Unified Security Gateway


Hardware Specifications
Interfaces 12x GbE (configurable), 4x SFP (configurable), 2x 10G Combo
USB ports 2
Console port Yes (DB9)
Rack-mountable Yes
System Capacity & Performance*1
SPI firewall throughput(Mbps)*2 25,000
VPN throughput (Mbps)*3 2,500
IDP throughput (Mbps)*4 2,000
AV throughput (Mbps)*4 2,000
UTM throughput (AV and IDP, Mbps)*4 1,100
Max. TCP concurrent sessions*5 1,500,000
Max. concurrent IPSec VPN tunnels*6 3,000
Concurrent SSL VPN users (default/max.)*7 250 / 1,000
VLAN interface 256
Concurrent devices logins (default/max.)*7*8 2,000 / 5,000
WLAN Management
Managed AP number (default/max.)*7 8/1032
Recommend max. AP in 1 AP Group 300
Security Service
Anti-virus (AV)*7 Yes
Intrusion detection and prevention (IDP) & Application Patrol*7 Yes
Content filtering *7*9 Yes
SecuReporter Premium *7 Yes
Key Features
SSL (HTTPS) inspection Yes
2-Factor Authentication Yes
Hotspot Management*7 Yes
Microsoft Azure Yes
Amazon VPC Yes
Device HA Pro Yes, Activate once registered
Power Requirements
Power input 2 x AC-DC redundant power supply 110-240V AC, 50/60 Hz, 2.5 A max.
Max. power consumption (watt) 119
Heat dissipation (BTU/hr) 406.045
Physical Specifications
Item Dimensions (WxDxH)(mm/in.)
438.5 x 500 x 89/17.26 x 19.69 x 3.50
Weight (kg/lb.)
Packing Dimensions (WxDxH)(mm/in.)
795 x 600 x 215/31.3 x 23.62 x 8.46
Weight (kg/lb.)
18.12 (with DUT)/39.95
Included accessories
  • Power cord x 2
  • Rack mounting (slide) kit
Environmental Specifications
Operating Temperature
0°C to 40°C (32°F to 104°F)
10% to 90%(non-condensing)
Storage Temperature
-30°C to 70°C (-22°F to 158°F)
10% to 90%(non-condensing)
MTBF (hr) 280,490
  • FCC Part 15 (Class A)
  • CE EMC (Class A)
  • C-Tick (Class A)
  • BSMI
Safety LVD (EN60950-1), BSMI

*: This matrix with firmware ZLD4.60 or later.

  1. Actual performance may vary depending on network conditions and activated applications.
  2. Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
  3. VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
  4. AV (with Express Mode) and IDP throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
  5. Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
  6. Including Gateway-to-Gateway and Client-to-Gateway.
  7. With Zyxel service license to enable or extend the feature capacity.
  8. This is the recommend maximum number of concurrent logged-in devices.
  9. SafeSearch function in CF need to enable SSL inspection firstly and not for small business models.
  10. With Hotspot Management license support.