Contatti Zyxel

VPN Firewall ZyWALL 1100/310/110

Serie Firewall ZyWALL 1100/310/110 VPN

  • Robust hybrid VPN (IPSec/SSL/L2TP over IPSec)
  • High-performance SPI Firewall
  • More secure VPN connections with SHA-2 cryptographic
  • Auto-provisioned client-tosite IPsec setup with Easy VPN
  • Cloud helper provides the friendly firmware upgrade to ensure its authenticity and reliability.
  • Device HA Pro dedicated heartbeat port ensures smart handover.
  • Hotspot management for control and billing.
Safer, more reliable VPN connections

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications. The complete range of Zyxel VPN Firewalls deliver reliable, non-stop VPN services with dual-WAN failover and fallback support. With two WAN connections-one primary and one for redundancy-the Zyxel VPN Firewall automatically switches to the backup connection should the primary link fail, and automatically switches back to the primary connection once it is back online. To support dynamic, mobile business operations in today's BYOD (bring your own device) business environments, the VPN Firewalls offer unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP VPN on a wide variety of mobile Internet devices running the iOS, Android and Windows mobile platforms.

Zero-configuration remote access

Virtual private networks provide businesses a secure and convenient way of sharing company resources with partners, customers, or employees on business trips. Yet typical VPN solutions are hard for non-technical users to configure, which greatly reduces their usability and convenience. The Zyxel VPN Firewalls feature Easy VPN to provide auto-provisioned client-to-site IPsec VPN setup. A wizard is available with the Zyxel IPsec VPN client-software that automatically retrieves the VPN configuration file from the remote Zyxel VPN Firewall and completes the IPsec VPN setup in 3 simple steps. Zyxel's Easy VPN lowers administration effort and allows partner, customers, or traveling employees to access company servers, email, or data centers easily and securely.

Zero-configuration remote access
Best TCO for Wi-Fi Expansion

Best TCO for Access Expansion

People expect network access regardless of time or location. As a result, hotspots are in demand in an ever-expanding assortment of locations. The Zyxel VPN firewalls integrated with Zyxel AP Controller technology enables users from a centralized user interface. In addition, Zyxel Hotspot Management delivers a unified solution for business networks with user-friendly tools like Billing System, Walled Garden, Multiple Authentication, 3rd Party Social Login and User Agreement. With ZyWALL310 and 1100 Series, businesses can now deploy or expand a managed Wi-Fi network with minimal effort.

Swift and Secure Firmware Upgrades

Locating firmware updates - not to mention identifying correct versions for your device and managing their installation - can be a complex and confusing ordeal. The Zyxel VPN Firewall solves this with its new Cloud Helper service. Cloud Helper provides a simple step to look for up-to-date firmware information. New firmware is immediately made available upon release from our official database to ensure its authenticity and reliability.

Swift and Secure Firmware Upgrades
Safe and Scheduled Web Browsing

Zyxel One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, Zyxel One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities.

Zyxel One Network presents an easy-to-use tool, Zyxel One Network Utility (ZON Utility) , to realize speed network setup. Zyxel Smart Connect allows Zyxel networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. Zyxel One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

Stay Secure and Up-to-Date with

Zyxel provides frequent and timely updates in response to the latest security threats and advisories through - our free online service portal. offers informative network security resources and the know-how to assist businesses and IT administrators in keeping their network operations safe in the digital age. Information and resources can be found with one click via the GUI of Zyxel USG Extreme and ZyWALL series products. IT staff can quickly and easily catch up on the latest threats, and then proceed to walkthroughs and troubleshooting protocols with the help of easy-to-follow FAQs - all provided to help users secure their networks and simplify management of our UTM products.

Hardware Specifications


10/100/1000 Mbps 
RJ-45 ports
USB ports Console port Fanless

ZyWALL 1100

8 (configurable) 2 Yes (DB9) Yes

ZyWALL 310

8 (configurable) Yes (DB9) 2 Yes

ZyWALL 110

2 x WAN, 1 x OPT, 4 x LAN/DMZ Yes (DB9) 2 Yes

System Capacity & Performance*1


SPI firewall throughput 
VPN throughput (Mbps)*3 Concurrent Devices 
(default/max.) *4
Max. TCP concurrent
Max. concurrent
IPsec VPN tunnels*6
Concurrent SSL VPN user no.
Customizable zones IPv6 support
ZyWALL 1100 6,000 800 800/1500 500,000 1,000 250/500 Yes Yes
ZyWALL 310 5,000 650 500/ 800 200,000 300 50/150 Yes Yes
ZyWALL 110 1,600 400 200/ 300 60,000 100 25/150 Yes Yes

WLAN Management

Items AP controller 
( APC) support
Managed AP number 
ZyWALL 1100 Yes 2/66
ZyWALL 310 Yes 2/34
ZyWALL 110 Yes 2/34

Key Software Features

Items Firewall Virtual private network (VPN) Bandwidth Management Logging and Monitoring SSL (HTTPS) inspection Unified Security Policy Device HA Cloud Helper
ZyWALL 1100 Yes Yes (IPSec, SSL, L2TP over IPSec) Yes Yes Yes Yes Yes Yes
ZyWALL 310 Yes Yes (IPSec, SSL, L2TP over IPSec) Yes Yes Yes Yes Yes Yes
ZyWALL 110 Yes Yes (IPSec, SSL, L2TP over IPSec) Yes Yes Yes Yes Yes Yes

Licenses Features

Items Anti-virus (AV) Intrusion detection 
and prevention (IDP)
& Application Patrol
Anti-spam Content filtering (CF2.0)*9 Device HA Pro Hostpot Management
ZyWALL 1100 Yes Yes Yes Yes Yes Yes
ZyWALL 310 Yes Yes Yes Yes Yes Yes
ZyWALL 110 Yes Yes Yes Yes Yes =

Power Requirements

Items Power input Max. power consumption
Heat dissipation (BTU/hr)
ZyWALL 1100 100 - 240 V AC, 50/60 Hz, 1.3 A max. 58.5 199.61
ZyWALL 310 100 - 240 V AC, 50/60 Hz, 1.3 A max 58.5 199.61
ZyWALL 110 12 V DC, 3.33 A max. 37.0 126.25

Physical Specifications

Items Items : 
Dimensions (WxDxH) (mm/in.) 
Weight (kg/lb.)
Packing :
Dimensions (WxDxH) (mm/in.) 
Weight (kg/lb.)
Included accessories
ZyWALL 1100 430 x 250 x 44/16.93 x 9.84 x 1.73 
519 x 392 x 163/20.43 x 15.43 x 6.42 
  • Power cord
  • Rack mounting kit
ZyWALL 310 430 x 250 x 44/16.93 x 9.84 x 1.73 
519 x 392 x 163/20.43 x 15.43 x 6.42 
  • Power cord
  • Rack mounting kit
ZyWALL 110 300 x 178 x 44/11.81 x 7 x 1.73 
245 x 152 x 351/9.65 x 5.98 x 13.82 
  • Power adapter
  • Power cord
  • Rack mounting kit

Environmental Specifications

Items Operating :
Temperature/ Humidity
Storage : 
Temperature/ Humidity
MTBF (hr)
ZyWALL 1100 0°C to 32°C/32°F to 104°F 
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F 
10% to 90% (non-condensing)
ZyWALL 310 0°C to 32°C/32°F to 104°F 
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F 
10% to 90% (non-condensing)
ZyWALL 110 0°C to 32°C/32°F to 104°F 
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F 
10% to 90% (non-condensing)


Items EMC Safety
ZyWALL 1100 FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI
ZyWALL 310 FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI
ZyWALL 110 FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI


* This matrix with firmware ZLD 4.20 or later.
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: With Zyxel Device Upgrade License, this is the recommend maximum number of concurrent logged-in devices.
*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*6 Including Gateway-to-Gateway and Client-to-Gateway.
*7: With Zyxel SSL VPN License, this is the recommend maximum number of concurrent VPN users. 
*8: With Zyxel AP Controller License, this is the recommend maximum AP capacity of concurrent users. 
*9: SafeSearch function in CF2.0 need to enable SSL Inspection firstly and not for small business models.

VPN Firewall Quick Finder

VPN Firewall Quick Finder

* SSL Inspection must be enabled for Content Filtering 2.0 Safe Search to function properly.

The ZyXEL VPN Firewall Series provides a complete feature set to perfectly fit different business requirements as well as to enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity also empowers IT professionals to customize the system to meet their individual needs.

  • Anti SpamAnti Spam
  • Anti VirusAnti Virus
  • Intrusion Detection PreventionIntrusion Detection Prevention
  • Application IntelligenceApplication Intelligence
  • Content Filtering 2.0Content Filtering 2.0
  • Hotspot ManagementHotspot Management
  • HA ProHA Pro


ProductSSL VPN TunnelsSecuExtender SSL VPN Client*1IPSec VPN Client
ZyWALL 1100 Add 5 tunnels
Add 10 tunnels
Add 50 tunnels
For 1 client
For 5 clients
For 10 clients
For 1 client
For 5 clients
For 10 clients
For 50 clients
ZyWALL 310
ZyWALL 110


*1: Support OS: MAC OS 10.7 or later



ProductKaspersky Anti-VirusApplication Intelligence & IDPContent Filtering 2.0Anti-Spam
ZyWALL 1100 1 year
2 years
1 year
2 years
1 year
2 years
1 year 
2 years
ZyWALL 310
ZyWALL 110


1.Licenses can be easily activated, renewed and managed at 2.0
2.License bundles may vary according to region. Please contact your local sales representative for more information.


Connectivity & Industrial

ProductConcurrent Device Upgrade*1Hotspot Management*1Managed APsHA Pro*1Vantage Report
ZyWALL 1100 100 nodes
300 nodes
1 year / One-Time Add 4 APs 
Add 8 APs
One-Time For 1 device
For 5 devices
For 25 devices
For 100 devices
ZyWALL 310 100 nodes
ZyWALL 110 -


*1: With firmware ZLD 4.20 or later



Access Point Compatibility List

SeriesNWA5120 Series
Unified Access Point
NWA5000 Series
Managed Access Point
NWA3000-N Series
Unified Pro Access Point
WAC6500 Series
Unified Pro Access Point
Models NWA5121-NI
Central management Yes Yes Yes Yes
Auto provisioning Yes Yes Yes Yes
Data forwarding Local bridge Local bridge Local bridge Local bridge


* Download the latest firmware : ZyWALL1100ZyWALL310ZyWALL110

VPN application

  • Branch offices, partners and home users can deploy ZyXEL USGs/ ZyWALLs for site-to-site IPSec VPN connections
  • Branch offices can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
  • Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and L2TP over IPSec VPN
  • The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications

Hotspot Management

(ZyWALL 1100 and 310 support only )

  • High speed internet access
  • Tier of service
  • Log record for regulatory compliance
  • Premium security control
  • Various Network access control ( free or paid access, social login)