• Zone to zone protection
• Transparently intercept mail via SMTP/POP3
protocols
• POP3/SMTP port configurable
• Sender-based IP Reputation Filter
• Commtouch RPD Query
• Zero-hour Virus Outbreak Protection
• X-Header Support
• Blacklist/whitelist support
• Support DNSBL checking
• Spam tag support
• Statistics report
5
ZyWALL USG ZyWALL USG
20/20W/50/ 20/20W/50/
100/200 100/200
Unified Security Gateway Unified Security Gateway
High Availability (ZyWALL 100/200)
• Active-Passive mode
• Device failure detection and notification
• Support ICMP and TCP ping check
• Link monitoring
• Auto-Sync configurations
Content Filtering (BlueCoat and
Commtouch) *3
• Social networking control
• Web security—Security threat category
(powered by BlueCoat)
• URL blocking, keyword blocking
• Profile base setting
• Exempt list (blacklist and whitelist)
• Blocks java applet, cookies and active X
• Dynamic URL filtering database (powered by
BlueCoat and Commtouch)
• Unlimited user licenses support
• Customize warning messages and redirect URL
Networking
• Routing mode/bridge mode/mixed mode
• Layer 2 port grouping
• Ethernet/PPPoE
• NAT/PAT
• Tagged VLAN (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIP v1/v2, OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN Trunk more than 2 port
(ZyWALL 50/100/200)
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization