Product security guide Q2/2012 16.3.2012 Petr Koudelka Security Product Manager CEE
Novinky ZLD 3.0 1/4 Zvýšení výpočetního výkonu Podpora IPv6 Automatická konfigurace IPSec VPN klienta Podpora L2TP over IPSec pro telefony Android a iphone Komplexnější filtrace sociálních sítí Antispam 2.0 Implementace generic driveru pro podporu více 3G karet a další
Novinky ZLD 3.0 2/4 IPv6 Dual stack 6rd & 6to4 transition tunnel Host/Router/Firewall
Novinky ZLD 3.0 3/4 ZyXEL uvedl nového dodavatele filtrace obsahu, firmu Commtouch Na celou řadu USG firewallů je nyní k dispozici nově licence Commtouch CONTENT FILTER Od ZLD 3.0 můžete vyzkoušet 30 denní trial bez jakékoli relevance k původní verzi BlueCoat CF. Je jedno zda byla původní verze expirovaná/použitá/nepoužitá. Z toho plyne, že nyní na ZLD 3.0 máte k dispozici 2x30 dní na testy CF služeb celkem. Oba scannery nemohou pracovat souběžně. Commtouch Anti-Spam Původní funkce DNSBL je zachována, ale doplnila ji technologie online scanování
Novinky ZLD 3.0 4/4 DHCP relay over IPSec Podpora MSS pro IPSec Nově VPN HA USG 20/20W/50 SSLVPN: podpora sdílení Windows 2008 L2TP (over IPSec) user aware DNS Load balancing na základě příchozí komunikace Více DHCP options a podpora uživatelky zadávaných hodnot GRE tunnel Hash SHA-2 a další
Plán podpory 3G karet ZLD 3.0(xxx.0) POZOR podporu vždy ověřte s danou verzí firmware a zařízením
Rozdělení produktů dle určení Enterprise 200+ users Mid-Large (75-200 users) SMB (50-75 users) SB (<50 users) SOHO (<15 users) Home ZyWALL USG 2000 ZyWALL USG 1000 ZyWALL USG 300 ZyWALL USG 200 ZyWALL USG 100 ZyWALL USG 50 ZyWALL USG 20W ZyWALL USG 20 Produkty nejsou omezeny na počet připojených PC, ale musí být dle počtu zařízení pouze výkonově dimenzované!!!
ZyWALL USG 20 LEDs: ZÁRUKA 5 roků PWR, SYS, USB, WLAN, WAN, LAN/DMZ Interface: (1) CONSOLE: RJ45 connector (1) USB: 2.0, for 3G/3.5G (1) WAN: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role Power: 12VDC 100~240VAC
ZyWALL USG 20 icard 1-year CONTENT FILTER USG 20 Security Firewall, Optional (Content Filtering, Antispam), 5x IPSec VPN, 1 SSL, 5x 1Gbps (4x LAN/WLAN/DMZ, 1x WAN), 1x USB icard 1-year Content filtering for ZYWALL USG 20 91-009-072001B 91-995-240001B icard 2-years CONTENT FILTER USG 20 icard 2-years Content filtering for ZYWALL USG 20 91-995-241001B icard 1-year Commtouch Anti-Spam USG 20 icard 2-years Commtouch Anti-Spam USG 20 icard 1-year Commtouch CONTENT FILTER USG 20 icard 2-years Commtouch CONTENT FILTER USG 20 icard 1-year Commtouch Anti-Spam for ZYWALL USG 20 icard 2-years Commtouch Anti-Spam for ZYWALL USG 20 icard 1-year Commtouch Content Filtering for ZYWALL USG 20 icard 2-years Commtouch Content Filtering for ZYWALL USG 20 USG20-CS1-ZZ0101F USG20-CS2-ZZ0101F USG20-CC1-ZZ0101F USG20-CC2-ZZ0101F
ZyWALL USG 20W LEDs: PWR, SYS, USB, WLAN, WAN, LAN/DMZ ZÁRUKA 5 roků Antenna: Numbers: 2 802.11n Interface: (1) CONSOLE: RJ45 connector (1) USB: 2.0, for 3G/3.5G (1) WAN: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role Power: 12VDC 100~240VAC
ZyWALL USG 20W Security Firewall, Optional (Content Filtering, Antispam), 5x IPSec VPN, 1 SSL, 5x 1Gbps (4x LAN/DMZ, 1x WAN, WiFi 802.11n 2T2R), 1x USB 91-009-071001B icard 1-year CONTENT FILTER USG 20W icard 1-year Content filtering for ZYWALL USG 20W 91-995-242001B icard 2-years CONTENT FILTER USG 20W icard 2-years Content filtering for ZYWALL USG 20W 91-995-243001B icard 1-year Commtouch Anti- Spam USG 20W icard 1-year Commtouch Anti-Spam for ZYWALL USG 20W USG20W-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 20W icard 2-years Commtouch Anti-Spam for ZYWALL USG 20W USG20W-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 20W icard 1-year Commtouch Content Filtering for ZYWALL USG 20W USG20W-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 20W icard 2-years Commtouch Content Filtering for ZYWALL USG 20W USG20W-CC2-ZZ0101F
ZyWALL USG 50 ZÁRUKA 5 roků LEDs: PWR SYS Interface: (2) WAN1, WAN2: 10/100/1000 (4) LAN/WLAN/DMZ: 10/100/1000 Configurable Port Role (2) USB: 2.0, for 3G/3.5G Interface: Console: DB9 Power: 12VDC 100~240VAC
ZyWALL USG 50 Security Firewall, Optional (IDP, Antivir, Content Filtering, Antispam), 10x IPSec VPN, up to 5 SSL (2 free), 6x 1Gbps (4x LAN/WLAN/DMZ, 2x WAN), 2x USB 91-009-073001B icard 1-year CONTENT FILTER USG 50 icard 1-year Content filtering for ZYWALL USG 50 91-995-231001B icard 2-years CONTENT FILTER USG 50 icard 2-years Content filtering for ZYWALL USG 50 91-995-232001B icard 1-year KASPERSKY AV USG 50 icard 1-year KASPERSKY AV for ZYWALL USG 50 91-995-233001B icard 2-years KASPERSKY AV USG 50 icard 2-years KASPERSKY AV for ZYWALL USG 50 91-995-234001B icard 1-year ZYXEL AV USG 50 icard 1-year ZYXEL AV for ZYWALL USG 50 91-995-235001B icard 2-years ZYXEL AV USG 50 icard 2-years ZYXEL AV for ZYWALL USG 50 91-995-236001B icard 1-year IDP USG 50 icard 1-year IDP for ZYWALL USG 50 91-995-237001B icard 2-years IDP USG 50 icard 2-years IDP for ZYWALL USG 50 91-995-238001B icard 1-year Commtouch Anti-Spam USG 50 icard 1-year Commtouch Anti-Spam for ZYWALL USG 50 USG50-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 50 icard 2-years Commtouch Anti-Spam for ZYWALL USG 50 USG50-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 50 icard 1-year Commtouch Content Filtering for ZYWALL USG 50 USG50-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 50 icard 2-years Commtouch Content Filtering for ZYWALL USG 50 USG50-CC2-ZZ0101F icard SSL VPN 2 TO 5 TUNNELS ZYWALL USG 50 icard VPN 2 TO 5 TUNNELS for ZYWALL USG 50 91-995-239001B
Comparison Matrix USG 50 Comparison Matrix USG 50 FG-30B TZ100 XTM 21 ProSecure (F/W v3.00) UTM 5 TCO ($)* (device/boudle) By country 295/395 265.95/348.95 340/540 249/369 Firewall** (Mbps) 600 100 100 110 90 VPN** (Mbps) 150 5 75 35 40 Concurrent Sessions 10,000 5,000 6,000 10,000 8,000 Max. # of VPN Tunnels 10 10 5 16 5 SSL VPN (Incl./Max.) (2/5) (1/5) (1/11***) (2) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Bandwidth Management M-WAN LB, failover *** H/W Warranty 2-YR 1-YR 1-YR 1-YR 2-YR H/W Interface 10/100/1000*6 (WAN*2) (LAN/DMZ*4) 10/100*4 (WAN*1) (LAN*3) 10/100*5 10/100*3 10/100/1000*3 10/100/1000*5 (WAN*1) (LAN/DMZ*4) USB Interface 2 1 2 1 Free F/W Upgrade product life time 90 days 90 days 90 days ❶ Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZyWALL USG 100 LEDs: PWR SYS AUX (status of Dial Backup/Dial-In) CARD (status of Extension Card Slot) ZÁRUKA 5 LET NBD v ceně Interface: (2) WAN1, WAN2: 10/100/1000 (5) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage etc Interface: Dial-Backup/Dial-In OOB: DB-9 M Interface: Console: DB-9 F Extension Card Slot: 3G Cellular Card Power: 12VDC 100~240VAC
ZyWALL USG 100 Security Firewall, Optional (IDP, Antivir, Antispam, Content Filtering), 50x VPN (IPSec/L2TP) up to 5 SSL (2 for free), 7x 1Gbps (5x LAN/DMZ, 2x WAN), 2x USB, expansion slot 91-009-045001B icard 1-year CONTENT FILTER USG 100 icard 1-year Content filtering for ZYWALL USG 100 91-995-150001B icard 2-years CONTENT FILTER USG 100 icard 2-years Content filtering for ZYWALL USG 100 91-995-163001B icard 1-year KASPERSKY AV USG 100 icard 1-year KASPERSKY AV for ZYWALL USG 100 91-995-152001B icard 2-years KASPERSKY AV USG 100 icard 2-years KASPERSKY AV for ZYWALL USG 100 91-995-154001B icard 1-year ZYXEL AV USG 100 icard 1-year ZYXEL AV for ZYWALL USG 100 91-995-156001B icard 2-years ZYXEL AV USG 100 icard 2-years ZYXEL AV for ZYWALL USG 100 91-995-165001B icard 1-year IDP USG 100 icard 1-year IDP for ZYWALL USG 100 91-995-158001B icard 2-years IDP USG 100 icard 2-years IDP for ZYWALL USG 100 91-995-159001B icard 1-year Commtouch Anti-Spam USG 100 icard 1-year Commtouch Anti-Spam for ZYWALL USG 100 USG100-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 100 icard 2-years Commtouch Anti-Spam for ZYWALL USG 100 USG100-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 100 icard 1-year Commtouch Content Filtering for ZYWALL USG 100 USG100-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 100 icard 2-years Commtouch Content Filtering for ZYWALL USG 100 USG100-CC2-ZZ0101F icard SSL VPN 2 TO 5 TUNNELS ZYWALL USG 100 icard VPN 2 TO 5 TUNNELS for ZYWALL USG 100 91-995-161001B
Comparison Matrix USG 100 Comparison Matrix USG 100 FG-50B TZ200 XTM 22 ProSecure (F/W v3.00) UTM 10 TCO ($)* (device/boudle) By country 495/695 371.95/543.95 347/553 249/369 Firewall** (Mbps) 250 100 100 150 90 VPN** (Mbps) 110 48 75 55 50 Concurrent Sessions 20k 25k 12k 20k 12,000 Max. # of VPN Tunnels 50 20 10 45 10 SSL VPN (Incl./Max.) (2/25) (20) (1/10) (1/25***) (5) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Bandwidth Management Device HA M-WAN LB, failover H/W Warranty 2-YR 1-YR 1-YR 1-YR 2-YR H/W Interface 10/100/1000*7 (WAN*2) (LAN/DMZ*5) 10/100*5 (WAN*2)(LAN*3) 10/100*5 (WAN*1)(LAN*4) 10/100*3 10/100/1000*3 10/100/1000*5 (WAN*1) (LAN/DMZ*4) USB Interface 2 2 1 2 1 Free F/W Upgrade product life time 90 days 90 days 90 days ❶ Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZyWALL USG 200 ZÁRUKA 5 LET NBD v ceně LEDs: PWR SYS AUX (status of Dial Backup/Dial-In) CARD (status of Extension Card Slot) Interface: (2) WAN1, WAN2: 10/100/1000 (1) Optional: 10/100/1000 (can be 3 rd WAN, or additional LAN/DMZ) (4) LAN/WLAN/DMZ: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage etc Interface: Dial-Backup/Dial-In OOB: DB-9 M Interface: Console: DB-9 F Extension Card Slot: 3G Cellular Card Power: 12VDC 100~240VAC
ZyWALL USG 200 Security Firewall, Optional (IDP, Antivir, Antispam, Content Filtering), 100x VPN (IPSec/L2TP) up to 10 SSL (2 for free), 7x 1Gbps (4-5x LAN/DMZ, 2-3x WAN), 2x USB, expansion slot 91-009-057001B icard 1-year CONTENT FILTER USG 200 icard 1-year Content filtering for ZYWALL USG 200 91-995-151001B icard 2-years CONTENT FILTER USG 200 icard 1-year KASPERSKY AV USG 200 icard 2-years KASPERSKY AV USG 200 icard 2-years Content filtering for ZYWALL USG 200 icard 1-year KASPERSKY AV for ZYWALL USG 200 icard 2-years KASPERSKY AV for ZYWALL USG 200 91-995-164001B 91-995-153001B 91-995-155001B icard 1-year ZYXEL AV USG 200 icard 1-year ZYXEL AV for ZYWALL USG 200 91-995-157001B icard 2-years ZYXEL AV USG 200 icard 2-years ZYXEL AV for ZYWALL USG 200 91-995-166001B icard 1-year IDP USG 200 icard 1-year IDP for ZYWALL USG 200 91-995-167001B icard 2-years IDP USG 200 icard 2-years IDP for ZYWALL USG 200 91-995-160001B icard 1-year Commtouch Anti-Spam USG 200 icard 2-years Commtouch Anti-Spam USG 200 icard 1-year Commtouch CONTENT FILTER USG 200 icard 2-years Commtouch CONTENT FILTER USG 200 icard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 200 icard 1-year Commtouch Anti-Spam for ZYWALL USG 200 icard 2-years Commtouch Anti-Spam for ZYWALL USG 200 icard 1-year Commtouch Content Filtering for ZYWALL USG 200 icard 2-years Commtouch Content Filtering for ZYWALL USG 200 icard VPN 2 TO 10 TUNNELS for ZYWALL USG 200 USG200-CS1-ZZ0101F USG200-CS2-ZZ0101F USG200-CC1-ZZ0101F USG200-CC2-ZZ0101F 91-995-162001B
Comparison Matrix USG 200 Comparison Matrix USG 200 FG-60C TZ210 XTM23 ProSecure (F/W v3.00) UTM 25 TCO ($)* (device/boudle) By country 595/845 596.95/746.95 524/832 449/649 Firewall** (Mbps) 300 1000 200 195 127 VPN** (Mbps) 120 70 75 55 70 Concurrent Sessions 40k 80k 30k 30k 27k Max. # of VPN Tunnels 100 500 15 105 25 SSL VPN (Incl./Max.) (2/25) (550) (2/10) (55/55) (13) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Bandwidth Management Device HA M-WAN LB, failover H/W Warranty 2-YR 1-YR 1-YR 1-YR 2-YR H/W Interface 10/100/1000*7 (WAN*2)(LAN/DMZ*4) (OPT*1) 10/100/1000*8 (WAN*2)(DMZ*1)(LAN*5) 10/100/1000*2 (WAN*2) 10/100*5 (LAN/DMZ*5) 10/100*3 10/100/1000*3 Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. 10/100/1000*6 (WAN*2)(LAN*4) USB Interface 2 2 2 2 1 Free F/W Upgrade product life time 90 days 90 days 90 days ❶
ZyWALL USG 300 ZÁRUKA 5 LET NBD v ceně LEDs: PWR SYS AUX (status of Dial Backup/Dial-In) CARD1 (status of Extension Card Slot1) CARD2 (status of Extension Card Slot2) Interface: (7) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage etc Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F Extension Card Slot: 3G Cellular Card Power: 100~240VAC
ZyWALL USG 300 Security Firewall, Optional (IDP, Antivir, Antispam, Content Filtering), 200x VPN (IPSec/L2TP) up to 25 SSL (2 for free), 7x 1Gbps multiple (LAN/DMZ/WAN), 2x USB, expansion slot 91-009-034001B icard, 1-year CF ZyWALL USG 300 icard 1-year Content filtering for ZYWALL USG 300 91-995-084001B icard, 2-years CF ZyWALL USG 300 icard 2-years Content filtering for ZYWALL USG 300 91-995-085001B icard 1-year KASPERSKY AV USG 300 icard, 1-year AV Kaspersky ZyWALL USG 300 91-995-080001B icard 2-years KASPERSKY AV USG 300 icard, 2-years AV Kaspersky ZyWALL USG 300 91-995-081001B icard 1-year ZYXEL AV USG 300 icard 1-year ZYXEL AV for ZYWALL USG 300 91-995-188001B icard 2-years ZYXEL AV USG 300 icard 2-years ZYXEL AV for ZYWALL USG 300 91-995-189001B icard, 1-year IDP ZyWALL USG 300 icard, 1-year IDP ZyWALL USG 300 91-995-082001B icard, 2-years IDP ZyWALL USG 300 icard, 2-years IDP ZyWALL USG 300 91-995-083001B icard 1-year Commtouch Anti-Spam USG 300 icard 1-year Commtouch Anti-Spam for ZYWALL USG 300 USG300-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 300 icard 2-years Commtouch Anti-Spam for ZYWALL USG 300 USG300-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 300 icard 1-year Commtouch Content Filtering for ZYWALL USG 300 USG300-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 300 icard 2-years Commtouch Content Filtering for ZYWALL USG 300 USG300-CC2-ZZ0101F icard SSL VPN 2 TO 10 TUNNELS ZYWALL USG 300 icard 2 to 10 SSL VPN tunnels for ZyWALL USG 300 91-995-079001B icard SSL VPN 2 TO 25 TUNNELS ZYWALL USG 300 icard 2 to 25 SSL VPN tunnels for ZyWALL USG 300 91-995-186001B icard SSL VPN 10 TO 25 TUNNELS ZYWALL USG 300 icard 10 to 25 SSL VPN tunnels for ZyWALL USG 300 91-995-187001B
USG 300 Comparison Matrix Comparison Matrix ZyWALL ASG 120 FG-80C NSA240 XTM 505 USG 300 ( UTM 25 users) Firewall** (Mbps) 300 200 350 (512 bytes) 600 850 VPN** (Mbps) 100 80 80 150 210 Concurrent Sessions 60k 90k 100k 25k 40k Max. # of VPN Tunnels 200 ❶ 200 50 140 SSL VPN (Incl./Max.) (2/25) ❶ ❶ (2/15) (1/65***) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) - Device HA M-WAN LB H/W Warranty 2-YR 1-YR 1-YR 1-YR 1-YR H/W Interface 10/100/1000 *7 (Configurable) 10/100 *4 (WAN*1) (LAN*1) (DMZ*1) (HA*1) 10/100/1000 *2 (WAN*2) 10/100 *7 (LAN*6) (DMZ*1) 10/100/1000 *6 (Configurable) 10/100 *1 10/100/1000 *6 Free F/W Upgrade 90 days 90 days 90 days 90 days Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZyWALL USG 1000 LEDs: PWR SYS AUX (status of Dial Backup/Dial-In) HDD (Status of HDD Slot) ZÁRUKA 5 LET NBD v ceně Interface: (5) Gigabit Ethernet: 10/100/1000, Configurable Port Role (2) USB: 2.0, for 3G, storage etc Interface: Dial-Backup/Dial-In OOB: DB-9 M Console: DB-9 F HDD slot (future enhancement) Extension Card Slot: 3G Cellular Card Power: 100~240VAC
ZyWALL USG 1000 Security Firewall, Optional (IDP, Antivir, Antispam, Content Filtering), 1000x VPN (IPSec/L2TP) up to 250 SSL (5 for free), 5x 1Gbps multiple (LAN/DMZ/WAN), 2x USB, expansion slot 91-009-052001B icard, 1-year CF ZyWALL USG 1000 icard 1-year Content filtering for ZYWALL USG 1000 91-995-072001B icard, 2-years CF ZyWALL USG 1000 icard 2-years Content filtering for ZYWALL USG 1000 91-995-073001B icard 1-year KASPERSKY AV USG 1000 icard, 1-year AV Kaspersky ZyWALL USG 1000 91-995-078001B icard 2-years KASPERSKY AV USG 1000 icard, 2-years AV Kaspersky ZyWALL USG 1000 91-995-093001B icard 1-year ZYXEL AV USG 1000 icard 1-year ZYXEL AV for ZYWALL USG 1000 91-995-193001B icard 2-years ZYXEL AV USG 1000 icard 2-years ZYXEL AV for ZYWALL USG 1000 91-995-194001B icard, 1-year IDP ZyWALL USG 1000 icard, 1-year IDP ZyWALL USG 1000 91-995-076001B icard, 2-years IDP ZyWALL USG 1000 icard, 2-years IDP ZyWALL USG 1000 91-995-077001B icard 1-year Commtouch Anti-Spam USG 1000 icard 1-year Commtouch Anti-Spam for ZYWALL USG 1000 USG1000-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 1000 icard 2-years Commtouch Anti-Spam for ZYWALL USG 1000 USG1000-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 1000 icard 1-year Commtouch Content Filtering for ZYWALL USG 1000 USG1000-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 1000 icard 2-years Commtouch Content Filtering for ZYWALL USG 1000 USG1000-CC2-ZZ0101F icard SSL VPN 5 TO 25 TUNNELS ZYWALL USG 1000 icard 5 to 25 SSL VPN tunnels for ZyWALL USG 1000 91-995-075001B icard SSL VPN 5 TO 50 TUNNELS ZYWALL USG 1000 icard 5 to 50 SSL VPN tunnels for ZyWALL USG 1000 91-995-092001B icard SSL VPN 25 TO 50 TUNNELS ZYWALL USG 1000 icard 25 to 50 SSL VPN tunnels for ZyWALL USG 1000 91-995-074001B icard SSL VPN 5 TO 250 TUNNELS ZYWALL USG 1000 icard 5 to 250 SSL VPN tunnels for ZyWALL USG 1000 91-995-190001B icard SSL VPN 25 TO 250 TUNNELS ZYWALL USG 1000 icard 25 to 250 SSL VPN tunnels for ZyWALL USG 1000 91-995-191001B icard SSL VPN 50 TO 250 TUNNELS ZYWALL USG 1000 icard 50 to 250 SSL VPN tunnels for ZyWALL USG 1000 91-995-192001B
ZyWALL USG 1000 Competing Models Comparison Matrix ZyWALL ASG 220 FG-110C NSA3500 XTM 510 USG 1000 Firewall** (Mbps) 400 500 500 1500 1400 VPN** (Mbps) 150 170 100 625 350 Concurrent Sessions 500k 300k 400k 128k 50k Max. # of VPN Tunnels 1000 ❶ 1500 800 175 SSL VPN (Incl./Max.) (5/250) ❶ ❶ (2/25) (1/75*) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty 2-YR 1-YR 1-YR 1-YR 1-YR H/W Interface 10/100/1000 *5 (Configurable) 10/100/1000 *8 10/100/1000 *2 10/100 *8 10/100/1000 *6 (Configurable) 10/100/1000 *8 Free F/W Upgrade 90 days 90 days 90 days 90 days Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
ZyWALL USG 2000 LED: PWR: Power status SYS: System status AUX (Status of Dial-in Function) HDD (Status of Hard Drive) SEM (VPN/Dual accel.) CARD: 3G card status Interface: 6 GbE: 10/100/1000 (Auto MDI/MDIX) 2 Dual-Personality: Ethernet or SFP Security Extension Module: Boost up UTM and/or VPN throughput performance ZÁRUKA 5 LET NBD v ceně HDD Slot: HDD Expansion Slot (future enhancement) Card Slot: CardBus slot USB: 2xUSB 2.0 (Host) Ports 3G, storage AUX & Console: Dial-in Mgmt & RS-232 Console Fan: Ventilation Fans Power Redundancy: Redundant Power Module
ZyWALL USG 2000 with SEM-DUAL Security Firewall + SEM dual module, Optional (IDP, Antivir, Antispam, Content Filtering), 2000x VPN (IPSec/L2TP) up to 750 SSL (5 for free), 6x 1Gbps multiple (LAN/DMZ/WAN), 2x SFP (Combo), 2x USB, expansion slot 96-996-000079 icard 1-year CONTENT FILTER USG 2000 icard 1-year Content filtering for ZYWALL USG 2000 91-995-172001B icard 2-years CONTENT FILTER USG 2000 icard 2-years Content filtering for ZYWALL USG 2000 91-995-173001B icard 1-year KASPERSKY AV USG 2000 icard 1-year KASPERSKY AV for ZYWALL USG 2000 91-995-174001B icard 2-years KASPERSKY AV USG 2000 icard 2-years KASPERSKY AV for ZYWALL USG 2000 91-995-175001B icard 1-year ZYXEL AV USG 2000 icard 1-year ZYXEL AV for ZYWALL USG 2000 91-995-176001B icard 2-years ZYXEL AV USG 2000 icard 2-years ZYXEL AV for ZYWALL USG 2000 91-995-177001B icard 1-year IDP USG 2000 icard 1-year IDP for ZYWALL USG 2000 91-995-178001B icard 2-years IDP USG 2000 icard 2-years IDP for ZYWALL USG 2000 91-995-179001B icard 1-year Commtouch Anti-Spam USG 2000 icard 1-year Commtouch Anti-Spam for ZYWALL USG 2000 USG2000-CS1-ZZ0101F icard 2-years Commtouch Anti-Spam USG 2000 icard 2-years Commtouch Anti-Spam for ZYWALL USG 2000 USG2000-CS2-ZZ0101F icard 1-year Commtouch CONTENT FILTER USG 2000 icard 1-year Commtouch Content Filtering for ZYWALL USG 2000 USG2000-CC1-ZZ0101F icard 2-years Commtouch CONTENT FILTER USG 2000 icard 2-years Commtouch Content Filtering for ZYWALL USG 2000 USG2000-CC2-ZZ0101F SSL 5->50 for ZyWALL USG 2000 icard SSL VPN 5 TO 50 TUNNELS ZYWALL USG 2000 91-995-180001B SSL 5->250 for ZyWALL USG 2000 icard SSL VPN 5 TO 250 TUNNELS ZYWALL USG 2000 91-995-181001B SSL 5->750 for ZyWALL USG 2000 icard SSL VPN 5 TO 750 TUNNELS ZYWALL USG 2000 91-995-182001B SSL 50->250 for ZyWALL USG 2000 icard SSL VPN 50 TO 250 TUNNELS ZYWALL USG 2000 91-995-184001B SSL 50->750 for ZyWALL USG 2000 icard SSL VPN 50 TO 750 TUNNELS ZYWALL USG 2000 91-995-183001B SSL 250->750 for ZyWALL USG 2000 icard SSL VPN 250 TO 750 TUNNELS ZYWALL USG 2000 91-995-185001B
ZyWALL USG 2000 Competing Models Comparison Matrix ZyWALL ASG 320 FG-310B NSA 4500 XTM 530 USG 2000 Firewall** (Mbps) 2000 1000 8000 2750 2300 VPN** (Mbps) 400 220 6000 1000 750 Concurrent Sessions 1000k 600k 600k 450k 350k Max. # of VPN Tunnels 2000 ❶ 3000 3000 1600 SSL VPN (Incl./Max.) (5/750) ❶ ❶ (2/30) (1/600***) Anti-Virus / IDP / / / / / IM/P2P Management Content Filter Anti-SPAM Traffic Shapping (BWM) Device HA M-WAN LB H/W Warranty 2-YR 1-YR 1-YR 1-YR 1-YR H/W Interface 10/100/1000 *6 SFP *2 (dual-personality) (Configurable) 10/100/1000 *8 10/100/1000 *10 10/100/1000 *6 (Configurable) 10/100/1000 *8 Free F/W Upgrade 90 days 90 days 90 days 90 days Note: ❶: Information is not available at the time of writing. * End User Price with UTM function in the North America ** Performance listed above are collected from vendor s public collaterals thus may not indicate real-world performance. *** Need to upgrade firmware to Fireware XTM Pro
Placené služby Všechny z níže uvedených služeb jsou placeny nad rámec zakoupeného hardware jako jednorázové rozšíření nebo roční popřípadě dvouletá licence Online Content filtering BlueCoat nebo Commtouch Online Commtouch Anti-spam 2.0 Aktualizace IDP Application patrol Aktualizace Antivir signatur ZyXEL nebo Kaspersky Všechny tyto placené služby jsou k dispozici jako 30 denní trial k vyzkoušení Rozšíření souběžných SSL VPN relací nad rámec nabízených zdarma
OTPv2 One Time Password Safenet ZyWALL OTPv2 5U Starter pack Obsahuje software a 5 tokenů ZyWALL OTPv2 5U Add-on pack Obsahuje jen 5 tokenů a musí být provozován se starter packem Podpora Systémů: 32 nebo 64-bit Windows Server 2003/2008 nebo Windows Server 2008 R2 Záruka Hardware 2 roky (životnost baterie 2 roky nebo 14000 zmáčknutí) Software 1 rok od aktivace obsahuje updaty a bux fixing Pro software upgrade musí být zakoupena licence dle licenční politiky Safenet Neobsahuje rozšíření záruky na hardware
Details about Software Warranty Renewal By purchasing software warranty renewal, end user can have extra 1 year software warranty: Eligible to get new software releases How we determine the renewal period: (existing software warranty expiration date) + 1 year 1-yr License Period Extend 1-yr License (another 1-yr period) 1 2 3 Same Expiration date Time License Activate Renew License (1-yr) (Before expire date) Case: 1 License Expire Renew License (1-yr) Case: 2 Renew License (1-yr) (After expire date) Case: 3
Software Warranty Renewal SKU Type of Service/Feature 5U software warranty renewal 1-YR Note: 1. Software warranty renewal license could be accumulated, ex: if you were managing 10 token users, you need to purchase 2 copies of 5U software warranty renewal. 2. When purchasing software warranty renewal license, you must provided Safeword software license and managed token numbers. This software upgrade you can buy only directly from company Safenet!
ZyWALL OTPv2 5U Starter pack ZyWALL OTPv2 5U Add-on pack ZyWALL OTPv2 5U Starter pack (Autentification token-safenet) ZyWALL OTPv2 5U Add-on pack (Autentification token-safenet) 91-009-044007B 91-009-044008B
ZyWALL IPSec client Specification: Encryption DES, 3DES, AES128, AES192, AES256 Hash Algorithms HMAC-MD5, HMAC-SHA-1, HMAC-SHA-2-256 Diffie Hellman Group Support DH1, 2, 5, 14 Authentication Mechanisms Preshared keys, X.509, X-Auth, SmartCard&Token Key Management IKE (Internet Key Exchange), ISAKMP IPSec Modes AH, ESP, Main, Aggressive, Tunnel, Transport System Requirements Disk Space - 5 MB Windows 2000, Windows XP 32 bit, Windows Vista 32 bit/64 bit Windows server 2003 32 bit, Windows server 2008 32 bit/64 bit, Windows 7 32 bit/64 bit Při aktivaci se odesílá MAC adresa síťové karty, přes kterou je aktivní připojení na Internet. Další aktivace na jiných MAC je zablokována na již použité SN. Provoz je možný z jakéhokoli síťového rozhraní.
ZyWALL IPSec VPN 1 Client ZyWALL IPSec VPN 5 Client ZyWALL IPSec VPN 10 Client ZyWALL IPSec VPN 50 Client ZyWALL IPSec VPN Client - 1 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 5 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 10 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit ZyWALL IPSec VPN Client - 50 Pack, GreenBow, W2K, XP32 bit, Vista 32bit/64bit, Windows server 2003 32bit, 2008 32bit/64bit, Windows 7 32bit/64bit 91-996-038001B 91-996-039001B 91-996-041001B 91-996-042001B
Vantage Reporter - VRPT 1 licence zdarma System Specification: Server:Windows 2000/XP/2003 Server,Windows Vista 32 bit/ 64 bit, Windows server 2008 32 bit/64 bit, Windows 7 32 bit/ 64 bit Client:Browser: Microsoft IE 6.0 or later. Mozilla 1.7.12 or later, Friefox 1.0.7 or later on Microsoft. Screen resolution supported: 1024*768 Flash Player 7.0 and above Server: Number of devices CPU SPEC Memory HDD <5 Intel P4 2.6G or better 1G 10 GB < 50 Intel P4 2.6G or better 1G 2*devices 50~100 Intel P4 3.2G+ or better 1G 2*devices Client CPU: Intel P3 450 MHz or better Velikost jednoho logu je 300 bajtů. Note: Server can handle <=1500 logs/sec
VANTAGE REPORT 5 DEVICES VANTAGE REPORT 5 DEVICES 91-996-036001B VANTAGE REPORT 25 DEVICES VANTAGE REPORT 25 DEVICES 91-996-037001B VANTAGE REPORT 100 DEVICES VANTAGE REPORT 100 DEVICES 91-996-040001B
Upgrade z verze nižší na verzi vyšší je zdarma Registrace se provádí na PC, na který je software instalován Licenci lze kdykoliv převést na jiné PC Registrované licence se sčítají: 1 free + 5+5+25=36 licencí
VRPT zdarma Pokud stáhnete VRPT z WWW stránek nebo FTP a nainstalujete získáte licenci basic na 1 zařízení některé funkce omezeny Pokud zaregistrujete licenci na myzyxel.com získáte plnohodnotnou trvalou licenci na 1 zařízení Pokud chcete na daném PC/serveru logovat více zařízení musíte zakoupit licenci 5/25/100 a o tyto licence základní jednolicenci rozšířit
Licence pro jeden firewall zdarma Nově bude v balení USG firewallu vložena karta s informací o možnosti instalace jedné licence na jeden VRPT server zdarma Na jeden VRPT server je možné aktivovat vždy jen jednu takovouto volnou licenci Pokud uživatel chce využít další volnou licenci, musí ji aktivovat na jinou instalaci VRPT serveru Pokud uživatel chce monitorovat 2 a více firewallů na jednom VRPT serveru, musí zakoupit minimálně 5-node licenci VRPT, čímž získá celkově 6-node licenci 1 zdarma + 5 placených Akumulace více jednolicencí zdarma pod jednu instalaci VRPT software není možná
Vantage CNM Centralized Network Management Specification Server CPU: Intel P4 2,8 GHz or higher Memory: 2GB or higher Hard Disk: 80 GB - 250 GB or higher Client CPU: Intel P3 450 MHz or higher Memory: 256MB or higher Server Operating System: Windows XP Pro (SP1/SP2) / Windows 2000 Server (SP4) / Windows 2003 Server (SP1), Windows Vista 32 bit English version Client JRE (Java Run-time Environment) version 1.5.x and high Disable Pop-up blocker Microsoft Internet Explore 6.0/7.0 Firefox 1.5 or higher on Microsoft SVGA resolution (1024x768), 1280 x recommended Special VRPT is included in CNM
Management sítě CNM
Vantage CNM - 10 Centralized Network Management - 10 device access (Windows) 91-996-049001B Vantage CNM 25 Centralized Network Management - 25 device access (Windows) 91-996-050001B Vantage CNM 50 Centralized Network Management - 50 device access (Windows) 91-996-051001B Vantage CNM - 100 Centralized Network Management - 100 device access (Windows) 91-996-052001B Vantage CNM - 300 Centralized Network Management - 300 device access (Windows) 91-996-053001B Vantage CNM - 1000 Centralized Network Management - 1000 device access (Windows) 91-996-054001B
CNM obsahuje integrovanou verzi vlastního VRPT dle licence na CNM Kooperace CNM a samostatného VRPT na stejném PC není možná Upgrade z verze nižší na verzi vyšší je zdarma Registrace se provádí na PC, na které je software instalován Licenci lze kdykoliv převést na jiné PC Registrované licence se sčítají: 10+25+50=85 licencí
Technical informations
Bezpečnost musí být zajištěna na co nejvíce možných stupních 7 FTP POP3 6 aplikační VoIP 5 Winamp MSN 4 3 transportní internet TCP UDP IP ICMP ARP 2 1 network interface hardware Ethernet, FDDI, ATM, SLIP, X.25 WIFI,ethernet kabel, telefonní kabel
USG = Unified Security Gateway Bandwidth Mgmt Web Filters Servers Anti-Virus USG VPN / Firewall Load Balance Internet IDS / IDP Users Anti-Spam ZyXEL AV IDP Trial 30 dní zdarma na vyzkoušení
ICSA Certifikace K čemu slouží ICSA certifikace? Jedinečná záruka kompatibility s RFC normami Záruka kompatibility s výrobky jiných výrobců Bezpečnostní úroveň a kvalita Otevřené dveře do firemního segmentu, kdy se deklaruje nabízené zařízení a technologie na profesionální úrovni
Proč dnes nestačí obyčejný firewall? porty třeba 80 = HTTP. Aplikace se mohou přizpůsobovat a používat standardní komunikační Chcete zaměstnancům zakázat WEB ICQ, MSN nebo online rádio obyčejný firewall to nedokáže! Chcete omezit nebezpečí ukrývající se na webových stránkách podvrhy, automatické skripty, atd.? Máte vlastní SMTP server, jak ho ochráníte před útokem z vnějšku?