Big Security for Small Businesses -Unified Security Gateway ZyWALL USG20
The ZyWALL USG20 is a Unified Security Gateway designed to provide complete, enterprise-level advanced security solutions to Small and Home Office networks, recommended for up to 5 PC users. Its flexible configuration is designed to help network administrators efficiently set up, manage, and enforce network security policies.
The USG20’s web-content filtering engine goes a step beyond simple URL blocking. It allows users to manage the level of content filtering, giving complete control over what types of websites that can be accessed on the network. Administrators can choose between BlueCoat and Commtouch web filtering services.
To further defend networks and provide greater control and ease of use, the USG20 also employs an anti-spam service to flag and discard commercial and unwanted e-mail messages, protecting important information from getting lost in the clutter.
Application Patrol gives you detailed control over the applications allowed to run on your network, while the built-in 150Mbps throughput firewall and web-content filtering protect your network from DoS attacks, phishing, and other threats.
Built with powerful Integrated High Performance Security architecture designed for Gigabit connections, a VPN throughput of 75Mbps, up to 6,000 max sessions and 5 concurrent IPSec VPN tunnels, the USG20 has the power to monitor and protect your network without sacrificing network performance.
- Robust hybrid VPN (IPSec, SSL, and L2TP*)
- Easily connect with mobile devices
- IPv6 Support
- QoS options for latency-sensitive applications
- Compatible with Vantage Reporting and Management software
- 30day trial of the antivirus software
* Enabled by ZLD3.0 firmware upgrade
Flexible, secure VPN options
The USG20 is designed to allow secure VPN connections no matter what device or network settings are being used. IPSec VPN support allows secure connections to branch offices, partners, and headquarters; road warriors and telecommuters can use SSL to securely access the company network without having to install VPN software.
Easy Mobile Access
The new ZLD3.0 firmware upgrade enables L2TP support on all USG devices, making it easy for Android, iOS, and other mobile devices to establish VPN tunnels to remote networks directly from their native settings.
With the advent of the new ZLD3.0 firmware, the USG20 is fully compatible with both IPv4 and IPv6 networks. Full backward compatibility allows VPN tunnels to be created between networks newly upgraded to IPv6 and older IPv4 networks, ensuring a seamless transition and painless network upgrades.
The USG20’s network optimization functionality makes it far more than a network security device. Bandwidth management options let administrators prioritize latency-sensitive applications like VoIP and videoconferencing, ensuring high-quality connections without lag or performance issues.
Vantage Management and Reporting
The USG20 supports the use of ZyXEL’s Vantage CNM and Vantage Reporting software, allowing centralized management and monitoring of multiple ZyWALL devices on a single network.
Vantage Reporting offers a comprehensive set of real-time and historical reports including firewall attacks, bandwidth usage, Website usage, and more - all organized into an automated, easy-to-read format that can be viewed from anywhere. Administrators can use this data to easily identify security problems and their causes and take prompt action.
Vantage CNM provides a suite of diagnostic and management tools that allows management of multiple ZyWALL devices from a centralized interface, reducing the time, cost, and complexity involved in VPN and security management. VPN monitoring allows network administrators to actively troubleshoot VPN problems as they occur, while centralized configuration of UTM functionality allows network administrators to manage license subscriptions, update devices, and isolate and repair security problems across all ZyWALL devices on a network.
Powerful Email security
The ZyWALL USG Series delivers industry-leading email protection against spam, phishing and virus-laden emails, powered by Commtouch. The high performance Commtouch technology comes from the unique recurrent pattern detection (RPD) mechanism that scours millions of new patterns each day (24x7x365) to block spam messages in real-time. In addition, the ZyWALL USG applies sender-based IP reputations to remove over 80% of unwanted mails and to offer zero-hour virus outbreak protection, capable of blocking or delaying suspicious messages hours before commercial anti-virus signatures are available.
ZyWALL USG Series Firewall Comparison
|Model ||USG20W ||USG20 ||USG50 ||USG100 ||USG200 ||USG300 ||USG1000 ||USG2000 |
| || || || || || || || || |
|Recommended number of PC Users ||1-5 ||1-5 ||1-10 ||10-25 ||25-50 ||50-75 ||75-200 ||200-500 |
|Unlimited User (No Per Node Limitation) || || || || || || || || |
|High Performance multi-layer threat Protection || || || || || || || || |
|Wireless || || || || || || || || |
|10/100/1000 Interfaces (ALL GbE Copper) ||4x LAN/DMZ, 1x WAN ||4x LAN/DMZ, 1x WAN ||4x LAN/DMZ, 2x WAN ||5x LAN/DMZ, 2x WAN ||5x LAN/DMZ, 2x WAN |
|7x Configurable ||5x Configurable ||6x Configurable |
System Capacity and Performance
|SPI Firewall Throughput (Mbps) (Largest Packet Size) ||150 ||150 ||180 ||180 ||250 ||300 ||400 ||2000 |
|VPN Throughput (AES)(Mbps) |
(Largest Packet Size)
|75 ||75 ||90 ||90 ||90 ||130 ||180 ||600 |
|UTM Throughput (AV+IDP) (Mbps)(Largest Packet Size) || || ||24 ||30 ||40 ||80 ||100 ||400 |
|Max Sessions ||6000 ||6000 ||10000 ||20000 ||40000 ||60000 ||500000 ||1000000 |
|Max Concurrent IPSec VPN Tunnels ||5 ||5 ||5 ||50 ||100 ||200 ||1000 ||2000 |
|Max Concurrent SSL VPN Tunnels ||1 ||1 ||5 ||5 ||10 ||25 ||250 ||750 |
|Included SSL VPN Users ||1 ||1 ||2 ||2 ||2 ||2 ||5 ||5 |
|VPN Support ||IPSec / SSL ||IPSec / SSL ||IPSec / SSL ||IPSec / SSL/L2TP ||IPSec / SSL/L2TP ||IPSec / SSL/L2TP ||IPSec / SSL/L2TP ||IPSec / SSL/L2TP |
|Multiple WAN Load Balance / Fail Over || || || || || || || || |
|iCard Antispam (Commtouch) 1 Year ||ICAS1YUSG20WC ||ICAS1YUSG20C ||ICAS1YUSG50C ||ICAS1YUSG100C ||ICAS1YUSG200C ||ICAS1YUSG300C ||ICAS1YUSG1000C ||ICAS1YUSG2000C |
|Anti-Virus (ZyXEL or Kaspersky) 1 Year || || || |
|IDP (ZyXEL) 1 Year || || ||ICID1YUSG50 ||ICID1YUSG100 ||ICID1YUSG200 ||ICID1YUSG300 ||ICID1YUSG1000 ||ICID1YUSG2000 |
|iCard Content Filtering (BlueCoat or Commtouch) 1 Year || |
|Total Security Service Kit(1 Year Kaspersky AV, 1 Year ZyXEL IDP, 1 Year BlueCoat CF bundle) || || ||ICTS1YUSG50 ||ICTS1YUSG100 ||ICTS1YUSG200 ||ICTS1YUSG300 ||ICTS1YUSG1000 ||ICTS1YUSG2000 |
|iCard SSL Upgrade Licenses(One Time) || || ||2-5 Users SSL2TO5USG50 ||2-5 Users SSL2TO5USG100 ||2-10 Users |
2-10 Users SSL2TO10USG300
5-250 Users SSL5TO250USG2000