Zyxel USG20W-VPN
Reliable Remote Access Solution for Small Businesses & Branch Offices

Zyxel Products

Zyxel VPN Firewall

Zyxel USG20W-VPN Next Generation Unified Security Gateway VPN Firewall w/11ac Wireless

#USG20W-VPN
List Price: ~~$329.99~~
Our Price: $229.99

Click here to jump to more pricing!

Overview:

USG20-VPN / USG20W-VPN provide safer and reliable VPN connections. Networking brings convenience and efficiency to business environments; however it introduces significant security and safety concerns at the same time. Today, small businesses or branch offices really need a complete yet affordable solution that not only bridges communications between two or more remote sites, but also connects multiple VPNs and ensures data security to prevent the network from threats.

Comprehensive supports to IPv6
Robust hybrid VPN (IPSec/SSL/ L2TP)
802.11 ac with single-radio dualband (2.4G/5G) Wi-Fi support
High-performance SPI Firewall
Bandwidth management
High Availability (HA) with multi-WAN failover and loadbalancing

Benefits:

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN encryption algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.

Unlimited business mobility

To support dynamic, mobile business operations in today’s BYOD (bring your own device) business environments, the VPN Firewalls offer unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP VPN on a wide variety of mobile Internet devices running the iOS, Android and Windows mobile platforms.

Zyxel One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, Zyxel One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. Zyxel One Network presents an easy-to-use tool, Zyxel One Network Utility (ZON Utility), to realize speed network setup. Zyxel Smart Connect allows Zyxel networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. Zyxel One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

Zyxel One Network experience

OneSecurity.com Service

Zyxel provides regular updates in response to the latest security threats and advisories, and a service portal that offers free, informative network security resource and know-how to help businesses and IT departments to protect their networks and operations from security risks of the digital age. The Zyxel USG and ZyWALL Series of products are integrated with OneSecurity.com service in the product GUI, so the IT staff can quickly and easily catch up with any new threats, and therefore proceed with walkthrough and troubleshooting actions with assistance from FAQs to better secure networks and easily manager UTM products.

Features:

Firewall

ICSA-certified firewall (certification in progress)
Routing and transparent (bridge) modes
Stateful packet inspection
User-aware policy enforcement
SIP/H.323 NAT traversal
ALG support for customized ports
Protocol anomaly detection and protection
Traffic anomaly detection and protection
Flooding detection and protection
DoS/DDoS protection

IPv6 Support

Dual stack
IPv4 tunneling (6rd and 6to4 transition tunnel)
IPv6 addressing
DNS
DHCPv6
Bridge
VLAN
PPPoE
Static routing
Policy routing
Session control
Firewall and ADP
IPSec VPN
Content filtering
Anti-spam

IPSec VPN

ICSA-certified IPSec VPN (certification in progress)
Encryption: AES (256-bit), 3DES and DES
Supports generating SHA2 Certificate
Authentication: SHA-2 (512-bit), SHA-1 and MD5
Key management: manual key, IKEv1 and IKEv2 with EAP
Perfect forward secrecy (DH groups) support 1, 2, 5
IPSec NAT traversal
Dead peer detection and relay detection
PKI (X.509) certificate support
VPN concentrator
Simple wizard support
VPN auto-reconnection
VPN High Availability (HA): load-balancing and failover
L2TP over IPSec
GRE and GRE over IPSec
NAT over IPSec
Zyxel VPN client provisioning

SSL VPN

Supports Windows and Mac OS X
Supports full tunnel mode
Supports 2-step authentication
Customizable user portal

Networking

Routing mode, bridge mode and hybrid mode
Ethernet and PPPoE
NAT and PAT
VLAN tagging (802.1Q)
Virtual interface (alias interface)
Policy-based routing (user-aware)
Policy-based NAT (SNAT)
Dynamic routing (RIPv1/v2 and OSPF)
DHCP client/server/relay
Dynamic DNS support
WAN trunk for more than 2 ports
Per host session limit
Guaranteed bandwidth
Maximum bandwidth
Priority-bandwidth utilization
Bandwidth limit per user
Bandwidth limit per IP

WLAN Management

Wireless L2 isolation
Wi-Fi Multimedia (WMM) wireless QoS
IEEE 802.1x authentication
RADIUS authentication
CAPWAP discovery protocol
Scheduled Wi-Fi service
Dynamic Channel Selection (DCS)
Captive portal Web authentication
Multiple SSID with VLAN

Authentication

Built-in user database
Microsoft Windows Active Directory integration
External LDAP/RADIUS user database
XAUTH, IKEv2 with EAP VPN authentication
Web-based authentication
Forced user authentication (transparent authentication)
IP-MAC address binding
SSO (Single Sign-On) support

Logging/Monitoring

Comprehensive local logging
Syslog (send to up to 4 servers)
Email alerts (send to up to 2 servers)
Real-time traffic monitoring
System status monitoring
Built-in daily report
Advanced reporting (Vantage Report)

System Management

Role-based administration
Multiple administrator logins
Multi-lingual Web GUI (HTTPS and HTTP)
Command line interface (console, Web console, SSH and telnet)
SNMP v1, v2c, v3
System configuration rollback
Firmware upgrade via FTP, FTP-TLS and Web GUI
Dual firmware images
Cloud CNM SecuManager

Optional Security Services

Content filtering
Anti-Spam

Zyxel One Network

ZON Utility
- IP configuration
- Web GUI access
- Firmware upgrade
- Password configuration
Smart Connect
- Discover neighboring devices
- One-click remote management access to the neighboring Zyxel devices

Application Diagram:

VPN Application

Branch offices, partners and home users can deploy Zyxel USGs/ZyWALLs for site-to-site IPSec VPN connections
Branch offices/In-house staff can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and L2TP over IPSec VPN
The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications

VPN Application

Specifications:

USG20W-VPN Specifications
Hardware Specifications
10/100/1000 Mbps RJ-45 ports		1 x WAN, 1 x SFP, 4 x LAN/DMZ
USB ports		1
Console port		Yes (RJ-45)
System Capacity & Performance^*1
*SPI firewall throughput (Mbps)²**		350
*VPN throughput (Mbps)³**		90
*Max. TCP concurrent sessions⁴**		20,000
Max. concurrent IPSec VPN tunnels		10
Max. concurrent SSL VPN users		15
Included SSL VPN user no.		5
Customizable zones		Yes
IPv6 support		Yes
Wireless Specifications
Standard compliance		IEEE 802.11ac/n compliance
Wireless frequency		2.4 GHz/5 GHz
Radio		1
SSID number		8
Maximum transmit power	US (FCC) 2.4 GHz	25 dBm, 3 antennas
	US (FCC) 5 GHz	25 dBm, 3 antennas
	EU (ETSI) 2.4 GHz	20 dBm (EIRP), 3 antennas
	EU (ETSI) 5 GHz	20 dBm (EIRP), 3 antennas
No. of antenna		3 detachable antennas
Antenna gain		2 dBi @2.4 GHz, 3 dBi @5 GHz
Data rate		802.11n Up to 450 Mbps 820.11ac Up to 1300 Mbps
Receive sensitivity	2.4 GHz	11 Mbps ≤ -87 dBm 54 Mbps ≤ -74 dBm HT20, MCS15 ≤ -71 dBm HT40, MCS15 ≤ -67 dBm
Receive sensitivity	5 GHz	54 Mbps ≤ -74 dBm HT20, MCS23 ≤ -71 dBm HT40, MCS23 ≤ -68 dBm VHT20, MCS8 ≤ -66 dBm VHT40, MCS9 ≤ -62 dBm VHT80, MCS9 ≤ -59 dBm
Key Software Features
Firewall		Yes
Virtual private network (VPN)		Yes (IPSec, SSL, L2TP over IPSec)
Anti-spam		Subscription based
Content Filtering (CF)		Subscription based
Bandwidth management		Yes
Logging and monitoring		Yes
Unified security policy		Yes
System management		Yes
Power Requirements
Power input		12 V DC, 2.0 A max.
Max. power consumption (watt)		18.00
Heat dissipation (BTU/hr)		61.38
Physical Specifications
Item	Dimensions (WxDxH)(mm/in.)	216 x 143 x 33/ 8.50 x 5.63 x 1.30
Item	Weight (kg/lb.)	1.14/2.51 (Antenna included)
Packing	Dimensions (WxDxH)(mm/in.)	276 x 185 x 98/ 10.87 x 7.28 x 3.86
Packing	Weight (kg/lb.)	1.50/3.31
Included accessories		Power adapter RJ45 -RS232 cable for console connection Antenna
Environmental Specifications
Operating	Temperature	0°C to 40°C (32°F to 104°F)
Operating	Humidity	10% to 90% (non-condensing)
Storage	Temperature	-30°C to 70°C (-22°F to 158°F)
Storage	Humidity	10% to 90% (non-condensing)
MTBF (hr)		44,000.00
Certifications
EMC		FCC Part 15 (Class B), IC, CE EMC (Class B), RCM, BSMI
Safety		BSMI, UL

Note:
*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool

Documentation:

Download the Zyxel USG20-VPN / USG20W-VPN Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.

Zyxel Products

Zyxel VPN Firewall

Zyxel USG20W-VPN Next Generation Unified Security Gateway VPN Firewall w/11ac Wireless

#USG20W-VPN
List Price: ~~$329.99~~
Our Price: $229.99

ZyWALL IPSec VPN Client (Windows/Mac)

ZyWALL SecuExtender IPSec VPN Client/SSL VPN Client (uOS) - Windows/Mac OS Based VPN Client - 3 Years / 1 Users

#IPSEC3Y1U
List Price: ~~$109.99~~
Our Price: $79.99

ZyWALL SecuExtender IPSec VPN Client/SSL VPN Client (uOS) - Windows/Mac OS Based VPN Client - 3 Years / 5 Users

#IPSEC3Y5U
List Price: ~~$559.99~~
Our Price: $399.99

ZyWALL SecuExtender IPSec VPN Client/SSL VPN Client (uOS) - Windows/Mac OS Based VPN Client - 3 Years / 10 Users

#IPSEC3Y10U
List Price: ~~$1,119.99~~
Our Price: $799.99

ZyWALL SecuExtender IPSec VPN Client/SSL VPN Client (uOS) - Windows/Mac OS Based VPN Client - 3 Years / 50 Users

#IPSEC3Y50U
List Price: ~~$5,599.99~~
Our Price: $3,999.99

Upgrade AP Controller

USG / ZyWALL / UAG iCard AP Controller Upgrade Add 4 APs for USG / ZyWALL / UAG Series

#ICAP4USGZW
List Price: ~~$227.99~~
Our Price: $160.00

Zyxel USG20W-VPN Reliable Remote Access Solution for Small Businesses & Branch Offices

Overview:

Benefits:

Safer, more reliable VPN connections

Unlimited business mobility

Zyxel One Network experience

OneSecurity.com Service

Features:

Application Diagram:

VPN Application

Specifications:

Documentation:

Zyxel USG20W-VPN
Reliable Remote Access Solution for Small Businesses & Branch Offices