Call a Mac expert! 888-769-7629
Your Shopping Cart Your Shopping Cart: 0 Items

Your cart is empty.

Usg40w-Nb Utm Firewall Vpn 11n Router Non-Bundled / Mfr. No.: Usg40w-Nb

Usg40w-Nb Utm Firewall Vpn 11n Router Non-Bundled / Mfr. No.: Usg40w-Nb
Qty. Available: 10+
Item Number: zyx-usg40wnb
Vendor Number: USG40W-NB
Vendor: Zyxel
Free shipping on this item
Chat with or call a Mac expert at 1-888-769-76291-888-769-7629
Shipping: Usually ships within 24 hours.

Truly Integrated Security for Remote Offices, Retail Locations and Small Businesses

The advancements in how people work and collaborate have brought three major challenges to small businesses. With the BYOD trend, small businesses today need to provide more Wi-Fi for an exploding amount of smart devices. The use of cloud-based social and productivity applications not only requires small businesses to be able to control, prioritize and block different applications to stay productive, but also opens doors to new Web attacks. As threats evolve and these business challenges diversify, IT costs will only continue to grow, which is a real problem for small businesses with limited IT resources.

The new ZyXEL USG Performance Series are all-in-one Next Generation Firewalls (NGFW) specifically designed to fulfill the demands BYOD, malware protection, application regulation, and budget control in small business environments. The built-in wireless AP (USG40W and USG60W) and WLAN controller offer instant wireless hotspot capability and future WLAN scalability. Comprehensive UTM features and application intelligence technology provides deep, extensive protection, while keeping businesses in control of how Web applications are used. The all-in-one design integrates everything small businesses need, delivering easier, more centralized management and lower total cost of ownership (TCO). 

Spend less, get more

The ZyXEL USG Performance Series offers small businesses the lowest total cost of ownership. The all-in-one Next Generation Firewalls design provides everything small businesses need: anti-malware protection, VPN connectivity, integrated WLAN controller, and built-in wireless access point. This truly integrated security solution eliminates the need to purchase multiple appliances for different functions, and allows small businesses to connect, protect and manage with just one device.

Peace of mind security

The ZyXEL USG Performance Series delivers enterprise-grade Next Generation Firewall security without the hefty price tag. It provides deep, extensive protection and effective control of Web applications—like Facebook, Google Apps and Netflix—with such anti-malware protection mechanisms as firewall, ant-virus, anti-spam, content filtering, IDP and application intelligence. No longer do small businesses need to worry about threats, spam or social networking sites decreasing productivity.

Wi-Fi where you need it

Addressing the trend of BYOD, the ZyXEL USG Performance Series helps small businesses provide Wi-Fi wherever there is demand. The USG40W and USG60W feature built-in single-radio and dual-radio wireless access points that can provide Wi-Fi for small offices straight out of the box. With an integrated WLAN controller, the USG Performance Series enables businesses to easily provide Wi-Fi in multiple other areas like reception areas and meeting rooms when Wi-Fi demand grows.

Single point of management

Designed specifically for businesses with limited IT resources, the ZyXEL USG Performance Series helps users connect, protect and manage with reduced complexity. The unified security policy design offers easier, more unified and streamlined management of all the security features; while the integrated WLAN controller provides centralized management of up to 18 APs. All this is integrated into a single solution, making it easy for users to manage VPN, wireless and security all from one device.

ZyXEL One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, ZyXEL One Network is designed to simplify the configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. ZyXEL One Network presents an easy-to-use tool, ZyXEL One Network Utility (ZON Utility), to realize speed network setup. ZyXEL Smart Connect allows ZyXEL networking equipment to be aware and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL One Network redefines the network integration across multiple networking products from switch to Wi-Fi AP and to Gateway.


Software Features


ICSA-certified firewall (certification in progress)

Routing and transparent (bridge) modes

Stateful packet inspection

User-aware policy enforcement

SIP/H.323 NAT traversal

ALG support for customized ports

Protocol anomaly detection and protection

Traffic anomaly detection and protection

Flooding detection and protection

DoS/DDoS protection

IPv6 Support

IPv6 Ready gold logo (certification in progress)

Dual stack

IPv4 tunneling (6rd and 6to4 transition tunnel)

IPv6 addressing






Static routing

Policy routing

Session control

Firewall and ADP


Intrusion Detection and Prevention (IDP)

Application intelligence and optimization

Content filtering

Anti-virus, anti-malware



ICSA-certified IPSec VPN (certification in progress)

Encryption: AES (256-bit), 3DES and DES

Authentication: SHA-2 (512-bit), SHA-1 and MD5

Key management: manual key, IKEv1 and IKEv2 with EAP

Perfect forward secrecy (DH groups) support 1, 2, 5

IPSec NAT traversal

Dead peer detection and relay detection

PKI (X.509) certificate support

VPN concentrator

Simple wizard support

VPN auto-reconnection

VPN High Availability (HA): load-balancing and failover

L2TP over IPSec

GRE and GRE over IPSec

NAT over IPSec

ZyXEL VPN client provisioning


Supports Windows and Mac OS X

Supports full tunnel mode

Supports 2-step authentication

Customizable user portal

Intrusion Detection and Prevention (IDP)

Routing and transparent (bridge) mode

Signature-based and behavior-based scanning

Automatic signature updates

Customizable protection profile

Customized signatures supported

Application Intelligence and Optimization

Granular control over the most important applications

Identifies and controls over 3,000 applications and behaviors

Supports over 15 application categories

Application bandwidth management

Supports user authentication

Real-time statistics and reports


Supports Kaspersky anti-virus signatures

Identifies and blocks over 650,000 viruses

Stream-based anti-virus engine

HTTP, FTP, SMTP, POP3 and IMAP4 protocol support

Automatic signature updates

No file size limitation


Transparent mail interception via SMTP and POP3 protocols

Configurable POP3 and SMTP ports

Sender-based IP reputation filter

Recurrent Pattern Detection (RPD) technology

Zero-hour virus outbreak protection

X-Header support

Blacklist and whitelist support

Supports DNSBL checking

Spam tag support

Statistics report

Content Filtering

Social media filtering

Malicious Website filtering

URL blocking and keyword blocking

Blacklist and whitelist support

Blocks java applets, cookies and ActiveX

Dynamic, cloud-based URL filtering database

Unlimited user license support

Customizable warning messages and redirection URL

Unified Security Policy

Unified policy management interface

Supported UTM features: anti-virus, antispam, IDP, content filtering, application intelligence, firewall (ACL)

3-tier configuration: object-based, profilebased, policy-based

Policy criteria: zone, source and destination IP address, user, time

 WLAN Management

Wireless L2 isolation

Scheduled Wi-Fi service

Dynamic Channel Selection (DCS)

Client steering for 5GHz priority and sticky client prevention

Auto healing provides a stable and reliable coverage

IEEE 802.1x authentication

Captive portal Web authentication

Customizable captive portal page

RADIUS authentication

Wi-Fi Multimedia (WMM) wireless QoS

CAPWAP discovery protocol

Mobile Broadband

WAN connection failover via 3G and 4G* USB modems

Auto fallback when primary WAN recovers

* 4G USB modem support available in future firmware upgrades


Routing mode, bridge mode and hybrid mode

Ethernet and PPPoE


VLAN tagging (802.1Q)

Virtual interface (alias interface)

Policy-based routing (user-aware)

Policy-based NAT (SNAT)

Dynamic routing (RIPv1/v2 and OSPF)

DHCP client/server/relay

Dynamic DNS support

WAN trunk for more than 2 ports

Per host session limit

Guaranteed bandwidth

Maximum bandwidth

Priority-bandwidth utilization

Bandwidth limit per user

Bandwidth limit per IP


Local user database

Microsoft Windows Active Directory integration

External LDAP/RADIUS user database

XAUTH, IKEv2 with EAP VPN authentication

Web-based authentication

Forced user authentication (transparent authentication)

IP-MAC address binding

SSO (Single Sign-On) support (Download SSO Agent)

System Management

Role-based administration

Multiple administrator logins

Multi-lingual Web GUI (HTTPS and HTTP)

Command line interface (console, Web console, SSH and TELNET)


System configuration rollback

Firmware upgrade via FTP, FTP-TLS and Web GUI

Dual firmware images

Logging and Monitoring

Comprehensive local logging

Syslog (to up to 4 servers)

Email alerts (to up to 2 servers)

Real-time traffic monitoring

Built-in daily report

Advanced reporting with Vantage Report

ZyXEL One Network

ZON Utility

IP configuration

Web GUI access

Firmware upgrade

Password configuration

Smart Connect

Discover neighboring devices

One-click remote management access to the neighboring ZyXEL devices

General Information

ManufacturerZyXEL Communications Corp.
Manufacturer Part NumberUSG40W-NB
Manufacturer Website Address
Product LineZyWALL
Product SeriesUSG
Product ModelUSG40W
Product NameUSG40W Unified Security Gateway
Product TypeNetwork Security/Firewall Appliance

Technical Information

  • 20000 x Max. TCP Concurrent Sessions
  • 3000 x New TCP Session Rate
  • 20000 x Max. UTM (AV and IDP) Concurrent Sessions
  • 10 x Max. Concurrent IPSec VPN Tunnels
  • 7 x Max. Concurrent SSL VPN Users
  • 8 x VLAN Interface
  • 2 x Managed AP Number (Default)
  • 10 x Managed AP Number (Max)
Firewall ProtectionJava and ActiveX Blocking
Encryption StandardMD5
FeaturesIPSec NAT Traversal


Total Number of Ports5
DSL PortNo
Serial PortNo
PoE (RJ-45) PortNo
Management PortYes
Number of Network (RJ-45) Ports5

Network & Communication

Ethernet TechnologyGigabit Ethernet
Network Standard10/100/1000Base-T

Wireless Specifications

Wireless LANYes
Wireless LAN StandardIEEE 802.11n
Number of Antennas2
Antenna Gain3 dBi

Management & Protocols


Power Description

Input Voltage12 V DC
Power SourceAC Adapter

Physical Characteristics

Form FactorDesktop
Weight (Approximate)1.96 lb


Certifications & Standards
  • FCC
  • CE
IEEE Standards:
  • 802.3
  • 802.3u
  • 802.3ab
  • 802.11b
  • 802.11g
  • 802.11n
  • 802.1x
Green CompliantYes
Green Compliance Certificate/AuthorityRoHS


Limited Warranty1 Year