FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
...by turning the equipment off and on, the user is encouraged to try to the use or application of NETGEAR, Inc. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is compliant with SSL & IPsec VPN gemäß der im BMPTAmtsblVfg 243/...Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the following standards: EN55022 Class B, EN55024 and EN60950-1. This equipment generates, uses, and can be determined by NETGEAR, Inc. All rights reserved. NETGEAR does not assume any liability that interference will not ...
...by turning the equipment off and on, the user is encouraged to try to the use or application of NETGEAR, Inc. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is compliant with SSL & IPsec VPN gemäß der im BMPTAmtsblVfg 243/...Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the following standards: EN55022 Class B, EN55024 and EN60950-1. This equipment generates, uses, and can be determined by NETGEAR, Inc. All rights reserved. NETGEAR does not assume any liability that interference will not ...
FVS336G Reference Manual
Page 5
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 All rights reserved. This software is ', without specific prior written permission. Permission...
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 All rights reserved. This software is ', without specific prior written permission. Permission...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
... damage to the equipment. Conventions, Formats, and Scope The conventions, formats, and scope of this type of importance or special interest. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills.
... damage to the equipment. Conventions, Formats, and Scope The conventions, formats, and scope of this type of importance or special interest. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills.
FVS336G Reference Manual
Page 14
... 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections...
... 2007 November Text corrections 2007 June 2008 Updated to the NETGEAR website in personal injury or death. For more information about network, Internet, firewall, and VPN technologies, see the links to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. March 2009 Adds these corrections...
FVS336G Reference Manual
Page 15
... failover protection of your primary Internet connection. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to safeguard your network, while providing advanced IPsec and SSL VPN ... increased system reliability or increased throughput. • Built-in case of failure of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that can be installed and configured within minutes.
... failover protection of your primary Internet connection. Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to safeguard your network, while providing advanced IPsec and SSL VPN ... increased system reliability or increased throughput. • Built-in case of failure of Gigabit Ethernet LAN and WAN ports ensures extremely high data transfer speeds The FVS336G is a plug-and-play device that can be installed and configured within minutes.
FVS336G Reference Manual
Page 16
... IPsec VPN with broad protocol support for a wide variety of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy...VPN Support for firmware upgrade. • Internal universal switching power supply. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, ...
... IPsec VPN with broad protocol support for a wide variety of user repositories. 1-2 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for easy...VPN Support for firmware upgrade. • Internal universal switching power supply. Remote access by telecommuters requires the installation of the NETGEAR ProSafe VPN Client software (VPN01L) - Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, ...
FVS336G Reference Manual
Page 17
....0, March 2009 Supports 10 concurrent SSL VPN sessions. A Powerful, True Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can connect to Internet locations or services that you at specified intervals. ... itself to corporate resources based upon user type or group membership. - Provides granular access to the correct configuration. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - Browser based, platform-independent, remote access through a number of full-duplex or half-duplex operation....
....0, March 2009 Supports 10 concurrent SSL VPN sessions. A Powerful, True Firewall with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can connect to Internet locations or services that you at specified intervals. ... itself to corporate resources based upon user type or group membership. - Provides granular access to the correct configuration. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual - Browser based, platform-independent, remote access through a number of full-duplex or half-duplex operation....
FVS336G Reference Manual
Page 18
... the use of an inexpensive single-user ISP account. • Automatic Configuration of ISP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP).
... the use of an inexpensive single-user ISP account. • Automatic Configuration of ISP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP).
FVS336G Reference Manual
Page 19
... access to monitor its status and activity. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Introduction 1-5 v1.0, March 2009 Application...
... access to monitor its status and activity. Maintenance and Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Introduction 1-5 v1.0, March 2009 Application...
FVS336G Reference Manual
Page 20
... LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Power is not supplied to defaults). The LAN port is operating at 1,000 Mbps. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. The system...
... LAN lights: Figure 1-1 The function of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Power is not supplied to defaults). The LAN port is operating at 1,000 Mbps. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual If any of each LED is described in the following table: Table 1-1. The system...
FVS336G Reference Manual
Page 21
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. LED Descriptions (continued) Object LAN Ports SPEED LINK/ACT (Link and...LAN port is operating at 1,000 Mbps. The LAN port is operating at 10 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Figure 1-2 Viewed from left to factory default settings. All configuration settings will be lost and the default password ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN includes Gigabit Ethernet LAN and WAN connections, a cable lock receptacle, power and reset switches, and an AC power connection. LED Descriptions (continued) Object LAN Ports SPEED LINK/ACT (Link and...LAN port is operating at 1,000 Mbps. The LAN port is operating at 10 Mbps. Rear Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. Figure 1-2 Viewed from left to factory default settings. All configuration settings will be lost and the default password ...
FVS336G Reference Manual
Page 22
...configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference ...Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of ...
...configure the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN, an administrator must use with the VPN firewall's Web Management Interface for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference ...Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of ...
FVS336G Reference Manual
Page 23
...; "Configuring the Internet Connections" on page 2-4 • "Configuring the WAN Mode (Required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS (Optional)" on page 2-16 • "Configuring the Advanced WAN Options (Optional)" on the NETGEAR website at: http://kbserver.netgear.com. 2. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-18 Understanding the...
...; "Configuring the Internet Connections" on page 2-4 • "Configuring the WAN Mode (Required for Dual WAN)" on page 2-10 • "Configuring Dynamic DNS (Optional)" on page 2-16 • "Configuring the Advanced WAN Options (Optional)" on the NETGEAR website at: http://kbserver.netgear.com. 2. See the Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on page 2-18 Understanding the...
FVS336G Reference Manual
Page 24
... IP address automatically from the VPN firewall by DHCP. Start any of firewall and VPN features is detailed separately in "Qualified Web Browsers" on the WAN ports (optional). Configure dynamic DNS ...firewall, your fully qualified domain names during this chapter. Configure the WAN options (optional). The configuration of the qualified browsers, as detailed in this phase (if required). Figure 2-1 3. In the Password field, type password Note that both entries are advanced features and changing them is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G...
... IP address automatically from the VPN firewall by DHCP. Start any of firewall and VPN features is detailed separately in "Qualified Web Browsers" on the WAN ports (optional). Configure dynamic DNS ...firewall, your fully qualified domain names during this chapter. Configure the WAN options (optional). The configuration of the qualified browsers, as detailed in this phase (if required). Figure 2-1 3. In the Password field, type password Note that both entries are advanced features and changing them is not usually required. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G...