USG Configuration Converter

Easy configuration tool for speed upgrade to Zyxel Next-Gen USG and ZyWALL series

The USG Configuration Converter helps saves configuration time and effort when upgrading from the current USG to a Next-Gen USG or new ZyWALL VPN Firewall. The Next-Gen USG or new ZyWALL VPN Firewall are designed with completely new hardware platforms; existing USG configurations cannot be directly applied to the new series. This Web tool converts the firewall, VPN and policy routing settings of existing USGs so that they can be transferred to the new series.

Supported Models

	From	To
USG to VPN Firewall	USG20	USG20-VPN
USG to VPN Firewall	USG20W	USG20W-VPN
USG to Next-Gen USG	USG20	USG40, USG60
	USG20W	USG40W, USG60W
	USG50	USG60, USG110
	USG100	USG110, USG210, USG310
	USG100-PLUS	USG110, USG210, USG310
	USG200	USG110, USG210, USG310
	USG300	USG310, USG1100
	USG1000	USG1100, USG1900
	USG2000	USG1900
USG to ZyWALL	USG100	ZyWALL 110
	USG200	ZyWALL 110
	USG300	ZyWALL 310
	USG1000	ZyWALL 1100

Step-by-step Guide

Configuration example

Save the USG configuration file, and upload it to the Configuration Converter.
Assign the port roles, or click Copy All to use the existing settings.
Click Convert and download the new configuration file.
Upload the new configuration file to the Next-Gen USG or ZyWALL VPN Firewall and apply.

Note

The USG Configuration Converter does not convert content filtering, ADP, IDP, application patrol, and port-less bandwidth management settings. Users have to configure these items manually (if available) on the new device.
Please use the configuration file as saved from the USG. Do NOT edit the configuration file to avoid problems.
Please upload the certificate on the existing USG to the new ZyWALL VPN Firewall before importing the configurations. This is to ensure that the IPSec related configurations are applied successfully.
Changing port positions will also cause interface names to change.
The Next-Gen USG310/1100/1900 and new ZyWALL 310/1100 do not support port grouping. USG port grouping settings will be broken and mapped to a single port on the Next-Gen USG or ZyWALL VPN Firewall.

FAQ

Question 1

I have an USG100 with 23 IPsec VPN rules. Now I want to purchase a ZyWALL 110, but don’t want to configure these 23 IPsec VPN rules one by one. How do I configure the ZyWALL 110 quickly?

Answer:

Follow the steps below.

Save the USG100 configuration file to a laptop or PC.
Go to the USG Configuration Converter website and link to the USG100 to ZyWALL 110 page.
Upload the USG100 configuration file.
Assign the port roles, or click Copy All to use the existing settings.
Click Convert and download the new configuration file.
Log in the ZyWALL 110 GUI and upload the configuration file (Maintenance > File Manager > Configuration File > Upload Configuration File).
Select the uploaded configuration file, then click Apply to finish the configuration migration.

Question 2

I have an USG300 and I want to upgrade to ZyWALL 310. I only use 5 ports on the USG300, the rest are undefined. Can this tool convert my port settings?

Answer:

Yes. The Configuration Converter can convert all the port settings. Unused ports will be assigned a default IP address (0.0.0.0).

Question 3

I have an USG1000 and I want to upgrade to ZyWALL 1100. The ZyWALL 1100 has more ports than USG1000. Can this tool convert my port settings?

Answer:

Yes. The Configuration Converter can convert all the port settings. The extra ports will be assigned a default IP address (0.0.0.0).

Question 4

Does this Configuration Converter work with the USG50?

Answer:

No. The Configuration Converter does not support the USG50 yet.