Internet Access through 3G Networks (HSDPA, UMTS, GPRS, EDGE, EVDO, CDMA) Dual-band, Tri-mode Access Point with Wireless 802.11a/b/g Network Web-based Content Filtering Services Available Advanced ZyNOSTM ICSA Certified SPI Firewall and IPSec VPN Protection Configurable 4-Port LAN/DMZ/WLAN Zones
3G and Wi-Fi Mobile Broadband Security Appliance for Remote Office (RO)/SOHO

Benefits

Internet access through 3G networks (HSDPA, UMTS, GPRS, EDGE, EVDO, CDMA)
The ZyWALL 2WG provides users even more convenient Internet access with 3G service to eliminate the limitation of the wired network and extends the last-mile service wirelessly. Incorporated the wired environment, the solution can apply Backup WAN and Load Balancing features to various applications while offering more mobility with Wi-Fi connectivity. The ZyWALL 2WG supports both HSDPA/CDMA Cellular networks. For a list of specic cards supported, please see specications.
Virtual Private Network (VPN) Connection
The ZyWALL 2WG supports ZyNOS ICSA-certied IPSec VPN suitable for deployments from remote sites to the central server. As data encryption over the Internet ensures secure transmission between two sites without expensive leased lines, global interconnectivity can be achieved at a minimal cost. Thanks to the Redundant IPSec VPN feature, the ZyWALL 2WGs dialup client will keep the connection running even the primary VPN connection fails.
Secured Firewall Protection
The ICSA-certied ZyNOS Firewall on the ZyWALL 2WG provides robust, reliable rewall security with high performance. Based on Stateful Packet inspection and Denial of Service (DoS) technology, it provides the rst-line defense against hackers, network intruders and other hazardous threats.
Internet Security Appliance

zywall 2wg

Secure Zone Technology
The ZyWALL 2WG offers the Secure Zone technology that SOHO users can simply deploy access servers in a DMZ zone separated from the trusted local network (LAN). The DMZ zone and WLAN zone have their own DHCP service, and all zones are securely segregated

by rewall rules.

Specifications

System Specications

Mode of Operation
Routing Mode Transparent Mode (Bridge) NAT (Network Address Translation) Dial Backup

System Management

Web GUI (HTTP, HTTPS) Command Line Interface (Console, Telnet, SSH) Vantage Centralized Network Management
Environmental Specications
Operating Temperature: 0C ~ 50C Operating Humidity: 20% ~ 95% (non-condensing) Storage Temperature: -30C ~ 60C Storage Humidity: 20% ~ 95% (non-condensing)
Wireless Virtual Private Network
5 simultaneous IPSec VPN Connections DES/3DES/AES encryption Manual Key, IKE and PKI (X.509) IPSec NAT Traversal Xauth User Authentication Redundant VPN connection (VPN HA) IEEE 802.11a/b/g compliant MAC Filter 64/128-bits WEP encryption IEEE 802.1x (EAP-MD5/TLS/TTLS/PEAP) WPA/WPA-PSK/WPA2/WPA2-PSK Roaming Congurable output power

Certication

EMC: FCC Part 15 Class B, CE-EMC Class B, C-Tick Class B, VCCI Class B Safety: CSA International, CE EN60950-1 (UL60950-1, CSA60950-1, EN60950-1, IEC60950-1) C-Tick VCCI Green Product and WEEE comply with

Hardware Specications

Firewall Security
Transparent Firewall (Bridge mode) Stateful Packet Inspection DoS and DDoS Protection Real-time Attack Alert and Logs Status LED Indicator: PWR, LAN/DMZ 1 ~ 4, WAN, AUX, WLAN, CARD Power adapter: 12 VDC Reset Button: Yes LAN/DMZ: 4-port switch, 10/100 Mbps Auto MDI/MDIX WAN: 10/100 Mbps Auto MDI/MDIX Dial Backup: RS-232 on RJ-45 Null Modem Port Console: RS-232 on RJ-45 Port

Supported Cards

Sierra Wireless 595 AirCard* Sprint AirCard 595* Verizon AirCard 595* Telus AirCard 595*

Content Filtering

Java/AactiveX/Cookie/ Proxy Blocking URL and Key word Blocking Web Content Filtering

Physical Specications

Network
DHCP client/server/relay PPPoE PP Dimensions: 220 (W) x 148 (D) x 30.5 (H) mm Weight: 517 g
Sierra Wireless 860 AirCard* Cingular/AT&T AirCard 860* Sierra Wireless 875 AirCard* Cingular/AT&T AirCard 875*
*We are neither afliated any of the above brand name or trade marks nor doing promotion of their products. The above name or trademark belongs to the respective owner.

Application Diagram

3G Data Card Access
- Primary WAN - Backup WAN - Dual WAN (LB)

Wi-Fi Security

- WEP/WPA/WPA2 - 802.1x EAP Auth.

Internet

3G Card

ec IPS nel Tun

ZyWALL 70 UTM

ZyWALL 2WG

IPSec Tunnel

Remote Ofce

Central Ofce/HQ
For more product information, visit us on the web www.US.ZyXEL.com

ZyXEL North America

Tel: +1-714-632-0882 Fax: +1-714-632-0858 Email: sales@zyxel.com http://www.us.zyxel.com
Copyright 2007 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo is a registered trademark of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.

264856 - 08192005

ZyXEL North America Tel: 714.632.0882 Fax: 714.632.0858 Email: sales@zyxel.com http://www.us.zyxel.com
Copyright 2008 ZyXEL Communications. ZyXEL is a trademark of ZyXEL Communications, Co. Reproduction in whole or part without permission is prohibited. All other trademarks are the property of their respective owners.
One ISP, Multiple Locations, Anywhere

Product Solution Guide

0812v100psq-2WG

Contents

Introduction Problem Statement Previous Options ZyXELs Solution Implementation Summary 9 9

Problem Statement

How can my business get high speed Internet access from just one ISP, anywhere we need to deploy?

Previous Options

In the past, if a business needed nationwide network connectivity, it would hire a large dial-up ISP which offered POPs (Points of Presence) via local phone lines. It simplified managing the ISP and billing plans, but still left the business having to manage multiple local The number and type of devices that require high-speed Internet access continues to grow. One of the biggest challenges facing large scale deployments is getting connectivity to all the different locations. The traditional method of doing this is to go to the local Internet Service Provider at each location and contract service. However, this can be a messy affair as there are no traditional ISPs that offer national coverage. In the end, businesses end up dealing with a number of different rate plans, multiple bills, and multiple companies. We offer an alternative. As the need for higher speeds increased, consumers moved to xDSL service and cable modems. These services offered much greater speeds, but service was highly localized. Even regional deployments were often involved with 2-3 different ISPs that provided service to all locations. phone line providers. It also left the business stuck with dial-up speeds.

ZyXELs Solution

ZyXELs ZyWALL 2WG provides a simple solution to providing Internet nationwide by using only one ISP. The 2WG is an ICSA-certified firewall and IPSec VPN appliance. In addition to a standard Ethernet based WAN port that will work with most land-line based Internet connections, the 2WG will also work with the new high speed Internet plans offered by most mobile phone carriers. Current cellular data rates can reach up to 3.1Mbps down and 1.9Mbps up, making it comparable to land-line offerings. The big bonus is there are several nationwide carriers offering pure data plans, allowing businesses to have one ISP for all their needs.

Introduction

BENEFIT 1 Simplify deployments with one Internet provider with nationwide coverage. Geographically diverse deployments traditionally require managing and coordinating with multiple Internet Service Providers for broadband service.
DSL ISP 1 BENEFIT 2 ZyXEL is carrier agnostic. Our customers may choose their preferred carrier data plan. ZyXELs 2WG works with almost all cellular data providers. DSL ISP 2 Cable ISP 1 FIOS DSL ISP 3 DSL ISP 4 Cable ISP 2 Dial-Up ISP
BENEFIT 3 ZyXELs mobile broadband is provided via an expansion slot, so our customers are not locked down to any one technology for Internet access. Easily switch carriers or upgrade data rates by swapping new cards. With ZyXEL 2WG using cellular broadband connections, you can use one ISP, Even in nationwide deployments.
BENEFIT 4 The ZyWALL 2WG is a full featured firewall and VPN client. Users feel safe knowing their connected devices are protected from intruders, and use ZyXELs VPN to allow encrypted transfer of data back to the head office.

only one ISP required

Implementation
Implementation is as simple as sliding the cellular data card into the ZyWALL 2WG, and configuring the ISP settings in the units web-based GUI. Then, just plug in any Ethernet-based device that needs Internet or VPN access.

Notes:

Summary
The ZyXEL 2WG provides a complete remote, mobile or small office platform for broadband access in an affordable package. Businesses may eliminate the complications of large scale deployments by using high speed mobile broadband technology to reduce the number of ISPs and data plans.

About ZyXEL

ZyXEL Communications, Inc., with North American headquarters in Anaheim, California, is one of the worlds foremost suppliers of broadband networking and Internet connectivity/routing products. ZyXEL is focused on developing wireless and security solutions for a large target audience including ISPs, small-to-medium sized businesses, SOHO, residential, and institutional MxU (multi-tenant unit/multi-dwelling unit) markets. ZyXELs North American distributors include Ingram Micro, Tech Data, Wynit, Jenne, and ASI.