PLANET ZT-800 gateway/controller

Dual-10G Zero Trust VPN Gateway with FIDO2 Passwordless Management Access and Secure ZTNA Overlay ConnectivityThe PLANET ZT-800 is an enterprise-grade Dual-10G VPN gateway designed to strengthen identity-based access control for secure gateway administration and encrypted inter-site connectivity. By integrating FIDO2 passkey authentication. TOTP-based MFA (multi-factor Authentication). and certificate-based login protection. the ZT-800 enforces Zero Trust principles at the management access layer—ensuring that only verified administrators can control critical network infrastructure.To support secure connectivity across distributed deployments. the ZT-800 enables Zero Trust Network Access (ZTNA) overlay networking. allowing authenticated gateways to establish encrypted peer-to-peer tunnels without exposing internal services to the public Internet. This architecture simplifies secure branch-to-branch communication while reducing reliance on traditional perimeter-based VPN models.Powered by a high-performance quad-core platform with dual 10G WAN interfaces. the ZT-800 delivers high-throughput encrypted networking for enterprise branches. infrastructure sites. and industrial edge environments. It supports multiple VPN technologies—including IPSec. OpenVPN. WireGuard. GRE. PPTP. and L2TP—ensuring flexible interoperability across hybrid network architectures.With Secure Boot protection and Post-Quantum Cryptography (PQC)-ready TLS architecture. the ZT-800 strengthens platform trust integrity and prepares organizations for long-term cryptographic resilience against emerging quantum-era security risks.Designed for secure distributed network deployments. the ZT-800 also provides:- Dual-WAN failover and load balancing- Advanced routing and segmentation capability- IPv4/IPv6 dual-stack readiness- Secure gateway deployment for branch. industrial. and infrastructure networks Zero Trust–Protected VPN Access with Passkey Authentication and MFA EnforcementThe ZT-800 introduces a secure VPN Portal designed to strengthen identity verification before VPN connectivity is established. By supporting FIDO2 passkey authentication. multi-factor authentication (MFA). and optional external RADIUS integration. the portal ensures that only verified users can obtain authorized OpenVPN or WireGuard client configurations.Unlike traditional VPN deployment models where credentials alone grant tunnel access. the ZT-800 enforces identity validation at the profile provisioning stage—reducing the risk of unauthorized VPN distribution and strengthening access control across remote users and distributed teams.This identity-aware VPN onboarding mechanism enables organizations to implement Zero Trust principles for remote connectivity while maintaining compatibility with widely deployed VPN client infrastructures. Secure Boot for Trusted System IntegrityThe ZT-800 incorporates a Secure Boot mechanism to ensure that only authenticated and trusted firmware can be executed during system startup. This hardware-based protection prevents unauthorized or tampered firmware from being loaded. safeguarding the device against malicious attacks at the system level and ensuring a trusted foundation for network security.Automatic Failover between Dual WANWith its fiber and copper dual WAN interfaces—10GBASE-X SFP+ and 10GBASE-T—the ZT-800 ensures continuous Internet connectivity through automatic failover. Administrators can freely set the WAN priority. and when the primary link becomes unavailable. the secondary WAN interface takes over instantly. This design guarantees reliable. always-on network uptime for mission-critical applications.Flexible WAN interface Enables Extension of Network DeploymentThe ZT-800 is equipped with both copper and fiber WAN interfaces. featuring an SFP+ slot that supports a wide range of SFP+ and SFP transceivers for FTTx and long-distance extensions. Administrators can select SFP+ and SFP modules according to distance requirements:- Multi-mode fiber: 550 m to 2 km- Single-mode / WDM fiber: 10 km. 20 km. 30 km. 40 km. 50 km. 60 km. 70 km. up to 120 kmThis capability allows the device to efficiently uplink to backbone switches or monitoring centers over long distances.Cybersecurity Network Solution to Minimize Security RisksThe cybersecurity feature included to protect the switch management in a mission-critical network virtually needs no effort and cost to install. For efficient management. the ZT-800 is equipped with HTTPS web and SNMP management interfaces. With the built-in web-based management interface. the ZT-800 offers an easy-to-use. platform independent management and configuration facility. The ZT-800 supports SNMP and it can be managed via any management software based on the standard SNMP protocol. With support for advanced security mechanisms such as Secure Boot and PQC TLS readiness. the ZT-800 ensures long-term protection against evolving cyber threats. including quantum-era attacks.Excellent Ability in Threat DefenseT