12 best zyxel vpn routers

ZyXEL Next Generation VPN Firewall with 1 WAN, 1 SFP, 4 LAN/DMZ Gigabit Ports and 802.11ac/n WiFi [USG20W-VPN]

ZyXEL

Based on 130 reviews Check latest price

Product description

USG20W-VPN - next generation unified security gateway vpn firewall W/11AC wireless. VoIP telephone routers.

  • High Performance Gigabit Ports 1x Internet (WAN), 4x Local Network (LAN), 1x SFP Gigabit Fiber (SFP WAN) for Fiber Internet Services, 802.11ac Wireless
  • Up to 90Mbps Encrypted VPN throughput (IPsec/L2TP: 10 Concurrent, SSL: 5 Concurrent Upgradable to 15 Max) for Secure Remote Access, Office to Office or Device to Office
  • Up to 350Mbps Stateful Packet Inspection (SPI) Firewall and 20,000 Max TCP Concurrent Sessions ideal for Small Offices < 10 Users
  • Fanless design for zero noise (0dB) operation
  • Easy to install browser-based configuration and management interface with Quick and Easy setup/VPN wizards
  • Optional Website Content Filter and HTTPs DNS Blocking and Anti-Spam Email Blocking (Subscription Required, Sold Separately)
  • Limited Lifetime hardware warranty
  • Free tech support with no support contracts

User questions & answers

Question: Are you able to manually configure the wan interface's mac address
Answer: Charter/Spectrum uses two machines (Arris: Modem, & Router that the connect). Arris now has a single router/modem that can be used--Arris SBG-7580 with the option of Voice enabled at an extra $65). I know because just found Netgear by Spectrum that can use this with modem voice).
Question: Trying to use it for vonage voip phone and cisco jabber. is this the right one
Answer: Well..... yeah. But why would anyone buy this device and shut the router portion off when they can just buy the SB6190 Modem which is basically the same thing without the router function? Logic makes no sense these days. But anyways to shut off the router function it's putting the gateway into bridging mode which can be found here >>>>> https://arris.secure.force.com/consumers/articles/General_FAQs/SBG7580-AC-Bridge-Mode-Setup/?l=en_US&fs=RelatedArticle
Question: How much data can it handle
Answer: Longer answer - While technically it will not boost your speeds, it will improve your signal degradation over distances. For example if you subscribe to 40 Mbps service, you should get this speed close to the router, however the further away you get the less percentage of this speed you will achieve. With a standard router, at about 20' from the router you may have a 25% speed loss and only get 30 Mbps, but this router would keep you much closer to the 40 you subscribe to over much further distances.
Question: Is vpn client software included or is it a trial version
Answer: That's correct, this device can only be managed via the SURFboard Central mobile application. The mobile app will give you easy to use functional options to manage your home Wi-Fi network

Product features

USG20W-VPN

USG20W-VPN Firewall is not only a high-performance SPI firewall, but it helps provide businesses with a reliable and efficient network. Security and safety network concerns will be protected against while establishing secure communications between two or more remote sites, connecting multiple VPNs and ensuring data security.

USG20W-VPN also boasts 802.11ac with single-radio dual-band (2.4G/5G) WiFi support, a robust VPN (IPSec/SSL/L2TP) and High Availability (HA) with multi-WAN failover and load-balancing.

Safer, More Reliable VPN Connections

Protecting against the threats of attackers has become even more important with such vast quantities of personal and professional data stored on networks. Legacy VPN encryption algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer enough to guarantee secure outbound communications. Supporting the more advanced Secure Hash Algorithm 2 (SHA-2), USG20-VPN Firewall provides the safest VPN connections in its class and ensures maximum security for business communications.

Unlimited Business Mobility

To support business operations in today's bring your own device business environments, USG20W-VPN firewall offers comprehensive support for mobile devices with Layer-2 Tunneling Protocol (L2TP) VPN. L2TP is offered on a wide variety of mobile internet devices running on iOS. Android and Windows mobile platforms.

Zyxel One Network Experience

One Network is designed to relieve users from the laborious deployment and management of a network with its simplified configuration, management and troubleshooting; allowing businesses to focus on other major tasks. One Network includes an easy-to-use tool called ZON Utility that speeds up the network set-up process.

OneSecurity Service

Zyxel provides regular updates in response to the latest security threats and advisories, as well as a service portal that offers free, informative network security resources. These help businesses and IT departments protect networks and operations from security risks. OneSecurity.com service is built into the product GUI, allowing IT staff to quickly and easy identify threats, troubleshoot them and act upon them.

Zyxel ZyWALL 1.6 Gbps VPN Firewall, recommended for up to 100 users [ZYWALL110]

ZyXEL

Based on 75 reviews Check latest price

Product description

  • Multi-core CPUs deliver up to 1 Gbps firewall throughput and 300 Mbps VPN throughput
  • More secure VPN connections with SHA-2 encryption
  • VPN high availability (HA) with dual-WAN failover and fallback support
  • L2TP support for iOS, Android and Windows mobile devices
  • Auto-provisioned client-to-site IPsec setup with Easy VPN
  • 100 IPSEC VPN Tunnels, 25 SSL VPN Tunnels included
  • 60,000 Concurrent Sessions
  • IPV6 Support

Product features

ZyWALL110 VPN Firewall

ZyWALL110 VPN Firewall is designed with multi-core CPUs to deliver the fastest VPN and firewall performance on the market.

High-speed networking performance up to 1 Gbps firewall throughput and 300 Mbps VPN throughput keeps up with the high bandwidth demands of today's applications without sacrificing security.

Designed with completely new and advanced hardware platforms, ZyWALL110 VPN Firewall delivers uncompromising performance for high-speed site-to-site and client-to-site VPN.

At Zyxel, we strive to maximize your consumer satisfaction from our products. We endorse the reliability and quality of our products to the extent we offer a Limited Lifetime Warranty.

Safer, More Reliable VPN Connections

Faster processors today have vastly boosted the capabilities of hackers to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. Supporting the more advanced Secure Hash Algorithm 2 (SHA-2), ZyWALL110 VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.

The complete range of Zyxel VPN Firewalls deliver reliable, non-stop VPN services with dual-WAN failover and fallback support. With two WAN connections—one primary and one for redundancy— Zyxel VPN Firewalls automatically switch to the backup connection should the primary link fail, and automatically switch back to the primary connection once they are back online.

Zero-Configuration Remote Access

Virtual private networks provide businesses with a secure and convenient way of sharing company resources with partners, customers, or employees on business trips. Yet typical VPN solutions are hard for non-technical users to configure, which greatly reduces their usability and convenience. ZyWALL110 VPN Firewall features Easy VPN to provide auto-provisioned client-to-site IPsec VPN setup. The Zyxel IPsec VPN client-software automatically retrieves the VPN configuration file from the remote Zyxel VPN Firewall and completes the IPsec VPN setup in 3 simple steps.

Unlimited Business Mobility

To support dynamic, mobile business operations in today's BYOD (bring your own device) business environment, ZyWALL110 VPN Firewall offers unlimited business mobility with Layer 2 Tunneling Protocol (L2TP) VPN for mobile devices. ZyWALL110 supports L2TP VPN on a wide variety of mobile Internet devices running iOS, Android and Windows mobile platforms.

Enhanced Customer Convenience

Locating firmware updates - not to mention identifying correct versions for your device and managing their installation - can be a complex and confusing ordeal. ZyWALL110 VPN Firewall solves this with its new Cloud Helper service. Cloud Helper provides a simple step to look for up-to-date firmware information. New firmware is immediately made available upon release from our official database to ensure its authenticity and reliability.

Zyxel ZyWALL 1.5 Gbps VPN Firewall Device, 2 WAN Router, load balancing, recommended for up to 10 users, 3G/4G LTE support [VPN2S]

ZyXEL

Based on 39 reviews Check latest price

Product description

VPN Firewall Router for Small Offices with 850Mbps SPI Firewall 35 Mbps VPN 20 IPSec/L2TP VPN TR069 Multi WAN DHCP

  • 5 Port - 1000Base-T Gigabit Ethernet - AES (128-bit), SHA-1, AES (256-bit), SHA-2, AES (192-bit), 3DES - USB - 5 x RJ-45 - Manageable - Desktop

User questions & answers

Question: Does it come with rack ears? Looks like mounting holes for them on the side
Answer: So long as you can sign in to the box, you can do this from anywhere. I have accessed the box from my laptop in a hotel room a number of times. If you don't have a staic IP address, you may need to use a Dynamic IP address service like DYNDNS.
Question: Is there a "remote management" option (i.e., GUI check box!), so common among competing products
Answer: download the code/file from the web... in the menu system (built in) there is an option for updating the HDW. download to your pc from the web first...then login as the admin...then follow the instru in the built in menu/admin program.

Product features

VPN2S Firewall Router

VPN2S Firewall provides internet connections with high reliability, high performance and high security to maintain efficiency and productivity for SMBs, branch offices and home/remote workers.

VPN2S has five Gigabit Ethernet ports (2 are configurable for LAN/WAN and 3 for LAN). With two WAN ports, VPN2S can be set up as a Dual-WAN gateway for load balancing or failover backups.

VPN2S is a reliable, secure VPN router which supports IPSec, PPTP and L2TP to fit various user scenarios.

Secure, Reliable Network Connections

VPN2S offers high-capacity virtual private network (VPN) capabilities that allow multiple offices, tens of employees and remote workers access to the information they need anywhere - securely. VPN2S supports L2TP/IPSec VPN on mobile internet devices running iOS or Android. In addition, VPN2S can also act as an L2TP VPN client for home workers to connect office networks without complex configuration.

Powerful, Robust Network Security

Network security is always the most important issue in terms of avoiding internet threats. VPN2S offers SPI Firewall functions that work against attacks including Denial of Service (DoS), IP-based attacks, unauthorized remote system access, anomaly traffics and illegal packets for highly secure managed network atmosphere.

One-Year Content Filtering Included

VPN2S includes web content filtering that prevents users from accessing 64 URL that includes 8 unsafe security threats categories; as well as inappropriate contents such as violence. Business owners can also increase corporate productivity by limiting the access of certain applications like social networking sites that could potentially degrade working efficiency.

Quick & Easy 5 Steps Wizard Setup

Zyxel’s multilingual Wizard and GUI will get you connected quickly. For fast and efficient management, we offer a complete suite of remote management tools that empower administrators to easily configure and monitor their VPN2S. VPN2Scan double as an L2TP VPN client, which means you don’t need to setup VPN settings on each of your individual devices, just set it up once and you're done.

Multi-WAN Non-Stop Service

Keep your business up and running with Dual-WAN load balancing/fail-over by turning one of the LAN ports into a WAN. Never worry about losing business opportunities from a lost connection again.

Flexible VLAN configuration

ZyWALL VPN2S complies with IEEE 802.1Q. VLAN function provides a number of advantages including: ease of administration, confinement of broadcast domains, reduced broadcast traffic, and enforcement of security policies. These benefits not only reduce the maintenance effort but also provides better performance.

ZyXEL USG40-NB UTM FIREWALL VPN ROUTER NON-BUNDLED [Unknown Binding]

: Zyxel
Product Line: ZyWALL

Product Series: USG

Product Model: USG40

Product Name: USG40 Unified Security Gateway

Marketing Information: The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more Wi-Fi for an exploding amount of smart devices. The use of cloud-based social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to new Web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources.

Product Type: Network Security/Firewall Appliance

Virtualization:

20000 x Max. TCP Concurrent Sessions , 3000 x New TCP Session Rate , 20000 x Max. UTM (AV and IDP) Concurrent Sessions , 10 x Max. Concurrent IPSec VPN Tunnels , 7 x Max. Concurrent SSL VPN Users , 8 x VLAN Interface , 2 x Managed AP Number (Default) , 10 x Managed AP Number (Max)

Firewall Protection: Application Control, Antivirus, Anti-spam, Content Filtering, Intrusion Prevention, Intrusion Detection, Denial of Service (DoS), Distributed Denial of Service (DDoS), Malware Protection, Dead Peer Detection, FloodGuard, Traffic Anomaly Detection, Stateful Packet Filtering, URL Filtering, Keyword Filtering, Malicious Source IP Address Blocking, Java and ActiveX Blocking

Encryption Standard: DES, 3DES, AES (256-bit), SHA-1, SHA-2, SHA-512, MD5

Features: NAT, PAT, IPSec NAT Traversal

Total Number of Ports: 5

USB: Yes

PoE (RJ-45) Port: No

Number of Network (RJ-45) Ports: 5

Ethernet Technology: Gigabit Ethernet

Network Standard: 10/100/1000Base-T

Wireless LAN: No

Input Voltage: 12 V DC

Power Source: AC Adapter

Form Fa

Product information

Check latest price

Product description

Brand Name: Zyxel

Product Line: ZyWALL

Product Series: USG

Product Model: USG40

Product Name: USG40 Unified Security Gateway

Marketing Information: The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more Wi-Fi for an exploding amount of smart devices. The use of cloud-based social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to new Web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources.

Product Type: Network Security/Firewall Appliance

Virtualization:

20000 x Max. TCP Concurrent Sessions , 3000 x New TCP Session Rate , 20000 x Max. UTM (AV and IDP) Concurrent Sessions , 10 x Max. Concurrent IPSec VPN Tunnels , 7 x Max. Concurrent SSL VPN Users , 8 x VLAN Interface , 2 x Managed AP Number (Default) , 10 x Managed AP Number (Max)

Firewall Protection: Application Control, Antivirus, Anti-spam, Content Filtering, Intrusion Prevention, Intrusion Detection, Denial of Service (DoS), Distributed Denial of Service (DDoS), Malware Protection, Dead Peer Detection, FloodGuard, Traffic Anomaly Detection, Stateful Packet Filtering, URL Filtering, Keyword Filtering, Malicious Source IP Address Blocking, Java and ActiveX Blocking

Encryption Standard: DES, 3DES, AES (256-bit), SHA-1, SHA-2, SHA-512, MD5

Features: NAT, PAT, IPSec NAT Traversal

Total Number of Ports: 5

USB: Yes

PoE (RJ-45) Port: No

Number of Network (RJ-45) Ports: 5

Ethernet Technology: Gigabit Ethernet

Network Standard: 10/100/1000Base-T

Wireless LAN: No

Input Voltage: 12 V DC

Power Source: AC Adapter

Form Fa

Product information

" }, "aggregateRating": { "@type": "AggregateRating", "ratingValue": "", "reviewCount": "250" }, "offers": { "@type": "Offer", "url": "https://www.amazon.com/dp/B00LA508KQ?tag=bfyall-20&linkCode=osi&th=1&psc=1", "priceCurrency": "USD", "price": "258.82", "priceValidUntil": "2023-07-01", "itemCondition": "http://schema.org/NewCondition", "availability": "https://schema.org/InStock", "seller": { "@type": "Organization", "name": ": Zyxel
Product Line: ZyWALL

Product Series: USG

Product Model: USG40

Product Name: USG40 Unified Security Gateway

Marketing Information: The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more Wi-Fi for an exploding amount of smart devices. The use of cloud-based social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to new Web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources.

Product Type: Network Security/Firewall Appliance

Virtualization:

20000 x Max. TCP Concurrent Sessions , 3000 x New TCP Session Rate , 20000 x Max. UTM (AV and IDP) Concurrent Sessions , 10 x Max. Concurrent IPSec VPN Tunnels , 7 x Max. Concurrent SSL VPN Users , 8 x VLAN Interface , 2 x Managed AP Number (Default) , 10 x Managed AP Number (Max)

Firewall Protection: Application Control, Antivirus, Anti-spam, Content Filtering, Intrusion Prevention, Intrusion Detection, Denial of Service (DoS), Distributed Denial of Service (DDoS), Malware Protection, Dead Peer Detection, FloodGuard, Traffic Anomaly Detection, Stateful Packet Filtering, URL Filtering, Keyword Filtering, Malicious Source IP Address Blocking, Java and ActiveX Blocking

Encryption Standard: DES, 3DES, AES (256-bit), SHA-1, SHA-2, SHA-512, MD5

Features: NAT, PAT, IPSec NAT Traversal

Total Number of Ports: 5

USB: Yes

PoE (RJ-45) Port: No

Number of Network (RJ-45) Ports: 5

Ethernet Technology: Gigabit Ethernet

Network Standard: 10/100/1000Base-T

Wireless LAN: No

Input Voltage: 12 V DC

Power Source: AC Adapter

Form Fa

Product information

" } } }

ZyXEL - Router ZyXEL USG20W-VPN-EU0101F USG20W-VPN-EU0101F Firewall

ZyXEL

Based on 14 reviews Check latest price

Product description

ZyXEL USG20WVPN Firewall 10Mb LAN 100Mb LAN GigE Dual Band USG20WVPNEU0101F Enterprise Computing Firewalls Security

  • SPI firewall throughput (Mbps): 350
  • VPN throughput (Mbps): 90
  • Max. TCP concurrent session: 20, 000
  • Max. concurrent IPSec VPN tunnels: 10
  • Max. concurrent SSL VPN users: 15

Cisco Systems Gigabit Dual WAN VPN 14 Port Router (RV325K9NA)

Cisco

Based on 212 reviews Check latest price

Product description

The Cisco RV325 Dual Gigabit WAN VPN Router is a perfect choice for companies that need a combination of performance, security, reliability, and flexibility. You can connect its dual Gigabit Ethernet WAN ports to one service provider, for high-performance networking with load balancing.

  • Dual Gigabit Ethernet WAN ports for load balancing and business continuity
  • Easily manages large files and concurrent users to keep employees productive
  • Connects multiple locations and remote workers using VPN
  • High capacity, high-performance SSL and IP Security VPN capabilities
  • Intuitive, browser based device manager and setup wizards

User questions & answers

Question: How do you setup the VPN
Answer: Power adapter yes, power cord no. But any generic power cord would work.
Question: Is it rack Mountable
Answer: Not sure about South America in general but as far as I've seen, you should have no problem.
Question: This router also came with WiFi
Answer: yes it can
Question: Is there a license requirement for vpn and ios updates
Answer: It is international, but I didn’t went to Haiti to test it. Bonne chance.

Zyxel ZyWALL (USG) UTM Firewall, Gigabit Ports, for Small Offices, 20 IPSec VPN, 5 SSL VPN, Limited, Hardware Only [USG40-NB]

ZyXEL

Based on 34 reviews Check latest price

Product description

Next Generation USG 40 NB

  • Perfect for small offices: High performance ICSA-certified Gigabit UTM firewall delivers fast speeds of 400 Mbps (FW), 100 Mbps (VPN) and 50 Mbps UTM for 50,000 sessions
  • Robust and secure VPN options (SSL, L2TP and IPSec) ensure excellent site-to-site, client-to-site and mobile-to-site connectivity with 20 IPSec Tunnels and 5 SSL Upgradable to 15
  • 30 Day Free Trial of best-in-class antivirus, anti-malware, anti-spam, content filtering, intrusion detection and next-generation application intelligence from TrendMicro and other industry leaders
  • Limited lifetime hardware warranty, free firmware upgrades and free technical support (90 days upon registration)
  • Quiet, fanless design makes an ideal deployment in small offices
  • Built-in WLAN controller helps extend your wireless coverage (using Zyxel managed access points) as business grows
  • Support for Zyxel ONE Network (ZON) and Cloud Network Center (CNC) for easy configuration and management

User questions & answers

Question: can i still implement vpn if my ip is private from carrier-grade nat
Answer: For firewall WAN throughput the product is rated as an SPI Firewall 350Mbps but real world speedtest would be around 175-200Mbps. If you are looking for VPN throughput numbers, then it is rated for 90Mbps for the VPN encryption so for VPN traffic, real world throughput would be around 45-50Mbps
Question: Hi can i block https site with this firewall? do i have to pay a license every year for me to use this firewall
Answer: The license is included. Note there are license limits on the number of concurrent VPN sessions, and that varies by model. Additional session licenses can be purchased. I make extensive use of L2TP VPNs on my USG110 and before that, on my USG40, and they work very well and are fairly simple to configure.
Question: I just got my internet to 300, but my old USG20 only lets about 160 through, will this unit let the full 300 through
Answer: If it says cable modem it will not have a phone line jack. As far as I know. I bought the sb6190 I believe it was and does not have phone jack cuz it’s a cable modem
Question: Can I install my own OS on it ? Or will it only work with it’s own firmware ?I want linux on it , is it the right choice
Answer: Ask Amazon or Arris

Product features

USG40-NB

USG40-NB is an all-in-one device that delivers full wired network security, offering unbeatable protection from today’s biggest threats like ransomware, viruses, harmful websites, illegal downloads and more.

With USG40-NB, your small offices, remote sites and retail outlets will enjoy robust and secure VPN options, plus the power of best-in-class security technologies like antivirus, TrendMicro ransomware and application patrol.

Finally, with a built-in wireless controller, this firewall offers easy deployment of additional wireless extensions for the office or guest access as you grow. When it comes to network security, this firewall is as smart as it gets.

Block Today's Biggest Threats

Don’t let network threats, spam and social networking sites hinder your security or your productivity. The USG40-NB next-generation firewall (NGFW) is the answer - providing expert protection and control of web applications like Facebook, Google Apps and Netflix, plus expert technologies to block ransomware, malware, viruses and spam.

You’ll also gain content filtering, intrusion detection (IDP), P2P blocking and application intelligence that keeps your network safe and your workplace protected.

Innovative, Fan-less Design

This firewall features a robust fanless design to prevent dirt and dust from entering operating environments to cause potentially catastrophic failures. This enhances the reliability over time, with fewer parts to fail.

The fanless design of ZyWALL 110 offers zero-noise cooling and non-overheating features to ensure silent operation in small or quiet office environments. Perfect for small businesses, remote outlets and retail outlets seeking quiet operation and long-term performance.

Best-In-Class Security, Built In

Built into every USG40-NB firewall are smart technologies powered by the biggest names in network security - TrendMicro technology for ransomware, intrusion detection and application patrol. Our combined expertise means airtight protection for your network.

Centrally Manage Up To 18 APs

As your WiFi demand grows, the USG40-NB firewall is fit to keep pace. Its built-in WLAN controller enables you to centrally manage 2 access points default, upgradable to 18 Zyxel managed access points, so you can support your BYOD environment more efficiently. Perfect for SMBs with limited IT resources.

Lifetime Warranty & Free Firmware Upgrade

Zyxel has such confidence in the USG40-NB Next Generation Firewall (NGFW) that we stand behind it with a lifetime warranty, free firmware upgrade support and free technical support. Whatever question or concern may arise, you can rest assured we’ve got your back.

Zyxel Next Generation Unified Security Gateway with 4 LAN/DMZ, 2 WAN Ports - Includes 1-Year UTM Services Bundle [USG60]

ZyXEL

Based on 16 reviews Check latest price

Product description

Next Generation USG 60

  • Perfect for small offices: High performance ICSA-certified Gigabit UTM firewall delivers fast speeds of 1000 Mbps (FW), 180 Mbps (VPN) and 90 Mbps UTM for 100,000 sessions
  • 13 months of UTM (unified threat management) protects your network from ransomware, viruses, Facebook, illegal downloads and more
  • Integrates best-in-class antivirus, anti-malware, anti-spam, content filtering, intrusion detection and next-generation application intelligence from TrendMicro and other industry leaders
  • Limited lifetime hardware warranty, free firmware upgrades and free technical support (90 days upon registration)
  • Robust and secure VPN options (SSL, L2TP and IPSec) ensure excellent site-to-site, client-to-site and mobile-to-site connectivity with 40 IPSec Tunnels and 5 SSL Upgradable to 20
  • Quiet, fanless design makes an ideal deployment in small offices
  • Built-in WLAN controller helps extend your wireless coverage (using Zyxel managed access points) as business grows
  • Support for Zyxel ONE Network (ZON) and Cloud Network Center (CNC) for easy configuration and management

User questions & answers

Question: Can an end node see close to (80%+) 1 gbps internet throughput? my old firewall with gigabit ports only gives over 100 mbps between lan nodes
Answer: The short answer is "yes" but it needs clarification. If you are only using the device as a firewall then you should get ~1Gbps speed. However, if you enable any of the UTM services it drops the throughput down considerably due to the added processor / memory overhead needed to use these services. Here is what ZyXEL says: https://www.zyxel.com/us/en/products_services/Unified-Security-Gateway-USG40-40W-60-60W/comparison#specifications Note how the throughput is reduced to 90Mbps when using IDP and AV -- which is probably why you are buying a product like this in the first place so disabling such services would be a waste of your money. If getting Gpbs speed is all you are looking for then save yourself some money and research other, consumer-grade, products or just buy the Non-Bundled version of the USG products (USG60-NB).
Question: Will the included software protect my office from ransomware
Answer: Every ramsonware behaves differently. For the most recent WannaCry ramsonware Zyxel released their approach, utilizing their Anti-Virus to detect and block the malware and IDP service to prevent abnormal behavior.
Question: I want to primarily use this for client to site vpn solution. how easy is it tosetup the cleint
Answer: Very easy to use, several VPN configuration options available.
Question: Can i setup the 2 wan's for load balancing multiple internet providers for my office
Answer: That is correct, the models with 2 WANs can be setup with different internet providers to load balance and also fail over automatically. For any help with how to do this, please feel free to reach out to our support team or refer to the documentation of the product.

Product features

USG60

The all-in-one USG60 delivers full wired network security, plus 13 months, (30 Day Trial+1 Year) of UTM (Unified Threat Management) bundled coverage for unbeatable protection from today’s biggest threats like ransomware, viruses, harmful websites, illegal downloads and more.

With USG60, your small offices, remote sites and retail outlets will enjoy robust and secure VPN options, plus the best-in-class security technologies like Antivirus, TrendMicro ransomware and application patrol.

Plus, the firewall's built-in wireless controller facilitates the deployment of additional wireless extensions for office or guest access as you grow. When it comes to security, this firewall is as smart as it gets.

13 Months Of UTM Protection

Optimize your budget while protecting your network. The USG60 Next Generation Firewall (NGFW) comes with 13 months of UTM service (12 months beyond your free 30-day trial). That’s 13 months of best-in-class protection to keep your business safe.

Block Today’s Biggest Threats

USG60 Next-Generation Firewall (NGFW) provides expert protection and control of web applications like Facebook, Google Apps and Netflix, plus expert technologies to block ransomware, malware, viruses and spam. You’ll also gain content filtering, intrusion detection (IDP), P2P blocking and application intelligence that keeps your BYOD environment safe and your network protected.

Best-In-Class Security, Built In

Built into every USG60 firewall are “smart” technologies powered by the biggest names in network security—like signatures for antivirus, and TrendMicro technology for ransomware, intrusion detection and application patrol. Our combined expertise means airtight protection for your business network.

Innovative, Fanless Design

This firewall features a fanless design that ensures noiseless operation and greater reliability over time with fewer parts to fail. Perfect for small businesses, remote outlets and retail outlets seeking quiet operation and long-term performance.

Centrally Manage Up To 18 APs

As your Wi-Fi demand grows, the USG60 firewall is fit to keep pace. Its built-in WLAN controller enables you to centrally manage 2 access points by default, upgradable to 18 Zyxel managed access points, so you can support your BYOD environment more efficiently. Perfect for SMBs with limited IT resources.

We’ve Got You Covered

Zyxel has such confidence in the USG60 Next Generation Firewall (NGFW) that we stand behind it with a lifetime warranty, free firmware upgrade support and free technical support. Whatever question or concern may arise, you can rest assured we’ve got your back.

Zyxel ZyWALL 400 Mbps Wireless AC UTM Firewalll, recommended for up to 25 users - Includes 1-Year UTM Services Bundle [USG40W-EU0102F]

ZyXEL

Based on 65 reviews Check latest price

Product description

DRP-USG40W

  • Perfect for small offices: High performance ICSA-certified Gigabit UTM firewall delivers fast speeds of 400 Mbps (FW), 100 Mbps (VPN) and 50 Mbps UTM for 50,000 sessions
  • 13 months of UTM (unified threat management) protects your network from ransomware, viruses, Facebook, illegal downloads and more
  • Integrated single-radio Wi-Fi technology for solid wireless performance
  • Limited lifetime hardware warranty, free firmware upgrades and free technical support (90 days upon registration)
  • Robust and secure VPN options (SSL, L2TP and IPSec) ensure excellent site-to-site, client-to-site and mobile-to-site connectivity with 20 IPSec Tunnels and 5 SSL Upgradable to 15
  • Quiet, fanless design makes an ideal deployment in small offices
  • Built-in WLAN controller helps extend your wireless coverage (using Zyxel managed access points) as business grows
  • Support for Zyxel ONE Network (ZON) and Cloud Network Center (CNC) for easy configuration and management

User questions & answers

Question: Are the 1YR of AV, IDP, AS, and CF UTM Services installed on the router or on the PCs
Answer: My USG60 only allowed about the same through with my internet at 400 mbs. I tried turning off all security and still only got just under 200 mbs. I then connected an Edgerouter 4 and was getting 460+ mbs. I think there is an issue with the dual WAN meaning if you do not use it, it still seems to try to load balance. I waited for Zyxel to update but have since moved on.
Question: Does the USG40 require an annual license for content filtering
Answer: Works best with the installed OS and Firmware. Tech support is very good too.
Question: will this work with satellite internet (hughes net
Answer: Yes you can change them
Question: What are the compatible wireless access points of the AP controller function
Answer: DO NOT accept any responses to your question, which are not VONAGE VOIP-specific. . . Note that Vonage does not necessarily have the same operating requirements like business VOIP systems do. I'm here looking at this BECAUSE to make Vonage work with either of two-year old high end different manufacturers' routers I have, which are touted to work with VOIP, to get Vonage to work with any of its current to previous three generation phone adapters, using either of my two routers: 1. Disable SIP 2 Disable QoS 3. Set the router firewalls to the LOWEST protection levels 4. Placing any of the Vonage phone adapters in DMZ DOES NOT let me increase the firewall settings to a higher level of protection. 5. PORT FORWARDING DOES NOT let use use a higher firewall protection level setting. So I am looking at this firewall, considering placing the now, two newest HT801 each with only phone port, phone adapters, on the LAN side of a router with firewall set to LOW- and see if I can then connect this or another FIREWALL hardware device, to another LAN port on the router, and the rest of my various, about 12-14 LAN devices, into this firewall- to provide added firewall protection to all of my LAN except for the two HT801 Vonage phone adapters (one for main phone number, and one for fax phone number). Note that in this 11-room two-story residence, on both floors, there is a home office. The Internet modem is centralized on floor 2, with the primary WIFI router. A cascaded WIFI router, set to Access Point, in centralized on the first floor. Both routers have hardwired and WIFI devices connected. I mention this to demonstrate that I do not want to leave all these devices protected with a low firewall setting, just to accommodate Vonage VOIP.

Zyxel ZyWALL 5.0 Gbps UTM Firewall, up to 300 users - Includes 1-Year UTM Services Bundle [USG310]

ZyXEL

Based on 8 reviews Check latest price

Product description

ZyXEL Next-Generation USG with 300 VPN Tunnels, SSL VPN, 8 GbE WAN/LAN/DMZ (USG310)

  • High-performance, high-value Next Generation Firewall (NGFW) for small and medium-sized businesses
  • Anti-malware protection with firewall, anti-virus, anti-spam, content filtering, IDP, next-generation application intelligence and SSL inspection
  • Robust SSL, IPSec and L2TP over IPSec VPN connectivity and VPN high availability (HA)
  • Built-in WLAN controller for centralized AP management and effortless WLAN scalability of up to 18 Aps
  • Comprehensive mobile broadband USB modem compatibility and multi-WAN load-balancing, failover and fall back support
  • Includes 1 Year UTM CF, Kaspersky AV, AS, IDP

User questions & answers

Question: Does it include application, and AP
Answer: Thank you for your inquiry. If you plan on doing strictly SPI Firewall with no UTM features, then it is capable of 5GB firewall throughput so would support your 1Gb internet. With UTM features turned on, it has a test max of 650Mbps so closer to 350Mbps real life speeds. If you are looking for closer to 1Gb throughput with full UTM, there will be a Zyxel ATP product that will be more capable of the full wire speed UTM.
Question: I have 1gb internet will this provide line speed through the fw or only 300mbps like other zywall products
Answer: Yes this product comes with one year UTM services included.
Question: Does the equipment zyxel usg 1100 include the UTM licenses for one year
Answer: You can certainly use it to connect to them, but actual management of Ubiquiti WAPs can only be done by Ubiquiti's controller software running either on a computer or one of their dedicated devices accessed by any web browser or IOS app.
Question: Can I use the built in wlan controller to set up ubiquity access points ? Those are what I have in place right now
Answer: I bought this router specifically because it was labeled as CenturyLink approved. It was not. CenturyLink would not support the non-branded router and I was forced to program specific parameters myself. In my case, I did not receive a “CenturyLink” router.

Zyxel Next Generation Unified Security Gateway with WLAN Controller and 4 LAN/DMZ, 2 WAN, 1 OPT Ports [USG110]

ZyXEL

Based on 17 reviews Check latest price

Product description

Zeal next generation unified security Gateway with WLAN controller and 4 LAN/DMZ, 2 WAN, 1 opt ports [USG110]

  • Includes 1 Year of Anti-Virus (AV), Intrusion Detection and Prevention (IDP), Anti-Spam (AS), and Content Filtering (CF) UTM Services.
  • 7 x GbE RJ-45, 2 x USB (multi-WAN and mobile broadband)
  • 1,600 Mbps firewall throughput
  • 400 Mbps VPN throughput (IPsec/L2TP: 100 Included, SSL: 5 Included Upgradable to 25 Max)
  • Comprehensive Anti-malware threat protection with firewall, anti-virus, content filtering,anti-spam,Intrusion detection and prevention, application intelligence and SSL inspection
  • Built in WLAN Controller for centralized management of ZyXEL access points
  • User-aware policy engine can set bandwith or network access based on user login or using Single Sign On
  • Comprehensive Anti-malware threat protection with firewall, Kaspersky anti-virus,content filtering,anti-spam,Intrusion detection & prevention, application intelligence and SSL inspection

User questions & answers

Question: How to renew the UTM service online
Answer: The supported models include NWA5123-AC (B017V5LELU), 802.11ac 2x2, for general environment like cafe, small office and NWA5123-AC HD (B0776XPP6G), 802.11wave 2 3X3, for higher user density, like classroom, large office, and WAC6303D-S (B078JPFY6F), 802.11ac 3X3 with smart antenna for extremely high-density environment, like conference center, exhibition center. I've included the ASIN numbers to make them easier to find. The complete list can be found at https://www.zyxel.com/solutions/AP-Controller-Technology-20140627-854642.shtml
Question: The amazon listing shows usg60 (20 users) & usg110 (50 users). zyxel says usg60 (128 users) & usg110 (200 users) which is right
Answer: You do not need to implement vpn if you purchased this product and all 4 licenses are up to date and paid! That should have been the reason for your purchase. I cancelled vpn protection once this product was in place and been very happy.
Question: I bought this item and it has no 1 year utm activated or anything. how do i activate it
Answer: Yes, you can block any https site you want, as long as a UTM security license is active, which are available in 12-month subscriptions. No, the router functions as a very competent and configurable firewall without any security license installed.

Product features

USG 110

With an increasing number of ways to access and utilize the internet, it has become more important than ever to ensure that your network is protected.

ZyWALL USG 110 includes a host of advanced UTM features to ensure that your network is protected against all possible threats. With its unified security policy, the USG110 allows you to easily apply all policy criteria to every UTM feature, reduce configuration time, and get more streamlined policy management.

Zyxel USG Advanced Series delivers high-access quality to help businesses satisfy the demand for always-online communications. For internal deployments, the USG Advanced Series provides active-passive High-Availability (HA) service to support device or connection failover.

Zyxel One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, Zyxel One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. Zyxel One Network presents an easy-to-use tool, Zyxel One Network Utility (ZON Utility), to realize speed network setup. Zyxel Smart Connect allows Zyxel networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. Zyxel One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

Impregnable protection and optimization

Zyxel USG Advanced Series thoroughly protects networks with industry-leading firewall, Anti-Malware/ Virus, Anti-Spam, Content Filtering, IDP, and Application Patrol functionality. Regulate unauthorized use of Web applications over your network, such as Facebook, Google apps, and Netflix, among others. Zyxel security measures are enhanced with SSL Inspection, blocking threats hidden in SSL-encrypted connections while facilitating deeper policy enforcement. Furthermore, newly improved Content Filtering 2.0 enhances HTTPS Domain Filter, Browser SafeSearch, and Geo IP Blocking for an array of security enhancements to ensure clean Web connections.

Multi-element service access

The Zyxel USG Advanced Series helps SMBs meet the connectivity demands of an ever-growing legion of wireless devices. Each gateway in the series is integrated with a WLAN controller that enables users to manage up to 34 APs through a centralized user interface. Businesses can now easily scale up WLAN and provide Wi-Fi in multiple areas, like meeting rooms and guest reception areas.

Hotspot Management features — such as Billing System, Walled Garden, Multiple Authentications, 3rd Party Social Login, and User Agreement — to give businesses with a single unified solution for all required functionality.

Swift and secure firmware upgrades

Locating firmware updates — not to mention identifying correct versions for your device and managing their installation — can be a complex and confusing ordeal.

The Zyxel USG Series solves this with its new Cloud Helper service. Cloud Helper provides a simple step to look for up-to-date firmware information. New firmware is immediately made available upon release from our official database to ensure its authenticity and reliability.

Stay Secure and Up-to-Date with OneSecurity.com

OneSecurity offers informative network security resources and the know-how to assist businesses and IT administrators in keeping their network operations safe in the digital age. Information and resources on usage and configuration can be easily found. IT staff can quickly and easily catch up on the latest threats, and then proceed to walkthroughs and troubleshooting protocols with the help of easy-to-follow FAQs — all provided to help users secure their networks and simplify management of our UTM products.

Zyxel Nebula Cloud Managed 300 Mbps Security Gateway, 10 VPN tunnles [NSG50]

ZyXEL

Based on 3 reviews Check latest price

Product description

The ZyXEL Nebula NSG50 cloud managed security Gateway is built with remote management and ironclad security for organizations with growing numbers of distributed sites. With the extensive suite of security features that includes icsa-certified firewall, IPsec VPN connectivity, Intrusion detection and prevention (IDP) as well as Application patrol, the NSG50 provides deep, extensive protection to meet everything that small- to mid-size businesses would need. As the ZyXEL Nebula NSG50 has been completely designed for cloud managed, The installation and management become simpler than ever. Through Nebula's cloud interface, administrators are able to create site-wide policies and monitor all the branch sites effortlessly even without training

  • Complete networking, security and application control over the cloud (300Mbps SPI firewall)
  • Zero-touch site-to-site VPN (70Mbps VPN) up to 10 VPNs
  • Secure networks with next-gen firewall, IDP and application Patrol* (120Mbps IDP)

User questions & answers

Question: Does it come with 1 year license for both nebula and ids services
Answer: Yes. This installs behind your network modem and will provide excellent security. If you configure the web content monitoring to block the advertising and web-analytics, you'll also see noticeable performance improvements, too.

Product features

Zyxel Nebula NSG50

Get complete networking, security and application control all over the cloud with ease. Zyxel NSG50 Nebula gateway can be quickly and easily deployed at a remote location of your choosing using zero-touch cloud provisioning.

It automatically pulls policies and configuration settings, receives seamless firmware upgrades and security signature updates from the cloud without the need for on-site networking expertise.

NSG50 is complete with a 300Mbps SPI Firewall and zero touch site-to-site VPN of 100Mbps. Networks are secure with the NSG50's Next Gen Firewall, Application Patrol IDP and built-in DHCP, NAT, QoS and VLAN management.

Zero-Touch VPN

Keeping branch locations securely connected is easier than ever. With the Zyxel Nebula Security Gateway, either site-to-site or hub-and-spoke VPN connections can be configured with simplicity through a few clicks in the Nebula Control Center, without complex VPN configuration steps.

Slick Policy Management

Configuration of firewall and security features is streamlined for faster, easier and more consistent policy settings. The unified configuration facilitates easy application of specific criteria to all security features where any configuration made in the Nebula Control Center will automatically transfer to all connected Nebula gateways.

Effective Network Protection

Nebula's intrusion detection and prevention system scans multiple layers and protocols to inspect vulnerabilities invisible to simple port-and protocol-based firewalls. This is achieved through Deep Packet Inspection (DPI) technology that provides effective protection against intrusions.

Powerful Application Security

Users can block unproductive applications to boost productivity and prevent bandwidth abuse. The Zyxel Nebula gateways can identify, categorize and manage social media websites, gaming, and other Web applications that could distract employees and cause unproductivity.

Latest Reviews

View all