Project Description

Zyxel新一代ATP智能防火牆

小型辦公室無線WiFi型號 - ZyWALL ATP100W (AC1750 Wireless)

企業級型號 - ZyWALL ATP700 / ATP800

引入Cloud Machine Learning及Sandboxing應對未知網絡威脅

詳細Dashboard / SecuReport 流量分析及網絡威脅統計

一年免費Gold Security Pack全面網絡防護功能

Sandboxing

Content Filter + Botnet Filter

Application Patrol

Email Security

Anti-Malware

Cloud Query

Threat Intelligence Machine Learning

IDP

Geo Enforcer

Wireless Controller

SecuReporter

近年多種勒索軟件肆虐全球，令高度依賴網絡的中小企及大型機構都聞之色變，同時揭示出傳統防火牆不擅於應付突發的未知威脅，有見及此，Zyxel特別設計出新一代智能防火牆—ATP系列，引入最新的雲端學習功能，更導入Sandboxing沙盒機制，大幅加快應對未知的網絡攻擊威脅。最新推出的型號包括配備AC1750  Wireless的入門型號 – ATP100W；Firewall Throughput高達 6,000Mbps (ATP700)及8,000Mbps (ATP800)的適合企業級型號，系列同時擁有一系列ZyWALL的優秀功能，包括 Multi-WAN、VPN、Firewall、Anti-spam、Content Filter、ADP/IDP、Anti-Virus、Application Patrol、WLAN Management等功能。ZyWALL ATP 的GUI Dashboard更能為網管人員提供多種流量總覽表及深入的威脅統計，不論網絡運作及管理功能都更切合現今企業需求！

阻擋、學習、防禦未知威脅

ZyWALL ATP系列擁有多層式網絡防禦機制(Application Security、Web Security、Geo Enforcer、Intrusion Prevention、Malware Blocker & Cloud Sandboxing)，能有效阻擋惡意、可疑的網絡流量及高危的網絡行為，令營商網絡更安全。引入雲端智能分析學習(Cloud Machine Learning)，在經歷每一次威脅後，系統會持續學習及增加雲端數據庫的資料，令整個ZyWALL ATP系列的網絡防禦能力變得更強大。雲端智能系統將具威脅的資訊傳遞給所有ZyWALL ATP，並持續的進行更新，而學習及分享的規模更是全球性的，在協同效應下，令ZyWALL ATP對隱藏的網絡威脅擁有更出色的防護能力。

沙盒功能(Sandboxing)

ZyWALL ATP系列特別設立了一個雲端的隔離環境—沙盒(Sandboxing)，可用於容納未知威脅的檔案，透過模擬執行或打開檔案，從而偵測出傳統防護機制下未能辨識的新型惡意程式，大大縮短新威脅的數據庫更新時間，更有效防範零日攻擊(zero-day attacks)。

報表及分析功能

ZyWALL ATP內建dashboard功能，以user-friendly的資訊圖表顯示7日(reboot起計)的網絡流量總覽及威脅攻擊的統計資料，令網管人員更能了解網絡安全狀況並進行即時的保護措施。當網管人員需要詳細資料並進行分析及客制報表時，Zyxel的SecuReport (需要Gold Security Pack)能滿足MSP對客戶的增值服務需求。

Multi-WAN Firewall效能強大  50~800人辦公室適用

ZyWALL ATP100W提供全 1* WAN + 2* LAN/DMZ + 1*OPT + 1* SFP， Firewall效能高達1Gbps，提供300,000 max concurrent sessions，對50人的小型公司用戶都能夠應付。

ZyWALL ATP700 / ATP800提供全 12* Configurable ports + 1* SFP， Firewall效能高達6Gbps / 8Gbps，提供1,600,000 / 2,000,000 max concurrent sessions，對500-800人的企業用戶都能夠應付。

 

完整VPN功能

ZyWALL ATP提供高效能的IPSec、L2TP over IPSec及SSL VPN，適合各種點對點或點對用戶端的VPN部署。支援先進及安全的SHA-2(512-bit)加密，保障企業用戶通信安全。支援多種algorithm及authentication方式，兼容性極高，減少加密連線的障礙。

為提高VPN連線的可靠性，ZyWALL ATP的Multi-WAN設計支援VPN的failover及Load balance能力，當其中一個WAN的寬頻線連線中斷時，另一個WAN的線路能夠即時頂替，當連線回復時重新以預設的WAN連接VPN，確保企業間的訊息傳遞不會輕易中斷。

 

ATP100W提供AC1750無線功能

ZyWALL ATP100W切合辦公室環境的無線應用需要，內建Dual-band無線功能，採用AC1750無線傳輸技術，配合3條可拆除式天線，提供2.4GHz (450Mbps) + 5GHz(1300Mbps)無線網絡。

 

Gold防護服務授權 (ZyWALL ATP提供首年Gold Security License)

License Service

Feature

Gold

Sandboxing

Sandboxing

Yes

Web Security

Content Filter

Yes

 

Botnet Filter

Yes

Application Security

App Patrol

Yes

 

Email Security

Yes

Malware Blocker

Anti-Malware

Yes

 

Cloud Query

Yes

 

Threat Intelligence Machine Learning

Yes

Intrusion Prevention

IDP

Yes

Reputation Filter

IP Reputation Filter

Yes

Geo Enforcer

GeoIP

Yes

Managed AP Service

Wireless Controller

Unlock to max

SecuReporter

SecuReporter Premium

Yes

 

 

 

ZyWALL ATP Features:

Firewall/Security

·         ICSA-certified corporate firewall

·         Routing and transparent (bridge) modes

·         Stateful packet inspection

Unified Security Policy

·         Unified policy management interface

·         Support Content Filtering,

·         Application Patrol, firewall (ACL/SSL)

Intrusion Detection and Prevention (IDP)

·         Routing and transparent (bridge) mode

·         Signature-based and behavior based scanning

·         Customized signatures supported

Application Patrol

·         Granular control over the most important applications

·         Identifies and controls application behavior

·         Supports 30+ application categories

Sandboxing

·         Cloud-based multiengine inspection

·         Support HTTP/SMTP/POP3/FTP

·         Real-time threat synchronization

Anti-Malware

·         Stream-based scan engine

·         HTTP, FTP, SMTP, POP3 protocol support

·         Automatic signature updates

Hybrid Mode Malware Scanning

·          Both stream-based engine and cloud query concurrently in action

·         Works with local cache and over 30 billion databases and growing

·         HTTP, HTTPS, and FTP protocol supported

E-mail Security

·         Transparent mail interception via SMTP and POP3 protocols

·         Spam, Phishing, mail detection

·         Blacklist and whitelist support

IP Reputation Filter

·         IP-based reputation filter

·         Supports 10 Cyber Threat Categories

·         Supports external IP blacklist

DNS Filter

·         Block clients to access malicious domain

·         Effective against any IP protocol

URL Threat Filter

·         Botnet C&C websites blocking

·         Malicious URL blocking

·         Supports External URL blacklist

Content Filtering

·         HTTPs domain filtering

·         SafeSearch support

·         Whitelist websites enforcement

Geo Enforcer

·         Geo IP blocking

·         Geographical visibility on traffics statistics and logs

·         IPv6 address support

IPSec VPN & SSL VPN

WLAN Management

·         802.11ax Wi-Fi 6 AP and WPA3 support

·         802.11k/v/r support

·         Wireless L2 isolation

·         Supports auto AP FW update

·         Scheduled WiFi service

 

Model

ZyWALL ATP800

ZyWALL ATP700

ZyWALL ATP100W

Hardware Specifications

10/100/1000 Interfaces

12 Configurable,
2x SFP

12 Configurable,
2x SFP

3x LAN/DMZ, 1x WAN,
1x SFP, 1x OPT

USB 3.0 Ports (Supports 4G Dongle)

2

2

1

Wireless

-

AC1750

Console Port

DB9

RJ45

Rack-mountable

Yes

-

Fanless

-

Yes

System Capacity & Performance

SPI Firewall Throughput, Mbps

8,000

6,000

1,000

VPN Throughput, Mbps

1,500

1,200

300

IDP Throughput, Mbps

2,700

2,200

600

AV Throughput, Mbps

2,000

1,600

380

UTM Throughput (AV and IDP)

1,900

1,500

380

Max TCP Concurrent Session

2,000,000

1,600,000

300,000

Max Concurrent IPSec VPN Tunnels

1,000

1,000

40

Concurrent SSL VPN Tunnels

500

150

30

VLAN Interface

128

128

8

WLAN Management (Max / Default)

520 / 8

264 / 8

24 / 8

VPN

IKEv2, IPSec, SSL, L2TP / IPSec

SSL (HTTPS) Inspection

Yes

Device HA Pro

Yes

-

 

 

PDF資料請按此

 

ZyXEL Website: http://www.zyxel.com