Contatti Zyxel

VPN Firewall USG 20/20W

Serie Firewall USG 20/20W VPN

  • Comprehensive supports to IPv6
  • Robust hybrid VPN (IPSec/SSL/L2TP)
  • 802.11 ac with single-radio dualband (2.4G/5G) Wi-Fi support
  • High-performance SPI Firewall
  • Bandwidth management
  • High Availability (HA) with multi-WAN failover and loadbalancing
Safer, more reliable VPN connections

Safer, more reliable VPN connections

Faster processors today have vastly boosted the capabilities of attackers to decrypt VPN tunnels. Legacy VPN cryptographic algorithms like Message Digest 5 (MD5) and Secure Hash Algorithm 1 (SHA-1) are no longer sufficient to guarantee secure outbound communications. With supports to the more advanced Secure Hash Algorithm 2 (SHA-2), the VPN Firewall provides the safest VPN connections in its class to ensure maximum security for business communications.


Unlimited business mobility

Unlimited business mobility

To support dynamic, mobile business operations in today's BYOD (bring your own device) business environments, the VPN Firewalls offer unlimited business mobility with Layer-2 Tunneling Protocol (L2TP) VPN for mobile devices. The VPN Firewall supports L2TP VPN on a wide variety of mobile Internet devices running the iOS, Android and Windows mobile platforms.


ZyXEL One Network experience

ZyXEL One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, ZyXEL One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities.


ZyXEL One Network presents an easy-to-use tool,ZyXEL One Network Utility (ZON Utility) , to realize speed network setup. ZyXEL Smart Connect allows ZyXEL networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.

ZyXEL provides regular updates in response to the latest security threats and advisories, and a service portal that offers free, informative network security resource and know-how to help businesses and IT departments to protect their networks and operations from security risks of the digital age.


The ZyXEL USG and ZyWALL Series of products are integrated with service in the product GUI, so the IT staff can quickly and easily catch up with any new threats, and therefore proceed with walkthrough and troubleshooting actions with assistance from FAQs to better secure networks and easily manager UTM products.




Product Content Filtering Anti-Spam
USG20-VPN 1 year
2 years
1 year
2 years


1. Register on in order to activate the 30-day trial security licenses.
2. License bundles may vary according to region. Please contact your local sales representative for more information.

VPN, Management and Reporting

Product SSL VPN Tunnels SecuExtender SSL VPN Client*1 IPSec VPN Client Vantage Report
USG20-VPN Add 5 tunnels
Add 10 tunnels
For 1 client
For 5 clients
For 10 clients
For 1 client
For 5 clients
For 10 clients
For 50 clients
For 1 device
For 5 devices
For 25 devices
For 100 devices


*1: Support OS: MAC OS 10.7 or later


Item Description Supported OS
IPSec VPN Client IPSec VPN client software for the ZyWALL and USG Series with Easy VPN for zero-configuration remote access • Windows XP (32-bit)
• Windows Server 2003 (32-bit)
• Windows Server 2008 (32/64-bit)
• Windows Vista (32/64-bit)
• Windows 7 (32/64-bit)
• Windows 8 (32/64-bit)
• Windows 10 (32/64-bit)
SecuExtender-SSL VPN Client SSL VPN client software for the ZyWALL and USG Series with autoinstallation in Windows,and lite set up for MAC user • Windows OS
• MAC OS 10.7 or later


1. A 30-day trial version of IPSec VPN client and SSL VPN client for MAC OS can be downloaded from official ZyXEL website. To continue using the application, please contact your regional sales representatives and purchase a commercial license for the application.
2. SSL VPN client for Windows OS is pushed from USG/ZyWALL device and launches automatically. It does not require a license key to activate the application.

Unified Security Gateway 20. Porte: 1xWAN, 4xLAN, 1xSFP, 1xUSB. VPN: 5 IPSec/L2TP, 1 SSL


Unified Security Gateway 20W. Porte: 1xWAN, 4xLAN, 1xSFP, 1xUSB. VPN: 5 IPSec/L2TP, 1 SSL. Wireless AP integrato AC


  • VPN Firewall
  • VPN Firewall (wireless)

Hardware Specifications

10/100/1000 Mbps RJ-45 ports
  • 1 x WAN, 1 x SFP, 4 x LAN/DMZ
USB ports
  • 1
Console port
  • Yes (RJ-45)

System Capacity & Performance*1

SPI firewall throughput (Mbps)*2
  • 350
VPN throughput (Mbps)*3
  • 90
Max. TCP concurrent session*4
  • 20,000
Max. concurrent IPSec VPN tunnels
  • 10
Max. concurrent SSL VPN users
  • 15
Included SSL VPN user no.
  • 5
Customizable zones
  • Yes
IPv6 support
  • Yes

Wireless Specifications (Only USG20W-VPN Supported)

Standard compliance
  • IEEE 802.11ac/n compliance
Standard compliance
  • IEEE 802.11ac/n compliance
  • 1
SSID number
  • 8
Maximum transmit power
  • US (FCC) 2.4 GHz: 25 dBm, 3 antennas
  • US (FCC) 5 GHz: 25 dBm, 3 antennas
  • EU (ETSI) 2.4 GHz: 20 dBm (EIRP), 3 antennas
  • EU (ETSI) 5 GHz: 20 dBm (EIRP), 3 antennas
No. of antenna
  • 3 detachable antennas
Antenna gain
  • 2 dBi @2.4 GHz, 3 dBi @5 GHzs
Data rate
  • 802.11n Up to 450 Mbps
  • 820.11ac Up to 1300 Mbps
Receive sensitivity
2.4 GHz
  • 11 Mbps ≤ -87 dBm
  • 54 Mbps ≤ -74 dBm
  • HT20, MCS15 ≤ -71 dBm
  • HT40, MCS15 ≤ -67 dBm
5 GHz
  • 54 Mbps ≤ -74 dBm
  • HT20, MCS23 ≤ -71 dBm
  • HT40, MCS23 ≤ -68 dBm
  • VHT20, MCS8 ≤ -66 dBm
  • VHT40, MCS9 ≤ -62 dBm
  • VHT80, MCS9 ≤ -59 dBm

Key Software Features

  • Yes
Virtual private network (VPN)
  • Yes (IPSec, SSL, L2TP over IPSec)
  • Subscription based
Content filtering (CF)
  • Subscription based
Bandwidth management
  • Yes
Logging and monitoring
  • Yes
Unified security policy
  • Yes
System management
  • Yes

Power Requirements

Power input
  • 12 V DC, 2.0 A max.
Max. power consumption (watt)
  • 12.00
  • 18.0
Heat dissipation (BTU/hr)
  • 40.92
  • 61.38

Physical Specifications

  • Dimensions (WxDxH)(mm/in.): 216 x 143 x 33/ 8.50 x 5.63 x 1.30
  • Weight (kg/lb.): 1.04/2.29
  • Dimensions (WxDxH)(mm/in.): 216 x 143 x 33/ 8.50 x 5.63 x 1.30
  • Weight (kg/lb.): 1.14/2.51 (Antenna included)
  • Dimensions (WxDxH)(mm/in.): 276 x 185 x 98/10.87 x 7.28 x 3.86
  • Weight (kg/lb.): 1.41/3.11
  • Dimensions (WxDxH)(mm/in.): 276 x 185 x 98/10.87 x 7.28 x 3.86
  • Weight (kg/lb.): 1.50/3.31
Included accessories
  • Power adapter
  • RJ45 -RS232 cable for console connection
  • Power adapter
  • RJ45 -RS232 cable for console connection
  • Antenna

Environmental Specifications

  • Temperature : 0°C to 40°C/32°F to 104°F
  • Humidity : 10% to 90% (non-condensing)
  • Temperature : -30°C to 70°C/-22°F to 158°F
  • Humidity : 10% to 90% (non-condensing)
MTBF (hr)
  • 44,000.00


  • FCC Part 15 (Class B), IC, CE EMC (Class B), RCM, BSMI
  • BSMI, UL


*1: Actual performance may vary depending on network conditions and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.

VPN application

  • Branch offices, partners and home users can deploy ZyXEL USGs/ZyWALLs for site-to-site IPSec VPN connections
  • Branch offices/In-house staff can additionally deploy IPSec VPN HA (load balancing and failover) for always online VPN connectivity
  • Remote users can securely access company resources with their computers or smartphones via SSL, IPSec and L2TP over IPSec VPN
  • The headquarter USG/ZyWALL can also establish an IPSec VPN connection with Microsoft Azure for secured access to a variety of cloud-based applications