VPN serise

Size: px

Start display at page:

Download "VPN serise"

태웅 석
5 years ago
Views:

중소규모비즈니스를위한올인원차세대기업용 VPN 게이트웨이 (ZyWALL VPN Gateway) VPN 50 / 100 / 300 ZyWALL VPN Gateway Overview ZyWALL VPN Gateway시리즈는올인원차세대기업용게이트웨이로써안정적인네트워크환경을제공합니다.

또한 SSL, IPSec, L2TP 와같이다양한 VPN알고리즘및호환성을지원하여본사 / 지사또는다른장소에서보안이강화된원격접속을지원합니다. 무중단시스템운영을위한회선이중화, 장비이중화, VPN 이중화구성이가능하며, 무선AP 컨트롤러를내장하여최대 132개의 AP를중앙집중관리할수있는 AP Controller technology(apc) 를적용하였습니다.

1 중소규모비즈니스를위한올인원차세대기업용 VPN 게이트웨이 (ZyWALL VPN Gateway) VPN 50 / 100 / 300 ZyWALL VPN Gateway Overview ZyWALL VPN Gateway시리즈는올인원차세대기업용게이트웨이로써안정적인네트워크환경을제공합니다. Ultra-High Performance로높은시스템처리량과 Multi-Core하드웨어플랫폼으로안정적인네트워크속도를보장하며기업의네트워크보안을위한고성능방화벽기능과세계최고의보안회사인 Cyren의엔진을탑재하여 Content Filter를같이제공함으로써사용자환경에적합하고안정적인네트워크환경을구축합니다. 또한 SSL, IPSec, L2TP 와같이다양한 VPN알고리즘및호환성을지원하여본사 / 지사또는다른장소에서보안이강화된원격접속을지원합니다. 무중단시스템운영을위한회선이중화, 장비이중화, VPN 이중화구성이가능하며, 무선AP 컨트롤러를내장하여최대 132개의 AP를중앙집중관리할수있는 AP Controller technology(apc) 를적용하였습니다. ZyWALL VPN Gateway시리즈는통합네트워크를구축하고자하는중 / 소규모사무실, 학교, 호텔이나병원과같이네트워크환경을구축해야하는고객을위한최적의통합네트워크솔루션입니다. 국제 CC 인증 (Certificate Identifier : SERTIT-100C) Content Filter 라이선스 1 년간 Bundle 제공 - 대상 : VPN 전모델 - 전모델 30 일 Trial 기간제공 - 총 13 개월사용무상지원 Hybrid VPN 지원 - SSL - IPSec - L2TP 무선 AP 컨트롤러기능탑재 - 기본 4 대, 라이선스추가시최대 132 대 - VPN50 : 최대 36 대 - VPN100 : 최대 68 대 - VPN300 : 최대 132 대 3 단계 High Availability 무중단구성 - VPN HA - WAN HA (VPN100 이상지원 ) - Device HA (VPN100 이상지원 ) 타벤더장비호환성 - ICSA LAB 국제평가기관인증획득 NAT 및 DHCP 기능지원 ZyXEL One Network - ZON Utility - Smart Connect IPv6 지원 1 Datasheet ZyWALL VPN50 / VPN100 / VPN300

장비이중화또한단일장비운영으로인해불안한네트워크의장애를사전에방지하고자두대의장비를동일구성으로하드웨어이중화를구성할수있습니다. active-passive failover 구성뿐만아니라마스터장비에장애가발생하게되면백업장비로연결되는 active-active 방식으로무중단시스템운영이필요한네트워크구조에적합한이중화구성이가능합니다.

2 Interfaces ZyWALL VPN Gateway 인터페이스는각포트당 10/100/1000Mbps, SFP 슬롯 100/1000Mbps 을제공하고있습니다. 회선이중화무중단서비스제공 ZyWALL VPN Gateway 에서는단일 WAN 구성의네트워크부하를줄이기위해각각통신사회선을이중화하여 active-active 로드밸런싱 (- Load-Balancing) 설정및 active-passive failover 구성이가능하며, 회선이중화및정책라우터방식을통해서다양한서비스경로를제어할수있습니다. 장비이중화또한단일장비운영으로인해불안한네트워크의장애를사전에방지하고자두대의장비를동일구성으로하드웨어이중화를구성할수있습니다. active-passive failover 구성뿐만아니라마스터장비에장애가발생하게되면백업장비로연결되는 active-active 방식으로무중단시스템운영이필요한네트워크구조에적합한이중화구성이가능합니다. ( VPN100 이상지원 ) 고성능기업용방화벽공유기기능 ZyWALL VPN Gateway는각각의인터페이스에 Routing, NAT, VLAN, Bridge 등의구성이가능하여다양한데이터트랙픽처리가필요한기업환경적합한게이트웨이기능 ( 공유기기능 ) 을수행할수있습니다. DHCP Server 및 Relay 기능을활용할수있으며, 사용자환경에대해 Zone 영역구성을통해 WAN, LAN 혹은 VLAN 인터페이스영역으로구성할수있습니다. 기업의네트워크보안을위한고성능방화벽과 Content Filtering을지원하여관리자가직접각각의 URL을개별적으로차단하지않고도부적절한사이트와소셜네트워킹사이트등특정유형의웹콘텐츠를쉽게차단할수있습니다. 지속적으로분석하고축척한 1,400억개이상의대규모클라우드기반 URL 데이터베이스를바탕으로악성웹콘텐츠에대해높은정확도와광범위하고즉각적인보호를제공합니다. 또한로그를별도로저장할수있도록 USB 포트가장착되어있습니다. AP Management Gateway ZyWALL VPN Gateway 는무선네트워크의관리, 인증, 게스트접속뿐만아니라 AP 구축설계, 배치, 모니터링, 유지보수기능을하나로담은지능형무선AP 컨트롤러기능이탑재된통합유무선장비입니다. 기본적으로 4개의 AP를관리할수있으며, 라이선스를추가하여최대 132대 AP까지연결할수있는확장성을갖추어소규모사무실, 병원, 학교등각지사의 Gateway 및무선네트워크관리가필요한장소에최적화된무선보안솔루션을제공하는 AP management Gateway 입니다. ISP1 GS port GbE Smart Managed Switch Workgroup Internet ISP2 VPN Serise ZyWALL VPN Gateway Wi-Fi Management GS HP WAC6103D-I Tablet PC Laptop Ethernet Managed AP Wi-Fi Management WAC6103D-I 2 Datasheet ZyWALL VPN50 / VPN100 / VPN300

3 고성능 VPN 처리성능 ZyWALL VPN Gateway은다양한 site-to-client and site-to-site VPN 구축을위한높은처리량의 IPSec, L2TP, SSL VPN 방식을지원하여원격의 ZyXEL 장비들과사용자보안통신을위한안정적인인프라를구성할수있습니다. 특히, SSL VPN 설정이쉽고간단하며라이선스적용으로원격의사용자들이내부시스템의접근공유가편리하고사용자 OS 환경에따른세션분류및연결제어가가능하여사용자기반의보안터널통신이가능하도록설계되었습니다. VPN 이중화 ZyWALL VPN Gateway는시스템이다운되서는안되는환경에서 mission-critical VPN 구성을위해 VPN 이중화를지원합니다. GRE over IPSec 기술을통해 active-active VPN 로드밸런싱또는 active-passive failover 모드를구성하기위한두개의 터널을쉽게구성할수있습니다. VPN application High-speed, high-security communications between local servers, remote devices and cloud-hosted applications with deployments of the ZyWALL VPN50/100/300. Secure, reliable VPN connectivity with load balancing and failover features delivers high-availability services for exceptional uptime. Easy-to-use, secure remote access via SSL, IPSec and L2TP over. The headquarter ZyWALL Series can also establish an connection with Amazon VPC for secured access to leverage the benefits of cloud-base and to expend on premise networks that extend into the cloud Headquarters Amazon VPC SB/SMB Office VPN300 VPN Firewall VPN HA Branch Office ZyWALL VPN Gateway L2TP over / SSL VPN VPN50 VPN Firewall Employee at Home SecuExtender VPN Client for Window/Mac OS VPN100 VPN Firewall Travelling Employee Remote Users 3 Datasheet ZyWALL VPN50 / VPN100 / VPN300

4 ZyWALL VPN Firewall Quick Finder Model VPN50 VPN100 VPN300 Description SB SMB SMB Firewall Throughput (Mbps) 800 2,000 2,600 Max. Concurrent Sessions 400, ,000 2,000,000 VPN throughput (Mbps) ,000 Max. Concurrent Tunnels Content Filtering 1 year free 1 year free 1 year free Gen Enforcer Service 1 year free 1 year free 1 year free Amazon VPC Yes Yes Yes L2TP over Client Yes Yes Yes Device HA Pro - Yes Yes Hotspot Management - Yes Yes Facebook WiFi Yes Yes Yes *: New ZyWALL VPN2S is specially designed for SOHO, and will be available in Q2, 2018 ZyXEL One Network - 네트워크통합관리솔루션 ZyXEL One Network(ZON) 솔루션은비전문가도쉽고간단하게사용할수있도록웹브라우저를통해스위치설정및관리가가능한 GUI 환경을제공합니다. 자이젤스위치와무선AP 장비들을하나의네트워크로효율적으로관리할수있는 ZON Utility 및 ZyXEL Smart Connect와 ZyXEL istacking 같은네트워크통합관리솔루션을통해네트워크구축시초기투자비용을줄이고반복적이고비효율적인작업을최소화할수있습니다. ZyXEL One Network Utility ZyXEL One Network(ZON) Utility는윈도우기반의소프트웨어로써비전문가도쉽게사용할수있는인터페이스를제공합니다. 기본 IP 설정, 장비재부팅, 펌웨어업그레이드, 암호재설정, ZyXEL AP Configurator 연동등동일도메인내의자이젤스위치, AP, UTM 장비를최대 250개까지검색및설정이가능합니다. GS HP Workgroup Internet ZON Utility GS ZyWALL VPN Gateway XGS F WAC6103D-I Fiber Gigabit Gigabit PoE ZON Utility Discover Zyxel network devices Servers GS HP WAC6103D-I 4 Datasheet ZyWALL VPN50 / VPN100 / VPN300

ZyXEL One Network - 네트워크통합관리솔루션 ZON Utility ZyXEL 스위치, AP, USG, VPN 에대한통합검색및설정유틸리티 AP Controller Technology ZyWALL VPN Gateway 에서 ZyXEL 무선AP 관리할수있는 AP Controller 기능탑재 ZyXEL Smart Connect Neighboring

5 ZyXEL One Network - 네트워크통합관리솔루션 ZON Utility ZyXEL 스위치, AP, USG, VPN 에대한통합검색및설정유틸리티 AP Controller Technology ZyWALL VPN Gateway 에서 ZyXEL 무선AP 관리할수있는 AP Controller 기능탑재 ZyXEL Smart Connect Neighboring Device Discovery&Mgnt 자이젤네트워크장비 ( 스위치, AP, UTM, VPN) 에직접연결된또다른자이젤네트워크장비를검색하고원격에서네트워크장비설정 Managed application services Branch offices, small and medium business as well as IT administrtors can deploy Zyxel VPN firewalls to establish VPN connections among managed services providers (MSPs) that improve services levels, minimize end-user service downtime and relieve network maintenance efforts. Retailers and chain stores such as healthcare, banking and branch offices can deploy ZyWALL VPN Firewalls over secure connections () for business transactions. Managed Service Provider VPN50 Portal Server Authentication Server Application Server VPN300 VPN Firewall VPN300 VPN100 Client Network 1 Client Network 3 Client Network 2 5 Datasheet USG 40/ 60/ 110/ 210/ 310/ 1100/ 1900

6 Specifications Model VPN50 VPN100 VPN300 Product photo Hardware Specifications Interfaces 4 x LAN/DMZ, 1 x WAN, 1 x SFP 4 x LAN/DMZ, 2 x WAN, 1 x SFP 7 x GbE (Configurable), 1 x SFP USB3.0 ports 1 Console port Yes (RJ-45) Yes (DB9) Yes (DB9) Rack-mountable - Yes Yes System Capacity & Performance *1 SPI firewall throughput (Mbps) * ,000 2,600 VPN throughput (Mbps) * ,000 Max. TCP concurrent sessions *4 400, ,000 2,000,000 Max. concurrent tunnels * Concurrent SSL VPN users 10/50 30/200 50/300 (default/max.) *6 VLAN interface Concurrent device logins / /800 (default/max.) *6*7 WLAN Management Managed AP number 4/36 4/68 4/132 (default/max.) *6 Key Features DPI Firewall Yes Yes Yes VPN IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec SSL (HTTPS) Inspection - Yes Yes Content Filtering *6*8 1 year free 1 year free 1 year free Geo Enforcer *6 1 year free 1 year free 1 year free EZ Mode Yes - - Hotspot Management *6 - Yes Yes Ticket printer support *9 / - Yes (SP350E)/10 Yes (SP350E)/10 Support Q ty (max.) Amazon VPC Yes Yes Yes Facebook WiFi Yes Yes Yes Device HA Pro - Yes Yes Power Requirements Power input 12V DC, 2.0 A max. 12V DC, 2.5A max. 12V DC, 4.17A max. Max. power consumption (watt) Heat dissipation (BTU/hr) Physical Specifications Item Packing Included accessories Dimensions (WxDxH) (mm/in.) 216 x 143 x 33/ 8.50 x 5.63 x x 187 x 36/ 10.7 x 7.36 x x 188 x 44/ x 7.4 x 1.73 Weight (kg/lb.) 0.88/ / /3.64 Dimensions (WxDxH) (mm/in.) 276 x 185 x 98/ x 7.28 x x 247 x 73/ x 9.72 x 2.87 Weight (kg/lb.) 1.41/ (W/ bracket) 2.42 (W/ bracket) Power adapter RJ-45 RS-232 cable for console connection Power adapter Rack mounting kit (optional, by regions) 351 x 152 x 245/ x 5.98 x /6.24 Power adapter Power cord Rack mounting kit 6 Datasheet ZyWALL VPN50 / VPN100 / VPN300

7 Specifications Model VPN50 VPN100 VPN300 Product photo Environmental Specifications Operating environment Storage environment Temperature 0 C to 40 C/32 F to 104 F 0 C to 40 C/32 F to 104 F 0 C to 40 C/32 F to 104 F Humidity 10% to 90% 10% to 90% 10% to 90% Temperature -30 C to 70 C/-22 F to 158 F -30 C to 70 C/-22 F to 158 F -30 C to 70 C/-22 F to 158 F Humidity 10% to 90% 10% to 90% MTBF (hr) 44, , ,688.2 Certifications EMC FCC Part 15 (Class B), IC, CE EMC (Class B), RCM, BSMI FCC Part 15 (Class B), CE EMC (Class B), C-Tick (Class B), BSMI 10% to 90% FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI Safety BSMI, UL LVD (EN ), BSMI LVD (EN ), BSMI *: This matrix with firmware ZLD4.30 or later. *1: Actual performance may vary depending on network conditions and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *5: Including Gateway-to-Gateway and Client-to-Gateway. *6: With Zyxel service license to enable or extend the feature capacity. *7: This is the recommend maximum number of concurrent logged-in devices. *8: SafeSearch function in Content Filtering need to enable SSL inspection firstly and not for small business models. *9: With Hotspot Management license support Features Set Software Features Firewall ICSA-certified corporate firewall Routing and transparent (bridge) modes Stateful packet inspection User-aware policy enforcement SIP/H.323 NAT traversal ALG support for customized ports Protocol anomaly detection and protection Traffic anomaly detection and protection Flooding detection and protection DoS/DDoS protection IPv6 Support Dual stack IPv4 tunneling (6rd and 6to4 transition tunnel) IPv6 addressing DNS DHCPv6 Bridge VLAN PPPoE Static routing Policy routing Session control Firewall and ADP Content Filtering Encryption: AES (256-bit), 3DES and DES Authentication: SHA-2 (512-bit), SHA-1 and MD5 Support route-based VPN Tunnel Interface (VTI) Key management: manual key, IKEv1 and IKEv2 with EAP Perfect forward secrecy (DH groups) support 1, 2, 5, 14 IPSec NAT traversal Dead peer detection and relay detection PKI (X.509) certificate support VPN concentrator Simple wizard support VPN auto-reconnection VPN High Availability (HA): loadbalancing and failover L2TP over IPSec GRE and GRE over IPSec NAT over IPSec Support ios L2TP/IKE/IKEv2 VPN Client provision Device High Availability Pro (HA Pro) Device failure detection and notification Supports ICMP and TCP ping check Link monitoring Configuration auto-sync Dedicated Heartbeat Link Smart handover NAT/Firewall/VPN Sessions synchronization SSL VPN Supports Windows and Mac OS X Supports full tunnel mode Supports 2-step authentication HTTP, FTP, SMTP, POP3 and IMAP4 protocol support Automatic signature updates No file size limitation Customizable user portal Networking Routing mode, bridge mode and hybrid mode Ethernet and PPPoE NAT and PAT VLAN tagging (802.1Q) Virtual interface (alias interface) Policy-based routing (user-aware) Policy-based NAT (SNAT) Dynamic routing (RIPv1/v2 and OSPF) DHCP client/server/relay Dynamic DNS support WAN trunk for more than 2 ports Per host session limit Guaranteed bandwidth Maximum bandwidth Priority-bandwidth utilization 7 Datasheet ZyWALL VPN50 / VPN100 / VPN300

8 Features Set Software Features Bandwidth limit per user Bandwidth limit per IP GRE BGP WLAN Management Support AP controller version 3.00 Wireless L2 isolation Supports auto AP FW update Scheduled WiFi service Dynamic Channel Selection (DCS) Client steering for 5 GHz priority and sticky client prevention Auto healing provides a stable and reliable coverage IEEE 802.1x authentication Captive portal Web authentication Customizable captive portal page RADIUS authentication WiFi Multimedia (WMM) wireless QoS CAPWAP discovery protocol Multiple SSID with VLAN Supports ZyMesh Support AP forward compatibility Authentication Local user database Built-in user database Microsoft Windows Active Directory integration External LDAP/RADIUS user database XAUTH, IKEv2 with EAP VPN authentication Web-based authentication Forced user authentication (transparent authentication) IP-MAC address binding SSO (Single Sign-On) support Logging/Monitoring Comprehensive local logging Syslog (send to up to 4 servers) alert (send to up to 2 servers) Real-Time traffic monitoring System status monitoring Built-in daily report Advanced reporting (Vantage Report) System Management Role-based administration Multiple administrator logins Supports Cloud Helper Multi-lingual Web GUI (HTTPS and HTTP) Command line interface (console, Web console, SSH and telnet) SNMP v1, v2c, v3 System configuration rollback Firmware upgrade via FTP, FTP-TLS and Web GUI Dual firmware images Cloud CNM SecuManager Zyxel One Network ZON Utility: IP configuration Web GUI access Firmware upgrade Password configuration Smart Connect: Location and System Name update Discover neighboring devices One-click remote management access to the neighboring Zyxel devices Hotspot Management Integrated account generator, Web based authentication portal and billing system Supports external RADIUS servers Per account bandwidth management User agreement login SP350E Service Gateway Printer enables oneclick account and billing generation Built-in billing system: Time-to-finish accounting mode Accumulation accounting mode Supports PayPal online payment Marketing tool: Advertisement link Walled garden Portal page Billing Replenish Subscription Services Content Filtering Geo Enforcer HotSpot Management Managed APs Device HA Pro USB Firmware upgrade Log for data retention Support 3G/LTE Support Nebula SD-WAN ( ZyWALL VPN300 ( Zyxel Biz Forum ( categories/security) 8 Datasheet ZyWALL VPN50 / VPN100 / VPN300

9 Licenses Security Product Content Filtering Geo Enforcer ZyWALL VPN50 1 year/2 years 1 year ZyWALL VPN100 1 year/2 years 1 year ZyWALL VPN300 1 year/2 years 1 year Note: Support Content Filtering and Geo Enforcer 1 year free license. VPN Service Product SSL VPN Tunnels SecuExtender SSL VPN Client *1 SecuExtender Client ZyWALL VPN50 Add 5/10 tunnels Add 1/5/10 clients For 1/5/10/50 clients ZyWALL VPN100 Add 5/10/50 tunnels Add 1/5/10 clients For 1/5/10/50 clients ZyWALL VPN300 Add 5/10/50 tunnels Add 1/5/10 clients For 1/5/10/50 clients *1: Support OS: MAC OS 10.7 or later Connectivity Solution Product Managed APs Concurrent Device Upgrade Hotspot Management ZyWALL VPN50 Add 2/4/8 APs - - ZyWALL VPN100 Add 2/4/8/64 APs Add 100 nodes 1 year/one-time ZyWALL VPN300 Add 2/4/8/64 APs Add 100/300 nodes 1 year/one-time Access Point Compatibility List Product Unified AP Unified Pro AP Models Functions NWA5121-NI NWA5121-N NWA5123-NI NWA5301-NJ NWA5123-AC WAC5302D-S Forward Compatible APs* Central management Yes Yes Auto provisioning Yes Yes WAC6502D-E WAC6503D-S Data forwarding Local bridge Local bridge/data tunnel ZyMesh Yes Yes WAC6553D-E WAC6103D-I Forward Compatible APs* *: From APC3.0, commercial gateways supporting APC technology are able to recognize APs with FW release higher than APC3.0 as Forward Compatible APs. Resellers can introduce newly-available Zyxel APs with basic features supported without upgrading any new controller firmware. Accessories SecuExtender Software Product Description Supported OS Client* SSL VPN Client* client software for the ZyWALL and USG Series with Easy VPN for zero configuration remote access Secured VPN connection between PC/MAC and ZyWALL Firewall Windows XP (32-bit) Windows Server 2003 (32-bit) Windows Server 2008 (32/64-bit) Windows Vista (32/64-bit) Windows XP Windows 7 (32/64-bit) Windows 8/8.1 (32/64-bit) Windows 7 (32/64-bit) Windows 8 (32/64-bit) Windows 10 (32/64-bit) Windows 10 (32/64-bit) MAC OS 10.7 or later *: A 30-day trial version of client and SSL VPN client for MAC OS can be downloaded from official Zyxel website. To continue using the application, please contact your regional sales representatives and purchase a commercial license for the application. 9 Datasheet ZyWALL VPN50 / VPN100 / VPN300

VPN_KR(new)_ver2

VPN_KR(new)_ver2 중소규모 비즈니스를 위한 올인원 차세대 기업용 게이트웨이 (ZyWALL Firewall Gateway) 국제CC인증 (Certificate Identifier : SERTIT-100C) 50 / 100 / 300 Content Filter 라이선스 1년간 Bundle제공 - 대상 : 전 모델 - 전 모델 30일 Trial 기간 제공 - 총 13개월 사용 무상