Product security guide Q4/2011 31.10.2011
Petr Koudelka Security Product Manager
Rozdělení produktů dle určení Enterprise 200+ users ZyWALL USG 2000
Mid-Large (75-200 users)
ZyWALL USG 1000
SMB (50-75 users)
ZyWALL USG 300
SB
ZyWALL USG 200
(<50 users)
ZyWALL USG 100
SOHO (<15 users) Home
ZyWALL USG 50
ZyWALL USG 20W
ZyWALL USG 20
Produkty nejsou omezeny na počet připojených PC, ale musí být dle počtu zařízení pouze výkonově dimenzované !!!
Plán podpory 3G karet USG 20, 20W, 50 POZOR podporu vždy ověřte s danou verzí firmware a zařízením 2.21(xxx.4)
Plán podpory 3G karet USG 100, 200, 300, 1000, 2000 POZOR podporu vždy ověřte s danou verzí firmware a zařízením 2.20(xxx.5)
ZyWALL USG 20
ZÁRUKA 5 roků
LEDs: PWR, SYS, USB, WLAN, WAN, LAN/DMZ
Interface: (1) CONSOLE: RJ45 connector (1) USB: 2.0, for 3G/3.5G (1) WAN: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role
Power: 12VDC 100~240VAC
ZyWALL USG 20
Security Firewall, Optional(Content Filtering, Antispam), 5x IPSec VPN, 1 SSL, 5x 1Gbps (4x LAN/WLAN/DMZ, 1x WAN), 1x USB
91-009-072001B
iCard 1-year CONTENT FILTER USG 20
iCard 1-year Content filtering for ZYWALL USG 20
91-995-240001B
iCard 2-year CONTENT FILTER USG 20
iCard 2-year Content filtering for ZYWALL USG 20
91-995-241001B
ZyWALL USG 20W
ZÁRUKA 5 roků
LEDs: PWR, SYS, USB, WLAN, WAN, LAN/DMZ
Interface: Antenna: Numbers: 2 802.11n
(1) CONSOLE: RJ45 connector (1) USB: 2.0, for 3G/3.5G (1) WAN: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role
Power: 12VDC 100~240VAC
ZyWALL USG 20W
Security Firewall, Optional(Content Filtering, Antispam), 5x IPSec VPN, 1 SSL, 5x 1Gbps (4x LAN/DMZ, 1x WAN, WiFi 802.11n 2T2R), 1x USB
91-009-071001B
iCard 1-year CONTENT FILTER USG 20W
iCard 1-year Content filtering for ZYWALL USG 20W
91-995-242001B
iCard 2-year CONTENT FILTER USG 20W
iCard 2-year Content filtering for ZYWALL USG 20W
91-995-243001B
ZyWALL USG 50 LEDs: PWR SYS
ZÁRUKA 5 roků
Interface: (2) WAN1, WAN2: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000 Configurable Port Role (2) USB: 2.0, for 3G/3.5G
Interface: Console: DB9
Power: 12VDC 100~240VAC
ZyWALL USG 50
Security Firewall, Optional(IDP, Antivir, Antispam, Content Filtering), 10x IPSec VPN, 5 SSL (2 free), 6x 1Gbps (4x LAN/WLAN/DMZ, 2x WAN), 2x USB
91-009-073001B
iCard 1-year CONTENT FILTER USG 50
iCard 1-year Content filtering for ZYWALL USG 50
91-995-231001B
iCard 2-year CONTENT FILTER USG 50
iCard 2-year Content filtering for ZYWALL USG 50
91-995-232001B
iCard 1-year KASPERSKY AV USG 50
iCard 1-year KASPERSKY AV for ZYWALL USG 50
91-995-233001B
iCard 1-year ZYXEL AV USG 50
iCard 1-year ZYXEL AV for ZYWALL USG 50
91-995-235001B
iCard 2-year ZYXEL AV USG 50
iCard 2-year ZYXEL AV for ZYWALL USG 50
91-995-236001B
iCard 1-year IDP USG 50
iCard 1-year IDP for ZYWALL USG 50
91-995-237001B
iCard 2-year IDP USG 50
iCard 2-year IDP for ZYWALL USG 50
91-995-238001B
iCard 1-year Kaspersky AV+IDP USG 50
iCard 1-year Kaspersky AV + IDP licence for ZYWALL USG 50
96-995-000001
iCard SSL VPN 2 TO 5 TUNNELS ZYWALL USG 50
iCard VPN 2 TO 5 TUNNELS for ZYWALL USG 50
91-995-239001B
USG 50 Comparison Matrix Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Bandwidth Management M-WAN LB, failover H/W Warranty H/W Interface USB Interface Free F/W Upgrade
USG 50 (F/W v2.21 P5)
FG FG--30B
TZ100
XTM 21
ProSecure UTM 5
180
100
100
110
90
90
5
75
35
40
10,000
5,000
6,000
10,000
8,000
10
10
5
16
5
(2/5)
–
(1/5)
(1/11***)
(2)
/
/
/
/
/
–
–
–
–
–
–
***
–
5-YR
1-YR
1-YR
1-YR
2-YR
10/100/1000*6
10/100*4 (WAN*1) (LAN*3)
10/100*3 10/100/1000*3
10/100/1000*5
(WAN*2) (LAN/DMZ*4)
10/100*5
(WAN*1) (LAN/DMZ*4)
2
1
–
2
1
product life time
90 days
90 days
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZÁRUKA 5 LET NBD v ceně
ZyWALL USG 100 LEDs:
Interface:
PWR SYS AUX (status of Dial Backup/Dial-In) CARD (status of Extension Card Slot)
(2) WAN1, WAN2: 10/100/1000 (5) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage…etc
Interface:
Interface:
Dial-Backup/Dial-In OOB: DB-9 M
Console: DB-9 F
Power: Extension Card Slot: 3G Cellular Card
12VDC 100~240VAC
ZyWALL USG 100
10/100/1000, 2 WAN, 5 LAN / WLAN/ DMZ ports, 2*USB
91-009-045001B
iCard 1-year CONTENT FILTER USG 100
iCard 1-year Content filtering for ZYWALL USG 100
91-995-150001B
iCard 2-year CONTENT FILTER USG 100
iCard 2-year Content filtering for ZYWALL USG 100
91-995-163001B
iCard 1-year KASPERSKY AV USG 100
iCard 1-year KASPERSKY AV for ZYWALL USG 100
91-995-152001B
iCard 1-year ZYXEL AV USG 100
iCard 1-year ZYXEL AV for ZYWALL USG 100
91-995-156001B
iCard 2-year ZYXEL AV USG 100
iCard 2-year ZYXEL AV for ZYWALL USG 100
91-995-165001B
iCard 1-year IDP USG 100
iCard 1-year IDP for ZYWALL USG 100
91-995-158001B
iCard 2-year IDP USG 100
iCard 2-year IDP for ZYWALL USG 100
91-995-159001B
iCard SSL VPN 2 TO 5 TUNNELS ZYWALL USG 100
iCard VPN 2 TO 5 TUNNELS for ZYWALL USG 100
91-995-161001B
USG 100 Comparison Matrix Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty H/W Interface Free F/W Upgrade
ZyWALL USG 100
FG FG--50B
TZ200
XTM 22
100
50 (512 bytes)
100
150
60
48
75
55
20k
25k
8k
20k
50
20
10
45
(2/5)
(1/10)
(1/25***)
/
/
/
/
-
2-YR
1-YR
1-YR
1-YR
10/100/1000 *7
10/100*5
10/100*5
(LAN/DMZ*5)
(WAN*2)
(WAN*2)
(WAN*2)
(LAN*3)
(LAN/DMZ*5)
90 days
90 days
10/100*3 10/100/1000*3
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZÁRUKA 5 LET NBD v ceně
ZyWALL USG 200 LEDs:
Interface:
PWR SYS AUX (status of Dial Backup/Dial-In) CARD (status of Extension Card Slot)
(2) WAN1, WAN2: 10/100/1000 (1) Optional: 10/100/1000 (can be 3rd WAN, or additional LAN/DMZ) (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage…etc
Interface:
Interface:
Dial-Backup/Dial-In OOB: DB-9 M
Console: DB-9 F
Power: Extension Card Slot: 3G Cellular Card
12VDC 100~240VAC
ZyWALL USG 200
10/100/1000, 2 WAN, 4 LAN / WLAN/ DMZ ports, 1 OPT port, 2* USB
91-009-057001B
iCard 1-year CONTENT FILTER USG 200
iCard 1-year Content filtering for ZYWALL USG 200
91-995-151001B
iCard 2-year CONTENT FILTER USG 200
iCard 2-year Content filtering for ZYWALL USG 200
91-995-164001B
iCard 1-year KASPERSKY AV USG 200
iCard 1-year KASPERSKY AV for ZYWALL USG 200
91-995-153001B
iCard 1-year ZYXEL AV USG 200
iCard 1-year ZYXEL AV for ZYWALL USG 200
91-995-157001B
iCard 2-year ZYXEL AV USG 200
iCard 2-year ZYXEL AV for ZYWALL USG 200
91-995-166001B
iCard 1-year IDP USG 200
iCard 1-year IDP for ZYWALL USG 200
91-995-167001B
iCard 2-year IDP USG 200
iCard 2-year IDP for ZYWALL USG 200
91-995-160001B
iCard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 200
iCard VPN 2 TO 10 TUNNELS for ZYWALL USG 200
91-995-162001B
USG 200 Comparison Matrix Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty H/W Interface Free F/W Upgrade
ZyWALL USG 200
ASG 110 (limit to 10 users)
FG FG--60B
TZ210
XTM23
200
200
100 (512 bytes)
200
195
75
80
64
75
55
40k
90k
70k
10k
30k
100
50
40
105
(2/10)
(2/10)
(55/55)
/
/
/
/
/
-
2-YR
1-YR
1-YR
1-YR
1-YR
10/100/1000 *7
10/100 *4
10/100 *9
10/100/1000 *2
(WAN*2) (LAN/DMZ*4)
(WAN*1) (LAN*1)
(WAN*2) (LAN*6)
10/100 *5
(OPT*1)
(DMZ*1) (HA*1)
(DMZ*1)
(WAN*2) (LAN/DMZ*5)
90 days
90 days
90 days
10/100 *3 10/100/1000 *3
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance.
ZyWALL USG 300
ZÁRUKA 5 LET NBD v ceně
LEDs:
Interface:
PWR SYS AUX (status of Dial Backup/Dial-In) CARD1 (status of Extension Card Slot1) CARD2 (status of Extension Card Slot2)
(7) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage…etc
Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F
Power: Extension Card Slot: 3G Cellular Card
100~240VAC
ZyWALL USG 300
Firewall + 200 VPN L2TP/IPSec, 25 SSL (2 free), 7 Gbps multiple WAN,LAN,DMZ ports, expansion slot
91-009-034001B
iCard, 1-year CF ZyWALL USG 300
iCard 1-year Content filtering for ZYWALL USG 300
91-995-084001B
iCard, 2-years CF ZyWALL USG 300
iCard 2-years Content filtering for ZYWALL USG 300
91-995-085001B
iCard 1-year KASPERSKY AV USG 300
iCard, 1-year AV Kaspersky ZyWALL USG 300
91-995-080001B
iCard 1-year ZYXEL AV USG 300
iCard 1-year ZYXEL AV for ZYWALL USG 300
91-995-188001B
iCard 2-year ZYXEL AV USG 300
iCard 2-year ZYXEL AV for ZYWALL USG 300
91-995-189001B
iCard, 1-year IDP ZyWALL USG 300
iCard, 1-year IDP ZyWALL USG 300
91-995-082001B
iCard, 2-years IDP ZyWALL USG 300
iCard, 2-years IDP ZyWALL USG 300
91-995-083001B
iCard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 300
iCard 2 to 10 SSL VPN tunnels for ZyWALL USG 300
91-995-079001B
iCard SSL VPN 2 TO 25 TUNNELS ZYWALL USG 300
iCard 2 to 25 SSL VPN tunnels for ZyWALL USG 300
iCard SSL VPN 10 TO 25 TUNNELS ZYWALL USG 300
iCard 10 to 25 SSL VPN tunnels for ZyWALL USG 300
91-995-186001B 91-995-187001B
USG 300 Comparison Matrix Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty H/W Interface Free F/W Upgrade
ZyWALL USG 300
ASG 120 ( UTM UTM25 users)
FG FG--80C
NSA240
XTM 505
300
200
350 (512 bytes)
600
850
100
80
80
150
210
60k
90k
100k
25k
40k
200
200
50
140
(2/25)
(2/15)
(1/65***)
/
/
/
/
/
-
2-YR
1-YR
1-YR
1-YR
1-YR
(WAN*2)
10/100/1000 *6
10/100 *1
10/100 *7
(Configurable)
10/100/1000 *6
90 days
90 days
10/100/1000 *7 (Configurable)
10/100/1000 *2
10/100 *4 (WAN*1) (LAN*1) (DMZ*1) (HA*1)
(LAN*6) (DMZ*1)
90 days
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZÁRUKA 5 LET NBD v ceně
ZyWALL USG 1000 LEDs:
Interface:
PWR SYS AUX (status of Dial Backup/Dial-In) HDD (Status of HDD Slot)
(5) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage…etc
Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F
HDD slot (future enhancement)
Extension Card Slot:
Power:
3G Cellular Card
100~240VAC
ZyWALL USG 1000
Firewall + 1000 L2TP/IPSec VPN, 50 SSL (5 free), 5 Gbps multiple WAN, LAN, DMZ ports, extension slot
91-009-052001B
iCard, 1-year CF ZyWALL USG 1000
iCard 1-year Content filtering for ZYWALL USG 1000
91-995-072001B
iCard, 2-years CF ZyWALL USG 1000
iCard 2-years Content filtering for ZYWALL USG 1000
91-995-073001B
iCard 1-year KASPERSKY AV USG 1000
iCard, 1-year AV Kaspersky ZyWALL USG 1000
91-995-078001B
iCard 1-year ZYXEL AV USG 1000
iCard 1-year ZYXEL AV for ZYWALL USG 1000
91-995-193001B
iCard 2-year ZYXEL AV USG 1000
iCard 2-year ZYXEL AV for ZYWALL USG 1000
91-995-194001B
iCard, 1-year IDP ZyWALL USG 1000
iCard, 1-year IDP ZyWALL USG 1000
91-995-076001B
iCard, 2-years IDP ZyWALL USG 1000
iCard, 2-years IDP ZyWALL USG 1000
91-995-077001B
iCard SSL VPN 5 TO 25 TUNNELS ZYWALL USG 1000
iCard 5 to 25 SSL VPN tunnels for ZyWALL USG 1000
91-995-075001B
iCard SSL VPN 5 TO 50 TUNNELS ZYWALL USG 1000
iCard 5 to 50 SSL VPN tunnels for ZyWALL USG 1000
91-995-092001B
iCard SSL VPN 25 TO 50 TUNNELS ZYWALL USG 1000
iCard 25 to 50 SSL VPN tunnels for ZyWALL USG 1000
91-995-074001B
iCard SSL VPN 5 TO 250 TUNNELS ZYWALL USG 1000
iCard 5 to 250 SSL VPN tunnels for ZyWALL USG 1000
iCard SSL VPN 25 TO 250 TUNNELS ZYWALL USG 1000
iCard 25 to 250 SSL VPN tunnels for ZyWALL USG 1000
iCard SSL VPN 50 TO 250 TUNNELS ZYWALL USG 1000
iCard 50 to 250 SSL VPN tunnels for ZyWALL USG 1000
91-995-190001B
91-995-191001B
91-995-192001B
ZyWALL USG 1000 Competing Models Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty H/W Interface Free F/W Upgrade
ZyWALL USG 1000
ASG 220
FG FG--110C
NSA3500
XTM 510
400
500
500
1500
1400
150
170
100
625
350
500k
300k
400k
128k
50k
1000
1500
800
175
(5/250)
(2/25)
(1/75*)
/
/
/
/
/
2-YR
1-YR
1-YR
1-YR
1-YR
10/100/1000 *2
10/100/1000 *6
10/100 *8
(Configurable)
90 days
90 days
10/100/1000 *5 (Configurable)
10/100/1000 *8
90 days
10/100/1000 *8
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZyWALL USG 2000
ZÁRUKA 5 LET NBD v ceně
LED: PWR: Power status SYS: System status AUX (Status of Dial-in Function) HDD (Status of Hard Drive) SEM (VPN/Dual accel.) CARD: 3G card status
AUX & Console: Dial-in Mgmt & RS-232 Console
Interface:
Security Extension Module:
6 GbE: 10/100/1000 (Auto MDI/MDIX) 2 Dual-Personality: Ethernet or SFP
Boost up UTM and/or VPN throughput performance
Fan: Ventilation Fans
HDD Slot: HDD Expansion Slot (future enhancement)
Card Slot:
USB:
CardBus slot
2xUSB 2.0 (Host) Ports 3G, storage
Power Redundancy: Redundant Power Module
ZyWALL USG 2000 with SEM-DUAL
Security Firewall + SEM dual module, IDP, Antivir, Antispam, Content Filtering, 2000x VPN (IPSec/L2TP) , 750 SSL (5 free), 6x 1Gbps multiple (LAN/DMZ/WAN), 2x SFP (Combo), 2x USB, expansion slot
96-996-000079
iCard 1-year CONTENT FILTER USG 2000 iCard 1-year Content filtering for ZYWALL USG 2000
91-995-172001B
iCard 2-year CONTENT FILTER USG 2000 iCard 2-year Content filtering for ZYWALL USG 2000
91-995-173001B
iCard 1-year KASPERSKY AV USG 2000
iCard 1-year KASPERSKY AV for ZYWALL USG 2000
91-995-174001B
iCard 1-year ZYXEL AV USG 2000
iCard 1-year ZYXEL AV for ZYWALL USG 2000
91-995-176001B
iCard 2-year ZYXEL AV USG 2000
iCard 2-year ZYXEL AV for ZYWALL USG 2000
91-995-177001B
iCard 1-year IDP USG 2000
iCard 1-year IDP for ZYWALL USG 2000
91-995-178001B
iCard 2-year IDP USG 2000
iCard 2-year IDP for ZYWALL USG 2000
91-995-179001B
SSL 5->50 for ZyWALL USG 2000
iCARD SSL VPN 5 TO 50 TUNNELS ZYWALL USG 2000
91-995-180001B
SSL 5->250 for ZyWALL USG 2000
iCARD SSL VPN 5 TO 250 TUNNELS ZYWALL USG 2000 91-995-181001B
SSL 5->750 for ZyWALL USG 2000
iCARD SSL VPN 5 TO 750 TUNNELS ZYWALL USG 2000 91-995-182001B
SSL 50->250 for ZyWALL USG 2000 SSL 50->750 for ZyWALL USG 2000 SSL 250->750 for ZyWALL USG 2000
iCARD SSL VPN 50 TO 250 TUNNELS ZYWALL USG 2000 iCARD SSL VPN 50 TO 750 TUNNELS ZYWALL USG 2000 iCARD SSL VPN 250 TO 750 TUNNELS ZYWALL USG 2000
91-995-184001B 91-995-183001B 91-995-185001B
ZyWALL USG 2000 Competing Models Comparison Matrix Firewall** (Mbps) VPN** (Mbps) Concurrent Sessions Max. # of VPN Tunnels SSL VPN (Incl./Max.) Anti-Virus / IDP IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty
ZyWALL USG 2000
ASG 320
FG FG--310B
NSA 4500
XTM 530
2000
1000
8000
2750
2300
400
220
6000
1000
750
1000k
600k
600k
450k
350k
2000
3000
3000
1600
(5/750)
(2/30)
(1/600***)
/
/
/
/
/
2-YR
1-YR
1-YR
1-YR
1-YR
10/100/1000 *8
10/100/1000 *10
90 days
90 days
10/100/1000 *6
H/W Interface
SFP *2 (dual-Personality) (Configurable)
Free F/W Upgrade
10/100/1000 *6 (Configurable)
90 days
10/100/1000 *8
90 days
Note: : Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor’s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
OTPv2 – One Time Password – Safenet ZyWALL OTPv2 5U Starter pack • Obsahuje software a 5 tokenů
ZyWALL OTPv2 5U Add-on pack • Obsahuje jen 5 tokenů a musí být provozován se starter packem Podpora instalace na 32-bit a 64-bit Windows XP, Vista, Windows 2003/2008 Server Záruka
Hardware – 2 roky (životnost baterie 2 roky nebo 14000 zmáčknutí)
Software – 1 rok od aktivace – obsahuje updaty a bux fixing
Pro software upgrade musí být zakoupena licence dle licenční politiky Safenet
Neobsahuje rozšíření záruky na hardware
Details about Software Warranty Renewal By purchasing software warranty renewal, end user can have extra 1 year software warranty: • Eligible to get new software releases
How we determine the renewal period: (existing software warranty expiration date) + 1 year 1 2 3 Extend 1-yr License (another 1-yr period)
1-yr License Period
Same Expiration date
Time
License Activate
License Expire Renew License (1-yr) (Before expire date) Case: 1
Renew License (1-yr) Case: 2
Renew License (1-yr) (After expire date) Case: 3
Software Warranty Renewal – SKU Type of Service/Feature 5U software warranty renewal
1-YR
Note: 1. Software warranty renewal license could be accumulated, ex: if you were managing 10 token users, you need to purchase 2 copies of 5U software warranty renewal. 2. When purchasing software warranty renewal license, you must provided Safeword software license and managed token numbers.
This software upgrade you can buy only directly from company Safenet!
ZyWALL OTPv2 5U Starter pack
ZyWALL OTPv2 5U Starter pack (Autentification token-Safenet)
91-009-044007B
ZyWALL OTPv2 5U Add-on pack
ZyWALL OTPv2 5U Add-on pack (Autentification token-Safenet)
91-009-044008B
ZyWALL IPSec client Specification: Encryption DES, 3DES, AES128, AES192, AES256 Hash Algorithms HMAC-MD5, HMAC-SHA-1, HMAC-SHA-2 - 256 Diffie Hellman Group Support DH1, 2, 5, 14 Authentication Mechanisms Preshared keys, X.509, X-Auth, SmartCard&Token Key Management IKE (Internet Key Exchange), ISAKMP IPSec Modes AH, ESP, Main, Aggressive, Tunnel, Transport System Requirements Disk Space - 5 MB Windows 2000, Windows XP 32 bit, Windows Vista 32 bit/64 bit Windows server 2003 32 bit, Windows server 2008 32 bit/64 bit, Windows 7 32 bit/64 bit
Při aktivaci se odesílá MAC adresa síťové karty, přes kterou je aktivní připojení na Internet. Další aktivace na jiných MAC je zablokována na již použité SN. Provoz je možný z jakéhokoli síťového rozhraní.
ZyWALL IPSec VPN 1 Client
ZyWALL IPSec VPN 5 Client
ZyWALL IPSec VPN 10 Client
ZyWALL IPSec VPN 50 Client
ZyWALL IPSec VPN Client - 1 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 5 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 10 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 50 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit
91-996-038001B 91-996-039001B 91-996-041001B 91-996-042001B
Vantage Reporter - VRPT
1 licence zdarma
System Specification: Server:Windows 2000/XP/2003 Server,Windows Vista 32 bit/ 64 bit, Windows server 2008 32 bit/64 bit, Windows 7 32 bit/ 64 bit
Client:Browser: Microsoft IE 6.0 or later. Mozilla 1.7.12 or later, Friefox 1.0.7 or later on Microsoft. Screen resolution supported: 1024*768 Flash Player 7.0 and above Server: Number of devices CPU SPEC Memory HDD <5 Intel P4 2.6G or better 1G 10 GB < 50 Intel P4 2.6G or better 1G 2*devices 50~100 Intel P4 3.2G+ or better 1G 2*devices Client CPU: Intel P3 450 MHz or better Velikost jednoho logu je 300 bajtů. Note: Server can handle <=1500 logs/sec
VANTAGE REPORT 5 DEVICES
VANTAGE REPORT 5 DEVICES
91-996-036001B
VANTAGE REPORT 25 DEVICES
VANTAGE REPORT 25 DEVICES
91-996-037001B
VANTAGE REPORT 100 DEVICES
VANTAGE REPORT 100 DEVICES
91-996-040001B
• Upgrade z verze nižší na verzi vyšší je zdarma • Registrace se provádí na PC, na který je software instalován • Licenci lze kdykoliv převést na jiné PC • Registrované licence se sčítají: 1 „free“ + 5+5+25=36 licencí
VRPT zdarma Pokud stáhnete VRPT z WWW stránek nebo FTP a nainstalujete získáte licenci basic na 1 zařízení – některé funkce omezeny Pokud zaregistrujete licenci na myzyxel.com získáte plnohodnotnou trvalou licenci na 1 zařízení Pokud chcete na daném PC/serveru logovat více zařízení musíte zakoupit licenci 5/25/100 a o tyto licence základní jednolicenci rozšířit
Licence pro jeden firewall zdarma Nově bude v balení USG firewallu vložena karta s informací o možnosti instalace jedné licence na jeden VRPT server zdarma •
Na jeden VRPT server je možné aktivovat vždy jen jednu takovouto volnou licenci
•
Pokud uživatel chce využít další volnou licenci, musí ji aktivovat na jinou instalaci VRPT serveru
•
Pokud uživatel chce monitorovat 2 a více firewallů na jednom VRPT serveru, musí zakoupit minimálně 5-node licenci VRPT, čímž získá celkově 6-node licenci „1 zdarma + 5 placených“
•
Akumulace více jednolicencí zdarma pod jednu instalaci VRPT software není možná
Vantage CNM Centralized Network Management Specification Server CPU: Intel P4 2,8 GHz or higher Memory: 2GB or higher Hard Disk: 80 GB - 250 GB or higher Client CPU: Intel P3 450 MHz or higher Memory: 256MB or higher Server Operating System: Windows XP Pro (SP1/SP2) / Windows 2000 Server (SP4) / Windows 2003 Server (SP1), Windows Vista 32 bit English version Client JRE (Java Run-time Environment) version 1.5.x and high
Disable Pop-up blocker Microsoft Internet Explore 6.0/7.0 Firefox 1.5 or higher on Microsoft SVGA resolution (1024x768), 1280 x recommended
Special VRPT is included in CNM
Management sítě CNM
Vantage CNM - 10
Centralized Network Management 10 device access (Windows)
91-996-049001B
Vantage CNM – 25
Centralized Network Management 25 device access (Windows)
91-996-050001B
Vantage CNM – 50
Centralized Network Management 50 device access (Windows)
91-996-051001B
Vantage CNM - 100
Centralized Network Management 100 device access (Windows)
91-996-052001B
Vantage CNM - 300
Centralized Network Management 300 device access (Windows)
91-996-053001B
Vantage CNM - 1000
Centralized Network Management 1000 device access (Windows)
91-996-054001B
• CNM obsahuje integrovanou verzi vlastního VRPT dle licence na CNM • Kooperace CNM a samostatného VRPT na stejném PC není možná • Upgrade z verze nižší na verzi vyšší je zdarma • Registrace se provádí na PC, na které je software instalován • Licenci lze kdykoliv převést na jiné PC • Registrované licence se sčítají: 10+25+50=85 licencí
Technické informace
Bezpečnost musí být zajištěna na co nejvíce možných stupních FTP
7 6
POP3
aplikační
VoIP Winamp
5
MSN
4
transportní
TCP
UDP
3
internet
2
network interface
Ethernet, FDDI, ATM, SLIP, X.25
1
hardware
WIFI,ethernet kabel, telefonní kabel
IP
ICMP ARP
USG = Unified Security Gateway Bandwidth Mgmt
Web Filters
Servers
Anti--Virus Anti
VPNUSG / Firewall
Load Balance
IDS / IDP
Users
Anti--Spam Anti
ZyXEL AV IDP Trial 30 dní zdarma na vyzkoušení
Internet
ICSA Certifikace •K
čemu slouží ICSA certifikace? • Jedinečná záruka kompatibility s RFC normami • Záruka kompatibility s výrobky jiných výrobců • Bezpečnostní úroveň a kvalita • Otevřené dveře do firemního segmentu, kdy se deklaruje nabízené zařízení a technologie na profesionální úrovni
Proč dnes nestačí obyčejný firewall ? porty „třeba 80 = HTTP“. Aplikace se mohou přizpůsobovat a používat standardní komunikační Chcete zaměstnancům zakázat WEB ICQ, MSN nebo online rádio– obyčejný firewall to nedokáže! Chcete omezit nebezpečí ukrývající se na webových stránkách – podvrhy, automatické skripty, atd.? Máte vlastní SMTP server, jak ho ochráníte před útokem z vnějšku?
Další výhody řady USG HA Active – Passive nebo Active – Active* HA pro IPSec tunely Hybridní VPN
•
IPSec
•
SSL
•
L2TP over IPSec*
3G backup Spolupráce s VLAN dle 802.1q UTM – AS, IDP**, APP**, ADP, CF, AV** – ZyXEL nebo Kapersky Spolupráce s AD, LDAP, Radius, local Textová konfigurace 5 let záruka na řadu USG Žádné poplatky za upgrade firmware
*USG 100 a vyšší modely ** USG 50 a vyšší modely