ZyXEL ZyWALL USG100 Unified Security Gateway Firewall w/50 VPN Tunnels, SSL VPN, 7 Gigabit Ports, and High Availability

by ZyXEL

Product Details

• Product Dimensions: 12 x 9.8 x 6.1 inches ; 6 pounds
• Shipping Weight: 6.2 pounds (View shipping rates and policies)
• Shipping: This item is also available for shipping to select countries outside the U.S.
• ASIN: B001AZP6O4
• Item model number: ZWUSG100
• Average Customer Review: 3.9 out of 5 stars  See all reviews (26 customer reviews)
• Amazon Best Sellers Rank: #13,894 in Electronics (See Top 100 in Electronics)
• Date first available at Amazon.com: June 9, 2008

Product Description

Style: ZWUSG100

From the Manufacturer

Unified Security Gateway ZyWALL USG100

The Internet can be a dangerous place. It seems new threats to network security and employee efficiency emerge with each passing day. Malware can incapacitate workstations, and DoS attacks can bring your entire network screeching to a halt. Even applications such as P2P, IM, and Social networks can eat bandwidth and cripple employee productivity.

The ZyWALL USG100 is here to solve those problems.

With the USG100's Multi-layer threat protection, you can rest assured that your network is secure. ZyWALL's Application Patrol gives you detailed control over the applications allowed to run on your network, while the built-in 180Mbps throughput firewall and Kaspersky anti-virus protect your network from malware, DoS attacks, phishing, Trojan horses, and other threats.

Built with powerful Integrated High Performance Security architecture designed for Gigabit connections, a VPN Throughput of 90Mbps, a UTM throughput of 30Mbps, up to 20,000 max sessions and 50 concurrent IPSec VPN tunnels, the USG100 has the power to monitor and protect your network without sacrificing network performance. And with a 5 year, industry-leading hardware warranty, you'll be able to count on your USG100 to watch over your network's safety well into the future.

With 5x Gigabit LAN/DMZ and 2x Gigabit WAN interfaces you can load balance and failover multiple ISP links, allowing you to safeguard even the largest high-bandwidth environments.

With the ZyWALL USG100, you can rest easy knowing that your network is safe, secure, and wholly under your control.

• Comprehensive threat protection with firewall, VPN, anti-virus, content filtering, anti-spam, Intrusion detection and prevention to secure front line threats.
• User-aware policy engine can set bandwidth or network access based on user login.
• Network resilience with multiple WANs, 3G cellular support, and device high availability
• 5-Year industry leading hardware warranty to support ZyXEL's commitment to quality and customer satisfaction
  

---

The ZyWALL USG 100 is a Unified Security Gateway, integrated with complete, enterprise-level and advanced security solutions designed for Small/Medium Business (SMB) recommended for up to 25 PC users. Its flexible configuration helps network administrators set up the network and enforce security policies more efficiently. With certified by ICSA SPI Firewall and IPSec VPN, the ZyWALL USG 100's security features also include IPSec VPN, SSL VPN, Firewall, Content Filter, Anti-Virus and IDP (Intrusion Detection and Prevention) for maximum network security protection. It also provides bandwidth management, for QoS of VoIP or mission critical applications, Multiple-WAN Failover and Load Balancing. Moreover, IPSec VPN and SSL VPN design for telecommuters and home workers can access data more easily and safely at home. Remote access with SSL VPN requires only a standard web browser. ZyWALL USG 100's excellent throughput is the key to implement features of an enterprise level to provide a full-time, non-stop and secure service.

• The ICSA-certified, stateful inspection firewall protects the network and vital Internet services like e-mail, Web browsing, servers, and file transfers.
• For protection against viruses and spyware, choose the ICSA-certified ZyXEL Anti-Virus or one powered by Kaspersky Labs.
• The IDP engine protects your network from intrusions such as Trojans and worms.
• Use IPSec VPN to secure connections to branch offices, partners, and headquarters. Road warriors and telecommuters can use SSL or L2TP VPN to securely access the company network without having to install VPN software.
• Application Patrol controls who can use what IM and P2P applications like MSN and BitTorrent, and even who can use specific features within an application.
• The anti-spam feature can tag or discard unsolicited commercial or junk e-mail.
• User-aware configuration lets you control access to applications or resources and apply security scans by user or user group.
• Bandwidth management lets you prioritize time-sensitive applications like VoIP and video conferencing.
• Multiple WAN ports let you use multiple ISP links and load balancing to enhance traffic. Throughput, optimize bandwidth usage, and help ensure continuous uptime if a link goes down.
• Along with your regular user name and password, use the ZyWALL OTP (One Time Password). hardware token* to generate a new PIN code each time you log in.
• Use the extension card slot and USB ports for multiple 3G wireless WAN connections.

*Sold separately

---

Firewalls Comparison (Print Version)

 

Product Description

The ZyWALL USG 100 is a Unified Security Gateway, integrated with complete, enterprise-level and advanced security solutions designed for Small/Medium Business (SMB) recommended for up to 25 PC users. Its flexible configuration helps network administrators set up the network and enforce security policies more efficiently. With certified by ICSA SPI Firewall and IPSec VPN, the ZyWALL USG 100's security features also include IPSec VPN, SSL VPN, Firewall, Content Filter, Anti-Virus and IDP (Intrusion Detection and Prevention) for maximum network security protection. It also provides bandwidth management, for QoS of VoIP or mission critical applications, Multiple-WAN Failover and Load Balancing. Moreover, IPSec VPN and SSL VPN design for telecommuters and home workers can access data more easily and safely at home. Remote access with SSL VPN requires only a standard web browser. ZyWALL USG 100's excellent throughput is the key to implement features of an enterprise level to provide a full-time, non-stop and secure service.

Customer Reviews

Most Helpful Customer Reviews

24 of 25 people found the following review helpful:

5.0 out of 5 stars Great SOHO VPN Firewall, November 22, 2010

By 

WPB Consulting (Cary, NC) - See all my reviews

This review is from: ZyXEL ZyWALL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports, 2 IPSec VPN, SSL VPN, and 3G WAN Support (Personal Computers)

While ZyXEL may not be that well known in the consumer network gear market, they make some good enterprise level gear. The USG line from ZyXEL is middle ground between simple consumer products and highly configurable enterprise products.

I have used the ZyXEL ZyWALL 2 PLUS Internet Security Firewall, 4 Port 10/100 Fast Ethernet Switch, w/ 5 IPSec VPN Tunnelsand the (discontinued) 1P for several years without issue; primarily for maintaining an IPSEC VPN tunnel. While the 2 Plus and 1P were more consumer grade, the USG20 is a step beyond. It has a plethora of configuration options available, and wringing out optimal performance from the device is not for the faint of heart. Having a background in network configuration will make the job easier, otherwise, plan to spend some time with the instruction manual.

ZyXEL's online resources, customer support and forum support are very good; they strive to make sure your problems get solved. They offer timely firmware updates to correct problems.

The ZyWALL USG20 not only has basic packet inspection firewall and traffic anomaly detection functionality, but has a significant number of features at this price point:

* Flexible Security Zones

* IPSEC and SSL VPN

* VLANs

* Bandwidth Management

* Content filtering/ Anti-SPAM

* Reporting

The UI is somewhat straightforward, however, the concept of Objects may confuse some. Objects are used to define re-used elements throughout the configuration. For example, an IP address range may be defined and named IP_RANGE_1. This name is then used throughout the configuration screens when setting up features that use that same address range.

There isn't much you can't do with this, that you could with a device costing several times as much.

Pros:

* Price vs Features ratio

* Highly configurable

* USB 3G support

* Configuration wizards for some set-up

* SSL VPN support

* 4 Gig ports

* Runs cool

Cons:

* No PPTP/L2TP VPN

* Object oriented configuration can be confusing

* SSL VPN limited to few applications and hard to get working.

* So configurable that it takes a while to fully set-up.

* Manual recommends unit SHOULD NOT be wall mounted. (Why?)

9 of 9 people found the following review helpful:

4.0 out of 5 stars Great features for the money!, August 30, 2011

By 

Classless - See all my reviews

This review is from: ZyXEL ZyWALL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports, 2 IPSec VPN, SSL VPN, and 3G WAN Support (Personal Computers)

I bought this router from a competitor but wanted to leave a review here. The amount of features that you get out of this router is unbelievable for the price you pay. I'll point out my pros and cons about the unit but I will start by saying that this is not a dlink/linksys/netgear plug and play router, you need to have a good understanding of networking in order to use the unit to even half of its full potential.

Pros:

IPSec VPN

SSL VPN (ridiculously easy to configure, and there is a network extension option so that you can actually be put on the network and have full access to your resources)

Extensive firewall options (seriously there's a ton of options)

Cisco-like CLI

Ability to integrate with Active Directory (I use this with the ssl vpn, can be kind of tricky to configure though)

Bandwidth Management (very flexible options for this, you can really lock down how much bandwidth devices/programs can have and set priorities as well)

Object based (this is really useful, instead of specifying IP address in NAT/Firewall/BWM you can create objects and then specify the object so that in case you need to change it, you only need to change it in one location. You can even group objects together to consolidate firewall/BWM rules)

True DMZ (you can actually dedicate a port to the DMZ and then just have the others on lan subnets)

Free U.S. based technical support for the life of the unit (I called them before purchasing the unit to get information on it and the gentlemen was very courteous and knowledgeable. It's comforting to know that if I have issues I can get a hold of someone, who is American, within minutes). The firmware updates are free for the life of the unit as well.

Cons:

No L2TP/IPsec (Zyxel says this will be available in a firmware update, not sure exactly when though)

Occasionally the user interface will be stuck in a "loading" state when browsing. It only happens once or twice a week and clearing the cache usually fixes the issue.

The unit does feel a little bit cheap without a metal enclosure, but it does a pretty good job of getting rid of heat.

The unit has the "authentication policy" option which allows you to force users to enter a username and password when accessing some or all network resources (including the internet) to further increase security on the network however I have found that it doesn't work very well. For example, some times it wont prompt me to enter credentials and other times it will ask for them and after i enter them the network resource wont come up.

Closing thoughts:

The unit does also have content filter/ADP(anomaly detection and protection)/anti spam but I have not used any of these features though I have heard good things especially from the content filter. The content filter requires a license that you must purchase (you are given a 30 day trial) and the ADP and Anti Spam appear to come with the unit without a license (at least from understanding).

I mentioned it before (and other have as well) but its worth mentioning again that you get a lot of features for the price you pay. I've been very happy with the router since day one (I've had it about three weeks now). Hope this review helps somebody out there.

***Update 12-24-2011***

I've had the firewall for about five months now and it's still running strong. I haven't had any issues so far and after doing a firmware update I am now able to get the authentication policy to work properly. It also seems that Zyxel is releasing a major firmware update next month for all their USG series firewalls which will add IPv6 support as well as L2TP support.

9 of 9 people found the following review helpful:

4.0 out of 5 stars Great product with only one flaw, October 26, 2010

By 

Kelly - See all my reviews

Amazon Verified Purchase

This review is from: ZyXEL ZyWALL USG100 Unified Security Gateway Firewall w/50 VPN Tunnels, SSL VPN, 7 Gigabit Ports, and High Availability (Personal Computers)

This is one of the best priced and most feature rich routers I've ever used. I've used sonic walls about 5 years in the past and we had a linksys dual wan router before this. Once we needed more than one external ip the linksys just couldn't cut it. The firewall would either be fully off or fully on with secondary ip's, so we had to find another solution. Having used sonic walls in the past I looked at them first but a price/feature comparison lead me straight to the ZyWall USG100.

Setup for the device seems complicated at first, with assigning ip's to machines, ports to groups, and other things that I've not encountered with a firewall before. But these extra steps in the beginning save so much time later on. Instead of having routes and many firewall rules assigned to an ip, you would assign it to a virtual object stored in the zywall which has all of it's information. So when a change to the machines ip is required you don't have to go in and change every single rule and route, you just modify the virtual object and your done.

So far it's done everything we've needed and suprised us with its flexibility. And it would have 5 stars from me except for one slight failing. The vpn setup is a bit unruly when it comes to macs. Just for a standard vpn it requires a free 3rd party program (ipsecuritas) with a bit of setup that a normal user would balk at. Also the ssl vpn which ZyXEL boasts about is just a no go for macs, it just isn't supported.

It's a great product for a great price. It does everything well except for the vpn working with macs. If they can fix that then they would get 5 stars from me.

2115|R2GCGNYAKWNWTP;2115|R3KSDTW011GPH0;2115|R2FK7UKNCKQ29R;