1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

ZyXEL USG20-VPN VPN Firewall Reviewed

Discussion in 'LAN & WAN Article Discussions' started by thiggins, Jun 7, 2016.

  1. thiggins

    thiggins Mr. Easy Staff Member

    Joined:
    May 18, 2008
    Messages:
    14,015
    [​IMG]
    ZyXEL's USG20-VPN is a flexible VPN router that also supports content filtering and anti-spam.

    Read on SmallNetBuilder
     
    L&LD likes this.
  2. vnangia

    vnangia Senior Member

    Joined:
    Jul 2, 2008
    Messages:
    201
    Location:
    Washington, DC, USA
    Thanks for the review. Any chance of getting (informal) numbers on what the hit is on WAN-LAN throughput when the UTM features are enabled?
     
  3. kvic

    kvic Part of the Furniture

    Joined:
    Aug 11, 2014
    Messages:
    2,444
    Location:
    22.4399N 114.2222E
    Interestingly this device has a Cavium 7010. The tested VPN throughput seems lower than what the HW is capable of...
     
  4. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,279
    Location:
    San Diego, CA
    Software tuning perhaps?
     
  5. kvic

    kvic Part of the Furniture

    Joined:
    Aug 11, 2014
    Messages:
    2,444
    Location:
    22.4399N 114.2222E
    yeah, I would guess config/setup not right or FW not properly done before release.
     
  6. thiggins

    thiggins Mr. Easy Staff Member

    Joined:
    May 18, 2008
    Messages:
    14,015
    Not likely. I am trying to catch up on the review backlog created while new test processes were being developed. Sorry.
     
  7. dreid

    dreid Regular Contributor

    Joined:
    Sep 3, 2008
    Messages:
    77
    Thanks for your comment. Router manufacturers typically use a UDP based test to rate throughput on their devices. The TotuSoft test uses TCP. UDP has a lower overhead than TCP, so manufacture VPN ratings are typically higher than my measurements.
     
    kvic likes this.
  8. System Error Message

    System Error Message Part of the Furniture

    Joined:
    Oct 14, 2014
    Messages:
    4,097
    1 core :O, as i keep complaining why is anyone using these cavium CPUs keep using old setups? What about their 32 or 48 core MIPS variants? Ubiquiti wont be able to compete with mikrotik in performance if they keep using dual cores. Other VPN router manufacturers also still need to consider using many core. Its not like the encryption engine is a per chip, its usually a per core thing.
    In terms of UTM performance i would expect that chip to do around 100Mb/s or lower in throughput.
     
  9. Kevlar3D

    Kevlar3D New Around Here

    Joined:
    Jun 26, 2016
    Messages:
    3
    I am currently in the process of replacing 16 of these because ZyXEL doesn't keep current with patching their software. I had to disable external https access because ZyXEL still hasn't patched known vulnerabilities. From a reliability and throughput standpoint, these are great but ZyXEL needs to make security a priority before I will ever consider their products again.
     
  10. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,279
    Location:
    San Diego, CA
    It's actually a pretty decent chip - Cavium has done a good job with their functional blocks, and in an application like this, and at the pricepoint - it's a good enough solution... the core itself is generally in a supervisory role, much of the code runs on the FUB's..

    Screen Shot 2016-06-26 at 1.25.23 PM.png
     
  11. roundtree

    roundtree New Around Here

    Joined:
    Jun 29, 2016
    Messages:
    1
    One correction for the article. While the protocol overhead from TCP vs. UDP will see a drop in throughput, the drop won't be much. Instead, the dropoff is due to the throttling nature of TCP. UDP assumes that the application will responsibly monitor end-to-end data transmission. TCP connections will suffer from the "sawtooth" effect as source and destination continually negotiate connection parameters.
     
  12. 8bitbanger

    8bitbanger New Around Here

    Joined:
    Jul 13, 2016
    Messages:
    1
    Did Zyxel remove the ADP feature of the original USG20? Or has this somehow been rolled into the content filtering? Seems like a pretty important feature for a SOHO-targeted UTM.
     
    Last edited: Jul 13, 2016
  13. Dan-H

    Dan-H Regular Contributor

    Joined:
    Sep 17, 2015
    Messages:
    61
  14. thiggins

    thiggins Mr. Easy Staff Member

    Joined:
    May 18, 2008
    Messages:
    14,015
  15. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    9,851
  16. Dan-H

    Dan-H Regular Contributor

    Joined:
    Sep 17, 2015
    Messages:
    61
    the page is blank for me too, but this page shows the lucky winner at the top of the page.

    http://www.smallnetbuilder.com/contests
     
  17. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,279
    Location:
    San Diego, CA
    ad blocks disabled...

    Screen Shot 2016-09-06 at 8.52.15 PM.png
     
  18. thiggins

    thiggins Mr. Easy Staff Member

    Joined:
    May 18, 2008
    Messages:
    14,015
    Sorry guys. Forgot to flip a bit in the publishing system. Should be ok now.
     
    Dan-H, sfx2000 and L&LD like this.