USG FLEX Firewall

USG FLEX 200

Two Device Purchase Options

  • Applicable on cloud mode
  • Applicable on premises mode
Bundled with UTMDevice Only
Gold Security PackNo License Included*3
UTM Security Pack*1
Hospitality Pack
Nebula Pro Pack*2
Nebula Plus Pack
Secure WiFi
  1. *: Default bundle with UTM Security Pack is only applicable on USG FLEX100/100W/200/500/700
  2. *1: UTM Security Pack gives additional 30-day trial of service on top of its formal 1-year license duration.
  3. *2: 1-year Nebula Pro Pack is given free to USG FLEXs that are default bundled with UTM Security Pack
  4. *3: Without UTM bundle you can also purchase licenses later. However the bundle option is highly advisable with lower total costs and seamless protection. Pay less and secure more!

What's Include In UTM Security Pack

ServiceUTM Security Pack
Sandboxing
Reputation Filter
Web Filtering
Anti-Malware
IPS
Application Patrol
SecuReporter
Collaborative Detection & Response
Email Security
Security Profile Sync
Hotspot Management service
Concurrent Device Upgrade
Nebula Pro Pack Services
Nebula Plus Pack Services
Secure WiFi

Renewal Options

  • Applicable on cloud mode
  • Applicable on premises mode
License PackSingle License
Gold Security Pack*1Web Security
Anti Malware
SecuReporter
UTM Security Pack*1
Hospitality Pack*2
Nebula Pro Pack
Nebula Plus Pack
Secure WiFi
  1. *1: Only applicable on USG FLEX 100/100W/200/500/700
  2. *2: Only applicable on USG FLEX 200/500/700

License Pack

ServiceGold Security Pack*1UTM Security PackHospitality Pack
Sandboxing
Reputation Filter
Web Filtering
Anti-Malware
IPS
Application Patrol
SecuReporter
Collaborative Detection & Response
Email Security
Security Profile Sync
Hotspot Management service*2
Concurrent Device Upgrade*3
Nebula Pro Pack Services
Nebula Plus Pack Services
Secure WiFi
  1. *1: The Gold Security Pack supports monthly or yearlyautomatic renewal subscription, which provides continuous protection without interruption.
  2. *2: Hotspot Management is only applicable on USG FLEX 200/500/700
  3. *3: Only applicable on USG FLEX 500/700 to allow additional connected clients.

USG FLEX 200

  • 1,800Mbps

    SPI Firewall Throughput

  • 550Mbps

    UTM Throughput (AV, IDP)

  • 4 x LAN/DMZ,
    2 x WAN, 1 x SFP

    USG FLEX Interfaces

  • Standalone /
    SecuReporter

    Management

Specification

Expand AllCollapse All
USG FLEX 50
USG FLEX 100*10
USG FLEX 100W
USG FLEX 200
USG FLEX 500
USG FLEX 700
Hardware Specifications
Wireless standard--802.11 a/b/g/n/ac---
10/100/1000 Mbps RJ-45 ports4 x LAN/DMZ, 1 x WAN4 x LAN/DMZ, 1 x WAN4 x LAN/DMZ, 1 x WAN, 1 x SFP4 x LAN/DMZ, 2 x WAN, 1 x SFP7(Configurable), 1x SFP12 (configuratble), 2x SFP (configurable)
USB3.0 ports111222
Console portYes (RJ-45)RJ45RJ45DB9DB9Yes (DB9)
Rack-mountable---YesYesYes
FanlessYesYesYesYes--
System Capacity & Performance*1
SPI firewall throughput (Mbps)*23509009001,8002,3005,400
VPN throughput (Mbps)902702704508101,100
VPN IMIX Throughput (Mbps)*340100100160240550
IPS throughput (Mbps)*4-5405401,1001,5002,000
Anti-Malware throughput (Mbps)*4-3603605708001,450
AV throughput (Mbps)*4-3603605708001,450
UTM throughput (Anti-malware & IPS, Mbps)*4-3603605508001,350
Max. TCP concurrent sessions*520,000300,000300,000600,0001,000,0001,600,000
Recommended gateway-to-gateway IPsec VPN tunnels5202050150250
Max. concurrent IPsec VPN tunnels*6104040100300500
Concurrent SSL VPN users5 / 15303060150150
VLAN interface8881664128
Wireless Specifications
Standard compliance--802.11 a/b/g/n/ac---
Wireless frequency--2.4 / 5 GHz---
Radio--2---
SSID number--4---
No. of antenna--3 detachable antennas---
Antenna gain--2 dBi @ 2.4 GHz
3 dBi @ 5 GHz		---
Data rate--802.11n: up to 450Mbps
802.11ac: up to 1300Mbps		---
Key Features
Security features
Sandboxing*7-YesYesYesYesYes
Reputation Filter*7-YesYesYesYesYes
Anti-Malware*7-YesYesYesYesYes
IPS*7-YesYesYesYesYes
Application Patrol*7-YesYesYesYesYes
Email Security*7-YesYesYesYesYes
Web filtering*7YesYesYesYesYesYes
SecuReporter*7YesYesYesYesYesYes
Collaborative Detection & Response*7-YesYesYesYesYes
SSL (HTTPS) Inspection-YesYesYesYesYes
Geo EnforcerYesYesYesYesYesYes
2-Factor AuthenticationYesYesYesYesYesYes
Device InsightYesYesYesYesYesYes
Security Profile Synchronize (SPS)*7YesYesYesYesYesYes
VPN Features
VPNIKEv2, IPSec, SSL, L2TP/IPSecIKEv2, IPSec, SSL, L2TP/IPSecIKEv2, IPSec, SSL, L2TP/IPSecIKEv2, IPSec, SSL, L2TP/IPSecIKEv2, IPSec, SSL, L2TP/IPSecIKEv2, IPSec, SSL, L2TP/IPSec
Microsoft AzureYesYesYesYesYesYes
Amazon VPCYesYesYesYesYesYes
WLAN Management
Default Number of Managed AP-88888
Recommend max. AP in 1 AP Group-10102060200
Secure WiFi Service*7-YesYesYesYesYes
Maximum No. of Tunnel-Mode AP-661018130
Maximum No. of Managed AP-24244072520
Connectivity Management
Nebula Cloud Managed ModeYesYesYesYesYesYes
Device HA Pro----YesYes
Link Aggregation (LAG)----YesYes
Hotspot Management*7---YesYesYes
Ticket printer support*9/ Support Qty (max.)---Yes (SP350E) / 10Yes (SP350E) / 10Yes (SP350E) / 10
Concurrent device logins (default/max.)*7*8646464200200 / 300500 / 2000
Power Requirements
Power input12V DC, 2.0 A max.12V DC, 2A max.12V DC, 2A max.12V DC, 2.5A max.12V DC, 4.17A100-240V AC, 50/60Hz, 2.5A max.
Max. power consumption (Watt Max.)1212.512.513.324.146
Heat dissipation (BTU/hr)40.9242.6542.6545.3882.23120.1
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.)216 x 147.3 x 33/
8.50 x 5.80 x 1.30		216x147.3x33/
8.50x5.80x1.30		216 x 147.3 x 33/
8.50 x 5.80 x 1.30		272x187x36
10.7x7.36x1.42		300x 88x44
16.93x7.4x1.73		430 x 250 x 44/
16.93 x 9.84 x 1.73
Weight (kg/lb.)0.88/1.940.85/1.870.85/1.871.4/3.091.65 / 3.643.3/7.28
Packing
Dimensions (WxDxH)(mm/in.)276 x 185 x 98/
10.87 x 7.28 x 3.86		284x190x100/
11.18x7.48x3.94		284 x 190 x 100/
11.18 x 7.48 x 3.94		427x247x73/
16.81x9.72x2.87		351x152x245/
13.82x5.98x9.65		519 x 392 x 163/
20.43 x 15.43 x 6.42
Weight (kg/lb.)1.41/3.111.40/3.091.40/3.092.23 (W/O breacket)
2.42 (W/ breacket)		2.83/6.244.8/10.58
Included accessoriesPower adapter
RJ-45 - RS-232 cable for console connection		Power adapter
RJ-45 - RS-232 cable for console connection		Power adapter
RJ-45 - RS-232 cable for console connection		Power adapter
Rack mounting kit		Power adapter
Power cord
Rack mounting kit		Power cord
Rack mounting kit
Environmental Specifications
Operating environment
Temperature0°C to 40°C / 32°F to 104°F0°C to 40°C / 32°F to 104°F0°C to 40°C / 32°F to 104°F0°C to 40°C/ 32°F to 104°F0°C to 40°C/ 32°F to 104°F0°C to 40°C / 32°F to 104°F
Humidity10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)
Storage environment
Temperature- 30°C to 70°C / - 22°F to 158°F- 30°C to 70°C / - 22°F to 158°F- 30°C to 70°C / - 22°F to 158°F- 30°C to 70°C / - 22°F to 158°F- 30°C to 70°C / - 22°F to 158°F- 30°C to 70°C / - 22°F to 158°F
Humidity10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)10% to 90% (non-condensing)
MTBF (hr)655130989810.8989810.8529688.2529688.2947736
Acoustic noise----24.5dBA on <25degC
Operating Temperature
41.5dBA on full FAN speed.		25.3dBA on <25degC
Operating Temperature
46.2dBA on full FAN speed.
Certifications
EMCFCC Part 15 (Class B)
CE EMC (Class B)
RCM
BSMI		FCC Part 15 (Class B)
CE EMC (Class B)
BSMI		FCC Part 15 (Class B)
CE EMC (Class B)
BSMI		FCC Part 15 (Class B)
CE EMC (Class B)
C-Tick (Class B)
BSMI		FCC Part 15 (Class A)
CE EMC (Class A)
C-Tick (Class A)
BSMI		FCC Part 15 (Class A)
CE EMC (Class A)
C-Tick (Class A)
BSMI
SafetyBSMI, ULLVD (EN60950-1)
BSMI		LVD (EN60950-1), BSMILVD (EN60950-1)
BSMI		LVD (EN60950-1)
BSMI		LVD (EN60950-1), BSMI
Read moreRead moreRead moreRead moreRead moreRead more
  • Note:
  • *: This matrix with firmware ZLD5.32 or later.
  • *1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
  • *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
  • *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
  • *4: Anti-malware (with Express Mode) and IPS throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
  • *5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
  • *6: Including Gateway-to-Gateway and Client-to-Gateway.
  • *7: With Zyxel service license to enable or extend the feature capacity.
  • *8: This is the recommend maximum number of concurrent logged-in devices.
  • *9: With Hotspot Management license support.
  • *10: USG FLEX 100 rev1 is adapting new hardware design equipped with 4 x LAN/DMZ, 1 x WAN

* License subscription fee and permits may vary by country.
* All specifications are subject to change without notice.

Access Point Compatibility List

ProductUnified APUnified Pro AP
Models
  • NWA5301-NJ
  • NWA5121-NI
  • NWA5123-AC HD*1
  • NWA5123-AC
  • NWA5123-NI
  • WAC5302D-S
  • WAX510D*1
  • WAC5302D-Sv2
  • WAC500*1
  • WAC500H*1
  • WAC6103D-I
  • WAC6503D-S
  • WAC6502D-S
  • WAC6303D-S
  • WAC6553D-E
  • WAC6552D-S
  • WAC6502D-E
  • WAX650S
  • WAX630S
  • WAX610D
  • WAX640S-6E*2
  • WAX620D-6E*2
  • WAX655E
FunctionsUnified APUnified Pro AP
Central managementYesYes
Auto provisioningYesYes
Data forwardingLocal bridgeLocal bridge/Data tunnel
ZyMeshYesYes
  • *1: Support both local bridge and data tunnel for data forwarding
  • *2: As Forward Compatible AP. 6GHz radio configuration is to be available in January, 2023