Call a Specialist Today! 888-785-4412

Zyxel USG 1900
Uncompromising Security and Performance for Next Generation Business Needs

Zyxel Products
Zyxel USG 1900
USG1900 - Next Generation Unified Security Gateway w/2000 VPN Tunnels, SSL VPN, 8 GbE WAN/LAN/DMZ
List Price: $3,854.99
Our Price: $2,750.00

Click here to jump to more pricing!

Next-Gen Unified Security GatewayOverview:

Powerful, Robust Anti-malware Protection for Medium- to Large-sized Businesses

As business grows and network expands, more and more users and devices as well as new applications like cloud-based services would join the network. It means that high network availability for sustainable business, more workplace Wi-Fi and up-to-date regulations for application usages are eagerly needed. Without an effective solution to control, optimize or block social and some other Web applications, businesses would risk not only losing productivity but also exposing company network to new threats.

The new Zyxel USG Extreme Series are Next Generation Firewalls (NGFW) designed to deliver high availability, anti-malware protection and consolidated policy enforcement for medium-to large-sized businesses and campuses. The Zyxel USGs provides WAN and VPN load balancing and failover ensures nonstop business communications, while incorporating bestin-breed anti-virus, anti-spam, content filtering and application intelligence technology for effective application optimization and comprehensive network protection.

  • High-performance, high-value Next Generation Firewall (NGFW) for medium and large-sized businesses and campuses
  • Anti-malware protection with firewall, anti-virus, antispam, content filtering, IDP, next-generation application intelligence and SSL inspection
  • Robust SSL, IPSec and L2TP over IPSec VPN connectivity and VPN High Availability (HA)
  • Unified security policy streamlines the configuration and management efforts
  • Built-in WLAN controller for centralized AP management and effortless WLAN scalability of up to 18 APs

Powerful and Robust

Zyxel’s USG Extreme Series is built on a powerful multi-core platform to deliver high performance that helps growing businesses to overcome challenges during the expansion. In order to satisfy the needs for always-online communications, the Series features multi-WAN load balancing/failover and a comprehensive mobile broadband USB modem support list for WAN backup operations. In addition, the Series supports IPSec load balancing and failover to provide additional resiliency for the most missioncritical VPN deployments.

Protection and optimization

The Zyxel USG Extreme Series provides extensive anti-malware protection and effective control of Web applications—like Facebook, Google Apps and Netflix—with industry-leading firewall, anti-virus, anti-spam, content filtering, IDP and application intelligence. These security measures are enhanced with SSL inspection, which helps block threats that are hidden in SSL encrypted connections and facilitates deeper policy enforcement.

Streamlined management

Unified security policy streamlines the configuration of firewall and every security feature to offer faster, easier and more consistent policy management. From a single interface, users can apply all policy criteria to every UTM feature with reduced complexity. The integrated WLAN controller also enables users to management up to 18 APs from a centralized user interface.

Best TCO for Wi-Fi Expansion

Addressing the connectivity needs in the BYOD trend, the Zyxel USG Extreme Series helps businesses deploying or expanding a managed Wi-Fi network with minimized efforts. Integrated with Zyxel AP Controller technology, the Series enables businesses to easily scale up the WLAN and to provide seamless Wi-Fi coverage in places like meeting rooms and guest reception areas.


Dual-WAN & Mobile Broadband

Dual-WAN & Mobile Broadband

The Zyxel USG Advanced Series provides non-stop Internet uptime with multi-WAN and mobile broadband support. Multi-WAN works with two or more Ethernet WAN connections for active-active WAN load balancing or active-passive failover. Comprehensive mobile broadband USB modems are also supported for WAN backup.

VPN High Availability (HA)

VPN High Availability (HA)

Zyxel USGs feature VPN HA to satisfy the demands of the most mission-critical VPN deployments. Supporting advanced GRE over IPSec technology, users can deploy two IPSec VPN tunnels for active-active VPN load balancing or active-passive failover.

Unified Security Policy

Unified Security Policy

Unified security policy offers object-based management and a unified configuration interface for firewall and all security-related policies. Users can easily apply all policy criteria to every UTM feature, reduce configuration time, and get more streamlined policy management.



Powered by Kaspersky SafeStream II gateway anti-virus, Zyxel USGs provide comprehensive and real-time protection against malware threats before they enter the network. Zyxel USGs can identify and block over 650,000 viruses right at the gate and provide high-speed scanning with stream-based virus scanning technology.



With a cloud-based IP reputation system, Zyxel anti-spam can deliver accurate, zero-hour spam outbreak protection by analyzing up-to-the-minute sender reputation data from highly diverse traffic sources. It can detect spam outbreaks in the first few minutes of emergence regardless of spam language or format.

Robust VPN

Robust VPN

Zyxel USGs support high-throughput IPSec, L2TP over IPSec and SSL VPN for a wide range of site-to-client and site-to-site VPN deployments. Reinforced with the advanced SHA-2 encryption, the Zyxel USGs provide the most secure VPN for business communications.

Integrated WLAN Controller

Integrated WLAN Controller

The integrated WLAN controller supports CAPWAP, and enables centralized authentication and access management of multiple APs in the network. The Zyxel USG Advanced Series can manage 2 APs by default, and up to 18 APs with license upgrade.

Application Intelligence

Application Intelligence

Zyxel’s USG Advanced Series can identify, categorize and control over 3,000 social, gaming, productivity, and other Web applications and behaviors. Users can prioritize productive applications, throttle acceptable ones, and block unproductive applications to boost productivity and prevent bandwidth abuse.

SSL Inspection

SSL Inspection

SSL inspection enables the Zyxel Advanced Series to provide not only comprehensive security, but also deeper policy enforcement. It enables the USG’s application intelligence, IDP, content filtering and anti-virus to inspect traffic in SSL encrypted connections and block threats that usually go unseen.

Content Filtering

Content Filtering

Zyxel content filtering helps screen access to websites that are not business related or malicious. With a massive, cloud-based database of over 140 billion URLs that are continuously analyzed and tracked, Zyxel provides highly accurate, broad and instant protection against malicious Web content.


  • ICSA-certified firewall (certification in progress)
  • Routing and transparent (bridge) modes
  • Stateful packet inspection
  • User-aware policy enforcement
  • SIP/H.323 NAT traversal
  • ALG support for customized ports
  • Protocol anomaly detection and protection
  • Traffic anomaly detection and protection
  • Flooding detection and protection
  • DoS/DDoS protection
IPv6 Support
  • IPv6 Ready gold logo (certification in progress)
  • Dual stack
  • IPv4 tunneling (6rd and 6to4 transition tunnel)
  • IPv6 addressing
  • DNS
  • DHCPv6
  • Bridge
  • VLAN
  • PPPoE
  • Static routing
  • Policy routing
  • Session control
  • Firewall and ADP
  • IPSec VPN
  • Intrusion Detection and Prevention (IDP)
  • Application intelligence and optimization
  • Content filtering
  • Anti-virus, anti-malware
  • Anti-spam
  • ICSA-certified IPSec VPN (certification in progress)
  • Encryption: AES (256-bit), 3DES and DES
  • Authentication: SHA-2 (512-bit), SHA-1 and MD5
  • Key management: manual key, IKEv1 and IKEv2 with EAP
  • Perfect forward secrecy (DH groups) support 1, 2, 5
  • IPSec NAT traversal
  • Dead peer detection and relay detection
  • PKI (X.509) certificate support
  • VPN concentrator
  • Simple wizard support
  • VPN auto-reconnection
  • VPN High Availability (HA): load-balancing and failover
  • L2TP over IPSec
  • GRE and GRE over IPSec
  • NAT over IPSec
  • Zyxel VPN client provisioning
  • Supports Windows and Mac OS X
  • Supports full tunnel mode
  • Supports 2-step authentication
  • Customizable user portal

Intrusion Detection and Prevention (IDP)

  • Routing and transparent (bridge) mode
  • Signature-based and behavior-based scanning
  • Automatic signature updates
  • Customizable protection profile
  • Customized signatures supported
  • SSL (HTTPS) inspection support
Application Intelligence and Optimization
  • Granular control over the most important applications
  • Identifies and controls over 3,000 applications and behaviors
  • Supports over 15 application categories
  • Application bandwidth management
  • Supports user authentication
  • Real-time statistics and reports
  • SSL (HTTPS) inspection support
  • Supports Bitdefender anti-virus signatures
  • Identifies and blocks over 650,000 viruses
  • Stream-based anti-virus engine
  • HTTP, FTP, SMTP, POP3 and IMAP4 protocol support
  • Automatic signature updates
  • No file size limitation
  • SSL (HTTPS) inspection support
  • Transparent mail interception via SMTP and POP3 protocols
  • Configurable POP3 and SMTP ports
  • Sender-based IP reputation filter
  • Recurrent Pattern Detection (RPD) technology
  • Zero-hour virus outbreak protection
  • X-Header support
  • Blacklist and whitelist support
  • Supports DNSBL checking
  • Spam tag support
  • Statistics report
Content Filtering
  • Social media filtering
  • Malicious Website filtering
  • URL blocking and keyword blocking
  • Blacklist and whitelist support
  • Blocks java applets, cookies and ActiveX
  • Dynamic, cloud-based URL filtering database
  • Unlimited user license support
  • Customizable warning messages and redirection URL
  • SSL (HTTPS) inspection support

Unified Security Policy

  • Unified policy management interface
  • Supported UTM features: anti-virus, antispam, IDP, content filtering, application intelligence, firewall (ACL)
  • 3-tier configuration: object-based, profilebased, policy-based
  • Policy criteria: zone, source and destination IP address, user, time

WLAN Management

  • Zyxel AP Controller (APC) 1.0 compliant
  • Client RSSI threshold to prevent sticky clients
  • IEEE 802.1x authentication
  • Captive portal Web authentication
  • Customizable captive portal page
  • RADIUS authentication
  • Wi-Fi Multimedia (WMM) wireless QoS
  • CAPWAP discovery protocol

Mobile Broadband

  • WAN connection failover via 3G and 4G* USB modems
  • Auto fallback when primary WAN recovers* 4G USB modem support available in future firmware upgrades
  • Routing mode, bridge mode and hybrid mode
  • Ethernet and PPPoE
  • NAT and PAT
  • VLAN tagging (802.1Q)
  • Virtual interface (alias interface)
  • Policy-based routing (user-aware)
  • Policy-based NAT (SNAT)
  • Dynamic routing (RIPv1/v2 and OSPF)
  • DHCP client/server/relay
  • Dynamic DNS support
  • WAN trunk for more than 2 ports
  • Per host session limit
  • Guaranteed bandwidth
  • Maximum bandwidth
  • Priority-bandwidth utilization
  • Bandwidth limit per user
  • Bandwidth limit per IP
  • Local user database
  • Microsoft Windows Active Directory integration
  • External LDAP/RADIUS user database
  • XAUTH, IKEv2 with EAP VPN authentication
  • Web-based authentication
  • Forced user authentication (transparent authentication)
  • IP-MAC address binding
  • SSO (Single Sign-On) support
System Management
  • Role-based administration
  • Multiple administrator logins
  • Multi-lingual Web GUI (HTTPS and HTTP)
  • Command line interface (console, Web console, SSH and TELNET)
  • SNMP v2c (MIB-II)
  • System configuration rollback
  • Firmware upgrade via FTP, FTP-TLS and Web GUI
  • Dual firmware images
  • Comprehensive local logging
  • Syslog (to up to 4 servers)
  • Email alerts (to up to 2 servers)
  • Real-time traffic monitoring
  • Built-in daily report
  • Advanced reporting with Vantage Report

Application Diagram:

Anti-Malware Protection and Application Optimization

  • Enabling anti-virus, anti-spam and intrusion prevention, business networks gain deep, extensive protection against all types of malware threats
  • Content filtering enables businesses to deny access to Websites that are malicious or not business-related
  • Application intelligence technology not only enable businesses to block or throttle non-productive Web applications, but also optimize Web applications that increase productivity
Anti-malware protection and application optimization

VPN Application

  • Branch offices, partners and home users can deploy Zyxel USGs/ ZyWALLs for site-to-site IPSec VPN connections
  • Branch offices can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
  • Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and L2TP over IPSec VPN
  • The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications

VPN application


USG1900 Specifications
Hardware Specifications
10/100/1000 Mbps RJ-45 ports 8 (configurable)
USB ports 2
Console port Yes (DB9)
Rack-mountable Yes
System Capacity & Performance*1
SPI firewall throughput (Mbps)*2 7,000
VPN throughput (Mbps)*3 900
IDP throughput (Mbps)*4 650
AV throughput (Mbps)*4 600
UTM throughput (AV and IDP)*4 600
Unlimited user licenses Yes
Max. concurrent sessions*5 500,000
New TCP session rate 12,000
Max. concurrent IPsec VPN tunnels 2,000
Max. concurrent SSL VPN users 755
Included SSL VPN user no. 55
Customizable zones Yes
IPv6 support Yes
VLAN interface 128
WLAN Management
AP Controller (APC) ver. 1.0
Managed AP number (default/max.) 2/18
Key Software Features
Virtual Private Network (VPN) Yes (IPSec, SSL, L2TP over IPSec)
Firewall Yes
Anti-Virus (AV) Yes
Anti-spam Yes
Content Filtering (CF) Yes
Application intelligence and optimization Yes
Intrusion Detection and Prevention (IDP) Yes
SSL inspection Yes
Single Sign-On (SSO) Yes
WLAN controller Yes
Power Requirements
Power input 100 - 240 V AC, 50/60 Hz, 1.3 A max.
Max. power consumption (watt) 58.5
Physical Specifications
Item Dimensions (WxDxH)(mm/in.) 430 x 250 x 44 / 16.93 x 9.84 x 1.73
Weight (kg/lb.) 3.3 / 7.28
Packing Dimensions (WxDxH)(mm/in.) 519 x 392 x 163 / 20.43 x 15.43 x 6.42
Weight (kg/lb.) 4.8 / 10.58
Included accessories
  • Power cord
  • Rack mounting kit
Environmental Specifications
Operating Temperature 0°C to 40°C (32°F to 104°F)
Humidity 10% to 90% (non-condensing)
Storage Temperature -30°C to 70°C (-22°F to 158°F)
Humidity 10% to 90% (non-condensing)
MTBF (hr) 560,811.5
EMC FCC Part 15 (Class B), CE EMC (Class B), C-Tick (Class B), BSMI
Safety LVD (EN60950-1), BSMI

*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: AV and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
6: Product availability varies by country and region. Please contact local sales team regarding availability in your region.

Model Comparison:

Model Name USG40/40W USG60/60W USG110 USG210 USG310 USG1100 USG1900
Product Images USG40/40W USG60/60W USG110 USG210 USG310 USG1100 USG1900
Description Performance Series Advanced Series Extreme Series
Firewall throughput 400 Mbps 1.0 Gbps 1.6 Gbps 1.9 Gbps 5.0 Gbps 6.0 Gbps 7.0 Gbps
VPN throughput 100 Mbps 180 Mbps 400 Mbps 500 Mbps 650 Mbps 800 Mbps 900 Mbps
UTM throughput
(AV and IDP)
50 Mbps 90 Mbps 250 Mbps 300 Mbps 400 Mbps 500 Mbps 600 Mbps
Max. TCP concurrent sessions 20,000 40,000 60,000 80,000 100,000 300,000 500,000
Wi-Fi 802.11 b/g/n
2.4 GHz
802.11 a/b/g/n Concurrent
2.4 & 5 GHz
- - - - -
Managed AP number (default/max.) 2/10 2/10 2/18 2/18 2/18 2/18 2/18
Multi-WAN Yes Yes Yes Yes Yes Yes Yes
Unified security policy Yes Yes Yes Yes Yes Yes Yes
SSL inspection - - Yes Yes Yes Yes Yes
Device HA - - Yes Yes Yes Yes Yes
Port grouping Yes Yes Yes Yes - - -


Download the Zyxel ZyWALL Next Generation USG Series Datasheet (PDF).

Pricing Notes:

Zyxel Products
Zyxel USG 1900
USG1900 - Next Generation Unified Security Gateway w/2000 VPN Tunnels, SSL VPN, 8 GbE WAN/LAN/DMZ
List Price: $3,854.99
Our Price: $2,750.00
iCard Bitdefender Anti-Virus
USG1900 iCard Anti-Virus 1 Year for USG1900
List Price: $840.00
Our Price: $600.00
iCard Content Filtering
USG1900 iCard Content Filtering 1 Year for USG1900
List Price: $1,109.99
Our Price: $790.00
Upgrade AP Controller
USG / ZyWALL / UAG iCard AP Controller Upgrade Add 4 APs for USG / ZyWALL / UAG Series
List Price: $227.99
Our Price: $160.00
ZyWALL IPSec VPN Client (Windows/Mac)
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 1 User
Our Price: $39.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 5 Users
List Price: $199.99
Our Price: $144.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 10 Users
List Price: $399.99
Our Price: $289.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 50 Users
List Price: $1,999.99
Our Price: $1,449.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 1 Users
List Price: $109.99
Our Price: $79.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 5 Users
List Price: $559.99
Our Price: $399.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 10 Users
List Price: $1,119.99
Our Price: $799.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 50 Users
List Price: $5,599.99
Our Price: $3,999.99
Hotspot Management Upgrade
USG / ZyWALL/VPN 310/1100/1900/2200 Hotspot Concurrent Device Upgrade 300 Nodes
List Price: $460.00
Our Price: $340.00
USG / ZyWALL/VPN 110/210/310/1100/1900/2200 Hotspot Management License 1 Year License
List Price: $164.99
Our Price: $115.00
USG / ZyWALL/VPN 110/210/310/1100/1900/2200 Hotspot Management License One Time Perpetual License
List Price: $409.99
Our Price: $290.00
UTM Bundle
List Price: $1,889.99
Our Price: $1,349.99