Introducing the new USG FLEX Series

Whether your business is small or mid-sized, onsite, or employees telecommuting, a business office network has to offer employees not just connectivity but also security. We are introducing the latest USG FLEX Series - a newly designed platform capable of up to 1.25 times firewall performance improvement and 5 times UTM performance gain.

The USG FLEX Series supports IPsec, SSL, and L2TP-based VPNs, making it an ideal solution for providing a secure network to access remote or home-based workers. Zero-configuration remote access removes complicated setup challenges making it easier for employees to establish VPN connections to the office without the need for IT support.


Higher Detection Threats Rate

The USG FLEX Series supports advanced Anti-Malware with cloud query express mode. The cloud query with high detection rate helps verify the file hash within seconds.



Zyxel partners with industry leading security experts to deliver top-grade security in one-box. We leverage a multiple-source database to increase malware coverage. This increases the accuracy in threat detection.


Multi-layer protection

USG FLEX is designed with multi-layer protection against many types of threats. Examples of external protection include USG FLEX’s URL Threat Filter, Anti-Malware, and Intrusion Prevention. Internal protection features include Application Patrol and Web Filtering which restrict users' inappropriate application usage or web access. 


Performance Gain

The newly designed platform is capable of up to 125% firewall performance improvement. The USG FLEX maximizes UTM firewall performance by minimizing power usage. Results of an additional 500% UTM performance have been observed with cloud query express mode.


Work remotely and securely is as easy as 1-2-3

With the rising trend in working remotely, USG FLEX offers IPsec, SSL or L2TP based VPNs to provide flexible secure network options for many of the common operating systems.


Flexible subscription

Users will be able to migrate existing, unexpired USG licenses to the new USG FLEX hardware. There is no need to purchase licenses from scratch. Users can also choose single license configurations where the need arises for Web Filtering, Anti-Malware, and many more.


User-friendly analytics report

The USG FLEX Series dashboard offers user-friendly traffic summary and threat statistic visuals. Used in conjunction with SecuReporter (Included with bundled licensing), custom monthly reports on threats, bandwidth usage, and user sites visited can be summarized and delivered each month.


Comprehensive connectivity

Zyxel USG FLEX Series not only can protect your network, but it also supports hospitality features including hotspot guest network access and can function as an access point controller for quick configuration and deployment of WiFi networks.

The USG FLEX Series firewall models

img_usg_flex_100_p_01 img_usg_flex_200_p_01 img_usg_flex_500_p_01-1




Licenses and Services

License Service Included Bundled License Renewal Bundled License A-la-carte License
UTM License
Web Filtering Yes Yes Yes*1
IPS (IDP) Yes Yes -
Application Patrol Yes Yes -
Anti-Malware Yes
Yes Yes
Email Security Yes Yes -
SecuReporter Yes - -
SecuReporter Premium - Yes Yes
Hospitality License
Managed AP Service Yes (30-Day Trial) Yes (1 Year) Yes (Qty based)
Hotspot Management *2 Yes (30-Day Trial) Yes (1 Year) Yes (Perpetual)
Concurrent Device Yes (30-Day Trial) Yes (1 Year) Yes (Qty based) *3

1* Will include Email Security license service (excluding USG20-VPN/USG20W-VPN and USGFLEX50 Models)
2* Hotspot Management is available on USG FLEX 200/500 only
3* Allowing additional connected clients is available to USG FLEX 500 only

License Service Feature
UTM License
Web Filtering Block access to malicious or risky websites
IPS (IDP) Deep-packet inspection against known attacks from Network
Application Patrol Automatically categorize and manage the network application usage
Anti-Malware Scan files at the gateway or Zyxel security cloud for malware and other threats
Email Security Fast detection to block spam/phishing mail with malicious contents
SecuReporter Cloud-based intelligent analytics and report
Hospitality License
Managed AP Service AP auto discovery and provisioning
Hotspot Management Various Network Access Control
Concurrent Device Top up allowed number of connected clients



The Zyxel Family of Firewalls

Zyxel offers five families of firewalls to meet varying needs as follows:



Zyxel VPN (Virtual Private Network) Firewall product family has all of the basics that you need for a working from home solution.



Zyxel USG (Universal Security Gateway) Firewalls have all of the features of the VPN firewalls plus the ability to detect and block malware like viruses.



Zyxel ATP (Advanced Threat Protection) Firewalls provide the highest level of security protection. ATP firewalls provide all of the features of USG plus Sandboxing which is an “artificial intelligence” type of capability to detect previously unidentified malware.


Zyxel USG FLEX maximizes UTM firewall performance using the power of cloud UTM. USG FLEX offers flexible VPN options (IPsec, SSL or L2TP) to provide flexible secure remote access for remote working and management.



Zyxel NSG (Nebula Security Gateway) Firewalls provide most functions of USG firewalls, but managed through Zyxel Nebula cloud network management platform. NSG Firewalls are designed to be configured completely remotely, ideal for social distancing measures. A Zyxel NSG device can be shipped directly to a home or office, and remotely configured after it has been plugged into the internet.





Mix or match – Zyxel Firewalls will all interconnect with each other. For example, an ATP firewall could be installed in the office while more basic VPN firewalls could be installed in homes. Zyxel firewalls can also work with many other firewall brands because we are certified by ICSA for interoperability. For example, a Zyxel firewall can be used in a home to connect to another brand of ICSA certified firewall in the office. IPSec and SSL can also be mixed on a single firewall – some home users could connect to the office with IPSec while others connect with SSL.

Here is a guide to the number of remote connections that each Zyxel firewall model can handle. This will help you to choose the model that best matches your needs or the needs of your customer. Usability of the maximum number of VPN connections may vary depending on the speed of the internet connection that is used, especially the upload speed from the office out to staff working from home.

Office Firewall Capacity




Maximum Concurrent IPSec Tunnels (Included with Gateway) L2TP Over IPSec (Tablets/Phones) Maximum Concurrent SSL Tunnels  Default Concurrent SSL Tunnels

zywall110-matrix-thumb copy


VPN2S 20 ☑️  -  -
VPN50 50 ☑️ 50   10
VPN100 100 ☑️  200  30
VPN300  300 ☑️  300  50
VPN1000  1000 ☑️  500  250
ZyWALL110  100 ☑️  150  50
ZyWALL310  300 ☑️  150  50
ZyWALL1100 1000  ☑️  500  250

zywall110-matrix-thumb copy


USG20-VPN 10 ☑️  15  5
USG20W-VPN 10 ☑️  15  5
USG40 20 ☑️  30*  20*
USG40W  20 ☑️  30*   20* 
USG60  40 ☑️  60*  20*
USG60W 40 ☑️  60*  20*
USG110  100 ☑️ 150   50*
USG210  200 ☑️  150 50*
USG310 300  ☑️  150 50 
USG1100 1000 ☑️ 1500  800
USG1900 2000 ☑️ 2000  1500
USG2200 3000 ☑️ 5000  2000
zywall110-matrix-thumb copy

USG Flex

USG FLEX 100 40 ☑️ 30 30
USG FLEX 200 100 ☑️ 60 60
USG FLEX 500 300 ☑️ 150 150
USG FLEX 100W 40 ☑️ 30 30
USG FLEX 700 500 ☑️ 150 150

zywall110-matrix-thumb copy

ATP100/100W 40 ☑️  30*  30*
ATP200 40 ☑️  60* 60*
ATP500 200 ☑️ 150* 150*
ATP800 1000 ☑️ 500* 500*


NSG50 10 ☑️
NSG100 40 ☑️  - -
NSG200 200 ☑️  - -
NSG300 300 ☑️  - -

* Increased with latest Firmware (Please Request from Tech Support for Supported Firmware)

Office Firewalls for additional SSL Tunnel Licenses

man-with-laptop One-Time
5 Additional SSL Tunnels on Firewall

10 Additional SSL Tunnels on Firewall

50 Additional SSL Tunnels on Firewall


zywall110-matrix-thumb copy

VPN2S -  - -
VPN50 ☑️ ☑️ -
VPN100 ☑️ ☑️ ☑️
VPN300 ☑️ ☑️ ☑️
VPN1000 ☑️ ☑️ ☑️
ZyWALL110 ☑️ ☑️ ☑️ 
ZyWALL310 ☑️ ☑️ ☑️ 
ZyWALL1100 ☑️ ☑️ ☑️ 

zywall110-matrix-thumb copy


USG20-VPN ☑️ ☑️ -
USG20W-VPN ☑️ ☑️ -
USG40 ☑️ ☑️ -
USG40W ☑️ ☑️  -
USG60 ☑️ ☑️
USG60W ☑️ ☑️
USG110 ☑️ ☑️ ☑️ 
USG210 ☑️ ☑️ ☑️ 
USG310 ☑️ ☑️ ☑️ 
USG1100 ☑️ ☑️ ☑️ 
USG1900 ☑️ ☑️ ☑️ 
USG2200 ☑️  ☑️ ☑️ 

zywall110-matrix-thumb copyUSG FLEX

USG FLEX 100 Included Included Included
USG FLEX 200 Included Included Included
USG FLEX 500 Included Included Included
USG FLEX 100W Included Included Included
USG FLEX 700 Included Included Included

zywall110-matrix-thumb copy

ATP100/100W Included Included Included
ATP200 Included Included Included
ATP500 Included Included Included
ATP800 Included Included Included


Zyxel SecuExtender Remote User Licenses




window-logo-vector-1 apple-logo-vector-note-1 window-logo-vector-1 apple-logo-vector
1 Client ZyWALLVPN - Free Download  SSLVPNOSX1
5 Clients ZyWALLVPN5 -
Free Download  SSLVPNOSX5
10 Clients ZyWALLVPN10 - Free Download SSLVPNOSX10
50 Clients ZyWALLVPN50 - Free Download  -

**IPSec options for Mac users include 3rd party software like VPN Tracker, L2TP over IPSec in Mac OS, or using a gateway line VPN2S at home.



We’re Here to Help

Please don’t hesitate to contact us if we can be of any help.

East of the Mississippi & Canada: (800) 255-4101 Ext 244

West of the Mississippi: (800) 255-4101 Ext 265

Zyxel California based Tech Support team: 800-255-4101 option 5

Zyxel Products are available from Value Added Resellers and Managed Service Providers.
Contact us for your nearest VAR or MSP at