Datasheet

Features Set
Software Features
Firewall
• ICSA-certied rewall (certication pending)
• Routing and transparent (bridge) modes
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG support for customized ports
• Protocol anomaly detection and protection
• Trac anomaly detection and protection
• Flooding detection and protection
• DoS/DDoS protection
IPv6 Support
• Dual stack
• IPv4 tunneling (6rd and 6to4 transition
tunnel)
• IPv6 addressing
• DNS
• DHCPv6
• Bridge
• VLAN
• PPPoE
• Static routing
• Policy routing
• Session control
• Firewall and ADP
• IPSec VPN
• Content Filtering 2.0
• Anti-Spam
IPSec VPN
• ICSA-certied IPSec VPN
• Encryption: AES (256-bit), 3DES and DES
• Authentication: SHA-2 (512-bit), SHA-1 and
MD5
• Support route-based VPN Tunnel Interface
(VTI)
• Key management: manual key, IKEv1 and
IKEv2 with EAP
• Perfect forward secrecy (DH groups) support
1, 2, 5, 14
• IPSec NAT traversal
• Dead peer detection and relay detection
• PKI (X.509) certicate support
• VPN concentrator
• Simple wizard support
• VPN auto-reconnection
• VPN High Availability (HA): load-balancing
and failover
• L2TP over IPSec
• GRE and GRE over IPSec
• NAT over IPSec
• ZyXEL VPN client provisioning
SSL VPN
• Supports Windows and Mac OS X
• Supports full tunnel mode
• Supports 2-step authentication
• HTTP, FTP, SMTP, POP3 and IMAP4 protocol
support
• Automatic signature updates
• No le size limitation
• Customizable user portal
Networking
• Routing mode, bridge mode and hybrid
mode
• Ethernet and PPPoE
• NAT and PAT
• VLAN tagging (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIPv1/v2 and OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN trunk for more than 2 ports
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• Bandwidth limit per user
• Bandwidth limit per IP
• GRE
WLAN Management (ZyWALL Series support
only)
• Support AP controller version 1.97
• Wireless L2 isolation
• Supports auto AP FW update
• Scheduled Wi-Fi service
• Dynamic Channel Selection (DCS)
• Client steering for 5GHz priority and sticky
client prevention
• Auto healing provides a stable and reliable
coverage
• IEEE 802.1x authentication
• Captive portal Web authentication
• Customizable captive portal page
• RADIUS authentication
• Wi-Fi Multimedia (WMM) wireless QoS
• CAPWAP discovery protocol
• Multiple SSID with VLAN
Authentication
• Local user database
• Built-in user database
• Microsoft Windows Active Directory
integration
• External LDAP/RADIUS user database
• XAUTH, IKEv2 with EAP VPN authentication
• Web-based authentication
• Forced user authentication (transparent
authentication)
• IP-MAC address binding
• SSO (Single Sign-On) support
Logging/Monitoring
• Comprehensive local logging
• Syslog (send to up to 4 servers)
• E-mail alert (send to up to 2 servers)
• Real-Time trac monitoring
• System status monitoring
• Built-in daily report
• Advanced reporting (Vantage Report)
System Management
• Role-based administration
• Multiple administrator logins
• Supports generating SHA2 Certicate
• Supports Cloud Helper (Firmware ZLD4.20)
• Multi-lingual Web GUI (HTTPS and HTTP)
• Command line interface (console, Web
console, SSH and telnet)
• SNMP v1, v2c, v3
• System conguration rollback
• Firmware upgrade via FTP, FTP-TLS and Web
GUI
• Dual rmware images
• Cloud CNM SecuManager*
* Available in Sept, 2016
Optional Security Services
• Kaspersky Anti-Virus
• Application Intelligence & IDP
• Content Filtering 2.0
• Anti-Spam
ZyXEL One Network
• ZON Utility
■
IP conguration
■
Web GUI access
■
Firmware upgrade
■
Password conguration
• Smart Connect
■
Location and System Name update
■
Discover neighboring devices
■
One-click remote management access to
the neighboring ZyXEL devices
Hotspot Management (Firmware ZLD4.20)
• ZyWALL310 and ZyWALL1100 support only
• Integrated account generator, Web-based
authentication portal and billing system
• Supports external RADIUS servers
• Per account bandwidth management
• User agreement login
• SP350E Service Gateway Printer enables
oneclick account and billing generation
• Built-in billing system
■
Time-to-nish accounting mode
■
Accumulation accounting mode
• Supports PayPal online payment
• Marketing tool
■
Advertisement link
■
Walled garden
■
Portal page
Device High Availability Pro (HA Pro) (Firm-
ware ZLD4.20)
• ZyWALL Series support only
• Device failure detection and notication
• Supports ICMP and TCP ping check
• Link monitoring
• Conguration auto-sync
• Dedicated Heartbeat Link
• Instant handover
• NAT/Firewall/VPN Sessions synchronization
6
ZyWALL 1100/310/110/USG20(W)-VPN
VPN Firewall