Information is an asset that, like other important business assets, is of value to the company and therefore must be adequately protected. In enterprise-class companies, they have an information technology (IT) department that is responsible for providing the availability, integrity, and confidentiality of business resources (the information assets). One of the main tasks of the IT department is to protect the internal network from all kinds of network and internet threats.
Hundreds of new viruses and worms are introduced onto the wild internet every week. In network companies, you should have a well-managed antivirus infrastructure centrally to prevent the virus outbreak from spreading into the private network. Spam is annoying, phishing and virus-infected messages from incoming SMTP-based emails need to be blocked before they reach your network. You must deploy such an anti-spam appliance. Hacking techniques are gradually evolving, so deploying such a firewall with an intrusion detection system is essential so that your system can detect and discard false positive packets before they reach the internal network.
As a security best practice, any connection to the network coming from the Internet must be made securely. Deploying a virtual private network infrastructure is a must for mobile users or users traveling to create a secure tunnel to the private network. With the VPN infrastructure, you can connect the branch offices in a secure way with L2TP / IPSec VPN. And remote workers can easily and securely access the corporate network over the public Internet.
To provide business continuity in a communication system, every single failure of the system element must be eliminated. System redundancy in the communication system must be developed to enable a load balancing and failover/failback system. We can see that these systems are very complicated for small and medium-sized businesses and require a very expensive deployment with multiple experts in their field. However, the Zyxel Zywall 5 Internet Security Firewall Appliance can handle all of the above tasks.
What this product does
The Zyxell Zywall5 Internet Security Firewall Appliance is an 8-in-1 UTM solution for your company’s security protection and performance. Zyxell Zywall5 is a single solution that packs 8 security features into a single device to provide solid protection for your corporate networks without compromising the performance of the system. These security features include antivirus, IDP, anti-spam, firewall, VPN, load balancing, bandwidth management, and content filtering, all offered in one box and controlled through a single unified interface.
Zyxell Zywall5 includes advanced ICSA-certified SPI firewall and secure IPSec VPN tunneling for proven security and compatibility. A firewall controls, authenticates, filters, and logs all traffic between your internal network and public networks. For you to create secure tunneling, the Zyxell Zywall5 supports ICSA-certified VPN with manual key, IKE, PKI, encryption, Xauth user authentication (internal database and external RADIUS) and DH1/2, RSA signature.
With the introduction of many viruses and other malware to the wild internet and innovative hackers, Zywall includes the function of antivirus (with Kaspersky antivirus signatures) and intrusion detection and prevention (IDP) system to avoid all kinds of internet threats such as Viruses, worms, trojans, backdoors and also protect all port scanning attempts. Antivirus signature updates can be automatic or scheduled.
The Zyxell Zywall5 Firewall Appliance not only offers you solid protection, but also content filtering, traffic and system management. Content filtering allows you to configure website blocking by URL keywords, Java/ActiveX/Cookie/News blocking and also filtering of external database content. With Traffic Management, the device provides guaranteed/maximum bandwidth, policy-based traffic shaping, bandwidth utilization priority, bandwidth management, and static routes.
When the Zywall is in router mode, you can also insert a 3G wireless card to add a second WAN for load balancing. You can also change the LAN function roles to be configured as demilitarized zones (DMZ) so you can create a security separation when a security boundary is required to host public resources such as web servers or email servers. By placing the public resources in the DMZ, Internet users cannot access your internal networks.
And the good thing is, you can upgrade your existing Zywall 5/35/70 UTM series from Zyxel to get 20x performance with just one Zywall Turbo Card. With this new technology, you can get rid of your multiple systems and replace them with this all-in-one cywall system for content filtering, antivirus, anti-spam and intrusion detection services.