NETGEAR SSL312 - ProSafe SSL VPN Concentrator 25 User manual

202-10208-01
August 2006
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
NETGEAR ProSafe SSL
VPN Concentrator 25
SSL312 Reference
Manual

ii
v1.0, August 2006
Technical Support
Please register to obtain technical support. Please retain your proof of purchase and warranty information.
To register your product, get product support or obtain product information and product documentation, go to
http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling
out the registration card and mailing it to NETGEAR customer service.
You will find technical support information at: http://www.NETGEAR.com/ through the customer service area. If you
want to contact technical support by telephone, see the support information card for the correct telephone number for
your country.
© 2006 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR, the NETGEAR logo, ProSafe and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
FCC Statement
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause undesired operation.
FCC Requirements for Operation in the United States
Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply
with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can
radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can be determined
by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the
following measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and receiver
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected
• Consult the dealer or an experienced radio/TV technician for help.

v1.0, August 2006
iii
RF Exposure Warning for North America, and Australia
Warning! To ensure compliance with FCC RF exposure requirements, the antenna used for this device must be installed
to provide a separation distance of at least 20 cm (8 in) from all persons and must not be co-located or operating in
conjunction with any other antenna or radio transmitter. Installers and end-users must follow the installation instructions
provided in this user guide.
EU Regulatory Compliance Statement
ProSafe SSL VPN Concentrator 25 is compliant with the following EU Council Directives: 89/336/EEC and
LVD 73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class B, EN55024 and
EN60950.
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe SSL VPN Concentrator 25 has been suppressed in accordance with the conditions
set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test
transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes
in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe SSL VPN Concentrator 25 gemäß der im BMPT-AmtsblVfg 243/1991 und
Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender)
kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Product and Publication Details
Model Number: SSL312
Publication Date: August 2006
Product Family: Concentrator
Product Name: ProSafe SSL VPN Concentrator 25
Home or Business Product: Business
Language: English
Publication Part Number: 202-10208-01
Publication Version Number: 1.0

v1.0, August 2006
iv

v
v1.0, August 2006
Contents
About This Manual
Conventions, Formats and Scope .................................................................................... ix
How to Use This Manual ...................................................................................................x
How to Print this Manual ....................................................................................................x
Chapter 1
Introduction
About the ProSafe SSL VPN Concentrator 25 ...............................................................1-1
Key Features ..................................................................................................................1-1
Web Browser Requirements ...........................................................................................1-2
What’s in the Box ............................................................................................................1-3
Hardware Description .....................................................................................................1-3
Front Panel ...............................................................................................................1-3
Back Panel ...............................................................................................................1-4
Chapter 2
Basic Installation and Configuration
Installing the SSL VPN Concentrator .............................................................................2-1
Configuring the ProSafe SSL VPN Concentrator 25 ......................................................2-2
Logging in to the Management Interface ........................................................................2-4
Chapter 3
Status and Logging
SSL VPN Concentrator Status ........................................................................................3-1
Event Log .......................................................................................................................3-3
Active Users ...................................................................................................................3-5
Log Settings ....................................................................................................................3-6
Chapter 4
General Settings
System Configuration Utilities .........................................................................................4-1
Encrypting the Configuration File .............................................................................4-2
Exporting and Saving a Backup Configuration File ..................................................4-2

vi
v1.0, August 2006
Importing a Configuration File ..................................................................................4-3
Erasing and Restoring the Default Settings .............................................................4-4
Upgrading the SSL VPN Concentrator Firmware .....................................................4-4
Time and Date Settings ..................................................................................................4-5
Certificate Management .................................................................................................4-7
Chapter 5
Network Settings
Configuring Network Settings .........................................................................................5-1
Sample SSL VPN Concentrator Configuration .........................................................5-1
Network Interface Configuration ...............................................................................5-2
Network Route Configuration ...................................................................................5-4
Network Host Table Settings ....................................................................................5-6
Configuring DNS Settings ........................................................................................5-7
Chapter 6
Group and User Access Policies
Users, Groups and Global Policies .................................................................................6-1
Global Policies ................................................................................................................6-3
Editing Global Policy Settings ..................................................................................6-3
Adding and Editing Global Policies ..........................................................................6-4
Defining and Editing Global Bookmarks ...................................................................6-6
Groups Configuration .....................................................................................................6-6
Adding a New Group ................................................................................................6-7
Editing Group Settings .............................................................................................6-8
Defining and Editing Group Policies .........................................................................6-9
Defining and Editing Group Bookmarks .................................................................6-11
Deleting a Group ....................................................................................................6-12
Users Configuration ......................................................................................................6-13
Adding a New User ................................................................................................6-14
Editing a User .........................................................................................................6-15
Defining and Editing User Policies .........................................................................6-17
Defining and Editing a User Bookmarks ................................................................6-18
Deleting a User ......................................................................................................6-19
Active Directory Authentication Servers for Group Policies and Bookmarks ................6-19
LDAP Authentication Domains for Group Policies and Bookmarks ..............................6-20
Sample LDAP Attributes ........................................................................................6-20

vii
v1.0, August 2006
LDAP Attribute Rules .............................................................................................6-21
Sample LDAP Users and Attributes Settings .........................................................6-21
Querying an LDAP Server ......................................................................................6-21
NT and RADIUS Domain Servers for Group Policies and Bookmarks .........................6-22
Chapter 7
Domains and Layouts
Authentication Domains ..................................................................................................7-1
Local User Database Authentication ........................................................................7-2
RADIUS Authentication ............................................................................................7-3
NT Domain Authentication .......................................................................................7-4
LDAP Authentication ................................................................................................7-5
Active Directory Authentication ................................................................................7-7
Deleting a Domain ....................................................................................................7-9
SSL VPN Concentrator Portal Layouts ...........................................................................7-9
Adding Portal Layouts ............................................................................................7-10
Customizing the Banner .........................................................................................7-13
Duplicating and Editing Portal Layouts ..................................................................7-14
Advanced Portal Page Layout Specifications ...............................................................7-16
Chapter 8
Network Resources
Chapter 9
VPN Tunnel Client
SSL VPN Client Configuration ........................................................................................9-1
Adding IP Address Ranges ............................................................................................9-2
Adding Routes for VPN Tunnel Clients ...........................................................................9-3
Chapter 10
Port Forwarding
Configuring Applications for Port Forwarding ...............................................................10-1
Configuring Host Name Resolution ..............................................................................10-3
Appendix A
Default Settings and Technical Specifications
Factory Default Settings ................................................................................................ A-1
Technical Specifications ................................................................................................. A-2

viii
v1.0, August 2006
Appendix B
Related Documents
Index

ix
v1.0, August 2006
About This Manual
The NETGEAR®Prosafe™ SSL VPN Concentrator 25 SSL312 Reference Manual describes how
to install, configure and troubleshoot the ProSafe SSL VPN Concentrator 25. The information in
this manual is intended for readers with intermediate computer and Internet skills.
Conventions, Formats and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
•Typographical Conventions. This manual uses the following typographical conventions:
•Formats. This manual uses the following formats to highlight special messages:
Italics Emphasis, books, CDs, URL names
Bold User input
Fixed Screen text, file and server names, extensions, commands, IP addresses
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
x
v1.0, August 2006
•Scope. This manual is written for the SSL VPN Concentrator according to these
specifications:
For more information about network, Internet, firewall, and VPN technologies, see the links to the
NETGEAR website in Appendix B, “Related Documents”.
How to Use This Manual
The HTML version of this manual includes the following:
• Buttons, and , for browsing forwards or backwards through the manual one page
at a time
•A button that displays the table of contents and an button. Double-click on a
link in the table of contents or index to navigate directly to where the topic is described in the
manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product
model.
• Links to PDF versions of the full manual and individual chapters.
How to Print this Manual
To print this manual you can choose one of the following several options, according to your needs.
•Printing a Page in the HTML View.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
Product Version ProSafe SSL VPN Concentrator 25
Manual Publication Date August 2006
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/SSL312.asp.