Zyxel Atp800 Security Complete Broadband User Guide

ATP800 Security Complete Broadband
User Guide

ATP800 Security Complete Broadband

Preparing for the next wave of cyberattacks
How Safe is Your Network?
Today, network attacks have become more sophisticated and targeted. Social networking applications have also opened up more channels for data breach than ever before. With the rise of BYOD (Bring Your Own Device), threats to business networks come from both outside and inside. It is now increasingly challenging for businesses to keep up with the changing threat landscape; and this is especially true for small-and medium-sized businesses, which do not have the staff and resources of larger corporations. Small-and medium-sized businesses need a solution that is efficient, inexpensive and provides an array of techniques to combat sophisticated network attacks.
Network Security that Works
Businesses rely on network security appliances for two main reasons: to protect company resources from threats and enable secure communication between locations via VPNs. Zyxel has a proven track record with the highly-regarded ATP and USG FLEX series,
providing effective protection against emerging threats over the years. Now, introducing our new SCR series: subscription-free, easy-to-manage network security in a single cloud router solution for teleworkers and small businesses/offices. Experience peace of mind with Zyxel’s SCR series, empowering you to focus on your work without compromising security.

Zyxel Security Portfolio

Zyxel security solutions

ATP Firewalls
The ZyWALL ATP Firewall Series is empowered with smart cloud intelligence giving seamless protection against all those Advanced Persistent Threats, achieving ultimate in-depth defense of future unknown attacks.
USG FLEX Firewalls
The USG FLEX series provides cloud-based management and collaborative protection for small and mid-sized businesses. It offers powerful UTM performance with automatic responses to expand protection from firewalls to access points, all while minimizing computing power usage.
Security Router
The SCR series is a secure cloud-managed router that offers business-class firewall, VPN gateway, latest WiFi technology, and built-in security to safeguard against ransomware and other threats. It’s a perfect solution for teleworkers or small businesses/offices looking for easy-to-manage and subscription-free network security.
Security Services and Licenses
Find the perfect licensing option for your security devices with our flexible options tailored to meet your business needs. Our security licenses cover a range of solutions, including security, connectivity, management, reporting, and vertical-specific licenses. With our expert guidance and support, you can rest assured that your business is fully protected from all potential security threats, now and in the future.

Security Services and Licenses

For purchase/renewal of licenses, go directly on our new e-commerce platform Zyxel Marketplace or contact our reseller.

Services	Key Features
Security Service
Anti-Virus/Malware	Scan files for viruses, Trojan, worms, malwares before they reach your network. • Stream-based scan technology without file size limitation • Daily data feed of top-ranked threats
Anti-Spam/Email Security	Fast detect with cloud-based database/mail fingerprints to block spam/phishing mail with malicious contents • IP reputation filter provides low latency reaction • Support black/white listing for custom policies • Cloud-based database provide real-time protection
Web Filtering	Cloud-based real-time access control for inappropriate, unproductive, illegal and malicious websites • Categorized website access management for increased efficiency • Granular policies controlled by IP address, user, group, or schedule
IPS	Deep-packet inspection across all ports and protocols at gateway to against known attacks from network • Shields vulnerabilities before they can be exploited and eliminates the operational pains of emergency patching • Customized signature support to create your own rules • Constant signature auto-updates
Application Patrol	Automatically categorize and manage the network applications usage • Granular policies control by IP address, user, group, schedule • Profile based policy to ensure network quality and easy manage business rule
Geo Enforcer	Manage network traffic by mapping IP address to geographical regions to prevent fraud or cyber attacks • Geographical visibility for traffic statistics and logs • IPv6 address support • Automatic IP/geography database update
Sandboxing	Cloud-based sandbox technology against unknown threats • Comprehensive inspection for a wide range file types • Cloud-based sandbox provide instant protection without needing a dedicated hardware or software upgrade
Reputation Filter	Block botnet infection and prevent drive-by download from infected websites • IP/URL feeds to detect/block botnet commands and control activities • Cloud-based URL feeds to block access to anomalous websites • IP-based reputation filter • Supports 10 Cyber Threat Categories • Inbound & Outbound traffic filtering • Blacklist and whitelist support
Secure WiFi	• Secure tunnel and managed AP service • L2 access between home and office network • Enforcing 2FA with Google Authenticator • WPA2 Enterprise (802.1x) supported
Cloud Security Service
Astra	• Cloud-based service and email protection for Office 365, G Suite and on-premise e-mail • Stop unwanted spam, phishing and malware with real-time threat intelligence • No change to your existing infrastructure, zero maintenance • Reduce management overhead and stop wasting IT admin resources • Respond faster with web management and monitoring
Cloud Email Security	• Extend protection to mobile devices into network • Shows brief summary about the member activities • Monitor and analyze the usage and measure most used resources • Stop users from unsafe websites, record every attempt, and trigger time • Block, record all suspicious IP to get full range security monitoring and protection from online threats
Vertical Solutions
Hotspot Management	• Authentication with Wall Garden • Advertisement and SMS billing & free time service accounting for guest • Support SP350E printer manager support purple WiFi and third-party social log in • Billing replenishment
Managed AP Service	• Integrated AP controller as central management to provide flexible deployment options • AP auto discovery and provisioning • AP forwarding compatibility
Device High Availability Pro	• Device failure detection and notification • Configuration auto-sync and link monitoring • Smart handover through dedicated Heartbeat Link • NAT/Firewall/VPN Sessions synchronization
VPN Client Software
SecuExtender VPN Client	• Providing solutions of both SSL VPN and IPSec VPN remote access • Enhanced layered security incorporating Zyxel security appliances • Easy and intelligent installation
Network Premium
Single Sign-On	• Simplified single sign in to multiple resources • Improved user experience without repetitive logging in between various web browsers • Login mechanism works with any protocol, not just HTTP
Management & Reporting
Cloud CNM SecuReporter	• Multidimensional analytics on abnormal behaviors • Cloud-based real-time monitoring and alerts • Effective event correlation and user behavior analytics • Intuitive dashboard and customizable report

Pick a bundle.
No more hassle

License by Bundle

A bundle license consists of multiple services that are grouped together. They are designed for your best convenience when you need to ensure your network is empowered with holistic functionality such as seamless threat protection or full connectivity features. Pick the right bundle and experience less hassle.
Security

Pack	Firewall Series	Licensed Service
		Anti-Malware/Virus	Web Filtering/Content Filtering	Sandboxing	Reputation Filter	IPS/IDP	Application Patrol	Email Security/Anti-Spam	SecuReporter
		Scan files at the gateway for viruses and other threats	Block access to malicious or risky web sites	Cloud-based sandbox technology against unknown threats	Block botnet infection and prevent drive-by download from infected websites via IP and URL detection	Deep-packet inspection against known attacks from network	Automatically categorize and manage the network application usage	Fast detection to block spam/phishing mail with malicious contents	Cloud-based security analytics and report with 30-day log retention
Gold Security Pack	ATP
	USG FLEX*³
UTM Security Pack	USG FLEX*³
Content Filter Pack	USG FLEX 50(AX)
	USG20(W)-VPN
3-in-1 UTM Security Pack	USG					*¹	*¹
2-in-1 Nebula Security Pack	NSG					*¹	*¹
SCR Pro Pack	SCR

*1: The IPS and App Patrol service would be offered for free
*2: Pack Purchasing Options:

• Secure WiFi
• Hospitality Pack incl. Hotspot Management and Concurrent Device Upgrade
• Nebula Professional Pack
• Nebula Plus Pack

*3: USG FLEX 50 is not supported for Gold and UTM Security Pack

Connectivity
Licensed Service

Security Profile Sync	Collaborative Detection & Response	Ransomware Prevention Premium	Network Premium	Secure WiFi	Hotspot Management	Concurrent Device Upgrade	Nebula Professional Pack	Nebula Plus Pack
An easy-to-usetool to help business sync up security profiles across multiple networks	Automatically contain threats at the network edge	Real-time updated threat intelligence	Simplified single sign in to multiple resources	Secure tunnel and managed AP service	Various Network Access Control	Top up allowed number of connected clients	A full feature set of cloud configuration, deployment, monitoring and management	A new feature set includes the most frequently requested advanced features
				*2	*2	*2	*2	*2
							*2	*2
							*2	*2
							*2	*2

Licensed Service by Model

Security

Compatible Security Appliances	Licensed Service
	Web Filtering/Content Filtering	Application Patrol	Anti-Malware/Virus	IPS/IDP	Email Security/Anti-Spam
	Block access to malicious or risky web sites	Automatically categorize and manage the network application usage	Scan files at the gateway for viruses and other threats	Deep-packet inspection against known attacks from network	Fast detection to block spam/phishing mail with malicious contents
ATP100(W)/200	●	●	●	●	●
ATP500/700/800	●	●	●	●	●
USG FLEX 50(AX)	●
USG FLEX 100(AX/W)	●	●	●	●	●
USG FLEX 200	●	●	●	●	●
USG FLEX 500/700	●	●	●	●	●
SCR 50AXE	●	●
USG40(W)	●	●	●	●	●
USG60(W)	●	●	●	●	●
USG110/210/310	●	●	●	●	●
USG1100/1900/2200	●	●	●	●	●
USG20(W)-VPN	●
ZyWALL 110/310/1100	●	●	●	●	●
VPN50	●
VPN100/300/1000	●	●

Connectivity

Compatible Security Appliances	Licensed Service							Licensed Service
	Secure WiFi	Network Premium	Hotspot Management	Concurrent Device Upgrade	Nebula SD-WAN	Nebula Professional Pack	Nebula Plus Pack	Amazon VPC
	Secure tunnel and managed AP service	Simplified single sign in to multiple resources	Various Network Access Control	Top up allowed number of connected clients	Simplify the delivery of WAN services across the organization	A full feature set of cloud configuration, deployment, monitoring and management	A new feature set includes the most frequently requested advanced features	Easy network integration with AWS
ATP100(W)/200
ATP500/700/800
USG FLEX 50(AX)
USG FLEX 100(AX/W)
USG FLEX 200
USG FLEX 500/700
SCR 50AXE
USG40(W)
USG60(W)
USG110/210/310
USG1100/1900/2200
USG20(W)-VPN
ZyWALL 110/310/1100
VPN50
VPN100/300/1000

Security Profile Sync	Collaborative Detection & Response	SecuReporter	Sandboxing	Reputation Filter	SecuExtender VPN Client
An easy-to-use tool to help business sync up security profiles across multiple networks	Automatically contain threats at the network edge	Cloud-based security analytics and report with 30-day log retention	Cloud-based sandbox technology against unknown threats	Block botnet infection and prevent drive-by download from infected websites via IP and URL detection	SSL VPN and IPSec VPN remote access tool

Support for Registered Devices

Microsoft Azure	Managed AP Service	Two-Factor Authentication	Threat Management	Geo Enforcer	SSL (HTTPS) Inspection	Device Insight	Device High Availability Pro	Zyxel One Network	Nebula Base Pack
Easy network integration with Azure	AP auto discovery and provisioning	Add an extra layer of protection to mitigate the risk of credential leakage or brute force attack	Prevent ransomware, intrusion, exploit, dark web, ads, VPN proxy and mail fraud & phishing	Manage network traffic by mapping IP address to geographical regions	Unlock encrypted sessions, scan encrypted packets, find threats, and block them	Deploy agentless scanning of the network for discovery and classification of devices	Device failure detection and failover	A Unified installation tool for Zyxel switches, WLAN and gateways	License-free feature set with a rich set of management features

Specifications

ZyWALL ATP Firewalls

*: This matrix with firmware ZLD5.37 or later.

1. Actual performance may vary depending on network conditions and activated applications.
2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
3. VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
4. AV (with Express mode) and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
5. Maximum sessions measured using the industry standard IXIA IxLoad testing tool
6. Including Gateway-to-Gateway and Client-to-Gateway.
7. The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
8. Enable or extend feature capacity with Zyxel service license.
9. ATP100 rev1 is adapting new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

*: This matrix with firmware ZLD5.37 or later.

1. Actual performance may vary depending on network conditions and activated applications.
2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
3. VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
4. AV (with Express mode) and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
5. Maximum sessions measured using the industry standard IXIA IxLoad testing tool
6. Including Gateway-to-Gateway and Client-to-Gateway.
7. The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
8. Enable or extend feature capacity with Zyxel service license.
9. ATP100 rev1 is adapting new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

*: This matrix with firmware ZLD5.37 or later.

1. Actual performance may vary depending on system configuration, network conditions, and activated applications.
2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
3. VPN throughput measured based on RFC 2544 (1,424-byte UDP packets); IMIX: UDP throughput based on a combination of 64 byte, 512 byte and 1424 byte packet sizes.
4. Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
5. Including Gateway-to-Gateway and Client-to-Gateway.
6. The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
7. With Zyxel service license to enable or extend the feature capacity.
8. Only applicable when devices are in on-premise mode.
9. This is the recommend maximum number of concurrent logged-in devices.

ZyWALL USG FLEX Firewalls

*: This matrix with firmware ZLD5.37 or later.

1. Actual performance may vary depending on system configuration, network conditions, and activated applications.
2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
3. VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets); IMIX:
   UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes.
4. AV (with Express Mode) and IDP throughput measured using the industry standard HTTPperformance test (1,460-byte HTTP packets). Testing done with multiple flows.
5. Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
6. Including Gateway-to-Gateway and Client-to-Gateway.
7. With Zyxel service license to enable or extend the feature capacity.
8. This is the recommend maximum number of concurrent logged-in devices.
9. With Hotspot Management license support.
10. The Speedtest result is conducted with 1 Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
11. USG FLEX 100 rev1 is adopting a new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

SCR

*: Requiring SCR Pro Pack license.
**: Available in Q3 2023.
Wireless Specifications

Compatibility & Accessories

Access Point

*: Support both local bridge and data tunnel for data forwarding
Service Gateway Printer

1: Hotspot management licenses required
Transceivers (Optional)

*: only USG2200-VPN supports 10-Gigabit SFP+
*1: SFP-BX1310-10-D and SFP-BX1490-10-D are must used in pairs.
VPN Client Subscription

Corporate Headquarters

Zyxel Networks Corp.
Tel: +886-3-578-3942
Fax: +886-3-578-2439
Email: [email protected]
www.zyxel.com
Europe

Zyxel Ukraine
Tel: +380 89 323 9959
Email: [email protected]
www.zyxel.ua
Asia
Zyxel China (Shanghai)
China Headquarters
Tel: +86-021-61199055
Fax: +86-021-52069033
Email: [email protected]
www.zyxel.cn

The Americas

For more product information, visit us on the web at www.zyxel.com
Copyright © 2023 Zyxel and/or its affiliates. All rights reserved.
All specifications are subject to change without notice.

http://www.zyxel.com/products_services/smb
5-000-00023006 06/23

References

• iCloud
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally | Zyxel Networks
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• zyxel.cz
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• 자이젤코리아
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• zyxel.pl
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• zyxel.sk
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally
• Zyxel Networks, Your Networking Ally