NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8... User manual

24/7
T E C H N I C A L
SUPPORT*
1-888-NETGEAR (638-4327)
Email: [email protected]
ProSafe®802.11g Wireless VPN Firewall 8
with 8-port 10/100 Mbps Switch Data Sheet
FVG318
Five-in-one Wireless and Wired VPN Solutions
This comprehensive and affordable solution offers wired and wireless connectivity and
businessclass protection for small office and remote/branch office users. It combines five
functions in a single, compact package – stateful packet inspection (SPI) firewall, 802.11g
wireless access point, IPsec virtual private network (VPN) appliance, NAT router, and eight-
port Fast Ethernet switch. Powerful and standards-based, it delivers both 10 and 100 Mbps
connections for wired devices, plus 802.11b/g devices at speeds up to 108 Mbps. This
complete solution offers high-performance features in a space-saving, easy-to-use design.
Heavy-duty Security More than just a simple NAT router, the ProSafe FVG318 SPI firewall provides business-class
protection, blocking unwanted users from accessing the network. Wi-Fi Protected Access 2
Enterprise (WPA2) shields wireless communication with the highest available level of
industry-standard encryption and authentication. Comprehensive controls block or filter
unwanted addresses, services, protocols, and URLs, fortifying your network. Up to eight
simultaneous IPsec VPN security association connections protect links between business
locations, encrypting all traffic as it traverses the Internet – perfect for telecommuters and
remote offices. It is VPNC compliant.
Easy Usability The FVG318 is easy to set up and use, with intuitive Smart Wizards™ that help connect to your
ISP and establish VPN connections. SNMP support provides complete remote administration –
perfect for corporate teleworkers, remote offices, and small businesses that can take advantage
of centralized administration. Dynamic DNS capabilities facilitate remote access, cameras,
games, and other hosted services for users with dynamic IP addresses.
Expandable The FVG318 works as the foundation for a small network, or integrated into a large one.
Support for DHCP (client and server) and PPPoE facilitates widespread deployment. It is
optimized for NETGEAR’s ProSafe VPN Client Software VPN01L and VPN05L (single and 5-user
license) and ProSafe Network Management Software NMS100. Compatible with other SNMP
management applications, it also supports Windows®, Macintosh®, UNIX®, and Linux®, or any
other TCP/IP based platforms.
*
25-user Office Wireless VPN Router
ProSafe Wireless
VPN Firewall 8
FVG318
Up to 8
simultaneous
security
associations
(SAs)
ProSafe VPN
Client Software
VPN01L
Wireless
Card Bus
Adapter
WAG511
Wireless
PCI
Adapter
WAG311
ProSafe
Network
Management
Software
NMS100
Broadband
Modem
Internet
10/100 NIC
FA311
10/100 NIC
FA511
M
o
b
i
l
e
W
o
r
k
f
o
r
c
e
VPN Tunnel encrypts your data
(supports up to 8 tunnels)

Technical Specifications
System Requirements
Cable, DSL, satellite or wireless
broadband modem and internet service
Ethernet connectivity from
broadband modem
Network card for each connected PC
Network software (e.g. Windows)
Internet Explorer 5.0 or higher or
Netscape Navigator 7.2 or higher
Compatible with IE 7.0 and
Windows® Vista™
Wireless
Standards: IEEE 802.11g, 54 Mbps,
Super-G technology up to 108 Mbps
Antenna: (1) 5dBi, detachable
Physical Interfaces
SLAN ports: Eight (8) 10/100Mbps
auto-sensing, Auto Uplink™ RJ-45 ports
WAN port: 10/100 Mbps Ethernet
RJ-45 port to connect to any broadband
modem, such as DSL or cable
Security Features
SPI firewall: Stateful packet inspection
(SPI) to prevent notorious denial-
of-service (DoS) attacks, intrusion
detection system (IDS) including
logging, reporting and email alerts,
address, service and protocol, Web
URL keyword filtering, prevent replay
attack (reassembly attack), port/service
blocking. Advanced features include
block Java/URL/ActiveX based on
extension, FTP/SMTP/RPC
program filtering.
•
–
–
–
–
–
–
•
–
–
•
–
–
•
–
VPN functionality: Eight (8) dedicated
VPN tunnels, Manual key and Internet
Key Exchange Security Association
(IKE SA) assignment with pre-shared
key and RSA/DSA signatures, key life
and IKE lifetime time settings, perfect
forward secrecy (Diffie-Hellman
groups 1 and 2 and Oakley support),
operating modes (main, aggressive,
quick), fully qualified domain name
(FQDN) support for dynamic IP
address VPN connections.
IPsec support: IPsec-based 56-bit
(DES), 168-bit (3DES), or 256-bit
(AES) encryption algorithm, MD5 or
SHA-1 hashing algorithm, AH/AH-ESP
support, PKI features with X.509 v.3
certificate support, remote access VPN
(client-to-site), site-to-site VPN, IPsec
NAT traversal (VPN pass-through)
Mode of operation: Many-to-one NAT
(LAN to WAN), classical routing,
unrestricted users per port
IP address assignment: Static IP
address assignment, internal DHCP
server on LAN, DHCP client on WAN,
PPPoE client support
Performance Features
Throughput: Up to 12.5 Mbps
WAN-to-LAN, up to 1.2 Mbps for 3DES
Management Features
Administration interface: SNMP (v2c)
support, Web graphic user interface,
Secure Sockets Layer (SSL)-enabled
remote management, user name and
password protected; secure remote
management support authenticated
through IP address or IP address range
and password; configuration changes/
upgrades through web GUI.
–
–
–
–
•
–
•
–
Configuration and upgrades: Upload
and download configuration settings,
field upgradeable flash memory
Functions
VPN Wizard to simplify configuration
of the VPN, Smart Wizard to
automatically detect ISP Address type
(static, dynamic, PPPoE), port range
forwarding, port triggering, exposed
host (DMZ), enable/disable WAN Ping,
DNS proxy, MAC address cloning/
spoofing, Network Time Protocol NTP
support, keyword content filtering,
email alerts, DHCP server (info and
display table), PPPoE login client
support, WAN DHCP client, diagnostic
tools (ping, trace route, other), port/
service/MAC address blocking,
Auto-Uplink on switch ports
Protocol Support
Network: IP routing, TCP/IP, UDP,
ICMP, PPPoE
IP addressing: DHCP (client and server)
Routing: RIPv1, RIPv2 (static routing,
dynamic routing)
VPN/security: IPsec (ESP, AH), MD5,
SHA-1, DES, 3DES, IKE, PKI, AES
User Support
LAN: Up to 253 users
WLAN: Up to 64 users
Maintenance
Save/restore configuration, restore
defaults, upgrades via web browser,
display statistics
–
•
–
•
–
–
–
–
•
–
–
•
–
ProSafe®802.11g Wireless VPN Firewall 8 with 8-port 10/100 Mbps Switch FVG318
How a Firewall Processes a Packet
How the Firewall Processes a Packet
Internet
Corporate
Entering Firewall Leaving Firewall
Packet Processed
Against SPI
Stateful Packet
Inspection
Algorithm
Randomize Port Numbers
Connection Information
Stateful Inspection
Processing Inbound and
Outbound rules

4500 Great America Parkway
Santa Clara, CA 95054 USA
1-888-NETGEAR (638-4327)
E-mail: [email protected]
www.NETGEAR.com
Hardware Specs
Processor: Atheros 2316
SOC 32bit MIPS
Memory: 4 MB flash, 16 MB SDRAM
Power requirements: 100-240V AC,
50-60 Hz
Power adapter: 12V DC, 1.0 A;
plug is localized to country of sale
Dimensions: w x d x h
252 x 180 x 40 mm
(9.92 x 7.1 x 1.57 in)
Weight: 1.22 kg (2.7 lb)
Environmental Specifications
Operating temperature: 0° to 40°C
(32 to 104ºF)
Operating humidity: 90% maximum
relative humidity, non-condensing
Warranty
Firewall: NETGEAR Lifetime Warranty†
Power adapter: NETGEAR
3-year Warranty
•
–
–
–
–
–
–
•
–
–
–
–
Package Contents
ProSafe Wireless VPN
Firewall (FVG318)
One (1) detachable 5 dBi antenna
Ethernet cable
Power adapter
User guide
Resource CD
Waranty/support information card
Related Products
Antennas and Accessories
ANT24O5 ProSafe™ Indoor 5 dBi
Omni-directional Antenna
ANT2409 ProSafe™ Indoor/Outdoor
14 dBi Omnidirectional Antenna
ANT24D18 ProSafe™ Indoor/Outdoor
18 dBi Patch Panel Directional Antenna
Low-loss Antenna Cables: 1.5, 3, 5,
10, and 30 m
WAG511 ProSafe™ Dual Band
Wireless PC Card
WAG311 ProSafe™ PCI Adapter
VPN01L and VPN05L ProSafe™ VPN
Client Software
NMS100 ProSafe™ Network
Management Software
–
–
–
–
–
–
–
•
–
–
–
–
–
–
–
–
Ordering Information
North America: FVG318NA
Europe: FVG318IS
UK: FVG318UK
Asia: FVG318AU
ProSupport®Information
OnCall 24x7, Category 1
PMB0331NA
PMB0331IS
PMB0331UK
PMB0331-100AUS
XPressHW, Category 1
PRR0331NA
PRR0331IS
PRR0331UK
PRR0331-100AUS
–
–
–
–
•
–
–
–
–
•
–
–
–
–
©2008 NETGEAR, Inc., the NETGEAR logo, Connect with Innovation, Everybody’s connecting, FrontView, the Gear Guy logo, IntelliFi,
ProSafe, ReadyNAS, RAIDar, RAIDiator, RangeMax, X-RAID, and Smart Wizard are trademarks of NETGEAR, Inc. and/or its subsidiaries in
the United States and/or other countries. Microsoft and Windows are trademarks of Microsoft Corporation in the United States and/or other
countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to
change without notice. All rights reserved.
** Free phone support available 90 days from purchase date. Information is subject to change without notice. All rights reserved.
*** These apply to the FVS318v3 only
†Lifetime warranty for product purchased after 05/01/2007. For product purchased before 05/01/2007, warranty is 3 years.
D-FVG318-5
ProSafe®802.11g Wireless VPN Firewall 8 with 8-port 10/100 Mbps Switch FVG318
Five High-performance Network Functions in a Space-saving Design
Notebook PC connects with
108 Mbps Wireless PC Card
(WG511T) or 108 Mbps Dual
Band Wireless PC Card
(WAG511)
Connects to
desktop PCs
with PCI Ethernet
Adapter (FA311)
Connects
to desktop
Server with
Ethernet
Card (FA311)
Connects to
printer with
Mini Print
Server (PS101)
Connects
to power
Connects to
Broadband
modem to
the Internet
Connects to Laptop PC
with NETGEAR ProSafe
VPN Client Software
VPNC
CERTIFIED
Basic
Interop