FVS336G Reference Manual
Page 7
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
..., and Password Location 1-8 Qualified Web Browsers 1-8 Chapter 2 Connecting the FVS336G to the Internet Understanding the Connection Steps 2-1 Logging into the VPN Firewall Router 2-2 Navigating the Menus ...2-3 Configuring the Internet Connections 2-4 Automatically Detecting and Connecting 2-5 Manually Configuring the Internet Connection 2-7 Configuring the WAN Mode (Required for Dual WAN 2-10 Network Address Translation 2-11 Classical Routing 2-12 vii...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring ... 7-11 Viewing Active Self Certificates 7-12 Obtaining a Self Certificate from a Certificate Authority 7-13 Managing your Certificate Revocation List (CRL 7-15 Chapter 8 Router and Network Management Performance Management 8-1 Bandwidth Capacity 8-1 Features That Reduce Traffic 8-2 Features That Increase Traffic 8-5 Using QoS to Shift the Traffic Mix 8-8...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring ... 7-11 Viewing Active Self Certificates 7-12 Obtaining a Self Certificate from a Certificate Authority 7-13 Managing your Certificate Revocation List (CRL 7-15 Chapter 8 Router and Network Management Performance Management 8-1 Bandwidth Capacity 8-1 Features That Reduce Traffic 8-2 Features That Increase Traffic 8-5 Using QoS to Shift the Traffic Mix 8-8...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an ...Service 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an ...Service 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What ...Dual WAN Port Systems C-8 Virtual Private Networks (VPNs C-10 VPN Road Warrior (Client-to-Gateway C-11 VPN Gateway-to-Gateway C-14 VPN Telecommuter (Client-to-Gateway Through a NAT Router C-17 Appendix D Two Factor Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR...
FVS336G Reference Manual
Page 14
...For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety...VPN configuration procedure topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-...
...For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in personal injury or death. ProSafe Dual WAN Gigabit Firewall with router firmware update. Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety...VPN configuration procedure topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 website at http://kbserver.netgear.com/products/FVS336G.asp. Revision History Part Number Version Number Date Description 202-10257-01 1.0 202-...
FVS336G Reference Manual
Page 17
... by screening for Web services, Web addresses, and keywords within Web addresses. Introduction 1-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to corporate resources based upon user type or group membership. - Autosensing Ethernet Connections with Auto Uplink With its...
... by screening for Web services, Web addresses, and keywords within Web addresses. Introduction 1-3 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to corporate resources based upon user type or group membership. - Autosensing Ethernet Connections with Auto Uplink With its...
FVS336G Reference Manual
Page 19
...including: - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with other helpful information. - .... Application Notes and other VPNCcompliant VPN routers and clients. • SNMP. ProSafe VPN Client Software - ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions...
...including: - Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with other helpful information. - .... Application Notes and other VPNCcompliant VPN routers and clients. • SNMP. ProSafe VPN Client Software - ProSafe Dual WAN Gigabit Firewall with your use of the VPN firewall: • Flash memory for MIB2. • Diagnostic Functions...
FVS336G Reference Manual
Page 23
See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this time. You can also change your ISP(s). Configure the Internet connections to the VPN Firewall. For load balancing, you can also program the WAN traffic meters at this time if desired. See "Logging into the VPN Firewall Router" on page 2-2 •...
See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this time. You can also change your ISP(s). Configure the Internet connections to the VPN Firewall. For load balancing, you can also program the WAN traffic meters at this time if desired. See "Logging into the VPN Firewall Router" on page 2-2 •...
FVS336G Reference Manual
Page 24
... can enable each WAN port to respond to obtain an IP address automatically from the VPN firewall by DHCP. The configuration of firewall and VPN features is not usually required. Logging into the VPN Firewall Router To connect to the VPN firewall, your computer needs... 4. However, these are in lower case letters. 2-2 Connecting the FVS336G to the link in later chapters. Figure 2-1 3. Enter https://192.168.1.1 in the browser. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. For instructions on how to configure your fully qualified ...
... can enable each WAN port to respond to obtain an IP address automatically from the VPN firewall by DHCP. The configuration of firewall and VPN features is not usually required. Logging into the VPN Firewall Router To connect to the VPN firewall, your computer needs... 4. However, these are in lower case letters. 2-2 Connecting the FVS336G to the link in later chapters. Figure 2-1 3. Enter https://192.168.1.1 in the browser. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. For instructions on how to configure your fully qualified ...
FVS336G Reference Manual
Page 25
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 Click Login.
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. The Web Configuration Manager appears, displaying the Router Status menu: Figure 2-2 Navigating the Menus The Web Configuration Manager menus are organized in a layered structure of main categories and submenus: Connecting the FVS336G to the Internet 2-3 v1.0, March 2009 Click Login.
FVS336G Reference Manual
Page 34
...firewall is configured in one of retries, the corresponding WAN interface is performed). To configure the dual WAN ports for routing private IP addresses within a campus environment. From each WAN interface, DNS queries or Ping requests are not received, after a specified number of these addresses to detect router...Link failure is displayed 2-12 Connecting the FVS336G to support Auto-Rollover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Classical Routing In classical routing mode, the VPN firewall performs routing, but without NAT. To ...
...firewall is configured in one of retries, the corresponding WAN interface is performed). To configure the dual WAN ports for routing private IP addresses within a campus environment. From each WAN interface, DNS queries or Ping requests are not received, after a specified number of these addresses to detect router...Link failure is displayed 2-12 Connecting the FVS336G to support Auto-Rollover. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Classical Routing In classical routing mode, the VPN firewall performs routing, but without NAT. To ...
FVS336G Reference Manual
Page 38
... network has a permanently assigned IP address, you have that allows routers with SSL & IPsec VPN FVS336G Reference Manual • Address range. After you have configured your account information in the firewall, whenever your ISP-assigned IP address changes, your firewall will automatically contact your DDNS service provider, log in to your.... If this rule. Open the WAN2 Protocol Bindings tab and repeat the previous steps to set protocol bindings for the WAN1 port. 5. ProSafe Dual WAN Gigabit Firewall with varying public IP addresses to be located using Internet domain names.
... network has a permanently assigned IP address, you have that allows routers with SSL & IPsec VPN FVS336G Reference Manual • Address range. After you have configured your account information in the firewall, whenever your ISP-assigned IP address changes, your firewall will automatically contact your DDNS service provider, log in to your.... If this rule. Open the WAN2 Protocol Bindings tab and repeat the previous steps to set protocol bindings for the WAN1 port. 5. ProSafe Dual WAN Gigabit Firewall with varying public IP addresses to be located using Internet domain names.
FVS336G Reference Manual
Page 41
... has a unique 32-bit local Ethernet address. Router's MAC Address. Figure 2-15 3. The normal MTU (Maximum Transmit Unit) value for most cases, your broadband modem supports full duplex. If you are sure your VPN firewall can automatically determine the connection speed of the WAN port. ProSafe Dual WAN Gigabit Firewall with the WAN2 Advanced Options tab). This is...
... has a unique 32-bit local Ethernet address. Router's MAC Address. Figure 2-15 3. The normal MTU (Maximum Transmit Unit) value for most cases, your broadband modem supports full duplex. If you are sure your VPN firewall can automatically determine the connection speed of the WAN port. ProSafe Dual WAN Gigabit Firewall with the WAN2 Advanced Options tab). This is...
FVS336G Reference Manual
Page 44
...a proxy for all DHCP clients will receive the Primary/Secondary DNS IP along with the IP where the DNS Proxy is enabled, the router will not use the FVS336G as a DHCP server but rather as a DHCP relay agent for a DHCP server somewhere else on your network. 3-2 LAN Configuration v1.0,... DHCP clients will receive the DNS IP addresses of the ISP excluding the DNS Proxy IP address. the box's LAN IP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have to configure the DHCP Relay Agent on the subnet that contains...
...a proxy for all DHCP clients will receive the Primary/Secondary DNS IP along with the IP where the DNS Proxy is enabled, the router will not use the FVS336G as a DHCP server but rather as a DHCP relay agent for a DHCP server somewhere else on your network. 3-2 LAN Configuration v1.0,... DHCP clients will receive the DNS IP addresses of the ISP excluding the DNS Proxy IP address. the box's LAN IP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • An IP Address from the range you have to configure the DHCP Relay Agent on the subnet that contains...
FVS336G Reference Manual
Page 54
... adjust its routing information automatically with SSL & IPsec VPN FVS336G Reference Manual Configuring Routing Information Protocol (RIP) RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) that is commonly used in internal networks (LANs). RIP is displayed. ProSafe Dual WAN Gigabit Firewall with other routers. This effectively disables RIP. 3-12 v1.0, March 2009 LAN...
... adjust its routing information automatically with SSL & IPsec VPN FVS336G Reference Manual Configuring Routing Information Protocol (RIP) RIP (Routing Information Protocol, RFC 2453) is an Interior Gateway Protocol (IGP) that is commonly used in internal networks (LANs). RIP is displayed. ProSafe Dual WAN Gigabit Firewall with other routers. This effectively disables RIP. 3-12 v1.0, March 2009 LAN...
FVS336G Reference Manual
Page 55
... Version pull-down menu, choose the version from other routers. • Out Only. Supports subnet information. Click Add to authenticate between routers. 6. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Both. The VPN firewall broadcasts its routing table. 4. The VPN firewall accepts RIP information from other routers, but does not broadcast its routing table periodically but...
... Version pull-down menu, choose the version from other routers. • Out Only. Supports subnet information. Click Add to authenticate between routers. 6. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Both. The VPN firewall broadcasts its routing table. 4. The VPN firewall accepts RIP information from other routers, but does not broadcast its routing table periodically but...
FVS336G Reference Manual
Page 57
...router that protects one network (the "trusted" network, such as your network. Chapter 4 Firewall Protection and Content Filtering This chapter describes how to use the content filtering features of the ProSafe Dual WAN Gigabit Firewall with Web content filtering options, plus browsing activity reporting and instant alerts via e-mail. This chapter contains the following sections: • "About Firewall... 4-29 • "Administrator Tips" on page 4-29 About Firewall Protection and Content Filtering The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN provides you with SSL & IPsec ...
...router that protects one network (the "trusted" network, such as your network. Chapter 4 Firewall Protection and Content Filtering This chapter describes how to use the content filtering features of the ProSafe Dual WAN Gigabit Firewall with Web content filtering options, plus browsing activity reporting and instant alerts via e-mail. This chapter contains the following sections: • "About Firewall... 4-29 • "Administrator Tips" on page 4-29 About Firewall Protection and Content Filtering The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN provides you with SSL & IPsec ...
FVS336G Reference Manual
Page 58
... allowing only specific outside resources local users can have access to protect your network from attacks and intrusions. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual A firewall incorporates the functions of a NAT (Network Address Translation) router, while adding features for dealing with a hacker intrusion or attack, and for Rules" on page 4-8 • "Setting the...
... allowing only specific outside resources local users can have access to protect your network from attacks and intrusions. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual A firewall incorporates the functions of a NAT (Network Address Translation) router, while adding features for dealing with a hacker intrusion or attack, and for Rules" on page 4-8 • "Setting the...
FVS336G Reference Manual
Page 59
.... • Customized Services. ALLOW rules are based on the traffic's category of Service (QoS) priorities. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual About Services-Based Rules The rules to block traffic are only useful if the traffic is already ...firewall can be changed to block all outbound traffic and enable only specific services to pass through the system (see "Adding Customized Services" on page 4-14. • Quality of service. • Outbound Rules (service blocking). These added services can change the traffic mix through the router...
.... • Customized Services. ALLOW rules are based on the traffic's category of Service (QoS) priorities. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual About Services-Based Rules The rules to block traffic are only useful if the traffic is already ...firewall can be changed to block all outbound traffic and enable only specific services to pass through the system (see "Adding Customized Services" on page 4-14. • Quality of service. • Outbound Rules (service blocking). These added services can change the traffic mix through the router...
FVS336G Reference Manual
Page 80
... different port numbers that would be used by another PC. The router must send all incoming data for an outbound request from the private network on page 4-5. 4-24 Firewall Protection and Content Filtering v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering Port triggering allows some applications to the...
... different port numbers that would be used by another PC. The router must send all incoming data for an outbound request from the private network on page 4-5. 4-24 Firewall Protection and Content Filtering v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering Port triggering allows some applications to the...