Zyxel USG 2200-VPN
Uncompromising Security and Performance for Next Generation Business Needs

Overview:

Powerful, Robust Anti-malware Protection for Medium- to Large-sized Businesses

Zyxel’s USG2200-VPN has been built on a powerful multi-core platform to deliver high performance that helps growing businesses to overcome challenges during expansion. In order to satisfy the needs for always-online communications, USG2200-VPN features multi-WAN load balancing/failover and a comprehensive mobile broadband USB modem support list for WAN backup operations. In addition, USG2200-VPN supports IPSec load balancing and failover to provide additional resiliency for the most mission-critical VPN deployments.

• Up to 25.0 Gbps Firewall Throughput
• Up to 3,000 VPN tunnels capability
• Robust hybrid VPN (IPSec/ SSL/L2TP over IPSec)
• More secure VPN connections with SHA-2 cryptographic
• Auto-provisioned client-tosite IPSec setup with Easy VPN
• Device HA Pro ensures smart handover
• Hotspot management supported
• Facebook WiFi, Intelligence social media authentication

Powerful and Robust

Zyxel’s USG Extreme Series is built on a powerful multi-core platform to deliver high performance that helps growing businesses to overcome challenges during the expansion. In order to satisfy the needs for always-online communications, the Series features multi-WAN load balancing/failover and a comprehensive mobile broadband USB modem support list for WAN backup operations. In addition, the Series supports IPSec load balancing and failover to provide additional resiliency for the most missioncritical VPN deployments.

Protection and optimization

The Zyxel USG Extreme Series provides extensive anti-malware protection and effective control of Web applications—like Facebook, Google Apps and Netflix—with industry-leading firewall, anti-virus, anti-spam, content filtering, IDP and application intelligence. These security measures are enhanced with SSL inspection, which helps block threats that are hidden in SSL encrypted connections and facilitates deeper policy enforcement.

Streamlined management

Unified security policy streamlines the configuration of firewall and every security feature to offer faster, easier and more consistent policy management. From a single interface, users can apply all policy criteria to every UTM feature with reduced complexity. The integrated WLAN controller also enables users to management up to 18 APs from a centralized user interface.

Best TCO for Wi-Fi Expansion

Addressing the connectivity needs in the BYOD trend, the Zyxel USG Extreme Series helps businesses deploying or expanding a managed Wi-Fi network with minimized efforts. Integrated with Zyxel AP Controller technology, the Series enables businesses to easily scale up the WLAN and to provide seamless Wi-Fi coverage in places like meeting rooms and guest reception areas.

Benefits:

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.

The complete range of Zyxel VPN Firewall delivers reliable, non-stop VPN services with dual-WAN failover and fallback support. With two WAN connections—one primary and one for redundancy—the Zyxel VPN Firewall automatically switches to the backup connection should the primary link fail, and automatically switches back to the primary connection once it is back online.

To support dynamic, mobile business operations in today’s BYOD (bring your own device) business environments, the VPN Firewall offers unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP/IPSec VPN on a wide variety of mobile Internet devices running the iOS, Android and Windows mobile platforms.

Best TCO for access expansion

People expect network access regardless of time or location. As a result, hotspots are in demand in an everexpanding assortment of locations. The USG2200-VPN integrated with Zyxel AP Controller technology enables users to manage APs from a centralized user interface. In addition, Zyxel Hotspot Management delivers a unified solution for business networks with user-friendly tools like Billing System, Walled Garden, Multiple Authentication, 3rd Party Social Login and User Agreement. With ZyWALL USG2200-VPN, businesses can now deploy or expand a managed WiFi network with minimal effort.

Swift and secure firmware upgrades

Locating firmware updates — not to mention identifying correct versions for your device and managing their installation — can be a complex and confusing ordeal. The ZyWALL VPN Firewall Series solves this with its new Cloud Helper service. Cloud Helper provides a simple step to look for up-to-date firmware information. New firmware is immediately made available upon release from our official database to ensure its authenticity and reliability.

Stay secure and Up-to-Date with OneSecurity

Zyxel provides frequent and timely updates in response to the latest security threats and advisories through OneSecurity — our free online service portal. OneSecurity offers informative network security resources and the know-how to assist businesses and IT administrators in keeping their network operations safe in the digital age. Information and resources can be found with one click via the GUI of ZyWALL USG Series and VPN Series products. IT staff can quickly and easily catch up on the latest threats, and then proceed to walkthroughs and troubleshooting protocols with the help of easy-to-follow FAQs — all provided to help users secure their networks and simplify management of our UTM products.

Subscription Services

The ZyWALL VPN Series provides a complete feature set to perfectly fit different business requirements as well as to enable the maximum performance and security with an all-in-one appliance. Comprehensive network modularity also empowers IT professionals to customize the system to meet their individual needs.

Features:

* Cloud CNM SecuManager management service requires license purchase. For more details please refer to web site
** For specific models supporting the 3G and 4G dongles on the list, please refer to the Zyxel product page at 3G dongle document.

Application Diagram:

VPN Application

• High-speed, high-security communications between local servers, remote devices and cloud-hosted applications with deployments of the ZyWALL VPN 50/100/300.
• Secure, reliable VPN connectivity with IPSec VPN load balancing and failover features delivers high-availability services for exceptional uptime.
• Easy-to-use, secure remote access via SSL, IPSec and L2TP over IPSec VPN.
• The headquarter ZyWALL Series can also establish an IPSec VPN connection with Amazon VPC for secured access to leverage the benefits of cloud-base and to expend on premise networks that extend into the cloud center.

Hotspot Management

• High speed internet access.
• Tier of service
• Log record for regulatory compliance
• Premium security control
• Various Network access control ( free or paid access, social login) 
  *: Hotspot Management supports for ZyWALL 110, USG110, or above in firmware ZLD4.25 or later.

Specifications:

Note:
*: This matrix with firmware ZLD4.31 or later.
*1: Actual performance may vary depending on network conditions and activated applications
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*5: Including Gateway-to-Gateway and Client-to-Gateway.
*6: With Zyxel service license to enable or extend the feature capacity.
*7: This is the recommend maximum number of concurrent logged-in devices.
*8: SafeSearch function in CF2.0 need to enable SSL inspection firstly and not for small business models.
*9: With Hotspot Management license support.

Model Comparison:

Model Name	USG20(W)-VPN	ZyWALL 110	ZyWALL 310	ZyWA LL 1100	USG2200-VPN
Product Images
Description	SB		SMB		MB
Firewall throughput (Mbps)	350	1,600	5,000	6,000	25,000
Max. concurrent sessions	20,000	150,000	500,000	1,000,000	1,500,000
VPN throughput (Mbps)	90	400	650	800	2,500
Max. concurrent IPSec VPN tunnels	10	100	300	1,000	3,000
Content filtering (CF 2.0)*1	Yes	Yes	Yes	Yes	Yes
Amazon VPC*2	Yes	Yes	Yes	Yes	Yes
Device HA Pro	-	Yes*1	Yes*1	Activate once registered	Activate once registered
Hotspot Management*1	-	Yes	Yes	Yes	Yes
Facebook WiFi	Yes	Yes	Yes	Yes	Yes

*1: With Zyxel service license to enable or extend the feature capacity
*2: ZyWALL/USG still be able to support by CLIs

Documentation:

Download the Zyxel ZyWALL USG 2200-VPN Datasheet (PDF).