Manuals+

User Guide for ZYXEL NETWORK models including: USG FLEX 700H, USG FLEX 500H, USG FLEX 200H, USG FLEX 200HP, USG FLEX 700H Unified Security Gateways Firewall, USG FLEX 700H, Unified Security Gateways Firewall, Security Gateways Firewall, Gateways Firewall, Firewall

Simplify and Strengthen Your Security - Zyxel Networks

Services Key Features Security Service Sandboxing Cloud-based sandbox technology against unknown threats • Comprehensive inspection for a wide range file types • Cloud-based sandbox provide instant protection without needing a dedicated

[PDF] Simplify and Strengthen Your Security - Zyxel

It offers powerful UTM performance with automatic responses to expand protection from firewalls to access points, all while minimizing computing power usage.


File Info : application/pdf, 13 Pages, 2.84MB

PDF preview unavailable. Download the PDF instead.

Security Solution Guide 2025 0 
Simplify and Strengthen Your Security
Security Solution Guide

Simplify and strengthen your security

How safe is your network?

Effective and scalable protection

In today's digital landscape, cyber threats are evolving at an alarming rate. With over 8 billion data breaches reported in 2023* alone, the need for robust network security has never been more critical. Cybercriminals continuously refine their tactics, targeting vulnerabilities in both traditional IT infrastructure and cloud-based systems. The surge in remote work and increased reliance on digital services have exposed businesses of all sizes to unprecedented risks. Small and mediumsized businesses (SMBs) are particularly vulnerable, often lacking the resources to effectively counter these sophisticated threats. It's crucial to implement a security solution that not only addresses current risks but also adapts to emerging threats efficiently and cost-effectively.
*Source: https://www.itgovernance.co.uk/blog/list-of-data-breaches-and-cyber-attacks-in-2023

Zyxel believes it's really important to make protecting the network as simple as possible, and it's why we've been developing a new range of unified security gateways that provide all the protection that small businesses need, without the complexity. By deploying one of our firewall appliances at the bridge between your network and the internet, you can safeguard against threats such as viruses and ID theft, repel spam emails, and apply simple rules that will govern what sort of content can be sent across the connection. The new USG LITE 60AX gives you firewall protection and automatic security for your whole setup without the need for a licensing fee.

2 Solution Guide Security

Find the ideal appliance for your business

Users

Ultimate H USG FLEX H

Ultimate ATP

Flexibility USG FLEX

Effortless USG LITE

Up to 500 USG FLEX 700H
Up to 350

ATP800 ATP700

USG FLEX 700

Up to 150 USG FLEX 500H

ATP500

USG FLEX 500

Up to 50

USG FLEX 200H USG FLEX 200HP

ATP200

USG FLEX 200

Up to 25

USG FLEX 100H USG FLEX 100HP

ATP100

USG FLEX 100 USG FLEX 100AX

Up to 10

USG FLEX 50H USG FLEX 50HP

USG FLEX 50 USG FLEX 50AX

Up to 5

USG LITE 60AX SCR 50AXE
Solution Guide Security 3

Zyxel security solutions

USG FLEX H Firewalls USG FLEX Firewalls

The high-performance USG FLEX H series provides 3x firewall/UTM/VPN throughput and PoE+ interfaces to prepare for the multi-G era. It offers multi-layered protection against cyber threats through Zyxel AI cloud and extends the same security to remote networks with enhanced SecuExtender. Get enterprise-grade security at lightning speed for your small or mid-sized business.

The USG FLEX series provides cloud-based management and collaborative protection for small and mid-sized businesses. It offers powerful UTM performance with automatic responses to expand protection from firewalls to access points, all while minimizing computing power usage.

ATP Firewalls

Security Router

The ZyWALL ATP Firewall Series is empowered with smart cloud intelligence giving seamless protection against all those Advanced Persistent Threats, achieving ultimate in-depth defense of future unknown attacks.

The USG LITE series is a secure cloud-managed router that offers business-class firewall, VPN gateway, blazingly fast WiFi, and built-in security to safeguard against ransomware and other threats. It's a perfect solution for teleworkers or small businesses/offices looking for easy-to-manage and subscription-free network security.

Security services and licenses
Find the perfect licensing option for your security devices with our flexible options tailored to meet your business needs. Our security licenses cover a range of solutions, including security, connectivity, management, reporting, and vertical-specific licenses. With our expert guidance and support, you can rest assured that your business is fully protected from all potential security threats, now and in the future.

4 Solution Guide Security

Security services and licenses

For purchase/renewal of licenses, go directly on our new e-commerce platform Zyxel Marketplace or contact our reseller.

Services Security Service Anti-Virus/Malware

Key Features
Scan files for viruses, Trojan, worms, malwares before they reach your network. · Stream-based scan technology without file size limitation · Daily data feed of top-ranked threats

Anti-Spam/Email Security Web Filtering

Fast detect with cloud-based database/mail fingerprints to block spam/phishing mail with malicious contents · IP reputation filter provides low latency reaction · Support black/white listing for custom policies · Cloud-based database provide real-time protection
Cloud-based real-time access control for inappropriate, unproductive, illegal and malicious websites · Categorized website access management for increased efficiency · Granular policies controlled by IP address, user, group, or schedule

IPS Application Patrol

Deep-packet inspection across all ports and protocols at gateway to against known attacks from network · Shields vulnerabilities before they can be exploited and eliminates the operational
pains of emergency patching · Customized signature support to create your own rules · Constant signature auto-updates
Automatically categorize and manage the network applications usage · Granular policies control by IP address, user, group, schedule · Profile based policy to ensure network quality and easy manage business rule

Geo Enforcer

Manage network traffic by mapping IP address to geographical regions to prevent fraud or cyber attacks · Geographical visibility for traffic statistics and logs · IPv6 address support · Automatic IP/geography database update

Solution Guide Security 5

Services Security Service Sandboxing
Reputation Filter
Secure WiFi

Key Features
Cloud-based sandbox technology against unknown threats · Comprehensive inspection for a wide range file types · Cloud-based sandbox provide instant protection without needing a dedicated
hardware or software upgrade
Block botnet infection and prevent drive-by download from infected websites · IP/URL feeds to detect/block botnet commands and control activities · Cloud-based URL feeds to block access to anomalous websites · IP-based reputation filter · Supports 10 Cyber Threat Categories · Inbound & Outbound traffic filtering · Blacklist and whitelist support
· Secure tunnel and managed AP service · L2 access between home and office network · Enforcing 2FA with Google Authenticator · WPA2 Enterprise (802.1x) supported

Cloud Security Service Astra
Vertical Solutions Hotspot Management

· Cloud-based service and email protection for Office 365, G Suite and on-premise e-mail
· Stop unwanted spam, phishing and malware with real-time threat intelligence · No change to your existing infrastructure, zero maintenance · Reduce management overhead and stop wasting IT admin resources · Respond faster with web management and monitoring
· Authentication with Wall Garden · Advertisement and SMS billing & free time service accounting for guest · Support SP350E printer manager support purple WiFi and third-party social log in · Billing replenishment

Services Vertical Solutions Managed AP Service

Key Features
· Integrated AP controller as central management to provide flexible deployment options
· AP auto discovery and provisioning · AP forwarding compatibility

Device High Availability Pro

· Device failure detection and notification · Configuration auto-sync and link monitoring · Smart handover through dedicated Heartbeat Link · NAT/Firewall/VPN Sessions synchronization

VPN Client Software SecuExtender VPN Client
Network Premium Single Sign-On

· Secure and reliable remote access, preserving business operations and data integrity
· Supports both IPSec/SSL VPN and secure authentication methods · Simple to deploy with remote VPN wizard (IKEv2 preferred) · Runs on both Windows and macOS operating systems
· Simplified single sign in to multiple resources · Improved user experience without repetitive logging in between various web browsers · Login mechanism works with any protocol, not just HTTP

Management & Reporting Cloud CNM SecuReporter

· Multidimensional analytics on abnormal behaviors · SecuPilot AI-powered insights for unmatched network visibility · Cloud-based real-time monitoring and alerts · Effective event correlation and user behavior analytics · Intuitive dashboard and customizable report

6 Solution Guide Security

Solution Guide Security 7

Pick a bundle. No more hassle

License by bundle

A bundle license consists of multiple services that are grouped together. They are designed for your best convenience when you need to ensure your network is

empowered with holistic functionality such as seamless threat protection or full connectivity features. Pick the right bundle and experience less hassle.

Pack Firewall Series

Security Licensed Service

Anti-Malware/ Virus

Web Filtering/ Content Filtering

Sandboxing

Reputation Filter

IPS/IDP

Application Patrol

Email Security/ SecuReporter Anti-Spam

Security Profile Sync

Collaborative Detection & Response

Connectivity Licensed Service

Ransomware Prevention Premium

Network Premium

Secure WiFi

Nebula Professional Pack

Scan files at the gateway for viruses and other threats

Block access to malicious or risky web sites

Cloud-based sandbox technology against unknown threats

Block botnet infection and prevent drive-by download from infected websites via IP and URL detection

Deep-packet inspection against known attacks from network

Automatically categorize and manage the network application usage

Fast detection to block spam/ phishing mail with malicious contents

Cloud-based security analytics and report with 30-day log retention

An easy-to-use tool to help business sync up security profiles across multiple networks

Automatically contain threats at the network edge

Gold

 USG FLEX H*2



Security Pack ATP





USG FLEX*1





UTM

USG FLEX*1

Security





Pack





























































Entry USG FLEX H

Defense



Pack

Content USG FLEX 50(AX)



Filter

Pack USG20(W)-VPN













Elite Pack

USG LITE SCR



*1: USG FLEX 50(AX) is not supported for Gold and UTM Security Pack *2: Network Premium, Collaborative Detection & Response, and Secure WiFi for USG FLEX H series will be available later and are subject to changes without notice. *3: Priority Support is available to customers with a Pro Pack organization or those using USG FLEX H series firewalls with Gold Security Pack or Entry Defense Pack licenses. Eligible customers can open support tickets for prioritized assistance.

Real-time

Simplified single Secure tunnel

updated threat sign in to multiple and managed

intelligence

resources

AP service















  

A full feature set of cloud configuration, deployment, moniing and management
  
*3
(Priority Support Only)


8 Solution Guide Security

Solution Guide Security 9

Licensed service by model

Security

Compatible Security Appliances

Licensed Service
Web Filtering/ Content Filtering

Application Patrol

Anti-Malware/Virus

IPS/IDP

Email Security/ Anti-Spam

Security Profile Sync

Collaborative

SecuReporter

Detection & Response

Sandboxing

Reputation Filter

SecuExtender VPN Client

Block access to malicious or risky web sites

Automatically categorize and manage the network application usage

Scan files at the gateway for viruses and other threats

Deep-packet inspection against known attacks from network

Fast detection to block spam/phishing mail with malicious contents

USG FLEX 50H/100H/ 200H/500H/700H*











ATP100(W)/200











ATP500/700/800











USG FLEX 50(AX)



USG FLEX 100(AX/W) 









USG FLEX 200











USG FLEX 500/700











USG LITE 60AX





SCR 50AXE





*: Network Premium, Security Profile Sync, Collaborative Detection & Response, and Secure WiFi for USG FLEX H series will be available later and are subject to changes without notice.

An easy-to-use tool to help business sync up security profiles across multiple networks

     

Automatically contain threats at the network edge
 
  

Cloud-based security analytics and report with 30-day log retention

Cloud-based sandbox technology against unknown threats

Block botnet infection and prevent drive-by download from infected websites via IP and URL detection

SSL VPN and IPSec VPN remote access tool





















































Connectivity

Compatible Security Appliances

Licensed Service
Secure WiFi Network Premium

Hotspot

Concurrent

Management Device

Upgrade

Nebula Professional Pack

Nebula Plus Pack

Default Support for Registered Devices

Licensed Service
Amazon VPC

Microsoft Azure

Managed AP Two-Factor Threat

Geo Enforcer SSL (HTTPS)

Service

Authentication Management

Inspection

Device Insight Device High Zyxel One Availability Pro Network

Nebula Base Pack

Secure tunnel and managed AP service

Simplified single sign in to multiple resources

Various Network Access Control

Top up allowed A full feature

number of

set of cloud

connected

configuration,

clients

deployment,

monitoring

and

management

A new feature set includes the most frequently requested advanced features

Easy network integration with AWS

Easy network integration with Azure

USG FLEX 50H/100H/ 200H/500H/700H*





ATP100(W)/200











ATP500/700/800











USG FLEX 50(AX)











USG FLEX 100(AX/W) 











USG FLEX 200















USG FLEX 500/700

















USG LITE 60AX



SCR 50AXE



*: Network Premium, Security Profile Sync, Collaborative Detection & Response, and Secure WiFi for USG FLEX H series will be available later and are subject to changes without notice.

AP auto discovery and provisioning

Add an extra layer of protection to mitigate the risk of credential leakage or brute force attack

























Prevent ransomware, intrusion, exploit, dark web, ads, VPN proxy and mail fraud & phishing

Manage network traffic by mapping IP address to geographical regions

Unlock encrypted sessions, scan encrypted packets, find threats, and block them

Deploy agentless scanning of the network for discovery and classification of devices

Device failure detection and failover

A Unified installation tool for Zyxel switches, WLAN and gateways



































































License-free feature set with a rich set of management features

   

10 Solution Guide Security

Solution Guide Security 11

Specifications

ZyWALL USG FLEX H Firewalls

Model

USG FLEX 50H/50HP

USG FLEX 100H/100HP

USG FLEX 200H/200HP

Hardware Specifications

Network interfaces

100M/1G Ethernet (RJ-45) 100M/1G/2.5G Ethernet (RJ-45)

1G/2.5G/5G/10G Ethernet (RJ-45)

1G SFP/10G SFP+

IEEE 802.3at (PoE+) Port

Total PoE budget (watts)

USB 3.0 Type-A

Console port

Rack-mountable

Fanless

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

VPN throughput (Mbps)*3

IPS throughput (Mbps)*4

Anti-Malware throughput (Mbps)*4

UTM throughput (Anti-Malware and IPS)*4

Max. TCP concurrent sessions*5

Max. concurrent IPsec VPN tunnels*6

Recommended gateway-to-gateway IPsec VPN tunnels

Concurrent SSL VPN users

VLAN interface

Key Features

Security Service*7

Anti-Malware IPS

Application Patrol

Web Filtering

Reputation Filter

SecuReporter

Sandboxing

Security Profile Sync

Device Insigh

Security WiFi*8

SSL (HTTPS) Inspection

Two-Factor Authentication

VPN,

VPN

Management & Connectivity

Nebula Centralized Management

Device HA

Power Requirements

Power input

Max. power consumption (Watt Max.)

Heat dissipation (BTU/hr)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.) Weight (kg/lb.)

Included accessories

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

Acoustic noise Certifications EMC
Safety

5 Port 5 (50HP only) 30 1 Yes (RJ-45) Yes

8 Port 8 (100HP only) 30 1 Yes (RJ-45) Yes

6 2 Port 2 (2.5G, 200HP only) 30 1 Yes (RJ-45) Yes Yes

2,000 500 1,000 600 600 100,000 20 5 15 8

4,000 900 1,500 1,000 1,000 300,000 50 20 25 16

6,500 1,200 2,500 1,800 1,800 600,000 100 50 50 32

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2/IPSec, SSL Yes -

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2/IPSec, SSL Yes -

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2/IPSec, SSL Yes Yes

50H: 12V D 50HP: 19V DC,3.42 A
50H: 8.86 50HP: 48.65
50H: 32.42 50HP: 175.73

100H: 12V DC, 2A 100HP: 19V DC,3.42A
100H: 17 100HP: 51.2
100H: 40.365 100HP: 194.5

200H: 12V DC, 2A 200HP: 19V DC,3.42A
200H: 22 200HP: 62
200H: 58.75 200HP: 191.9

216 x 143 x 33/8.50 x 5.63 x 1.30 216 x 143 x 33/8.50 x 5.63 x 1.30 272 x 185 x 36/10.7 x 7.30 x 1.42

50H: 1.02/ 2.26 50HP: 1.04/ 2.31

100H: 1.04/2.30 100HP:1.05/2.31

200H: 1.50/3.31 200HP: 1.52/3.35

278 x 189 x 99/10.94 x 7.44 x 3.89 278 x 189 x 99/10.94 x 7.44 x 3.89 427 x 247 x 73/16.81 x 9.72 x 2.87

50H: 1.27/2.80 50HP: 1.55/3.41

100H: 1.62/3.57 100HP: 1.91/4.21

200H: 2.43/5.36 200HP: 2.68/5.92

· Power adapter · Power cord (50HP only) · RJ-45 - RS-232 cable for
console connection

· Power adapter · Power cord (100HP only) · RJ-45 - RS-232 cable for
console connection

· Power adapter · Power cord (200HP only) · RJ-45 - RS-232 cable for
console connection · Rack mounting kit
(optional, by regions)

0°C to 40°C/32°F to 104°F
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F
10% to 90% (non-condensing)
50H: 40°C/ 596100.85308 hr 25°C/ 945046.81927 hr 50HP: 40°C/ 402515.716 hr 25°C/ 665839.12962 hr
-

0°C to 40°C/32°F to 104°F
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F
10% to 90% (non-condensing)
100H: 40°C/ 353878.1057 hr 25°C/ 602150.9604 hr 100HP: 40°C/ 289845.2327 hr 25°C/ 518347.4294 hr
-

0°C to 40°C/32°F to 104°F
10% to 90% (non-condensing)
-30°C to 70°C/-22°F to 158°F
10% to 90% (non-condensing)
200H: 40°C/ 306768.409 hr 25°C/ 528037.0106 hr 200HP: 40°C/ 227747.9662 hr 25°C/ 392638.3847 hr
-

FCC Part 15 (Class B), CE EMC (Class B), RCM (Class B), BSMI
LVD (EN62368-1), BSMI

FCC Part 15 (Class B), CE EMC (Class B), RCM (Class B), BSMI
LVD (EN62368-1), BSMI

FCC Part 15 (Class B), CE EMC (Class B), RCM (Class B), BSMI
LVD (EN62368-1), BSMI

*: This matrix with firmware uOS1.10 or later. *1: Actual performance may vary depending on system configuration, network
conditions, and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets);
IMIX: UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes.

*4: Anti-Malware (with Express Mode) and IPS throughput is measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: Maximum sessions are measured using the industry standard IXIA IxLoad testing tool.
*6: Including Gateway-to-Gateway and Client-to-Gateway. *7: With Zyxel service license to enable or extend the feature capacity. *8: Available in Q2, 2024.

12 Solution Guide Security

ZyWALL USG FLEX H Firewalls

Model

USG FLEX 500H

USG FLEX 700H

Hardware Specifications

Network interfaces

100M/1G Ethernet (RJ-45) 100M/1G/2.5G Ethernet (RJ-45)

1G/2.5G/5G/10G Ethernet (RJ-45)

1G SFP/10G SFP+

IEEE 802.3at (PoE+) Port

Total PoE budget (watts)

USB 3.0 Type-A

Console port

Rack-mountable

Fanless

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

VPN throughput (Mbps)*3

IPS throughput (Mbps)*4

Anti-Malware throughput (Mbps)*4

UTM throughput (Anti-Malware and IPS)*4

Max. TCP concurrent sessions*5

Max. concurrent IPsec VPN tunnels*6

Recommended gateway-to-gateway IPsec VPN tunnels

Concurrent SSL VPN users

VLAN interface

Key Features

Security Service*7

Anti-Malware IPS

Application Patrol

Web Filtering

Reputation Filter

SecuReporter

Sandboxing

Security Profile Sync

Device Insigh

Security WiFi*8

SSL (HTTPS) Inspection

Two-Factor Authentication

VPN,

VPN

Management & Connectivity

Nebula Centralized Management

Device HA

Power Requirements

Power input

Max. power consumption (Watt Max.)

Heat dissipation (BTU/hr)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (Kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Included accessories

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

Acoustic noise

Certifications EMC

Safety

8 4 Port 3, 4 (2.5G) 30 1 Yes (RJ-45) Yes -

8 2 2 2 Port 3, 4 (10G) 30 1 Yes (RJ-45) Yes -

10,000 2,000 4,500 3,000 3,000 1,000,000 300 150 150 64

15,000 3,000 7,000 4,000 4,000 2,000,000 1,000 300 500 128

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2/IPSec, SSL Yes Yes

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2/IPSec, SSL Yes Yes

19V DC, 4.736A 68 211.3

100-240V AC, 50/60Hz, 2A 86.7 235

300 x182 x 43.5/11.81 x 7.17 x 1.71

430 x 250 x 43.5/16.93 x 9.84 x 1.71

1.64/3.62

3.14/6.93

350 x 149 x 244/13.78 x 5.87 x 9.61

512 x 395 x 162/20.16 x 15.55 x 6.38

2.93/6.46

4.90/10.81

· Power cord

· Power cord

· RJ-45 to RS-232 cable for console connection · RJ-45 to RS-232 cable for console connection

· Rack mounting kit

· Rack mounting kit

0°C to 40°C/32°F to 104°F

0°C to 40°C/32°F to 104°F

10% to 90% (non-condensing)

10% to 90% (non-condensing)

-30°C to 70°C/-22°F to 158°F

-30°C to 70°C/-22°F to 158°F

10% to 90% (non-condensing)

10% to 90% (non-condensing)

40°C/ 346653.298 hr 25°C/ 491775.8384 hr

40°C/ 431877.9743 hr 25°C/ 669031.2966 hr

16.86dBA on < 25degC Operating Temperature, 16.86dBA on < 25degC Operating Temperature,

43.76dBA on full FAN speed

43.76dBA on full FAN speed

FCC Part 15 (Class A), CE EMC (Class A), RCM (Class A), BSMI
LVD (EN62368-1), BSMI

FCC Part 15 (Class A), CE EMC (Class A), RCM (Class A), BSMI
LVD (EN62368-1), BSMI

*: This matrix with firmware uOS1.10 or later. *1: Actual performance may vary depending on system configuration, network
conditions, and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets);
IMIX: UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes.

*4: Anti-Malware (with Express Mode) and IPS throughput is measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: Maximum sessions are measured using the industry standard IXIA IxLoad testing tool.
*6: Including Gateway-to-Gateway and Client-to-Gateway. *7: With Zyxel service license to enable or extend the feature capacity. *8: Available in Q2, 2024.

Solution Guide Security 13

ZyWALL ATP Firewalls

Model

ZyWALL ATP100*9

ZyWALL ATP100W

ZyWALL ATP200

Hardware Specifications Interfaces

USB 3.0 ports

Console port

Rack-mountable

Fanless

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

VPN throughput (Mbps)*3

IDP throughput (Mbps)*4

AV throughput (Mbps)*4

UTM throughput (AV and IDP)*4

Max. TCP concurrent sessions*5

Max. concurrent IPSec VPN tunnels*6

VLAN interface

Speedtest Performance

SPI firewall throughput (Mbps)*7

Key Features

Security Service

Sandboxing*8 Web Filtering*8

Application Patrol*8

Anti-Malware*8

IPS*8

Reputation Filter*8

Geo Enforcer

SecuReporter*8

Collaborative Detection & Response*8

Device Insight

Security Profile Sync (SPS)*8

SSL (HTTPS) Inspection

Two-Factor Authentication

VPN Features

VPN Microsoft Azure

Amazon VPC

WLAN Management

Default Number of Managed AP Recommend Max. AP in 1 AP Group

Secure WiFi Service*8

Maximum Number of Tunnel-Mode AP

Maximum Number of Managed AP

Management & Nebula Cloud Mode Connectivity Nebula Cloud Monitoring Mode

Device HA Pro

Link Aggregation (LAG)

Concurrent Devices Logins (max.)

Power Requirements

Power input

Max. power consumption (watt)

Heat dissipation (BTU/hr)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Included accessories

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

Acoustic noise Certifications EMC

Safety

3 x LAN/DMZ, 1 x WAN, 1 x SFP, 1 x OPT 1 Yes (RJ-45) Yes

3 x LAN/DMZ, 1 x WAN, 1 x SFP, 1 x OPT 1 Yes (RJ-45) Yes

4 x LAN/DMZ, 2 x WAN, 1 x SFP 2 Yes (DB9) Yes Yes

1,000 300 600 380 380 300,000 40 8

1,000 300 600 380 380 300,000 40 8

2,000 500 1,200 630 630 600,000 100 16

850

850

900

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 10 Yes 6 24 Yes Yes 64

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 10 Yes 6 24 Yes Yes 64

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 20 Yes 10 40 Yes Yes 200

12 V DC, 2 A max. 12.5 42.65

12 V DC, 2 A max. 12.5 42.65

12 V DC, 2.5 A max. 13.3 45.38

216 x 143 x 33/8.50 x 5.80 x 1.30 216 x 147.3 x 33/8.50 x 5.80 x 1.30 272 x 187 x 36/10.7 x 7.36 x 1.42

0.85/1.87

0.85/1.87

1.4/3.09

284 x 190 x 100/11.18 x 7.48 x 3.94 284 x 190 x 100/11.18 x 7.48 x 3.94 427 x 247 x 73/16.81 x 9.72 x 2.87

1.4/3.09

1.4/3.09

2.42/5.34

· Power adapter · RJ-45 cable · RS-232 cable

· Power adapter · RJ-45 cable · RS-232 cable

· Power adapter · Rack mounting kit
(optional, by regions)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 989,811(at 25°C) and 576,237(at 40°C) -

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 989,811(at 25°C) and 576,237(at 40°C) -

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 832,102(at 25°C) and 536,472(at 40°C) -

FCC Part 15 (Class B), CE EMC (Class B), BSMI
LVD (EN60950-1), BSMI

FCC Part 15 (Class B), CE EMC (Class B), BSMI
LVD (EN60950-1), BSMI

FCC Part 15 (Class B), CE (Class B), C-Tick (Class B), BSMI
LVD (EN60950-1), BSMI

*: This matrix with firmware ZLD5.37 or later.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing

*1: Actual performance may vary depending on network conditions and activated

tool.

applications.

*6: Including Gateway-to-Gateway and Client-to-Gateway.

*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).

*7: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is

*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).

subject to fluctuate due to quality of the ISP link.

*4: AV (with Express mode) and IDP throughput measured using the industry standard *8: Enable or extend feature capacity with Zyxel service license.

HTTP performance test (1,460-byte HTTP packets). Testing done with multiple

*9: ATP100 rev1 is adapting new hardware design equipped with 4 x LAN/DMZ,

flows.

1 x WAN.

14 Solution Guide Security

ZyWALL ATP Firewalls

Model

ZyWALL ATP500

ZyWALL ATP700

ZyWALL ATP800

Hardware Specifications

Interfaces

7 (configurable), 1 x SFP

USB 3.0 ports

2

Console port

Yes (DB9)

Rack-mountable

Yes

Fanless

-

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

2,600

VPN throughput (Mbps)*3

900

IDP throughput (Mbps)*4

1,700

AV throughput (Mbps)*4

900

UTM throughput (AV and IDP)*4

890

Max. TCP concurrent sessions*5

1,000,000

Max. concurrent IPSec VPN tunnels*6

300

VLAN interface

64

Speedtest Performance

SPI firewall throughput (Mbps)*7

900

Key Features

Security

Sandboxing*8

Yes

Service

Web Filtering*8

Yes

Application Patrol*8

Yes

Anti-Malware*8

Yes

IPS*8

Yes

Reputation Filter*8

Yes

Geo Enforcer

Yes

SecuReporter*8

Yes

Collaborative Detection & Response*8 Yes

Device Insight

Yes

Security Profile Sync (SPS)*8

Yes

SSL (HTTPS) Inspection

Yes

Two-Factor Authentication

Yes

VPN Features

VPN Microsoft Azure

IKEv2, IPSec, L2TP/IPSec Yes

Amazon VPC

Yes

WLAN

Default Number of Managed AP

8

Management Recommend Max. AP in 1 AP Group

60

Secure WiFi Service*8

Yes

Maximum Number of Tunnel-Mode AP 18

Maximum Number of Managed AP

72

Management & Nebula Cloud Mode

Yes

Connectivity Nebula Cloud Monitoring Mode

Yes

Device HA Pro

Yes

Link Aggregation (LAG)

Yes

Concurrent Devices Logins (max.)

300

Power Requirements

Power input

12 V DC, 4.17 A

Max. power consumption (watt)

Heat dissipation (BTU/hr)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Included accessories

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

Acoustic noise

Certifications EMC

Safety

24.1 82.23
300 x 188 x 44/11.81 x 7.4 x 1.73 1.65/3.64 351 x 152 x 245/13.82 x 5.98 x 9.65 2.83/6.24 · Power adapter · Power cord · Rack mounting kit
0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 937,790(at 25°C) and 529,688(at 40°C) 24.5 dBA on < 25°C operating temperature, 41.5 dBA on full FAN speed
FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI

12 (configurable), 2 x SFP (configurable) 2 Yes (DB9) Yes -
6,000 1,200 2,200 1,600 1,500 1,600,000 1,000 128
930
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 200 Yes 66 264 Yes Yes Yes Yes 1500
100 - 240 V AC, 50/60 Hz, 2.5 A max. 46 120.1
430 x 250 x 44/16.93 x 9.84 x 1.73 3.3/7.28 519 x 392 x 163/20.43 x 15.43 x 6.42 4.8/10.58 · Power cord · Rack mounting kit
0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 947,737(at 25°C) and 444,931 (at 40°C) 25.3 dBA on < 25°C operating temperature, 46.2 dBA on full FAN speed
FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI

12 (configurable), 2 x SFP (configurable) 2 Yes (DB9) Yes -
8,000 1,500 2,700 2,000 1,900 2,000,000 1,000 128
930
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 300 Yes 130 520 Yes Yes Yes Yes 1500
100 - 240 V AC, 50/60 Hz, 2.5 A max. 46 120.1
430 x 250 x 44/16.93 x 9.84 x 1.73 3.3/7.28 519 x 392 x 163/20.43 x 15.43 x 6.42 4.8/10.58 · Power cord · Rack mounting kit
0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 947,737(at 25°C) and 444,931 (at 40°C) 25.3 dBA on < 25°C operating temperature, 46.2 dBA on full FAN speed
FCC Part 15 (Class A), CE EMC (Class A), C-Tick (Class A), BSMI LVD (EN60950-1), BSMI

*: This matrix with firmware ZLD5.37 or later.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing

*1: Actual performance may vary depending on network conditions and activated

tool.

applications.

*6: Including Gateway-to-Gateway and Client-to-Gateway.

*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).

*7: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is

*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).

subject to fluctuate due to quality of the ISP link.

*4: AV (with Express mode) and IDP throughput measured using the industry standard *8: Enable or extend feature capacity with Zyxel service license.

HTTP performance test (1,460-byte HTTP packets). Testing done with multiple

*9: ATP100 rev1 is adapting new hardware design equipped with 4 x LAN/DMZ,

flows.

1 x WAN.

Solution Guide Security 15

ZyWALL USG FLEX Firewalls

Model

USG FLEX 50

USG FLEX 50AX

Hardware Specifications

WiFi standard

10/100/1000 Mbps RJ-45 ports

USB 3.0 ports

Console port

Rack-mountable

Fanless

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

VPN throughput (Mbps)

VPN IMIX throughput (Mbps)*3

Max. TCP concurrent sessions*4

Max. concurrent IPsec VPN tunnels*5

Recommended gateway-to-gateway IPsec VPN tunnels

VLAN interface

Speedtest Performance

SPI firewall throughput (Mbps)*6

Key Features

Security Service

Web Filtering*7 SecuReporter*7

Two-Factor Authentication

Device Insight

Security Profile Synchronize*7

VPN Features

VPN Microsoft Azure

Amazon VPC

Management & Nebula Cloud Mode Connectivity Nebula Cloud Monitoring Mode

Easy Mode*8

Concurrent Devices Logins*9

Power Requirements

Power input

Max. power consumption (watt max.)

Heat dissipation (BTU/hr)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (Kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Included accessories

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

Certifications

EMC

Safety

N/A 4 x LAN/DMZ, 1 x WAN 2 Yes (RJ-45) N/A Yes

802.11 ax/ac/n/g/b/a 4 x LAN/DMZ, 1 x WAN 2 Yes (RJ-45) N/A Yes

350 90 40 20,000 20 5 8

350 90 40 20,000 20 5 8

320

320

Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes Yes Yes Yes 64

Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec N/A Yes Yes Yes Yes 64

12 V DC, 2.0 A max. 12 40.92

12 V DC, 2.5 A max. 24.3 55.37

216 x 143 x 33/8.50 x 5.63 x 1.30

216 x 149.28 x 33/8.50 x 5.88 x 1.30

0.88/1.94

1.00/2.20

276 x 185 x 98/10.87 x 7.28 x 3.86

276 x 185 x 98/10.87 x 7.28 x 3.86

1.41/3.11

1.53/3.37

· Power adapter

· Power adapter with plug

· RJ-45 - RS-232 cable for console connection · RJ-45 - RS-232 cable for console connection

· Antenna

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 1110,795(at 25°C) and 655,130(at 40°C)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 766,228(at 25°C) and 426,310(at 40°C)

FCC Part 15 (Class B), IC, CE EMC (Class B), RCM, BSMI
BSMI, UL

FCC Part 15 (Class B), IC EMC (Class B), CE EMC (Class B), RCM (Class B), BSMI
LVD (EN62368-1), BSMI

*: This matrix with firmware ZLD5.37 or later. *1: Actual performance may vary depending on system configuration, network
conditions, and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).. *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets); IMIX:
UDP throughput based on a combination of 64 byte, 512 byte and 1424 byte packet sizes.

*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *5: Including Gateway-to-Gateway and Client-to-Gateway. *6: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is
subject to fluctuate due to quality of the ISP link. *7: With Zyxel service license to enable or extend the feature capacity. *8: Only applicable when devices are in on-premise mode. *9: This is the recommend maximum number of concurrent logged-in devices.

16 Solution Guide Security

ZyWALL USG FLEX Firewalls

Model

USG FLEX 100*11

USG FLEX 100AX

Hardware Specifications

WiFi standard

N/A

802.11 ax/ac/n/g/b/a

10/100/1000 Mbps RJ-45 ports USB 3.0 ports

4 x LAN/DMZ, 1 x WAN 1

4 x LAN/DMZ, 1 x WAN 1

Console port Rack-mountable Fanless

Yes (RJ-45) N/A Yes

Yes (RJ-45) N/A Yes

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2

900

900

VPN throughput (Mbps)*3

270

270

VPN IMIX throughput (Mbps)*3

100

100

IPS throughput (Mbps)*4

540

540

Anti-Malware throughput (Mbps)*4

360

360

UTM throughput (Anti-Malware and IPS)(Mbps)*4 Max. TCP concurrent sessions*5

360 300,000

360 300,000

Recommended gateway-to-gateway IPsec VPN tunnels

20

20

Max. concurrent IPsec VPN tunnels*6

50

50

VLAN interface

8

8

Speedtest Performance

SPI firewall throughput (Mbps)*11

848

848

Key Features

Security

Sandboxing*7

Yes

Yes

Service

Web Filtering*7

Yes

Yes

Application Patrol*7

Yes

Yes

Anti-Malware*7

Yes

Yes

IPS*7

Yes

Yes

Reputation Filter*7

Yes

Yes

Geo Enforcer*7

Yes

Yes

SecuReporter*7

Yes

Yes

Collaborative Detection & Response*7

Yes

Yes

Device Insight

Yes

Yes

Security Profile Sync*7

Yes

Yes

SSL (HTTPS) Inspection

Yes

Yes

VPN Features
WLAN Management

Two-Factor Authentication Email Security VPN Microsoft Azure Amazon VPC Default Number of Managed AP Recommend Max. AP in 1 AP Group Secure WiFi Service*7

Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 10 Yes

Yes Yes IKEv2, IPSec, L2TP/IPSec Yes Yes 8 10 Yes

Maximum Number of Tunnel-Mode AP

6

6

Maximum Number of Managed AP

24

24

Management & Nebula Cloud Mode

Yes

Yes

Connectivity Nebula Cloud Monitoring Mode

Yes

Yes

Device HA Pro

N/A

N/A

Link Aggregation (LAG)

N/A

N/A

Hotspot Management*7

N/A

N/A

Ticket Printer Support*9/Support Q'ty (max.) N/A

N/A

Concurrent Devices Logins (default/max.)*7*8 64

64

Power Requirements

Power input Max. power consumption (watt Max.)

12 V DC, 2 A max. 12.5

12 V DC, 2.5 A max. 24.3

Heat dissipation (BTU/hr)

42.65

55.37

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

216 x 147.3 x 33/8.50 x 5.80 x 1.30

216 x 149.28 x 33/8.50 x 5.88 x 1.30

Weight (Kg/lb.)

0.85/1.87

1.00/2.20

Packing

Dimensions (WxDxH)(mm/in.) Weight (kg/lb.)

284 x 190 x 100/11.18 x 7.48 x 3.94 1.40/3.09

284 x 190 x 100/11.18 x 7.48 x 3.94 1.53/3.37

Included accessories

· Power adapter

· Power adapter with plug

· RJ-45 - RS-232 cable for console connection · RJ-45 - RS-232 cable for console connection

· Antenna

Environmental Specifications

Operating

Temperature Humidity

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing)

Storage MTBF (hr)

Temperature Humidity

-30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 989,810 (at 25°C) and 576,237 (at 40°C)

-30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 766,228(at 25°C) and 426,310(at 40°C)

Certifications EMC

FCC Part 15 (Class B), CE EMC (Class B), BSMI FCC Part 15 (Class B), CE EMC (Class B), C-Tick (Class B), BSMI

Safety

LVD (EN60950-1), BSMI

LVD (EN60950-1), BSMI

*: This matrix with firmware ZLD5.37 or later. *1: Actual performance may vary depending on system configuration, network conditions,
and activated applications. *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets);
IMIX: UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes. *4: AV (with Express Mode) and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *6: Including Gateway-to-Gateway and Client-to-Gateway. *7: With Zyxel service license to enable or extend the feature capacity. *8: This is the recommend maximum number of concurrent logged-in devices. *9: With Hotspot Management license support. *10: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to
fluctuate due to quality of the ISP link. *11: USG FLEX 100 rev1 is adopting a new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

Solution Guide Security 17

ZyWALL USG FLEX Firewalls

Model

USG FLEX 200

USG FLEX 500

USG FLEX 700

Hardware Specifications 10/100/1000 Mbps RJ-45 ports

4 x LAN/DMZ, 2 x WAN, 1 x SFP 7 (configurable), 1 x SFP (configurable)

12 (configurable), 2 x SFP (configurable)

USB 3.0 ports Console port Rack-mountable Fanless

2 Yes (DB9) Yes Yes

2 Yes (DB9) Yes N/A

2 Yes (DB9) Yes N/A

System Capacity & Performance*1 SPI firewall throughput (Mbps)*2 VPN throughput (Mbps)*3 VPN IMIX throughput (Mbps)*3 IPS throughput (Mbps)*4 Anti-Malware throughput (Mbps)*4 UTM throughput (Anti-Malware and IPS)(Mbps)*4 Max. TCP concurrent sessions*5 Recommended gateway-to-gateway IPsec VPN tunnels Max. concurrent IPsec VPN tunnels*6 VLAN interface

1,800 450 160 1,100 570 550 600,000 50 100 16

2,300 810 240 1,500 800 800 1,000,000 150 300 64

5,400 1,100 550 2,000 1,450 1,350 1,600,000 250 500 128

Speedtest Performance SPI firewall throughput (Mbps)*11

931

935

934

Key Features

Security Service

Sandboxing*7 Web Filtering*7

Yes

Yes

Yes

Yes

Yes

Yes

Application Patrol*7

Yes

Yes

Yes

Anti-Malware*7

Yes

Yes

Yes

IPS*7

Yes

Yes

Yes

Reputation Filter*7

Yes

Yes

Yes

Geo Enforcer*7

Yes

Yes

Yes

SecuReporter*7

Yes

Yes

Yes

Collaborative Detection & Response*7

Yes

Yes

Yes

Device Insight

Yes

Security Profile Sync*7

Yes

SSL (HTTPS) Inspection

Yes

Two-Factor Authentication

Yes

Email Security

Yes

VPN Features

VPN Microsoft Azure

IKEv2, IPSec, L2TP/IPSec Yes

Amazon VPC

Yes

WLAN

Default Number of Managed AP

8

Management Recommend Max. AP in 1 AP Group

20

Secure WiFi Service*7

Yes

Maximum Number of Tunnel-Mode AP 10

Maximum Number of Managed AP

40

Management & Nebula Cloud Mode

Yes

Connectivity Nebula Cloud Monitoring Mode

Yes

Device HA Pro

N/A

Link Aggregation (LAG)

N/A

Hotspot Management*7

Yes

Ticket Printer Support*9/Support Q'ty (max.) Yes (SP350E)/10

Concurrent Devices Logins (default/max.)*7*8 200

Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec N/A Yes 8 60 Yes 18 72 Yes Yes Yes Yes Yes Yes (SP350E)/10 200/300

Yes Yes Yes Yes Yes IKEv2, IPSec, L2TP/IPSec N/A Yes 8 200 Yes 130 520 Yes Yes Yes Yes Yes Yes (SP350E)/10 500/2000

Power Requirements Power input Max. power consumption (watt Max.) Heat dissipation (BTU/hr)

12 V DC, 2.5 A max. 13.3 45.38

12 V DC, 4.17 A 24.1 82.23

100-240 V AC, 50/60 Hz, 2.5 A max. 46 120.1

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (Kg/lb.)

Packing

Dimensions (WxDxH)(mm/in.)

Weight (kg/lb.)

Included accessories

272 x 187 x 36/10.7 x 7.36 x 1.42
1.4/3.09
427 x 247 x 73/16.81 x 9.72 x 2.87
2.23 (W/O bracket) 2.42 (W/ bracket)
· Power adapter · Rack mounting kit

300 x 188 x 44/16.93 x 7.4 x 1.73 430 x 250 x 44/16.93 x 9.84 x 1.73

1.65/3.64

3.3/7.28

351 x 152 x 245/13.82 x 5.98 x 9.65 519 x 392 x 163/20.43 x 15.43 x 6.42

2.83/6.24

4.8/10.58

· Power adapter · Power cord · Rack mounting kit

· Power cord · Rack mounting kit

Environmental Specifications

Operating

Temperature

Humidity

Storage

Temperature

Humidity

MTBF (hr)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 832,102(at 25°C) and 536,472(at 40°C)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 937,790(at 25°C) and 529,688(at 40°C)

0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 90% (non-condensing) 947,737(at 25°C) and 444,931 (at 40°C)

Acoustic Noise

N/A

24.5 dBA on < 25°C operating 24.5 dBA on < 25°C operating

temperature, 41.5 dBA on full temperature, 41.5 dBA on full

FAN speed

FAN speed

Certifications EMC

FCC Part 15 (Class B), CE EMC FCC Part 15 (Class A), CE EMC FCC Part 15 (Class A), CE EMC (Class B), C-Tick (Class B), BSMI (Class A), C-Tick (Class A), BSMI (Class A), C-Tick (Class A), BSMI

Safety

LVD (EN60950-1), BSMI

LVD (EN60950-1), BSMI

LVD (EN60950-1), BSMI

*: This matrix with firmware ZLD5.37 or later. * 1: Actual performance may vary depending on system configuration, network conditions, and
activated applications. * 2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). * 3: VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets); IMIX: UDP
throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes. *4: AV (with Express Mode) and IDP throughput measured using the industry standard HTTP
performance test (1,460-byte HTTP packets). Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool. *6: Including Gateway-to-Gateway and Client-to-Gateway. *7: With Zyxel service license to enable or extend the feature capacity. *8: This is the recommend maximum number of concurrent logged-in devices. *9: With Hotspot Management license support. *10: The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to
fluctuate due to quality of the ISP link. *11: USG FLEX 100 rev1 is adopting a new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

18 Solution Guide Security

USG LITE
Model
Hardware Specifications WiFi standard CPU RAM / FLASH Ethernet ports
System Capacity & Performance*1 SPI firewall throughput (Mbps)*2 Throughput with Application management on (Mbps) Throughput with Threat management on (Mbps) VPN throughput (Mbps)*3 Max. TCP concurrent sessions*4 Max. gateway-to-gateway IPsec VPN tunnels Max. concurrent IPSec VPN tunnels Max. remote VPN tunnels VLAN interface Wireless Features MIMO MU-MIMO Fast roaming MESH Networking Wireless bridge Site-wide SSID provisioning from Nebula cloud See wireless client info from the Nebula dashboard Auto / Fixed Channel Selection Security Features Ransomware/Malware Prevention Intrusion Blocker Dark Web Blocker Stop Mail Fraud & Phishing Block Ads Block VPN Proxy Firewall Country Restriction (GeoIP blocking) Exception list Custom allowed / blocked domain Traffic Management (applications & clients) Security event analytics Real-time threat intelligence*6 Web Filtering (Content Filter)*6 VPN Features Site2site VPN Remote access VPN Networking Features WAN Type Reserve IP (static DHCP) Block clients NAT - Virtual server DHCP server and DHCP relay Dynamic DNS (DDNS) Static route Guest Network VLAN Segmentation Management Onboarding WAN setting method Site-wide SSID management Multi-site management Client report Firmware upgrade Remote support and diagnostics Keep device settings in the Nebula Live tools Event Log Nebula Pro Pack - Advance feature set*6

USG LITE 60AX

WAN LAN

802.11 ax/ac/n/g/b/a Quad-core, 2.00GHz 1GB/512MB 1 x 100/1000/2500 Mbps 1 x 100/1000/2500 Mbps 4 x 100/1000 Mbps

2,000 2,000
2,000 300 20,000 3 5 5 4

MU-MIMO Open, WPA2-PSK, WPA3-Personal 802.11r/k/v Smart Mesh Yes Yes Yes
Yes

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Nebula Threat Report Yes Yes

IPSec Yes

DHCP/Static IP/PPPoE Yes Yes Yes Yes Yes Yes Yes Yes

Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Solution Guide Security 19

Power Requirements

Power input

Max. power consumption (watt max.)

Physical Specifications

Item

Dimensions(L x W x H)(mm/in.)

Weight(g/lb.)

Environmental Specifications

Operating Temperature

Humidity

Storage

Temperature

Humidity

Certifications

Certifications

12 V DC, 3.0 A 31W
161.7 x 65 x 229/6.37 x 2.56 x 9.02 707/1.56
0°C to 40°C/32°F to 104°F Humidity:5% to 95% (Non-condensing) -30°C to 70°C/-22°F to 158°F 5% to 95% (Non-condensing)
CE, FCC, BSMI

*1: Actual performance may vary depending on system configuration,network conditions, and activated applications. *2: Maximum throughput is measured using FTP with a 2 GB file and 1,460-byte packets across multiple sessions. *3: VPN throughput is measured based on RFC 2544 using 1,424-byte UDP packets. *4: Maximum sessions are measured using the industry-standard IXIA IxLoad testing tool. *5: Requiring Elite Pack.

20 Solution Guide Security

SCR
Model Hardware Specifications CPU RAM/FLASH 10/100/1000 Mbps RJ-45 ports
Fanless System Capacity & Performance SPI firewall throughput LAN to WAN (Mbps) Threat mgmt ON/App mgmt OFF (Mbps) Wireless Specifications Standard compliance
Wireless security Wireless frequency Radio SSID number WPS No. of antenna Antenna gain
Data rate
Security Features Ransomware/Malware Prevention Intrusion Blocker Dark Web Blocker Stop Mail Fraud & Phishing Block Ads Block VPN Proxy Content Filter* Firewall Country Restriction (GeoIP) Exception List Custom Allowed/Blocked Domain Traffic Management (Applications & Clients) Security Event Analytics VPN Features Site2site VPN Networking WAN type Networking features

IPTV passthrough

Management

Site-wide SSID management

Multi-site management

Topology*

Diagnostics

Remote support**

Onboarding WAN setting method

Power Requirements

Power input

Max. power consumption (watt max.)

Physical Specifications

Item

Dimensions (WxDxH)(mm/in.)

Weight (g/lb.)

Environmental Specifications

Operating Temperature

Humidity

Storage

Temperature

Humidity

Certifications

Certifications

*: Requiring SCR Pro Pack license. **: Available in Q3 2023.

SCR 50AXE
Dual-core, 1.00 GHz, Cortex A53 1 GB/256 MB (1) WAN: 1 GbE RJ-45 port (4) LAN: 1 GbE RJ-45 ports Yes
900 900
IEEE 802.11 ax 6 GHz IEEE 802.11 ax/ac/n/a 5 GHz IEEE 802.11 ax/n/b/g 2.4 GHz WPA2-PSK, WPA3-PSK 2.4/5/6 GHz 3 4 Yes 4 (internal) 2.0 dBi @2.4 GHz 3.0 dBi @5 GHz 3.5 dBi @6 GHz 2.4 GHz: up to 575 Mbps 5 GHz: up to 2400 Mbps 6 GHz: up to 2400 Mbps
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Threat Management Report
IPSec (site-to-site, spoke only)
DHCP/Static IP/PPPoE/PPPoE with static IP NAT - Virtual server DHCP IP/MAC binding Block clients Guest network** IGMP Proxy
Nebula Nebula Nebula Yes Yes WiFi
12 V DC, 2.0 A 21 W
178.0 x 54.6 (stand 68.2) x 242.2/7.00 x 2.14 (stand 2.68) x 9.54 651/1.44 (with stand)
0°C to 40°C/32°F to 104°F 10% to 90% (non-condensing) -30°C to 70°C/-22°F to 158°F 10% to 95% (non-condensing)
CE, FCC, BSMI

Solution Guide Security 21

Wireless Specifications

Model
Standard compliance Wireless frequency Radio SSID number Maximum transmit power (Max. total channel)

USG FLEX
USG FLEX 50/100AX
802.11 ax/ac/n/g/b/a
2.4/5 GHz
2
4
· US (FCC) 2.4 GHz: 29.8 dBm, 2 antennas
· US (FCC) 5 GHz: 32.6 dBm, 2 antennas
· EU (ETSI) 2.4 GHz: 19.93 dBm (EIRP), 2 antennas
· EU (ETSI) 5 GHz: 22.99 dBm (EIRP), 2 antennas

No. of antenna Antenna gain
Data rate
Frequency band

2 detachable antennas
3 dBi @2.4 GHz/5 GHz
· 2.4 GHz: up to 600 Mbps · 5 GHz: up to 1200 Mbps
2.4 GHz (IEEE 802.11 b/g/n) · USA (FCC):
2.412 to 2.462 GHz · Europe (ETSI):
2.412 to 2.472 GHz · TWN (NCC):
2.412 to 2.462 GHz
5 GHz (IEEE 802.11 a/n/ac/ax) · USA (FCC):
5.150 to 5.250 GHz; 5.725 to 5.850 GHz · Europe (ETSI):
5.15 to 5.35 GHz; 5.470 to 5.725 GHz · TWN (NCC):
5.15 to 5.25 GHz; 5.725 to 5.850 GHz

Receive sensitivity

2.4 GHz: · 11 Mbps  -99 dBm · 54 Mbps  -95 dBm · HT20, MCS7  -90 dBm · HT40, MCS7  -86 dBm
5 GHz: · 54 Mbps  -90 dBm · HT20, MCS7  -85 dBm · HT40, MCS7  -81 dBm · VHT20, MCS8  -90 dBm +/-2 dBm · VHT40, MCS9  -85 dBm +/-2 dBm · VHT80, MCS9  -68 dBm +/-2 dBm · HE20, MCS11  -61 dBm +/-2 dBm · HE40, MCS11  -58 dBm +/-2 dBm · HE80, MCS11  -55 dBm +/-2 dBm

USG LITE USG LITE 60AX IEEE802.11 ax/ac/n/g/b/a
2.4/5 GHz
2
8
· US(FCC) 2.4GHz: 29.98dBm,4 antennas
· US(FCC)5GHz: 29.82dBm,4 antennas
· EU(ETSI)2.4GHz: 19.92dBm(EIRP),4 antennas
· EU(ETSI)5GHz: 29.90dBm(EIRP),4 antennas
4 internal antennas
3.65 dBi @2.4 GHz 4.63 dBi @5 GHz
· 2.4 GHz: up to 1150 Mbps · 5 GHz: up to 4802 Mbps
2.4 GHz(IEEE 802.11 b/g/n/ac/ax) · USA (FCC):
2.412 to 2.462 GHz · Europe (ETSI):
2.417 to 2.472 Ghz · TWN (NCC):
2.412 to 2.462 GHz
5 GHz(IEEE 802.11 a/n/ac/ax) · USA (FCC):
5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz; 5.725 to 5.895 GHz · Europe (ETSI): 5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz · TWN (NCC): 5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz; 5.725 to 5.850 GHz
2.4 GHz: · 11Mbps = -89dBm · 54Mbps = -76dBm · HT20,MCS7 =-74dBm · HT40,MCS7 =-71dBm · VHT20,MCS8 =-74dBm · VHT40,MCS9 =-65dBm · HE20,MCS11 =-63dBm · HE40,MCS11 =-60dBm
5 GHz: · 54Mbps =-76dBm · HT20,MCS7 =-74dBm · HT40,MCS7 =-71dBm · VHT20,MCS8 =-71dBm · VHT40,MCS9 =-65dBm · VHT80,MCS9 =-62dBm · HE20,MCS11 =-65dBm · HE40,MCS11 =-62dBm · HE80,MCS11 =-59dBm · HE160,MCS11 =-56dBm

SCR
SCR 50AXE
802.11 ax/ac/n/g/b/a
2.4/5/6 GHz
3
4
· US (FCC) 2.4 GHz: 26.5 dBm, 2 antennas
· US (FCC) 5 GHz: 29.5 dBm, 2 antennas
· US (FCC) 6 GHz: 24.5 dBm, 2 antennas
· EU (ETSI) 2.4 GHz: 19.31 dBm (EIRP), 2 antennas
· EU (ETSI) 5 GHz: 25.24 dBm (EIRP), 2 antennas
· EU (ETSI) 6 GHz: 22.26 dBm (EIRP), 2 antennas
4 internal antennas
2 dBi @2.4 GHz 3 dBi @5 GHz 3.5 dBi @6 GHz
· 2.4 GHz: up to 575 Mbps · 5 GHz: up to 2400 Mbps · 6 GHz: up to 2400 Mbps
2.4 GHz (IEEE 802.11 b/g/n/ax) · USA (FCC):
2.412 to 2.462 GHz · Europe (ETSI):
2.412 to 2.472 GHz · TWN (NCC):
2.412 to 2.462 GHz
5 GHz (IEEE 802.11 a/n/ac/ax) · USA (FCC):
5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz; 5.725 to 5.850 GHz · European (ETSI): 5.150 to 5.350 GHz; 5.470 to 5.725 GHz · TWN (NCC): 5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz; 5.725 to 5.850 GHz
6 GHz (IEEE 802.11 ax) · USA (FCC):
5.925 to 7.125 GHz · European (ETSI):
5.925 to 6.425 GHz
2.4 GHz: · 11 Mbps  -82 dBm · 54 Mbps  -69 dBm · HT20, MCS7  -68 dBm · HT40, MCS7  -67 dBm · VHT20, MCS8  -64 dBm +/- 2 dBm · VHT40, MCS9  -62 dBm +/- 2 dBm · HE20, MCS11  -58 dBm +/- 2 dBm · HE40, MCS11  -55 dBm +/- 2 dBm
5 GHz: · 54 Mbps  -72 dBm · HT20, MCS7  -71 dBm · HT40, MCS7  -68 dBm · HT80, MCS7  -65 dBm · VHT20, MCS8  -65 dBm +/- 2 dBm · VHT40, MCS9  -62 dBm +/- 2 dBm · VHT80, MCS9  -59 dBm +/- 2 dBm · HE20, MCS11  -60 dBm +/- 2 dBm · HE40, MCS11  -58 dBm +/- 2 dBm · HE80, MCS11  -55 dBm +/- 2 dBm · HE (80+80), MCS11  -52 dBm +/- 2 dBm
6 GHz: · HE20, MCS11  -61 dBm +/- 2 dBm · HE40, MCS11  -58 dBm +/- 2 dBm · HE80, MCS11  -55 dBm +/- 2 dBm · HE160, MCS11  -52 dBm +/- 2 dBm

Compatibility & Accessories

Access Point
Product Models

Unified AP
· NWA5123-AC · NWA5123-AC HD* · WAC5302D-S · WAC5302D-Sv2 · WAC500* · WAC500H*

· WBE530* · WAX300H · WAX510D*

Functions

Central management Yes

Auto provisioning

Yes

Data forwarding

Local bridge

ZyMesh

Yes

*: Support both local bridge and data tunnel for data forwarding

Unified Pro AP
· WAC6103D-I · WAC6303D-S · WAC6502D-E · WAC6502D-S · WAC6503D-S · WAC6552D-S · WAC6553D-E

· WBE660S · WAX650S · WAX610D · WAX630S · WAX640S-6E · WAX620D-6E · WAX655E

Yes Yes Local bridge/Data tunnel Yes

Transceivers (Optional)

Model SFP10G-SR* SFP10G-LR* SFP-1000T SFP-LX-10-D SFP-SX-D SFP-BX1310-10-D*1

Speed 10-Gigabit SFP+ 10-Gigabit SFP+ Gigabit Gigabit Gigabit Gigabit

Connector Duplex LC Duplex LC RJ-45 Single LC Single LC Single LC

SFP-BX1490-10-D*1

Gigabit

Single LC

*: Only USG2200-VPN supports 10-Gigabit SFP+ *1: SFP-BX1310-10-D and SFP-BX1490-10-D are must used in pairs.

Wavelength 850 nm 1310 nm 1310 nm 850 nm 1310 nm (TX) 1490 nm (RX) 1490 nm (TX) 1310 nm (RX)

Max. Distance 300 m/328 yd 10 km/10936 yd 100 m/109 yd 10 km/10936 yd 550 m/601 yd 10 km/10936 yd
10 km/10936 yd

Optical Fiber Type Multi Mode Single Mode Multi Mode Single Mode Multi Mode Single Mode

DDMI Yes Yes Yes Yes Yes

Single Mode

Yes

VPN client subscription

Item

Description

Supported OS

SecuExtender Zero Trust IPSec/SSL VPN Client Subscription*

SecuExtender supports popular VPN protocols including IKEv2/EAP, SSL VPN. Building secure tunnel with industry-leading strong cipher, the SecuExtender guarantees your confidentiality and data integrity.

· Windows 10 64-bit · Windows 11 64-bit · macOS 10.15 or above

*: One subscription license to activate IPSec or SSL VPN from selected OS Windows/macOS.

22 Solution Guide Security

Solution Guide Security 23

Corporate Headquarters
Zyxel Networks Corp. Tel: +886-3-578-3942 Fax: +886-3-578-2439 Email: sales@zyxel.com.tw www.zyxel.com

Europe
Zyxel Belarus Tel: +375 25 604 3739 Email: info@zyxel.by www.zyxel.by

Zyxel Norway Tel: +47 22 80 61 80 Fax: +47 22 80 61 81 Email: salg@zyxel.no www.zyxel.no

Asia
Zyxel China (Shanghai) China Headquarters Tel: +86-021-61199055 Fax: +86-021-52069033 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Middle East FZE Tel: +971 4 372 4483 Cell: +971 562146416 Email: sales@zyxel-me.com www.zyxel-me.com

The Americas
Zyxel USA North America Headquarters Tel: +1-714-632-0882 Fax: +1-714-632-0858 Email: sales@zyxel.com us.zyxel.com

Zyxel BeNeLux Tel: +31 23 555 3689 Fax: +31 23 557 8492 Email: sales@zyxel.nl www.zyxel.nl www.zyxel.be

Zyxel Poland Tel: +48 223 338 250 Hotline: +48 226 521 626 Fax: +48 223 338 251 Email: info@pl.zyxel.com www.zyxel.pl

Zyxel China (Beijing) Tel: +86-010-62602249 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Philippine Email: sales@zyxel.com.ph www.zyxel.com.ph

Zyxel Brazil Tel: +55 (11) 3373-7470 Fax: +55 (11) 3373-7510 Email: comercial@zyxel.com.br www.zyxel.com/br/pt/

Zyxel Bulgaria (Bulgaria, Macedonia, Albania, Kosovo) Tel: +3592 4443343 Email: info@cz.zyxel.com www.zyxel.bg

Zyxel Romania Tel: +40 770 065 879 Email: info@zyxel.ro www.zyxel.ro

Zyxel China (Tianjin) Tel: +86-022-87890440 Fax: +86-022-87892304 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Singapore Tel: +65 6339 3218 Hotline: +65 6339 1663 Fax: +65 6339 3318 Email: sales@zyxel.com.sg www.zyxel.com.sg

Zyxel Czech Republic Tel: +420 725 567 244 Tel: +420 606 795 453 Email: sales@cz.zyxel.com Support: https://support. zyxel.eu www.zyxel.cz

Zyxel Russia Tel: +7 499 705 6106 Email: info@zyxel.ru www.zyxel.ru

Zyxel India Tel: +91-11-4760-8800 Fax: +91-11-4052-3393 Email: info@zyxel.in www.zyxel.in

Zyxel Taiwan (Taipei) Tel: +886-2-2739-9889 Fax: +886-2-2735-3220 Email: sales_tw@zyxel.com.tw www.zyxel.com.tw

Zyxel Denmark A/S Tel: +45 39 55 07 00 Fax: +45 39 55 07 07 Email: sales@zyxel.dk www.zyxel.dk

Zyxel Slovakia Tel: +421 919 066 395 Email: sales@sk.zyxel.com Support: https://support. zyxel.eu www.zyxel.sk

Zyxel Kazakhstan Tel: +7 727 350 5683 Email: info@zyxel.kz www.zyxel.kz

Zyxel Thailand Tel: +66-(0)-2831-5315 Fax: +66-(0)-2831-5395 Email: info@zyxel.co.th www.zyxel.co.th

Zyxel Finland Tel: +358 9 4780 8400 Email: myynti@zyxel.fi www.zyxel.fi

Zyxel Sweden A/S Tel: +46 8 55 77 60 60 Fax: +46 8 55 77 60 61 Email: sales@zyxel.se www.zyxel.se

Zyxel Korea Corp. Tel: +82-2-890-5535 Fax: +82-2-890-5537 Email: sales@zyxel.kr www.zyxel.kr

Zyxel Vietnam Tel: (+848) 35202910 Fax: (+848) 35202800 Email: sales_vn@zyxel.com.tw www.zyxel.com/vn/vi/

Zyxel France Tel: +33 (0)4 72 52 97 97 Fax: +33 (0)4 72 52 19 20 Email: info@zyxel.fr www.zyxel.fr

Zyxel Switzerland Tel: +41 (0)44 806 51 00 Fax: +41 (0)44 806 52 00 Email: info@zyxel.ch www.zyxel.ch

Zyxel Malaysia Tel: +603 2282 1111 Fax: +603 2287 2611 Email: sales@zyxel.com.my www.zyxel.com.my

Zyxel Germany GmbH Tel: +49 (0) 2405-6909 0 Fax: +49 (0) 2405-6909 99 Email: sales@zyxel.de www.zyxel.de

Zyxel Turkey A.S. Tel: +90 212 314 18 00 Fax: +90 212 220 25 26 Email: bilgi@zyxel.com.tr www.zyxel.com.tr

Zyxel Hungary & SEE Tel: +36 1 848 0690 Email: info@zyxel.hu www.zyxel.hu

Zyxel UK Ltd. Tel: +44 (0) 118 9121 700 Fax: +44 (0) 118 9797 277 Email: sales@zyxel.co.uk www.zyxel.co.uk

Zyxel Iberia Tel: +34 911 792 100 Email: ventas@zyxel.es www.zyxel.es

Zyxel Ukraine Tel: +380 89 323 9959 Email: info@zyxel.eu www.zyxel.ua

Zyxel Italy Tel: +39 011 230 8000 Email: info@zyxel.it www.zyxel.it

For more product information, visit us on the web at www.zyxel.com
Copyright © 2025 Zyxel and/or its affiliates. All rights reserved. All specifications are subject to change without notice.

5-000-00024006 01/25

References

Adobe PDF Library 17.0 Adobe InDesign 19.5 (Windows)