Zyxel Networks
Taiwan's Zyxel is aimed at SMEs: USG FLEX and ATP firewalls, switches and APs managed together in Nebula. Pricing sits between consumer brands and the enterprise names.
- Headquarters
- Taiwan
- Positioning
- EntryMid-market
- Official website
- www.zyxel.com
Who it suits
Offices of 20-100 people that want a firewall with remote-staff VPN and Wi-Fi in the same dashboard.
Overview
Who Zyxel is
Zyxel Networks is a Taiwanese company headquartered in Hsinchu. Its core customers are SMEs: offices of 20–100 people, branches, and IT service providers looking after many clients. Pricing sits between consumer brands and the big enterprise names.
How the product families fit together
- USG FLEX H firewalls: the current range (50H, 100H, 200H, 500H, 700H, plus HP models with PoE) runs the new uOS operating system, with UTM, VPN, SD-WAN and multi-gig ports up to 10GbE on larger models.
- Older USG FLEX and ATP firewalls run ZLD. They are still common in Laos and Thailand, but USG FLEX H is positioned as the next generation and licences can be transferred from the old models to the new ones.
- Access points from Wi-Fi 6 up to Wi-Fi 7 (the WBE series).
- Switches: managed switches, including PoE and multi-gig models.
- Nebula is the cloud platform that manages firewalls, switches and APs from one screen, with a phone app. SecuReporter turns logs and security events into reports.
Licensing
Firewalls need a security pack to keep IPS, anti-malware, web filtering and threat intelligence updated. Since late 2024, device-only USG FLEX H units ship with a 366-day Entry Defense Pack and a 30-day Gold Security Pack trial. Nebula has a basic tier plus paid Plus and Pro packs, and Nebula licences can be moved between devices.
Zyxel fits offices of 20–100 people that want a firewall with VPN for remote staff and Wi-Fi in the same dashboard, without paying enterprise prices.
Strengths
- Firewalls, switches and APs are managed in the same Nebula console, so an office with a single IT person can see the whole network in one app.
- The HP models of USG FLEX H have built-in PoE ports, handy for a small branch that needs to power one or two APs without a separate PoE switch.
- Licences can be transferred from older USG FLEX and ATP units to USG FLEX H, so remaining licence time is not wasted when you replace the box.
Things to know before choosing
- When the security pack expires, the firewall still routes and runs VPN, but IPS, anti-malware and web filtering stop updating. Budget for renewal every year.
- Zyxel firewalls have been attacked through publicly known vulnerabilities when firmware was left unpatched. Update regularly and never expose the management interface to the internet.
- In January 2025 a faulty signature update left some older USG FLEX and ATP units in a reboot loop that had to be fixed on site with a console cable. Remote branches should have someone who can do that, or a spare unit.
- It is built for SMEs. Head offices with heavy traffic, complex HA or advanced threat analysis needs should compare it with enterprise firewall brands.
Using it in Laos
Zyxel is common in mid-sized offices, accounting firms, schools and branches of Thai companies in Laos. Equipment comes through distributors in Thailand, and popular models are usually in stock.
What to plan for:
- Firewall sizing: choose by the UTM throughput figure (IPS and anti-malware on), not the plain firewall figure. With a 500 Mbps internet line and every feature on, the smallest model is usually not enough.
- Power: firewalls and switches belong behind a UPS. A sudden outage in the middle of a firmware update can brick the unit.
- Updates: schedule them outside working hours, and keep a console cable and someone who knows the recovery steps.
- Remote staff VPN: turn on MFA for VPN logins and restrict the countries allowed in if your staff are only in Laos and Thailand.
Technicians and engineers who know Zyxel can be found in Laos and Thailand. The uOS on USG FLEX H is still new, so people used to ZLD need a little time to adjust.
Compared with alternatives
If the firewall and security are the main concern and you want deeper SD-WAN, Fortinet has a wider FortiGate range and many engineers in the region. Sophos suits you if you want the firewall to work with endpoint protection from the same vendor. If you only need low-cost Wi-Fi with easy spares, TP-Link Omada is enough. Pick Zyxel when you want firewall, switching and Wi-Fi in one dashboard on an SME budget.
Product lines
- Nebula
- USG FLEX
- ATP Series
- Zyxel Access Points
- Zyxel Switches
Solutions that use this brand
Enterprise LAN & SwitchingA core–access LAN with VLANs, redundant uplinks and enough PoE. One looped cable no longer takes down the whole building.
Enterprise Wi-FiWi-Fi 6/6E/7 with APs placed from real measurements. Works in a full meeting room, holds calls while you walk, secured with WPA3.
Next-Generation Firewall (NGFW)A firewall that knows which app and which user, with IPS, web filtering, HTTPS inspection and VPN, sized on real all-features-on…
Secure Remote Access (VPN/ZTNA)Staff and contractors reach internal systems from anywhere through VPN or ZTNA with MFA, seeing only what they need.
Industrial Networking (OT)Hardened switches that survive dust, heat and vibration, with ring redundancy and IT/OT separation for plants and mines.FAQ
We run an older USG FLEX or ATP. Should we move to USG FLEX H?
First check the end-of-sale and end-of-support dates for your model. If it still gets firmware and handles your traffic, there is no rush. When you do move, remaining licence time transfers to the new unit, but the config has to be rebuilt because uOS differs from ZLD.
What happens if we don't renew the security pack?
Internet, NAT, firewall rules and VPN keep working. What stops is updates for IPS, anti-malware, web filtering and threat intelligence, which is why you bought a UTM in the first place. We recommend renewing or planning a replacement.
Do we have to use Nebula, or can we manage the firewall locally?
USG FLEX H can be managed through its on-box web interface or through Nebula. Nebula makes sense with several branches or when you want firewalls, switches and APs in one place. For a single office, local management is enough.
All brand names and trademarks belong to their respective owners. Mention does not imply official partnership unless explicitly stated. Products are sourced through legitimate distribution channels.
Send us a floor plan or a few photos of the site
We’ll come back with a few questions, then a first design. The first consultation is free, in Lao, Thai or English, on WhatsApp or our Facebook page.