NetGear FVS336G Dual Wan SSL VPN Firewall

NetGear FVS336G Dual Wan SSL VPN Firewall

NETGEAR's ProSafe Dual WAN Gigabit Firewall with SSL and IPsec VPN offers the best of both worlds by offering two types of virtual private network (VPN) tunnels, Secure Sockets Layer (SSL) and IP security (IPsec), for optimal secure connection to your network. SSL VPN tunnels provide clientless remote access to your corporate data for individual access anywhere and anytime while IPsec VPN tunnels provide both secure site-to-site tunnels and legacy support for client-based remote access. Backed by a true firewall, this VPN router is a high-performance, SNMP-manageable, network solution that furnishes multidimensional security including denial-of-service (DoS) protection, stateful packet inspection (SPI), URL keyword filtering, logging, reporting, and real-time alerts. Four Gigabit LAN ports keep your data moving at top speed while two Gigabit WAN ports provide load-balancing and failover protection to ensure maximum throughput and reliable connectivity to the Internet. With Network Address Translation (NAT) routing and classical routing, up to 253 users can access your broadband connection at the same time.

Dual Gigabit Ethernet WAN ports support two broadband connections, in either a load-balancing or fail-over configuration. The load-balancing configuration enables maximum throughput by utilizing both WAN connections to distribute traffic across two broadband connections, possibly with different ISP providers. Alternatively, the second WAN port may be configured as a failover connection in case the primary connection fails, for another method of providing high reliability. The rugged metal unit houses advanced, high-quality electronics, and NETGEAR's tested and proven technology is backed by a lifetime warranty.

Auto Detect connects to your ISP quickly; the user-friendly Web-based ProSafe Control Center configuration screen and install assistant reduce setup time. With SSL VPN tunnels, employees can quickly and securely access company data with just a Web browser without going into the office. The IPsecVPN wizard automates IPsec VPN configuration and secure remote makes it simple to connect to multiple sites. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. This well-built firewall has an integrated 4-port 10/100/1000 Mbps switch and is compatible with Windows UNIX Macintosh, and Linux OS. It comes with an Ethernet cable, and Auto Uplink on the all ports eliminates the need for crossover cables.

Because corporate laptops are already loaded with the applications employees need to do their jobs, they require full corporate network access for file sharing and email connectivity. The FVS336G is able to connect to the corporate network using VPN tunneling, enabling users to securely and privately transfer information.

The FVS336G enables easy, secure and cost-effective clientless remote access for any employee without complicated installations or PC administrative access. VPN tunnel protocol redirection enables users with administrative access to their PCs to:

• Use any application on their corporate PC
• No need to install, configure, and maintain IPsec software clients on corporate PCs
• Freedom from complex network limitations associated with IPsec such as NAT Traversal, multiple PCs from one public NAT address, etc.
• Freedom to access VPNs from any PC with a browser
• Use only a browser to connect - no software installation necessary
• Securely connect through a dissolvable Java/ActiveX agent

Specifications

• LAN ports: Four (4) 10/100/1000 -Mbps auto-sensing, Auto Uplink RJ-45 ports
• WAN ports: Two (2) 10/100/1000 -Mbps auto-sensing, Auto Uplink RJ-45 ports to connect to any broadband modem, such as DSL or cable
• Load balancing or fail-over modes

• prevents denial-of-service (DoS) attacks
• provides stealth mode
• User support: Unrestricted

• address
• service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3,SSH, etc.)
• protocol
• Web URL port/service blocking
• file extension (ex. Java, URL, ActiveX)
• Port/service blocking
• SIP Application Layer Gateway

• Linksys SPA-901
• Linksys SPA-941
• SNOM M3
• Cisco 7940G
• X-Lite 3.0 (software for phones)
• D-Link DPH-140S
• Grandstream GXP-2000
• Polycom SoundStation 6000
• Siemens C450
• Aastra 51i

• Twenty-five (25) dedicated IPsec VPN tunnels
• Manual key and Internet Key Exchange Security Association (IKE SA) assignment
• pre-shared key signature
• RSA/DSA signature
• Key life and IKE lifetime time settings
• Perfect forward secrecy
• Diffie-Hellman groups 1 and 2
• Oakley support
• Operating modes
• main
• aggressive
• Fully qualified domain name (FQDN) support for dynamic IP address VPN connections

• IPsec-based 56-bit (DES) 168-bit (3DES), or 256-bit (AES) encryption algorithm
• MD5 or SHA-1 hashing algorithm
• ESP support
• PKI features with X.509 v.3 certificate support
• remote access VPN (client-to-site), site-to-site VPN
• IPsec NAT traversal (VPN pass-through)

• Ten (10) dedicated SSL VPN tunnels
• SSL version support: SSLv3 and TLS 1.0
• SSL encryption support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit
• SSL message integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1

• RSA
• Diffie-Hellman
• Self

• Many-to-one Multi-network Address Translation (NAT)
• Classical routing
• Unrestricted users per port

• Static IP address assignment
• Internal DHCP server on LAN
• DHCP client on WAN
• PPPoE client support

• LAN-to-WAN: 60 Mbps total
• IPsec VPN (3DES): 16 Mbps
• SSL VPN: 10 Mbps

• 10,000 concurrent sessions

• SNMP (v2c) support
• Web graphic user interface
• Secure Sockets Layer (SSL) remote management
• User name and password protected
• Secure remote management support authenticated through IP address (or IP address range) and password
• Configuration changes/upgrades through Web GUI

• SYSLOG
• E-mail alerts

• VPN Wizard to simplify configuration of IPsec VPNs
• Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE)
• Port range forwarding
• Port triggering
• Enable/disable WAN ping
• DNS proxy
• MAC address cloning/spoofing
• Network Time Protocol NTP support
• Diagnostic tools (ping, DNS lookup, trace route, other)
• Port/service
• Auto-Uplink on switch ports
• L3 Quality of Service (QoS) LAN-to-WAN and WAN-to-LAN (ToS)

• Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
• IP addressing: DHCP (client and server)
• Routing: RIP v1, RIPv2 (static routing, dynamic routing)
• VPN/security: IPsec (ESP), IKE, PKI, HTTPS

• vLAN: Up to 253 users

• Save/restore configuration, restore defaults, upgrades via Web browser, display statistics

• Operating temperature: 0 degree to 40 degrees C (32 degrees to 104 degrees F)
• Operating humidity: 90% maximum relative humidity, non-condensing