ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only)

ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only)

ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only)

B&H # ZYUSG40NB MFR # USG40-NB
ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only)

Show MoreLess

Close

Now Viewing:

Special Order
Expected availability: 7-14 business days 
Free Standard Shipping
Not eligible for Free Expedited Shipping

Product Highlights

  • 400 Mbps Firewall Throughput
  • 3 x Gigabit LAN Ports
  • 1 x Gigabit WAN Port
  • 20,000 TCP Concurrent Sessions
  • 3,000 New TCP Session Rate
  • 10 x Max. Concurrent IPsec VPN Tunnels
  • 7 x Max. Concurrent SSL VPN Users
  • 2 x Included SSL VPN User Numbers
  • IPv6 Support
  • 8 x VLAN Interfaces
Show moreShow less
Man Behind Layer

B&H $1000 Giveaway

Share your most-wanted item with friends & family for chances to win a $1000 B&H Gift Card. It's that easy!

1 new winner announced every week!
Limit 1 entry per day; Come back every day to increase your chance of winning!

Be sure to mention #BHWishList when you share!

Share on Twitter Share on Facebook

Congrats to our winners so far — Mark P., Lauren K. & Daniel M.

Official Rules

OFFICIAL B&H $1,000.00 GIVEAWAY RULES

NO PURCHASE IS NECESSARY TO ENTER OR WIN. The B&H $1,000.00 Giveaway (the "Giveaway" or "Sweepstakes") is void where prohibited by law and is sponsored by B&H Foto & Electronics Corp., 440 Ninth Avenue, New York, NY 10001 ("Sponsor"). It is not sponsored or endorsed by Facebook or Twitter in any way.

Entry Period/Methods of Entry. The Sweepstakes will run from on or about November 7, 2016 until on or about December 19, 2016 (the "Entry Period"). Entries received outside the Entry Period are void. Enter the Sweepstakes via either one of the following methods. (1) Share your most wanted item on Facebook or Twitter via the dedicated links found on the B&H Website (www.bhphoto.com); or (2) Mail a postcard (postmarked during the Entry Period) containing your name, address, phone number, and email address, and indicate the subject(s), if any, about which you are interested in receiving future emails from B&H (e.g. photo, video, audio, computers, home theater, portable entertainment ) (optional) to: B&H $1,000.00 Giveaway, c/o B&H Foto & Electronics Corp., 440 Ninth Avenue, New York, NY 10001 (either option, an "Entry"). Entries must not, in the sole and absolute discretion of the Sponsor, contain obscene, provocative, defamatory, sexually explicit, or otherwise objectionable or inappropriate content. Entries deemed by Sponsor to be inappropriate will be disqualified. Entries owned by a third party, or the use of any trademarks, service marks, logos, brands, or products owned by a third-party are not acceptable for entry into the Sweepstakes. Limit 1 entry per person, per day.

Winner Selection/Prizes/Odds. The B&H Social Team will randomly select a winner from among all eligible entries every Monday during the Entry Period, for a total three (3) winners (each a "Winner"). Each Winner will receive a B&H Gift Card pre-valued in the amount of $1000.00. No cash or other substitutions will be offered. Winner selection is in the sole and absolute discretion of the B&H Social Team. Any taxes are the sole responsibility of the winner. Winners will be notified and receive their prize to the e-mail address associated with the account to which their Entry was posted or the email account provided with a mail-in entry. The odds of winning depend on the number of eligible entries received.

Identity of Winners/Eligible Participants. Winners will be identified by the e-mail account associated with the Facebook or Twitter account from which their Entry was submitted or the email account provided with a mail-in entry. An e-mail account holder shall mean the natural person assigned to such e-mail account by the internet access or online service provider or other organization responsible for assigning e-mail addresses for the domain associated with such e-mail account. Any issues regarding the identity of a Winner shall be resolved by Sponsor in its sole discretion. The Sweepstakes is only open to residents of the United States that are at least eighteen (18) years of age on their entry date and is not open to employees of Sponsor, their immediate family, any person domiciled with such employees, or any affiliates or subsidiaries of Sponsor.

Entry Ownership/Entrant Agreements. Entrants retain full ownership and copyrights to their Submission. However, by entering the Sweepstakes entrants grant Sponsor permission to use their Entries for promotional purposes on their respective social media channels with proper credit. Entrants also agree: (a) to be bound by these Official B&H $1,000.00 Giveaway Rules; (b) that any claims related to this Sweepstakes shall be resolved individually without resort to any form of class action and that awards, shall be limited to actual out-of-pocket costs incurred in entering the Sweepstakes, and shall not include incidental or consequential damages or attorneys fees; and (c) that any actual or perceived ambiguities in these rules shall be interpreted by Sponsor in their sole discretion.

Limitation of Liability/Sponsor Modification/Cancellation Rights/ Choice of Law/ Venue/ Winners List. Sponsor is not responsible for incomplete entries or for failure to receive entries due to technical failures or human error of any kind. Winners agree that Sponsor will have no responsibility for losses or damage of any kind resulting from the acceptance, possession, or use of the prizes. Except where prohibited, participation in the Sweepstakes constitutes entrant's consent to the publication of his or her name by Sponsor in any media for commercial or promotional purposes without limitation or further compensation subject to Sponsor's respective Privacy Policies. Sponsor may modify or discontinue the Sweepstakes at any time and may disqualify from the Sweepstakes any person it determines, in its sole discretion, to have attempted to or actually tampered with or otherwise abused any aspect of the Sweepstakes. Entrants agree that in the unlikely event a dispute arises in connection with this Sweepstakes, it will be governed by the laws of the State of New York and heard exclusively in a court of applicable jurisdiction in the County and State of New York irrespective of any choice of law provisions to the contrary. To receive names of the winners by U.S. mail, please mail a self-addressed stamped envelope to: B&H Foto & Electronics Corp., Attn: B&H $1,000.00 Giveaway, 440 Ninth Avenue, New York, NY 10001. Any Winners List request must be received by B&H within one (1) year of the date the Sweepstakes is conducted.

Let us know how to reach you if you win!

Privacy 100% guaranteed; email address for contact purposes only

Email

Already have a B&H account? Just log in tomorrow to enter again!

$0.00 Tax Collected Outside NY

You Pay: $214.99

Add to Wish List Item in Wish List
  • 1Description

Designed to protect users and businesses against a variety of network initiated threats, the USG40-NB Performance Series Unified Security Gateway from ZyXel utilizes Next Generation Firewall (NGFW) technology to ward off malware, regulate applications, and much more. In addition to basic firewall protection, this gateway is designed to support VPN connectivity with a VPN throughput of up to 100 Mbps and SPI firewall throughput of up to 400 Mbps. Other VPN features include L2TP over IPSec and SSL VPN simplifying the process of configuring and managing extensive VPN networks.

With a fanless design the USG40 is not only quiet, it helps to prevent dirt and debris from entering the unit. On the outside of the gateway you will find three Gigabit LAN and a single Gigabit WAN connector allowing multiple Ethernet enabled devices to connect directly to the network. In addition to Ethernet connectivity this gateway also features a single USB port designed to support USB modems to provide failover support should the initial network connection go down.

Single Point of Management
Designed for businesses with limited IT resources, the USG helps you connect, protect, and manage with reduced complexity. The unified security policy design offers easy, unified, and streamlined management of all the security features, while the integrated WLAN controller provides centralized management of up to 10 APs. All this is integrated into a single solution, making it easy for users to manage VPN, wireless and security all from one device.
Security
It delivers enterprise-grade Next Generation Firewall security. It provides deep, extensive protection, and effective control of Web applications such as Facebook, Google Apps, and Netflix with such anti-malware protection mechanisms as firewall, antivirus, anti-spam, content filtering, IDP, and application intelligence.
Unified Security Policy
Unified security policy offers object-based management and a unified configuration interface for firewall and all security-related policies. You can easily apply all policy criteria to every UTM feature, reduce configuration time, and get streamlined policy management.
Robust VPN
The gateway supports high-throughput IPSec, L2TP over IPSec, and SSL VPN for a wide range of site-to-client and site-to-site VPN deployments. Reinforced with the advanced SHA-2 encryption, it provides secure VPN for business communications.
Fanless
It features a robust fanless design to prevent dirt and dust from entering operating environments to cause potentially catastrophic failures. The fanless design offers zero-noise cooling and non-overheating features to ensure silent operation in small or quiet office environments.
Integrated WLAN Controller
The integrated WLAN controller supports CAPWAP, and enables centralized authentication and access management of multiple APs in the network. The USG can manage two APs by default, and up to ten APs with license upgrade.
Intrusion Detection and Prevention
ZyXEL's IDP system uses Deep Packet Inspection (DPI) technology that can scan multiple layers and protocols to inspect vulnerabilities invisible to simple port and protocol-based firewalls. ZyXEL's IDP eliminates false positives with a database of malware signatures and provides effective protection against intrusions from unknown back doors.
Dual-WAN and Mobile Broadband
It provides high Internet uptime with dual-WAN and mobile broadband support. The dual-WAN works with two Ethernet WAN connections for active-active load balancing or active-passive failover. Comprehensive mobile broadband USB modems are also supported for WAN backup.
VPN Application
The branch offices, partners, and home users can deploy USG ZyWALLs for site-to-site IPSec VPN connections. Branch offices can additionally deploy IPSec VPN HA (load-balancing and failover) for an always-online VPN connectivity. Remote users can securely access company resources with their computers or smartphones via SSL, IPSec, and L2TP over IPSec VPN. The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications.
UPC: 760559121280
In the Box
ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only)
  • 1 x Power Adapter
  • 1 x DB9 to RJ-45 Cable for Console Connection
  • Limited 3-Year Warranty
  • Table of Contents
    • 1Description
    Hardware
    Ports 3 x LAN/DMZ (RJ-45)
    1 x WAN (RJ-45)
    1 x OPT (RJ-45)
    1 x USB
    1 x Console
    AP Controller Version 1.0
    Managed AP Number Default: 2
    Maximum: 10
    Power Input 12 VDC, 2.0 A maximum
    Power Consumption 14.0 W maximum
    Certifications EMC: FCC Part 15 (Class B), CE EMC (Class B), C-Tick (Class B), and BSMI
    Safety: LVD (EN60950-1), BSMI
    MTBF 414,329.4 hours
    System Capacity and Performance
    SPI Firewall Throughput 400 Mb/s
    VPN Throughput 100 Mb/s
    IDP Throughput 55 Mb/s
    AV Throughput 50 Mb/s
    UTM Throughput (AV and IDP) 50 Mb/s
    Unlimited User Licenses Yes
    TCP Concurrent Sessions Maximum: 20,000
    Concurrent IPsec VPN Tunnels 10
    New TCP Session Rate 3,000
    Concurrent SSL VPN Users 7
    SSL VPN User Number 2
    Customizable Zones Yes
    IPv6 Support Yes
    VLAN Interface 8
    Software
    Firewall ICSA-certified firewall (certification in progress)
    Routing and transparent (bridge) modes
    Stateful packet inspection
    User-aware policy enforcement
    SIP/H.323 NAT traversal
    ALG support for customized ports
    Protocol anomaly detection and protection
    Traffic anomaly detection and protection
    Flooding detection and protection
    DoS/DDoS protection
    IPv6 Support IPv6 Ready gold logo (certification in progress)
    Dual stack
    IPv4 tunneling (6rd and 6 to 4 transition tunnel)
    IPv6 addressing
    DNS
    DHCPv6
    Bridge
    VLAN
    PPPoE
    Static routing
    Policy routing
    Session control
    Firewall and ADP
    IPSec VPN
    Intrusion Detection and Prevention (IDP)
    Application intelligence and optimization
    Content filtering
    Anti-virus, anti-malware
    Anti-spam
    IPsec VPN ICSA-certified IPSec VPN (certification in progress)
    Encryption: AES (256-bit), 3DES and DES
    Authentication: SHA-2 (512-bit), SHA-1 and MD5
    Key management: manual key, IKEv1 and IKEv2 with EAP
    Perfect forward secrecy (DH groups) support 1, 2, 5
    IPSec NAT traversal
    Dead peer detection and relay detection
    PKI (X.509) certificate support
    VPN concentrator
    Simple wizard support
    VPN auto-reconnection
    VPN High Availability (HA): Load-balancing and failover
    L2TP over IPSec
    GRE and GRE over IPSec
    NAT over IPSec
    ZyXEL VPN client provisioning
    SSL VPN Throughput Supports Windows and Mac OS X
    Supports full tunnel mode
    Supports 2-step authentication
    Customizable user portal
    Intrusion Detection and Prevention Routing and transparent (bridge) mode
    Signature-based and behavior-based scanning
    Automatic signature updates
    Customizable protection profile
    Customized signatures supported
    Unified Security Policy Unified policy management interface
    Supported UTM features: anti-virus, antispam, IDP, content filtering, application intelligence, firewall (ACL)
    3-Tier Configuration: Object-based, profile based, policy-based
    Policy Criteria: Zone, source, and destination IP address, user, time
    WLAN Management ZyXEL AP Controller (APC) 1.0 compliant
    Client RSSI threshold to prevent sticky clients
    IEEE 802.1x authentication
    Captive portal Web authentication
    Customizable captive portal page
    RADIUS authentication
    Wi-Fi Multimedia (WMM) wireless QoS
    CAPWAP discovery protocol
    Mobile Broadband WAN connection failover via 3G and 4G* USB modems Auto fallback when primary WAN recovers
    Networking Routing mode, bridge mode, and hybrid mode
    Ethernet and PPPoE
    NAT and PAT
    VLAN tagging (802.1Q)
    Virtual interface (alias interface)
    Policy-based routing (user-aware)
    Policy-based NAT (SNAT)
    Dynamic routing (RIPv1/v2 and OSPF)
    DHCP client/server/relay
    Dynamic DNS support
    WLAN trunk for more than 2 ports
    Per host session limit
    Guaranteed bandwidth
    Maximum bandwidth
    Priority-bandwidth utilization
    Bandwidth limit per user
    Bandwidth limit per IP
    Authentication Local user database
    Microsoft Windows Active Directory integration
    External LDAP/RADIUS user database
    XAUTH, IKEv2 with EAP VPN authentication
    Web-based authentication
    Forced user authentication (transparent authentication)
    IP-MAC address binding
    SSO (Single Sign-On) support
    System Management Role-based administration
    Multiple administrator logins
    Multi-lingual Web GUI (HTTPS and HTTP)
    Command line interface (console, Web console, SSH, and TELNET)
    SNMP v2c (MIB-II)
    System configuration rollback
    Firmware upgrade via FTP, FTP-TLS, and Web GUI
    Dual firmware images
    Logging and Monitoring Comprehensive local logging
    Syslog (to up to 4 servers)
    Email alerts (to up to 2 servers)
    Real-time traffic monitoring
    Built-in daily report
    Advanced reporting with Vantage Report
    VPN, Management and Reporting Managed APs: Add 8 APs
    SecuExtender SSL VPN Client: Add 5 clients
    IPSec VPN Client: For 1/5/10/50 clients
    Vantage Report: For 1/5/25/100 devices
    General
    Compatibility Access Point
    NWA5120 Series (Unified Access Point)
    NWA5121-NI
    NWA5121-N
    NWA5123-NI

    NWA5000 Series (Managed Access Point)
    NWA5160N
    NWA5560-N
    NWA5550-N

    NWA3000-N Series (Unified Pro Access Point)
    NWA3160-N
    NWA3560-N
    NWA3550-N
    Functions central management, auto provisioning, and local bridge data forwarding
    Temperature Operating: 32 to 104°F (0 to 40°C)
    Storage: -22 to 158°F (-30 to 70°C)
    Humidity Operating: 10 to 90% (non-condensing)
    Storage: 10 to 90% (non-condensing)
    Dimensions (W x H x D) 8.50 x 1.30 x 5.63" (216.00 x 33.00 x 143.00 mm)
    Weight 1.96 lb (0.89 kg)
    Packaging Info
    Package Weight 3.6 lb
    Box Dimensions (LxWxH) 15.0 x 8.6 x 3.1"

    ZyXEL USG40-NB Performance Series Unified Security Gateway (Hardware Only) Review

    Be the first to review this item
    See any errors on this page? Let us know.