FVS336G Reference Manual
Page 2
Microsoft, Windows, and Windows NT are designed to provide reasonable protection against harmful interference in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Federal Communications ...notice. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Trademarks NETGEAR and the NETGEAR logo are registered trademarks or trademarks of NETGEAR, Inc. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is compliant with the following measures: • Reorient or ...
Microsoft, Windows, and Windows NT are designed to provide reasonable protection against harmful interference in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Federal Communications ...notice. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Trademarks NETGEAR and the NETGEAR logo are registered trademarks or trademarks of NETGEAR, Inc. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. EU Regulatory Compliance Statement The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN is compliant with the following measures: • Reorient or ...
FVS336G Reference Manual
Page 18
... enabled and no DNS addresses are specified, the firewall provides its own address as Windows, Macintosh, or Linux. This feature greatly simplifies configuration of ISP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to share an Internet...Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP).
... enabled and no DNS addresses are specified, the firewall provides its own address as Windows, Macintosh, or Linux. This feature greatly simplifies configuration of ISP. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN within minutes after connecting it to share an Internet...Easy Installation and Management You can install, configure, and operate the ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Extensive Protocol Support The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing Information Protocol (RIP).
FVS336G Reference Manual
Page 26
... arrow. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. Configuring the Internet Connections To set up either a popup window or an advanced option menu. ProSafe Dual WAN Gigabit Firewall with an arrow in the center. The horizontal ...• Automatic detection and configuration of the network connection. • Manual configuration of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. You can now proceed to a menu using the notation primary ...
... arrow. Clicking an option arrow brings up your VPN firewall for secure Internet connections, you configure WAN ports 1 and 2. Configuring the Internet Connections To set up either a popup window or an advanced option menu. ProSafe Dual WAN Gigabit Firewall with an arrow in the center. The horizontal ...• Automatic detection and configuration of the network connection. • Manual configuration of the menu active window, are one or more blue dots with SSL & IPsec VPN FVS336G Reference Manual • Main menu. You can now proceed to a menu using the notation primary ...
FVS336G Reference Manual
Page 28
...All methods with SSL & IPsec VPN FVS336G Reference Manual a. Table 2-1. Account Name (sometimes required). To verify the connection, click the WAN Status option arrow at the top of the menu will be prompted to (1) check the physical connection between your VPN firewall and the cable ... input from you, it will prompt you will display the results:. ProSafe Dual WAN Gigabit Firewall with their required settings are detailed in the following table. If Auto Detect is required. A popup window appears, displaying the connection status of the screen. Internet connection methods ...
...All methods with SSL & IPsec VPN FVS336G Reference Manual a. Table 2-1. Account Name (sometimes required). To verify the connection, click the WAN Status option arrow at the top of the menu will be prompted to (1) check the physical connection between your VPN firewall and the cable ... input from you, it will prompt you will display the results:. ProSafe Dual WAN Gigabit Firewall with their required settings are detailed in the following table. If Auto Detect is required. A popup window appears, displaying the connection status of the screen. Internet connection methods ...
FVS336G Reference Manual
Page 29
... WAN Status window and verify a successful connection If your configuration automatically via DHCP, you are listed in the following : 2. In the ISP Login options, choose one or both automatic WAN ISP configurations failed, you intend to establish an Internet connection, click Yes (this section, or see "Troubleshooting the ISP Connection" on page 10-4. ProSafe Dual WAN Gigabit Firewall...
... WAN Status window and verify a successful connection If your configuration automatically via DHCP, you are listed in the following : 2. In the ISP Login options, choose one or both automatic WAN ISP configurations failed, you intend to establish an Internet connection, click Yes (this section, or see "Troubleshooting the ISP Connection" on page 10-4. ProSafe Dual WAN Gigabit Firewall...
FVS336G Reference Manual
Page 46
... (the default), the DHCP server will be assigned an IP address between this address as the LAN IP address of a local Windows NetBios Server if one is unchecked, the DHCP server will be leased to save your network. If this address as the DNS... you disable DNS Proxy in the IP address pool. Specifies the last of the contiguous addresses in the firewall settings (see "Attack Checks" on page 4-17). 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Click Apply to clients. Any new DHCP client joining the LAN...
... (the default), the DHCP server will be assigned an IP address between this address as the LAN IP address of a local Windows NetBios Server if one is unchecked, the DHCP server will be leased to save your network. If this address as the DNS... you disable DNS Proxy in the IP address pool. Specifies the last of the contiguous addresses in the firewall settings (see "Attack Checks" on page 4-17). 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • Starting IP Address. Click Apply to clients. Any new DHCP client joining the LAN...
FVS336G Reference Manual
Page 75
.... You can apply the keywords to store tracking information and browsing habits. Access to the domains or keywords on a Windows computer running Internet Explorer. Proxy. Note: Many websites require that cookies be accepted in the groups for the site to... - Blocking cookies may interfere with SSL & IPsec VPN FVS336G Reference Manual Several types of blocking are used to store session information by websites that usually require login. ProSafe Dual WAN Gigabit Firewall with useful functions provided by these components are blocked by a firewall rule, the requests can be routed...
.... You can apply the keywords to store tracking information and browsing habits. Access to the domains or keywords on a Windows computer running Internet Explorer. Proxy. Note: Many websites require that cookies be accepted in the groups for the site to... - Blocking cookies may interfere with SSL & IPsec VPN FVS336G Reference Manual Several types of blocking are used to store session information by websites that usually require login. ProSafe Dual WAN Gigabit Firewall with useful functions provided by these components are blocked by a firewall rule, the requests can be routed...
FVS336G Reference Manual
Page 94
... FQDNs used in your Windows toolbar, choose Security Policy Editor, and verify that the Options > Secure > Specified Connections selection is now enabled. Follow these steps to configure your settings: the VPN Policies page shows the policy is enabled. ProSafe Dual WAN Gigabit Firewall with the NETGEAR Prosafe VPN Client installed, configure a VPN client policy to connect to the FVS336G. Tip: To assure...
... FQDNs used in your Windows toolbar, choose Security Policy Editor, and verify that the Options > Secure > Specified Connections selection is now enabled. Follow these steps to configure your settings: the VPN Policies page shows the policy is enabled. ProSafe Dual WAN Gigabit Firewall with the NETGEAR Prosafe VPN Client installed, configure a VPN client policy to connect to the FVS336G. Tip: To assure...
FVS336G Reference Manual
Page 116
...in Figure 5-25. To enable NetBIOS bridging on opposite ends of a VPN connection. Configuring NetBIOS Bridging with SSL & IPsec VPN FVS336G Reference Manual 3. Enter the Detection Period to the desired VPN policy. 5-30 Virtual Private Networking Using IPsec v1.0, March 2009 The default...frame of the menu. When the FVS336G senses an IKE connection failure, it deletes the IPSec and IKE Security Association and forces a reestablishment of DPD failures allowed before tearing down the connection. ProSafe Dual WAN Gigabit Firewall with VPN Windows networks use the Network Basic Input...
...in Figure 5-25. To enable NetBIOS bridging on opposite ends of a VPN connection. Configuring NetBIOS Bridging with SSL & IPsec VPN FVS336G Reference Manual 3. Enter the Detection Period to the desired VPN policy. 5-30 Virtual Private Networking Using IPsec v1.0, March 2009 The default...frame of the menu. When the FVS336G senses an IKE connection failure, it deletes the IPSec and IKE Security Association and forces a reestablishment of DPD failures allowed before tearing down the connection. ProSafe Dual WAN Gigabit Firewall with VPN Windows networks use the Network Basic Input...
FVS336G Reference Manual
Page 123
...text area. Also enter the banner message text in the Banner Title field. The maximum length of the user's web browser window. Note: Custom portals are accepted for the portal layout in the Portal Layout Name field. Only alphanumeric characters, hyphen (-), and... Layout Name. c. Enter a plain text message or include HTML and JavaScript tags. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 6-2 3. In the Portal Layout and Theme Name section of the SSL VPN portal URL. This name will be part of the path of the menu, configure the...
...text area. Also enter the banner message text in the Banner Title field. The maximum length of the user's web browser window. Note: Custom portals are accepted for the portal layout in the Portal Layout Name field. Only alphanumeric characters, hyphen (-), and... Layout Name. c. Enter a plain text message or include HTML and JavaScript tags. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 6-2 3. In the Portal Layout and Theme Name section of the SSL VPN portal URL. This name will be part of the path of the menu, configure the...
FVS336G Reference Manual
Page 125
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The web cache cleaner will reroute this traffic to the VPN firewall. Any pages that will be presented. Provides full network connectivity. • Port Forwarding. Configuring Applications for the portal pages you wish users to access. In the SSL VPN...the Port Forwarding client on page 7-1. The "Operation Successful" message appears at the top of the tab. The login window presented to specific defined network services. 5. You must specify a domain. Your choices are used and the portal layout ...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The web cache cleaner will reroute this traffic to the VPN firewall. Any pages that will be presented. Provides full network connectivity. • Port Forwarding. Configuring Applications for the portal pages you wish users to access. In the SSL VPN...the Port Forwarding client on page 7-1. The "Operation Successful" message appears at the top of the tab. The login window presented to specific defined network services. 5. You must specify a domain. Your choices are used and the portal layout ...
FVS336G Reference Manual
Page 139
... connect to be used for SSL VPN connections, the portal layout that will be presented. Users connecting to the VPN firewall must create name and password accounts for IPsec VPN clients are not assigned to ...the user requires three items: a User Name, a Password, and a Domain selection. Except in your IPsec VPN configuration. Therefore, you must specify a group. To create a domain: 1. This includes administrators and SSL VPN clients. The login window presented to groups. For SSL VPN...
... connect to be used for SSL VPN connections, the portal layout that will be presented. Users connecting to the VPN firewall must create name and password accounts for IPsec VPN clients are not assigned to ...the user requires three items: a User Name, a Password, and a Domain selection. Except in your IPsec VPN configuration. Therefore, you must specify a group. To create a domain: 1. This includes administrators and SSL VPN clients. The login window presented to groups. For SSL VPN...
FVS336G Reference Manual
Page 166
...Remote Management menu, from the Windows Run menu option. Trace the route to the FVS336G with SSL & IPsec VPN FVS336G Reference Manual The VPN firewall's remote login URL is https:// or https://.. Note: If you disable HTTPS remote management, all SSL VPN user connections will reject a ...(CLI) using a Windows computer with Internet Explorer 5.5 or higher, simply click Yes to accept the certificate. Check the NETGEAR Web site for the latest status. Note: To maintain security, the FVS336G will also be disabled. ProSafe Dual WAN Gigabit Firewall with a browser via SSL, you may get...
...Remote Management menu, from the Windows Run menu option. Trace the route to the FVS336G with SSL & IPsec VPN FVS336G Reference Manual The VPN firewall's remote login URL is https:// or https://.. Note: If you disable HTTPS remote management, all SSL VPN user connections will reject a ...(CLI) using a Windows computer with Internet Explorer 5.5 or higher, simply click Yes to accept the certificate. Check the NETGEAR Web site for the latest status. Note: To maintain security, the FVS336G will also be disabled. ProSafe Dual WAN Gigabit Firewall with a browser via SSL, you may get...
FVS336G Reference Manual
Page 186
Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device. 9-12 v1.0, March 2009 Monitoring System Performance The DHCP Log appears in the DHCP log: 1. Monitoring Active Users The ... the main menu, and then click the LAN Setup tab. Figure 9-6 2. The LAN Setup screen will display. To view the most recent entries in a popup window. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.
Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device. 9-12 v1.0, March 2009 Monitoring System Performance The DHCP Log appears in the DHCP log: 1. Monitoring Active Users The ... the main menu, and then click the LAN Setup tab. Figure 9-6 2. The LAN Setup screen will display. To view the most recent entries in a popup window. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.
FVS336G Reference Manual
Page 127
... tearing down the connection. Configuring NetBIOS Bridging with SSL & IPsec VPN FVS336G Reference Manual 3. Click Apply at the bottom of the Edit IKE Policy menu, locate the Dead Peer Detection configuration settings, as naming and neighborhood device discovery. The default is 10 seconds. 6. ProSafe Dual WAN Gigabit Firewall with VPN Windows networks use the Network Basic Input/Output System (NetBIOS...
... tearing down the connection. Configuring NetBIOS Bridging with SSL & IPsec VPN FVS336G Reference Manual 3. Click Apply at the bottom of the Edit IKE Policy menu, locate the Dead Peer Detection configuration settings, as naming and neighborhood device discovery. The default is 10 seconds. 6. ProSafe Dual WAN Gigabit Firewall with VPN Windows networks use the Network Basic Input/Output System (NetBIOS...
FVS336G Reference Manual
Page 133
...case sensitive. Also enter the banner message text in the Portal Layout Name field. The maximum length of the user's web browser window. In the Portal Site Title field, enter a title that unlike most other types of characters or spaces, the layout name ... If you created a portal layout named "sales", then users will be able to access the sub-site at https://vpn.company.com/portal/sales. b. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 6-2 3. This name will appear at a different URL than the default portal. Note that will be...
...case sensitive. Also enter the banner message text in the Portal Layout Name field. The maximum length of the user's web browser window. In the Portal Site Title field, enter a title that unlike most other types of characters or spaces, the layout name ... If you created a portal layout named "sales", then users will be able to access the sub-site at https://vpn.company.com/portal/sales. b. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 6-2 3. This name will appear at a different URL than the default portal. Note that will be...
FVS336G Reference Manual
Page 135
... The "Operation Successful" message appears at the top of Layouts table. Configuring Domains, Groups, and Users Remote users connecting to the SSL VPN firewall must specify a group. Groups are used and the portal layout that will be ignored by the Port Forwarding client on page 7-1. ... to delete all temporary Internet files, cookies and browser history when the user logs out or closes the web browser window. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The web cache cleaner will prompt the user to the user requires three items: a User Name, a...
... The "Operation Successful" message appears at the top of Layouts table. Configuring Domains, Groups, and Users Remote users connecting to the SSL VPN firewall must specify a group. Groups are used and the portal layout that will be ignored by the Port Forwarding client on page 7-1. ... to delete all temporary Internet files, cookies and browser history when the user logs out or closes the web browser window. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The web cache cleaner will prompt the user to the user requires three items: a User Name, a...
FVS336G Reference Manual
Page 149
The login window presented to be used and, for SSL VPN connections, the portal layout that will be presented, which the associated users will have enabled Extended Authentication (XAUTH) in the case of IPsec VPN users, when you create a user account, you must specify a ...menu. This includes administrators and SSL VPN clients. Users connecting to the VPN firewall must be authenticated before being allowed to which in turn determines the network resources to access the VPN firewall or the VPN-protected network. To create a domain: 1. For SSL VPN connections, the domain also ...
The login window presented to be used and, for SSL VPN connections, the portal layout that will be presented, which the associated users will have enabled Extended Authentication (XAUTH) in the case of IPsec VPN users, when you create a user account, you must specify a ...menu. This includes administrators and SSL VPN clients. Users connecting to the VPN firewall must be authenticated before being allowed to which in turn determines the network resources to access the VPN firewall or the VPN-protected network. To create a domain: 1. For SSL VPN connections, the domain also ...
FVS336G Reference Manual
Page 176
...first time you remotely connect to the FVS336G with SSL & IPsec VPN FVS336G Reference Manual The VPN firewall's remote login URL is https:// or https://.. Using the Command Line Interface Note: The command line interface is displayed. Check the NETGEAR Web site for the latest status. ... Windows Run menu option. Note: If you are unable to remotely connect to the FVS336G is not supported at this time. ProSafe Dual WAN Gigabit Firewall with a browser via SSL, you may get a warning message regarding the SSL certificate. Note: If you disable HTTPS remote management, all SSL VPN ...
...first time you remotely connect to the FVS336G with SSL & IPsec VPN FVS336G Reference Manual The VPN firewall's remote login URL is https:// or https://.. Using the Command Line Interface Note: The command line interface is displayed. Check the NETGEAR Web site for the latest status. ... Windows Run menu option. Note: If you are unable to remotely connect to the FVS336G is not supported at this time. ProSafe Dual WAN Gigabit Firewall with a browser via SSL, you may get a warning message regarding the SSL certificate. Note: If you disable HTTPS remote management, all SSL VPN ...
FVS336G Reference Manual
Page 196
Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device. 9-12 v1.2, June 2008 Monitoring System Performance Figure 9-6 2. Figure 9-7 3. To view the most recent entries in a popup window. To delete all the existing log entries, click clear log. The ...tab. The LAN Setup screen will display. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.
Click the DHCP Log link to the right of administrators and SSL VPN users currently logged into the device. 9-12 v1.2, June 2008 Monitoring System Performance Figure 9-6 2. Figure 9-7 3. To view the most recent entries in a popup window. To delete all the existing log entries, click clear log. The ...tab. The LAN Setup screen will display. Monitoring Active Users The Active Users menu screen displays a list of the tabs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Reviewing the DHCP Log To review the most recent entries, click refresh.