Product Benefits:
The ICSA-certified, stateful inspection firewall protects the network and vital Internet services like e-mail, Web browsing, servers, and file transfers.
For protection against viruses and spyware, choose the ICSA-certified ZyXEL Anti-Virus or one powered by Kaspersky Labs.
The IDP engine protects your network from intrusions such as Trojans and worms.
Use IPSec VPN to secure connections to branch offices, partners, and headquarters. Road warriors and telecommuters can use SSL or L2TP VPN to securely access the company network without having to install VPN software.
Application Patrol controls who can use what IM and P2P applications like MSN and BitTorrent, and even who can use specific features within an application.
The anti-spam feature can tag or discard unsolicited commercial or junk e-mail.
User-aware configuration lets you control access to applications or resources and apply security scans by user or user group.
Bandwidth management lets you prioritize time-sensitive applications like VoIP and video conferencing.
Multiple WAN ports let you use multiple ISP links and load balancing to enhance traffic. Throughput, optimize bandwidth usage, and help ensure continuous uptime if a link goes down.
Along with your regular user name and password, use the ZyWALL OTP (One Time Password). hardware token* to generate a new PIN code each time you log in.
Use the extension card slot and USB ports for multiple 3G wireless WAN connections.
Product Details:
CSA-certified Firewall
Zone-Based Access Control List
Security Zones
Stateful Packet Inspection
DoS/DDoS Protection
User-Aware Policy Enforcement
ALG Supports Custom Ports
Intrusion Detection and Prevention
In-line Mode (Routing/Bridge)
Zone-Based IDP Inspection
Customizable Protection Profile
Signature-based Deep Packet Inspection
Automatic Signature Updates**
Custom Signatures
Traffic Anomaly Detection and Protection
Flooding Detection and Protection
Protocol Anomaly Detection and Protection:HTTP/ICMP/TCP/UDP
Anti-Virus
ICSA-Certified ZyXEL Anti-Virus or Kaspersky Anti-Virus
Stream-Based Anti-Virus
Covers Top Active Viruses in the Wild List
Scans HTTP/FTP/SMTP/POP3/IMAP4
Automatic Signature Updates**
No File Size Limitation
Blacklist/Whitelist Support
Hybrid VPN
ICSA-certified IPSec VPN
Encryption: AES/3DES/DES
Authentication: SHA-1/MD5
Key Management: Manual Key/IKE
Perfect Forward Secrecy: DH Group 1/2/5
NAT over IPSec VPN
Dead peer Detection/Relay Detection
PKI (X.509) Certificate Support
Certificate Enrollment (CMP/SCEP)
Xauth Authentication
L2TP over IPSec Support
SSL VPN
Clientless Secure Remote Access(Reverse Proxy Mode)
SecuExtender (Full Tunnel Mode)
Unified Policy Enforcement
Supports Two-factor Authentication
Customizable User Portal
Application Patrol
IM/P2P Granular Access Control
Apply Schedules, Bandwidth Management
User-Aware
IM/P2P Up-to-Date Support (based on IDP signatures)**
Real-Time Statistical Reports
Bandwidth Management
Bandwidth Priority
Policy-Based Traffic Shaping
Maximum/Guaranteed Bandwidth
Bandwidth Borrowing
Anti-Spam
Zone to Zone Protection
Transparently intercept mail via SMTP/POP3 protocols
Blacklist/Whitelist support
Support DNSBL checking
Statistics report
High Availability
Device HA (Active-Passive Mode)
Device Failure Detection
Link Monitoring
Auto-Sync Configurations
Multiple WAN Load Balancing
VPN HA (Redundant Remote VPN Gateways)
Content Filtering
URL Blocking, Keyword Blocking
Exempt List (Blacklist and Whitelist)
Blocks Java Applet, Cookies and Active X
Dynamic URL Filtering Database (Powered by BlueCoat)
User Licenses
Unlimited
Networking
Routing Mode/Bridge Mode/Mixed Mode
Layer 2 Port Grouping
Ethernet/PPPoE/PPTP
Tagged VLAN (802.1Q)
Virtual Interface (Alias Interface)
Policy-Based Routing (User-Aware)
Policy-Based NAT (SNAT/DNAT)
RIP v1/v2
OSPF
IP Multicasting (IGMP v1/v2)
DHCP Client/Server/Relay
Built-in DNS Server
Dynamic DNS
Authentication
Internal User Database
Microsoft Windows Active Directory
External LDAP/RADIUS User Database
ZyWALL OTP (One Time Password)
Forced User Authentication (Transparent Authentication)
System Management
Role-Based Administration
Multiple Administrator Login
Multi-Lingual Web GUI (HTTPS/HTTP)
Object-Based Configuration
Command Line Interface (Console/Web Console/SSH/TELNET)
Comprehensive Local Logging
Syslog (send to up to 4 servers)
E-mail Alert (send to up to 2 servers)
SNMP v2c (MIB-II)
Real-Time Traffic Monitoring
System Configuration Rollback
Text-Based Configuration File
Firmware upgrade via FTP/FTP-TLS/Web GUI
Advanced Reporting (Vantage Report)
Centralized Network Management (Vantage CNM)
3G Support
Advanced Wireless Security Transmission with WEP Encryption and WPA/WPA2 Support
PCMCIA: Sierra Wireless AC850
USB: Huawei E220