Справочник Пользователя для ZyXEL ZyWALL USG 100 ZWUSG100
Модели
ZWUSG100
Key Applications
ZyWALL USG clean-traffic architecture
The ZyWALL USG’s clean-traffic architecture
protects against network risks such as viruses,
worms, Trojan Horses, spyware, phishing attacks
and other emerging Internet threats. With the
clean-traffic architecture, enterprises users are
assured to have clean and secure network
environments.
High performance
ZyXEL USG Series is built with a powerful
Integrated High Performance Security
architecture, a performance proven
architecture for gigabit fiber. It provides
real-time inspection to prevent network
from threats without sacrificing
performance. Company network is not
only flawlessly secured but also greatly
enhanced on performance to improve
operational productivity and efficiency
when applications such as file-loading,
emailing, and information searches are
processed at higher speed. Take USG 50 as
an example, USG 50 delivers excellent
performance to meet small business.
Endpoint security
With the new Endpoint Security feature (EPS),
administrators can easily identify “bad” users, i.e.
where no AV software has been installed. By
enforcing installation of the Anti-Virus software,
the ZyWALL mitigates the threat of virus
outbreaks and thus the loss of money and
employee productivity. The EPS supports
Norton
TM
Kaspersky
TM
and TrendMicro
TM
AV client
software, among others. Additionally, personal
firewall software such as Kaspersky Internet
Security 2009/2010, Windows Firewall and
TrendMicro PC-Cillin/Internet Security 2010 are
also supported with the new EPS feature.
New generation UTM solution
The ZyWALL USG Series deploys
hardware-acceleration technology in one
box. Powered by high-performance SecuASIC
technology and a hardware-based
encryption accelerator, the ZyWALL USG
Series delivers industry-leading performance
and multi-layer threat protection for small
businesses and enterprises. The ZyWALL USG
Series provides integrated Unified Threat
Management security features such as
Anti-Virus (include Kaspersky Anti-Virus &
ZyXEL Anti-Virus), IDP, Anti-Spam, Content
Filtering and Firewall, VPN. All ZyWALL USG
Series products support the Gigabit Ethernet.
Enterprise Security
ZyWALL Unified Security
Gateway Series
(20/50/100/200/300/1000/2000 Series)
Enterprise Security
ZyWALL Unified Security
Gateway Series
(20/50/100/200/300/1000/2000 Series)
Content Filter
Anti-Virus
Anti-Spam
Firewall
ZyXEL Firewall
ZyXEL Firewall
Inbound Threats
Outbound Threats
ZyXEL IDP detects/stops Worms,
Trojans, DoS (L4 & L7), Recon, Scans
Trojans, DoS (L4 & L7), Recon, Scans
ZyXEL IDP detects/stops Worms, Trojans
Kaspersky Anti-Virus & ZyXEL Anti-Virus
stops Viruses, file-based Trojans,
Spyware, Adware, Keyloggers
stops Viruses, file-based Trojans,
Spyware, Adware, Keyloggers
Bluecoat to block to Spyware/Phishing/
Unapproved Site Access
Unapproved Site Access
Kaspersky Anti-Virus & ZyXEL Anti-Virus
stops Viruses, file-based Trojans,
Spyware, Adware, Keyloggers
stops Viruses, file-based Trojans,
Spyware, Adware, Keyloggers
Stops Spam Mail
VPN
ZyXEL SSL/IPSec VPN
ZyXEL SSL/IPSec VPN
Network
Intrusion Detection
and Prevention
and Prevention
Traffic Out
Clean
Traffic
Update
DNAT
Routing
Forwarding Engine
Network
I/O Engine
Fragment
Network
I/O Engine
Traffic In
Threat
Database
100
75
50
25
0
ZyWALL 5
FG-30B
TZ100
ZyWALL
USG 50
USG 50
10000
7500
5000
2500
0
ZyWALL 5
TZ100
FG-30B
ZyWALL
USG 50
USG 50
g
Defragment
BWM
SNAT
Stateful Firewall
Anomaly Detection and Prevention
(PA/TA)
Application Classifier
Intrusion Detection and Prevention
Anti-Virus
Application Patrol
Content Filter
Anti-Spam
LAN User 1
SSL-VPN User
SSL-VPN-Tunnel
The USG’s new «End Point Security» (EPS) feature helps to
ensure that all clients meet the corporate security policies, i.e.
It checks if AV software is installed.
ensure that all clients meet the corporate security policies, i.e.
It checks if AV software is installed.
Checking
1. Anti-Virus
2. Personal Firewall
3. OS patch level
1. Anti-Virus
2. Personal Firewall
3. OS patch level
The result is
NO
Access
Checking
1. Anti-Virus
2. Personal Firewall
3. OS patch level
1. Anti-Virus
2. Personal Firewall
3. OS patch level
The result is Access
Checking
1. Anti-Virus
2. Personal Firewall
3. OS patch level
1. Anti-Virus
2. Personal Firewall
3. OS patch level
The result is Access
LAN User 2
LAN
LAN
Internet
DMZ (Server Farm)
Web-based
Application
Application
BI
System
Email
Server
Remote
Desktop
OA, ERP System
CRM System
Application Server
(Inventory, Store...)
(Inventory, Store...)
Competitive Comparison:
Firewall Throughput in Mbps
Firewall Throughput in Mbps
Source : Performance numbers are from ZyXEL, SonicWALL, Fortinet website
Competitive Comparison: Sessions