Planet ZT-800 Dual 10G Zero Trust Security Router/VPN/Firewall/AP Controller, 10 GbE, SFP+ LAN/WAN, 4x GbE, USB

Enterprise VPN gateway with dual 10G WAN interface, advanced Zero Trust architecture and FIDO2 authentication for secure management and encrypted branch interconnection.

PLANET ZT-800 is a high-performance VPN gateway with a dual 10G interface designed to strengthen access security for management and encrypted interconnection of distributed networks. Through the integration of FIDO2 passkey authentication, TOTP-based MFA and certificate-based login protection, it enforces Zero Trust principles at the administrative access level and ensures that only verified administrators can manage critical network infrastructure.

For secure interconnection of distributed deployments, the ZT-800 enables a Zero Trust Network Access (ZTNA) overlay network, which allows authenticated gateway devices to establish encrypted peer-to-peer tunnels without exposing internal services to the public internet. This architecture simplifies secure communication between branches and reduces reliance on traditional perimeter-based VPN models. The powerful quad-core platform with dual 10G WAN interface delivers high encrypted communication throughput for enterprise branches, infrastructure sites and industrial environments.

High Availability and Performance
The ZT-800 offers NAT throughput of up to 9 Gb/s and VPN throughput of up to 1.3 Gb/s, ensuring high performance for encrypted communications. It supports up to 16 IPSec tunnels, 100 PPTP and 100 SSL VPN connections. Dual WAN interfaces with automatic failover and load balancing guarantee uninterrupted connectivity for mission-critical applications.

Advanced Security and Management
The gateway is equipped with a Secure Boot mechanism to protect against unauthorized firmware and a PQC TLS architecture for resilience against quantum threats. It supports SNMP v1/v2c/v3, SSHv2, TLSv1.2 and integration with PLANET NMS and CloudNMS platforms for centralized management.

Flexible Connectivity
The device features 4× 10/100/1000Base-T RJ-45 ports, 1× 1G/2.5G/5G/10GBase-T RJ-45 port and 1× 1G/2.5G/10GBase-X SFP+ slot for WAN/LAN configuration. The SFP+ slot supports a wide range of SFP+/SFP modules for distances from 550 m to 120 km, enabling connection to backbone switches or monitoring centers over long distances.

Centralized Wi-Fi Management
The integrated AP controller, Captive Portal, RADIUS server and DHCP server eliminate the need for external servers and allow administrators to centrally manage access points, enforce access policies and provide secure Wi-Fi networks for employees and guests with minimal configuration complexity.

KEY SPECIFICATIONS

Ports: 4× 10/100/1000Base-T RJ-45, 1× 1G/2.5G/5G/10GBase-T RJ-45 (WAN/LAN), 1× 1G/2.5G/10GBase-X SFP+ (WAN/LAN)
VPN protocols: IPSec, OpenVPN, WireGuard, GRE, PPTP, L2TP
Encryption: DES, 3DES, AES, AES-128/192/256
Authentication: MD5, SHA-1, SHA-256, SHA-384, SHA-512
NAT throughput: up to 9 Gb/s
VPN throughput: up to 1.3 Gb/s
VPN tunnels: IPSec 16, GRE 5, PPTP 100, SSL VPN 100
Routing: static, RIP, OSPF
Security: Secure Boot, Zero Trust access control, FIDO2 MFA
Firewall: SPI, DoS/DDoS protection, content filtering, MAC/IP filtering
Management: HTTPS, SNMP v1/v2c/v3, SSHv2, TLSv1.2, PLANET NMS, CloudNMS
Additional features: dual-WAN failover, load balancing, AP controller, Captive Portal, RADIUS server, DHCP server, QoS, DMZ, UPnP, DDNS
Power supply: 100–240 V AC, 50/60 Hz
Power consumption: max. 11 W (full load)
Dimensions: 330.2 × 200 × 43.1 mm (1U)
Weight: 1725 g
Operating temperature: 0 to +50 °C
Certifications: CE, FCC