Your browser either does not support JavaScript or you have turned JavaScript off.

USG Flex

Introducing the new USG FLEX Series

Whether your business is small or mid-sized, onsite, or employees telecommuting, a business office network has to offer employees not just connectivity but also security. We are introducing the latest USG FLEX Series - a newly designed platform capable of up to 1.25x firewall performance improvement and 5x UTM performance gain.

The USG FLEX Series supports IPsec, SSL, and L2TP-based VPNs, making it an ideal solution for providing a secure network to access remote or home-based workers. Zero-configuration remote access removes complicated setup challenges making it easier for employees to establish VPN connections to the office without the need for IT support.

Higher Detection Threats Rate

The USG FLEX Series supports advanced Anti-Malware with cloud query express mode. The cloud query with high detection rate helps verify the file hash within seconds.


Zyxel partners with industry leading security experts to deliver top-grade security in one-box. We leverage a multiple-source database to increase malware coverage. This increases the accuracy in threat detection.

Multi-layer protection

USG FLEX is designed with multi-layer protection against many types of threats. Examples of external protection include USG FLEX’s URL Threat Filter, Anti-Malware, and Intrusion Prevention. Internal protection features include Application Patrol and Web Filtering which restrict users' inappropriate application usage or web access.

Perfomance Gain

The newly designed platform is capable of up to 125% firewall performance improvement. The USG FLEX maximizes UTM firewall performance by minimizing power usage. Results of an additional 500% UTM performance have been observed with cloud query express mode.

Working remotely and securely is as easy as 1-2-3

With the rising trend in working remotely, USG FLEX offers IPsec, SSL or L2TP based VPNs to provide flexible secure network options for many of the common operating systems.

Flexible Subscription

Users will be able to migrate existing, unexpired USG licenses to the new USG FLEX hardware. There is no need to purchase licenses from scratch. Users can also choose single license configurations where the need arises for Web Filtering, Anti-Malware, and many more.

User-friendly analytics reporting

The USG FLEX Series dashboard offers user-friendly traffic summary and threat statistic visuals. Used in conjunction with SecuReporter (Included with bundled licensing), custom monthly reports on threats, bandwidth usage, and user sites visited can be summarized and delivered each month.

Comprehensive connectivity

Zyxel USG FLEX Series not only can protect your network, but it also supports hospitality features including hotspot guest network access and can function as an access point controller for quick configuration and deployment of WiFi networks.

The USG FLEX Series firewall models


Licenses and Services

License Service Included Bundled License Renewal Bundled License A-la-carte License
UTM License
Web Filtering Yes Yes Yes*1
IPS (IDP) Yes Yes -
Application Patrol Yes Yes -
Anti-Malware Yes
Yes Yes
Email Security Yes Yes -
SecuReporter Yes - -
SecuReporter Premium - Yes Yes
Hospitality License
Managed AP Service Yes (30-Day Trial) Yes (1 Year) Yes (Qty based)
Hotspot Management *2 Yes (30-Day Trial) Yes (1 Year) Yes (Perpetual)
Concurrent Device Yes (30-Day Trial) Yes (1 Year) Yes (Qty based) *3

1* Will include Email Security license service
2* Hotspot Management is available on USG FLEX 200/500 only
3* Allowing additional connected clients is available to USG FLEX 500 only

License Service Feature
UTM License
Web Filtering Block access to malicious or risky websites
IPS (IDP) Deep-packet inspection against known attacks from Network
Application Patrol Automatically categorize and manage the network application usage
Anti-Malware Scan files at the gateway or Zyxel security cloud for malware and other threats
Email Security Fast detection to block spam/phishing mail with malicious content
SecuReporter Cloud-based intelligent analytics and report
Hospitality License
Managed AP Service AP auto discovery and provisioning
Hotspot Management Various Network Access Control
Concurrent Device Increased number of connected clients


The Zyxel Family of Firewalls

Zyxel offers five families of firewalls to meet varying needs, as follows:

Zyxel VPN (Virtual Private Network) Firewall product family has all of the basics that you need for a working from home solution.

Learn More

Zyxel USG (Universal Security Gateway) Firewalls have all of the features of the VPN firewalls plus the ability to detect and block malware like viruses.

Learn More

Zyxel ATP (Advanced Threat Protection) Firewalls provide the highest level of security protection. ATP firewalls provide all of the features of USG plus Sandboxing which is an “artificial intelligence” type of capability to detect previously unidentified malware.

Learn More

Zyxel USG FLEX maximizes UTM firewall performance using the power of cloud UTM. USG FLEX offers flexible VPN options (IPsec, SSL or L2TP) to provide flexible secure remote access for remote working and management.

Learn More

Zyxel NSG (Nebula Security Gateway) Firewalls provide most functions of USG firewalls, but managed through the Zyxel Nebula cloud network management platform. NSG Firewalls are designed to be configured completely remotely, ideal for social distancing measures. A Zyxel NSG device can be shipped directly to a home or office, and remotely configured after it has been plugged into the internet.

Learn More

Mix and match – Zyxel Firewalls will all interconnect with each other. For example, an ATP firewall could be installed in the office while more basic VPN firewalls could be installed in homes. Zyxel firewalls can also work with many other firewall brands because we are certified by ICSA for interoperability. For example, a Zyxel firewall can be used in a home to connect to another brand of ICSA certified firewall in the office. IPSec and SSL can also be mixed on a single firewall – some home users could connect to the office with IPSec while others connect with SSL.

Here is a guide to the number of remote connections that each Zyxel firewall model can handle. This will help you to choose the model that best matches your needs or the needs of your customer. Usability of the maximum number of VPN connections may vary depending on the speed of the internet connection that is used, especially the upload speed from the office out to staff working from home.

Office Firewall Capacity




Maximum Concurrent IPSec Tunnels (Included with Gateway) L2TP Over IPSec (Tablets/Phones) Maximum Concurrent SSL Tunnels  Default Concurrent SSL Tunnels

zywall110-matrix-thumb copy


VPN2S 20 ☑️  -  -
VPN50 50 ☑️ 50   10
VPN100 100 ☑️  200  30
VPN300  300 ☑️  300  50
VPN1000  1000 ☑️  500  250
ZyWALL110  100 ☑️  150  50
ZyWALL310  300 ☑️  150  50
ZyWALL1100 1000  ☑️  500  250

zywall110-matrix-thumb copy


USG20-VPN 10 ☑️  15  5
USG20W-VPN 10 ☑️  15  5
USG40 20 ☑️  30*  20*
USG40W  20 ☑️  30*   20* 
USG60  40 ☑️  60*  20*
USG60W 40 ☑️  60*  20*
USG110  100 ☑️ 150   50*
USG210  200 ☑️  150 50*
USG310 300  ☑️  150 50 
USG1100 1000 ☑️ 1500  800
USG1900 2000 ☑️ 2000  1500
USG2200 3000 ☑️ 5000  2000
zywall110-matrix-thumb copy

USG Flex

USG FLEX 100 40 ☑️ 30 30
USG FLEX 200 100 ☑️ 60 60
USG FLEX 500 300 ☑️ 150 150

zywall110-matrix-thumb copy

ATP100/100W 40 ☑️  30*  30*
ATP200 40 ☑️  60* 60*
ATP500 200 ☑️ 150* 150*
ATP800 1000 ☑️ 500* 500*


NSG50 10 ☑️
NSG100 40 ☑️  - -
NSG200 200 ☑️  - -
NSG300 300 ☑️  - -

* Increased with latest Firmware (Please Request from Tech Support for Supported Firmware)

Office Firewalls for additional SSL Tunnel Licenses

man-with-laptop One-Time
5 Additional SSL Tunnels on Firewall

10 Additional SSL Tunnels on Firewall

50 Additional SSL Tunnels on Firewall


zywall110-matrix-thumb copy

VPN2S -  - -
VPN50 ☑️ ☑️ -
VPN100 ☑️ ☑️ ☑️
VPN300 ☑️ ☑️ ☑️
VPN1000 ☑️ ☑️ ☑️
ZyWALL110 ☑️ ☑️ ☑️ 
ZyWALL310 ☑️ ☑️ ☑️ 
ZyWALL1100 ☑️ ☑️ ☑️ 

zywall110-matrix-thumb copy


USG20-VPN ☑️ ☑️ -
USG20W-VPN ☑️ ☑️ -
USG40 ☑️ ☑️ -
USG40W ☑️ ☑️  -
USG60 ☑️ ☑️
USG60W ☑️ ☑️
USG110 ☑️ ☑️ ☑️ 
USG210 ☑️ ☑️ ☑️ 
USG310 ☑️ ☑️ ☑️ 
USG1100 ☑️ ☑️ ☑️ 
USG1900 ☑️ ☑️ ☑️ 
USG2200 ☑️  ☑️ ☑️ 

zywall110-matrix-thumb copyUSG FLEX

USG FLEX 100 Included Included Included
USG FLEX 200 Included Included Included
USG FLEX 500 Included Included Included

zywall110-matrix-thumb copy

ATP100/100W Included Included Included
ATP200 Included Included Included
ATP500 Included Included Included
ATP800 Included Included Included


Zyxel SecuExtender Remote User Licenses




window-logo-vector-1 apple-logo-vector-note-1 window-logo-vector-1 apple-logo-vector
1 Client ZyWALLVPN - Free Download  SSLVPNOSX1
5 Clients ZyWALLVPN5 -
Free Download  SSLVPNOSX5
10 Clients ZyWALLVPN10 - Free Download SSLVPNOSX10
50 Clients ZyWALLVPN50 - Free Download  -

**IPSec options for Mac users include 3rd party software like VPN Tracker, L2TP over IPSec in Mac OS, or using a gateway line VPN2S at home.



We’re Here to Help

Please don’t hesitate to contact us.

Zyxel Products are available from Value Added Resellers and Managed Service Providers.

Contact us for your nearest VAR or MSP