ZT-800 Planet Router Firewall

Features

Highlights

• One 1G/2.5G/5G/10GBASE-T RJ45 Port for WAN/LAN interface
• One 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface
• Dual-WAN failover and dual-WAN load balancing
• SSL VPN and robust hybrid VPN (IPSec/PPTP/L2TP over IPSec/OpenVPN/WireGuard)
• Stateful Packet Inspection (SPI) firewall and content filtering
• Blocks DoS/DDOS attack, port range forwarding
• Zero Trust access control with identity authentication and policy enforcement Support hardware security key authentication such as CoreTrust Key for MFA protection
• High Availability, AP Controller, Captive Portal and RADIUS
• IPv6, SNMP, PLANET DDNS and Universal Network Management System
• Planet NMS controller system and CloudNMS platform supported
• Supports up to 100 concurrent SSL VPN connections

Hardware

• 4 10/100/1000BASE-T RJ45 ports
• 1 1G/2.5G/5G/10GBASE-T RJ45 Port for WAN/LAN interface
• 1 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface
• 1 USB port for system configuration backup and restoration
• Reset button
• Desktop installation or rack mounting

IP Routing Feature

• Static Route
• Dynamic Route
• OSPF

Firewall Security

• Secure Boot to ensure trusted firmware integrity
• Hardware TRNG (True Random Number Generator) for high-entropy cryptographic key generation
• Cybersecurity
• Stateful Packet Inspection (SPI) firewall
• Blocks DoS/DDoS attack
• Content Filtering
• Zero Trust access control
• Identity-based access policy
• MAC Filtering and IP Filtering
• NAT ALGs (Application Layer Gateway)
• Blocks SYN/ICMP Flooding
• Security design follows EU Cyber Resilience Act (CRA) principles

VPN Features

• IPSec/Remote Server (Net-to-Net, Host-to-Net), GRE, PPTP Server, L2TP Server, SSL Server/Client (OpenVPN, compatible with VPN services such as Surfshark and NordVPN), WireGuard
• Encryption methods: DES, 3DES, AES, AES-128/192/256
• Authentication methods: MD5, SHA-1, SHA-256, SHA-384, SHA-512
• PQC TLS (Post-Quantum Cryptography TLS) readiness for future-proof encryption

Networking

• Outbound load balancing
• Failover for dual-WAN
• High Availability
• Captive Portal
• RADIUS Server/Client
• Static IP/PPPoE/DHCP client for WAN
• DHCP server/NTP client for LAN
• Protocols: TCP/IP, UDP, ARP, IPv4, IPv6
• Port forwarding, QoS, DMZ, IGMP, UPnP, SNMPv1,v2c, v3
• MAC address clone
• DDNS: PLANET DDNS, Easy DDNS, DynDNS and No-IP
• NAT disable support for pure routing mode deployment

Others

• Setup wizard
• Dashboard for real-time system overview
• SFP-DDM (Digital Diagnostic Monitor)
• Supported access by HTTP or HTTPS
• Auto reboot
• PLANET NMS System and Smart Discovery Utility for deployment management
• PLANET CloudNMS app for real-time monitoring

Applications

High-Performance Network Reliability with Dual-WAN and Load Balancing

The ZT-800 is ideal for small to medium-sized businesses that require stable and efficient network connectivity. With dual-WAN load balancing and automatic failover, it ensures continuous Internet access by intelligently distributing traffic and switching to a backup link when needed. Combined with high-speed Gigabit and 10G interfaces, QoS, and VPN capabilities, it supports critical applications such as VoIP, video conferencing, and cloud services, delivering reliable and optimized network performance for daily operations.

Zero Trust Access Control for Identity-Based Network Security

The ZT-800 adopts a Zero Trust architecture to secure modern enterprise and hybrid work environments. By verifying every user, device, and connection through identity authentication, MFA, and policy enforcement, it prevents unauthorized access regardless of network location. With built-in RADIUS, Captive Portal, and VPN access control, administrators can enforce role-based policies across wired, wireless, and remote connections, effectively protecting sensitive resources and minimizing lateral movement within the network.