ZyXel ZyWall
- 23 June, 2009 11:30
- Comments 1
Given its remarkably low price, the ZyWall is a terrific value. Nevertheless, we would gladly pay more for if it were a bit easier to set up and manage.
ZyXel's management interface is straightforward and distinctive. A tree of command families runs down the left side of the screen, while details are filled in through a tabbed interface on the larger right-hand side. Network settings, from interfaces to routing information and DDNS configurations, are available in the primary screen. Status information and configuration are available through the same interface; you see status in the main view, then click an icon to enter the editing process.
Remote access options are plentiful and flexible with IPSec, SSL, and L2TP VPNs available. With ZyXel's policy-based control, remote access becomes easier even if you've inherited a huge wash list of legacy remote offices. One of ZyXel's cooler options is the ZyWall P1, a portable USB-powered personal firewall and IPSec gateway. Instead of shoehorning troublesome IPSec clients onto already overloaded laptops, you can give this tiny box to your mobile users.
Small, not simple
The ZyWall gives the physical impression of being a simpler, "lightweight" UTM, but don't be fooled. First, it doesn't have wizard-based setup; you need to know what you're doing. Second, it's not terribly lightweight from the features standpoint, either. Although it doesn't come close to the Astaro's broad selection of possibilities, there's no shortage of options for protecting your network through the ZyXel interface. The shortage lies in the absence of wizards to ease the pain of bouncing among numerous screens for setup and configuration, and to keep naming and rules in the realm of best practices.
AppPatrol is an optional set of capabilities that allows you to set rules for common Internet-based applications, including VoIP, IM, streaming media, and P2P apps. Functions include restricting time of access for different groups of users, enforcing bandwidth quota against certain types of P2P applications, and prioritizing VoIP traffic to ensure best call quality over slow WAN links. These are standard features in an enterprise-class UTM device, but surprising in $3,400 product.
Anti-virus, intrusion detection and prevention, anomaly detection and prevention (abnormal protocols and flows), and content filtering are available through the Anti-X tabbed interface, with virus signatures from Kaspersky or ZyXel AV. Unlike many other UTMs on the market, ZyXel doesn't charge for anti-spam updates, so this box is an even better deal. The rest of the UTM features can be purchased either bundled or a la carte, depending upon your needs and level of paranoia.
Bargain bundle
As with just about every UTM we've ever touched, AAA functions are built in. In addition to LDAP and RADIUS back ends, Active Directory is supported -- a nice plus. The ZyWall provides an internal storage facility for PKI certificates as well.
Two ZyWalls can be set up to work together in a high-availability configuration with automatic fail-over -- a must-have in an enterprise setting. Surprisingly, the ZyWall even includes port aggregation, a throughput-maximizing feature missing from many higher-end units, including the SonicWall E7500 we tested.
The ZyWall USG1000 takes a backseat to Astaro and SonicWall in ease of setup and management, and it's far behind SonicWall and WatchGuard when it comes to performance. It stood up to the 200 VPNs we threw at it, but a couple dozen VPNs and a handful of travelers are more its speed. It would be a good choice for a branch office, large or small. Although the price might suggest that the ZyWall is a good option for very small businesses, the lack of a set of wizards for setup could spell trouble for inexperienced staff. But in the right hands, it's a terrific value.
Recommended
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
-
Why change management doesn’t work
-
Larry Page wants to see your medical records
-
Dual-Persona Smartphones Not a BYOD Panacea
-
After two-year hiatus, EFF accepts bitcoin donations again
-
CIOs struggle to deliver timely mobile business apps: survey
-
Six Reasons to Empower Your SharePoint Citizen Developers
More and more business applications are being created by “citizen developers” - end users who are not IT developers but who create solutions for themselves and their groups. This white paper explores six reasons to embrace citizen development in an intelligent way that minimises risks and maximises the return on your SharePoint investment. Read now. -
Pathways Advanced ICT Leadership Development Program Course Outline and Big 6 2013
Developed by the CIO executive Council in conjunction with Rob Livingstone Advisory, Pathways Advanced is a 12-month CIO delivered, small group, mentor based professional leadership development program. Pathways Advanced brings together best practice, thought leadership and business insights for today’s most promising ICT professionals -
Staying Ahead of the Data Explosion
The total volume of data being processed and stored by businesses is rising exponentially. IDC has estimated that the size of the "digital universe" will increase 29 fold between 2010 and 2020. Data storage technology has undergone a steady increase in capacity, along with a steady decline in the cost per unit to store information. Unfortunately, data storage capacity is not keeping pace with data growth and necessitating greater intelligence in the storage infrastructure. Read more.
Get exclusive access to Invitation only events CIO, reports & analysis. 
Comments
Anonymous
1
Cyberoam - UTM
Talking about Network Security, Cyberoam is also considered a very good UTM and offers all features which other UTM's offers.