Firewall Features - Content Filters
Basic URL blocking and blocking web content based on keywords are also available (Figure 7). The blocked services and web-filtering on keywords can be configured to work around the clock or during a specified time period on days that you select.
Figure 7: Restrict forbidden websites by data and time.
The bottom line is that if you require a serious (i.e. enterprise-grade) firewall at the perimeter of your network, consider buying a dedicated firewall. However, if you are just looking for basic filtering and blocking, the ZyAIR G-2000 can help limit the exposure of your network to the casual hacker. But there are other routers in the same class as the ZyAIR that have much better firewall interfaces.
The ZyAIR supports PPTP, L2TP and IPsec pass-through from LAN clients and the SUA feature will allow you to make all three types of VPN servers on the LAN side accessible from the Internet.
ZyXEL highlights the G-2000's support for SSL pass-through, but the capability to support secure connections should be (and is) standard on every consumer router.