User manual ZYXEL ENTERPRISE SECURITY BROCHURE

[. . . ] This multilayered security safeguards your organization's customer and company records, intellectual property, and critical resources from external and internal threats. Key Benefits Secure Connectivity Given the prevalence and importance of information technology (IT) systems today and the nature and scale of both the opportunities and risks associated with significant deployments of new networking technologies, organizations are forced to evaluate solutions to build up a safer infrastructure to secure online transactions, in which involve exchange of valuable information. The infrastructure should be tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers. Proactive Protection Malicious virus, worm, exploits could cripple corporate networks and halt business transactions. In addition to severe financial loss, you also risk leakage of confidential information. As mass-mailing software companies mushroom on the Internet, your network is bombarded with massive amounts of junk mails (spam). [. . . ] Road warriors and telecommuters can use SSL or L2TP VPN to safely access the company network without having to install VPN software. The Series provides a flexible and easy way to enable mobile employees, vendors and partners to confidently access your network resource for better efficiency. Branch Firewall Branch Headquarters IPSec VPN Web-based Application Server Application (Inventory, Store. . . ) Remote Desktop Network Extend Server Farm Client Mobile User SSL VPN Email Server BI System File Share OA, ERP System CRM System Internet VPN Enterprise Security ZyWALL Unified Security Gateway Series (100/200/300/1000/2000 Series) Application Firewall More and more network applications bring malicious software into your office. This kind of unwanted software, especially IM/P2P applications, may cause bandwidth waste or even system damage. Using the application patrol and bandwidth management features, you can have full control over traffic blocking or rate limit settings. Non-Business Related Business Related Non-stop Internet Access with Multiple WAN and 3G Backups The ZyWALL USG not only supports multiple WAN ports but also 3G through USB or PCMCIA cards. This feature enables "active-active" load sharing or "activepassive" failover configuration to deliver highly reliable network connectivity. LAN ZyWALL PWR AUX Operating in Active/Passive Mode IPSec or GRE Tunnel for Secure Connection WAN2 (3G) 3G Network USG 300 SYS CARD1 CARD2 1 RESET 2 3 10/100/1000 4 5 6 7 1 2 USB AUX CONSOLE Corporate Network Internet ZyWALL USG 300 Unified Security Gateway Remote Office WAN1 ZyWALL USG fail over and fail back between WAN1 (ADSL/Fiber) & WAN2 (3G WAN) Network Provider (IP VPN) BRAS Vantage CNM Centralized Network Management Host by SI or Customer Application Control Policy Primary ADSL Fiber Last-Mile Corporate Headquarters Business Related Applications Allow Business Related Non-Business Related Applications Bandwidth Limit IM P2P Block Backup Web Security (Secure Web Access): ZyXEL Safe Browsing There are increasing network threats coming from internal sources, since your employees could surf unknown Web sites located anywhere. Some Web sites contain malicious software like Trojan horses, spywares or worms that could take tolls to your company; thus finding ways to keep internal users from surfing dangerous Web sites is becoming an important issue. ZyXEL Safe Browsing feature can pinpoint the Web sites with malicious software and warn the users to stay away from potential threats. 1. Response ZyXEL Database 3rd-Party Database (Bluecoat + Google) High Availability High availability is essential in enterprise networks. It ensures a system or component can be continuously operational for a desirably long length of time. The ZyWALL USG series provide high Internet ZyXEL Integrated Database Device HA: Master Fails and Backup Takes Over LAN A 192. 168. 1. 1 ZyWALL PWR AUX availability feature as: · Multiple WAN ports and configure load balancing between these ports. · An auxiliary (backup) Internet connection as 1. 1. 1. 1 SYS CARD1 CARD2 USG 300 1 RESET 2 3 10/100/1000 4 5 6 7 1 2 USB AUX CONSOLE Master B ZyWALL PWR AUX Internet Backup USG 300 SYS CARD1 CARD2 1 RESET 2 3 10/100/1000 known as out of band Management . · A backup ZyWALL in the event the master ZyWALL fails (device HA). To minimize the impact of single-point failures, the ZyWALL USG Series supports device HA (High Availability) to assure network availability. 192. 168. 1. 1 4 5 6 7 1 2 USB AUX CONSOLE 1. 1. 1. 1 Enterprise Security ZyWALL Unified Security Gateway Series (100/200/300/1000/2000 Series) Comprehensive Reporting System The ZyWALL USG Series has a built-in reporting system that offers a comprehensive set of realtime and historical reports including firewall, virus and intrusion attacks, bandwidth usage, Web site usage and user activities. Furthermore, with Vantage Report (VRPT), a Web-based reporting system, administrators can easily collect traffic data and analyze a distributed network for their organizations to become more aware of suspicious activities and to ensure better business productivity. USG Built-in Reporting System ZyWALL USG series provides built-in reporting system to collect data and view various statistics about traffic passing through your ZyWALL. Free Anti-Spam Service ZyXEL's Anti-spam service eliminates spam, phishing, virus and malware threats through a unified security architecture without dropping legitimate messages. With ZyXEL's free anti-spam service, enterprises can save time and resources dealing with unwanted email to reduce operational costs. Spam Anti-Spam Service Mail Good Vantage Report Centralize Reporting System Vantage Report is a cost-effective solution that allows administrators to easily monitor and analyze report of ZyWALL Internet Security Appliances from any location. It delivers rich formats of statistical report for IT staff with thorough understanding about bandwidth usage, security event and web traffic analysis. Monitor Statistical Report ZyXEL Security Distribution Network (ZSDN) Ensures Rapid Response to New Threats ZSDN Provides Up-to-Date Protection · The myZyXEL. com Web site delivers a convenient, centralized way to register all ZyWALL units and Security Services. [. . . ] IPSec VPN Tunnels Max SSL VPN Users Environmental Specifications Operating Temperature Storage Temperature Operating Humidity Physical Specifications Dimensions (W) x (D) x (H) mm Weight, g 199. 2 x 212 x 36. 3 410 199. 2 x 212 x 36. 3 410 0°C ~ 40°C -30°C ~ 60°C 5% ~ 90% (non-condensing) 0°C ~ 40°C -30°C ~ 60°C 5% ~ 90% (non-condensing) 400 Mbps 400 Mbps 2000 750 100 Mbps 400 Mbps 2000 750 ZyWALL USG 1000 ZyWALL USG 2000 iCard 5 to 750 SSL Tunnels iCard 50 to 750 SSL Tunnels Software client 1 license IPSec VPN Client Ideal for remote teleworkers to access company resources in a secure manner. ' Optical Receiver Wavelength Connector Sensitivity -17 dBm -20 dBm -23 dBm -24 dBm 850 nm 1310 nm 1310 nm 1550 nm LC LC LC LC Transmission Distance vs. Fiber Cable Sepcification 62. 5 um Multi-Mode Fiber 220 m 550 m 50 um Multi-Mode Fiber 550 m 550 m 9/10 um Single-Mode Fiber 10 km 40 km 80 km Operational Ranges Supply Voltage 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V 3. 15 ~ 3. 45 V Max Current 300 mA 300 mA 300 mA 300 mA Vantage CNM A robust centralized Network Management System. Group Device Configuration for mass deployments: firmware upgrades, Policy installations and backup/restore, Real-time monitoring, alerting and com prehensive graphic reporting. [. . . ]