Project Description
Zyxel全新智能防火牆- USG FLEX 100 / 200 / 500正式登場!
引入Cloud
Machine Learning及Cloud Query Express Mode應對未知網絡威脅
詳細Dashboard
/ SecuReport
流量分析及網絡威脅統計
一年免費UTM License全面網絡防護功能
·
Web
Filtering
·
IPS
(IDP)
·
Application Patrol
·
Anti-Malware
·
Email
Security
·
IPSec
/ SSL / L2TP
·
通過Microsoft Azure及AWS認證
·
WLAN
Controller
為應付多種在全球肆虐的勒索軟件及未知的網絡威脅,Zyxel特別設計出新一代防火牆—USG FLEX系列,引入最新的雲端學習功能,更導入Cloud Query Anti-Malware,大幅加快應對未知的網絡攻擊威脅。系列現推出3個型號 –
USG FLEX 100 / 200 / 500,適合中小企應用,同時擁有一系列USG的優秀功能,包括
Multi-WAN、VPN、Firewall、Email Security、Web Filter、IPS/IDP、Application Patrol、WLAN Controller等功能。USG
FLEX的GUI Dashboard更能為網管人員提供多種流量總覽表,而SecuReport更能提供深入的威脅統計,不論網絡運作及管理功能都更切合現今企業需求!
阻擋、學習、防禦未知威脅
USG FLEX系列擁有多層式網絡防禦機制
(Anti-Malware, URL Threat Filter, Intrusion Prevention,
Application
Patrol、Web Filtering) ,採用cybersecurity業界領先的企業,提供一個實時及多重來源的網絡威脅database,能有效阻擋惡意、可疑的網絡流量及高危的網絡行為,令營商網絡更安全。引入雲端智能分析學習(Cloud Machine Learning),在經歷每一次威脅後,系統會持續學習及增加雲端數據庫的資料,令整個USG FLEX系列的網絡防禦能力變得更強大。雲端智能系統將具威脅的資訊傳遞給所有USG FLEX,並持續的進行更新,而學習及分享的規模更是全球性的,在協同效應下,令USG
FLEX對隱藏的網絡威脅擁有更出色的防護能力。
報表及分析功能
USG FLEX內建dashboard功能,以user-friendly的資訊圖表顯示網絡流量總覽及威脅攻擊的統計資料,令網管人員更能了解網絡安全狀況並進行即時的保護措施。當網管人員需要詳細資料並進行分析及客制報表時,Zyxel的SecuReport
(需要UTM License)能滿足MSP對客戶的增值服務需求。
Multi-WAN Firewall效能強大
USG FLEX 100提供全
1* WAN
+ 4* LAN/DMZ + 1* SFP,Firewall效能高達900Mbps,提供300,000 max concurrent sessions;
USG FLEX 200提供全
2* WAN + 4* LAN/DMZ + 1* SFP,Firewall效能高達1.8Gbps,提供600,000 max concurrent sessions;
USG FLEX 500提供全
7* Configurable ports + 1* SFP,Firewall效能高達2.3Gbps,提供1,000,000 max concurrent sessions;
支援4G USB Dongle設計,支援Multi-WAN load balance, failover功能支援Static / Policy / Dynamic routing;支援VLAN tagging (802.1Q),對50-300人的小至中型公司用戶都能夠應付。
完整VPN功能
更通過Microsoft Azure及AWS認證
USG FLEX提供高效能的IPSec、L2TP over IPSec及SSL
VPN,適合各種點對點或點對用戶端的VPN部署。支援先進及安全的SHA-2(512-bit)加密,保障企業用戶通信安全。支援多種algorithm及authentication方式,兼容性極高,減少加密連線的障礙。
為提高VPN連線的可靠性,USG FLEX的Multi-WAN設計支援VPN的failover及Load balance能力,當其中一個WAN的寬頻線連線中斷時,另一個WAN的線路能夠即時頂替,當連線回復時重新以預設的WAN連接VPN,確保企業間的訊息傳遞不會輕易中斷。
緊貼Cloud應用的大趨勢,USG FLEX分別通過Microsoft Azure及AWS的cloud-based
infrastructure的連線認證,令用戶組建的hybrid
network更有彈性。
整合WLAN Controller無線網絡控制器
USG FLEX結合無線網絡控制器AP Controller (APC version 3.40),支援
fast roaming (802.11k/v/r),Wireless L2 isolation、Multiple SSID with LAN,內建2部AP的管理授權,並可透過升級管理達24-70部ZyXEL
AP。USG FLEX 200 / 500更支援Captive
Portal Page,可以不同認證方式登入連線。
USG FLEX UTM License
Model |
USGFlex-500 |
USGFlex-200 |
USGFlex-100 |
UTM License (1-year bundled) |
|||
Web Filtering |
Yes |
Yes |
Yes |
IPS(IDP) |
Yes |
Yes |
Yes |
Application Patrol |
Yes |
Yes |
Yes |
Anti-Malware |
Yes |
Yes |
Yes |
Email Security |
Yes |
Yes |
Yes |
SecuReporter |
Yes |
Yes |
Yes |
USG FLEX Hospitality License
Model |
USGFlex-500 |
USGFlex-200 |
USGFlex-100 |
Hospitality License (30-day Trial) |
|||
Managed AP Service |
Yes |
Yes |
Yes |
Hotspot Management |
Yes |
Yes |
- |
Max/Included |
72 / 8 |
40 / 8 |
24 / 8 |
USG FLEX
Features:
Firewall
·
ICSA-certified corporate firewall
·
Routing and transparent (bridge) modes
·
Stateful packet inspection
Unified Security Policy
·
Unified policy management interface
·
Support Content Filtering,
·
Application Patrol, firewall (ACL/SSL)
IPS(IDP)
·
Routing and transparent (bridge) mode
·
Signature-based and behavior based scanning
·
Customized signatures supported
Application Patrol
·
Granular control over the most important applications
·
Identifies and controls application behavior
·
Supports 30+ application categories
Anti-Malware
·
Support Stream-based
scan engine and Express mode for cloud query
·
No file size limitation
• Works with local cache for stream mode
·
Express mode support
over 30 billion cloud databases and growing
·
HTTP(s), FTP(s),
SMTP(s), POP3(s) protocol support
E-mail Security
·
Transparent mail interception via SMTP and POP3 protocols
·
Spam and Phishing mail
detection
·
Blacklist and whitelist
support
URL
Threat Filter
·
Botnet C&C websites
blocking
·
Malicious URL blocking
Content Filtering
·
HTTPs domain filtering
·
SafeSearch support
·
Whitelist websites enforcement
IPSec VPN & SSL VPN
WLAN Management
·
802.11k/v/r support for wave 2 11ac AP
·
Wireless L2 isolation
·
Customizable captive portal page
Connection
·
Routing mode, bridge mode and hybrid mode
·
Ethernet and PPPoE
·
NAT and PAT
Authentication
·
Local user database
·
External user database: Microsoft Windows Active Directory, RADIUS, LDAP
·
IEEE 802.1x authentication
Model |
USGFlex-500 |
USGFlex-200 |
USGFlex-100 |
Hardware
Specifications |
|||
Port (All GbE) |
7x (Configurable) |
4x LAN/DMZ |
4x LAN/DMZ |
USB 3.0 Port |
2 |
2 |
1 |
Fanless |
- |
Yes |
Yes |
System
Capacity & Performance |
|||
SPI Firewall (Mbps) |
2,300 |
1,800 |
900 |
VPN (Mbps) |
810 |
450 |
270 |
UTM (AV+IDP) (Mbps) |
800 |
550 |
360 |
Max TCP Sessions |
1,000,000 |
600,000 |
300,000 |
Max IPSec VPN |
300 |
100 |
40 |
Concurrent SSL VPN |
150 |
60 |
30 |
VLAN Interface |
64 |
16 |
8 |
2-Factor Authentication |
Yes |
Yes |
Yes |
Amazon VPC |
Yes |
Yes |
Yes |
Device HA Pro |
Yes |
- |
- |
ZyXEL Website:
http://www.zyxel.com