Zyxel USG FLEX 50 Firewall Discontinued
Retail/Branch Office VPN Firewall
Sorry, this product is no longer available,
replaced by the USG LITE 60AX.
Please contact us to explore replacement options or consider visiting our Legacy Products Licensing page, where you can purchase licenses for our discontinued products.
Overview:
The latest USG FLEX 50/50AX is equipped with one single cloud management platform while strengthening the robust VPN connections across the branch offices and chain stores with an easy-to-use, integrated security solution designed specifically for your needs. USG FLEX 50/50AX delivers the best-of-breed protection without the cost or complexity.
Flexible to adapt to On Premises or Nebula cloud
Manage all distributed networks from one single screen
Web Filtering protects you from undesirable content
Device Insight provides better visibility and control
Analytics report and enhanced insights
WiFi 6 (802.11ax) dual-radio speeds up to 1800 Mbps
Features:
Secure Retail/Branch Network
The USG FLEX 50 provides comprehensive VPN connection types including IKEv2, SSL & IPsec VPN. All offer customers secured remote connections. IPsec VPN hardware engine for high-efficiency VPN tunnel. VPN load balance/failover with IKEv2 ensures strong VPN reliability and security for your business.
The USG FLEX 50 is designed specifically for the needs of small business and branch locations, delivering enterprise-class security. Advanced networking and security features like Web Filtering, Security Profile Sync, and SecuReporter improves security by blocking access to malicious or risky websites, along with controlled access with integrated firewall policy for highly granular blocking and filtering, creating a unified security solution for both wired and wireless networks.
Centralized Provisioning from Nebula
With Zero-Touch deployment and simplified centralized management, installation and operation is no longer a hassle. After being registered to a network, the USG FLEX 50 will automatically be discovered when it's connected, then the preconfigured settings are automatically applied.
The USG FLEX 50 helps customers to comply with regulations by offering log archiving service without the need for additional hardware and software installation.
Deep Insight Into All Your Devices
Device Insight gives you more visibility of your networks including wired, wireless, BYOD, and IoT devices. You can create access policy with device contextual such as OS version or device category to enforce network segmentation. This reduces the attack surface and prevents threats from spreading. It also helps SMB(s) reduce time spent on investigation. Continuing with our goal of providing our customers with increased visibility, ZyxelSecuReportergives your organization comprehensive endpoint inventory dashboard.
Comprehensive Content Filtering Service
USG FLEX 50 delivers enhanced content filtering functionality and security through its powerful combination of both reputation and category-based filtering. The dynamic content categorization analyzes the content of a previously unknown website and domain, then determines if it belongs to an undesirable category including gambling, pornography, games, and many others. A newly added DNS content filter offers a better approach to inspect web access, particularly when the website is deploying ESNI (Encrypted Server Name Indication) where the traditional URL filtering is not applicable to the destination domain.
All from One Place with Ease
From access points, switches, security gateways and firewalls, all Nebula devices are managed through the cloud using an intuitive interface that allows you to configure, manage, and troubleshoot all distributed networks from one single screen without the complexity of remote site access.
Analytics Report and Enhanced Insights
USG FLEX series dashboard gives user-friendly traffic summary and threat statistic visuals. UtilizeSecuReporterfor further threat analysis with correlation feature design, making it easy to proactively trackback network status to prevent the next threat event. Centralized visibility of network activities for you to easily manage multiple clients.
Zyxel One Network Experience
Aiming for relieving our customers from repetitive operations of deploying and managing a network, Zyxel One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. Zyxel One Network presents an easy-to-use tool, Zyxel One Network Utility (ZON Utility), to realize speed network setup. Zyxel Smart Connect allows Zyxel networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. Zyxel One Network redefines the network integration across multiple networking products from switch to WiFi AP and to Gateway.
Why USG FLEX:
USGFLEX Flexible Deployment with Precise Protection
The latest USG FLEX 100 provides one single management platform on the cloud while expanding and strengthening the protection from firewalls to access points with automatic responses. The newly designed USG FLEX Series is capable of minimizing computing power usage and maximizing firewall performance, delivering up to 5x UTM performance with cloud flexibility and collaborative protection to help connect and secure small or mid-sized business users.
Nebula Together
USG FLEX firewalls, the new addition to theNebula cloud managementfamily, strongly empowers the full-blown Zyxel Security Matrix in Nebula, further optimizing Nebula with holistic security and protection for SMB business networks. Zyxel provides a centralized provisioning security policy to the remote workforce from Nebula and traffic shaping eliminating the network bottleneck to fuel the best business productivity.
Zero Trust Networks Security
Remote working is here to stay, USG FLEX series applies the principles of zero trust access. It ensures the same security controls are applied to HQ, branch offices, home, or wherever your remote workers reside. Create access policy with device contextual such as OS version or device category to enforce network segmentation. This reduces the attack surface and prevents threats from spreading.
USG FLEX minimizes risk by adding granular policies and access authentication for the ever-growing needs of a secure workplace. Improve protection across identities, devices, applications, and network. Reduce risk and build trust across your entire digital assets.
High Assurance Multi-layered Protection
USG FLEX is designed with multi-layer protection against multiple types of threats from in and out. Multiple security services empower you to restrict users' inappropriate application usage or web access. Zyxel offers leading-industry DNS content filter, eliminating blind spots in all encrypted traffic with TLS 1.3 without the need to deploy SSL inspection. All together safeguarding your network without any unattended gaps.
Simplified and Unified Licensing Experience
We know the experience from license purchase and renewals are equally important to our partners. We've optimized the licensing management platform and brought a consistent migration path between on-premise and our cloud platform. We make sure our partners can quickly adapt to a secure environment without the hassle but retaining the flexibility for those who need to practice the same security across networks scenarios.
Just Connect with Nebula
Just connect with a single vendor
Resellers, Managed Service Providers (MSPs) and network Administrators will find Simplicity, Scalability, Flexibility, reduced IT risk and reduced costs through Zyxel’s Cloud Networking Management platform, Nebula a single-vendor approach.
Just Connect without the complexity
Nebula offers powerful, effortless and scalable network connectivity that works together to remove the complexity and security risks often associated with having a mixed vendor approach to networking.
Launch an entire network in minutes
Connect, protect and manage Security, Switch, Wireless and LTE/5G connectivity via our centralized Cloud platform, Nebula.
Just Connect, with an unmatched portfolio
Serving customers with over 80 Nebula enabled devices via an ever-growing portfolio, Zyxel is unmatched in its approach to onboarding new and existing products via NebulaFlex. From Deploying a home office to delivering connectivity to distributed network configurations, Zyxel’s Portfolio of Nebula enabled products can accommodate all types of budgets, functionality and scalability for now and for the future.
Specifications:
| Model | USG FLEX 50 | USG FLEX 50AX |
|---|---|---|
| Hardware Specifications | ||
| WiFi standard | N/A | 802.11 ax/ac/n/g/b/a |
| 10/100/1000 Mbps RJ-45 ports | 4 x LAN/DMZ, 1 x WAN | 4 x LAN/DMZ, 1 x WAN |
| USB3.0 ports | 1 | 1 |
| Console port | Yes (RJ-45) | Yes (RJ-45) |
| Rack-mountable | N/A | N/A |
| Fanless | Yes | Yes |
| System Capacity & Performance*1 | ||
| SPI firewall throughput (Mbps)*2 | 350 | 350 |
| VPN throughput (Mbps)*3 | 90 | 90 |
| VPN IMIX throughput (Mbps)*3 | 40 | 40 |
| Max. TCP concurrent sessions*4 | 20,000 | 20,000 |
| Max. concurrent IPsec VPN tunnels*5 | 10 | 20 |
| Recommended gateway-to-gateway IPsec VPN tunnels | 5 | 5 |
| Concurrent SSL VPN users (default/max.) | 5/15 | 15 |
| VLAN interface | 8 | 8 |
| Speedtest Performance | ||
| SPI firewall throughput (Mbps)*6 | 320 | 320 |
| Security Service | USG FLEX 50 | USG FLEX 50AX |
| Web Filtering*7 | Yes | Yes |
| SecuReporter*7 | Yes | Yes |
| 2-Factor Authentication | Yes | Yes |
| Device Insight | Yes | Yes |
| Security Profile Synchronize*7 | Yes | Yes |
| VPN Features | ||
| VPN | IKEv2, IPSec, SSL, L2TP/IPSec | IKEv2, IPSec, SSL, L2TP/IPSec |
| Microsoft Azure | Yes | Yes |
| Amazon VPC | Yes | Yes |
| Management & Connectivity | ||
| Nebula Cloud Mode | Yes | Yes |
| Nebula Cloud Monitoring Mode | Yes | Yes |
| Easy Mode | Yes | Yes |
| Concurrent devices logins*8 | 64 | 64 |
| Security Service | USG FLEX 50 | USG FLEX 50AX |
| Power input | 12 V DC, 2 A max. | 12 V DC, 2.5 A max. |
| Max. power consumption (Watt Max.) | 12 | 24.3 |
| Heat dissipation (BTU/hr) | 40.92 | 55.37 |
| Physical Specifications | ||
| Item Dimensions (WxDxH)(mm/in.) | 216 x 143 x 33/ 8.50 x 5.63 x 1.30 |
216 x 149.28 x 33/ 8.50 x 5.88 x 1.30 |
| Item Weight (kg/lb.) | 0.88/1.94 | 1.00/2.20 |
| Packing Dimensions (WxDxH)(mm/in.) | 276 x 185 x 98/ 10.87 x 7.28 x 3.86 |
276 x 185 x 98/ 10.87 x 7.28 x 3.86 |
| Packing Weight (kg/lb.) | 1.41/3.11 | 1.53/3.37 |
| Included accessories | • Power adapter •RJ-45 - RS-232 cable for console connection |
• Power adapter with plug •RJ-45 - RS-232 cable for console connection •Antenna |
| Environmental Specifications | ||
| Operating Temperature | 0°C to 40°C/ 32°F to 104°F |
0°C to 40°C/ 32°F to 104°F |
| Operating Humidity | 10% to 90% (non-condensing) |
10% to 90% (non-condensing) |
| Storage Temperature | -30°C to 70°C/ -22°F to 158°F |
-30°C to 70°C/ -22°F to 158°F |
| Storage Humidity | 10% to 90% (non-condensing) |
10% to 90% (non-condensing) |
| MTBF (hr) | 655,130 | 766,228 |
| Certifications | ||
| EMC | FCC Part 15 (Class B), CE EMC (Class B), BSMI | FCC Part 15 (Class B), IC EMC (Class B), CE EMC (Class B), RCM (Class B), BSMI |
| Safety | BSMI | LVD (EN62368-1), BSMI |
| Wireless Specifications | USG FLEX 50AX |
|---|---|
| Standard compliance | 802.11 ax/ac/n/g/b/a |
| Wireless frequency | 2.4/5 GHz |
| Radio | 2 |
| SSID number | 4 |
| Maximum transmit power (Max. total channel) | US (FCC) 2.4 GHz: 29.8 dBm, 2 antennas US (FCC) 5 GHz: 32.6 dBm, 2 antennas EU (ETSI) 2.4 GHz: 19.93 dBm (EIRP), 2 antennas EU (ETSI) 5 GHz: 22.99 dBm (EIRP), 2 antennas |
| No. of antenna | 2 detachable antennas |
| Antenna gain | 3 dbi @2.4 GHz/5 GHz Data rate |
| Data rate |
|
| Frequency band |
|
| Receive sensitivity |
|
*: This matrix with firmware ZLD5.37 or later.
*1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets); IMIX: UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes.
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*5: Including Gateway-to-Gateway and Client-to-Gateway.
*6: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
*7: With Zyxel service license to enable or extend the feature capacity.
*8: This is the recommend maximum number of concurrent logged-in devices.
Software Features:
Security Service
Firewall
- Routing and transparent (bridge) modes
- Stateful packet inspection
- SIP NAT traversal
- H.323 NAT traversal*1
- ALG support for customized ports
- Protocol anomaly detection and protection
- Traffic anomaly detection and protection
- Flooding detection and protection
- DoS/DDoS protection
Web Filtering
- HTTPs domain filtering
- SafeSearch support: Google, YouTube, and Microsoft Bing*1
- Allow List websites enforcement
- URL Block and Allow List with keyword blocking
- Customizable warning messages and redirect URL
- Customizable Content Filtering block page
- URL categories increased to 111
- CTIRU (Counter-Terrorism Internet Referral Unit) support
- Support DNS base filtering (domain filtering)
Geo Enforcer
- Geo IP blocking
- Geographical visibility on traffics statistics and logs
- IPv6 address support*2
Device Insight
- View all devices on the network, including wired, wireless, BYOD, IoT, and SecuExtender (remote endpoint) on SecuReporter
- Visibility of network devices (switches, wireless access points, firewalls) from Zyxel or 3rd party vendors
VPN
IPSec VPN
- Encryption: DES, 3DES, AES (256-bit)
- Authentication: MD5, SHA1, SHA2 (512-bit)
- Support Route-based VPN Tunnel Interface (VTI)
- Key management: IKEv1 (x-auth, mode-config), IKEv2 (EAP, configuration payload)• Perfect forward secrecy (DH groups) support 1, 2, 5, 14, 15-18, 20-21
- IPSec NAT traversal (NAT-T)
- Dead Peer Detection (DPD) and relay detection
- PSK and PKI (X.509) certificate support
- VPN concentrator
- Route-based VPN Tunnel Interface (VTI)
- VPN auto-reconnection
- VPN high availability (Failover, LB)
- L2TP over IPSec
- GRE and GRE over IPSec
- NAT over IPSec
- SecuExtender Zero Trust VPN Client provisioning
- Support native Windows, iOS/macOS and Android (StrongSwan) client provision*1
- Support 2FA Email/SMS*1
- Support 2FA Google Authenticator
SSL VPN
- Supports Windows and macOS
- Supports full tunnel mode
- Supports 2-Factor authentication
Networking
Mobile Broadband*1
- WAN connection failover via 3G and 4G* USB modems
- Auto fallback when primary WAN recovers
IPv6 Support*1
- Dual stack
- IPv4 tunneling (6rd and 6to4 transition tunnel)
- IPv6 addressing
- DNS, DHCPv6 server/client
- Bridge
- VLAN
- PPPoE
- Static/Policy route
- Session control
- Firewall and ADP
- IPSec (IKEv2 6in6, 4in6, 6in4)
- Content Filtering
Connection
- Routing mode
- Bridge mode and hybrid mode*1
- Ethernet and PPPoE
- NAT and PAT
- NAT Virtual Server Load Balancing
- VLAN tagging (802.1Q)
- Virtual interface (alias interface)
- Policy-based routing (user-aware)*1
- Policy-based NAT (SNAT)
- Dynamic routing (RIPv1/v2 and OSPF, BGP)*1
- DHCP client/server/relay
- Dynamic DNS support
- WAN trunk for more than 2 ports
- Per host session limit
- Guaranteed bandwidth
- Maximum bandwidth
- Priority-bandwidth utilization
- Bandwidth limit per user
- Bandwidth limit per IP
Management
Nebula Cloud Mode
- Unlimited Registration & Central Management (Configuration, Monitoring, Dashboard, Location Map & Floor Plan Visual) of Nebula Devices
- Zero Touch Auto-Deployment of Hardware/Configuration from Cloud
- Over-the-air Firmware Management
- Central Device and Client Monitoring (Log and Statistics Information) and Reporting
- Security Profile Sync
Nebula Cloud Monitoring Mode
- Monitor device on/off status
- Firmware upgrade operation
- Manage firewall licenses
- Access remote GUI (requires Nebula Pro Pack)
- Backup and restore firewall configurations (requires Nebula Pro Pack)
Authentication
- Local user database
- Cloud user database*2
- Built-in user database
- External user database: Microsoft Windows Active Directory, RADIUS, LDAP
- IEEE 802.1x authentication
- Captive portal Web authentication
- XAUTH, IKEv2 with EAP VPN authentication
- Web-based authentication
- Forced user authentication (transparent authentication)
- IP-MAC address binding
- Supports 2-factor authentication
- Google Authenticator
- SMS/Email
System Management
- Role-based administration
- Multiple administrator logins
- Supports Cloud Helper
- Multi-lingual Web GUI (HTTPS and HTTP)
- Command line interface (console, Web console, SSH and telnet)*1
- SNMP v1, v2c, v3
- System configuration rollback*1
- Configuration auto backup*1
- Firmware upgrade via FTP, FTP-TLS, and web GUI*1
- Dual firmware images
Logging/Monitoring
- Comprehensive local logging
- Syslog (send to up to 4 servers)
- Email alerts (send to up to 2 servers)
- Real-time traffic monitoring
- System status monitoring
- Built-in daily report
- Cloud CNM SecuReporter
Zyxel One Network
- ZON Utility
- IP configuration
- Web GUI access
- Firmware upgrade
- Password configuration
- Smart Connect
- Location and System Name update
- Discover neighboring devices
- One-click remote management access to the neighboring Zyxel devices
Subscription Services
- Content Filter Pack
- Web Filtering
- SecuReporter
- Security Profile Sync
- Nebula Professional Pack
- Nebula Plus Pack
*: For specific models supporting the 3G and 4G dongles on the list, please refer to the Zyxel product page at 3G dongle document
*1: Only supported in On Premises Mode
*2: Only supported in Nebula Cloud Mode
License Service:
License Pack
The USG FLEX 50/50AX provides an indispensable feature set to perfectly fit small business requirements as well as to gain essential security services needed to protect against cyberattacks. Nebula Control Center (NCC) offers multiple subscription options to meet customers’ needs. The Nebula Plus/Professional Pack gives you some peace of mind at more control over your network updates and visibility, or even the most advanced management of cloud networking.
On Premises Feature Included
Nebula Feature Included
| Service | Service / Component | On Premises | On Cloud |
|---|---|---|---|
| Content Filter Pack | Web Filtering | ||
| SecuReporter | |||
| Security Profile Sync | |||
| Network Premium | |||
| Nebula Professional Pack | Nebula Professional Pack Service | ||
| Nebula Plus Pack | Nebula Plus Pack Service |
*: Please contact your local customer service if you can’t use your content filter license with Nebula.
Documentation:
Download the Zyxel USG Flex 50/50AX Firewalls Datasheet (PDF).
Pricing Notes:
- Pricing and product availability subject to change without notice.