Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

1-2

About This Manual

202-10085-01, March 2005

How to Use This Manual

The HTML version of this manual includes the following:

•

Buttons,

and

, for browsing forwards or backwards through the manual one page

at a time

•

A

button that displays the table of contents and an

button. Double-click on a

link in the table of contents or index to navigate directly to where the topic is described in the

manual.

•

A

button to access the full NETGEAR, Inc. online knowledge base for the

product model.

•

Links to PDF versions of the full manual and individual chapters.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

About This Manual

1-3

202-10085-01, March 2005

How to Print this Manual

To print this manual you can choose one of the following several options, according to your needs.

•

Printing a Page in the HTML View

.

Each page in the HTML version of the manual is dedicated to a major topic. Use the

Print

button on the browser toolbar to print the page contents.

•

Printing a Chapter

.

Use the

PDF of This Chapter

link at the top left of any page.

–

Click the

PDF of This Chapter

link at the top right of any page in the chapter you want to

print. The PDF version of the chapter you were viewing opens in a browser window.

Note

: Your computer must have the free Adobe Acrobat reader installed in order to view

and print PDF files. The Acrobat reader is available on the Adobe Web site at

.

–

Click the print icon in the upper left of the window.

Tip

: If your printer supports printing two pages on a single sheet of paper, you can save

paper and printer ink by selecting this feature.

•

Printing the Full Manual

.

Use the

Complete PDF Manual

link at the top left of any page.

–

Click the

Complete PDF Manual

link at the top left of any page in the manual. The PDF

version of the complete manual opens in a browser window.

–

Click the print icon in the upper left of the window.

Tip

: If your printer supports printing two pages on a single sheet of paper, you can save

paper and printer ink by selecting this feature.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

1-4

About This Manual

202-10085-01, March 2005

Introduction

2-1

202-10085-01, March 2005

Chapter 2

Introduction

This chapter describes the features of the NETGEAR FVS124G ProSafe VPN Firewall 25 with 4

Gigabit LAN and Dual WAN Ports.

Key Features of the VPN Firewall

The FVS124G ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports with 4 port

switch connects your local area network (LAN) to the Internet through an external access device

such as a cable modem or DSL modem.

The FVS124G is a complete security solution that protects your network from attacks and

intrusions. Unlike simple Internet sharing firewalls that rely on Network Address Translation for

security, the FVS124G uses Stateful Packet Inspection for Denial of Service (DoS) attack

protection and intrusion detection. The FVS124G VPN Firewall provides you with multiple Web

content filtering options, plus browsing activity reporting and instant alerts -- both via e-mail.

Network administrators can establish restricted access policies based on time-of-day, Website

addresses and address keywords.

With minimum setup, you can install and use the firewall within minutes.

The FVS124G VPN Firewall provides the following features:

•

2 10/100 Mbps ports for an Ethernet connection to a WAN device, such as a cable modem or

DSL modem.

•

Dual WAN ports provide for increased system reliability and provide load balancing.

•

Support for up to 10 VPN tunnels.

•

Easy, web-based setup for installation and management.

•

URL keyword Content Filtering and Site Blocking Security.

•

Quality of Service (QoS) support for traffic prioritization.

•

Built in 4-port 10/100/1000 Mbps switch.

•

Extensive Protocol Support.

•

Login capability.

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports

2-2

Introduction

202-10085-01, March 2005

•

Front panel LEDs for easy monitoring of status and activity.

•

Flash memory for firmware upgrade.

Dual WAN Ports for Increased Reliability or Outbound Load

Balancing

The FVS124G VPN Firewall has two broadband WAN ports, WAN1 and WAN2, each capable of

operating independently at speeds of either 10 Mbps or 100 Mbps. The two WAN ports let you

connect a second broadband Internet line that can be configured on a mutually-exclusive basis to:

•

Provide backup and rollover if one line is inoperable, ensuring you are never disconnected.

•

Load balance, or use both Internet lines simultaneously for the outgoing traffic. The firewall

balances users between the two lines for maximum bandwidth efficiency.

See

“Network Planning” on page 3-1

for the planning factors to consider when implementing the

following capabilities with dual WAN port gateways:

•

Inbound traffic (e.g., port forwarding, port triggering)

•

Virtual private networks

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the FVS124G is a true firewall, using stateful packet

inspection to defend against hacker attacks. Its firewall features include:

•

DoS protection.

Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND

Attack, and IP Spoofing.

•

Blocks unwanted traffic from the Internet to your LAN.

•

Blocks access from your LAN to Internet locations or services that you specify as off-limits.

•

Logs security incidents.

The FVS124G will log security events such as blocked incoming traffic, port scans, attacks,

and administrator logins. You can configure the firewall to email the log to you at specified

intervals. You can also configure the firewall to send immediate alert messages to your email

address or email pager whenever a significant event occurs.