FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
... Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is hereby certified that may cause harmful interference to correct the interference by one or more of their respective holders. Trademarks NETGEAR and the NETGEAR logo are registered trademarks of the FCC Rules. NETGEAR does not assume any liability that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in...
... Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is hereby certified that may cause harmful interference to correct the interference by one or more of their respective holders. Trademarks NETGEAR and the NETGEAR logo are registered trademarks of the FCC Rules. NETGEAR does not assume any liability that the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN has been suppressed in...
FVS336G Reference Manual
Page 5
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 All rights reserved. Copyright (C) 1995-2002 Jean-loup Gailly and Mark Adler. The name of the...
...) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 All rights reserved. Copyright (C) 1995-2002 Jean-loup Gailly and Mark Adler. The name of the...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN Wizard for Client...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring the Client IP Address Range 6-11 Adding Routes for VPN Tunnel Clients 6-12 Replacing and Deleting Client Routes 6-12 Using Network Resource Objects to Simplify Policies 6-13...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP Manager 8-13 Configuration File ... Not On 10-2 LEDs Never Turn Off 10-2 LAN or WAN Port LEDs Not On 10-2 Troubleshooting the Web Configuration Interface 10-3 Troubleshooting the ISP Connection 10-4 Troubleshooting a TCP/IP Network Using a Ping Utility 10-5 Testing the LAN Path to Your VPN Firewall 10-5 Testing the Path from Your PC to a Remote Device...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 13
...to the equipment. xiii v1.0, March 2009 About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. This manual uses the following .... This manual uses the following formats to highlight special messages: Note: This format is intended for readers with SSL & IPsec VPN. Conventions, Formats, and Scope The conventions, formats, and scope of note may result in this manual are ...
...to the equipment. xiii v1.0, March 2009 About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. This manual uses the following .... This manual uses the following formats to highlight special messages: Note: This format is intended for readers with SSL & IPsec VPN. Conventions, Formats, and Scope The conventions, formats, and scope of note may result in this manual are ...
FVS336G Reference Manual
Page 14
... NETGEAR, Inc. website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall...
... NETGEAR, Inc. website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-10257-02 1.1 202-10257-03 1.2 202-10257-04 1.0 October First publication 2007 November Text corrections 2007 June 2008 Updated to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 15
... configured within minutes. The use of your network, while providing advanced IPsec and SSL VPN technologies for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps...
... configured within minutes. The use of your network, while providing advanced IPsec and SSL VPN technologies for secure and simple remote connections. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in four-port 10/100/1000 Mbps...
FVS336G Reference Manual
Page 16
...a second broadband Internet line that can be configured on the remote computer. - The firewall balances users between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • ...and clients. - See "Network Planning for Dual WAN Ports" on their computers. - IPsec VPN with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - Supports 25 concurrent IPsec VPN tunnels. • SSL VPN provides remote access for secure connection to ...
...a second broadband Internet line that can be configured on the remote computer. - The firewall balances users between a central office and telecommuters. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • ...and clients. - See "Network Planning for Dual WAN Ports" on their computers. - IPsec VPN with the single-user license of the NETGEAR ProSafe VPN Client software (VPN01L) - Supports 25 concurrent IPsec VPN tunnels. • SSL VPN provides remote access for secure connection to ...
FVS336G Reference Manual
Page 17
A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can control access to Internet content by day and time. • Logs security events such as Auto Uplink will then configure itself to the correct configuration. The FVS336G incorporates Auto UplinkTM technology. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using...
A Powerful, True Firewall with SSL & IPsec VPN FVS336G Reference Manual - You can control access to Internet content by day and time. • Logs security events such as Auto Uplink will then configure itself to the correct configuration. The FVS336G incorporates Auto UplinkTM technology. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using...
FVS336G Reference Manual
Page 18
...(ISP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol... using the Dynamic Host Configuration Protocol (DHCP). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to attached PCs on page C-3. • IP Address Sharing by NAT. The VPN firewall automatically senses the type of ISP account. 1-4...
...(ISP). Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol... using the Dynamic Host Configuration Protocol (DHCP). ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to attached PCs on page C-3. • IP Address Sharing by NAT. The VPN firewall automatically senses the type of ISP account. 1-4...
FVS336G Reference Manual
Page 19
... NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your product. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. ProSafe Dual WAN Gigabit Firewall...
... NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with your product. The VPN firewall includes the NETGEAR VPN Wizard to easily configure IPsec VPN tunnels according to the recommendations of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions. ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 20
... 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. The LAN port is operating at 1,000 Mbps. The system has booted successfully. The WAN port has no link. Keep the carton, including the original packing materials, in standby...(Amber) Description Power is supplied to defaults). The Internet connection is down or not being transmitted or received by the WAN port. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. SPEED LINK/ACT (Link and ...
... 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. The LAN port is operating at 1,000 Mbps. The system has booted successfully. The WAN port has no link. Keep the carton, including the original packing materials, in standby...(Amber) Description Power is supplied to defaults). The Internet connection is down or not being transmitted or received by the WAN port. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. SPEED LINK/ACT (Link and ...
FVS336G Reference Manual
Page 21
... seconds until the front panel TEST light flashes to reset the VPN firewall to right, the rear panel contains the following elements: 1. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating at 10 Mbps. On/off power switch. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Introduction 1-7 v1.0, March 2009 LAN Ethernet...
... seconds until the front panel TEST light flashes to reset the VPN firewall to right, the rear panel contains the following elements: 1. The WAN port has detected a link with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Data is operating at 10 Mbps. On/off power switch. ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. Introduction 1-7 v1.0, March 2009 LAN Ethernet...
FVS336G Reference Manual
Page 22
... use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of...
... use Internet Explorer 5.1 or higher, Apple Safari 1.2 or higher, or Mozilla Firefox l.x Web browser with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of...
FVS336G Reference Manual
Page 23
... Typically, six steps are ready to the instructions in the installation guide. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. Log in this time. Configure the Internet connections to the VPN Firewall. This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging...
... Typically, six steps are ready to the instructions in the installation guide. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this chapter. Log in this time. Configure the Internet connections to the VPN Firewall. This chapter contains the following sections: • "Understanding the Connection Steps" on page 2-1 • "Logging...
FVS336G Reference Manual
Page 24
... 2-1 3. Optionally, you can enable each WAN port to respond to the VPN firewall follow these tasks is detailed separately in later chapters. Configure the WAN options (optional). Configure dynamic DNS on page 2-18. In the User field, type admin 4. Enter https://192.168.1.1 in the browser. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. In the Password field...
... 2-1 3. Optionally, you can enable each WAN port to respond to the VPN firewall follow these tasks is detailed separately in later chapters. Configure the WAN options (optional). Configure dynamic DNS on page 2-18. In the User field, type admin 4. Enter https://192.168.1.1 in the browser. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. In the Password field...