Call a Specialist Today! 888-785-4412

Zyxel USG20-VPN
Reliable Remote Access Solution for Small Businesses & Branch Offices

Sorry, this product is no longer available, please contact us for a replacement.

Click here to jump to more pricing!

Next-Gen Unified Security GatewayOverview:

USG20-VPN / USG20W-VPN provide safer and reliable VPN connections. Networking brings convenience and efficiency to business environments; however it introduces significant security and safety concerns at the same time. Today, small businesses or branch offices really need a complete yet affordable solution that not only bridges communications between two or more remote sites, but also connects multiple VPNs and ensures data security to prevent the network from threats.

  • Comprehensive supports to IPv6
  • Robust hybrid VPN (IPSec/SSL/ L2TP)
  • High-performance SPI Firewall
  • Bandwidth management
  • High Availability (HA) with multi-WAN failover and loadbalancing


Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN encryption algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.

Unlimited business mobility

To support dynamic, mobile business operations in today’s BYOD (bring your own device) business environments, the VPN Firewalls offer unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP VPN on a wide variety of mobile Internet devices running the iOS, Android and Windows mobile platforms.

Zyxel One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, Zyxel One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. Zyxel One Network presents an easy-to-use tool, Zyxel One Network Utility (ZON Utility), to realize speed network setup. Zyxel Smart Connect allows Zyxel networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. Zyxel One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

Zyxel One Network experience Service

Zyxel provides regular updates in response to the latest security threats and advisories, and a service portal that offers free, informative network security resource and know-how to help businesses and IT departments to protect their networks and operations from security risks of the digital age. The Zyxel USG and ZyWALL Series of products are integrated with service in the product GUI, so the IT staff can quickly and easily catch up with any new threats, and therefore proceed with walkthrough and troubleshooting actions with assistance from FAQs to better secure networks and easily manager UTM products.


  • ICSA-certified firewall (certification in progress)
  • Routing and transparent (bridge) modes
  • Stateful packet inspection
  • User-aware policy enforcement
  • SIP/H.323 NAT traversal
  • ALG support for customized ports
  • Protocol anomaly detection and protection
  • Traffic anomaly detection and protection
  • Flooding detection and protection
  • DoS/DDoS protection
IPv6 Support
  • Dual stack
  • IPv4 tunneling (6rd and 6to4 transition tunnel)
  • IPv6 addressing
  • DNS
  • DHCPv6
  • Bridge
  • VLAN
  • PPPoE
  • Static routing
  • Policy routing
  • Session control
  • Firewall and ADP
  • IPSec VPN
  • Content filtering
  • Anti-spam
  • ICSA-certified IPSec VPN (certification in progress)
  • Encryption: AES (256-bit), 3DES and DES
  • Supports generating SHA2 Certificate
  • Authentication: SHA-2 (512-bit), SHA-1 and MD5
  • Key management: manual key, IKEv1 and IKEv2 with EAP
  • Perfect forward secrecy (DH groups) support 1, 2, 5
  • IPSec NAT traversal
  • Dead peer detection and relay detection
  • PKI (X.509) certificate support
  • VPN concentrator
  • Simple wizard support
  • VPN auto-reconnection
  • VPN High Availability (HA): load-balancing and failover
  • L2TP over IPSec
  • GRE and GRE over IPSec
  • NAT over IPSec
  • Zyxel VPN client provisioning
  • Supports Windows and Mac OS X
  • Supports full tunnel mode
  • Supports 2-step authentication
  • Customizable user portal


  • Routing mode, bridge mode and hybrid mode
  • Ethernet and PPPoE
  • NAT and PAT
  • VLAN tagging (802.1Q)
  • Virtual interface (alias interface)
  • Policy-based routing (user-aware)
  • Policy-based NAT (SNAT)
  • Dynamic routing (RIPv1/v2 and OSPF)
  • DHCP client/server/relay
  • Dynamic DNS support
  • WAN trunk for more than 2 ports
  • Per host session limit
  • Guaranteed bandwidth
  • Maximum bandwidth
  • Priority-bandwidth utilization
  • Bandwidth limit per user
  • Bandwidth limit per IP
WLAN Management
  • Wireless L2 isolation
  • Wi-Fi Multimedia (WMM) wireless QoS
  • IEEE 802.1x authentication
  • RADIUS authentication
  • CAPWAP discovery protocol
  • Scheduled Wi-Fi service
  • Dynamic Channel Selection (DCS)
  • Captive portal Web authentication
  • Multiple SSID with VLAN


  • Built-in user database
  • Microsoft Windows Active Directory integration
  • External LDAP/RADIUS user database
  • XAUTH, IKEv2 with EAP VPN authentication
  • Web-based authentication
  • Forced user authentication (transparent authentication)
  • IP-MAC address binding
  • SSO (Single Sign-On) support
  • Comprehensive local logging
  • Syslog (send to up to 4 servers)
  • Email alerts (send to up to 2 servers)
  • Real-time traffic monitoring
  • System status monitoring
  • Built-in daily report
  • Advanced reporting (Vantage Report)

System Management

  • Role-based administration
  • Multiple administrator logins
  • Multi-lingual Web GUI (HTTPS and HTTP)
  • Command line interface (console, Web console, SSH and telnet)
  • SNMP v1, v2c, v3
  • System configuration rollback
  • Firmware upgrade via FTP, FTP-TLS and Web GUI
  • Dual firmware images
  • Cloud CNM SecuManager

Optional Security Services

  • Content filtering
  • Anti-Spam

Zyxel One Network

  • ZON Utility
    • IP configuration
    • Web GUI access
    • Firmware upgrade
    • Password configuration
  • Smart Connect
    • Discover neighboring devices
    • One-click remote management access to the neighboring Zyxel devices

Application Diagram:

VPN Application

  • Branch offices, partners and home users can deploy Zyxel USGs/ZyWALLs for site-to-site IPSec VPN connections
  • Branch offices/In-house staff can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
  • Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and L2TP over IPSec VPN
  • The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications

VPN Application



USG20-VPN Specifications
Hardware Specifications
10/100/1000 Mbps RJ-45 ports 1 x WAN, 1 x SFP, 4 x LAN/DMZ
USB ports 1
Console port Yes (RJ-45)
System Capacity & Performance*1
SPI firewall throughput (Mbps)*2 350
VPN throughput (Mbps)*3 90
Max. TCP concurrent sessions*4 20,000
Max. concurrent IPSec VPN tunnels 10
Max. concurrent SSL VPN users 15
Included SSL VPN user no. 5
Customizable zones Yes
IPv6 support Yes
Key Software Features
Firewall Yes
Virtual private network (VPN) Yes (IPSec, SSL, L2TP over IPSec)
Anti-spam Subscription based
Content Filtering (CF) Subscription based
Bandwidth management Yes
Logging and monitoring Yes
Unified security policy Yes
System management Yes
Power Requirements
Power input 12 V DC, 2.0 A max.
Max. power consumption (watt) 12.00
Heat dissipation (BTU/hr) 40.92
Physical Specifications
Item Dimensions (WxDxH)(mm/in.) 216 x 143 x 33/ 8.50 x 5.63 x 1.30
Weight (kg/lb.) 1.04/2.29
Packing Dimensions (WxDxH)(mm/in.) 276 x 185 x 98/ 10.87 x 7.28 x 3.86
Weight (kg/lb.) 1.41/3.11
Included accessories
  • Power adapter
  • RJ45 -RS232 cable for console connection
Environmental Specifications
Operating Temperature 0°C to 40°C (32°F to 104°F)
Humidity 10% to 90% (non-condensing)
Storage Temperature -30°C to 70°C (-22°F to 158°F)
Humidity 10% to 90% (non-condensing)
MTBF (hr) 44,000.00
EMC FCC Part 15 (Class B), IC, CE EMC (Class B), RCM, BSMI
Safety BSMI, UL
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool


Download the Zyxel USG20-VPN / USG20W-VPN Datasheet (PDF).

Pricing Notes:

Zyxel Products
ZyWALL IPSec VPN Client (Windows/Mac)
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 1 User
Our Price: $39.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 5 Users
List Price: $199.99
Our Price: $144.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 10 Users
List Price: $399.99
Our Price: $289.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 1 Year / 50 Users
List Price: $1,999.99
Our Price: $1,449.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 1 Users
List Price: $109.99
Our Price: $79.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 5 Users
List Price: $559.99
Our Price: $399.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 10 Users
List Price: $1,119.99
Our Price: $799.99
ZyWALL IPSec VPN Client - Windows/Mac OS Based VPN Client - 3 Years / 50 Users
List Price: $5,599.99
Our Price: $3,999.99
Content Filtering/SecuReporter/SPS
USG20-VPN / USG20W-VPN Series Content Filtering / SecuReporter/ SPS 1 Month License
List Price: $8.49
Our Price: $6.00
USG20-VPN / USG20W-VPN Series Content Filtering/SecuReporter/SPS 1 Year License for USG20-VPN / USG20W-VPN
List Price: $94.99
Our Price: $65.00
USG20-VPN / USG20W-VPN Series Content Filtering/SecuReporter/SPS 2 Years License for USG20-VPN / USG20W-VPN
List Price: $169.99
Our Price: $120.00
Upgrade AP Controller
USG / ZyWALL / UAG iCard AP Controller Upgrade Add 4 APs for USG / ZyWALL / UAG Series
List Price: $227.99
Our Price: $160.00