Proactive protection
Malicious virus, worm, exploits could cripple corporate networks and halt business transactions. In addition to severe financial loss, you also risk leakage of confidential information.
As mass-mailing software companies mushroom on the Internet, your network is bombarded with massive amounts of junk mails (spam). Without intelligent detection and proactive blocking, users have to go through the tedious and time-consuming task of sieving through the overflowing mailbox, and such scenario leads to serious productivity loss.
Policy compliance
With numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company employees to share files and chat online during work hours. Rapid file sharing not only compromises network safety with the sharing of questionable files containing malicious viruses, but may also violate copyright issues and create legal hassles.
Firewall
Virtual Private Network (VPN)
-
ICSA-certified IPSec VPN
-
L2TP, IPSec
-
Algorithm: AES/3DES/DES
-
Authentication: SHA-1/MD5
-
Key management: Manual key/IKE
-
Perfect forward secrecy: (DH group) supprt 1, 2, 5
-
IPSec NAT traversal
-
Dead peer detection/relay detection
-
PKI (X.509) certificate support
-
Centralize VPN Support
-
Simple wizard support
-
Auto reconnect VPN
-
VPN HA (redundant remote VPN gateways)
SSL VPN
-
Clientless secure remote access
-
Support reverse proxy mode* and full tunnel mode *(Reverse Proxy Mode available in future ZLD v3.0 Firmware Release)
-
Unified policy enforcement
-
Supports two-factor authentication
-
Customizable user portal
Intrusion Detection and Prevention(IDP)
-
Routing and transparent (bridge) mode
-
Zone-based IDP inspection
-
Customizable protection profile
-
Protect over 2000 attack
-
Automatic signature updates
-
Custom signatures
-
Protocol anomaly detection and protection
-
Traffic anomaly detection and protection
-
Flooding detection and protection
-
DoS/DDoS protection
Anti-Virus
-
Support Kaspersky and ZyXEL Anti-Virus
-
Stream-based Anti-Virus engine
-
Zone base AV protection
-
HTTP/FTP/SMTP/POP3/IMAP4 protocal support
-
Automatic signature updates
-
No file size limitation
-
Blacklist/whitelist support
Application Patrol
-
Application, IM/P2P, stream base media, VoIP granular access control
-
Detail access control of IM (Chat, file transfer, video)
-
Application and IP/P2P bandwidth control
-
User authentication support
-
IM/P2P signature auto update
-
Support more than 15 catalogs IM and P2P
-
Real-Time statistical reports
-
Maximum/guaranteed bandwidth
Anti-Spam
-
Zone to zone protection
-
Transparently intercept mail via SMTP/POP3 protocols
-
Blacklist/whitelist support
-
Support DNSBL checking
-
Spam tag support
-
Statistics report
Content Filtering
-
Social networking control
-
Web security - ZyXEL safe browsering
-
URL blocking, keyword blocking
-
Profile base setting
-
Exempt list (blacklist and whitelist)
-
Blocks java applet, cookies and active X
-
Dynamic URL filtering database (powered by BlueCoat)
-
Unlimited user licenses support
-
Customize warning messages and redirect URL
Networking
-
Routing mode/bridge mode/mixed mode
-
Layer 2 port grouping
-
Ethernet/PPPoE
-
Tagged VLAN (802.1Q)
-
Virtual interface (alias interface)
-
Policy-based routing (user-aware)
-
Policy-based NAT (SNAT)
-
Dynamic routing(RIP v1/v2, OSPF)
-
DHCP client/server/relay
-
Dynamic DNS support
-
WAN Trunk more than 2 port
-
Per host session limit
-
Guaranteed bandwidth
-
Maximum bandwidth
-
Priority-bandwidth utilization
Authentication
-
Local user database
-
Microsoft Windows active directory integrate
-
External LDAP/RADIUS user database
-
Xauth over RADIUS for IPSec IPV
-
Forced user authentication (transparent authentication)
-
IP/MAC address binding
System Management
-
Role-based administration
-
Multiple administrator login
-
Multi-Lingual Web GUI (HTTPS/HTTP)
-
Out-of-band management (AUX)
-
Object-based configuration
-
Command line interface (console/web console/SSH/TELNET)
-
SNMP v2c (MIB-II)
-
System configuration rollback
-
Firmware upgrade via FTP/FTP-TLS/Web GUI
Logging/Monitoring
-
Comprehensive local logging
-
Syslog (send to up to 4 servers)
-
E-mail alert (send to up to 2 servers)
-
Real-Time traffic monitoring
-
Built-in daily report
-
Advanced reporting (Vantage Report)
-
Centralized Network Management (Vantage CNM) manageable
Features
-
Unified Security Gateway for SME (1~10 PC Users)
-
All Gigabit Ethernet interface hardware design
-
High-performance multi-layer threat protection
-
Hybrid VPN (IPSec and SSL) secures connection
-
Multi WAN ports for multiple ISP links and load balancing
System Capacity & Performance
-
SPI Firewall Throughput*1: 100 Mbps
-
VPN Throughput (3DES)*2: 50 Mbps
-
UTM Throughput (AV+IDP)*3: 15 Mbps
-
Unlimited User Licenses
-
Max. Sessions*6: 10,000
-
New Session Rate: 1,000
-
Max. Concurrent IPSec VPN Tunnels: 5
-
Max. Concurrent SSL VPN Users: 5
-
Included SSL VPN Users: 2
-
Customizable Zone
Hardware Specifications
-
10/100/1000 Interfaces (Copper): 4 x LAN/DMZ, 2 x WAN
-
USB ports: 2
Power Requirements
-
Input Voltage: 100 - 240 V AC, 50 - 60 Hz, 1.2 A
-
Power Rating: 17 W Max
Physical Specifications
-
Dimensions: 243 (W) x 167.10 (D) x 35.5 (H) mm
-
Weight: 1.2 kg
Environmental Specifications
-
Operating temperature: 0ºC to 40ºC
-
Storage temperature: 0ºC to 40ºC
-
Operating humidity: 20% to 95% (non-condensing
|
