Network Security › ZTE Wantong ISG A-series · 2 models
ZTE WantongISG A-series · Internet Behaviour Management
Internet Behaviour Management Gateways · 5G and 10G · 2 Models
ZTE Wantong ISG A1300 / A1600 · Behaviour Management
Rack-mount gateways for the internet exit of a business site: wired and wireless user authentication, L2–L7 application and URL control, bandwidth management, IPSec VPN, IPS, antivirus and searchable logs in one box, with a hardware bypass pair and dual-unit HA. We deliver them configured as part of the network solutions we build.
5G / 10G · rated throughput, A1300 / A16001000+ · application types identified60+ · URL categories for filtering3000+ · attack behaviours in the IPS rule setHW bypass · 1 GE pair, plus dual-unit HA
CHOOSE YOUR MODEL — TWO MODELS, 5G OR 10G
Pick by throughput, ports and power: the A1300 is a 44 mm high unit with 10×GE RJ45 plus 4×GE Combo, 5G throughput and one built-in power supply; the A1600 is 88 mm high with 12×GE RJ45, 12×GE SFP and 2×10GE SFP+, 10G throughput, 1+1 redundant power and a dedicated management port. The software feature list is the same.
Get Best Price on WhatsAppRequest a quote ↓
Lead time · In stock: at your forwarder’s China warehouse 3 days after payment · Not in stock: 7–15 working days · Then air 5–10 days / sea 25–45 days to your port
Terms · Sample orders welcome · Quotation / PI fixes models, prices, Incoterms (EXW or FOB, each quoted separately), lead time and T/T payment · Defective units: free spare units agreed per order (quantity depends on order size) and written into the quotation · Warranty: up to 5 years on Zhongxin Shutong industrial switches, manufacturer warranty on other brands · Full terms, warranty & RMA
Need the PDF datasheet? Get it on WhatsApp →In-stock models: 3 days to your forwarder's warehouse in China after payment · Out-of-stock: 7–15 working days · then air 5–10 days or sea 25–45 days to your port
Sample quantities are welcome — testing one or two units first is the normal way to start.
Corporate orders are registered with the manufacturer under your company name — genuine supply you can verify at the source.
The ZTE Wantong ISG A-series internet behaviour management gateways sit at the internet exit of a site and combine user authentication, VPN, traffic management, L2–L7 application control and audit, log query, intrusion prevention (IPS) and antivirus (AV) on a parallel multi-core processor. The manufacturer lists them for SME internet egress, chain stores, budget hotels and financial branch offices. The ISG A1300 has 10×GE RJ45 and 4×GE Combo ports, 5G throughput, 2 GB memory and a 500 GB hard disk; the ISG A1600 has 12×GE RJ45, 12×GE SFP and 2×10GE SFP+, 10G throughput, 4 GB memory, a 1 TB hard disk and 1+1 redundant power. Both can be deployed inline, off-path or in hybrid mode. Specifications below are quoted from the manufacturer's datasheet — fields it does not publish are left out.
Same software, two hardware sizes
How the two models split the job — so you pay only for the throughput, ports and power redundancy the site needs.
ISG A1300 · 1 MODEL
5G, copper with 4 Combo ports, 44 mm high10×GE RJ45 plus 4×GE Combo ports (each used as RJ45 or SFP), 5G throughput, 2 GB memory, 4 GB flash and a 500 GB hard disk by default, one built-in 100–240 V AC power supply at 25 W maximum, 2.9 kg. Management runs over any service port. Suits a single office, store or hotel whose internet lines and LAN uplinks are gigabit.ISG A1600 · 1 MODEL
10G, fibre and 10GE, redundant power, 88 mm high12×GE RJ45, 12×GE SFP and 2×10GE SFP+, 10G throughput, 4 GB memory, 4 GB flash and a 1 TB hard disk by default, built-in 1+1 redundant 100–240 V AC power at 60 W maximum, 6.3 kg, and a dedicated out-of-band management port. The pick when the core switch connects at 10GE, when many fibre links land on the gateway, or when the exit must survive a power supply failure.Is this the right gateway for you?
Plain-language guide — based only on what these gateways actually do.
Internet exit of an SME officeOne box between the ISP lines and the LAN: NAT, policy routing and link load balancing across several lines, staff login through LDAP, RADIUS or local accounts, bandwidth limits for video and P2P, and URL and application policies set by the administrator.
Guest Wi-Fi in stores and hotelsWired and wireless users share one authentication system: guests sign in on a web portal by SMS or WeChat, each user gets a bandwidth share, and chain stores or budget hotels keep guest traffic apart from the business network.
Branch offices with VPN back to head officeFor financial branches and other multi-site networks: IPSec VPN to head office, IPS and antivirus at each exit, logs kept on the local hard disk, and every unit managed from the web GUI or a central management platform without sending a technician on site.
Not the right pick if you need…
- A dedicated next-generation firewall sized by published security throughput and session figures — the ZTE Wantong ISG F-series firewalls
- A branch or enterprise WAN router focused on routing and interfaces — the ZTE Wantong ISG 1800/2800/3800 access routers
- Wi-Fi coverage and AP management itself — the ZTE Wantong ISG AC wireless controllers and enterprise access points
Worried about the source? Order under your own company name.
For corporate buyers: we support submitting the purchase order to the manufacturer under your company's real name — your company appears on the official order, so the origin of the goods can be verified directly with the factory. Just provide your company name and pay by corporate bank transfer.
1 · Company name2 · Corporate bank payment3 · Order registered in your name
Using your own freight forwarder? No problem.
For small and mid-size orders, we deliver directly to your designated forwarder's warehouse in China — EXW or FOB, your choice, each quoted separately. From hand-over onward, international shipping and destination-side arrangements are handled by your forwarder — the way you already work.
EXW / FOBDelivery to your forwarder's warehouseNo minimum order
Note: manufacturer order registration (left) is available via the corporate purchase channel.
How to get a better price
Volume DiscountBulk quantities of a single model
CONTACT USMix & Match DiscountMix any categories & models storewide in one order — no quantity limit
BETTERVerified Project PriceDistributor, integrator or end user with a real project? Send the BOQ — project pricing plus free network design. Partner projects are protected: we never quote your end customer behind you
BESTAll discounts are quoted personally — message me on WhatsApp ↑
Key Features
The series capability list — from the manufacturer's datasheet.
Unified authentication for wired and wireless users: web portal, local accounts, LDAP, RADIUS, SMS and WeChat, with integration to IMC, AAS and SAM AAA servers
Deep identification and control of 1000+ application types — IM, online games, P2P, stock trading software, search engines, webmail and forums — plus 60+ URL categories for filtering; both libraries upgradeable online
Traffic management: bandwidth management, priority setting, rate limiting and traffic shaping with hierarchical QoS, to keep video and P2P from crowding out business traffic
Routing and VPN: IPv4/IPv6 routing, policy routing, DHCP, NAT and IPSec VPN, with link load balancing by bandwidth, priority or interface
IPS based on source, destination and rule sets with attack logging and alarms, and more than 3000 defined attack behaviours in an expanding rule library
Antivirus for HTTP, FTP, POP3, SMTP and IMAP, including mail bodies and attachments, web pages and downloaded files, covering more than 3 million viruses with regular database updates
Logs and reports for administrators: system, admin operation, attack, IPS, AV, website access, malicious URL, IM, mail, forum, search and command logs, searchable by user, IP address or content, with percentage, bar and pie chart views
Reliability: hardware bypass on one GE port pair, dual-unit HA hot standby and dynamic CPU allocation between network and service planes; 1+1 redundant power on the A1600
Who uses it, where it goes and how to choose between the two models
Written for the ZTE Wantong ISG A-series from its own specifications: 2 models with 5G or 10G throughput, GE copper, GE SFP and 10GE SFP+ ports, a hardware bypass pair, dual-unit HA, user authentication, application and URL control, IPS, antivirus and logs.
Who it is for
- SMEs and the integrators who run their networks — One unit at the office exit handles NAT, several internet lines with load balancing, staff login, bandwidth control and URL and application policies, replacing a separate router, firewall and bandwidth manager at a small site.
- Chain stores and supermarkets — Guest Wi-Fi with SMS or WeChat portal login, kept apart from the point-of-sale network, the same policy template rolled out to every store and all units watched from a central management platform.
- Budget and business hotels — Wired room ports and Wi-Fi users authenticated in one system, a bandwidth share per guest so a few heavy users do not slow everyone down, and video and P2P traffic shaped during busy hours.
- Financial branch offices — IPSec VPN back to head office, IPS and antivirus at the branch exit, URL filtering policies, and logs kept locally for the administrator to review, with HA hot standby where the branch cannot lose its link.
Where and how to install
- Inline at the internet exit — The usual position: between the ISP router or modem and the core switch, so every user session passes through it and authentication, NAT, bandwidth and blocking policies apply. Use the bypass port pair for this path where the link speed is gigabit.
- Off-path on a mirror port — Where the existing exit must not be touched, connect a gateway port to a mirror (SPAN) port on the core switch. The gateway then identifies applications and keeps logs without being in the traffic path; blocking and bandwidth control need inline or hybrid mode.
- Rack or cabinet mounting — Both units are 440 mm wide and 263 mm deep; the A1300 is 44 mm high (1U) and the A1600 88 mm (2U). The short depth fits most wall-mount network cabinets as well as floor racks; leave space at the front for patch and fibre cables.
- Power — Both take 100–240 V AC. The A1300 has one built-in power supply (25 W maximum), so put it on a UPS; the A1600 has 1+1 redundant built-in supplies (60 W maximum), best fed from two separate circuits or UPS outputs.
- Management access — The A1600 has a dedicated out-of-band management port; connect it to a separate management network. On the A1300, management runs over a service port, so restrict web GUI access to the administrators' subnet by policy.
ISG A-series planning: which of the 2 models
Both models run the same features; choose by throughput, the ports you must terminate and whether the exit needs power redundancy. The manufacturer gives one throughput figure per model without test conditions, and does not publish concurrent sessions, new sessions per second or a supported user count, so size against your measured internet line and LAN traffic and leave headroom when IPS, AV and logging are all enabled.
| A1300 | A1600 | |
|---|---|---|
| Rated throughput | 5G | 10G |
| GE RJ45 ports | 10 + 4 Combo | 12 |
| GE SFP ports | 4 Combo (shared with RJ45) | 12 |
| 10GE SFP+ ports | none | 2 |
| GE ports usable at once (arithmetic) | 14 | 24 (+2×10GE) |
| Hardware bypass | 1 GE pair | 1 GE pair |
| Management | any service port | any service port + dedicated OOB port |
| Memory / flash / hard disk | 2 GB / 4 GB / 500 GB | 4 GB / 4 GB / 1 TB |
| Power supply and maximum power | single built-in, 25 W | 1+1 redundant built-in, 60 W |
| Height (rack units, from 44 mm per U) | 44 mm (1U) | 88 mm (2U) |
| Concurrent sessions / new sessions per second / user count | not published | not published |
| Typical position (our framing) | single office, store or hotel exit with gigabit lines | larger site exit, 10GE or many fibre links, redundant power |
- Pick the A1300 when the internet lines and the LAN uplink are gigabit copper or a few fibres: 10 RJ45 plus 4 Combo ports cover several ISP lines, the LAN and an HA link in a 1U unit.
- Pick the A1600 when the core switch connects at 10GE SFP+, when more than four fibre links must land on the gateway, or when the exit must keep running through a power supply failure.
- For a site that cannot lose internet access, use two units of the same model in HA hot standby; the bypass pair alone keeps traffic flowing but without authentication or policies while it is active.
Values are from the page's specification table. The usable GE port count is arithmetic (A1300: 10 RJ45 + 4 Combo, each Combo used as either RJ45 or SFP; A1600: 12 RJ45 + 12 SFP) and rack units are derived from the published heights. Throughput is shown exactly as the manufacturer lists it (5G / 10G, test conditions not stated). The typical-position row is our suggestion, not a manufacturer rating.
Full Specifications — Model by Model
Series specifications with one column per model — technical values in English. The highlighted column follows your model selection above.
ISG A-series — Interfaces, Performance & Hardware (2 models)
| Item | A1300 | A1600 |
|---|---|---|
| Fixed interfaces | 10×GE RJ45 + 4×GE Combo | 12×GE RJ45 + 12×GE SFP + 2×10GE SFP+ |
| GE RJ45 ports | 10 (+4 Combo) | 12 |
| GE SFP ports | 4 Combo (shared with RJ45) | 12 |
| 10GE SFP+ ports | 0 | 2 |
| Throughput | 5G | 10G |
| Management interface | Any service port | Any service port & dedicated out-of-band management port |
| Hardware bypass | 1 pair of GE ports | |
| Memory | 2 GB | 4 GB |
| Flash | 4 GB | |
| Hard disk | 500 GB (default) | 1 TB (default) |
| Power supply | Built-in switching power supply | Built-in switching power supply, 1+1 redundant |
| Maximum power | 25 W | 60 W |
| Rated input voltage | 100–240 V AC | |
| Weight | 2.9 kg | 6.3 kg |
| Dimensions (H×W×D) | 44×440×263 mm | 88×440×263 mm |
ISG A-series — Software Features (all models)
| Item | A1300 | A1600 |
|---|---|---|
| Deployment modes | Off-path (bypass/mirror), inline (serial), hybrid | |
| Network functions | IPv4/IPv6 routing / policy routing / DHCP / NAT / IPSec VPN | |
| Link load balancing | Based on bandwidth, priority or interface | |
| Security protection | Blacklist / RADIUS authentication / intrusion prevention / antivirus | |
| Attack protection | Scan attack protection / abnormal packet attack protection / flood attack protection | |
| User authentication | Web portal / LDAP / local / RADIUS / SMS / WeChat; integration with common AAA servers such as IMC, AAS and SAM; unified authentication of wired and wireless users | |
| Behaviour control & audit | Security policy / URL filtering policy / application control and audit (IM, online games, securities, mail, online communities) | |
| Application identification | 1000+ application types; application signature library upgradeable online | |
| URL filtering | 60+ URL categories; URL library upgradeable online | |
| Traffic management | Bandwidth management / priority setting / rate limiting / traffic shaping / hierarchical QoS | |
| IPS | Detection based on source, destination and rule set; attack logs and alarms; 3000+ defined attack behaviours, rule library continuously expanded | |
| Antivirus | HTTP, FTP, POP3, SMTP, IMAP; mail body and attachments, web pages and downloaded files; 3,000,000+ viruses; virus database updated regularly | |
| System management | Web GUI / system upgrade / resumable transfer / dynamic library upgrade / hardware bypass / dual-unit HA hot standby / central management via NMS platform | |
| Monitoring | System information / real-time device traffic / interface status / TOP20 user and application traffic ranking / system resources / online users | |
| Log query | System key event, attack protection, administrator operation, IPS, AV, website access, malicious URL, IM, mail, community, search and command logs; search by user, IP address or content | |
| Reports | Percentage, bar chart and pie chart views | |
Engineer's note: The SFP and SFP+ ports need optical modules or direct-attach cables, and the A1300 Combo ports take either copper or an SFP. Send us your internet lines, user count, authentication method (portal, LDAP, RADIUS, SMS) and the policies you want to apply, and we will put together the model choice, the optic list, the inline or off-path deployment design and the initial authentication, bandwidth and URL/application policy configuration free of charge.
Internet Behaviour Management Gateway FAQ — ISG A1300 / A1600
How do the ISG A1300 and ISG A1600 differ?
The software feature list is the same; the hardware differs. The A1300 has 10×GE RJ45 plus 4×GE Combo, 5G throughput, 2 GB memory, a 500 GB disk and one power supply (25 W maximum). The A1600 has 12×GE RJ45, 12×GE SFP and 2×10GE SFP+, 10G throughput, 4 GB memory, a 1 TB disk, 1+1 redundant power (60 W maximum) and a dedicated out-of-band management port.
Should I install it inline or off-path, and what does the hardware bypass do?
Both models support inline, off-path and hybrid deployment. Inline, the gateway sits between the router and the LAN and can enforce authentication, NAT, bandwidth and blocking policies; off-path, it receives a copy of traffic from a switch mirror port and is used mainly for identification, audit and logging. For inline use, the one pair of GE bypass ports switches traffic through in hardware if the gateway fails, so the internet link stays up; note that this pair is gigabit, so a 10GE inline path on the A1600 is not covered by it.
Can it use our existing RADIUS, LDAP or AAA server for user login?
Yes. The datasheet lists web portal, local, LDAP, RADIUS, SMS and WeChat authentication, and integration with common AAA servers such as IMC, AAS and SAM. Wired and wireless users are authenticated in one system, so staff can log in with directory accounts while guests use a portal with SMS. Tell us which server and directory you run and we prepare the authentication configuration.
Does it replace a firewall at the internet exit?
For many small and mid-size sites it can: the manufacturer describes it as behaviour management, firewall, VPN gateway, antivirus and IPS in one unit, with NAT, IPSec VPN, blacklists, and scan, abnormal-packet and flood attack protection. The datasheet gives only overall throughput (5G or 10G) and no concurrent-session, new-session or IPS/AV throughput figures, so where the perimeter must be sized by those numbers, use a ZTE Wantong ISG F-series firewall and keep this gateway for user and application control.
What do the audit logs record, and what about privacy?
The datasheet lists system event, administrator operation, attack, IPS, AV, website access, malicious URL, IM, mail, forum, search and command logs, searchable by user, IP address or content and stored on the built-in hard disk. These are administrative policy tools: the administrator chooses which policies and log types are enabled. Operators must follow local privacy and data-protection law, including any duty to inform users, when they enable user monitoring or audit features.
Can I order under my own company name and use my own forwarder?
Yes to both. Corporate buyers can have the purchase order submitted to the manufacturer under their own company name, so your company appears on the official order. For small and mid-size orders we also deliver directly to your designated forwarder's warehouse in China on EXW or FOB terms.
Can it balance and fail over between several internet lines?
The datasheet lists link load balancing based on bandwidth, priority or interface, plus policy routing and NAT. So you can, for example, send video and updates over a cheaper line and keep business applications on the main line, or share load across lines in proportion to their bandwidth. Each line uses one GE port, or a GE SFP or 10GE SFP+ port on the A1600 when the ISP hands over fibre.
How do I stop video streaming and P2P from using up the bandwidth?
The gateway identifies video and P2P applications among its 1000+ application types and can block them or limit them with bandwidth management, priority, rate limiting and traffic shaping under hierarchical QoS. A common policy is a guaranteed share for business applications, a per-user limit for guests and a cap on video and P2P during working hours. The TOP20 user and application traffic ranking shows which policy to tune.
How are the application, URL, IPS and virus libraries kept up to date?
The datasheet states that the application signature and URL libraries can be upgraded online, the IPS rule library is continuously expanded and the virus database is updated regularly; system management lists dynamic library upgrade, system upgrade and resumable transfer. The gateway therefore needs a path to the update service. Ask us how updates are delivered for your project before you order.
What redundancy options are there if the gateway fails?
Three layers are listed. The hardware bypass on one GE port pair passes traffic straight through in hardware, keeping the line up but without policies. Dual-unit HA hot standby uses a second gateway of the same model to take over with its configuration. On the A1600 the 1+1 redundant power supplies also cover a single supply failure; the A1300 has one supply, so a UPS is advisable.
Can I manage gateways at many sites from one place?
Yes. Each unit has a graphical web GUI, and the manufacturer states the series supports central management from a network management platform so technicians do not need to visit each site. Monitoring shows system information, real-time traffic, interface status, TOP20 users and applications, system resources and online users. Sites can also be linked back to head office over IPSec VPN.
Can I order one unit first, and how does it reach my country?
Yes — a single sample can be ordered and sent by air. For larger orders we deliver EXW or FOB to your freight forwarder's warehouse in China, or arrange air or sea freight to your country on request. Every shipment comes with a commercial invoice and packing list for customs; import duties and VAT in your country are not included unless agreed in writing.
How do I pay?
By bank transfer (T/T) in US dollars against our proforma invoice, which lists the model, quantity, unit price, delivery terms and lead time. You can check our company details on the verification page before you pay.
Related Products
ZTE Wantong ISG F-Series Firewalls
Next-generation firewalls — 10 models for perimeter security sized by throughput and sessions.
ZTE Wantong ISG Access Routers
Access routers ISG 1800-2S / 2800-4 / 3800-8 — WAN routing for branches and enterprise sites.
ZTE Wantong ISG AC Wireless Controllers
Wireless controllers AC881 to AC998 — manage the APs whose users these gateways authenticate.
Request a quote for this product
An engineer replies within 24 hours on working days with model check, price and lead time. No obligation, no newsletters.
Product: ZTE Wantong ISG A1300 / A1600 · Behaviour Management