USG FLEX Firewall
USG FLEX 700H
License Service
The USG FLEX H series provides an indispensable feature set to perfectly fit small business requirements as well as to gain essential security services needed to protect against cyberattacks. Nebula Control Center (NCC) offers multiple subscription options to meet customers’ needs. The Nebula Plus/Professional Pack give you peace of mind at more control over your network updates and visibility, or even the most advanced management of cloud networking.
Discover Gold Security| Service |
Gold Security Pack
Included with Gold Bundle H/W |
Entry Defense Pack
Included with Entry Bundle H/W |
|---|---|---|
| Sandboxing | ||
| Reputation Filter | ||
| Web Filtering | ||
| Anti-Malware | ||
| IPS | ||
| Application Patrol | ||
| Device Insight | ||
| SecuReporter | ||
| Nebula Pro Pack | Priority Support Only * | |
| Security Profile Sync | ||
| Secure WiFi *1 |
- Priority Support is available to customers with a Pro Pack organization or those using USG FLEX H series firewalls with Gold Security Pack or Entry Defense Pack licenses. Eligible customers can open support tickets for prioritized assistance.
- The tunnel mode and Remote AP will be available in the future.
A la carte License
| Service | |
|---|---|
| Nebula Pro Pack | The Pro Pack includes all of our advanced functionality, designed to cater to larger and more complex deployments, featuring advanced diagnostic tools, AI functionality, and the ability to unlock the full potential of the network hardware. |
| Nebula Plus Pack | The Plus Pack has been designed to expand the functionality from the Base Pack to cater for network administrators wishing to gain access to tools that speed up and simplify day-to-day operations. |
| Secure WiFi * | The Secure WiFi service allows you to easily and securely extend the working experience as if you were in the office, through secure tunneling and strict twofactor authentication. It also enables the management of more than 8 access points (APs) up to the maximum capacity for the USG FLEX H firewall. |
*: The tunnel mode and Remote AP will be available in the future.
USG FLEX 700H
-
15,000 Mbps
SPI Firewall Throughput
-
4,000 Mbps
UTM Throughput
-
3,000 Mbps
VPN Throughput
-
2 x 2.5mGig
2 x 10mGig /PoE+
8 x 1GbE
2 x 10G SFP+Interfaces
Specification
Hardware Specifications
Network interfaces
100M/1G Ethernet (RJ-45)
5
100M/1G/2.5G Ethernet (RJ-45)
-
1G/2.5G/5G/10G Ethernet (RJ-45)
-
1G SFP/10G SFP+
-
IEEE 802.3at (PoE+) Port
Port 5 (50HP only)
Total PoE budget (watts)
30
USB 3.0 Type-A
1
Console port
Yes (RJ-45)
Rack-mountable
-
Fanless
Yes
System Capacity & Performance *1
SPI firewall throughput (Mbps) *2
2,000
VPN throughput (Mbps) *3
500
IPS throughput (Mbps) *4
1,000
Anti-Malware throughput (Mbps) *4
600
UTM throughput (Anti-Malware and IPS) *4
600
NGFW throughput (IPS and App Patrol) *4
1,000
Max. TCP concurrent sessions *5
100,000
Max. concurrent IPsec VPN tunnels *6
20
Recommended gateway-to-gateway IPsec VPN tunnels
5
Concurrent SSL VPN users
15
VLAN interface
8
Speed Test Performance
SPI firewall throughput (Mbps) *7
926.76
Key Features
Security Service *8
Anti-Malware
Yes
IPS
Yes
Application Patrol
Yes
Web filtering
Yes
Reputation Filter
Yes
SecuReporter
Yes
Sandboxing
Yes
Security Profile Sync
Yes
Device Insight
Yes
SSL (HTTPS) inspection
Yes
Two-Factor Authentication
Yes
SD-WAN & VPN
WAN load balancing
Yes
Prioritize critical applications
Yes
VPN Protocol
IKEv2/IPSec, SSL, Tailscale *9
Nebula SD-VPN
Yes
Auto-link VPN
Yes
Manual-link VPN
Yes
VPN Topology
Yes
WLAN Management
Default Number of Managed AP
8
Secure WiFi *9
Yes
Maximum Number of Tunnel-Mode AP *10
3
Recommend max. AP in 1 AP Group
10
Management & Connectivity
Nebula Centralized Management
Yes
Device HA *9
-
Link Aggregation (LAG)
Yes
Maximum Concurrent Devices *11
64
Peak Device Login Rate *12
64
Power Requirements
Power input
50H: 12V DC, 2A
50HP: 19V DC,3.42A
Max. power consumption (Watt Max.)
50H: 8.86
50HP: 48.65
Heat dissipation (BTU/hr)
50H: 32.42
50HP: 175.73
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.):
216 x 143 x 33/8.50 x 5.63 x 1.30
Weight (kg/lb.):
50H: 1.02/ 2.26
50HP: 1.04/ 2.31
Packing
Dimensions (WxDxH)(mm/in.):
278 x 189 x 99/10.94 x 7.44 x 3.89
Weight (kg/lb.):
50H: 1.27/ 2.80
50HP: 1.55/3.41
Included accessories
Power adapter
Power cord (50HP only)
RJ-45 to RS-232 cable for console connection
Environmental Specifications
Operating
Temperature: 0°C to 40°C / 32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage
Temperature: -30°C to 70°C / -22°F to 158°F
Humidity: 10% to 90%(non-condensing)
MTBF (hr)
50H:
40°C/ 596100.85308 hr
25°C/ 945046.81927 hr
50HP:
40°C/ 402515.716 hr
25°C/ 665839.12962 hr
Acoustic noise
-
Certifications
EMC
FCC Part 15 (Class B)
CE EMC (Class B)
RCM (Class B)
BSMI
Safety
LVD (EN62368-1)
BSMI
Hardware Specifications
Network interfaces
100M/1G Ethernet (RJ-45)
8
100M/1G/2.5G Ethernet (RJ-45)
-
1G/2.5G/5G/10G Ethernet (RJ-45)
-
1G SFP/10G SFP+
-
IEEE 802.3at (PoE+) Port
Port 8 (100HP only)
Total PoE budget (watts)
30
USB 3.0 Type-A
1
Console port
Yes (RJ-45)
Rack-mountable
-
Fanless
Yes
System Capacity & Performance *1
SPI firewall throughput (Mbps) *2
4,000
VPN throughput (Mbps) *3
900
IPS throughput (Mbps) *4
1,500
Anti-Malware throughput (Mbps) *4
1,000
UTM throughput (Anti-Malware and IPS) *4
1,000
NGFW throughput (IPS and App Patrol) *4
1,500
Max. TCP concurrent sessions *5
300,000
Max. concurrent IPsec VPN tunnels *6
50
Recommended gateway-to-gateway IPsec VPN tunnels
20
Concurrent SSL VPN users
25
VLAN interface
16
Speed Test Performance
SPI firewall throughput (Mbps) *7
931.61
Key Features
Security Service *8
Anti-Malware
Yes
IPS
Yes
Application Patrol
Yes
Web filtering
Yes
Reputation Filter
Yes
SecuReporter
Yes
Sandboxing
Yes
Security Profile Sync
Yes
Device Insight
Yes
SSL (HTTPS) inspection
Yes
Two-Factor Authentication
Yes
SD-WAN & VPN
WAN load balancing
Yes
Prioritize critical applications
Yes
VPN Protocol
IKEv2/IPSec, SSL, Tailscale *9
Nebula SD-VPN
Yes
Auto-link VPN
Yes
Manual-link VPN
Yes
VPN Topology
Yes
WLAN Management
Default Number of Managed AP
8
Secure WiFi *9
Yes
Maximum Number of Tunnel-Mode AP *10
6
Recommend max. AP in 1 AP Group
10
Management & Connectivity
Nebula Centralized Management
Yes
Device HA *9
-
Link Aggregation (LAG)
Yes
Maximum Concurrent Devices *11
64
Peak Device Login Rate *12
64
Power Requirements
Power input
100H: 12V DC, 2A
100HP: 19V DC,3.42A
Max. power consumption (Watt Max.)
100H: 17
100HP: 51.2
Heat dissipation (BTU/hr)
100H: 40.365
100HP: 194.5
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.):
216 x 143 x 33/8.50 x 5.63 x 1.30
Weight (kg/lb.):
100H: 1.04/2.30
100HP: 1.05/2.31
Packing
Dimensions (WxDxH)(mm/in.):
278 x 189 x 99/10.94 x 7.44 x 3.89
Weight (kg/lb.):
100H: 1.62/3.57
100HP: 1.91/4.21
Included accessories
Power adapter
Power cord (100HP only)
RJ-45 to RS-232 cable for console connection
Environmental Specifications
Operating
Temperature: 0°C to 40°C / 32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage
Temperature: -30°C to 70°C / -22°F to 158°F
Humidity: 10% to 90%(non-condensing)
MTBF (hr)
100H:
40°C/ 353878.1057 hr
25°C/ 602150.9604 hr
100HP:
40°C/ 289845.2327 hr
25°C/ 518347.4294 hr
Acoustic noise
-
Certifications
EMC
FCC Part 15 (Class B)
CE EMC (Class B)
RCM (Class B)
BSMI
Safety
LVD (EN62368-1)
BSMI
Hardware Specifications
Network interfaces
100M/1G Ethernet (RJ-45)
6
100M/1G/2.5G Ethernet (RJ-45)
2
1G/2.5G/5G/10G Ethernet (RJ-45)
-
1G SFP/10G SFP+
-
IEEE 802.3at (PoE+) Port
Port 2 (2.5G, 200HP only)
Total PoE budget (watts)
30
USB 3.0 Type-A
1
Console port
Yes (RJ-45)
Rack-mountable
Yes
Fanless
Yes
System Capacity & Performance *1
SPI firewall throughput (Mbps) *2
6,500
VPN throughput (Mbps) *3
1,200
IPS throughput (Mbps) *4
2,500
Anti-Malware throughput (Mbps) *4
1,800
UTM throughput (Anti-Malware and IPS) *4
1,800
NGFW throughput (IPS and App Patrol) *4
2,500
Max. TCP concurrent sessions *5
600,000
Max. concurrent IPsec VPN tunnels *6
100
Recommended gateway-to-gateway IPsec VPN tunnels
50
Concurrent SSL VPN users
50
VLAN interface
32
Speed Test Performance
SPI firewall throughput (Mbps) *7
929.97
Key Features
Security Service *8
Anti-Malware
Yes
IPS
Yes
Application Patrol
Yes
Web filtering
Yes
Reputation Filter
Yes
SecuReporter
Yes
Sandboxing
Yes
Security Profile Sync
Yes
Device Insight
Yes
SSL (HTTPS) inspection
Yes
Two-Factor Authentication
Yes
SD-WAN & VPN
WAN load balancing
Yes
Prioritize critical applications
Yes
VPN Protocol
IKEv2/IPSec, SSL, Tailscale *9
Nebula SD-VPN
Yes
Auto-link VPN
Yes
Manual-link VPN
Yes
VPN Topology
Yes
WLAN Management
Default Number of Managed AP
8
Secure WiFi *9
Yes
Maximum Number of Tunnel-Mode AP *10
10
Recommend max. AP in 1 AP Group
20
Management & Connectivity
Nebula Centralized Management
Yes
Device HA *9
Yes
Link Aggregation (LAG)
Yes
Maximum Concurrent Devices *11
200
Peak Device Login Rate *12
200
Power Requirements
Power input
200H: 12V DC, 2A
200HP: 19V DC, 3.42A
Max. power consumption (Watt Max.)
200H: 22
200HP: 62
Heat dissipation (BTU/hr)
200H: 58.75
200HP: 191.9
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.):
272 x 185 x 36/10.7 x 7.30 x 1.42
Weight (kg/lb.):
200H: 1.50/3.31
200HP: 1.52/3.35
Packing
Dimensions (WxDxH)(mm/in.):
427 x 247 x 73/16.81 x 9.72 x 2.87
Weight (kg/lb.):
200H: 2.43/5.36
200HP: 2.68/5.92
Included accessories
Power adapter
Power cord (200HP only)
RJ-45 to RS-232 cable for console connection
Rack mounting kit (optional, by regions)
Environmental Specifications
Operating
Temperature: 0°C to 40°C / 32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage
Temperature: -30°C to 70°C / -22°F to 158°F
Humidity: 10% to 90%(non-condensing)
MTBF (hr)
200H:
40°C/ 306768.409 hr
25°C/ 528037.0106 hr
200HP:
40°C/ 227747.9662 hr
25°C/ 392638.3847 hr
Acoustic noise
-
Certifications
EMC
FCC Part 15 (Class B)
CE EMC (Class B)
RCM (Class B)
BSMI
Safety
LVD (EN62368-1)
BSMI
Hardware Specifications
Network interfaces
100M/1G Ethernet (RJ-45)
8
100M/1G/2.5G Ethernet (RJ-45)
4
1G/2.5G/5G/10G Ethernet (RJ-45)
-
1G SFP/10G SFP+
-
IEEE 802.3at (PoE+) Port
Port 3, 4 (2.5G)
Total PoE budget (watts)
30
USB 3.0 Type-A
1
Console port
Yes (RJ-45)
Rack-mountable
Yes
Fanless
-
System Capacity & Performance *1
SPI firewall throughput (Mbps) *2
10,000
VPN throughput (Mbps) *3
2,000
IPS throughput (Mbps) *4
4,500
Anti-Malware throughput (Mbps) *4
3,000
UTM throughput (Anti-Malware and IPS) *4
3,000
NGFW throughput (IPS and App Patrol) *4
4,500
Max. TCP concurrent sessions *5
1,000,000
Max. concurrent IPsec VPN tunnels *6
300
Recommended gateway-to-gateway IPsec VPN tunnels
150
Concurrent SSL VPN users
150
VLAN interface
64
Speed Test Performance
SPI firewall throughput (Mbps) *7
938.1
Key Features
Security Service *8
Anti-Malware
Yes
IPS
Yes
Application Patrol
Yes
Web filtering
Yes
Reputation Filter
Yes
SecuReporter
Yes
Sandboxing
Yes
Security Profile Sync
Yes
Device Insight
Yes
SSL (HTTPS) inspection
Yes
Two-Factor Authentication
Yes
SD-WAN & VPN
WAN load balancing
Yes
Prioritize critical applications
Yes
VPN Protocol
IKEv2/IPSec, SSL, Tailscale *9
Nebula SD-VPN
Yes
Auto-link VPN
Yes
Manual-link VPN
Yes
VPN Topology
Yes
WLAN Management
Default Number of Managed AP
8
Secure WiFi *9
Yes
Maximum Number of Tunnel-Mode AP *10
18
Recommend max. AP in 1 AP Group
60
Management & Connectivity
Nebula Centralized Management
Yes
Device HA *9
Yes
Link Aggregation (LAG)
Yes
Maximum Concurrent Devices *11
500
Peak Device Login Rate *12
220
Power Requirements
Power input
19V DC, 4.736A
Max. power consumption (Watt Max.)
68
Heat dissipation (BTU/hr)
211.3
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.): 300 x 182 x 43.5/11.81 x 7.17 x 1.71
Weight (kg/lb.): 1.64/3.62
Packing
Dimensions (WxDxH)(mm/in.): 350 x 149 x 244/13.78 x 5.87 x 9.61
Weight (kg/lb.): 2.93/6.46
Included accessories
Power adapter & Power cord
RJ-45 to RS-232 cable for console connection
Rack mounting kit
Environmental Specifications
Operating
Temperature: 0°C to 40°C / 32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage
Temperature: -30°C to 70°C / -22°F to 158°F
Humidity: 10% to 90%(non-condensing)
MTBF (hr)
40°C/ 346653.298 hr
25°C/ 491775.8384 hr
Acoustic noise
16.86dBA on < 25degC Operating Temperature, 43.76dBA on full FAN speed
Certifications
EMC
FCC Part 15 (Class A)
CE EMC (Class A)
RCM (Class A)
BSMI
Safety
LVD (EN62368-1)
BSMI
Hardware Specifications
Network interfaces
100M/1G Ethernet (RJ-45)
8
100M/1G/2.5G Ethernet (RJ-45)
2
1G/2.5G/5G/10G Ethernet (RJ-45)
2
1G SFP/10G SFP+
2
IEEE 802.3at (PoE+) Port
Port 3, 4 (10G)
Total PoE budget (watts)
30
USB 3.0 Type-A
1
Console port
Yes (RJ-45)
Rack-mountable
Yes
Fanless
-
System Capacity & Performance *1
SPI firewall throughput (Mbps) *2
15,000
VPN throughput (Mbps) *3
3,000
IPS throughput (Mbps) *4
7,000
Anti-Malware throughput (Mbps) *4
4,000
UTM throughput (Anti-Malware and IPS) *4
4,000
NGFW throughput (IPS and App Patrol) *4
7,000
Max. TCP concurrent sessions *5
2,000,000
Max. concurrent IPsec VPN tunnels *6
1,000
Recommended gateway-to-gateway IPsec VPN tunnels
300
Concurrent SSL VPN users
500
VLAN interface
128
Speed Test Performance
SPI firewall throughput (Mbps) *7
921.64
Key Features
Security Service *8
Anti-Malware
Yes
IPS
Yes
Application Patrol
Yes
Web filtering
Yes
Reputation Filter
Yes
SecuReporter
Yes
Sandboxing
Yes
Security Profile Sync
Yes
Device Insight
Yes
SSL (HTTPS) inspection
Yes
Two-Factor Authentication
Yes
SD-WAN & VPN
WAN load balancing
Yes
Prioritize critical applications
Yes
VPN Protocol
IKEv2/IPSec, SSL, Tailscale *9
Nebula SD-VPN
Yes
Auto-link VPN
Yes
Manual-link VPN
Yes
VPN Topology
Yes
WLAN Management
Default Number of Managed AP
8
Secure WiFi *9
Yes
Maximum Number of Tunnel-Mode AP *10
130
Recommend max. AP in 1 AP Group
200
Management & Connectivity
Nebula Centralized Management
Yes
Device HA *9
Yes
Link Aggregation (LAG)
Yes
Maximum Concurrent Devices *11
2,000
Peak Device Login Rate *12
220
Power Requirements
Power input
100-240V AC, 50/60Hz, 2A
Max. power consumption (Watt Max.)
86.7
Heat dissipation (BTU/hr)
235
Physical Specifications
Item
Dimensions (WxDxH)(mm/in.): 430 x 250 x 43.5/16.93 x 9.84 x 1.71
Weight (kg/lb.): 3.14/6.93
Packing
Dimensions (WxDxH)(mm/in.): 512 x 395 x 162/20.16 x 15.55 x 6.38
Weight (kg/lb.): 4.90/10.81
Included accessories
Power cord
RJ-45 to RS-232 cable for console connection
Rack mounting kit
Environmental Specifications
Operating
Temperature: 0°C to 40°C / 32°F to 104°F
Humidity: 10% to 90% (non-condensing)
Storage
Temperature: -30°C to 70°C / -22°F to 158°F
Humidity: 10% to 90%(non-condensing)
MTBF (hr)
40°C/ 431877.9743 hr
25°C/ 669031.2966 hr
Acoustic noise
16.85dBA on < 25degC Operating Temperature, 47.84dBA on full FAN speed
Certifications
EMC
FCC Part 15 (Class A)
CE EMC (Class A)
RCM (Class A)
BSMI
Safety
LVD (EN62368-1)
BSMI
- Note:
- *: This matrix with firmware uOS1.37 or later.
- *1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
- *2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
- *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
- *4: Anti-Malware (with Express Mode), IPS and NGFW throughput is measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
- *5: Maximum sessions are measured using the industry standard IXIA IxLoad testing tool.
- *6: Including Gateway-to-Gateway and Client-to-Gateway.
- *7: The Speedtest result is conducted with 1Gbps WAN link in real world and it is subject to fluctuate due to quality of the ISP link.
- *8: Requires a Zyxel service license to enable or extend feature capacity. SSL (HTTPS) inspection and Two-Factor Authentication are default supported features for any registered USG FLEX H device.
- *9: Local GUI only.
- *10: Available in the future.
- *11: The maximum number of endpoint devices the gateway can keep online simultaneously, ensuring stable performance under heavy user load. (Baseline condition: UTM services not in use)
- *12: How quickly the gateway can handle surges of new device login request — for example, when many users try to get authenticated at the same time.
* License subscription fee and permits may vary by country.
Access Point Compatibility List
* All specifications are subject to change without notice.
