NetGear STM150 ProSecure Web and E-mail Appliance

NetGear STM150 ProSecure Web and E-mail Appliance

Information security threats pose serious dangers to both enterprises and SMBs alike - consequently, SMBs require the same level of security protection that enterprises enjoy. However, security products aimed at the SMB often either employ watered down commercial anti-malware engines or use open source engines. These engines contain a limited signature database, weak detection algorithms, have slow response times to new threats, and are not optimized for real-time Web traffic. Enterprise-class technologies differ from cheaper alternate solutions by protecting the entire spectrum of a particular threat vector as opposed to covering only a small subset of it. However, these technologies are often times processor intensive and require expensive hardware to run effectively

At the core of the STM is NETGEAR patent-pending Web-optimized Stream Scanning architecture. NETGEAR STM Stream Scanning Technology allows the use of enterprise-class technologies while maintaining high throughput. NETGEAR has partnered with industry-leading Kaspersky Lab and Commtouch to bring best-of-breed Web and email scanning technology engines to the STM platform. Running on top of the Stream Scanning platform, these engines work in parallel with the NETGEAR heuristics engine to protect against known and unknown threats.

Enterprise-class Anti-malware Engine - The STM features a full enterprise grade antimalware engine with advanced scanning algorithms and a signature library of over hundreds of thousands of malware signatures. Compared to many competing products that often use a very limited signature set for performance reasons (thousands versus hundreds of thousands of signatures), the difference in coverage is over a hundred fold. Viruses, spyware, and other malware are detected and blocked. Spyware phone homes and drive-by downloads are also stopped by the STM, preventing further infection and protecting your valuable information.

Zero Hour Threat Protection - For zero hour threats, the STM's in the cloud infrastructure identifies new threats at zero hour, proactively stopping new malware, phishing attacks, spam, bad URLs, and zombie/bot attacks before they reach end user environments. It probes over two billion transactions daily from data sources such as zero hour malware patterns, phishing detection, threat research, IP reputation, spam messages, and zombie data.

Industry-leading Anti-spam Engine - The NETGEAR anti-spam engine features a Distributed Spam Analysis architecture that uses an "in the cloud" approach to feed global up-to-the-minute spam outbreak information to the appliance to stop new spam. The result is the highest spam detection and lowest false positive rates in the industry. Unlike open source and other traditional anti-spam filters, Distributed Spam Analysis has superior adaptability to new types of spam, performs equally well with spam of all languages, and has no "learning" period. New spam is classified and detected within minutes of emerging onto the Internet.

Enterprise-class URL Filter - The STM's URL filtering engine employs enterprise-class Web filter technology with URLs divided into 64 categories for specific and targeted administration. With a database of over 100 million URLs, the NETGEAR STM URL filtering engine relies on HTTP connectors deployed in the cloud at service providers throughout the world to classify and update URL entries in real time. The NETGEAR STM URL filtering engine automatically selfadapts and categorizes new URLs that have previously been unknown - unlike less effective approaches that force administrators to manually "submit" new entries one by one. The URL filter not only blocks access to unwanted sites, but also blocks sites containing spyware.

IM, P2P, Toolbar Application Control- Enforce company network usage policies with the STM's application control feature. Preserve productivity by blocking access to public IM clients such as AIM, Yahoo! Messenger, ICQ, and MSN Messenger and save bandwidth by blocking streaming audio and video applications like RealPlayer, iTunes, and Winamp. Stop annoying toolbars from downloading and running on client Web browsers.

With the STM, NETGEAR brings security to the SMB that was previously reserved for the enterprise

Typically, best-of-breed security software technologies are very processor and memory intensive. Given the high performance requirements of scanning latency sensitive Web traffic, incorporating enterprise grade security software technologies onto SMB-priced hardware platforms has traditionally been a very difficult task. The NETGEAR STM features patent-pending Stream Scanning Technology which analyses data streams as they enter the network. The NETGEAR Stream Scanning approach is many times faster than that of more traditional batch-based scanning methods where the entire file is buffered before it is scanned. Because of its nature, traditional batch-based scanning methods introduce latency to network traffic. While latency is more tolerable for email traffic, for large amounts of HTTP Web traffic, such latency often slows Web browsing to a crawl. Traditional approaches to work around this problem include the use of proxies, scanning only a handful of file types, or clustering multiple units. However, these strategies are typically difficult to configure and install, very expensive, often less secure, and still do not provide the same level of performance made possible by NETGEAR patent-pending Stream Scanning Technology. This Stream Scanning architecture is the foundation on which the STM is built.

The STM deploys in-line in a matter of minutes, anywhere in the network. It runs automatically and unobtrusively. There is no need to reconfigure the network, unlike traditional proxy-based solutions. Simply set and forget. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools such as SNMP.

For many administrators and IT personnel one of their biggest nightmares is the management of individual licenses or seats. Buying additional licenses when computers and personnel are added to the network is time-consuming and costly. The NETGEAR STM series offers Web and email protection subscriptions with no per-user licensing

Specifications

• Enterprise-class anti-malware engine with over hundreds of thousands of signatures
• In the Cloud Zero Hour Threat Protection
• Spyware download blocking
• Spyware site blocking
• Phishing attack blocking
• True HTTPS traffic scanning

• Enterprise-class spam filter using the Distributed Spam Analysis architecture
• Proactive virus outbreak prevention
• Blocks spam on SMTP and POP3

• Web (HTTP, HTTPS, FTP)
• Email (SMTP, POP3, IMAP)

• Enterprise-class URL filter
• 64 Categories
• User-defined URL white list
• User-defined URL block list
• User-defined file type blocking
• Password-protected attachment blocking
• ActiveX blocking
• Flash blocking
• Javascript control
• Email subject blocking

• LDAP directory server integration
• Time-based policies
• User-based policies
• Windows domain controller integration
• User and group policies

• Instant Messaging protocols
• Streaming media protocols
• Toolbar blocking

• Secure Web-based admin console
• SNMP support
• Automatic online updates
• Granular policy options
• Licenses are for an unlimited number of users

• Granular log query
• Syslog support
• E-mail log delivery

• Summary statistics
• Graphical reporting
• Automatic outbreak alerts
• Automatic malware notifications

• Plug and play
• Inline transparent bridge
• VLAN support

• Internet service
• Internet Explorer 5.0 or higher or Mozilla Firefox 1.0 or higher

• 24x7 Support
• Software maintenance upgrades
• Advanced Replacement

• For HTTP, HTTPS, and FTP
• Hourly spyware rule and definition updates
• Hourly virus definition updates
• Real-time content filter database updates

• For IMAP, POP3, and SMTP
• Hourly spyware rule and definition updates
• Hourly virus definition updates
• Real-time Distributed Spam Analysis Updates

• 100-240V AC/50-60Hz Universal input
• 1.5 amp max

• CE mark, commercial
• FCC Part 15 Class A
• VCCI Class A

• UL listed
• C-Tick

• RoHS