NETGEAR FVX538v1 - ProSafe VPN Firewall Dual WAN User manual

FVX538
ProSafe™ VPN Firewall 200
with 8-port 10/100 and 1 Gigabit
LAN and Dual WAN Port Switch
High Performance, Manageable Dual WAN Security Firewall
At the heart of your office network, NETGEAR's high performance security appliance, ProSafe™ VPN
Firewall 200 offers a complete security solution for small and medium sized companies. This rack-
mountable, Stateful Packet Inspection (SPI) firewall is equipped with support for up to 200 security
associations (VPN tunnels). The FVX538 can serve as a DHCP Server, supports Simple Network
Management Protocol (SNMP), Quality of Service (QoS) and has a powerful SPI firewall to protect
your PCs against intruders and most common Internet attacks. With support for Trend Micro
anti-virus policy enforcement functionality, the FVX538 ships with a 60 day evaluation copy of
Trend Micro™Client/Server Suite for SMB and Trend Micro Client/Server/Messaging Suite for SMB
for customers without current licenses. Designed with small businesses in mind, the Trend Micro CS
and CSM combine workstation and server virus protection (including Trojans, worms, and hackers,
plus spyware, grayware, and blended threats) into a single solution, empowering small business
owners to deploy and manage an effective antivirus strategy with limited IT investment.
Featuring eight auto-sensing 10/100 Mbps LAN ports, one Gigabit LAN port and two 10/100
WAN ports, the ProSafe VPN Firewall FVX538 lets multiple computers in your office share two
Internet connections. The dual WAN ports let you connect a second Internet line as a backup to
insure that you're never disconnected. One LAN port can be dedicated as a hardware DMZ port
for safely providing services to the Internet without compromising security on your LAN.
This powerful VPN Firewall extends security from the network core to the perimeter by preventing
unauthorized network access using a SPI firewall, blocking denial of service (DoS) and other attacks,
encrypting traffic traveling across the Internet and added support for anti-virus and anti-spam policy
enforcement.
Dual WAN ports support two broadband connections. A second WAN port supports an additional
broadband connection. This second WAN connection may be configured as a failover connection in
case the primary connection fails or can be used to balance the workload by distributing traffic
across the two connections for optimal per user bandwidth.
Competitively priced and SNMP manageable, convenient VPN Wizard gathers basic information
about your networks and recommends a VPN solution with supporting instructions. Bundled with
NETGEAR's ProSafe VPN client software (VPN05L) — a five user license is included. Virtual
Private Network Consortium (VPNC) certified VPN supports secure data connectivity and trans-
mission over the Internet and ensures interoperability with many other popular security products.
Richer Security
Capacity To Spare
Superior Value and
Usability
• Help is there when you need it!
NETGEAR provides 24x7
technical support* in English,
with selected local language
support during office hours.
Laptop PC with NETGEAR
ProSafe VPN Client Software
VPN01L Desktop PCs with FA311 network card installed
GSM7348 ProSafe 48-port
Gigabit L3 Managed Switch
Servers with
GA311 Gigabit PCI Adapter
Workstation with
GA311 Gigabit
PCI Adapter
Broadband
modem FVX538 ProSafe VPN firewall 200
Broadband
modem
WAG302 ProSafe
Dual Band Wireless
Access Point
Internet
240-10041-01
©2004 NETGEAR, INC.
ALLRIGHTS RESERVED
240-10129-01
©2004 NETGEAR, Inc.
Allrights reserved
NMS100ProSafe Network Management System
Everybody’sconnecting.
™
Instructions:
ThisCD should automatically
runwhen inserted into your
CD-ROMdrive. If the CD
doesnot start automatically,
browseto the CD drive and
clickon NMSsetup.exe
SoftwareCD
Version1.0
2
70
-1
0
2
63
-0
1
Desktop PC with GA311
NMS100 ProSafe Network
Management Software

Physical Interfaces
-LAN ports: Eight (8) 10/100 Mbps auto-sensing,
Auto-Uplink™RJ-45 ports; one (1) Gigabit
10/100/1000 Mbps LAN port; one LAN port
can be dedicated hardware DMZ port
-WAN port: Two 10/100Mbps Ethernet RJ-45
ports with auto fail-over and load balancing
-Serial Port: One console port for command line
interface (CLI) support
•Security Features:
-SPI Firewall: Stateful Packet Inspection (SPI) to
prevent notorious Denial of Service (DoS) attacks,
Intrusion Detection System (IDS) including log-
ging, reporting and e-mail alerts, address, service
and protocol, Web URL keyword filtering, prevent
replay attack (reassembly attack), port/service block-
ing. Advanced features include block Java/URL/
ActiveX based on extension, FTP/SMTP/RPC
program filtering
-VPN Functionality: Two hundred (200) dedicated
VPN tunnels, Manual key and Internet Key
Exchange Security Association (IKE SA) assignment
with pre-shared key and RSA/DSA signatures, key
life and IKE lifetime time settings, perfect forward
secrecy (Diffie-Hellman groups 1 and 2 and Oakley
support), operating modes (Main, Aggressive,
Quick), fully qualified domain name (FQDN)
support for dynamic IP address VPN connections.
-IPSec Support: IPSec-based 56-bit (DES), 168-bit
(3DES), or 256-bit (AES) encryption algorithm,
MD5 or SHA-1 hashing algorithm, AH/AH-ESP
support, PKI features with X.509 v.3 certificate sup-
port, remote access VPN (client-to-site), site-to-site
VPN, IPSec NAT traversal (VPN pass-through)
-Mode of Operation: One-to-one/many-to-one
Multi-Network AddressTranslation (NAT), classical
routing, unrestricted users per port
-IP Address Assignment: Static IP address assign-
ment, internal DHCP server on LAN, DHCP
client on WAN, PPPoE client support
•Performance Features:
-Throughput: Up to 90 Mbps WAN-to-LAN and
100 Mbps 3DES throughput
•Management Features:
-Administration Interface: SNMP (v.2c) support,
Telnet, web graphic user interface, Secure Sockets
Layer (SSL) remote management, user name and
password protected; secure remote management
supportauthenticated through IP address or IP
address range and password; configuration
changes/upgrades through web GUI.
-Configuration and Upgrades: Upload and down
load configuration settings, firmware upgradeable
flash memory
-Logging: SYSLOG, e-mail alerts
•Functions:
VPN Wizard to simplify configuration of the VPN,
Smart Wizard to automatically detect ISP Address
type (static, dynamic, PPPoE), Port Range
NETGEAR Related Products
•Accessories:
-VPN01L and VPN05L
ProSafe VPN Client Software
-NMS100 ProSafe Network
Management Software
•VPN Firewalls:
-FVS124G ProSafe Gigabit
VPN Firewall 25
-FVS338 ProSafe VPN
Firewall 50
-FVL328 ProSafe VPN
Firewall 100
•Wireless:
-WAG302 ProSafe Dual Band
Access Point
-WG302 ProSafe 802.11g
Access Point
•Switches:
-GSM7348 ProSafe 48 Port
Gigabit L3 Managed Switch
-GSM7324 ProSafe 24 Port
Gigabit L3 Managed Switch
-GSM7312 ProSafe 12 Port
Gigabit L3 Managed Switch
FVX538 ProSafe™ VPN Firewall 200
Forwarding, Port Triggering, Exposed Host (DMZ),
Hardware DMZ, Enable/Disable WAN Ping, DNS Proxy,
MAC Address cloning/spoofing, Network Time Protocol
NTP support, Keyword Content Filtering, email Alerts,
DHCP Server (Info and display table), PPPoE login client
support, WAN DHCP Client, Diagnostic tools (ping, trace
route, other), Port/service/MAC address blocking, Auto-
Uplink on switch ports and Quality of Service (QoS).
•Protocol Support:
-Network: IProuting,TCP/IP, UDP, ICMP, PPPoE
-IP Addressing: DHCP (client and server)
-Routing: RIP v1, RIPv2 (Static Routing, Dynamic Routing)
-VPN/Security: IPSec (ESP, AH), MD5, SHA-1, DES,
3DES, IKE, PKI, AES
•User Support:
-LAN: Up to 253 users
•Maintenance:
Save/Restore Configuration, Restore Defaults, Upgrades via
Web Browser, Display Statistics, Logging, SYSLOG support
•Hardware Specifications:
-Processor: 533 MHz Intel XScale IXP425
-Memory: 32MB Flash, 64MB DRAM
-Encryption Accelerator: Cavium Processor with 60+
Mbps (3DES+SHA-1) encryption
-Power requirements: 100-240VAC, 50-60Hz-
Dimensions: 33 x 20.3 x 4.4 cm. (13 x 8 x 1.75 in.)
-Weight: 4.42 lbs (2.01 kg)
•Environmental Specifications:
-Operating temperature: 0to 40ºC(32 to 104ºF)
-Operating humidity: 90% maximum relative humidity,
non-condensing
•Warranty:
-NETGEAR 3 year warranty
System Requirements
-Cable, DSL or wireless broadband modem and
Internet service
-Ethernet connectivity from broadband modem
-Network card for each connected PC
-Network software (e.g. Windows)
-Internet Explorer 5.0 or higher or Netscape Navigator 4.7
or higher
Package Contents
-FVX538 ProSafe VPN Firewall 200
-Ethernet cable
-Rack mount kit
-Installation guide
-Resource CD with five user license of ProSafe VPN Client
Softwareand 60 trial of Trend Micro SMB suite software
-Warranty/Support information card
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone: 1-888-NETGEAR
E-mail: [email protected]
www.NETGEAR.com
©2006 NETGEAR, Inc. NETGEAR, the
NETGEAR logo, Connect with Innovation,
Everybody’s connecting,the Gear Guy logo,
IntelliFi, ProSafe, RangeMax and Smart
Wizard are trademarks or registered
trademarks of NETGEAR, Inc. in the United
States and/or other countries. Microsoft and
Windows are trademarks or registered
trademarks of Microsoft Corporation in the
United States and/or other countries. Other
brand and product names are trademarks
or registered trademarks of their respective
holders. Information is subject to change
without notice. All rights reserved.
* Free basic installation support provided
for 90 days from date of purchase.
Advanced product features and
configurations are not included in free
basic installation support; optional
premium support available.
D-FVX538-01
VPNC
CERTIFIED
AES
Interop