| USB 3.0 ports | 1 1 2 |
|---|
| Console port | RJ-45 RJ-45 DB9 |
|---|
| Rack-mountable | - - Yes |
|---|
| Fanless | Yes Yes Yes |
|---|
| SPI firewall throughput (Mbps)*2 1,000 | 1,000 2,000 |
|---|
| VPN throughput (Mbps)*3 | 300 300 500 |
|---|
| VPN IMIX Throughput (Mbps)* | 3 100 100 160 |
|---|
| IDP throughput (Mbps)*4 | 600 600 1,200 |
|---|
| AV throughput (Mbps)* | 4 380 380 630 |
|---|
| UTM throughput | 380 380 600 |
|---|
| Max. TCP concurrent sessions*5 300,000 | 300,000 600,000 |
|---|
| Max. concurrent IPsec VPN | 40 40 100 |
|---|
| Concurrent SSL VPN users | 30 30 60 |
|---|
| VLAN interface | 8 8 16 |
|---|
| SPI firewall throughput | 850 850 900 |
|---|
| Managed AP number | 8 / 24 8 / 24 8 / 40 |
|---|
| Recommend max. | 10 10 20 |
|---|
| Sandboxing*7 | Yes Yes Yes |
|---|
| Web Security* | 8 |
|---|
| Yes | Yes Yes |
|---|
| Application Security*7 | Yes Yes Yes |
|---|
| Malware Blocker* | 7 |
|---|
| Intrusion Prevention (IDP)*7 | Yes Yes Yes |
|---|
| Geo Enforcer* | 7 |
|---|
| SecuReporter Premium*7 | Yes Yes Yes |
|---|
| VPN | IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec IKEv2, IPSec, SSL, L2TP/IPSec |
|---|
| SSL (HTTPS) Inspection | Yes Yes Yes |
|---|
| Hotspot Management* | 7 |
|---|
| - | - - |
|---|
| Ticket printer support*9 / | - - - |
|---|
| Microsoft Azure | Yes Yes Yes |
|---|
| Amazon VPC | Yes Yes Yes |
|---|
| Device HA Pro | - - - |
|---|
| Link Aggregation (LAG) | - - - |
|---|
| Power input | 12V DC, 2A max. 12V DC, 2A max. 12V DC, 2.5A max. |
|---|
| 最大功耗 | 12.5 12.5 13.3 |
|---|
| Heat dissipation (BTU/hr) | 42.65 42.65 45.38 |
|---|
| Item | Dimensions 216 x 147.3 x 33/ 216 x 147.3 x 33/ 272 x 187 x 36/ (WxDxH) 8.50 x 5.80 x 1.30 8.50 x 5.80 x 1.30 10.7 x 7.36 x 1.42 (mm/in.) |
|---|
| 重量 | 0.85/1.87 0.85/1.87 1.4/3.09 (kg/lb.) |
|---|
| Packing | Dimensions 284 x 190 x 100/ 284 x 190 x 100/ 427 x 247 x 73/ (WxDxH) 11.18 x 7.48 x 3.94 11.18 x 7.48 x 3.94 16.81 x 9.72 x 2.87 (mm/in.) |
|---|
| Included accessories | • Power adapter • Power adapter • Power adapter |
|---|
| • RJ-45 - RS-232 cable for | • RJ-45 - RS-232 cable for • Rack mounting kit |
|---|
| console connection | console connection |
|---|
| Operating | Temperature 0°C to 40°C/ 0°C to 40°C/ 0°C to 40°C/ |
|---|
| environment | 32°F to 104°F 32°F to 104°F 32°F to 104°F |
|---|
| Humidity | 10% to 90% 10% to 90% 10% to 90% (non-condensing) (non-condensing) (non-condensing) |
|---|
| Storage | Temperature -30°C to 70°C/ - 30°C to 70°C/ -30°C to 70°C/ |
|---|
| MTBF (hr) | 989,810.8 989,810.8 529,688.2 |
|---|
| Acoustic noise | - - - |
|---|
| EMC | FCC Part 15 (Class B), FCC Part 15 (Class B), FCC Part 15 (Class B), |
|---|
| CE EMC (Class B), | CE EMC (Class B), CE (Class B), C-Tick (Class B), |
|---|
| BSMI | BSMI BSMI |
|---|
| Safety | LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI LVD (EN60950-1), BSMI 2x SFP (configurable) 2x SFP (configurable) |
|---|
| System Capacity & Performance* | 1 |
|---|
| SPI firewall throughput (Mbps)*2 2,600 | 6,000 8,000 |
|---|
| VPN throughput (Mbps)* | 3 900 1,200 1,500 |
|---|
| VPN IMIX Throughput (Mbps)*3 | 240 550 600 |
|---|
| IDP throughput (Mbps)* | 4 1,700 2,200 2,700 |
|---|
| Max. TCP concurrent sessions*5 1,000,000 | 1,600,000 2,000,000 |
|---|
| Max. concurrent IPSec | 300 1,000 1,000 |
|---|
| Web Security*8 | Yes Yes Yes |
|---|
| Application Security* | 7 |
|---|
| Malware Blocker*7 | Yes Yes Yes |
|---|
| Intrusion Prevention (IDP)* | 7 |
|---|
| Geo Enforcer*7 | Yes Yes Yes |
|---|
| SecuReporter Premium* | 7 |
|---|
| Hotspot Management*7 | - - - |
|---|
| Ticket printer support* / | 9 |
|---|
| • Power cord | • Rack mounting kit • Rack mounting kit • Rack mounting kit |
|---|
| Temperature, 41.5dBA on full | Temperature 46.2dBA on full Temperature 46.2dBA on full |
|---|
| FAN speed | FAN speed FAN speed |
|---|
| CE EMC (Class A), | CE EMC (Class A), CE EMC (Class A), |
|---|
| C-Tick (Class A), | C-Tick (Class A), C-Tick (Class A), |
|---|
| Standard compliance | 802.11 a/b/g/n/ac |
|---|
| Wireless frequency | 2.4 / 5 GHz |
|---|
| Radio | 2 |
|---|
| SSID number | 8 |
|---|
| Maximum transmit power US (FCC) 2.4 GHz | 25 dBm, 3 antennas |
|---|
| EU (ETSI) 2.4 GHz | 20 dBm(EIRP), 3 antennas |
|---|
| EU (ETSI) 5 GHz | 20 dBm(EIRP), 3 antennas |
|---|
| No. of antenna | 3 detachable antennas |
|---|
| 天線增益 | 2 dBi @2.4 GHz 3 dBi @ 5 GHz |
|---|
| Data rate | 802.11n: up to 450 Mbps 802.11ac: up to 1300 Mbps |
|---|
| Frequency Band | 2.4 GHZ USA (FCC) : 2.412 to 2.462 GHz (IEEE 802.11 b/g/n) Europe (ETSI) : 2.412 to 2.472 GHz TWN (NCC) : 2.412 to 2.462 GHz 5 GHZ USA (FCC) : 5.150 to 5.250 GHz; 5.250 to 5.350 GHz; 5.470 to 5.725 GHz; (IEEE 802.11 a/n/ac) 5.725 to 5.850 GHz Europe (ETSI) : 5.15 to 5.35 GHz; 5.470 to 5.725 GHz TWN (NCC) :5.15 to 5.25 GHz; 5.25 to 5.35 GHz; 5.470 to 5.725 GHz; 5.725 to 5.850 GHz |
|---|
| Receive sensitivity | 2.4 GHZ 11 Mbps ≤ -87 dBm 54 Mbps ≤ -77 dBm HT20 ≤ -71 dBm HT40 ≤ -68 dBm 5 GHZ 54 Mbps ≤ -74 dBm HT40, MCS23 ≤ -68 dBm VHT40, MCS9 ≤ -62 dBm HT20, MCS23 ≤ -71 dBm VHT20, MCS8 ≤ -66 dBm VHT80, MCS9 ≤ -59 dBm |
|---|
| Security Service | • Works with local cache and over 30 VPN billion databases and growing |
|---|
| Firewall | IPSec VPN • HTTP, HTTPS, and FTP protocol |
|---|
| • ICSA-certified corporate firewall | • Key management: IKEv1 (x-auth, supported |
|---|
| • Routing and transparent (bridge) | mode-config), IKEv2 (EAP, • Multiple file types supported |
|---|
| modes | configuration payload) |
|---|
| • Stateful packet inspection | E-mail Security • Encryption: DES, 3DES, AES (256-bit) |
|---|
| • User-aware policy enforcement | • Transparent mail interception via • Authentication: MD5, SHA1, SHA2 |
|---|
| • SIP/H.323 NAT traversal | SMTP and POP3 protocols (512-bit) |
|---|
| • ALG support for customized ports | • Spam, Phishing, mail detection • Perfect forward secrecy (DH groups) |
|---|
| • Protocol anomaly detection and | • Blacklist and whitelist support support 1, 2, 5, 14, 15-18, 20-21 |
|---|
| 防護等級 | • Supports DNSBL checking • PSK and PKI (X.509) certificate |
|---|
| • Traffic anomaly detection and | support IP Reputation Filter |
|---|
| • Flooding detection and protection | • Dead Peer Detection (DPD) and relay • Supports 10 Cyber Threat Categories |
|---|
| • DoS/DDoS protection | detection • Supports external IP blacklist • VPN concentrator |
|---|
| Unified Security Policy | • Inbound & Outbound traffic filtering • Route-based VPN Tunnel Interface |
|---|
| • Unified policy management interface | • Blacklist and whitelist support (VTI) |
|---|
| • Support Content Filtering, | DNS Filter • VPN high availability (Failover, LB) |
|---|
| Application Patrol, firewall (ACL/SSL) | • Block clients to access malicious • GRE over IPSec |
|---|
| • Policy criteria: zone, source and | domain • NAT over IPSec |
|---|
| destination IP address, user, time | • Effective against any IP protocol • L2TP over IPSec |
|---|
| Intrusion Detection and Prevention | • Zyxel VPN client provisioning URL Threat Filter • Botnet C&C websites blocking |
|---|
| mode | • Supports External URL blacklist SSL VPN |
|---|
| • Signature-based and behavior | • Supports Windows and Mac OS X |
|---|
| based scanning | Content Filtering • Supports full tunnel mode |
|---|
| • Customized signatures supported | • HTTPs domain filtering • Supports 2-Factor authentication |
|---|
| • Automatic signature updates | • SafeSearch support • Whitelist websites enforcement |
|---|
| Application Patrol | • URL blacklist and whitelist with Networking |
|---|
| • Granular control over the most | keyword blocking WLAN Management |
|---|
| important applications | • Customizable warning messages • Supports AP Controller (APC) version |
|---|
| • Identifies and controls application | and redirect URL 3.60 |
|---|
| behavior | • Customizable Content Filtering block • 802.11ax Wi-Fi 6 AP and WPA3 |
|---|
| • Supports 30+ application categories | page support |
|---|
| • Supports user authentication | • URL categories increased to 111 • 802.11k/v/r support |
|---|
| • Real-time statistics and reports | • CTIRU (Counter-Terrorism Internet • Wireless L2 isolation |
|---|
| Sandboxing | Referral Unit) support • Supports auto AP FW update |
|---|
| • Cloud-based multi-engine inspection | • Scheduled WiFi service Geo Enforcer |
|---|
| • Support HTTP/SMTP/POP3/FTP | • Dynamic Channel Selection (DCS) • Geo IP blocking |
|---|
| • Wild range file type examination | • Client steering for 5 GHz priority and • Geographical visibility on traffics |
|---|
| • Real-time threat synchronization | sticky client prevention statistics and logs • Auto healing |
|---|
| Anti-Malware | • IPv6 address support • Customizable captive portal page |
|---|
| • Stream-based scan engine (Stream | IP Exception • WiFi Multimedia (WMM) wireless QoS |
|---|
| Mode) | • Provides granular control for target • CAPWAP discovery protocol |
|---|
| • HTTP, FTP, SMTP, and POP3 protocol | source and destination IP • Multiple SSID with VLAN |
|---|
| supported | • Supports security service scan • Supports ZyMesh |
|---|
| • No file size limitation | bypass for Anti-malware (including • Support AP forward compatibility |
|---|
| Hybrid Mode Malware Scanning | URL Threat Filter query concurrently in action |
|---|
| Mobile Broadband | • WAN trunk for more than 2 ports System Management |
|---|
| • WAN connection failover via 3G and | • Per host session limit • Role-based administration 4G* USB modems • Guaranteed bandwidth • Multi-lingual Web GUI (HTTPS and |
|---|
| • Auto fallback when primary WAN | • Maximum bandwidth HTTP) |
|---|
| recovers | • Priority-bandwidth utilization • Command line interface (console, |
|---|
| • Bandwidth limit per user | web console, SSH and telnet) |
|---|
| • Bandwidth limit per IP | • SNMP v1, v2c, v3 |
|---|
| • Bandwidth management by | • System configuration rollback |
|---|
| application | • Configuration auto backup transition tunnel) |
|---|
| • Link Aggregation support*1 | • Firmware upgrade via FTP, FTP-TLS and Web GUI |
|---|
| Management | • New firmware notify and auto upgrade |
|---|
| • IPSec (IKEv2 6in6, 4in6, 6in4) | Authentication • Dual firmware images • Local user database |
|---|
| Connection | • Cloud CNM SecuManager • External user database: Microsoft |
|---|
| Windows Active Directory, RADIUS, | Logging and Monitoring hybrid mode |
|---|
| LDAP | • Comprehensive local logging |
|---|
| • IEEE 802.1x authentication | • Syslog (to up to 4 servers) |
|---|
| • Captive portal Web authentication | • Email alerts (to up to 2 servers) |
|---|
| • XAUTH, IKEv2 with EAP VPN | • Real-time traffic monitoring |
|---|
| authentication | • Built-in daily report |
|---|
| • IP-MAC address binding | • Cloud CNM SecuReporter • SSO (Single Sign-On) support |
|---|
| • Policy-based NAT (SNAT) | *: For specific models supporting the 3G and 4G |
|---|
| • Supports 2-factor authentication | dongles on the list, please refer to the Zyxel |
|---|
| with Google Authenticator as the | product page at 3G dongle document |
|---|
| second factor for administrator | *1: Supported models ATP500/700/800 BGP) account |
|---|
| Product | Unified AP Unified Pro AP |
|---|
| Models | • NWA5301-NJ • WAC5302D-S • WAC6103D-I • WAC6552D-S |
|---|
| • NWA5121-NI | • WAX510D • WAC6503D-S • WAC6502D-E |
|---|
| • NWA5123-AC HD | • WAC5302D-Sv2* • WAC6502D-S • WAX650S |
|---|
| • NWA5123-AC | • WAC500* • WAC6303D-S • WAX610D* |
|---|
| • NWA5123-NI | • WAC500H* • WAC6553D-E Functions |
|---|
| Central management | Yes Yes |
|---|
| Auto provisioning | Yes Yes |
|---|
| Data forwarding | Local bridge Local bridge/Data tunnel |
|---|
| ZyMesh | Yes Yes *: From APC3.0, commercial gateways supporting APC technology are able to recognize APs with FW release higher than APC3.0 as Forward Compatible APs. Resellers can introduce newly-available Zyxel APs with basic features supported without upgrading any new controller firmware. |
|---|
| IPSec VPN Client* | IPSec VPN client software for the ZyWALL • Windows Server 2016 |
|---|
| and USG Series with Easy VPN for zero | • Windows Server 2019 |
|---|
| configuration remote access | • Windows 7 (32/64-bit) • Windows 8 (32/64-bit) • Windows 10 (32/64-bit) |
|---|
| SSL VPN Client* | Secured VPN connection between PC/MAC • Windows 7 (32/64-bit) |
|---|
| and ZyWALL Firewall | • Windows 8 (32/64-bit) • Windows 10 (32/64-bit) • MacOS 10.14 *: A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official Zyxel website. To continue using the application, please contact your regional sales representatives and purchase a commercial license for the application. |
|---|
| SFP10G-SR* | 10-Gigabit Duplex LC 850 nm 300 m/ Multi Mode Yes |
|---|
| SFP+ | 328 yd |
|---|
| SFP10G-LR* | 10-Gigabit Duplex LC 1310 nm 10 km/ Single Mode Yes |
|---|
| SFP-1000T | Gigabit RJ-45 - 100 m/ Multi Mode - 109 yd |
|---|
| SFP-LX-10-D | Gigabit LC 1310 nm 10 km/ Single Mode Yes 10936 yd |
|---|
| SFP-SX-D | Gigabit LC 850 nm 550 m/ Multi Mode Yes 601 yd |
|---|
| SFP-BX1310-10-D*1 | Gigabit LC 1310 nm(TX) 10 km/ Single Mode Yes 1490 nm(RX) 10936 yd |
|---|
| SFP-BX1490-10-D*1 | Gigabit LC 1490 nm(TX) 10 km/ Single Mode Yes 1310 nm(RX) 10936 yd *:only USG2200-VPN supports 10-Gigabit SFP+ *1: SFP-BX1310-10-D and SFP-BX1490-10-D are must used in pairs. 29/10/20 |
|---|