Respond to the demands of network security with value

Respond to the

demands of network

security with value

Copyright © 2005 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo and ZyNOS are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners.

For more product information,

visit us on the web www.ZyXEL.com

Corporate Headquarters ZyXEL Communications Corp.

Tel: +886-3-578-3942 Fax: +886-3-578-2439 Email: [email protected] http://www.zyxel.com http://www.zyxel.com.tw Tel: +420 241091350 Fax: +420 241091359 Email: [email protected] http://cz.zyxel.com

ZyXEL Czech s.r.o.

Tel: +1-714-632-0882 Fax: +1-714-632-0858 Email: [email protected]

http://www.us.zyxel.com ZyXEL North America

Tel: +45 39 55 07 00 Fax: +45 39 55 07 07 Email: [email protected] http://www.zyxel.dk

ZyXEL Denmark A/S

Tel: +47 22 80 61 80 Fax: +47 22 80 61 81 Email: [email protected] http://www.zyxel.no

ZyXEL Norway A/S

Tel : +34 902 195 420 Fax: + 34 913 005 345 Email: [email protected] http:// www.zyxel.es

ZyXEL Spain Tel: +358-9-4780 8400

Fax: +358-9-4780 8448

Email: [email protected] http://www.zyxel.fi

ZyXEL Finland Oy

Tel : +33 (0)4 72 52 97 97 Fax : +33 (0)4 72 52 19 20

Email: [email protected] http: //www.zyxel.fr

ZyXEL France SARL

Tel: +46 31 744 7700 Fax: +46 31 744 7701 Email: [email protected] http://www.zyxel.se

ZyXEL Sweden A/S

Tel: +49 2405 6909 0 Fax: +49 2405 6909 99 Email: [email protected] http:// www.zyxel.de

ZyXEL Germany GmbH.

Tel: +44 (0) 8702 909090 Fax: +44 (0)8702 909091 Email: [email protected] http: //www.zyxel.co.uk

ZyXEL UK Ltd.

65-100-003511 02/05

ZyXEL SMART Network

Security for SMB

ZyXEL's SMART solution is built around ZyXEL's experience in providing network security and other network-related solutions to companies across the globe. Users can rest assured that ZyXEL's SMART solution is endowed with knowledge that is gained from more than 120,000 installations in 150 countries throughout the world.

Safeguard

the network - with comprehensive Firewall and IDP functions. ZyXEL's ZyWALL series is capable of guarding the frontline of SMB and corporate networks.

Comprehensive

Management

- ZyXEL's ZyWALL series can be managed and even upgraded through a centralized network management mechanism, the Vantage CNM system and myZyXEL.com, a 24/7 online service platform. These tools help to turn complicated SMB network configuration, management and service upgrade into easy, smooth operations.

On-time

Alerts

- with the mySecurityZone website (mySecurity.zyxel.com) playing the alert role in the SMART solution for SMBs, providing integrated messages and recommendations for dealing with the latest information security issues.

Rapid

Response

- from ZyXEL’s SMART solution comes from the ZyXEL Security Distribution Network (ZSDN), which is the core of the response features. The dedicated ZSDN platform consists of myZyXEL.com (www.myZyXEL.com), mySecurityZone (mySecurity.ZyXEL.com)

Response Team. All of these online services are indispensable to real time response functioning. ZyXEL's exclusive

ZyNOS Technology

is an integrated and secure network operating environment that was developed by ZyXEL. It is highly stable, versatile and extremely secure.

Respond to the demands

of network security with

value-Built on Experience

ZyXEL’s "SMART Global Network Security Total

Solution" is the first complete, total

information safety solution offered to small

and medium businesses across the globe.

ZyXEL's S.M.A.R.T solution encompasses

alerting users to potential problems,

safeguarding their networks and data,

responding to attacks, and network

management tools. Users can enjoy instant,

total and deep-seated information protection,

supported by ZyXEL's core technology —

ZyNOS.

ZyXEL SMART Network Security

ZyXEL SMART

Network

ZyXEL's SMART solution offers users powerful products for resolving information security threats and connection difficulties, ZyXEL offering users tools and enriched

interactive online services to effectively reduce corporate IT maintenance costs for better profitability. ZyXEL's Vantage Central Network Management solution helps users to reduce networking costs, enabling them to manage up to hundreds of PCs from a single point, upgrade firmware across a network simultaneously, establish a centralized safety policy, instantly set up a VPN, and generate more than fifty complete report analyses.

Vantage Wireless LAN Controller lets users manage multiple APs, while also offering a complete authorization and access system, detecting WLAN irregularities and generating many useful reports.

A multi-layer approach to protecting users' data is most effective when fending off data-theft, overcoming the inherent weakness of single-layer protection. Using ZyWALL Internet Security Appliances and ZyWALL Personal

Firewall/VPN device together offers users protection against hackers and viruses that might find their way into the LAN, preventing unauthorized access to data on PCs from within the LAN.

ZyXEL SMART Network

Application for SMB

Perimeter Protection

Workgroup Protection

Personal Protection

ZyXEL SMART

Network

Security for SMB

Perimeter

Protection

mySecurity zone myZyXEL.com Services Platform

Headquarters

ZyWALL Internet Security Gateway ZyWALL IDP ZyWALL ZyWALL

Branch Office

Internet

Site-to-Site

VPN

Personal

Protection

(Remote Access)

Mobile Users

ZyWALL Personal Firewall/VPN

Web, Mail

Server

ZyWALL Internet Security Gateway Managed Ethernet Switch Vantage CNM Centralized network management

Server Farm

ZyWALL Personal Firewall Workgroup

Workgroup

Protection

Protection

Personal

Perimeter Protection

Workgroup Protection

ZyXEL's ZyWALL series of firewalls is suitable for deployment at the entrance to the corporate and SMB networks, undertaking the duty of perimeter gateway protection.

The benefit of deploying information security systems on the gateway is that they act a single point of access to the corporate network and the main access point to the Internet. The system can thus monitor all the incoming and outgoing traffic, and grant or deny incoming data passage in accordance with company's network security policies. Under the gateway-deployed security structure, the deployed gateway will take charge of corporate LAN security, and replace complicated individual client security schemes.

The disadvantage of using a gateway-deployed security system alone is that it also is a single point-of-failure risk. Once the attack is past the gateway, it has complete access to the LAN. This is why ZyXEL advocates a multi-layer approach.

In the case where worms or other attacks have

successfully penetrated into the corporate network, the top priority is isolating the infection to prevent it from spreading and causing more damage. This requires the workgroup-level security offered by ZyWALL devices. With this security feature activated, even if a few departments have been invaded by a worm or have already suffered an attack, the damage can be contained within the affected workgroups without jeopardizing others, thanks to ZyWALL’s excellent Workgroup Protection capabilities. This function acts by disconnecting an infected

workgroup from the LAN. While the infected workgroup will temporarily lose connection with the other

departments, all the company's remaining IT assets will remain intact. Other nodes, small offices, and remote offices added for business expansion may become the source of security threats if not controlled properly. For more security, intrawall-security will become essential between workgroups.

Remote Access Security

As telecommuting is becoming a more accepted and practiced work medium, more people need to connect to corporate networks for online resources, and a remote access VPN feature is indispensable for this purpose. To facilitate both telecommuting and mobile computing, and to meet the market's needs, ZyXEL offers the ZyWALL portable personal firewall in addition to its Remote VPN Security Client which provides an alterative security solution to users who connect to the office over the public Internet or use an un-trusted connection from public hotspots or a home network.

Internet and affordable broadband connections equipped with secure and private communications. Site-to-site VPN technology benefits from the ZyXEL Vantage CNM, the Centralized network management mechanism, since it simplifies VPN setup, management and monitoring of multi-site IPSec VPN tunnels. Users can easily set up a VPN with a few steps, while at the same time, reducing the on going management complexity.

Personal Protection

Even with gateway and workgroup protection in place, threats from inside the LAN are still a major concern. Infected files can easily be brought into the office by traveling employees, and spread within the workgroup as he or she passes the file to colleagues. Individual clients may consider using personal firewall devices to reinforce their protection. The portability of the device helps users prevent attackers from accessing private or public

networks. As a best-of-breed portable personal firewall, the ZyWALL Personal Firewall appliance can effectively defend individual systems in collaboration with gateways and departmental protections.

Site-to-Site VPN

Apart from multi-level protection against internal and external threats, the ZyWALL ICSA-certified IPSec VPN can also provide users cost effective site-to-site VPN

applications, allowing users to take advantage of the

ZyXEL SMART Network Security Blueprint for SMB

7

Key Features

Model

4-port and Dual WAN All-in-one Internet Security Appliance designed to deliver enterprise-class security to Small Office or Branch Office networks with up to 100 PCs

ICSA Certified Stateful Packet Inspection Firewall ICSA Certified IPSec VPN (35 VPN tunnels) Dual-WAN Failover/Failback and Load-Balancing Static and Dynamic Web Content Filtering DoS/DDoS Intrusion Prevention

Bandwidth Management

ZyWALL 35

7-port and Dual WAN All-in-one Internet Security Appliance designed to deliver enterprise-class security to Mid-sized SMB Organizations networks with up to 200 PCs

Key Features

ICSA Certified Stateful Packet Inspection Firewall ICSA Certified IPSec VPN (100 VPN tunnels) Dual-WAN Failover/Failback and Load-Balancing Static and Dynamic Web Content Filtering DoS/DDoS Intrusion Prevention

Bandwidth Management

Model ZyWALL 70

4-port All-in-one Internet Security Appliance to SOHO or Fixed-Telecommuter networks with up to 10 PCs

Key Features

ICSA Certified Stateful Packet Inspection Firewall ICSA Certified IPSec VPN

Dial-Backup

Static and Dynamic Web Content Filtering DoS/DDoS Intrusion Prevention

Model ZyWALL 2

4-port All-in-one Internet Security Appliance designed to deliver enterprise-class security to SOHO or Fixed-Telecommuter networks with up to 30 PCs

ICSA Certified Stateful Packet Inspection Firewall ICSA Certified IPSec VPN (10 VPN tunnels) Static and Dynamic Web Content Filtering DoS/DDoS Intrusion Prevention

Bandwidth Management

ZyWALL 5

Key Features

Browser-based global management solution that allows an administrator to easily configure, manage, monitor and troubleshoot ZyXEL devices from any location

Key Features

One-click VPN

Centralized Firewall Management Firmware Upgrade and Management Intuitive Device and Account Monitoring

Multiple Administrator, Multiple Domain Management

Model Vantage CNM 2.1

Wireless AP management solution allows an administrator to easily configure, manage, monitor and troubleshoot ZyXEL Wireless devices from any location

Key Features

Wireless Zone defense (STA user filtering) AP management

(RF Control, Rouge AP Detection, Load Balance) Multi-user authentication (internal employees & visitors) User-based ACL

Statistic & Report

Model Vantage WLAN Controller 200

SMB All-in-one Intrusion Detection and Prevention Security Appliance to Mid-sized business Organizations networks with up to 200 PCs

Key Features

Real-time detection and prevention with in-line structure CPI (Complete Packet Inspection) technology

DoS/DDoS, Buffer Overflow, Port Scan, Trojan Horse/Back Door, Virus/Worm Protection

Layer 7 application blocking (P2P, IM, SPAM, Porn, Web Attack)

Automatic Signature Update with One-year subscription included

Model ZyWALL IDP 10

Powerful personal All-in-one Internet Security Appliance (USB powered)

Key Features

ICSA Certified Stateful Packet Inspection Firewall ICSA Certified IPSec VPN

USB powered

DoS/DDoS Intrusion Prevention Bandwidth Management