Content Filtering Service
ZyXEL Content Filtering allows administrators to easily block certain types of web content without having to manually block each URL individually. This service is powered by BlueCoat which has an industry-leading URL filtering database with over 100M user requests per day for new ratings. The USG series can block up to 60 different categories (in advanced view) of web content allowing great flexibility in what kind of web content you wish to allow or block in your network. Filtering rules can be defined for all users, by group, or for individual users allowing maximum flexibility in enforcement.
ZyXEL offers two different anti-virus options; Kapersky Anti-Virus and the ICSA certified ZyXEL anti-virus. ZyXEL Anti-Virus helps to protect your internal network against zero-day attacks and the most active viruses in the wild list. New threats will be updated and blocked within 24 hours of first detection along with 12-20 regular monthly updates. ZyXEL AV is also ICSA certified by ICSA Labs - the security industry's central anti-virus product testing and certification facility. ZyXEL AV currently supports 8,200 virus signatures with 15,000 supported in a future firmware upgrade (2.11 or higher) while Kaspersky supports 3,200 signatures. The purpose of AV at the gateway is to act as a first line of defense against the top viruses in the wild list from entering your network. Gateway Anti Virus is not a direct replacement for client anti-virus since client AV can detect many more virus signatures, especially older ones that are not on the top wild list. In addition, gateway anti-virus cannot `repair' a PC once it has been infected, which usually happens from the internal network. The USG AV provides an additional layer of defense against latest threats, buying valuable time for software clients to be updated to an appropriate protection level.
Intrusion Detection and Prevention Service
ZyXEL Intrusion Detection and Prevention allows the administrator to control specific applications and also block well known trojans and back door applications that can infiltrate your internal network. The USG series supports up to 2,500 signatures for the top well known applications and Trojan/backdoor applications. This adds another layer of security and also provides the administrator the flexibility to block specific programs that are not allowed on the network like P2P file sharing or instant messaging.
ZyXEL's free Anti-Spam service on the USG provides basic spam protection by using Real Time Black List Domain Name Service (RBLDNS). RBLDNS uses free online services like Spamhaus (http://www.spamhaus.org/) that keep track of the Internet Spammers, Spam Gangs and Spam Services which provides dependable real-time anti-spam protection for Internet networks, and work with Law Enforcement to identify and pursue spammers worldwide. This adds another layer of SPAM checking that ISPs usually already provide.