FVS336G Reference Manual
Page 1
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA March 2009 202-10257-04 v1.0
FVS336G Reference Manual
Page 2
.... Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the instructions, may occur due to the use or application of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this equipment does cause...
.... Bestätigung des Herstellers/Importeurs Es wird hiermit bestätigt, daß das ProSafe Dual WAN Gigabit Firewall with the instructions, may occur due to the use or application of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this equipment does cause...
FVS336G Reference Manual
Page 5
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 This software is not required. 2. Mark Adler: [email protected] The...
... format) Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number FVS336G March 2009 VPN Firewall ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN Business English 202-10257-04 1.0 v 1.0, March 2009 This software is not required. 2. Mark Adler: [email protected] The...
FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN...
FVS336G Reference Manual
Page 9
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Port Triggering 4-24 Setting a Schedule to Block or Allow Specific Traffic 4-26 Configuring a Bandwidth Profile 4-26 Configuring Session Limits 4-28 E-Mail Notifications of Event Logs and Alerts 4-29 Administrator Tips ...4-29 Chapter 5 Virtual Private Networking Using IPsec Considerations for Dual WAN Port Systems 5-1 Using the VPN...
FVS336G Reference Manual
Page 10
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Domains, Groups, and Users 6-7 Configuring Applications for Port Forwarding 6-7 Adding Servers ...6-8 Adding A New Host Name 6-9 Configuring the SSL VPN Client 6-10 Configuring ...
FVS336G Reference Manual
Page 11
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Changing Passwords and Administrator Settings 8-8 Enabling Remote Management Access 8-10 Using the Command Line Interface 8-12 Using an SNMP... 8-18 Chapter 9 Monitoring System Performance Enabling the Traffic Meter 9-1 Activating Notification of Events and Alerts 9-4 Viewing Firewall Logs ...9-6 Viewing Router Configuration and System Status 9-7 Monitoring the Status of WAN Ports 9-9 Monitoring Attached Devices 9-10 Reviewing the DHCP Log 9-12 Monitoring Active Users 9-12 Viewing Port Triggering Status...
FVS336G Reference Manual
Page 12
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Appendix A Default Settings and Technical Specifications Appendix B Related Documents Appendix C Network Planning for Dual WAN Ports What You Will Need to Do Before You Begin C-1 Cabling and Computer Hardware Requirements C-3 Computer Network Configuration Requirements C-3 Internet ...Authentication Why do I need Two-Factor Authentication D-1 What are the benefits of Two-Factor Authentication D-1 What is Two-Factor Authentication D-2 NETGEAR Two-Factor Authentication Solutions D-2 Index xii v1.0, March 2009
FVS336G Reference Manual
Page 13
...: This format is used to highlight a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in this manual is intended for readers with SSL & IPsec...
...: This format is used to highlight a procedure that will save time or resources. About This Manual The NETGEAR® ProSafe™ Dual WAN Gigabit Firewall with SSL & IPsec VPN Reference Manual describes how to install, configure and troubleshoot a ProSafe Dual WAN Gigabit Firewall with intermediate computer and networking skills. The information in this manual is intended for readers with SSL & IPsec...
FVS336G Reference Manual
Page 14
... topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. Revision History Part Number Version Number Date Description... to take heed of this notice may result in Appendix B, "Related Documents.". website at http://kbserver.netgear.com/products/FVS336G.asp. For more information about network, Internet, firewall, and VPN technologies, see the links to the...
... topics • Update the Certificate management topic • Correct the firewall scheduling topic xiv v1.0, March 2009 Failure to align with SSL & IPsec VPN FVS336G Reference Manual Danger: This is a safety warning. ProSafe Dual WAN Gigabit Firewall with router firmware update. Revision History Part Number Version Number Date Description... to take heed of this notice may result in Appendix B, "Related Documents.". website at http://kbserver.netgear.com/products/FVS336G.asp. For more information about network, Internet, firewall, and VPN technologies, see the links to the...
FVS336G Reference Manual
Page 15
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one or two external broadband access devices such as cable modems or DSL modems. Dual wide area network (WAN) ports allow you to increase ... IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in case of failure of your Internet connection, ...
Chapter 1 Introduction The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN connects your local area network (LAN) to the Internet through one or two external broadband access devices such as cable modems or DSL modems. Dual wide area network (WAN) ports allow you to increase ... IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall with multi-NAT support. 1-1 v1.0, March 2009 As a complete security solution, the FVS336G incorporates a powerful and flexible firewall to maintain a backup connection in case of failure of your Internet connection, ...
FVS336G Reference Manual
Page 16
... and clients. - Dual WAN Ports for mobile users to consider when implementing the following capabilities with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (...a mutually-exclusive basis to provide client-free access with customizable user portals and support for outgoing traffic. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
... and clients. - Dual WAN Ports for mobile users to consider when implementing the following capabilities with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. Bundled with the single-user license of the NETGEAR ProSafe VPN Client software (...a mutually-exclusive basis to provide client-free access with customizable user portals and support for outgoing traffic. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Easy, web-based setup for installation and management. • Front panel LEDs for...
FVS336G Reference Manual
Page 17
... logins. Autosensing Ethernet Connections with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can control access to Internet content by day and time. • Logs security events such as to...; Blocks access from reaching your email address or email pager whenever a significant event occurs. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Provides granular access to ...
... logins. Autosensing Ethernet Connections with Auto Uplink With its internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, the FVS336G can control access to Internet content by day and time. • Logs security events such as to...; Blocks access from reaching your email address or email pager whenever a significant event occurs. ProSafe Dual WAN Gigabit Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G is a true firewall, using stateful packet inspection (SPI) to defend against hacker attacks. Provides granular access to ...
FVS336G Reference Manual
Page 18
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the Internet over Ethernet (PPPoE). This feature greatly simplifies configuration of ISP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and ...
...ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to the Internet over Ethernet (PPPoE). This feature greatly simplifies configuration of ISP. Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and ...
FVS336G Reference Manual
Page 19
... Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Introduction 1-5 v1.0, March 2009 one user license. • Warranty and Support Information Card. ProSafe Dual WAN Gigabit Firewall with...
... Support NETGEAR offers the following items: • ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN. • One AC power cable. • Rubber feet. • One Category 5 (Cat5) Ethernet cable. • Installation Guide, FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • VPN Wizard. Introduction 1-5 v1.0, March 2009 one user license. • Warranty and Support Information Card. ProSafe Dual WAN Gigabit Firewall with...
FVS336G Reference Manual
Page 20
...NETGEAR dealer. SPEED LINK/ACT (Link and Activity) Off On (Green) On (Amber) Off On (Green) Blinking (Green) Off The WAN port is either not enabled or has no link. 1-6 Introduction v1.0, March 2009 Data is being used because the port is in standby for repair. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Reference Manual If any of each LED is described in the following table: Table 1-1. Writing to Flash memory (during upgrading or resetting to the VPN firewall. Keep the carton,...
...NETGEAR dealer. SPEED LINK/ACT (Link and Activity) Off On (Green) On (Amber) Off On (Green) Blinking (Green) Off The WAN port is either not enabled or has no link. 1-6 Introduction v1.0, March 2009 Data is being used because the port is in standby for repair. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G... Reference Manual If any of each LED is described in the following table: Table 1-1. Writing to Flash memory (during upgrading or resetting to the VPN firewall. Keep the carton,...
FVS336G Reference Manual
Page 21
... Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The LAN port is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. WAN Ethernet ports: Two independent N-way automatic...
... Panel Features The rear panel of the ProSafe Dual WAN Gigabit Firewall with a connected Ethernet device. LAN Ethernet ports: Four switched N-way automatic speed negotiating, Auto MDI/MDIX, Gigabit Ethernet ports with SSL & IPsec VPN FVS336G Reference Manual Table 1-1. The LAN port is operating at 10 Mbps. ProSafe Dual WAN Gigabit Firewall with RJ-45 connectors. 3. WAN Ethernet ports: Two independent N-way automatic...
FVS336G Reference Manual
Page 22
... firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G ...Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications.
... firewall's Web Management Interface for configuring the VPN firewall, SSL VPN users should choose a browser that Java is only required for the SSL VPN portal, not the Web Management Interface. 1-8 Introduction v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G ...Reference Manual Default IP Address, Login Name, and Password Location Check the label on the bottom of the FVS336G's enclosure if you need a reminder of applications.
FVS336G Reference Manual
Page 23
...FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this time. Configure the Internet connections to set up and configure your VPN firewall. See "Configuring the Internet Connections" on page 2-10. 2-1 v1.0, March 2009 Configure the WAN mode (required for complete steps. Select either dedicated (single WAN...You can also program the WAN traffic meters at : http://kbserver.netgear.com. 2. A PDF of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for dual WAN operation). See "Logging into the VPN Firewall Router" on page 2-2 ...
...FVS336G ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is on the NETGEAR website at this time. Configure the Internet connections to set up and configure your VPN firewall. See "Configuring the Internet Connections" on page 2-10. 2-1 v1.0, March 2009 Configure the WAN mode (required for complete steps. Select either dedicated (single WAN...You can also program the WAN traffic meters at : http://kbserver.netgear.com. 2. A PDF of the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN for dual WAN operation). See "Logging into the VPN Firewall Router" on page 2-2 ...
FVS336G Reference Manual
Page 24
...). However, these are in this phase (if required). The configuration of firewall and VPN features is not usually required. In the User field, type admin 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. To connect and log in "Qualified Web Browsers" on ...page 1-8. 2. Each of the qualified browsers, as detailed in to the VPN firewall follow these tasks is detailed separately in...
...). However, these are in this phase (if required). The configuration of firewall and VPN features is not usually required. In the User field, type admin 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 5. To connect and log in "Qualified Web Browsers" on ...page 1-8. 2. Each of the qualified browsers, as detailed in to the VPN firewall follow these tasks is detailed separately in...