Petr Koudelka Security product manager
Rozdě Rozdělení lení produktů produktů dle uřč uřčen řčení ení Enterprise
ZyWALL Target Market
500+ users
Mid-Large
ZyWALL USG 1000
(100-500 users)
ZyWALL USG 300
SMB (50-100 users)
ZyWALL 35 UTM
SB
ZyWALL 5 UTM
(<50 users)
ZyWALL 2WG
SOHO ZyWALL 2 Plus
ZyWALL P1
Produkty nejsou omezeny na počet připojených PC, ale musí být dle počtu zařízení pouze výkonově dimenzované !!!
ZyWALL P1 Panel LEDs:
129mm
PWR: Power status WAN: WAN status VPN: VPN status Managed: Vantage CNM status LAN: LAN status
Interface: Reset: Reset button WAN Port : 10/100 Auto Sensing LAN Port : 10/100 Auto Sensing USB Port : Powered by USB Power: 12VDC Switching type
16mm
81mm
Personal Firewall + 1 VPN, Powered by USB or power supply, WAN and LAN 10/100 Ethernet
91-009-018001B
iCard, 1-year AV+ IDP for P1
91-995-028001B
iCard, 2-year AV+ IDP for P1
91-995-094001B
ZyWALL 2 Plus
LEDs:
Interface:
• PWR,
• Console: RS-232 on RJ-45 Port,
• ACT,
• Dial Backup: RS-232 on RJ-45 Null Modem Port,
• 4-Ports LAN,
• 4-ports LAN/DMZ: 10/100M auto MDI/MDIX
• WAN
• WAN: 10/100M auto MDI/MDIX
Firewall + 5 IPSec VPN, WAN, 4-port 10/100 Ethernet
91-009-029001B
iCard, 1year Content Filter Silver
91-995-003002G
ZyWALL 2WG Interface
LEDs: PWR, LAN/DMZ, WAN, AUX, WLAN CARD (3G Extension Card Slot)
Interface: WAN: 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch: 10/100 Auto MDI/MDIX, configurable as LAN or DMZ WLAN, AUX, Console, Extension slot
ZyWALL 2 WG
Firewall + 5 IPSec VPN, WAN, 4-port 10/100 Ethernet, WLAN 802.11 a/b/g, extension slot "3G/GPRS"
iCard, 1year Content Filter
iCard, 1year Content Filter 2WG
91-009-035001B
91-995-045001B
Plá Plán podpory 3G karet
POZOR podporu vždy ověřte s danou verzí firmware a zařízením 4.04(AQI.1) Sierra Wireless AC580 AC595 AC850 AC860 AC875 AC880 AC881 Novatel PC720 EX720 (express) U740 Huawei EC321 EC360 EC500 E612 E620 E630 Option GT HSDPA 7.2 Ready GT Max 3.6
ZyWALL 5 UTM LEDs:
Interface:
PWR SYS ACT (Status of Dial Backup Function) CARD (Status of Extension Card Slot)
WAN: 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch: 10/100 Auto MDI/MDIX, configurable as LAN or DMZ
Dial-Backup: RS-232 M
Console: RS-232 F
Extension Card Slot: ZyWALL TURBO Card *: ZyWALL Turbo – AV+IDP Accelerator
ZyWALL 5
Firewall + 10 IPSec VPN, WAN, 4port 10/100 Ethernet, extension slot "WiFi, GPRS/3G, Turbo card"
91-009-014001B
ZyWALL 5 UTM
ZyWALL 5*1, Turbo*1, 3 + 12 months AV/IDP license
91-009-014011B
ZyWALL Turbo suite 1 Silver
ZyWALL Turbo suite incl. turbo card, 1year AV+ IDP silver for ZyWALL 5
91-995-004005B
ZyWALL Turbo suite 2 Silver
ZyWALL Turbo suite incl.turbo card, 2year AV+ IDP silver for ZyWALL 5
91-995-005005B
iCard, 1-year AV+ IDP Silver
iCard, 1-year AV+ IDP Silver for ZyWALL 5
91-995-004002G
iCard, 2-year AV+ IDP Silver
iCard, 2-year AV+ IDP Silver for ZyWALL 5
91-995-046001B
iCard, 1-year Anti-Spam Silver
iCard, 1-year Anti-Spam license Silver for ZyWALL 5
91-995-006002G
iCard, 2-year Anti-Spam Silver
iCard, 2-year Anti-Spam license Silver for ZyWALL 5
91-995-007002G
iCard, 1year Content Filter Silver
Content filtering - ZyWALL 2plus/5
91-995-003002G
Plá Plán podpory 3G karet
POZOR podporu vždy ověřte s danou verzí firmware a zařízením 4.04(XD.0) Sierra Wireless AC595 AC850 AC860 AC875 Huawei E612 E620 Option GT HSDPA 7.2 Ready
ZyWALL 35 UTM LEDs:
Interface:
PWR SYS ACT (Status of Dial Backup Function) CARD (Status of Extension Card Slot)
WAN 1, WAN 2 : 10/100 Auto MDI/MDIX 4-port LAN/DMZ switch : 10/100 Auto MDI/MDIX, configurable as LAN or DMZ
Dial-Backup: RS-232 M
Console: RS-232 F
Extension Card Slot: ZyWALL TURBO Card *: ZyWALL Turbo - SMART Accelerator
ZyWALL 35
Firewall + 35 IPSec VPN, 2-port WAN, 4-port 10/100 Ethernet, extension slot "WiFi, Turbo card"
91-009-010001B
ZyWALL 35 UTM
ZyWALL 35*1, Turbo*1, 3+12 months AV/IDP license
91-009-010011B
ZyWALL Turbo suite 1 Gold
ZyWALL Turbo suite incl. turbo card, 1year AV+ IDP gold for ZyWALLs 35/70
91-995-004004B
ZyWALL Turbo suite 2 Gold
ZyWALL Turbo suite incl.turbo card, 2year AV+ IDP gold for ZyWALLs 35/70
91-995-005004B
iCard, 1-year AV+ IDP Gold
iCard, 1-year AV+ IDP Gold for ZyWALLs 35/70
91-995-040001B
iCard, 2-year AV+ IDP Gold
iCard, 2-year AV+ IDP Gold for ZyWALLs 35/70
91-995-036001B
iCard, 1-year Anti-Spam Gold
iCard, 1-year Anti-Spam license Gold for ZyWALLs 35/70
91-995-041001B
iCard, 2-year Anti-Spam Gold
iCard, 2-year Anti-Spam license Gold for ZyWALLs 35/70
91-995-035001B
iCard, 1year Content Filter Gold
Content filtering - ZyWALLs 35/70
91-995-033001B
ZyWALL USG 300 LEDs:
Interface:
PWR SYS AUX (status of Dial Backup/Dial-In) CARD1 (status of Extension Card Slot1) CARD2 (status of Extension Card Slot2)
(7) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for printer, storage…etc
Extension Card Slot: Future Upgrade 1. 3G Cellular Card 2. WLAN Card
Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F
Power: 100~240VAC
ZyWALL USG 300
Firewall + 200 VPN L2TP/IPSec, up to 10 SSL, 7 Gbps multiple WAN,LAN,DMZ ports, expansion
91-009-034001B
slot iCard, 1-year CF ZyWALL USG 300
iCard 1-year Content filtering for ZYWALL USG 300
91-995-084001B
iCard, 2-years CF ZyWALL USG 300
iCard 2-years Content filtering for ZYWALL USG 300
91-995-085001B
iCard, 1-year AV ZyWALL USG 300
iCard, 1-year AV Kaspersky ZyWALL USG 300
91-995-080001B
iCard, 2-years AV ZyWALL USG 300
iCard, 2-years AV Kaspersky ZyWALL USG 300
91-995-081001B
iCard, 1-year IDP ZyWALL USG 300
iCard, 1-year IDP ZyWALL USG 300
91-995-082001B
iCard, 2-years IDP ZyWALL USG 300
iCard, 2-years IDP ZyWALL USG 300
91-995-083001B
iCard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 300
iCard 2 to 10 SSL VPN tunnels for ZyWALL USG 300
91-995-079001B
ZyWALL USG 1000 LEDs: PWR SYS ACT (Status of Dial Backup) HDD (Status of HDD Slot)
Interface: Gigabit Port: 5 gigabit ports USB: 2 USB ports (future enhancement) Extension Card Slot (future enhancement) Dial-Backup: RS-232M, Console: RS-232F HDD Slot (future enhancement)
System FAN: 4 Fans
Power FAN
Power: 100~240VAC
ZyWALL USG 1000
Firewall + 1000 L2TP/IPSec VPN, up to 50 SSL, 5 Gbps multiple WAN, LAN, DMZ ports, extension slot
91-009-052001B
iCard, 1-year CF ZyWALL USG 1000
iCard 1-year Content filtering for ZYWALL USG 1000
91-995-072001B
iCard, 2-years CF ZyWALL USG 1000
iCard 2-years Content filtering for ZYWALL USG 1000
91-995-073001B
iCard, 1-year AV ZyWALL USG 1000
iCard, 1-year AV Kaspersky ZyWALL USG 1000
91-995-078001B
iCard, 2-years AV ZyWALL USG 1000
iCard, 2-years AV Kaspersky ZyWALL USG 1000
91-995-093001B
iCard, 1-year IDP ZyWALL USG 1000
iCard, 1-year IDP ZyWALL USG 1000
91-995-076001B
iCard, 2-years IDP ZyWALL USG 1000
iCard, 2-years IDP ZyWALL USG 1000
91-995-077001B
iCard SSL VPN 5 TO 25 TUNNELS ZYWALL USG 1000
iCard 5 to 25 SSL VPN tunnels for ZyWALL USG 1000
91-995-075001B
iCard SSL VPN 5 TO 50 TUNNELS ZYWALL USG 1000
iCard 5 to 50 SSL VPN tunnels for ZyWALL USG 1000
91-995-092001B
iCard SSL VPN 25 TO 50 TUNNELS ZYWALL USG 1000
iCard 25 to 50 SSL VPN tunnels for ZyWALL USG 1000
91-995-074001B
ZyWALL SSL 10
LEDs: PWR SYS
RS-232
Interface: WAN : 10/100 Auto MDI/MDIX 4x LAN: 10/100 Auto MDI/MDIX
ZyWALL SSL 10
Firewall + 10 VPN SSL tunnels
91-009-033001B
Upgrade for SSL 10
iCard, SSL VPN, for ZyWALL SSL10, 10 to 25 tunnel
91-995-031001B
ZyWALL OTP (One-Time Password) ZyWALL OTP Starter Kit •
Obsahuje 2 tokeny a 1 CD (ZyXEL/Authenex Server Software)
•
Designováno pro nové nebo malé zákazníky
ZyWALL OTP 5U •
Obsahuje 5 tokenů a 1 CD (ZyXEL/Authenex Server Software)
•
Designováno pro zákazníka, který má již starter kit a potřebuje více tokenů pro uživatele
ZyWALL OTP 10U •
Obsahuje 10 tokenů a 1 CD (ZyXEL/Authenex Server Software)
•
Designováno pro zákazníka, který má již starter kit a potřebuje více tokenů pro uživatele
ZyWALL OTP Starter Kit
2 tokens for new/potential customers to test and use
91-009-044001B
ZyWALL OTP 5U
5 tokens to those who need more tokens for more users
91-009-044002B
ZyWALL OTP 10U
10 tokens to those who need more tokens for more users
91-009-044003B
ZyWALL IPSec client Specification: Encryption DES, 3DES, and AES Hash Algorithms HMAC-MD5, HMAC-SHA-1, Diffie Hellman Group Support DH1, 2, 5, 14 Authentication Mechanisms Preshared keys, X.509, X-Auth, SmartCard&Token Key Management IKE (Internet Key Exchange), ISAKMP IPSec Modes AH, ESP, Main, Aggressive, Tunnel, Transport System Requirements Disk Space - 5 MB Windows XP, Winsows Vista 32 bit
ZyWALL IPSec VPN Client
ZyWALL IPSec VPN Client - 1 Pack, GreenBow, Windows XP, Vista 32
91-996-031001B
Vantage CNM Centralized Network Management Specification Server CPU: Intel P4 2,8 GHz or higher Memory: 2GB or higher Hard Disk: 80 GB - 250 GB or higher Client CPU: Intel P3 450 MHz or higher Memory: 256MB or higher Server Operating System: Windows XP Pro (SP1/SP2) / Windows 2000 Server (SP4) / Windows 2003 Server (SP1), Windows Vista 32 bit English version Client JRE (Java Run-time Environment) version 1.5.x and high
Disable Pop-up blocker Microsoft Internet Explore 6.0/7.0 Firefox 1.5 or higher on Microsoft SVGA resolution (1024x768), 1280 x recommended
Vantage CNM - 10
Centralized Network Management 10 device access (Windows)
91-996-049001B
Vantage CNM – 25
Centralized Network Management 25 device access (Windows)
91-996-050001B
Vantage CNM – 50
Centralized Network Management 50 device access (Windows)
91-996-051001B
Vantage CNM - 100
Centralized Network Management 100 device access (Windows)
91-996-052001B
Vantage CNM - 300
Centralized Network Management 300 device access (Windows)
91-996-053001B
Vantage CNM - 1000
Centralized Network Management 1000 device access (Windows)
91-996-054001B
• CNM obsahuje integrovanou verzi VRPT dle licence na CNM • Kooperace CNM a samostatného VRPT na stejném PC není možná • Upgrade z verze niž nižší na verzi vyšší vyšší je zdarma • Registrace se provádí na MAC adresu síťové karty PC, na který je software instalován • Licenci lze kdykoliv převést na jinou MAC adresu jiného PC • Registrované Registrované licence se sč sčítají tají: 10+25+50=85 licencí licencí
Support list based on software CNM 3.0.00.61.00
Vantage Reporter System Specification: Server:Windows XP/2000/2003 Server,Windows Vista 32 bit
Client:Browser: Microsoft IE 6.0 or later. Mozilla 1.7.12 or later, Friefox 1.0.7 or later on Microsoft. Screen resolution supported: 1024*768 Flash Player 7.0 and above Server: Number of devices CPU SPEC Memory HDD <5 Intel P4 2.6G or better 1G 10 GB < 50 Intel P4 2.6G or better 1G 2*devices 50~100 Intel P4 3.2G+ or better 1G 2*devices Client CPU: Intel P3 450 MHz or better Velikost jednoho logu je 300 bajtů. Note: Server can handle <=1500 logs/sec
VANTAGE REPORT 1DEVICE
VANTAGE REPORT 1DEVICE
91-996-029001B
VANTAGE REPORT 5 DEVICES
VANTAGE REPORT 5 DEVICES
91-996-036001B
VANTAGE REPORT 25 DEVICES
VANTAGE REPORT 25 DEVICES
91-996-037001B
VANTAGE REPORT 100 DEVICES
VANTAGE REPORT 100 DEVICES
91-996-040001B
• Upgrade z verze niž nižší na verzi vyšší vyšší je zdarma • Registrace se provádí na MAC adresu síťové karty PC, na který je software instalován • Licenci lze kdykoliv převést na jinou MAC adresu jiného PC • Registrované Registrované licence se sč sčítají tají: 1+5 1+5+25+=31 licencí licencí
Technické informace ZyWALL P1
ZyWALL 2Plus
ZyWALL 2WG
ZyWALL 5 UTM
ZyWALL 35 UTM
ZyWALL 70 UTM
ZyWALL USG 300
ZyWALL USG 1000
How many users can use device ?
1
<10
<15
<25
<100
<200
<300
<500
Firewall Troughput
80 Mbps
24 Mbps
24 Mbps
50 Mbps
60 Mbps
75 Mbps
200 Mbps
350 Mbps
VPN 3DES/AES Troughput
30 Mbps
24 Mbps
24 Mbps
25 Mbps
30 Mbps
40 Mbps
100 Mbps
150 Mbps
5 Mbps
-
-
12 Mbps
14 Mbps
18 Mbps
48 Mbps
100 Mbps AV+IDP+FW
Model Name Performance
UTM Throughput (AV+IDP+Firewall) User Licenses
NO
VLAN Tagging 802.1q
-
x
DoS/DDoS Protection
x
IDP
x
-
-
x
Anti-Spam
-
-
-
x
-
Anti-Virus
x
-
-
x
x
Content Filter
-
Concurrent Sessions
1500
3000
3000
Up to simultaneous IPSec VPN connections
1
5
5
x 6000 UTM 4000
10
10000
10000
60000
200000
35
100
200
1000
Model Name
ZyWALL P1
ZyWALL 2Plus
ZyWALL 2WG
ZyWALL 5 UTM
ZyWALL 35 UTM
ZyWALL 70 UTM
ZyWALL USG 300
ZyWALL USG 1000
Up to simultaneous L2TP IPSec VPN connections
-
200
1000
Up to simultaneous SSL VPN connections
-
10
50
7X 10/100/1000 Mbps, 2xUSB
5X 10/100/1000 Mbps, 2xUSB
x
VPN HA Physical Specification Ports (10/100 Mbps Auto sensing & MDI/MDIX)
1xLAN , 1xWAN, 1xUSB
Redundancy
4xLAN/DMZ , 1xWAN
4xLAN/DMZ , 1xWAN, 1xWLAN, 1x3G*
4xLAN/DMZ , 1xWAN, 1x3G*
Traffic Redirect , Dial Backup
4xLAN/DMZ, 2xWAN
1xLAN, 4xDMZ, 2xWAN
Multiple WAN Load Balance, Auto Fail-over, Fail-back, Dial Backup, Traffic Redirect
Device Redundancy
-
x
Extension Card Slot
-
-
x – 3G card
x – 3G card, WLAN card, Turbocard
x– WLANcard, Turbocard
x– WLANcard, Turbocard
2 xcard bus
card bus, USB, MiniPCI, 2,5" HDD
RS-232 console
-
x
x
x
x
x
x
x
Bridge
x
-
-
x
x
x
x
x
Bandwidth Management
-
x
x
x
x
x
x
x
*optional support 3G card
UTM = AS + AV + IDP + CF Bandwidth Mgmt
Web Filters
Servers
VPNUTM / Firewall
AntiAnti-Virus
Load Balance
IDS / IDP
Users
AntiAnti-Spam
UTM (Unified Threat Management)
IDP 3*
3* 1* 3* * Mě ěsíců ů zdarma na vyzkoušení
Internet
Anti-Virus/IDP Acceleration Card with ZyXEL SecuASIC Technology for ZyWALL 5, 35 and 70
Servers Users
Internet
SSL VPN tunnel External Database
ZyWALL SSL VPN RADIUS Internet Remote Users
Zabezpeč čení jednorázovým heslem: Získá-li někdo nelegálně Vaše přihlašovací údaje k přístupu na firemní síť NEVADÍ !!! Přístup je navíc chráněn generováním jednorázového přístupového číselného hesla, které se dá použít jen jednou.
NAT Gateway – nemáte žádný firewall, SSL 10 bude Vaším firewallem
ZyWALL SSL VPN Employee on Home Computer
LAN Zone
(with NAT and Firewall) WAN
LAN
Internet Employee Laptop In Airport Kiosk or In Hotel
Email Server
Encrypted
Decrypted File Share
Authorized Partner Authorized Customer
BI System
OA, ERP System CRM System
Web-based Application Server Application (Inventory, Store..)
Remote Desktop Network Extend
Gateway’s DMZ Zone – pokud firewall již ž máte, SSL 10 bude doplň ňkem zabezpeř ření Vašich síť ťových dat – ZyWALL zabezpeč čuje IDP/AV
ZyWALL UTM provides Anti-Virus/IDP inspection on SSL-VPN traffic
LAN Zone
ZyWALL UTM
Employee on Home Computer WAN
LAN Email Server
BI System
Internet Employee Laptop In Airport Kiosk or In Hotel
DMZ
Encrypted
Decrypted
File Share
OA, ERP System CRM System
DMZ Zone WAN Authorized Partner Authorized Customer
ZyWALL SSL VPN
Web-based Application Server Application (Inventory, Store..)
Remote Desktop Network Extend
3G Security Router – druhá konektivita není v dosahu metalicky, ale je k dispozici GPRS nebo UMTS • 3G Data Card Access - Primary WAN - Backup WAN • WIFI Security
- Dual WAN (LB)
- WEP/WPA/WPA2 - 802.1x EAP Auth.
Internet AC 850
Internet ZyWALL 3W 2WG / 5
ZyWALL 70 UTM
Remote Office Central Office/ HQ
3G Security Router – není k dispozici v dosahů ů žádná metalická, WiFi ani optická konektivita
AC 850
Residential
ZyWALL 2WG/5 • 3G Data Card Access - Primary WAN
Internet AC 850
Residential
ZyWALL 2WG/5
Management sítě ě Branch Office
Internet Security Appliance
Internet Dept. 1
Company C
IT Manager Dept. 2 Vantage CNM Server
Internet Security Appliance
Personal Security Appliance
Telecommuter
Centralizované logování a vyhodnocení záznamů ů
ZyWALL A
Vantage CNM & Online Query from Reporting Server Client with IE Syslog
Internet ZyWALL B Syslog
VPN Tunnel is Up VPN Tunnel is Down
License & SKU of VRPT Install --Prompt to ask entering license during login
Enable License
Enable Trial
Trial Expired
Trial -- Full Function •1device •15 days trial
Enable License
-- Full Function -- no time limitation
1/5/25/100/ device
Trial Expired -- No Function is allowed
Enable License
License & SKU of CNM Install --Prompt to ask entering license during login
Enable Trial
Trial Expired
Trial -- Full Function •100 device •90 days trial
Enable License
Enable License
-- Full Function -- no time limitation
10/25/50/100/300/1000 device
Trial Expired -- No Function is allowed
Enable License
Questions?
