MWC 2014: Come and Visit ZyXEL from February 24 to 27 at the Fira Gran Via, Hall 5, booth 5G10

1. High Availability,
Best Integrated Solution
For Small Offices and Businesses
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

2. Multi-WAN In-A-Box
Highest availability of Internet Access
▪ Supporting fail-over and load balancing across multiple WANs
CO
Fiber ONU
Gigabit ETH WAN
OLT
Fiber WAN
Internet
VDSL2/ADSL2+ WAN
DSLAM
Copper
CAT-5
USB
Fiber
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

3. DSL Bonding/ Vectoring
High bandwidth/performance up to 100Mbps
▪ Eliminate bandwidth depletion when distance extends
▪ Cost effective approach to expand bandwidth on existing
infrastructure
Vectoring
Bonding
Internet
xDSL Bonding
Copper
DSLAM
xDSL Vectoring
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

4. VPN Remote Access
Secured VPN connectivity from remote sites
▪ Supporting both site-to-site and client-to-site VPN
▪ Comprehensive support on IPSec, L2TP or PPTP VPN
Remote Office
Site-to-site VPN
Internet
Central Office
Client-to-site VPN
Travel Worker
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

5. Integrated WLAN Management
Best investment protection for small offices
▪ Centrally manage up to 16 access points
▪ Extend Wi-Fi coverage with minimized deployment efforts
Ethernet
WLAN Management
Small Business Gateway
PoE Switch
Staff Kitchen
Wi-Fi AP
Note:
•
Only SBG3500-N and SBG3600 are built in with WLAN controller
•
Managed AP series includes NWA3000-N, NWA5000-N and
NWA5120 series
Office
Meeting Room
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

6. Firewall and Security
Robust Business Security
DMZ Resource
Email Server
BI System
Configurable DMZ
File Share
OA, ERP System
CRM System
Stateful Packet Inspection
Web-based
Application
Application Server
(Inventory, Store..)
Remote Desktop Network Extend
Work Group
Directional ACL Support
Internet
ACL
Protection against DoS/DDoS
Up to 256 ACL rules
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

7. Product Highlight
SBG3300-N Wireless N Dual-WAN Small Business Gateway
Key features
• Multi-WAN connectivity with load-balancing and failover
• High bandwidth of up to 300 Mbps for high network performance and
coverage
• VPN-encrypted data protection for remote access and site-to-site
connections
• Firewall and URL/keyword filtering to prevent network resource abuse
• 3G/4G USB devices supported for mobile broadband backup
• Auto provisioning upon installation with TR-069 support
WAN - I/O port
• One RJ-11 connector for VDSL/ADSL2+ over POTS
• One RJ-45 connector for VDSL/ADSL2+ over ISDN
LAN – I/O port
• Four 10/100/1000M auto MDI/MDIX RJ-45 ports
• 802.1Q VLAN tag support
Wireless
• 2x2 802.11n, up to 300 Mbps
Management
• SNMP MIB II
• TR-069
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

8. Product Highlight
SBG3500-N Wireless N Fiber WAN Small Business Gateway
Key features
• Multiple WAN interfaces support for various connectivity capability
• Supports VDSL bonding to expand the fixed-line bandwidth
• Guest management enabled with external/internal AAA captive Web
portal support
• VPN, Firewall and IRL/key word filtering provide solid data security
• 3G/4G USB device supported for mobile broadband back-up
• Built-in Wi-Fi controller to simplify WLAN management*
Feature supported in Q2 2014
WAN - I/O port
• Two RJ-11 connectors for VDSL2/ADSL2+ over POTS
• One RJ-45 connector for VDSL2/ADSL2+ over ISDN
• One RJ-45/SFP combo connector for fiber
LAN – I/O port
• Four 10/100/1000M auto MDI/MDIX RJ-45 ports
• 802.1Q VLAN tag support
Wireless
• 2x2 802.11n, up to 300 Mbps
Management
• SNMP MIB II
• TR-069
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

9. Product Highlight
SBG3600 LTE Multi-WAN Small Business Gateway
Key features
• Multiple WAN interfaces support for various connectivity capability
• Supports VDSL bonding to expand the fixed-line bandwidth
• LTE multi-band mobile broadband access enabled for superior
business services
• 3G & LTE dual-mode support for seamless mobile access
• Guest management enabled with external/internal AAA captive Web
portal support
• VPN, Firewall and IRL/key word filtering provide solid data security
• Built-in Wi-Fi controller to simplify WLAN management*
Feature supported in Q2 2014
WAN - I/O port
• Two RJ-11 connectors for VDSL2/ADSL2+ over POTS
• One RJ-45 connector for VDSL2/ADSL2+ over ISDN
• One RJ-45/SFP combo connector for fiber
LAN – I/O port
• Four 10/100/1000M auto MDI/MDIX RJ-45 ports
• 802.1Q VLAN tag support
Wireless
• 2x2 802.11n, up to 300 Mbps
Management
• SNMP MIB II
• TR-069
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

10. SBG Comparison Matrix
Model
SBG3300-N
SBG3500-N
SBG3600
Multi-WAN
WAN load
balancing/Failover
DSL/Gigabit Ethernet
DSL/Gigabit Ethernet or SFP
Mobile broadband
3G
LTE built-in/3G
Mobile broadband
interface
External mobile USB dongle
• LTE band 3, 7, 8, 20 for EU
• 3G via external mobile USB
dongle
LAN
I/O port
Four 10/100/1000M auto MDI/MDIX RJ-45 ports
DMZ
USB 2.0 port
Yes (LAN selectable)
2
1
1
VLAN
Connection
Client-to-site, Site-to-site
VPN protocol
IPSec, PPTP, L2TP/IPSec
VPN session
Concurrent IPSec 20 VPN tunnels, Max. VPN tunnel 35
VPN HA
VPN Throughput
Yes
40 Mbps
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

11. Unified Security Gateway 3G
Fail-over For Business Segments
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

12. Internet Connection backup from 3G WAN
Highest availability of Internet Access
• When WAN fail, it can link to 3G for signal as a backup, and link
back to WAN when Internet is back.
Central Service Network
Router
NAT router
3G Network
IP Network
Primary Link
DSL router
3G-1
WAN1
USG100-Plus
WAN
3G
Backup Link:
Two 3G interface.
3G-2
ATM station
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

13. VPN Fail-over via 3G Connection
Safe, reliable Virtual Private Network (VPN) connections
▪ VPN Failover – Fallback
▪ Site to site, client to site
VPN Failover
3G (passive)
Internet
USG 20W
WAN1(active)
ge2 (172.16.10.1)
VPN Fallback
Central Side
Client Side
•
Wave – 3G
When Client Side WAN1 fail, it can link to 3G as a back up (VPN
Failover). Link back to WAN1 when Internet is back(VPN Fallback).
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

14. 3G WAN Distributed Deployment
Safe, reliable Virtual Private Network (VPN) connections
▪ VPN Failover – Fallback
▪ Site to site, client to site
•
Internet
Connect to Internet via 3G for some
places may difficult for cabling
3G Based Station
VPN Tunnel
3G Wave
USG
Tablet
Smart phone
3G dongle
3G dongle
3G dongle
USG
USG
Tablet
Smart phone
Tablet
Smart phone
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

15. USG20W
Unified Security Gateway
Key features
• Unified Security Gateway for SB (1~5 PC Users)
• All Gigabit Ethernet interface hardware design
• High-performance multi-layer threat protection
• Hybrid VPN (IPSec, SSL and L2TP) secures
connection
• Non-stop Internet access with multiple WAN
and 3G backups
• 802.11b/g/n wireless AP
Performance and Capacity
• SPI firewall throughput: 100Mbps
• VPN AES/3DES throughput: 30Mbps
• Concurrent sessions: 6,000
• New session rate: 900 (sessions/sec)
• Simultaneous IPSec VPN tunnels: up to 5
• Simultaneous SSL VPN tunnels: 1/1
(included/max)
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

16. USG300
Unified Security Gateway
Key features
• Unified Security Gateway for SB (1~5 PC
Users)
• All Gigabit Ethernet interface hardware
design
• High-performance multi-layer threat
protection
• Hybrid VPN (IPSec, SSL and L2TP)
secures connection
• 3G USB dongle as the backup WAN
• 802.11b/g/n wireless AP
Performance and Capacity
• SPI firewall throughput: 100Mbps
• VPN AES/3DES throughput: 30Mbps
• Concurrent sessions: 6,000
• New session rate: 900 (sessions/sec)
• Simultaneous IPSec VPN tunnels: up to 5
• Simultaneous SSL VPN tunnels: 1/1
(included/max)
Management
• Console, Vantage CNM, Vantage Report,
3G support, VLAN Tagging (802.1q)
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

17. USG1000
Unified Security Gateway
Key features
• High Performance VPN Concentrator
• Proactive Network Protection
• IM / P2P Management
• User-Aware Policy Engine
• Bandwidth Management
• VoIP Security
• High Availability
Performance and Capacity
• SPI Firewall Throughput: 300Mbps
• IPSec VPN (AES) Throughput: 150Mbps
• Maximum Concurrent NAT Sessions:
200,000
• Maximum IPSec VPN Tunnels: 1,000
• Maximum SSL VPN Tunnels: 50
• New Session Rate: 10,000 (sessions/sec)
Management
• Console, Vantage CNM, Vantage Report,
3G support, VLAN Tagging (802.1q)
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

18. USG Comparison Matrix
Model
Hardware Specifications
USG20W
USG300
USG1000
4 x LAN/DMZ, 1 x
WAN
7 (configurable)
5 (configurable)
1
2
2
SPI firewall throughput (Mbps)
175
350
400
VPN throughput (Mbps)
75
130
180
-
80
100
Yes
Yes
Yes
Max. TCP concurrent sessions
10,000
60,000
500,000
New TCP session rate
1,000
1,500
12,000
Max. UTM (AV and IDP) concurrent sessions
10,000
60,000
500,000
Max. concurrent IPsec VPN tunnels
5
200
1,000
Max. concurrent SSL VPN users
1
25
250
Included SSL VPN user no.
1
2
5
Yes
Yes
Yes
802.11 b/g/n
-
-
10/100/1000 Mbps RJ-45 ports
USB ports
System Capacity & Performance
UTM throughput (AV and IDP)
Unlimited user licenses
Customizable zones
Wireless Specifications
Standard compliance
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.

19. Make the World Connect
www.zyxel.com
Copyright©2014 ZyXEL Communications Corporation. All rights reserved.