ZyXEL ZyWALL 1050
Contents
1. Nee ZyWALL 70 Branch Office Internet Teleworker Public Kiosk ZyWALL 2 Remote Office information visit us on the web www ZyXEL com ZyXEL France SARL Tel 33 0 4 72 52 97 97 3 0 4 72 52 19 20 il info zyxel fr http www zyxel fr ZyXEL Germany GmbH Tel 49 0 2405 6909 0 Fax 49 0 2405 6909 99 Email sales zyxel de http www zyxel de ZyXEL Hungary Tel 36 1 336 1646 Fax 36 1 325 9100 Email info zyxel hu http www zyxel hu ZyXEL Kazakhstan Tel 7 327 2 590 699 Fax 7 327 2 590 689 Email sales zyxel kz http www zyxel kz ZyXEL North America Tel 1 714 632 0882 Fax 1 714 632 0858 Email sales zyxel com http www us zyxel com ZyXEL Norway A S Tel 47 22 80 61 80 Fax 47 22 80 61 81 Email sales zyxel no http www zyxel no ZyXEL Poland Tel 48 22 3338250 Fax 48 22 3338251 Email info pl zyxel com http www pl zyxel com ZyXEL Russia Tel 7 095 542 8920 Fax 7 095 542 8925 Email info zyxel ru http www zyxel ru Copyright 2006 ZyXEL Communications Corp All rights reserved ZyXEL ZyXEL logo and ZyNOS are registered trademarks of ZyXEL Communications Corp All other brands product names or trademarks mentioned are the property of their respective owners All specifications are subject to change without notice ZyXEL Spain Tel 34 902 195 420 Fax 34 913 005 345 Email sales zyxel es http www zyxel es ZyXEL Swed2. DHCP client server relay Built in DNS server Dynamic DNS NTP client HTTP redirect Policy based traffic shaping Maximum bandwidth Bandwidth priority Redundancy Device HA High Availability Device failure detection Auto sync configurations Supports multiple ISP links Link failure detection Multiple WAN load balancing VPN High Availability supports redundant remote VPN gateways Management Intuitive Web based GUI https http Dashboard for system status monitoring Role based administration supports multiple privileges and simultaneous logins Object based architecture Text based configuration file Full function CLI Accessible from console WebConsole ssh telnet Product registration and service activation from within myZyXEL com Centralized amp comprehensive local logging Log exportable syslog up to 4 external syslog servers SNMP v2c with MIB II E mail alert Real time monitoring Traffic snapshot and SA monitor Firmware upgrade FTP FTP TLS WebGUI System configuration rollback Supports Vantage Report 3 0 for advanced reporting Supports Vantage CNM 3 0 for centralized management Hardware Specifications Memory size 512MB system memory 256MB onboard flash Five Gigabit Ethernet interfaces RJ 45 connector with LED indicator Supports auto negotiation and auto MDI MDI X RS
3. High performance VPN concentrator User Aware policy engine Proactive network protection Robust networking functionalities Bandwidth management VoIP security Content filtering Device HA and Multiple WAN load balancing Internet Security Appliance ZTUALL 1050 Professional VPN Concentrator UTM Appliance for SMB Mid Large Organization Benefits High Performance VPN Concentrator The ZyWALL 1050 allows organizations to establish Virtual Private Network VPN connections among multiple locations such as remote branch offices business partner sites and remote teleworkers Data is encrypted in a VPN to secure communication channels and prevent confidential information from being eavesdropped over the Internet Communication through VPN tunnels is protected from session hijack attacks and information theft These security features are integrated in the ZyWALL 1050 to provide seamless data protection before transmission to a trusted network over the VPN The Hub and Spoke VPN feature dramatically reduces management overhead and complexity in a complex multi site corporate network infrastructure User Aware Policy Engine Enables Access Granularity In addition to basic access control capabilities the intelligent user aware policy engine on the ZyWALL 1050 is designed to make packet forwarding decisions based on multiple criteria such as user ID user group time of access and network quota etc In additio
4. Bandwidth Management Ensures Quality of Service ZyWALL 1050 provides the bandwidth management feature for traffic prioritization to guarantee or restrict the bandwidth usage per connection You can allocate bandwidth to traffic types or computer hosts in the corporate network For example give higher priority and bigger bandwidth to time critical applications such as VoIP and video streaming for quality transmission service In addition ZyWALL 1050 allows you to keep track of bandwidth usage with comprehensive centralized logs VoIP Security Protecting the Converged Network Attracted to its many benefits more and more businesses are deploying VoIP applications in their networks With the transition to VoIP also comes with security risks As a VoIP friendly firewall the ZyWALL 1050 offers the SIP H 323 ALG feature to dynamically open only the ports needed for the duration of the VoIP call Once the call is complete the ports automatically close preventing malicious port sniffing and attacks commonly associated VoIP deployment Besides allowing basic VoIP functionality the ZyWALL 1050 takes a step further to allow VoIP over VPN and provide IDP against VoIP threats for maximum security Employee Internet Management Increases Productivity The content filtering feature allows schools or mid large organizations to create and enforce Internet access policies You can set the ZyWALL 1050 to monitor or block access based on web site categories suc
5. 232 DB9F console port RS 232 DB9M dial backup LED Indicator PWR SYS ACT HDD Power switch and reset button CardBus expansion slot Mini PCI expansion slot USB USB 2 0 x 2 future HDD Optional IDE 2 5 future Physical Specifications Rack mountable 19 inch Dimension 430 7 W x 292 0 D x 43 5 H mm Weight 4 700g Power Requirement Input voltage 100 240VAC 50 60Hz 1A max Power rating 80 Watt max Environmental Specifications Operating temperature 0 C to 40 C Operating humidity 5 to 90 non condensing Certification EMC FCC Part 15 Class A CE EMC Class A C Tick Class A VCCI Class A Safety CSA International CE EN60950 1 Firmware upgradeable for future enhancement Application Diagram N Wireless XN Client Got Protected 7 P Servers Wl fl f For more product Corporate Headquarters ZyXEL Communications Corp Tel 886 3 578 3942 Fax 886 3 578 2439 Email sales zyxel com tw http www zyxel com http www zyxel com tw ZyXEL Czech s r o Tel 420 241 091 350 Fax 420 241 091 359 Email info zyxel cz http www zyxel cz FE CE i Central Site Partner Site ZyXEL Denmark A S Tel 45 39 55 07 00 Fax 45 39 55 07 07 Email sales zyxel dk http www zyxel dk ZyXEL Finland Oy Tel 358 9 4780 8400 Fax 358 9 4780 8448 Email sales zyxel fi http www zyxel fi Access Points DMZ Servers ZyWALL 1050
6. ement blocking scheduling rate limiting bandwidth Intrusion Detection and Prevention inline mode or bridge mode Zone based customizable protection profile Traffic anomaly for scan detection and flood detection Protocol anomaly HTTP ICMP TCP UDP Malformed packet protection Signature based L3 L7 deep packet inspection Automatic update for latest signatures Custom signature supported VolP over VPN URL blocking keyword blocking exempt list Blocks Java Applet cookies Active X URL filtering by querying dynamic database Gateway Anti Virus scanning VPN Route based IPSec VPN Supports Hub and Spoke VPN Hardware accelerated encryption AES 3DES DES Authentication MD5 SHA 1 Key management Manual key IKE PKI PKCS 7 10 amp 12 Certificate enrollment CMP SCEP Perfect forward secrecy DH Group 1 2 and 5 NAT traversal NAT over IPSec DPD Dead Peer Detection and replay detection Split DNS tunnel Xauth authentication RADIUS LDAP Microsoft Active Directory and local user database Integrated SSL VPN Networking Routing mode and bridge mode can co exist Port grouping L2 Supports 802 1q tagged VLAN Encapsulation Ethernet PPPoE PPTP Supports virtual interface alias interface Policy based routing NAT SNAT DNAT Supports dynamic routing protocols RIP v1 v2 and OSPF IP Multicasting
7. en A S Tel 46 0 31 744 77 00 Fax 46 0 31 744 77 01 Email sales zyxel se http wwwzyxel se ZyXEL UK Ltd Tel 44 0 1344 303044 Fax 44 0 1344 303034 Email sales zyxel co uk http www zyxel co uk ZyXEL Ukraine Tel 380 44 494 49 31 Fax 380 44 494 49 32 Email sales ua zyxel com http www ua zyxel com 65 100 974801G 06 06
8. h as pornography or racial intolerance from a pre defined list For up to date web site ratings you can activate the content filtering subscription that allows the ZyWALL 1050 to query the dynamic URL database Thus access restrictions to web sites are properly enforced and corporate policy compliance could be assured High Availability Features Guarantee Non stop Operation for Mission critical Applications The ZyWALL 1050 supports multiple WAN ports with WAN connection backup and load balancing In addition to WAN redundancy the ZyWALL 1050 also supports device HA High Availability With these features the ZyWALL 1050 helps you easily set up a highly reliable and secure network for your business Specifications Performance and Capacity SPI firewall throughput 300Mbps VPN AES 3DES throughput 100Mbps IDP throughput 100Mbps Concurrent sessions 128 000 New session rate 4 000 sessions sec Simultaneous VPN tunnels 1 000 Security and Authentication DoS DDoS prevention ALG supports SIP H 323 FTP IPSec L2TP MSN PPTP and RTP Access granularity ip port location user group time network quota Customizable security zones Force user authentication transparent authentication user aware access policy management User database RADIUS LDAP Microsoft Active Directory and local user database Application Patrol portless application management IM P2P application manag
9. n you can apply access policies to other security features such as VPN content filtering and application patrol In conjunction with network partitioning corporate security policies can be effectively enforced to prevent unauthorized access to network or network resources Proactive Network Protection Mitigates Security Breaches With the embedded signature based IDP Intrusion Detection and Prevention engine the ZyWALL 1050 performs L7 packet inspection for protocol anomaly or matched patterns Thus the ZyWALL 1050 provides comprehensive Intrusion Detection and Prevention capability to proactively detect and block potential worms viruses Trojans VoIP threats etc ZSRT ZyXEL Security Response Team ZyXEL s dedicated security experts releases up to date IDP signatures patterns in response to ever evolving vulnerabilities exploits New updates are automatically downloaded and installed through ZSDN to your ZyWALL 1050 Customizable Security Zones Deliver Flexible Policy Management The ZyWALL 1050 supports L3 virtualization techniques VLAN and virtual alias interface You can set VLAN or virtual interface to different physical ports as needed In addition you can group the VLANs and virtual interfaces in a zone to which consistent security policies are applied With the virtualization and zone concepts the ZyWALL 1050 offers flexible deployment and easy security policy management in large complex networking environments
Download Pdf Manuals
Related Search