NetGear FVS338 ProSafe VPN Firewall w/ 8-Port Switch

NetGear FVS338 ProSafe VPN Firewall w/ 8-Port Switch

NETGEAR s ProSafe VPN Firewall with dial back-up is an SNMP-manageable, high-performance network solution that furnishes multidimensional security. Fully equipped and broadband-capable,this virtual private network (VPN) firewall comes with connection insurance: a built-in serial port for dial-up access. This practical feature means your business can maintain operation if your broadband Internet connection fails. It lets you retain an analog modem for emergency backup and alsprovides a migration path from analog tbroadband, making the transition effortless.

High on security, this true firewall provides denial-of-service (DoS) protection using stateful packet inspection (SPI), URL keyword filtering, logging, reporting, and real-time alerts. It supports up t50 IPsec VPN tunnels simultaneously using public key infrastructure (PKI), reducing your operating costs and improving the security of your network. With 8 auto-sensing, AutUplink switched LAN ports and Network Address Translation (NAT) routing, it allows the network a great foundation for growth.

The FV338 takes care of all your security needs, with support up t50 IPsec VPN tunnels simultaneously, SPI firewall, denial-of-service (DoS) attack protection and multiple VPN pass-through for extra security. SYSLOG and email reporting enable thorough network monitoring. IKE authentication provides peace of mind against unauthorized VPN network access. The ProSafe VPN Firewall provides optimal value and defense against network security threats.

AutDetect connects tyour ISP quickly; the user-friendly Web-based configuration screen and install assistant reduce setup time. The VPN Wizard automates VPN configuration and secure remote administration via Secure Sockets Layer (SSL) making it simple tconnect tmultiple sites. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. This well-built firewall has an integrated 8-port 10/100 Mbps switch and is compatible with Windows, UNIX, Macintosh, and Linux O/S. It comes with an Ethernet cable, and AutUplink on the LAN ports eliminates the need for crossover cables. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment.

Specifications

• SPI Firewall: Stateful packet inspection (SPI) tprevent notorious denial-of-service (DoS) attacks, including logging, reporting and email alerts, address, service and protocol, Web URL keyword filtering, prevent replay attack (reassembly attack), port/service blocking. Advanced features include block Java/URL/ActiveX based on extension, FTP/SMTP/RPC program filtering
• SIP Application Layer Gateway
• SIP compatibility list:
• Linksys SPA-901
• Linksys SPA-941
• SNOM M3
• Cisc7940G
• X-Lite 3.0 (software for phones)
• D-Link DPH-140S
• Grandstream GXP-2000
• Polycom SoundStation 6000
• Siemens C450
• Aastra 51i
• VPN Functionality: Fifty (50) dedicated VPN tunnels, Manual Key and Internet Key Exchange Security Association (IKE SA) assignment with pre-shared key and RSA/DSA signatures, key life and IKE lifetime time settings, perfect forward secrecy (Diffie-Hellman groups 1 and 2 and Oakley support), operating modes (main, aggressive), fully qualified domain name (FQDN) support for dynamic IP address VPN connections
• IPsec Support: IPsec-based 56-bit (DES), 168-bit (3DES), or 256-bit (AES) encryption algorithm, MD5 or SHA-1 hashing algorithm, AH/AH-ESP support, PKI features with X.509 v.3 certificate support, remote access VPN (client-to-site), site-to-site VPN, IPsec NAT traversal (VPN pass-through)
• Mode of Operation: One-to-one/many-to-one Multi-network Address Translation (NAT), classical routing, unrestricted users per port
• IP Address Assignment: Static IP address assignment, internal DHCP server on LAN, DHCP client on WAN, PPPoE client support

• Administration interface: SNMP (v1, v2c) support, telnet, web graphic user interface, Secure Sockets Layer (SSL) remote management, user name and password protected; secure remote management support authenticated through IP address or IP address range and password; configuration changes/upgrades through Web GUI
• Configuration and upgrades: Upload and download configuration settings, firmware upgradeable flash memory
• Logging: SYSLOG, email alerts

• VPN Wizard to simplify configuration of the VPN, auto detect to automatically detect ISP address type (static, dynamic, PPPoE), port range forwarding, port triggering, exposed host (DMZ), hardware DMZ, enable/disable WAN ping, DNS proxy, MAC address cloning/spoofing, Network Time Protocol (NTP) support, keyword content filtering, email alerts, DHCP server (info and display table), PPPoE login client support, WAN DHCP client, diagnostic tools (ping, trace route, other), port/service, Auto Uplink on switch ports and Quality of Service (QoS).

• Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
• IP addressing: DHCP (client and server)
• Routing: RIP v1, RIP v2 (static routing, dynamic routing)
• VPN/security: IPsec (ESP, AH), MD5, SHA-1, DES, 3DES, IKE, PKI, AES