Download - ZyXEL
Download - ZyXEL
Download - ZyXEL
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
News Magazine for Resellers Autumn | 2011<br />
IMPULSE<br />
HIGHLIGHTS<br />
ISG Integrated Service<br />
Gateway<br />
The new highlight of the<br />
<strong>ZyXEL</strong> SMB portfolio.<br />
Page 2<br />
<strong>ZyXEL</strong> and snom<br />
Is your Network ready for<br />
VoIP? Page 5<br />
<strong>ZyXEL</strong> Healthcare Solution<br />
Comprehensive solutions for<br />
the Healthcare sector.<br />
Page 6<br />
Fight the Malware Battle!<br />
Cloud-based defense – get<br />
continuous and real-time<br />
security. Page 8<br />
<strong>ZyXEL</strong> Education Centre<br />
Empower your expertise to<br />
the Internet World.<br />
Page 10
IP TELEPHONY<br />
ISG50 Service Gateway<br />
The Integrated Service Gateway (ISG) is the new highlight of the <strong>ZyXEL</strong> SMB portfolio.<br />
Ideal for companies with up to 50 users, the ISG adresses the needs of the entry-level<br />
SMB segment with state-of-the-art feature sets. The ISG is an Integrated Service<br />
Gateway, which provides router, firewall and IP-PBX features in a single device.<br />
Challenges in small company communications<br />
For anyone managing a legal or medical practice,<br />
running a workshop or managing a production<br />
company, it is important to reduce business<br />
’CHANGING VOICE<br />
COMMUNICATIONS CAN<br />
HAVE AN EXPONENTIAL<br />
EFFECT ON BUSINESS<br />
PRODUCTIVITY AND COSTS’.<br />
The ISG50 Series also overcomes the challenges<br />
of telephony network extensions and builds<br />
value-added services on the IP network. <strong>ZyXEL</strong>’s<br />
core competence – field-proven, trusted firewall<br />
and VPN technologies – always protects data<br />
and voice communications across the company<br />
network and prevents leakage of confidential<br />
Overview of ISG50 service gateways<br />
information in advance. With rich features, easy<br />
deployment and flexibility, the ISG50 Series is not<br />
only an ideal choice to fit different SMB networking<br />
communication needs, but also an extensible<br />
platform for small and medium businesses to build<br />
their unified communication networks.<br />
2 |<br />
costs whilst improving business processes,<br />
productivity and collaboration. Imagine: Perhaps<br />
you have a large number of customers who you<br />
only know over the phone, are always on call for<br />
your patients or are constantly in phone contact<br />
with your suppliers? In such situations you need<br />
a powerful telephone system that is futureproofed,<br />
connects traditional and up-to-date<br />
technologies and can be adapted perfectly to suit<br />
the size or growth of your company. <strong>ZyXEL</strong> now<br />
offers this customer segment the perfect solution,<br />
the ISG50.<br />
The integrated service platform<br />
The <strong>ZyXEL</strong> ISG50 Series is a multi-function<br />
integrated service gateway designed to support<br />
small and medium businesses with IP telephony,<br />
Firewall and VPN services within one single<br />
appliance. With innovative integration of security<br />
and communications features, IT managers are<br />
relieved from worrying about configurations and<br />
interoperability amongst various devices.<br />
NEW<br />
<strong>ZyXEL</strong> ISG50-ISDN<br />
<strong>ZyXEL</strong> ISG50-PSTN<br />
10/100/1,000 WAN Interfaces (RJ-45) 2 2<br />
10/100/1,000 LAN Interfaces (RJ-45) 3 3<br />
ISDN-BRI Interfaces 4 0<br />
FXO Interfaces 0 4<br />
FXS Interfaces 1 1<br />
USB Interfaces 2 2<br />
DB9 port, for console configuration 1 1<br />
System Performance<br />
Firewall Throughput (Mbps) 100 100<br />
VPN Throughput, AES (Mbps) 50 50<br />
Max. Concurrent Sessions 10,000 10,000<br />
New Session Rate (sessions/sec) 1,000 1,000<br />
Simultaneous IPSec VPN connection 50 50<br />
SIP extensions (default/maximum) 25/50 25/50<br />
Max. simultaneous calls 50 50<br />
Max. conference (seats) 15 15<br />
Call recording (calls) 4 4<br />
NEW
IP TELEPHONY<br />
<strong>ZyXEL</strong> ISG50-ISDN<br />
Integrated Service Gateway<br />
<strong>ZyXEL</strong> ISG50-PSTN<br />
Integrated Service Gateway<br />
5 in 1 – Suitable for 5 scenarios<br />
The new ISG50 is highly flexible and suitable for<br />
several deployment scenarios from an ΄All-in-<br />
One΄ box to several scenarios including the usage<br />
for Branch Office VoiP connectivity or Legacy<br />
PBX extension. This allows the user to address<br />
different needs depending on the situation of<br />
the company. Based on the more than proven<br />
technology of the ZyWALL series the new device<br />
offers a broad range of benefits:<br />
Reduced cost for business communications<br />
and operations<br />
The SIP trunking feature enables SMBs to lower<br />
telephony expense, while the single-device<br />
design reduces costs in terms of space, power<br />
consumption and management. Furthermore,<br />
communication efficiency can be significantly<br />
improved with sophisticated call handling and<br />
one-number reach. The ISG50 Series is equipped<br />
with high-performance DSP supporting superior<br />
voice quality over legacy telephones, and the<br />
built-in auto attendant, voice mail, conferencing<br />
and call recording bring SMB advanced telephony<br />
features without the need to add additional<br />
devices.<br />
High availability for communication and<br />
connection<br />
High availability is crucial for business<br />
communications. The ISG50 Series is designed<br />
with dual WAN to prevent service break-off; and<br />
the built-in ISDN BRI and FXO on ISG50-ISDN and<br />
AT A GLANCE<br />
Main Benefits of <strong>ZyXEL</strong> ISG50<br />
• SMB gateway with integrated communication<br />
and security services<br />
• Easy to deploy – adaptive to various networking<br />
requirements of SMB<br />
• Firewall and VPN protection on data as well<br />
as voice<br />
• Rich, high-quality communication features<br />
with mobility assurance<br />
ISG50-PSTN further deliver better tolerance when<br />
working with different Central Office (CO) links<br />
under extreme conditions. Furthermore, the dual<br />
WAN backup connection offers capabilities which<br />
support redundancy and load balance options,<br />
ensuring business continuity, productivity and<br />
reducing operating costs.<br />
Flexible extension and mobility across sites<br />
The access to the VoIP system and data services,<br />
anywhere, anytime to quickly respond to business<br />
needs without loss of opportunities has become a<br />
major requirement in today`s business world.<br />
The ISG50 Series supports smartphone registration<br />
to become an extension like office phones, and it<br />
allows the users to stay informed, even when they<br />
are on the move. The ISG50 Series also provides<br />
additional features such as conferencing for daily<br />
business needs.<br />
FEATURES<br />
<strong>ZyXEL</strong> ISG50-ISDN/ ISG50-PSTN<br />
Networking/Security/IP telephony<br />
• Stateful Packet Inspection Firewall<br />
• DoS/DDoS protection<br />
• Traffic anomaly protocol anomaly<br />
• Zone-based access control and custom<br />
security zone<br />
• IPSec VPN<br />
• Dual WAN failover and load balancing<br />
• Quality of Service (QoS)<br />
• Protocol: SIP v2 (RFC 3261), SDP (RFC 2327),<br />
RTP (RFC 1889) and Session Timer (RFC4028)<br />
• Call Detail Record (CDR)<br />
• Call Forward, Call Pickup, Call Transfer,<br />
Call Waiting, Call Hold and Call Park<br />
• Do Not Disturb (DND)<br />
• Message Waiting Indication (MWI)<br />
• Mobility Extension<br />
• Music-On-Hold (MOH)<br />
• Paging<br />
• Phonebook<br />
Secure VoIP connection to prevent illegal<br />
calling activities<br />
The VPN and smartphone applications of the<br />
ISG50 Series support comprehensive data and<br />
IP telephony features to assist teleworkers and<br />
mobile users in a secure way. The customers<br />
do not need to worry about the possibility of<br />
emerging attacks such as interception of calls,<br />
theft of service and denial of service.<br />
Quality-of-Service<br />
Build-in QoS, which provide reliable voice and<br />
time-critical applications for an excellent user<br />
experience.<br />
Local information: www.zyxel.eu/impulse<br />
FEATURES<br />
<strong>ZyXEL</strong> ISG50-ISDN/ ISG50-PSTN<br />
Networking/Security/IP telephony<br />
• Codec: G.711 a/μ, G.729a/b, G.726, G.723.1<br />
and G.722<br />
• DTMF Detection and Generation: In-Band,<br />
RFC 2833 and SIP info<br />
• Fax over IP: T.30 and T.38<br />
• Video codec pass-through: H.264,<br />
MPEG-4 SP/ASP<br />
• Dynamic Jitter Butter<br />
• G.168 echo cancellation<br />
• Silence Suppression<br />
• Voice Activity Detection (VAD)<br />
• Least Cost Route (LCR)<br />
• Direct Inward Dialing (DID)<br />
• Hunt Group<br />
• Night Service<br />
• Meet Me Conference<br />
• Voice Mail<br />
• Auto Attendant (AA)<br />
• Auto Call Back<br />
• Basic Automatic Call Distribution (ACD)<br />
• Call Recording<br />
• Click to Dial<br />
• Personal Web Phone<br />
• Smartphone application: iPhone and Android<br />
• Auto-provisioning: <strong>ZyXEL</strong> and snom<br />
| 3
SWITCHING<br />
A Blueprint for Virtualisation<br />
Within business today the virtualisation of servers and the use of virtual machines<br />
is becoming critical to protect and deliver reliability to company critical data and is<br />
profoundly changing the dynamics of the data center. Businesses over time have<br />
built up complex and costly hosting scenarios with multiple physical servers in their<br />
data centers. Virtual machines enable multiple application and operating system<br />
environments to be hosted on a single physical server while securely separating<br />
different operating systems and the individual applications.<br />
In business, implementing server virtualisation<br />
enables server consolidation and the reuse or<br />
reimplementation of existing server resource into<br />
a single server running multiple virtual machines.<br />
The consolidation of the physical servers offer<br />
business several benefits:<br />
• New applications can be easily deployed<br />
• Resilience and performance are enhanced<br />
• Existing servers can be redeployed<br />
• Rack space requirements can be optimised<br />
• Data centre power and cooling requirements<br />
can be reduced<br />
• Increased utilisation of server resource reduces<br />
physical server quantity<br />
• More manageable and reduced maintenance<br />
Resilient Connectivity<br />
The next stage of virtualisation for business is<br />
to guarantee secure and reliable connectivity to<br />
the virtual machine. The market trend for server<br />
technology connectivity is to follow the more<br />
traditional bandwidth requirements of Gigabit<br />
Ethernet and fibre connectivity. This enables<br />
the business to utilise 1Gb fibre or 10Gb fibre<br />
connectivity directly the physical server and storage<br />
resources.<br />
Building the infrastructure in this way enables the<br />
business to use secure IP networking technology<br />
Virtualised Network Scenario<br />
ESX1<br />
EMC<br />
Storage<br />
iSCSI<br />
XGS-4526<br />
XGS-4526<br />
VLAN1001/MRSTP2/VRRP<br />
to provide the resilience and protection of the<br />
communication from the desktop to the virtual<br />
machine. This starts with the physical protection<br />
of the fibre connections using Multiple Rapid<br />
Spanning Tree Protocol (MRSTP) as a method to<br />
provide a redundant protection of devices. Rapid<br />
Spanning Tree Protocol (RSTP) is an enhanced<br />
version of the (Spanning Tree Protocol) STP with<br />
a shorter recovery time in the event of failure or<br />
delay of information. (Multiple Spanning Tree<br />
Protocol) MSTP can provide flexible configuration<br />
EMC<br />
Storage<br />
iSCSI<br />
ESX2<br />
<strong>ZyXEL</strong> GS2200-24P<br />
Intelligent Layer 2 Gigabit Switch<br />
<strong>ZyXEL</strong> XGS-4526<br />
<strong>ZyXEL</strong> XGS-4528F<br />
Managed Layer 3+ 10 Gigabit Switch<br />
based on Virtual Lans (VLANs) used to segment<br />
users information into divisions/departments or<br />
applications. MRSTP provides a stronger protection<br />
mechanism. Each device or link in the STP ring can<br />
trigger a complete re-calculation of the spanning<br />
tree status. MRSTP can physically isolate the rings.<br />
As a result, a link or device failure in one ring will not<br />
affect the status of other spanning trees therefore<br />
providing better resilience within the network from<br />
the desktop users to the virtual machine.<br />
Automatic Failover<br />
To avoid a single point of failure within the network<br />
infrastructure it is recommended to use Virtual<br />
Router Redundancy Protocol (VRRP) to provide a<br />
virtual interface in front of a number of physical<br />
IP addresses of the servers in the data centre.<br />
Effectively this means that should a connection<br />
to a primary physical interface fail for any reason<br />
the virtual interface automatically transfers the<br />
connection to an alternative secondary physical<br />
interface. The switch network can be configured<br />
to automatically rebuild the connection when the<br />
primary interface becomes live again.<br />
iSCSI XGS-4528F XGS-4528F<br />
VLAN1002/MRSTP1/VRRP<br />
Ethernet<br />
CX4 12G<br />
Trunk static<br />
Trunk LACP<br />
GS2200-24P<br />
GS2200-24P<br />
VLAN1/MRSTP1<br />
GS2200-24P<br />
USG 1000 VLAN1000/VRRP USG 1000<br />
iSCSI<br />
To assist SMB businesses with the complexity of<br />
configuring a reliable IP network infrastructure<br />
connecting to the virtual machine data centre.<br />
<strong>ZyXEL</strong> has created a Virtualisation Blueprint,<br />
providing a fixed scenario with scripted<br />
configurations to ease the implementation of<br />
such technology. The blueprint is based upon a<br />
combination of the <strong>ZyXEL</strong> XGS Series of Layer 3<br />
Gigabit switches connecting to the GS2200 Series<br />
of L2 Gigabit Switches providing edge connectivity.<br />
4 |<br />
Delivering resilience from the application to the virtual machine.<br />
Local information: www.zyxel.eu/impulse
SWITCHING<br />
Is your Network Ready for VoIP?<br />
Within <strong>ZyXEL</strong> we have identified snom as a leading technology company in the space of<br />
VoIP communications. Through our joint relationship and extensive lab testing <strong>ZyXEL</strong><br />
has achieved Technology Partner Status for the interoperability of providing an IP PoE<br />
switching platform for business deployments of the snom ONE plus IP-PBX software<br />
and hardware solution with the snom range of IP Phones.<br />
When adding VoIP as the voice solution for your<br />
business, there are a number of issues that need<br />
to be addressed. The quality and reliability of the<br />
VoIP voice traffic across the network needs to be<br />
of the highest priority of all of the applications<br />
in the business. If your emails arrive with a slight<br />
delay you would never realise, however everyone<br />
has experienced the quality of a poor mobile<br />
phone signal and terminated the call. This must<br />
be avoided at all costs when implementing VoIP<br />
technologies within the SMB business.<br />
With the achievement of the technology<br />
partnership <strong>ZyXEL</strong> and snom have worked together<br />
to address the issues of delivering all of the required<br />
voice features for a growing SMB Business from<br />
the IP-PBX to the desktop. Within the testing, two<br />
scenarios were identified:<br />
Scenario 1<br />
An out of the box, simplified deployment and<br />
installation for a company who is predominantly<br />
using the voice capability of the solution as a<br />
priority. This would be applicable to a number of<br />
situations such as retail outlets or Healthcare where<br />
the traditional phone system is being replaced<br />
or upgraded. Within this scenario the <strong>ZyXEL</strong><br />
ES-2024PWR was identified as the ideal PoE switch.<br />
Scenario 2<br />
The second scenario was for a SMB business<br />
migrating to a unified communication situation,<br />
enabling each user desktop to have the capability<br />
of a converged IP deployment with IP voice, video<br />
and data being delivered over the IP switching<br />
infrastructure. To deliver this, the network needs<br />
to utilise technology such as PoE to power the<br />
IP Phone device, Quality of Service for the Voice,<br />
VLANs for segmentation of the different traffic<br />
types and Gigabit Ethernet speeds to cope with<br />
the diversity and demand of the next generation<br />
<strong>ZyXEL</strong> GS2200-24P<br />
Intelligent Layer 2 Gigabit Switch<br />
<strong>ZyXEL</strong> ES-2024PWR<br />
Managed Layer 2 Switch<br />
applications. In this scenario the <strong>ZyXEL</strong> GS2200-24P<br />
was identified as the ideal PoE switch.<br />
For both testing scenarios the snom ONE plus<br />
IP-PBX solution was used in conjunction with<br />
the <strong>ZyXEL</strong> PoE switches. Built on standardsbased<br />
SIP technology, the snom ONE plus<br />
provides a plug-and-play hardware appliance for<br />
business IP telephony that is pre-installed and<br />
configured with snom ONE IP PBX software for<br />
easy deployment with snom business IP desktop<br />
phones and endpoints. To address the needs of<br />
SMBs, the snom ONE plus offers all the advanced<br />
IP PBX functionality required for the information<br />
driven business of today and tomorrow, including<br />
centralised address book, auto attendants, hunt<br />
groups, hot desking, shared line emulation and<br />
CRM integration. snom’s advanced IP telephony<br />
also includes an array of advanced presence and<br />
monitoring features, such as remote extension<br />
monitoring, agent groups, remote worker support<br />
and cell phone twinning.<br />
All of the advanced features of the snom VoIP<br />
solution were tested and certified across the<br />
<strong>ZyXEL</strong> IP network infrastructure of PoE switches.<br />
By certifying these solutions, resellers and business<br />
customers can have the assurance of a tried and<br />
tested solution from two leading innovation<br />
companies working in partnership to deliver<br />
reliable unified communications.<br />
Local information: www.zyxel.eu/impulse<br />
snom 870<br />
<strong>ZyXEL</strong> PoE Switch Overview<br />
<strong>ZyXEL</strong> ES-2024PWR <strong>ZyXEL</strong> GS2200-24P <strong>ZyXEL</strong> GS2200-24P & PPS250<br />
Connectivity<br />
10/100Base-T PoE 24 - -<br />
10/100/1,000Base-T PoE - 24 -<br />
Dual Personality Ports 2 4 24<br />
PoE Power Budget ✔ ✔ Full Power<br />
Performance<br />
Switching Capacity 8.8 Gbps 56 Gbps 56 Gbps<br />
Switch Forwarding Rate 6.6 Mpps 41.67 Mpps 41.67 Mpps<br />
Total PoE Output 185 W 220 W 400 W<br />
snom 370<br />
| 5
WIRELESS LAN<br />
<strong>ZyXEL</strong> Healthcare Solution<br />
<strong>ZyXEL</strong> has a long history of providing a wide range of solutions applicable to hospitals<br />
of all sizes. Key in the deployment of the solution is to provide an IT infrastructure that<br />
is always available, secure, cost effective or self funding to enable both patients and<br />
staff to utilise one network.<br />
6 |<br />
Dependant on the size and scope of the hospital<br />
premises and connectivity services, <strong>ZyXEL</strong> has<br />
a wide range of solutions. These start with basic<br />
wireless connectivity to the Internet with a form<br />
of hotspot or Internet gateway – usually found<br />
’THE ACCESS IS FAST,<br />
EASY AND PAINLESS,<br />
WHICH INCREASES<br />
USAGE, ENCOURAGES<br />
CONNECTIVITY AND CAN<br />
PROVIDE ADDITIONAL<br />
REVENUE TO THE<br />
HOSPITAL TO COVER THE IT<br />
INFRASTRUCTURE COSTS.’<br />
in hospitality premises such as coffee shops,<br />
restaurants or hotels. This basic connectivity<br />
service can be applied to similar areas within the<br />
hospital building with the <strong>ZyXEL</strong> N4100.<br />
Basic hospital internet connectivity<br />
The N4100 is designed as an Access Controller for<br />
businesses wishing to offer controlled Internet<br />
services. It is an ideal solution for hospitals in<br />
communal areas such as coffee shops, restaurants<br />
or day rooms for both patients and vistors and<br />
offers instant high-speed Internet connections.<br />
With its IP Plug and Play technology, it accepts<br />
any client configuration for log-on. There's no<br />
need for end-users to change any of their default<br />
network, e-mail, or browser settings to access<br />
the Hotspot service. When used in combination<br />
with the SP-300E printer, the staff just needs to<br />
press one button and then a one time account<br />
will be generated and printed immediately. The<br />
<strong>ZyXEL</strong> N4100 is a Wi-Fi certified 802.11n device<br />
supporting b/g/n wireless technologies and<br />
offering flexible connectivity with enhanced<br />
coverage and improved performance to provide a<br />
satisfying internet connectivity service.<br />
Plug-and-play connectivity<br />
Users visiting the business hotspot are usually<br />
faced with various technical issues to establish<br />
connectivity such as IP configurations: static IP,<br />
DHCP clients etc. The N4100 or VSG-1200 v2,<br />
for larger deployments, are designed with IP<br />
plug-and-play technology so users don’t need<br />
to change their existing IP and other network<br />
configurations to connect to the internet service.<br />
The access is fast, easy and painless, which<br />
increases usage, encourages connectivity and<br />
can provide additional revenue to the hospital<br />
to cover the IT infrastructure costs. The N4100<br />
and VSG-1200 v2 can accommodate a variety<br />
AT A GLANCE<br />
Benefits of a <strong>ZyXEL</strong> Healthcare Solution<br />
• Delivering connectivity to the patient<br />
• Highly scalable solution meeting the varied<br />
demands of healthcare<br />
• Central Wired & WLAN management simplify<br />
IT managers time and efforts<br />
• Zone-defense concept for solid protection and<br />
secure connection<br />
• Enhanced wired and wireless security enabling<br />
one network for patient, visitor and healthcare<br />
staff<br />
• Reduced cost of the overall infrastructure by<br />
distributing resource and consolidating the<br />
IT infrastructure<br />
of network configuration, including Gateway,<br />
DNS, Proxy and dynamic and static IP address<br />
assignments. This eliminates the need and<br />
associated costs of hiring dedicated IT staff.<br />
Scalable solutions for patient and visitor<br />
services<br />
The <strong>ZyXEL</strong> N4100 and VSG-1200 v2 Hotspots<br />
can be installed either as a standalone device<br />
connected directly to a broadband router as<br />
an all-in-one Internet wireless Internet hotspot
WIRELESS LAN<br />
solution, or as part of a larger network. This<br />
flexibility provides the business with a fully<br />
authenticating, authorising and administration<br />
device to allow the control of Internet Wireless<br />
users. This enables the hospital to build a network<br />
infrastructure to support Wi-Fi connectivity not just<br />
in the recreational areas but also within the hospital<br />
wards themselves. This functionality enables the<br />
Hospital to define the policy as to how users can<br />
be offered either secure free Internet access or<br />
can deploy a simple charging methodology. The<br />
IP network infrastructure can be made up from a<br />
variety of solutions from <strong>ZyXEL</strong> such as IP-DSLAMs<br />
utilising telephone wiring to key locations then<br />
connecting to Wi-Fi access points or to utilise an<br />
Ethernet or Gigabit wired network with Power over<br />
Ethernet to the Wi-Fi access points.<br />
Full campus healthcare deployment for<br />
patient, visitor and staff<br />
When looking to deploy a comprehensive campus<br />
networking solution that provides access not<br />
only for guest users such as patients and their<br />
vistors but also for the staff to access requires a<br />
different approach to IT networking. The need to<br />
provide an infrastructure that is always available,<br />
secure and cost effective to utilise one network<br />
is increasingly important. The <strong>ZyXEL</strong> Distributed<br />
Wireless Network Solution enables Healthcare<br />
administators to meet this challenge. The solution<br />
changes the way that the network is deployed by<br />
distributing the resources without compromising<br />
<strong>ZyXEL</strong> N4100<br />
Wireless N Hotspot Gateway<br />
performance or security. Using the example<br />
of a Hospital campus with multiple buildings<br />
within a local or private healthcare authority. The<br />
organisation can now leverage business-critical<br />
resources from a central office. This is deployed<br />
using a trusted network infrastructure to reduce<br />
<strong>ZyXEL</strong> VSG-1200 v2<br />
Vantage Service Gateway<br />
the cost and technology in the remote building<br />
locations without compromising the availability<br />
and services offered to both the patients, their<br />
visitors and the staff of the hospital.<br />
Local information: www.zyxel.eu/impulse<br />
Example of Healthcare Campus Wireless Network<br />
Hospital Campus Main building<br />
SSID<br />
Guest<br />
SSID<br />
NXC5200<br />
Wireless LAN<br />
Controller<br />
NWA5160N<br />
Managed AP NWA5160N<br />
Managed AP NWA5160N<br />
Managed AP<br />
GS2200-24P<br />
GbE L2 PoE Switch<br />
PMS<br />
Server Farm<br />
RADIUS Server<br />
NSA Syslog Server/DMZ<br />
USG Series<br />
Gateway<br />
XGS-4526<br />
GbE L3 Switch<br />
VSG-1200 V2<br />
Service Gateway<br />
NWA5160N<br />
Managed AP<br />
Hospital 2 nd building<br />
GS2200-24P<br />
GbE L2 PoE Switch<br />
Guest<br />
SSID<br />
SSID<br />
Ethernet Network<br />
Fibre<br />
RS232 Cable<br />
Internet<br />
| 7
SECURITY<br />
WIRELESS-LAN<br />
Fight the Malware Battle<br />
Malware has become the major threat in today`s business. <strong>ZyXEL</strong> supports the fight<br />
against malware with the current ’IDP for free’ campaign. The campaign includes the<br />
option to buy a combined license including Content Filter (CF) as well as Intrusion<br />
Detection and Protection (IDP) at the price of the CF alone, giving ZyWALL users peace<br />
of mind and a good night`s sleep.<br />
<strong>Download</strong><br />
firmware<br />
the latest<br />
8 |<br />
New threats on the horizon<br />
The World Wide Web has become the main attack<br />
target because the Internet is a very attractive<br />
malware delivery mechanism. With threats hidden<br />
directly in the content such as cookies, add-ons<br />
and rootkits, it makes malware exponentially more<br />
difficult to detect. Overall, the web threats have<br />
insidious threat landscape featuring:<br />
• Unprecedented malicious code volume: the<br />
volume of malicious code variants increased by<br />
nearly 300 % in 2009<br />
• Dangerous Web content: more than 40 % of<br />
malicious code threats target Internet browsers<br />
because of the popular of Web 2.0<br />
• Social networking scams: 40 % of social network<br />
users have encountered malicious attacks<br />
• Targetted attacks: web attacks can be not<br />
only extremely targetted on some geographic<br />
region, industry, or company but also may not<br />
always execute right away<br />
Malware costs money<br />
Malware has become a serious issue for business.<br />
If businesses don’t start to prepare consolidated<br />
protection, they will suffer the impact of malware<br />
directly.<br />
• Increasing security risks: when employees<br />
contact potentially dangerous web pages that<br />
attempt to exploit their visitors by installing<br />
and running malware automatically, it increases<br />
business network security risks<br />
• Increasing IT costs: An infected machine reflects<br />
directly to IT costs associated with control,<br />
removal of malware, and even reinstalling<br />
programs and restoring the computer to its<br />
former state<br />
• Loss of crucial information or data, even revenue:<br />
malware is frequently used to infect computers<br />
to steal sensitive information and would be sold<br />
to a third-party or competitors who then use it to<br />
make a profit<br />
Cloud-based defense – get continuous and<br />
real-time security<br />
Malware is constantly evolving, so you need<br />
a dynamic security strategy that can keep up<br />
with the latest Web-based threats. <strong>ZyXEL</strong> is<br />
cooperating with the leading provider of CF<br />
solution, Blue Coat, in order to deliver the best<br />
security solutions. To help protect your network<br />
from sophisticated malware attacks, the Blue<br />
Coat WebPulse cloud service leverages real-time<br />
URL ratings from a growing community of 70<br />
million users, supports more than 50 languages,<br />
integrates multiple threat detection engines and<br />
provides more than six billion real-time Web<br />
content ratings per day.<br />
Web 2.0 threat protection<br />
As part of the ZyWALL USG Content Filter solution,<br />
the WebPulse delivers fast and effective Web 2.0<br />
threat protection by incorporating custom script<br />
analysers, anti-malware and anti-virus scanning,<br />
sandboxing and browser simulations and other<br />
leading security technologies. As a result, the<br />
WebPulse cloud service:<br />
• Dynamically analyses URL requests and<br />
immediately shares threat intelligence<br />
throughout the cloud community<br />
• Leverages 16 advanced threat analysis tools to<br />
provide immediate and continuous protection<br />
against known and unknown Web-based<br />
threats<br />
• Delivers the latest security advances without<br />
requiring software downloads or other update<br />
cycles<br />
Fight the malware battle promotion<br />
Our current promotional offer includes a combined<br />
Content Filter / Intrusion Detection and Prevention<br />
license for the price of a pure Content Filtering<br />
license for the whole USG Firewall appliance range<br />
(excluding USG-20 and USG-20W). The promotion<br />
is valid until September 30 th 2011.<br />
Local information: www.zyxel.eu/impulse<br />
AT A GLANCE<br />
Content Filter benefits for all businesses<br />
• More secure business network<br />
• Maximize employee productivity<br />
• Reduce liability<br />
• Increase available network bandwidth<br />
• Enforce company internetpolicies<br />
• Comply with government regulations reports<br />
• Track and manage internet use
POWERLINE<br />
<strong>ZyXEL</strong> PLA4205 and PLA4215<br />
HD Powerline<br />
Equipped with the latest chipset technology <strong>ZyXEL</strong> presents two new high-performance<br />
Powerline Ethernet Adapters for multiple HD video, VoIP and data streaming services<br />
simultaneously.<br />
The plug-and-play adapters PLA4205 and<br />
PLA4215 provide data transfer rate up to 500<br />
Mbps* over home power lines with Gigabit<br />
Ethernet support. Without installing additional<br />
wires at home, users can easily enjoy multiple<br />
stable HD streams, multiplayer gaming and other<br />
network applications simultaneously in every<br />
room. The built-in power-saving mode can reduce<br />
energy costs.<br />
<strong>ZyXEL</strong> PLA4205<br />
Powerline Ethernet Adapter<br />
Enjoy stable HD videos and gaming<br />
Powered by the latest IEEE1901 technology and<br />
a Gigabit Ethernet port, the <strong>ZyXEL</strong> 500 Mbps<br />
Powerline Gigabit Ethernet Adapters can provide<br />
a stable, high-performance network to enjoy<br />
multiple HD streams, multiplayer gaming, and<br />
web surfing simultaneously. By installing a pair<br />
of plug-and-play adapters, you can easily extend<br />
your home network through any electrical outlet<br />
for Internet access by HDTVs, Blu-ray players, PCs<br />
and game consoles.<br />
QoS enhances media streaming quality<br />
The advanced Quality of Service features improve<br />
the quality of multimedia streaming applications<br />
such as triple-play services, HD video streaming,<br />
high-speed Internet access, and VoIP.<br />
Green product reduces energy consumption<br />
When not in use, the PLA4205 and PLA4215 will<br />
enter a power-saving mode, reducing energy<br />
consumption by over 85 % when compared to<br />
adapters without this function.<br />
Easy security set-up<br />
Data transmission is protected by 128-bit Advanced<br />
Encryption Security (AES) security to provide a<br />
secure connection to the Internet. Encryption can<br />
be configured by a simple button press on both of<br />
your PLAs; there’s no complicated setup or software<br />
required to be run.<br />
*The theoretical maximum channel data transfer rate is derived<br />
from IEEE 1901 specifications. Actual data transfer rate will vary<br />
from network environment including: distance, network traffic,<br />
noise on electrical wires, quality of electrical installation and other<br />
adverse conditions.<br />
Local information: www.zyxel.eu/impulse<br />
Example of PLA4205 in a digital home scenario<br />
FEATURES<br />
<strong>ZyXEL</strong> PLA4205 and <strong>ZyXEL</strong> PLA4215 HD<br />
Powerline Ethernet Adapter<br />
• Data transfer rate of up to 500 Mbps*<br />
• Compliant with IEEE1901 and HomePlug AV<br />
• Gigabit Ethernet port provides faster wired<br />
connection<br />
• QoS enhances media streaming quality<br />
• Power-saving mode reduces energy waste<br />
• Multi-coloured LED identifies Powerline network<br />
quality<br />
• 128-bit AES encryption for secure network<br />
| 9
ZYXEL CORPORATE<br />
<strong>ZyXEL</strong> Education Center<br />
At <strong>ZyXEL</strong>, we believe in equipping next-generation networking professionals with<br />
essential skills to get ahead in an increasingly competitive IT environment. Networking<br />
environments today have become more dynamic so IT professionals cannot rely on<br />
being just ‘good enough’.<br />
Empower your expertise to the Internet World<br />
<strong>ZyXEL</strong>'s Education Center ensures that IT<br />
professionals are constantly exposed to cuttingedge<br />
networking technology and are wellequipped<br />
with in-depth knowledge and pertinent<br />
skill-sets to deploy, maintain, and improve their<br />
network performance.<br />
Its multi-tier certification programs – <strong>ZyXEL</strong> Certified<br />
Networking Professional (ZCNP) and <strong>ZyXEL</strong> Certified<br />
Networking Engineer (ZCNE) – provides everything<br />
from beginner level technology in wireless,<br />
security, switching and voice knowledge; advanced<br />
practical skill-sets to deploy, maintain and improve<br />
network performance; and instructor-level training<br />
programs for <strong>ZyXEL</strong> subsidiaries and partners.<br />
ZCNP: Distinguish yourself from others<br />
ZCNP helps you stand out as a networking expert.<br />
Today’s IT professionals need to differentiate<br />
themselves from the competition and boost their<br />
career prospects while meeting the challenges of<br />
the evolving business landscape.<br />
Offered online, the course allows busy professionals<br />
to learn at their own pace. Several free network<br />
certification programs are available to choose<br />
from including Digital Home, Switch, Wireless LAN,<br />
Security, VoIP, IP-DSLAM, FTTx and WiMAX.<br />
ZCNE: Learn deeper to match your business<br />
objective<br />
ZCNE helps participants learn deeper about the<br />
different networking scenarios and match various<br />
business objectives. Companies and service<br />
providers can send their networking engineers for<br />
this course to win more business after participants<br />
sharpen their networking skills.<br />
Led by expert instructors with keen technical<br />
insight and industry knowledge, ZCNE is a handson<br />
technical training course with <strong>ZyXEL</strong> solutions. It<br />
helps improve understanding of intricate, cuttingedge<br />
technology and enhances deployment of<br />
<strong>ZyXEL</strong> solutions in various application scenarios.<br />
Core modules include Switch, Wireless LAN and<br />
Security.<br />
As a key networking partner, we believe in offering<br />
comprehensive training to our customers. So<br />
leverage our certification courses such as ZCNP<br />
and ZCNE to acquire in-depth knowledge and<br />
comprehensive practical skill-sets as you optimize<br />
your networking environment.<br />
More information at http://education.zyxel.com<br />
PROMOTION<br />
<strong>ZyXEL</strong><br />
Simply Green<br />
<strong>ZyXEL</strong> Bestseller<br />
NSA221 / NSA210<br />
2-Bay / 1-Bay Network Attached Storage<br />
– Power On/Off Scheduling<br />
– Smart Fan Control<br />
–Internal Hard Disk Hibernation<br />
NBG-416N<br />
Wireless N-lite Fast Ethernet Router<br />
– Wireless Scheduling<br />
– Saving Energy by Detecting Cable Length<br />
– Wireless Output Management<br />
PLA-401 Starter Kit<br />
200Mbps Powerline HomePlug Adapter<br />
– Power-Saving Mode<br />
– Up to 200 Mbps transfer rate<br />
– 128bit AES security<br />
i l<br />
NWD2105<br />
Ultra Compact Wireless N-Lite USB Adapter<br />
– USB 2.0<br />
– Up to 150 Mbps speed<br />
– WPS for easy security set-up<br />
NBG4115<br />
Wireless N-lite 3G Router<br />
– Wireless Scheduling<br />
– Wireless Output Management<br />
– Up to 150Mbps speed<br />
GS-105B / GS-108B<br />
5-Port / 8-Port Desktop Gigabit Switch<br />
– Saving Energy by Detecting Cable Length<br />
– Power Usage Adjustment by Link Status<br />
– 802.1az<br />
i l<br />
ES-105A / ES-108A<br />
5-Port / 8-Port Desktop Fast Ethernet Switch<br />
– Saving Energy by Detecting Cable Length<br />
– Power Usage Adjustment by Link Status<br />
WAP3205<br />
Wireless N Access Point<br />
– 4-in-1: Access Point / Bridge / Repeater WLAN Client<br />
– Wireless Scheduling<br />
– Wireless Output Management<br />
i l<br />
Power Usage<br />
Adjustment by<br />
Link Status<br />
Saving Energy<br />
by Detecting<br />
Cable Length<br />
Wireless<br />
Scheduling<br />
i l<br />
Wireless<br />
Output<br />
Management<br />
Power-Saving<br />
Mode<br />
Power On/Off<br />
Scheduling<br />
Smart Fan<br />
Control<br />
Internal<br />
Hard Disk<br />
Hibernation<br />
Find 10 more | information at www.zyxel.com/bestseller
SUCCESS-STORY<br />
Paramedic Institute, Mechelen, Belgium<br />
TONCON a Belgian <strong>ZyXEL</strong> partner has successfully brought the right <strong>ZyXEL</strong> components<br />
together, to improve their network. The Paramedic Institute, Mechelen in Belgium<br />
trusted TONCON to provide a future proof network solution to support staff and<br />
students.<br />
Paramedic Institute, Mechelen, Belgium has been<br />
the specialist training school for professional<br />
care-givers/paramedics for over half a century.<br />
Around 500 students, 100 staff members and over<br />
65 classrooms demand a solid IT infrastructure.<br />
TONCON, a Belgian <strong>ZyXEL</strong> partner has successfully<br />
brought the right <strong>ZyXEL</strong> components together, to<br />
improve their network.<br />
Future proof<br />
As with many schools, the network has grown<br />
organically over the years, making it necessary<br />
to have a thorough and structured ΄make over΄of<br />
the network. The school chose to be rigorous<br />
in its approach and ensure they were prepared<br />
for the wireless future. They considered ΄What if<br />
tomorrow every student walks into the school<br />
with a laptop, tablet or other WiFi enabled<br />
device?΄ The answer comes in the form of a<br />
<strong>ZyXEL</strong> NXC5200 Wireless Controller with 21<br />
NWA5160-N Access Points. At the same time<br />
the NXC offers the option to serve both the<br />
administrative department and the student by<br />
different VLANs, where priorities and bandwidth<br />
can be managed.<br />
Jurgen Roels, owner of TONCON (the business<br />
network division of Educorner BVBA) gave the<br />
following insights into this project.<br />
<strong>ZyXEL</strong> NXC5200<br />
Wireless Business Controller<br />
As the installation partner for <strong>ZyXEL</strong> it is very<br />
important to us to get more than just a box!<br />
We know that we can count on the support<br />
and goodwill of many people within the <strong>ZyXEL</strong><br />
organisation whenever we encounter problems<br />
during any configuration or installation.<br />
How would you regard the overall<br />
installation?<br />
Considering the great distances of this project,<br />
we decided to build the complete set-up in<br />
our lab to test it before actual installation.<br />
Twelve GS2200 Layer 2 Gigabit Switches, the<br />
NXC5200 Wireless Controller and 21 NWA5160-N<br />
Access Points were connected. Everything was<br />
configured, including VLANS, connected, tested,<br />
labeled and finally documented. The customer<br />
was astonished when the complete installation<br />
immediately worked flawlessly after switching<br />
on the power on site.<br />
Local information: www.zyxel.eu/impulse<br />
What were the major challenges?<br />
This school consists of 3 separate buildings with<br />
each having 3 floors. Each floor is connected<br />
to the same floor of the next building, creating<br />
huge distances within the total school. A total<br />
of 6 kilometer network cable plus 1 kilometer<br />
fibre cable needed to be installed within 14 days,<br />
during a school holiday. From a central cabinet,<br />
the fibres were laid out to 6 distribution points<br />
from where the UTP cat6 cables were laid out to<br />
each classroom plus the 21 NWA5160-N Access<br />
Points.<br />
<strong>ZyXEL</strong> GS2200-24<br />
Intelligent Layer 2 Gigabit Switch<br />
What made you choose <strong>ZyXEL</strong> for this project?<br />
There are two main factors: budget and the<br />
limited resources schools have to install any such<br />
kind of technology. <strong>ZyXEL</strong> has an excellent pricequality<br />
ratio. At the same time the fairly simple<br />
installation process of the NXC5200 controller<br />
plays a role. Adding an extra Access Point is truly<br />
΄plug & play΄. The controller is also perfectly<br />
scalable budget-wise.<br />
<strong>ZyXEL</strong> NWA5160-N<br />
Managed Wireless N Business Access Point<br />
| 11
Puzzled by Networking?<br />
<strong>ZyXEL</strong>s Ethernet Switches at a Glance:<br />
ES1100-16<br />
ES1100-24E<br />
ES1100-24<br />
ES1100-24G<br />
ES1100-8P<br />
ES1100-16P<br />
Z Y X<br />
L<br />
E<br />
B<br />
E<br />
S<br />
Security<br />
T<br />
N<br />
E<br />
T W O R K<br />
xDSL<br />
I N G<br />
Energy<br />
Efficient<br />
Ethernet<br />
Energy<br />
Efficient<br />
Ethernet<br />
Energy<br />
Efficient<br />
Ethernet<br />
16-port<br />
Unmanaged Desktop<br />
Ethernet Switch<br />
24-port<br />
Unmanaged Desktop<br />
Ethernet Switch<br />
24-port<br />
Unmanaged Ethernet<br />
Switch<br />
24-port<br />
Unmanaged Ethernet<br />
Switch with Uplinks<br />
8-port<br />
Unmanaged Ethernet<br />
PoE Switch<br />
16-port<br />
Unmanaged Ethernet<br />
PoE Switch<br />
Switching<br />
Wireless<br />
<strong>ZyXEL</strong>s Wireless Access Points at a Glance:<br />
NWA-1100-N<br />
NWA-1100<br />
NWA-3166<br />
NWA-3160<br />
NWA-3160-N<br />
NWA-3560-N<br />
Z Y X<br />
L<br />
E<br />
B<br />
E<br />
S<br />
Switching<br />
T<br />
N<br />
E<br />
T W O R K<br />
Security<br />
I N G<br />
802.11b/g/n 211b/g/n<br />
Wireless AP<br />
082.11b/g<br />
Wireless AP<br />
Dual-band Hybrid<br />
Wireless N AP<br />
802.11b/g Dual-band<br />
Hybrid Wireless AP<br />
802.11a/g/n Dual-band<br />
Hybrid Wireless AP<br />
802.11a/b/g/n<br />
/<br />
Wireless AP<br />
Wireless<br />
xDSL<br />
<strong>ZyXEL</strong>s Gigabit Switches at a Glance:<br />
GS1100-16<br />
Energy<br />
Efficient<br />
Ethernet<br />
GS1100-24<br />
Energy<br />
Efficient<br />
Ethernet<br />
GS1510-16<br />
Energy<br />
Efficient<br />
Ethernet<br />
GS1510-24<br />
Energy<br />
Efficient<br />
Ethernet<br />
GS1500-24P<br />
GS-1548<br />
Z Y X<br />
L<br />
E<br />
B<br />
E<br />
S<br />
Security<br />
T<br />
N<br />
E<br />
T W O R K<br />
xDSL<br />
I N G<br />
16-port<br />
Unmanaged Gigabit<br />
Switch<br />
24-port<br />
Unmanaged Gigabit<br />
Switch<br />
16-port<br />
Gigabit Web-<br />
Managed Switch<br />
24-port<br />
Gigabit Web-<br />
Managed Switch<br />
24-port<br />
Web-Managed<br />
Gigabit PoE Switch<br />
48-port<br />
Gigabit Web-<br />
Managed Switch<br />
Switching<br />
Wireless<br />
Reliable networking<br />
High performance<br />
<strong>ZyXEL</strong>s USG ZyWALLs at a Glance:<br />
ZyWALL USG 20<br />
ZyWALL USG20W<br />
ZyWALL USG 50<br />
ZyWALL USG 100<br />
Z Y X<br />
L<br />
E<br />
B<br />
E<br />
xDSL<br />
S<br />
T<br />
N<br />
E<br />
T W O R K<br />
Wireless<br />
I N G<br />
Scalable solutions<br />
Easy to install and manage<br />
<strong>ZyXEL</strong> Lifetime Care<br />
Unified dSecurity Gateway<br />
for 1-5 users<br />
Unified dSecu<br />
Security<br />
Gateway for 1-5<br />
users, WLAN<br />
Unified dS Security Gateway<br />
for 1-10 users<br />
Unified SecurityG<br />
yGate-<br />
way for 10-25 users<br />
Security<br />
Switching<br />
Free local technical support<br />
www.zyxel.eu/bestnetworking<br />
<strong>ZyXEL</strong> makes it simple.<br />
For more (local) information please visit our website: www.zyxel.eu/impulse.<br />
Feedback and enquiries: sales@zyxel.eu, support@zyxel.eu, marketing@zyxel.eu.<br />
For information about the product availability please check with your local distributor.<br />
Copyright © 2011 <strong>ZyXEL</strong> Communications Corp. All rights reserved.<br />
<strong>ZyXEL</strong> and the <strong>ZyXEL</strong> logo are registered trademarks of <strong>ZyXEL</strong> Communications Corp.<br />
All specifications are subject to change without notice.<br />
Valid until October 2011.<br />
12 |