ZyXEL USG-310 Advanced Next Generation Unified Security Gateway (SPI 5.0 Gbps, VPN 650 Mbps)

BH #ZYUSG310 • MFR #USG310
ZyXEL USG-310 Advanced Next Generation Unified Security Gateway (SPI 5.0 Gbps, VPN 650 Mbps)
Special Order
Expected availability: 3-7 business days
$117/mo. suggested payments
with 12 Mos. Promo Financing* 
Protect your Gear
Add a protection plan from $79.99
Akiva M., B&H Computer Expert

True Know-How

Ask Our Experts


ZyXEL USG310 Overview

  • 1Description
  • 2Key Features
  • 3Multi-WAN and mobile broadband
  • 4Robust VPN
  • 5VPN High Availability (HA)
  • 6Integrated WLAN controller
  • 7Unified security policy
  • 8Application intelligence
  • 9Anti-virus
  • 10SSL inspection
  • 11Anti-spam
  • 12Content filtering

More and more people are relying on smart devices and cloud-based applications for business communications. This means that high network availability is critical for business continuity, more Wi-Fi is demanded in the workplace, and traditional regulatory measures for application usage are obsolete. Without an effective solution to control, optimize and block social, productivity and other web applications, SMBs risk losing work productivity and exposing company networks to new web threats.
The ZyXEL USG Advanced Series are Next Generation Firewalls (NGFW) designed to meet the mobility, anti-malware and policy enforcement challenges in SMBs. The integrated WLAN controller offers easy WLAN scalability for the growing demand for Wi-Fi; while WAN and VPN load balancing and failover ensures nonstop business communications. ZyXEL USGs offer industry-leading anti-virus, anti-spam, content filtering and application intelligence technology for effective application optimization and comprehensive network protection.

Key Features

  • Multi-WAN and mobile broadband
  • Robust VPN
  • VPN High Availability (HA)
  • Integrated WLAN controller
  • Unified security policy
  • Application intelligence
  • Anti-virus
  • SSL inspection
  • Anti-spam
  • Content filtering

Multi-WAN and mobile broadband

The ZyXEL USG Advanced Series provides non-stop Internet uptime with multi-WAN and mobile broadband support. Multi-WAN works with two or more Ethernet WAN connections for active-active WAN load balancing or active-passive failover. Comprehensive mobile broadband USB modems are also supported for WAN backup.

Robust VPN

ZyXEL USGs support high-throughput IPSec, L2TP over IPSec and SSL VPN for a wide range of site-to-client and site-to-site VPN deployments. Reinforced with the advanced SHA-2 encryption, the ZyXEL USGs provide the most secure VPN for business communications.

VPN High Availability (HA)

ZyXEL USGs feature VPN HA to satisfy the demands of the most mission-critical VPN deployments. Supporting advanced GRE over IPSec technology, users can deploy two IPSec VPN tunnels for active-active VPN load balancing or active-passive failover.

Integrated WLAN controller

The integrated WLAN controller supports CAPWAP, and enables centralized authentication and access management of multiple APs in the network. The ZyXEL USG Advanced Series can manage 2 APs by default, and up to 18 APs with license upgrade.

Unified security policy

Unified security policy offers object-based management and a unified configuration interface for firewall and all security-related policies. Users can easily apply all policy criteria to every UTM feature, reduce configuration time, and get more streamlined policy management.

Application intelligence

ZyXEL's USG Advanced Series can identify, categorize and control over 3,000 social, gaming, productivity, and other Web applications and behaviors. Users can prioritize productive applications, throttle acceptable ones, and block unproductive applications to boost productivity and prevent bandwidth abuse.


Powered by Kaspersky SafeStream II gateway anti-virus, ZyXEL USGs provide comprehensive and real-time protection against malware threats before they enter the network. ZyXEL USGs can identify and block over 650,000 viruses right at the gate and provide high-speed scanning with stream-based virus scanning technology.

SSL inspection

SSL inspection enables the ZyXEL Advanced Series to provide not only comprehensive security, but also deeper policy enforcement. It enables the USG's application intelligence, IDP, content filtering and anti-virus to inspect traffic in SSL encrypted connections and block threats that usually go unseen.


With a cloud-based IP reputation system, ZyXEL anti-spam can deliver accurate, zero-hour spam outbreak protection by analyzing up-to-the-minute sender reputation data from highly diverse traffic sources. It can detect spam outbreaks in the first few minutes of emergence regardless of spam language or format.

Content filtering

ZyXEL content filtering helps screen access to websites that are not business related or malicious. With a massive, cloud-based database of over 140 billion URLs that are continuously analyzed and tracked, ZyXEL provides highly accurate, broad and instant protection against malicious web content.
UPC: 760559121341

ZyXEL USG310 Specs

Device TypeSecurity appliance
Bundled Services1 year AV+IDP, AS, CF
Width16.9 in
Depth9.8 in
Height1.7 in
Weight7.28 lbs
Form FactorRack-mountable
Connectivity TechnologyWired
Data Link ProtocolEthernet, Fast Ethernet, Gigabit Ethernet
Network / Transport ProtocolL2TP, IPSec, PPPoE, SMTP, DHCP, POP3, IMAP4
Routing ProtocolOSPF, RIP-1, RIP-2, GRE
Remote Management ProtocolTelnet, SNMP 2c, HTTP, HTTPS, SSH
PerformanceFirewall throughput: 5 Gbps
VPN throughput: 650 Mbps
Intrusion detection and prevention throughput: 450 Mbps
Antivirus throughput: 400 Mbps
Unified Threat Management (UTM) throughput: 400 Mbps
CapacityUser licenses: unlimited
Concurrent IPSec VPN tunnels: 300
Concurrent sessions: 100000
Concurrent SSL VPN users: 105
Virtual interfaces (VLANs): 64
New sessions: 12000
Manageable access points: 2 (maximum 18)
Status IndicatorsPort status, power, system
FeaturesFirewall protection, DMZ port, routing, DHCP support, NAT support, VPN support, PAT support, SNAT support, load balancing, LDAP support, VLAN support, Syslog support, DoS attack prevention, content filtering, ALG support, dynamic DNS server, manageable, stackable, E-mail alert, IPv6 support, antivirus analysis, High Availability, firmware upgradable, DDos attack prevention, tunneling, IPSec Virtual Private Network (VPN), Wi-Fi Multimedia (WMM) support, anti-spam protection, Access Control List (ACL) support, Quality of Service (QoS), Dead Peer Detection (DPD), IPSec NAT-Traversal (NAT-T), SSH support, VPN failover, DHCP server, IPv4 support, 3G USB Dongle Support, DHCP relay, IP-MAC binding, CAPWAP support, DHCP client, dual firmware images, static routing, tagged VLAN, Captive Portal, Generic Routing Encapsulation (GRE), Intrusion Detection and Prevention (IDP), VPN concentrator, VPN load-balancing, VPN auto-reconnection, Single Sign-On (SSO) support
Encryption AlgorithmDES, Triple DES, MD5, IKE, SSL, SHA-1, PKI, 256-bit AES, IKEv2, 512-bit SHA-2
Authentication MethodSecure Shell (SSH), RADIUS, X.509 certificates, LDAP, Active Directory, Extensible Authentication Protocol (EAP), XAUTH authentication
Compliant StandardsIEEE 802.1Q, X.509
Expansion / Connectivity
Interfaces8 x 1000Base-T - RJ-45
2 x USB - Type A
1 x console - DB-9
MTBF560,811.5 hours
Compliant StandardsBSMI, EN 60950-1, FCC Part 15 A, C-Tick Class A, LVD, EMC Class A
Power DeviceExternal power adapter
Voltage RequiredAC 120/230 V (50/60 Hz)
Power Consumption Operational58.5 Watt
Manufacturer Warranty
Service & SupportVirus definitions update - 1 year
Intrusion definitions update - 1 year
URL database update - 1 year
Spam filter update - 1 year
Environmental Parameters
Min Operating Temperature32 °F
Max Operating Temperature104 °F
Humidity Range Operating10 - 90% (non-condensing)
Packaging Info
Package Weight11 lb
Box Dimensions (LxWxH)20.2 x 15.3 x 6.1"
See any errors on this page? Let us know