I tested the Zyxel USG LITE 60AX, and found it to be superb for features and ease of use as well as price

The USG LITE 60AX is Zyxel’s latest secure small business router. As with other Zyxel appliances, the hardware and software setup is straightforward. The device includes two 2.5G Ethernet ports, four 1G ports, and a 4x4 Wi-Fi 6 radio. It connects seamlessly to the Nebula mobile app through the WAN, providing control and status of the network over the cloud.

Under the hood, a Quad-core ARM CPU with one gigabyte of RAM guarantees excellent packet processing times even with multiple clients connected to the unit. The firewall does not provide a serial console port, while status LEDs at the back hinder troubleshooting as they are hidden. The plastic unit can topple easily when many connections are made to the backports. The lack of mounting holes and heat dissipation vents means the firewall can only be placed on a flat surface.

Zyxel USG LITE 60AX: Price and Availability

The USG LITE 60AX costs $199 and comes with a five-year warranty. For this price, the user gets the basic Zyxel firewall package, including remote access from the cloud. Enterprise features such as SSH access require a premium license, which costs $456 annually. The smaller firewall version, the SCR 50AXE, supports Wi-Fi 6E for the same price but features a weaker processor.

Zyxel USG LITE 60AX: Design

The Zyxel 60AX ships in a large box with only one RJ45 cable and a 12V AC power block. The white plastic case is recycled and has a red front tab to match Zyxel’s colors. It measures 16 cm by 6.5 cm by 2.3 cm for a weight of 700 g. The case lies flat or upright on a table, with no mounting hole. A small plastic tab at the bottom rotates to become the router’s stand, keeping it stable when cables are plugged into the back. A multicolor LED hiding beneath the red plastic tab shows the router's state.

The built-in switch offers two 2.5GbE ports for WAN and LAN connections and four gigabit LAN ports. Each port has a pair of LEDs to show link status and speed. A recessed button enables resetting the unit if it becomes unstable or slow. The router's power consumption maxes out at 31W. An AX6000 class access point with speeds up to 1.2 Gbits/sec on the 2.4GHz radio and 4.8 Gbits/sec on the 5GHz channel makes accessing the Internet a breeze, even with multiple clients connected simultaneously.

Under the hood, the 60AX features one application processor for the firewall and router. The design is based entirely on Mediatek’s chipsets and includes an MT7986 ARM-based quad-core CPU, two radio transceivers, and a high-performance seven-port switch. A one-gigabyte DRAM provides data storage for the processor while 512MB of NAND flash holds the router application and supporting software.

Zyxel USG LITE 60AX: In use

The 60AX offers protection against hackers and ransomware beyond what a regular router typically provides. The subscription-free software includes an intrusion blocker and a firewall that filters access based on ports and IP addresses. The device also consists of the ever-useful ad blocker and cloud accessibility, allowing control from anywhere with an internet connection.

The installation is simple and allows the router to be used in minutes. Thanks to a Bluetooth interface, the setup is done with a smartphone, similarly to any Zyxel appliance. The mobile app, available on Android and iOS phones, scans a QR code at the bottom of the case. The router is then ready to be used with a few clicks. A firmware upgrade step might be necessary at the end of the setup.

The 60AX acts as a security router between the Internet provider’s modem and the LAN, actively monitoring and filtering inbound and outbound packets with a throughput of up to 2 Gbps, decreasing to 300 Mbps when used as a VPN. The router offers up to four VLANs, which is somewhat limited compared to competitive products. The 60AX consumes about 25W under normal load, with four devices actively surfing the net, which increases to a maximum of 31W when the CPU is under stress.

Zyxel USG LITE 60AX: Competition

The Zyxel 60AX security router competes directly with firewall products like the Firewalla Gold. Zyxel's advantage is the router’s seamless integration into the Nebula cloud. The price is also competitive, at less than $200. The 60AX has a built-in Wi-Fi 6 4x4 radio, which the Gold does not have. This firewall not only filters out unwelcome access but also acts as an Ethernet switch and a Wi-Fi access point, which makes $200 look like a bargain.

Zyxel USG LITE 60AX: Final Verdict

The 60AX bundle features that cost several times more than the unit. First, the firewall goes beyond content and attack filtering with additional extras such as a built-in AdBlocker. A Wi-Fi 6 access point and a multi-gig Ethernet switch are also included. The user eventually saves on the electricity bill and space compared to having multiple items to do what the 60AX is doing.

On the negative side, Zyxel could have chosen a newer Wi-Fi standard, such as 6E. We also are not a fan of the round casing, which topples over more than the average switch.

Buy the Zyxel 60AX if ... you need an all-in-one router with a built-in firewall and priced reasonably well.

Don’t get the 60AX if ... you want a speedy Wi-Fi 7 connection or three or more 2.5 Gb ports.

We've listed the best secure routers.