ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports

ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports

ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports

ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports


Now Viewing:


Product Highlights

  • 2 IPSec VPN, SSL VPN, and 3G WAN Support
  • 5 x 10/100/1000 Mb/s RJ-45 Ports
  • 175 Mb/s SPI Firewall Throughput
  • 75 Mb/s VPN Throughput
  • Supports IPv6
  • SHA-1, SHA-2/MD5 Authentication
  • Supports L2TP VPN on Mobile Devices
  • Content Filter for Safe Web Surfing
  • Remote Access with Easy VPN
  • Internet Access with WAN & 3G Backups
Show moreShow less
  • 1Description

The USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports from ZyXEL provides small businesses with real-time inspection and multi-layer network protection to safeguard their networks from threats without sacrificing performance. The USG 20 firewall is equipped with Stateful Packet Inspection (SPI), Content Filter, Anti-Spam, and VPN (IPSec/SSL/L2TP) features. In addition, the USG 20 firewall offers complete security license and continuous firmware upgrades. Incorporating comprehensive security features in the connected devices, the USG 20 firewall safeguards your organization's customer and company records, intellectual properties, as well as critical resources from both external and internal threats.

Robust Security
The USG 20 firewall is built with an integrated high-performance security architecture that provides real-time inspection to safeguard small business networks from threats without sacrificing performance. Corporate networks are not only flawlessly secured, but also benefit from significant performance enhancements on productivity and efficiency, since file loading, emailing, and information searching applications are processed at higher speeds
Comprehensive IPv6 Support
The USG 20 firewall is IPv6 ready and is certified with IPv6 Ready Gold Logo. With IPv6 feature enabled, USG 20 firewall ensures businesses with a smooth migration path from the IPv4-based networks to the full IPv6 infrastructure. It assigns IPv6 addresses to clients and passes the IPv6 traffics through the IPv4 environment. The firewall also supports dual-stack and IPv4 tunneling (6th and 6 to 4 transition tunnel) implementations for Internet connectivity to access IPv6 applications
Easy VPN Reduces Operation Cost and Time
The USG 20 firewall is equipped with the easy VPN solution to push configuration files to the VPN clients automatically. This eliminates the configuration efforts while securing the access at the same time. In addition, the USG 20 firewall supports L2TP VPN technology on iPhones, Android phones, and other mobile devices. This technology enables employees in remote places to connect to the headquarters with easy and free access
Content Filter for Safe Web Surfing
The USG 20 firewall features the content filter solution provided by BlueCoat and Commtouch, which reduces costs and extends protection by combining a comprehensive, integrated database featuring millions of URLs, IP addresses, and domains. With this solution, the USG 20 firewall enables real-time protection that deters emerging web threats, including malware and phishing, and blocks or monitors certain sites to maintain employee productivity
Email Security
The USG 20 firewall delivers industry-leading protection, powered by Commtouch, against spam, phishing, and virus-laden emails. The Commtouch technology features the recurrent pattern detection (RPD) mechanism that analyzes millions of patterns each day (24 x 7 x 365) to block all the associated messages in real-time. In addition, the USG 20 firewall applies sender-based IP reputation to remove over 80% of unwanted mails and to take advantage of the zero-hour virus outbreak protection feature, which is capable of blocking or delaying suspicious messages hours before commercial anti-virus signatures are available
3G Card Support
The USG 20 firewall supports multiple WAN ports and 3G networks through USB or PC cards. With 3G connections, it enables load sharing or failover to deliver highly reliable network connectivity. In addition, it supports more 3G cards with generic driver to ensure better interoperability
ICSA-certified firewall
Routing and transparent (bridge) mode
Zone-based access control list
Stateful packet inspection
User-aware policy enforcement
SIP/H.323 NAT traversal
ALG supports custom ports
IPv6 Support
IPv6 Ready Gold Logo certified
Dual stack
IPv4 tunneling (6th and 6 to 4 transition tunnel)
IPv6 Ready Gold Logo certified
ICSA-certified IPSec VPN
Algorithm: AES/3DES/DES
Authentication: SHA-1, SHA-2/MD5
Key Management: Manual key/IKE
Perfect forward secrecy (DH groups) supports 1, 2, 5
IPSec NAT traversal
Dead peer detection/relay detection
PKI (X.509) certificate support
Centralized VPN support
Simple wizard support
Auto reconnect VPN
VPN HA (redundant remote VPN gateways)
Clientless secure remote access
Supports reverse proxy mode and full tunnel mode
Unified policy enforcement
Supports two-factor authentication
Customizable user portal
Zone to zone protection
Transparently intercept mail via SMTP/POP3 protocols
POP3/SMTP port configurable
Sender-based IP Reputation Filter
Commtouch RPD Query
Zero-hour Virus Outbreak Protection
X-Header Support
Supports DNSBL checking
Spam tag support
Statistics report
Content Filter (BlueCoat and Commtouch)*
Social networking control
Web Security: Security threat category (powered by BlueCoat)
URL blocking, keyword blocking
Profile-based setting
Exempt list (blacklist and whitelist)
Blocks Java Applet, Cookies, and Active X
Dynamic URL filtering database (powered by BlueCoat and Commtouch)
Unlimited user licenses support
Customize warning messages and redirect URL 1
Routing mode/bridge mode/mixed mode
Layer 2 port grouping
Tagged VLAN (802.1Q)
Virtual interface (alias interface)
Policy-based routing (user-aware)
Policy-based NAT (SNAT)
Dynamic routing (RIP v1/v2, OSPF)
DHCP client/server/relay
Dynamic DNS support
Per host session limit
Priority-bandwidth utilization
Local user database
Microsoft Windows active directory integrate
External LDAP/RADIUS user database
Xauth over RADIUS for IPSec VPN
Forced user authentication (transparent authentication)
IP/MAC address binding
System Management
Role-based administration
Multiple administrator login
Multi-lingual web GUI (HTTPS/HTTP)
Object-based configuration
Command line interface (console/web console/SSH/TELNET)
System configuration rollback
Firmware upgrade via FTP/FTP-TLS/web GUI
Comprehensive local logging
Syslog (send to up to 4 servers)
Email alert (send to up to 2 servers)
Real-time traffic monitoring
Built-in daily report
Advanced reporting (Vantage Report)
Centralized network management (Vantage CNM) manageable
UPC: 760559118884
In the Box
ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports
  • Limited 2-Year Warranty
  • Table of Contents
    • 1Description
    Ports 10/100/1000 Mb/s RJ-45 Ports:
    4 x LAN/DMZ
    1 x WAN

    USB Port:
    MTBF 323,269 hours
    SPI Firewall Throughput 175 Mb/s
    VPN Throughput 75 Mb/s
    Unlimited User Licenses Yes
    Concurrent Sessions Maximum: 10,000
    New Session Rate 1,000
    Concurrent IPsec VPN Tunnels Maximum: 5
    Concurrent SSL VPN Users Maximum: 1
    Included SSL VPN User No. 1
    Customizable Zones Yes
    IPv6 Support Yes
    Power Requirements
    Power Input 100 to 240 VAC, 50 to 60 Hz, 1.5 A
    Power Consumption 15 W
    Operating Temperature 32 to 104°F (0 to 40°C)
    Operating Humidity 5 to 90% (non-condensing)
    Storage Temperature -22 to 140°F (-30 to 60°C)
    Storage Humidity 5 to 90% (non-condensing)
    EMC FCC Part 15 (Class B)
    CE EMC (Class B)
    Safety LVD (EN60950-1)
    Physical Specifications
    Dimensions (W x H x D) 8.5 x 1.3 x 5.5" (215.9 x 33.0 x 139.7 mm)
    Weight 0.83 lb (0.38 kg)
    Packaging Info
    Package Weight 2.2 lb
    Box Dimensions (LxWxH) 12.3 x 8.2 x 4.1"

    ZyXEL USG20 Internet Security Firewall with 4 Gigabit LAN/DMZ Ports Review

    Be the first to review this item
    See any errors on this page? Let us know.