Dual-WAN Security Router
USG LITE 60AX
License Service
Elite Pack unlocks the full security and cloud-management capabilities of Zyxel routers—combining advanced web filtering across 120+ categories, premium ransomware and threat protection powered by cloud intelligence, and Nebula Pro features in a single license. For USG LITE 60AX, a one-year license is included* at no extra cost, and renewal is simple to ensure continuous protection.
| Elite Pack | |
|---|---|
| Real-time threat intelligence | |
| Web Filtering (Content Filter) | |
| SecuReporter Traffic Log Archiving | |
| Nebula Pro Pack - Advanced feature set | |
| Ransomware / malware prevention | |
| Intrusion Blocker | |
| Dark Web Blocker | |
| Stop mail fraud & phshing | |
| Block Ads | |
| Block VPN proxy | |
| Firewall | |
| Country Restriction (GeoIP) | |
| Custom allowed / blocked domain | |
| Traffic Management (applications & clients) |
* The complimentary 1-year Elite Pack applies only to new devices registered on or after January 19, 2026. Previously registered devices are not eligible.
Specification
Hardware Specifications
CPU
Quad-core, 2.00GHz
RAM/FLASH
1GB/512MB
Ethernet ports
Port 1 (100/1000 Mbps) : LAN / IPTV
Port 2 (100/1000 Mbps) : LAN / WAN
Port 3 & 4 (100/1000 Mbps) : LAN
Port 5 (100/1000/2500 Mbps) : LAN
Port Globe (100/1000/2500 Mbps) : WAN
System Capacity & Performance *1
SPI firewall throughput LAN to WAN (Mbps) *2
2,000
Bridge mode throughput (Mbps)
2,000
DPI throughput Application on (routing mode) (Mbps)
2,000
Throughput with threat management on (Mbps)
2,000
VPN throughput TCP single session (Mbps)
2,000
VPN throughput UDP 1424 (Mbps) *3
300
Max. TCP concurrent sessions *4
20,000
Max. gateway-to-gateway IPsec VPN tunnels
12
Max. remote VPN tunnels
5
Wireless Specifications
Standard
IEEE802.11 ax/ac/n/g/b/a
MIMO
MU-MIMO
Wireless speed
2.4 GHz: 1150 Mbps
5 GHz: 4800 Mbps
Frequency band
2.4 GHz
USA(FCC): 2.412 to 2.462 GHz
Europe(ETSI): 2.412 to 2.472 GHz
5 GHz
USA (FCC): 5.15 to 5.35 GHz; 5.470 to 5.850 GHz
European (ETSI): 5.15 to 5.35 GHz; 5.470 to 5.725 GHz
Bandwidth
20-, 40- ,80-, and, 160-MHz
Conducted typical transmit output power *5
US (2.4GHz/5GHz):
29.98/29.82 dBm
EU (2.4GHz/5GHz):
19.92/29.90 dBm
Wireless security
Open, WPA2-PSK
WPA3-Personal
SSID number
8
MESH Networking
Yes
No. of antenna
4 (internal)
Antenna gain
2.4Ghz: 3.65dBi, 4x4: 4SS
5Ghz: 4.63dBi, 4x4: 4SS
Security Features
Ransomware / malware prevention
Yes
Intrusion blocker
Yes
Dark Web Blocker
Yes
Stop mail fraud & phishing
Yes
Block Ads
Yes
Block VPN proxy
Yes
Firewall
Yes
Country Restriction (Geo IP blocking)
Yes
Exception list
Yes
Custom allowed / blocked domain
Yes
Traffic Management (applications & clients)
Yes
Security event analytics
Nebula Threat Report
Real-time threat intelligence *6
Yes
Web Filtering (Content Filter) *6
Yes
SecuReporter Traffic Log Archiving *6
Yes
VPN Features
Site2site VPN
Yes
Remote access VPN
IPSec/IKEv2
Networking Features
WAN Type
DHCP/Static IP/PPPoE
Dual-WAN load balancing & failover
Yes
Reserve IP (IP/MAC binding)
Yes
Block clients
Yes
Virtual Server (NAT)
Yes
DHCP server and DHCP relay
Yes
Dynamic DNS (DDNS)
Yes
Policy route
Yes
Static route
Yes
Guest Network
Yes
VLAN Segmentation
4
Authentication
IKEv2 with EAP-MSCHAPv2 VPN authentication
Yes
Cloud-auth Authentication
Yes
Captive Portal Web Authentication
Yes
Microsoft Entra ID sign-in *6
Yes
Management
Onboarding WAN setting method
Yes
Site-wide SSID management
Yes
Multi-site management
Yes
Client report
Yes
Remote support and diagnostics
Yes
Keep device settings in the Nebula
Yes
Live tools
Yes
Event Log
Yes
Nebula Pro Pack - Advance feature set *6
Yes
Power Requirements
Power input
12 V DC, 3.0 A
Max. power consumption (Watt Max.)
31W
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.)
161.7 x 65 x 229 mm (6.37” x 2.56” x 9.02”)
Weight (g/lb.)
707/1.56
Environmental Specifications
Operating
Temperature
0°C to 40°C (32°F to 104°F)
Humidity
5% to 95% (Non-condensing)
Storage
Temperature
-30°C to 70°C (-22°F to 158°F)
Humidity
5% to 95% (Non-condensing)
Certifications
CE
Yes
FCC
Yes
BSMI
Yes
All specifications are subject to change without notice.
- Actual performance may vary depending on system configuration, network conditions, and activated applications.
- Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
- VPN throughput measurement are based on RFC 2544 (1,424-byte UDP packets).
- Maximum sessions are measured using the industry standard IXIA IxLoad testing tool.
- Maximum transmit power is limited by local regulatory settings.
- Requiring Elite Pack.