Get Your Quote
Overview Specification Download

ZyWALL ATP200

ATP Firewall
Uncompromising and Unifying Network Protection  

Zyxel ZyWALL ATP

The Zyxel ZyWALL ATP series is an Advanced Threat Protection Firewall dedicated to small and medium businesses, empowered by cloud intelligence leveling up network protection, especially in tackling unknown threats. The series does not only support all Zyxel security services such as Web Filtering, Application Patrol, Anti-Malware, Reputation Filter, etc. but also Sandboxing and SecuReporter. An infographic dashboard is also included, delivering high performance and ensuring comprehensive protection as a self-evolving solution.

 

Try Demo

Elevate Collaboration with Advanced ATP on Cloud

To power network security, we strengthen the Zyxel Security Matrix in Nebula with ATP firewalls on cloud, giving peace of mind with collaborative network defense and sandboxing provisioning. Get detailed reports for investigations, active monitoring, high visibility of network activities, with our evolving security protection.

Benefits Setup Now

Comprehensive Threat Detection and Prevention

ATP firewall is equipped with multiple protection tools such as Sandboxing to stop unknown malware and zero-day threats, and CDR can block or quarantine the compromised clients at the network edge, containing the threat and preventing further damages. It simplifies the protection of all your business networks without worries.

Same Security Across Networks

We offer a wide array of products that allow different remote access options including firewalls for headquarters and branch offices, remote access points with Secure WiFi and VPN client for off-site employees, extending endpoint protection.

Increasing Visibility to Optimize Resource Usage

ATP can help business to manage what applications the employees are using and quickly see all the applications at a glance. More than 3,700 applications are categorized into different labels. Simply hover to block or unblock any one of them. It’s that simple for application monitor and management.

Just Connect with Nebula

Machine Learning

Zyxel Cloud Intelligence receives unknown files from global ATP gateway’s enquiries and stores all information with every new threat recognized, Zyxel Security Cloud becomes a continuously-growing and self-evolving security defense intelligence that learns, grows, and evolves at all times.

Sandboxing

Sandboxing isolates unknown files and identifies if they are new malware types that conventional static security mechanism cannot detect, ensuring network security against zero-day attacks.

Threat Intelligence Machine Learning

Threat Intelligence Machine Learning syncs daily with all ATP Firewalls so that every ATP benefits machine learning from the cloud, both the cloud and ATP are connected as a security ecosystem that learns together, so it can strengthen its defense and stay immune to new unknown attacks. The cloud never stops expanding and evolving, by merging multiple databases with Threat Intelligence Machine Learning, its growing malware intelligence allows ATP Firewalls to detect malware in real-time.

Multi-layer Protection

ATP Firewall is designed with multi-layer protection against multiple types of threats from inside and out. Sandboxing, Anti-Malware, Reputation Filter, and Intrusion Prevention block external attacks while Application Patrol and Web Filtering empower you to restrict users’ inappropriate application usage or web access. Together, they safeguard your network without any unattended gaps. By boarding the Nebula cloud, the provisioning profiles and settings can be quickly configured to managed devices as required. The firewall policies will be provisioned and synchronized in minutes across multiple sites.

Reputation Filter Preemptive IP/DNS/URL Defense

Reputation Filter, consisting of IP Reputation, DNS Threat Filter, and URL Threat Filter, matches up IP/domain/ URL addresses with the always-up-to-date cloud reputation database and determines if an address is reputable or not. This improves blocking efficiency, restricts access to malicious IP/domain/URL, and blocks access from compromised sources, thus providing granular protection against ever-evolving cyber threats.

 

Comprehensive Web Filtering Service

ATP Firewall delivers enhanced web filtering functionality and security through its powerful combination of both reputation and category-based filtering. The dynamic content categorization analyzes the content of a previously unknown website and domain and determines if it belongs to an undesirable category including gambling, pornography, games, and many others. A newly added DNS content filter offers a better approach to inspect web access, particularly when the website is deploying ESNI (Encrypted Server Name Indication) where the traditional URL filtering failed to identify the destination domain.

Deep Insights Into All Your Devices

Device Insights give you more visibility of your networks including wired, wireless, BYOD, and IoT devices. You can create access policy with device contextual such as OS version or device category to enforce network segmentation. This reduces the attack surface and prevents threats from spreading. It also helps SMB(s) reduce time spent on investigation. Continuing with our goal of providing our customers with increased visibility, Zyxel SecuReporter gives your organization comprehensive endpoint inventory dashboard.

Reporting & Analytics

ATP Firewall dashboard gives user-friendly infographic traffic summary and threat statistics. Users can also utilize SecuReporter for further comprehensive threat analysis.

Dashboard

ATP dashboard gives seven-day threat statistics and traffic summary since-reboot, providing a quick network security overview.

 

Try Demo

SecuReporter

SecuReporter features comprehensive log analysis with data correlation and gives custom reports, an essential for service providers.

 

Learn More

Specification

Hardware Specifications
Wireless standard -
Interface 4 x LAN/DMZ, 2 x WAN, 1 x SFP
USB 3.0 ports 1
Console port DB9
Rack-mountable Yes
Fanless Yes
System Capacity & Performance*1
SPI firewall throughput(Mbps)*2 2,000
VPN throughput (Mbps)*3 500
IPS throughput (Mbps)*4 1,200
Anti-Malware throughput (Mbps)*4 630
UTM throughput (Anti-Malware & IPS, Mbps)*4 600
Max. TCP concurrent sessions*5 600,000
Max. concurrent IPsec VPN tunnels*6 100
Recommended gateway-to-gateway IPsec VPN tunnels 50
Concurrent SSL VPN users 60
VLAN interface 16
Wireless Specifications
Standard compliance -
Wireless frequency -
Radio -
SSID number -
No. of antenna -
Antenna gain -
Data rate -
Key Features
Security Service
Sandboxing*7 Yes
Web Filtering*7 Yes
Application Patrol*7 Yes
Anti-Malware*7 Yes
IPS*7 Yes
Reputation Filter*7 Yes
Geo Enforcer *7 Yes
SecuReporter*7 Yes
Collaborative Detection & Response*7 Yes
Device Insight Yes
Security Profile Synchronize*7 Yes
SSL (HTTPS) Inspection Yes
S2-Factor Authentication Yes
VPN Features
VPN IKEv2, IPSec, SSL, L2TP/IPSec
Microsoft Azure Yes
Amazon VPC Yes
WLAN Management
Default Number of Managed AP 8
Recommend max. AP in 1 AP Group 20
Secure WiFi Service*7 Yes
Maximum Number of Tunnel-Mode AP 10
Maximum Number of Managed AP 40
Management & Connectivity
Nebula Cloud Mode Yes
Nebula Cloud Monitoring Mode Yes
Device HA Pro -
Link Aggregation (LAG) -
Concurrent devices logins (max.) 200
Power
Power input 12V DC, 2A max.
Max. power consumption (watt) 13.3
Heat dissipation (BTU/hr) 45.38
Physical Specifications
Item Dimensions (WxDxH)(mm/in.): 272 x 187 x 36/10.7 x 7.36 x 1.42
Weight (kg/lb.): 1.4/3.09
Packing Dimensions (WxDxH)(mm/in.): 427 x 247 x 73/16.81 x 9.72 x 2.87
Weight (kg/lb.): 2.42/5.34
Included accessories Power adapter
Rack mounting kit
Environmental Specifications
Operating Temperature: 0°C to 40°C/32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage Temperature: -30°C to 70°C/-22°F to 158°F
Humidity: 10% to 90% (non-condensing)
MTBF (hr) 529,688.2
Acoustic noise -
Certifications
EMC FCC Part 15 (Class B)
CE EMC (Class B)
C-Tick (Class B)
BSMI
Safety LVD (EN60950-1)
BSMI

Note:

*: This matrix with firmware ZLD5.37 or later.

*1: Actual performance may vary depending on system configuration, network conditions, and activated applications.

*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).

*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).

*4: Anti-malware (with Express mode) and IPS throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.

*6: Including Gateway-to-Gateway and Client-to-Gateway.

*7: Enable or extend feature capacity with Zyxel service license.

*8: ATP100 rev1 is adopting a new hardware design equipped with 4 x LAN/DMZ, 1 x WAN.

 

* License subscription fee and permits may vary by country.
* All specifications are subject to change without notice.

 

More Datasheet

 

License Service

ATP Firewall series is by default bundled with a one-year Gold Security Pack license. For the second year, you can choose the monthly or yearly automatic renewal subscription, which provides continuous protection for your networks without interruption and no need to manually extend your subscription.

 

Buy and renew your license
License Service Feature Gold
Web Filtering Content Filter
App Patrol Application Visibility and Control
●
Email Security Anti-Spam
●
Anti-Malware Anti-Malware with Hybrid Mode Threat Intelligence Machine Learning
●
IPS Intrusion Detection and Prevention
●
Reputation Filter IP Reputation
DNS Threat Filter
URL Threat Filter
●
Sandboxing Sandboxing
●
SecuReporter SecuReporter
●
Secure WiFi Secure Tunnel for Remote AP
●
Secure WiFi Managed AP Service 40 APs
CDR Collaborative Detection & Response
●
Network Premium*1 Single Sign On
●
Security Profile Sync*2 Sync up security profiles across networks
●
Nebula Professional Pack*2 Cloud Networking Management
●

*1: Only supported in On Premises Mode
*2: Only supported in Nebula Cloud Mode

Access Point Compatibility List

Product Unified AP Unified Pro AP
Models
  • NWA5123-AC
  • NWA5123-AC HD*
  • WAC5302D-S
  • WAC5302D-Sv2

  • WAX510D*
  • WAC500*
  • WAC500H*
  • WAX300H
  • WAC6103D-I
  • WAC6503D-S
  • WAC6502D-S
  • WAC6303D-S
  • WAC6553D-E

  • WAC6552D-S
  • WAC6502D-E
  • WAX650S
  • WAX630S
  • WAX610D

  • WAX640S-6E
  • WAX620D-6E
  • WAX655E

Functions Unified AP Unified Pro AP
Central management Yes Yes
Auto provisioning Yes Yes
Data forwarding Local bridge Local bridge/Data tunnel
ZyMesh Yes Yes

*: Support both local bridge and data tunnel for data forwarding.

Transceivers (Optional)

Model Speed Connector Wavelength Max. Distance Optical Fiber Type DDMI
SFP10G-SR* 10-Gigabit SFP+ Duplex LC 850 nm 300 m/328 yd Multi Mode Yes
SFP10G-SR-E* 10-Gigabit SFP+ LC 850 nm 300 m/328 yd Multi Mode Yes
SFP10G-LR* 10-Gigabit SFP+ Duplex LC 1310 nm 10 km/10936 yd Single Mode Yes
SFP10G-LR-E* 10-Gigabit SFP+ LC 1310 nm 10 km/10936yd Single Mode Yes
SFP-1000T Gigabit RJ-45 - 100 m/109 yd Multi Mode -
SFP-SX-D Gigabit LC 850 nm 550 m/601 yd Multi Mode Yes
SFP-SX-E Gigabit LC 850 nm 550 m/601 yd Multi Mode Yes
SFP-LX-10-D Gigabit LC 1310 nm 10 km/10936 yd Single Mode Yes
SFP-LX-10-E Gigabit LC 1310 nm 0 km/10936 yd Single Mode Yes
SFP-LHX1310-40-D Gigabit LC 1310 nm 40 km/43744 yd Single Mode Yes
SFP-ZX-80-D Gigabit LC 1550 nm 80 km/87488 ydd Single Mode Yes
SFP-BX1310-10-D *1 Gigabit LC 1310 nm(TX)
1490 nm(RX)		 10 km/10936 yd Single Mode Yes
SFP-BX1310-E*1 Gigabit LC 1310 nm (TX)
1550 nm (RX) 		20 km/21872 yd Single Mode Yes
SFP-BX1490-10-D*1 Gigabit LC 1490 nm(TX)
1310 nm(RX)		 10 km/10936 yd Single Mode Yes
SFP-BX1550-E*1 Gigabit LC/SC 1550 nm (TX)
1310 nm (RX)		 20 km/21872 yd Single Mode Yes

* Only USG2200 Series supports 10-Gigabit SFP+
*1 SFP-BX1310-10-D and SFP-BX1490-10-D are must used in pairs.

Product Gallery

Have Any Questions?

Or simply wish to find out how Go Nimbus can help your business? Just click the button below.
Get Quote