ZyXEL ZyWALLUSG300 Unified Security Gateway

ZyXEL Updated: 2009-02-06 RSS
ZyXEL ZyWALLUSG300 Unified Security Gateway

Unified Security Gateway for Small and Medium-Sized Businesses

* Hybrid VPN, both SSL and IPSec VPNs supported for flexible deployment
* Comprehensive threat protection with firewall, VPN, anti-virus, content filtering, Intrusion detection and prevention to secure front line threats
* IM/P2P management can prevent P2P or Instant Messaging applications to increase productivity
* Flexible security zone using VLAN technology to segregate local networks
* User-aware policy engine can set bandwith or network access based on user login
* Bandwidth management for traffic prioritization for VoIP or mission critical applications
* Network resilience with multiple WANs, 3G cellular support, and device high availability

User-Aware Policy Engine Enables Access Granularity
In addition to basic access control capabilities, the intelligent user-aware policy engine on the ZyWALL USG 300 is designed to make packet-forwarding decisions based on multiple criteria (such as user ID, user group, time of access and network quota, etc.). Furthermore, security staff can apply access policies against a variety of security features such as VPN, Content Filter and Application Patrol. In conjunction with VLAN and custom security zones, corporate security policies can be effectively enforced to prevent unauthorized access to the network resources.

Bandwidth Management Ensures Quality of Service
The ZyWALL USG 300 provides bandwidth management features for traffic prioritization to guarantee or restrict bandwidth usage per interface/protocol. Security staff can allocate bandwidth for a variety of applications or computer hosts on the corporate network, regardless of the direction of the connection. For example, it's possible to assign higher priority and larger bandwidth to time-critical applications such as VoIP and video conferencing for quality transmission services. In addition, ZyWALL USG 300 allows you to keep track of bandwidth usage with comprehensive statistical reports.

VoIP Security: Protecting the Converged Networks
Attracted by the benefits, more and more businesses are deploying VoIP applications on their networks. With the transition to VoIP also come security risks and voice quality issues. As a VoIP-friendly firewall, the ZyWALL USG 300 reduces the security risks associated with the adoption of VoIP by offering the SIP/H.323 ALG feature to dynamically open only the required ports during VoIP calls; once the call is complete, the opened ports are automatically closed to prevent port sniffing. The IDP feature can detect and prevent attacks usually associated with VoIP deployments. Ultimately, by establishing VoIP traffics over VPNs with traffic prioritization, security staff can minimize security breaches while optimizing call quality over the existing ISP links.

High Availability Features Guarantee Non-Stop Operations for Mission-Critical Applications
With the High Availability features, the ZyWALL USG 300 helps the security staff to easily set up a highly reliable and secure network infrastructure for your business. To minimize the impact of single-point failures, the ZyWALL USG 300 supports device HA (High Availability) to assure network availability should any device failure happen.

On the WAN side, the ZyWALL USG 300 can connect multiple ISP links to ensure Internet availability in case a single ISP link becomes unreliable. The multiple-WAN load-balancing feature can also optimize the bandwidth usage over each ISP link.