ZyXEL ZyWALL USG 100, Unified Security Gateway

FEATURE
SPECIFICATION
Ethernet Interfaces
Number of Ethernet interfaces: 7
All Ethernet interfaces are Gigabit Ethernet, full duplex RJ-45
connectors, auto-negotiation, auto-MDI/MDIX (auto-
crossover)
Management interface
RS-232, DB9F connector
AUX port
RS-232, DB9M connector
USB Slots
2, 2.0 plug and play
Compatible USB Cards
(3G)
Huawei: E220, E270, E160, E169, E800, and E180
Extension Card Slot
Slot for optional hardware accessories
PCMCIA slot for a wireless LAN or cellular (3G) card.
Compatible PCMCIA Cards ZyXEL's G-170S IEEE 802.11g wireless card.
Sierra Wireless AC850, AC860, AC880 or AC881 3G card
Power Requirements
12V DC
Operating Environment
Temperature: 0 C to 50 C
Humidity: 5% to 95% (non-condensing)
Chapter 57 Product Specifications
ZyWALL USG 100/200 Series User's Guide
924
It is recommended that you
do NOT wall-mount the ZyWALL. A
wall-mounting kit is
not included.
This table gives details about the ZyWALL's features.
Storage Environment
Temperature: -30 C to 60 C
Humidity: 5% to 95% (non-condensing)
MTBF
Mean Time Between Failures:
323,823 hours
Dimensions
242 (W) x 175 (D) x 35.5 (H) mm
Weight
1.2 kg
Rack-mounting
Rack-mountable (rack-mount kit included)
Wall-mounting
The ZyWALL has wall-mounting holes on the bottom panel.
The centers of the holes are located 156 mm apart.

ZyWALL USG 100 Feature Specifications
VERSION #
FEATURE
V2.12
V2.20
# of MAC
5
5
Flash Size
256
256
DRAM Size
256
256
INTERFACE
VLAN
32
32
Virtual (alias)
4 per interface
4 per interface
PPP (system default)
2
2
PPP (user created)
NA
4
Bridge
8
8
Table 266
ZyWALL USG 200 Feature Specifications (continued)
VERSION #
FEATURE
V2.12
V2.20
Chapter 57 Product Specifications
ZyWALL USG 100/200 Series User's Guide
928
ROUTING
Static Routes
128
128
Policy Routes
200
200
Sessions
20,000
20,000
ARP Table Size
1024
1024
MAC Table Size (For Bridge Mode only)
8K
8K
NAT
NAT Entries
up to 256
up to 256
Trigger Port Rules
up to 8 per PR
rule
up to 8 per PR
rule
HTTP Redirect
up to interface
limit
up to interface
limit
New Session Rate (sessions per second)
1000
1000
FIREWALL
Firewall ACL Rules
500
500
Maximum Session Limit per Host Rules
1000
1000
APPLICATION PATROL
Maximum Rules for Other Protocols
16
16
Maximum Rules for Each Protocol
16
16
Allowed Ports
NA
8
Default Ports
8
8
USER PROFILES
Maximum Local Users
128
128
Maximum Admin Users
5
5
Maximum User Groups
32
32
Maximum Users in One User Group
128
128
OBJECTS
Address Objects
200
200
Address Groups
50
50
Maximum address object in one group
128
128
Service Objects
200
200
Service Groups
50
50
Maximum service object in one group
128
128
Schedule Objects
32
32
ISP Account
NA
16
Maximum Number of LDAP Groups
2
2
Table 267
ZyWALL USG 100 Feature Specifications (continued)
VERSION #
FEATURE
V2.12
V2.20
Chapter 57 Product Specifications
ZyWALL USG 100/200 Series User's Guide
929
Maximum Number of LDAP Servers for Each LDAP
Group
22
Maximum Number of RADIUS Groups
2
2
Maximum Number of RADIUS Servers for Each
RADIUS Group
22
Maximum AD server for each AD group
2
2
Maximum AD group number
4
4
Maximum Number of Authentication Methods
2
2
Number of Zones (system default)
7
7
Maximum Number of Zones (user created)
NA
16
Number of Trunks (system default)
5
1
Maximum Number of Trunks (user created)
NA
8
IPSEC VPN
Maximum Number of IPSec VPN Tunnels
50
50
Maximum Number of IPSec VPN Concentrators
2
2
CERTIFICATES
Certificate Buffer Size
64 K
64 K
BUILT-IN SERVICES
A record
64
64
NS record
8
8
MX record
8
8
Maximum Number of Service Control
Entries
16 per service
16 per service
Maximum DHCP Host Pool
128
128
Maximum Number of DDNS Profiles
5
5
DHCP Relay
2 per interface
2 per interface
CENTRALIZED LOG
Log Entries
512
512
Debug Log Entries
1024
1024
Admin E-mail Addresses
2
2
Syslog Servers
4
4
IDP
Maximum Number of IDP Profiles
8
8
Custom Signatures
32
32
Maximum Number of IDP Rules
32
32
ADP
Maximum Number of ADP Profiles
8
8
Table 267
ZyWALL USG 100 Feature Specifications (continued)
VERSION #
FEATURE
V2.12
V2.20
Chapter 57 Product Specifications
ZyWALL USG 100/200 Series User's Guide
930
Maximum Number of ADP Rules
32
32
Maximum Block Host Number
1000
1000
Maximum Block Period
3600
3600
CONTENT FILTER
Maximum Number of Content Filter Policies
16
16
Maximum Number of Content Filter Profiles
16
16
Maximum Number of Forbidden Domain
Entries
128 per profile
128 per profile
Maximum Number of Trusted Domain
Entries
128 per profile
128 per profile
Maximum Number of Keywords that Can
Be Blocked
128 per profile
128 per profile
Local Cache Size
1024
1024
Maximum Number of Concurrent Connection
Requests
128
128
ANTI-SPAM
Maximum Number of Concurrent Mail Sessions
100
100
Maximum Number of Anti-Spam Rules
32
32
Maximum Number of White List Entries
128
128
Maximum Number of Black List Entries
128
128
Maximum Number of DNSBLs
5
5
Maximum Number of Anti-Spam Statistics
500
500
Maximum Anti-Spam Statistics Ranking
10
10
ANTI-VIRUS
Maximum Number of Concurrent ZIP File
Decompression Sessions
30 ZIP files
4 RAR-LZSS or
1 RAR-PPM
30 ZIP files
4 RAR-LZSS or
1 RAR-PPM
Maximum Number of Anti-Virus Rules
32
32
Maximum Number of White List Entries
256
256
Maximum Number of Black List Entries
256
256
Maximum Number of Anti-Virus Statistics
500
500
Maximum Anti-Virus Statistics Ranking
10
10
SSL VPN
Maximum SSL VPN Connections
2 without a
license
5 with license
2 without a
license
5 with license
OTHERS
Maximum Number of Device HA VRRP Groups
32
32
Maximum Number of OSPF Areas
32
32
Table 267
ZyWALL USG 100 Feature Specifications (continued)
VERSION #
FEATURE
V2.12
V2.20
Chapter 57 Product Specifications
ZyWALL USG 100/200 Series User's Guide
931
The following table, which is not exhaustive, lists standards referenced by ZyWALL
features.
Table 268
Standards Referenced by Features
FEATURE
STANDARDS REFERENCED
Interface-Bridge
A subset of the ANSI/IEEE 802.1d standard
Interface
RFCs 2131, 2132, 1541
Interface-PPP
RFCs 1144, 1321, 1332, 1334, 1661, 1662, 2472
Interface-PPTP
RFCs 2637, 3078
Interface-PPPOE
RFC 2516
Interface-VLAN
IEEE 802.1Q
Dynamic Route, Show IP route
RFCs 1058, 2082, 2453, 2328, 3101, 3137
Telnet server
RFCs 1408, 1572
SSH server
RFCs 4250, 4251, 4252, 4253, 4254
Built-in service, DNS server
RFCs 1034, 1035, 1123, 1183, 1535, 1536, 1706,
1712, 1750, 1876, 1982, 1995, 1996, 2136, 2163,
2181, 2230, 2308, 2535, 2536, 2537, 2538, 2539,
2671, 2672, 2673, 2782, 3007, 3090
Built-in service, DHCP server
RFCs 1542, 2131, 2132, 2485, 2489
Built-in service, HTTP server
RFCs 1945, 2616, 2965, 2732, 2295
Built-in service, SNMP agent
RFCs 1067, 1213, 2576, 2578, 2579, 2580, 2741,
2667, 2981, 3371
Login, LDAP support.
RFCs 2251, 2252, 2253, 2254, 2255, 2256, 2589,
2829, 2830
Used by Apache
RFCs 2437, 2246, 2560, 2712, 3268, 3280, 3820,
4132
Built-in service, FTP server
RFCs 959, 2228, 2389, 2865, 2138, 2640
Used by Centralized log
RFC 3164
Login, new PAM module
OSF-RFC 86.0, 1321
Built-in service, NTP client
RFCs 958, 1059, 1119, 1305
Used by SSH service
RFCs 4250, 4251, 4252, 4253, 4254
Used by Time service
RFCs 3339
Used by Telnet service
RFCs 318, 854, 1413
Used by SIP ALG
RFCs 3261, 3264
DHCP relay
RFC 1541
ZySH
W3C XML standard
ARP RFC 826
IP/IPv4 RFC 791
TCP
RFC 793