Contattaci

Contatti Zyxel


Serie Performance

Next-Gen Firewall per piccole aziende fino a 25 utenti.

  • All-in-one Next Generation Firewall per piccole aziende
  • Protezione anti-malware, anti-virus, anti-spam, content filtering, IDP e application intelligence
  • Connessioni VPN SSL, IPSec e L2TP
  • Wireless Controller integrato per la gestione di fino a 10 AP
  • Modelli con Access Point Wireless integrato singola (USG40W) e doppia radio (USG60W)

L’evoluzione del modo in cui le persone lavorano e collaborano ha portato con se tre principali sfide per le piccole aziende. Il trend del BYOD comporta che le aziende debbano fornire una copertura Wireless adeguata all’elevato numero di smart devices presenti. L’utilizzo delle piattaforme Cloud di produttività, apre nuove possibilità di attacchi Web. La diffusione capillare dei Social Network obbliga le aziende a controllare, filtrare ed eventualmente bloccare le corrette applicazioni per mantenere un buon livello di produttività. Queste nuove sfide comportano un aumento della complessità della struttura e dei costi di IT, entrambe questioni che possono essere problematiche per le piccolo aziende.

La nuova serie USG è composta da all-in-one Next Generation Firewalls progettati specificatamente per rispondere alle esigenze di BYOD, protezione dai Malware, regolamentazione delle applicazioni, e controllo dei budget nelle piccole aziende. L’access point wireless integrato in alcuni modelli (USG40W e USG60W) ed il controller wireless trasformano gli USG in Hotspot wireless immediatamente. Le funzionalità complete di UTM e Application Intelligence Technology garantiscono una protezione completa ed approfondita, mantenendo l’azienda in controllo di quali applicazioni vengono utilizzate e come. Il progetto all-in-one integra in un unico apparato tutto quanto necessita alle piccole aziende, permettendo un unico centro di management ed un’effettiva riduzione dei costi.

Tutto quanto serve a prezzo contenuto

La serie USG Performance offre alle piccole aziende il minor costo di mantenimento del mercato. Il progetto all-in-one integra in un unico apparato tutto quanto serve: protezione anti-malware, connessioni VPN, wireless controller e access point integrati. Gli USG Performance sono la vera soluzione di sicurezza integrata che elimina la necessità di acquistare apparati multipli, permettendo alle piccole aziende connessione, protezione e gestione in un unico apparato.

Tranquillità e sicurezza

La serie USG Performance fornisce livelli di sicurezza Enterprise e tecnologia Next Generation Firewall senza doverne pagare i costi elevati. Garantisce una protezione approfondita ed estesa, ed un efficace controllo delle applicazioni Web quali ad esempio Facebook, Google e Netflix, integrata a funzionalità complete di protezione anti-malware, anti-virus, anti-spam, content filtering, IDP e application intelligence. Le piccole aziende non dovranno più preoccuparsi delle minacce, dello spam e dei social network che riducono la produttività.

Wi-Fi dove serve

La serie USG Performance aiuta le piccole aziende a fornire copertura Wi-Fi dove serve. I modelli USG40W e USG60W integrano un access point rispettivamente single-radio e dual-radio che può fornire copertura Wi-Fi per i piccoli uffici. Gli USG Performance integrano anche un WLAN controller, per aiutare le piccole aziende a fornire copertura wireless in ambienti multiarea, come reception o sale riunioni.

Management centralizzato

Progettati specificatamente per piccole aziende con budget IT limitato, la serie ZyXEL USG Performance aiuta a centralizzare connettività, sicurezza e gestione riducendone la complessità. Le Security Policy unificate garantiscono una gestione semplificata e centralizzata di tutte le funzionalità di sicurezza della rete, mentre il wireless controller integrato può gestire fino a 10 AP. Tutto ciò integrato in un unico apparato che gestisce connessioni VPN, sicurezza e wireless.

Sottoscrizione licenze  
La serie USG Performance offre un set di funzioni completo per adattarsi perfettamente ai diversi requisiti aziendali e per garantire le massime prestazioni e sicurezza con un dispositivo all-in-one. La completa modularità della rete consente inoltre ai professionisti IT di personalizzare il sistema per soddisfare le loro esigenze individuali. Anti-Virus Anti-Virus Anti-SpamAnti-Spam Intrusion Detection & preventionIntrusion Rilevazione e prevenzione Application PatrolApplication Patrol Content Filtering 2.0 Content Filtering 2.0
  Vai alla scheda dei servizi
RISORSE CORRELATE
     

Protezione dei dati

GDPR

PCI DSS Compliance

     
     
Portale MyZyxel USG Config. Converter  Portale One Security
     

 

 


USG40-EU0101F

Next-Gen Security Gateway 40. Porte: 1xWAN, 1xOPT, 3xLAN, 1xUSB. WAN Load Balancing/Failover. VPN: 20 IPSec/L2TP, 5 SSL (espandibile a 15). Single Sign-On. WLAN Controller 2 AP (espandibile a 18). Servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware opzionali.


USG40-EU0102F

Next-Gen Security Gateway 40 Bundle. Include: USG 40, 1 anno servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware.


USG40W-EU0101F

Next-Gen Security Gateway 40W. Porte: 1xWAN, 1xOPT, 3xLAN, 1xUSB. WAN Load Balancing/Failover. VPN: 20 IPSec/L2TP, 5 SSL (espandibile a 15). Single Sign-On. Wireless AP integrato N 300Mbit. WLAN Controller 2 AP (espandibile a 18). Servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware opzionali.


USG60-EU0101F

Next-Gen Security Gateway 60. Porte: 2xWAN, 4xLAN, 2xUSB. WAN Load Balancing/Failover. VPN: 40 IPSec/L2TP, 5 SSL (espandibile a 20). Single Sign-On. WLAN Controller 2 AP (espandibile a 18). Servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware opzionali.


USG60-EU0102F

Next-Gen Security Gateway 60 Bundle. Include: USG-60, 1 anno servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware.


USG40W-EU0102F

Next-Gen Security Gateway 40W Bundle. Include: USG 40W, 1 anno servizi Application Intelligence e IDP, Content Filtering (HTTPS Filtering e GeO IP), Anti Virus, Anti Spam e Anti Ransomware.

 

 

Specifications

Models
USG40
USG40W
USG60
USG60W
Hardware Specifications
Interfaces 3 x LAN/DMZ, 1 x WAN, 1 x OPT 3 x LAN/DMZ, 1 x WAN, 1 x OPT 4 x LAN/DMZ, 2 x WAN 4 x LAN/DMZ, 2 x WAN
USB ports 1 1 2 2
Console port Yes (DB9) Yes (DB9) Yes (DB9) Yes (DB9)
Rack-mountable - - Yes Yes
Fanless Yes Yes Yes Yes
System Capacity & Performance*1
SPI firewall throughput(Mbps)*2 400 400 1,000 1,000
VPN throughput (Mbps)*3 100 100 180 180
IDP throughput (Mbps)*4 95 95 150 150
AV throughput (Mbps)*4 50 50 90 90
UTM throughput (AV and IDP)*4 50 50 90 90
Max. TCP concurrent sessions*5 50,000 50,000 100,000 100,000
Max. concurrent IPsec VPN tunnels*6 20 20 40 40
Concurrent SSL VPN user no. (default/max.)*7 5 / 15 5 / 15 5 / 20 5 / 20
VLAN interface 8 8 16 16
Concurrent devices logins (default/max.)*7*8 64 64 128 128
WLAN Management
Managed AP number (default/max.)*7 2 / 18 2 / 18 2 / 18 2 / 18
Security Service
Anti-virus (AV)*7 Yes Yes Yes Yes
Intrusion detection and prevention (IDP) & Application Patrol*7 Yes Yes Yes Yes
Anti-spam*7 Yes Yes Yes Yes
Content filtering *7*9 Yes Yes Yes Yes
Key Features
VPN IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec
SSL (HTTPS) inspection - - - -
EZ Mode Yes Yes Yes Yes
Hotspot Management*7 - - - -
Ticket printer support*10 / Support Q'ty (max.) - - - -
Amazon VPC Yes Yes Yes Yes
Facebook Wi-Fi Yes Yes Yes Yes
Device HA Pro - - - -
Power Requirements
Power input 12V DC, 2.0 A max. 12V DC, 2.0 A max. 12V DC, 2.5 A max. 12V DC, 2.5 A max.
Max. power consumption (watt) 14 17 19 28
Heat dissipation (BTU/hr) 47.77 58.01 64.83 95.54
Physical Specifications
Item Dimensions (WxDxH)(mm/in.)
216 x 143 x 33/8.50 x 5.63 x 1.30
Weight (kg/lb.)
0.89/1.96
Dimensions (WxDxH)(mm/in.)
216 x 143 x 33/8.50 x 5.63 x 1.30
Weight (kg/lb.)
0.91/2
Dimensions (WxDxH)(mm/in.)
242 x 175 x 36/9.53 x 6.89 x 1.42
Weight (kg/lb.)
1.25/2.76
Dimensions (WxDxH)(mm/in.)
272 x 187 x 36/10.7 x 7.36 x 1.42
Weight (kg/lb.)
1.46/3.23
Packing Dimensions (WxDxH)(mm/in.)
381 x 261 x 79/15.00 x 8.50 x 3.11
Weight (kg/lb.)
1.57/3.46
Dimensions (WxDxH)(mm/in.)
381 x 261 x 79/15.00 x 8.50 x 3.11
Weight (kg/lb.)
1.63/3.59
Dimensions (WxDxH)(mm/in.)
394 x 240 x 101/15.51 x 9.45 x 3.98
Weight (kg/lb.)
2.25/4.96
Dimensions (WxDxH)(mm/in.)
427 x 247x 73/16.81 x9.72 x 2.87
Weight (kg/lb.)
2.23 (W/O bracket)
2.42 (W/ bracket)
Included accessories
  • Power adapter
  • DB9- RJ-45 for console connection
  • Power adapter
  • DB9- RJ-45 for console connection
  • Antenna
  • Power adapter
  • Rack mounting kit
  • Power adapter
  • Rack mounting kit (optional, by regions)
  • Antenna
Environmental Specifications
Operating Temperature
0°C to 40°C (32°F to 104°F)
Humidity
10% to 90%(non-condensing)
Temperature
0°C to 40°C (32°F to 104°F)
Humidity
10% to 90%(non-condensing)
Temperature
0°C to 40°C (32°F to 104°F)
Humidity
10% to 90%(non-condensing)
Temperature
0°C to 40°C (32°F to 104°F)
Humidity
10% to 90%(non-condensing)
Storage Temperature
-30°C to 70°C (-22°F to 158°F)
Humidity
10% to 90%(non-condensing)
Temperature
-30°C to 70°C (-22°F to 158°F)
Humidity
10% to 90%(non-condensing)
Temperature
-30°C to 70°C (-22°F to 158°F)
Humidity
10% to 90%(non-condensing)
Temperature
-30°C to 70°C (-22°F to 158°F)
Humidity
10% to 90%(non-condensing)
MTBF (hr) 414,329.4 386,931.7 815,463.9 497,644
Certifications
EMC FCC Part 15 (Class A),CE EMC (Class A),C-Tick (Class A),BSMI FCC Part 15 (Class B),CE EMC (Class B),C-Tick (Class B),BSMI FCC Part 15 (Class A),CE EMC (Class A),C-Tick (Class A),BSMI FCC Part 15 (Class B),CE EMC (Class B),C-Tick (Class B),BSMI
Safety LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI
Wireless Specifications
Standard compliance - 802.11 b/g/n - 802.11 a/b/g/n
Wireless frequency - 2.4 GHz - Concurrent 2.4 & 5 GHz
Radio - 1 - 2
SSID number - 8 - 16
Maximum transmit power(Max. total channel) - US (FCC) 2.4GHz : 24.3 dBm, 2 antennas
EU (ETSI) 2.4GHz : 19.6 dBm(EIRP), 2 antennas
- US (FCC) 2.4GHz : 24.3 dBm, 2 antennas
US (FCC) 5GHz : 25.8 dBm, 2 antennas
EU (ETSI) 2.4GHz : 18.6 dBm(EIRP), 2 antennas
EU (ETSI) 5GHz :28.4 dBm(EIRP), 2 antennas
No. of antenna - 2.4 GHz: 2T2R MIMO(Detachable, SMA-R) - 2.4 GHz: 2T2R MIMO 
5 GHz: 2T2R MIMO(Detachable, SMA-R)
Antenna gain - 3 dBi - 3 dBi
Data rate -
  • 802.11b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 and 54 Mbps
  • 802.11n: up to 300 Mbps in MCS15 (40 MHz; GI = 400 ns)
-
  • 802.11b/g: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48 and 54 Mbps
  • 802.11a: 6, 9, 12, 18, 24, 36, 48 and 54 Mbps
  • 802.11n: up to 300 Mbps in MCS15 (40 MHz; GI = 400 ns)
Frequency Band - 2.4 GHZ (IEEE 802.11 b/g/n)
  • USA (FCC) : 2.412 to 2.462 GHz
  • Europe (ETSI) : 2.412 to 2.472 GHz<
  • TWN (NCC) : 2.412 to 2.462 GHz
- 2.4 GHZ (IEEE 802.11 b/g/n)
  • USA (FCC) : 2.412 to 2.462 GHz
  • Europe (ETSI) : 2.412 to 2.472 GHz<
  • TWN (NCC) : 2.412 to 2.462 GHz
5 GHZ (IEEE 802.11 a/n)
  • USA (FCC) : 5.150 to 5.250 GHz; 5.725 to 5.850 GHz
  • Europe (ETSI) : 5.15 to 5.35 GHz; 5.470 to 5.725 GHz
  • TWN (NCC) : 5.25 to 5.35 GHz; 5.725 to 5.850 GHz
Receive sensitivity - 2.4 GHz
  • 11 Mbps ≦ -87 dBm
  • 54 Mbps ≦ -77 dBm
  • HT20 ≦ -71 dBm
  • HT40 ≦ -68 dBm
- 2.4 GHz
  • 11 Mbps ≦ -87 dBm
  • 54 Mbps ≦ -77 dBm
  • HT20 ≦ -71 dBm
  • HT40 ≦ -68 dBm
5 GHz
  • 54 Mbps ≦ -75 dBm
  • HT20, MCS15 ≦ -71 dBm
  • HT40, MCS15 ≦ -69 dBm

Note:
*: This matrix with firmware ZLD4.31 or later.

  1. Actual performance may vary depending on network conditions and activated applications.
  2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
  3. VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
  4. AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
  5. Maximum sessions measured using the industry standard IXIA IxLoad testing tool
  6. Including Gateway-to-Gateway and Client-to-Gateway.
  7. With Zyxel service license to enable or extend the feature capacity.
  8. This is the recommend maximum number of concurrent logged-in devices.
  9. SafeSearch function in CF2.0 need to enable SSL inspection firstly and not for small business models.
  10. With Hotspot Management license support

 


*All specifications are subject to change without notice.

 

Applied ProductsUnified APUnified Pro AP
  • USG40/40W/60/60W
  • USG110/210/310
  • USG1100/1900
  • ZyWALL110/310/1100
  • VPN50/100/300
  • USG2200-VPN
  • NWA5121-NI
  • NWA5121-N
  • NWA5123-NI
  • NWA5301-NJ
  • NWA5123-AC
  • WAC5302D-S
  • Forward Compatible APs*
  • NWA5121-NI
  • WAC6502D-E
  • WAC6502D-S
  • WAC6503D-S
  • WAC6553D-E
  • WAC6103D-I
  • Forward Compatible APs*
Functions
Central management Yes Yes
Auto provisioning Yes Yes
Data forwarding Local bridge Local bridge/Data tunnel
ZyMesh Yes Yes

*: From APC3.0, commercial gateways supporting APC technology are able to recognize APs with FW release higher than APC3.0 as Forward Compatible APs. Resellers can introduce newly-available Zyxel APs with basic features supported without upgrading any new controller firmware.

Funzionalità Software

Firewall

  • ICSA-certified firewall (certification in progress)
  • Routing and transparent (bridge) modes
  • Stateful packet inspection
  • User-aware policy enforcement
  • SIP/H.323 NAT traversal
  • ALG support for customized ports
  • Protocol anomaly detection and protection
  • Traffic anomaly detection and protection
  • Flooding detection and protection
  • DoS/DDoS protection

Supporto IPv6

  • IPv6 Ready gold logo
  • Dual stack
  • IPv4 tunneling (6rd and 6to4 transition tunnel)
  • IPv6 addressing
  • DNS
  • DHCPv6
  • Bridge
  • VLAN
  • PPPoE
  • Static routing
  • Policy routing
  • Session control
  • Firewall and ADP
  • IPSec VPN
  • Intrusion Detection and Prevention (IDP)
  • Application intelligence and optimization
  • Content filtering
  • Anti-virus, anti-malware
  • Anti-spam

IPSec VPN

  • ICSA-certified IPSec VPN (certification in progress)
  • Encryption: AES (256-bit), 3DES and DES
  • Authentication: SHA-2 (512-bit), SHA-1 and MD5
  • Key management: manual key, IKEv1 and IKEv2 with EAP
  • Perfect forward secrecy (DH groups) support 1, 2, 5
  • IPSec NAT traversal
  • Dead peer detection and relay detection
  • PKI (X.509) certificate support
  • VPN concentrator
  • Simple wizard support
  • VPN auto-reconnection
  • VPN High Availability (HA): load-balancing and failover
  • L2TP over IPSec
  • GRE and GRE over IPSec
  • NAT over IPSec
  • ZyXEL VPN client provisioning

SSL VPN

  • Supports Windows and Mac OS X
  • Supports full tunnel mode
  • Supports 2-step authentication
  • Customizable user portal

Unified Security Policy

  • Unified policy management interface
  • Supported UTM features: anti-virus, antispam, IDP, content filtering, application intelligence, firewall (ACL)
  • 3-tier configuration: object-based, profilebased, policy-based
  • Policy criteria: zone, source and destination IP address, user, time

WLAN Management

  • ZyXEL AP Controller (APC) 1.0 compliant
  • Client RSSI threshold to prevent sticky clients
  • IEEE 802.1x authentication
  • Wireless Layer 2 isolation
  • Captive portal Web authentication
  • Customizable captive portal page
  • RADIUS authentication
  • Wi-Fi Multimedia (WMM) wireless QoS
  • CAPWAP discovery protocol
  • ZyXEL Wireless Optimizer (ZWO) AP planning

Mobile Broadband

  • WAN connection failover via 3G and 4G* USB modems
  • Auto fallback when primary WAN recovers
  • * 4G USB modem support available in future firmware upgrades

Networking

  • Routing mode, bridge mode and hybrid mode
  • Ethernet and PPPoE
  • NAT and PAT
  • VLAN tagging (802.1Q)
  • Virtual interface (alias interface)
  • Policy-based routing (user-aware)
  • Policy-based NAT (SNAT)
  • Dynamic routing (RIPv1/v2 and OSPF)
  • DHCP client/server/relay
  • Dynamic DNS support
  • WAN trunk for more than 2 ports
  • Per host session limit
  • Guaranteed bandwidth
  • Maximum bandwidth
  • Priority-bandwidth utilization

Authentication

  • Local user database
  • Microsoft Windows Active Directory integration
  • External LDAP/RADIUS user database
  • XAUTH, IKEv2 with EAP VPN authentication
  • Web-based authentication
  • Forced user authentication (transparent authentication)
  • IP-MAC address binding
  • SSO (Single Sign-On) support (Download SSO Agent)

System Management

  • Role-based administration
  • Multiple administrator logins
  • Multi-lingual Web GUI (HTTPS and HTTP)
  • Command line interface (console, Web console, SSH and TELNET)
  • SNMP v2c (MIB-II)
  • System configuration rollback
  • Firmware upgrade via FTP, FTP-TLS and Web GUI
  • Dual firmware images

Logging and Monitoring

  • Comprehensive local logging
  • Syslog (to up to 4 servers)
  • Email alerts (to up to 2 servers)
  • Real-time traffic monitoring
  • Built-in daily report
  • Advanced reporting with Vantage Report

 

Servizi Opzionali

Intrusion Detection and Prevention (IDP)

  • Routing and transparent (bridge) mode
  • Signature-based and behavior-based scanning
  • Automatic signature updates
  • Customizable protection profile
  • Customized signatures supported

Application Intelligence and Optimization

  • Granular control over the most important applications
  • Identifies and controls over 3.000 applications and behaviors
  • Supports over 15 application categories
  • Application bandwidth management
  • Supports user authentication
  • Real-time statistics and reports

Anti-Virus

  • Supports Kaspersky anti-virus signatures
  • Identifies and blocks over 650.000 viruses
  • Stream-based anti-virus engine
  • HTTP, FTP, SMTP, POP3 and IMAP4 protocol support
  • Automatic signature updates
  • No file size limitation

Anti-Spam

  • Transparent mail interception via SMTP and POP3 protocols
  • Configurable POP3 and SMTP ports
  • Sender-based IP reputation filter
  • Recurrent Pattern Detection (RPD) technology
  • Zero-hour virus outbreak protection
  • X-Header support
  • Blacklist and whitelist support
  • Supports DNSBL checking
  • Spam tag support
  • Statistics report

Content Filtering

  • Social media filtering
  • Malicious Website filtering
  • URL blocking and keyword blocking
  • Blacklist and whitelist support
  • Blocks java applets, cookies and ActiveX
  • Dynamic, cloud-based URL filtering database
  • Unlimited user license support
  • Customizable warning messages and redirection URL

 

#v#tabContent#v#
#v#tabContent#v#