Firewall ZyXEL USG1100 UTM BDL

Firewall Appliance UTM Gigabit, Protección Anti-Malware con Firewall, Antivirus, Antispam, Filtrado de contenido, Detección y Prevensión de Intrusos, Inteligencia e inspección SSL, IPSec y L2TP sobre IPSec VPN, VPN Alta disponibilidad (HA), IPv6 Support, WLAN para administración centralizada de hasta 18 AP, 8x LAN RJ-45 Ports Gigabit Configurables, 2x USB Ports, 1x Console Port (DB9), Rack-mountable. Garantía 1 Año

Firewalls Serie USG

Las empresas instalan dispositivos de seguridad de red para dos propósitos principales: para proteger los recursos de la empresa en contra de una multitud de amenazas y para permitir comunicaciones seguras entre múltiples ubicaciones a través de la red privada virtual (VPN). Durante muchos años, las empresas con el Unified Security Gateway (USG) Series de ZyXEL satisfacen todas las demandas. La serie USG de ZyXEL es una solución todo-en-uno de gestión unificada de amenazas (UTM) que proporciona seguridad de la red y la conectividad VPN para negocios de todos los tamaños.

Firewalls Serie ZyWALL

Las operaciones de negocios hoy en día son más móviles, más global y más dinámico que nunca. Esta gran demanda, combinada con el uso de aplicaciones avanzadas o de ancho de banda que consume en el lugar de trabajo, han mejorado aún más con el VPN y el rendimiento del firewall. Para satisfacer esta demanda, ZyXEL ha introducido la nueva serie VPN Firewalls ZyWALL. 

Rendimiento ultra-rápido

La nueva serie de Firewall de seguridad VPN ZyWALL están diseñados con CPUs multi-núcleo para ofrecer el rendimiento más rápido de VPN y firewall en el mercado. El rendimiento de red de alta velocidad está garantizada con hasta 6 Gbps de rendimiento de firewall y 800 Mbps de VPN. Diseñado con plataformas completamente nuevas y avanzadas de hardware, la nueva serie de servidores de seguridad VPN ZyWALL ofrecen un rendimiento sin concesiones para los de sitio a sitio y de cliente a aplicaciones VPN de alta velocidad.

Sin necesidad de configuración de acceso remoto

Redes privadas virtuales proporcionan a las empresas una forma segura y conveniente de compartir recursos de la empresa con socios, clientes o empleados en viajes de negocios. Sin embargo, las típicas soluciones VPN son difíciles para los usuarios no técnicos para configurar, lo que reduce en gran medida su utilidad y comodidad. Los servidores de seguridad de la serie VPN ZyWALL incluye la función Easy VPN para proporcionar la configuración de IPsec VPN de auto-aprovisionamiento de cliente a sitio. Un asistente está disponible con el software de cliente de VPN ZyXEL IPsec que recupera automáticamente el archivo de configuración VPN desde el mando a distancia ZyWALL VPN Firewall y se completa la configuración de IPsec VPN en 3 sencillos pasos.

Características

Firewall

• ICSA-certified firewall (certification in progress)
• Routing and transparent (bridge) modes
• Stateful packet inspection
• User-aware policy enforcement
• SIP/H.323 NAT traversal
• ALG support for customized ports
• Protocol anomaly detection and protection
• Traffic anomaly detection and protection
• Flooding detection and protection
• DoS/DDoS protection

IPv6 Support

• IPv6 Ready gold logo (certification in progress)
• Dual stack
• IPv4 tunneling (6rd and 6to4 transition tunnel)
• IPv6 addressing
• DNS
• DHCPv6
• Bridge
• VLAN
• PPPoE
• Static routing
• Policy routing
• Session control
• Firewall and ADP

IPSec VPN

• Intrusion Detection and Prevention (IDP)
• Application intelligence and optimization
• Content filtering
• Anti-virus, anti-malware
• Anti-spam
• IPSec VPN
• ICSA-certified IPSec VPN (certification in progress)
• Encryption: AES (256-bit), 3DES and DES
• Authentication: SHA-2 (512-bit), SHA-1 and MD5
• Key management: manual key, IKEv1 and IKEv2 with EAP
• Perfect forward secrecy (DH groups) support 1, 2, 5
• IPSec NAT traversal
• Dead peer detection and relay detection
• PKI (X.509) certificate support
• VPN concentrator
• Simple wizard support
• VPN auto-reconnection
• VPN High Availability (HA): load-balancing and failover
• L2TP over IPSec
• GRE and GRE over IPSec
• NAT over IPSec
• ZyXEL VPN client provisioning

SSL VPN

• Supports Windows and Mac OS X
• Supports full tunnel mode
• Supports 2-step authentication
• Customizable user portal

Intrusion Detection and Prevention (IDP)

• Routing and transparent (bridge) mode
• Signature-based and behavior-based scanning
• Automatic signature updates
• Customizable protection profile
• Customized signatures supported
• SSL (HTTPS) inspection support

Application Intelligence and Optimization

• Granular control over the most important applications
• Identifies and controls over 3,000 applications and behaviors
• Supports over 15 application categories
• Application bandwidth management
• Supports user authentication
• Real-time statistics and reports
• SSL (HTTPS) inspection support

Anti-Virus

• Supports Kaspersky anti-virus signatures
• Identifies and blocks over 650,000 viruses
• Stream-based anti-virus engine
• HTTP, FTP, SMTP, POP3 and IMAP4 protocol support
• Automatic signature updates
• No file size limitation
• SSL (HTTPS) inspection support

Anti-Spam

• Transparent mail interception via SMTP and POP3 protocols
• Configurable POP3 and SMTP ports
• Sender-based IP reputation filter
• Recurrent Pattern Detection (RPD) technology
• Zero-hour virus outbreak protection
• X-Header support
• Blacklist and whitelist support
• Supports DNSBL checking
• Spam tag support
• Statistics report

Content Filtering

• Social media filtering
• Malicious Website filtering
• URL blocking and keyword blocking
• Blacklist and whitelist support
• Blocks java applets, cookies and ActiveX
• Dynamic, cloud-based URL filtering database
• Unlimited user license support
• Customizable warning messages and redirection URL
• SSL (HTTPS) inspection support

Unified Security Policy

• Unified policy management interface
• Supported UTM features: anti-virus, antispam, IDP, content filtering, application intelligence, firewall (ACL)
• 3-tier configuration: object-based, profilebased, policy-based
• Policy criteria: zone, source and destination IP address, user, time

WLAN Management

• ZyXEL AP Controller (APC) 1.0 compliant
• Client RSSI threshold to prevent sticky clients
• IEEE 802.1x authentication
• Captive portal Web authentication
• Customizable captive portal page
• RADIUS authentication
• Wi-Fi Multimedia (WMM) wireless QoS
• CAPWAP discovery protocol

Mobile Broadband

• WAN connection failover via 3G and 4G* USB modems
• Auto fallback when primary WAN recovers* 4G USB modem support available in future firmware upgrades

Networking

• Routing mode, bridge mode and hybrid mode
• Ethernet and PPPoE
• NAT and PAT
• VLAN tagging (802.1Q)
• Virtual interface (alias interface)
• Policy-based routing (user-aware)
• Policy-based NAT (SNAT)
• Dynamic routing (RIPv1/v2 and OSPF)
• DHCP client/server/relay
• Dynamic DNS support
• WAN trunk for more than 2 ports
• Per host session limit
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• Bandwidth limit per user
• Bandwidth limit per IP

Authentication

• Local user database
• Microsoft Windows Active Directory integration
• External LDAP/RADIUS user database
• XAUTH, IKEv2 with EAP VPN authentication
• Web-based authentication
• Forced user authentication (transparent authentication)
• IP-MAC address binding
• SSO (Single Sign-On) support

System Management

• Role-based administration
• Multiple administrator logins
• Multi-lingual Web GUI (HTTPS and HTTP)
• Command line interface (console, Web console, SSH and TELNET)
• SNMP v2c (MIB-II)
• System configuration rollback
• Firmware upgrade via FTP, FTP-TLS and Web GUI
• Dual firmware images

Logging/Monitoring

• Comprehensive local logging
• Syslog (to up to 4 servers)
• Email alerts (to up to 2 servers)
• Real-time traffic monitoring
• Built-in daily report
• Advanced reporting with Vantage Report

Especificaciones Técnicas

Hardware Specifications

• 8 x 10/100/1000 Mbps RJ-45 Ports (configurable)
• 2 x USB Ports
• 1 x Console Port (DB9)
• Rack-mountable: Yes

System Capacity & Performance

• SPI firewall throughput (Mbps): 6.000
• VPN throughput (Mbps): 800
• IDP throughput (Mbps): 550
• AV throughput (Mbps): 500
• UTM throughput (AV and IDP):500
• Unlimited user licenses: Yes
• concurrent sessions: 300.000
• New TCP session rate: 12.000
• concurrent IPsec VPN tunnels: 1.000
• concurrent SSL VPN users: 255
• Included SSL VPN user no.: 55
• Customizable zones: Yes
• IPv6 support: Yes
• VLAN interface: 128

WLAN Management

• AP Controller (APC) ver: 1.0
• Managed AP number (default/max.): 2/18

Key Software Features

• Virtual Private Network (VPN): Yes (IPSec, SSL, L2TP over IPSec)
• Firewall: Yes
• Anti-Virus (AV): Yes
• Anti-spam: Yes
• Content Filtering (CF): Yes
• Application intelligence and optimization: Yes
• Intrusion Detection and Prevention (IDP): Yes
• SSL inspection: Yes
• Single Sign-On (SSO): Yes
• WLAN controller: Yes

Power Requirements

• Power input: 100 - 240 V AC, 50/60 Hz, 1.3 A max.
• power consumption (watt): 58.5

Physical Specifications

• Item: Dimensions (WxDxH)(mm/in.) - 430 x 250 x 44 / 16.93 x 9.84 x 1.73, Weight (kg/lb.) - 3.3 / 7.28
• Packing: Dimensions (WxDxH)(mm/in.) - 519 x 392 x 163 / 20.43 x 15.43 x 6.42, Weight (kg/lb.): 4.8 / 10.58
• Included accessories: Power cord, Rack mounting kit

Environmental Specifications

• Operating: Temperature - 0°C to 40°C (32°F to 104°F), Humidity - 10% to 90% (non-condensing)
• Storage: Temperature -30°C to 70°C (-22°F to 158°F), Humidity - 10% to 90% (non-condensing)
• MTBF (hr): 560,811.5

Certifications

• EMC: FCC Part 15 (Class B), CE EMC (Class B), C-Tick (Class B), BSMI
• Safety: LVD (EN60950-1), BSMI