5 VPN Tunnels for Secure Remote Access
The NETGEAR® ProSafe 8-port Gigabit VPN Firewall provides both secure IPsec site-to-site tunnels and IPsec secure access for remote clients. Employing a true firewall with customizable firewall rules, this VPN router is a high-performance, SNMP-manageable, network solution that furnishes multidimensional security including denial-of-service (DoS) protection, stateful packet inspection (SPI), URL keyword filtering, logging, reporting, and real-time alerts. Eight Gigabit LAN ports keep your data moving at top speed. With Network Address Translation (NAT) routing and classical routing, all the users in your small office can access your broadband connection at the same time.
Secure
The FVS318G takes care of all your security needs, with support of up to 5 simultaneous IPsec VPN tunnels, hacker protection via SPI firewall, DoS attack protection, configurable hardware DMZ port, and multiple VPN pass-through. It features SYSLOG, email reporting, and integrates with network monitoring tools via SNMP. IKE authentication provides peace of mind against unauthorised VPN network access and supports industry-strength encryption algorithms to ensure protection and privacy of your sensitive data. Dedicated DMZ enables you to separate guest traffic from production data. The ProSafe 8-port Gigabit VPN Firewall provides optimal value and defence against network security threats.
Reliable
At the core of the FVS318G is NETGEAR-tested and proven firewall and VPN technology. The rugged metal unit houses advanced, high-quality electronics, and is backed by a lifetime warranty.
Easy to Use
Auto Detect connects to your ISP quickly; the user-friendly Web-based ProSafe Control Center configuration screen and install assistant reduce setup time. The IPsec VPN wizard automates IPsec VPN configuration and secure remote makes it simple to connect to multiple sites. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. This well-built firewall has an integrated 8-port 10/100/1000 Mbps switch and is compatible with Windows®, UNIX®, Macintosh®, and Linux® OS. Auto Uplink on the all ports eliminates the need for crossover cables.
Physical Interfaces
LAN ports: eight (8) 10/100/1000 Mbps auto-sensing, Auto Uplink™ RJ-45 ports; one LAN port can be a dedicated hardware DMZ port
WAN ports: one (1) 10/100/1000 Mbps auto-sensing, Auto Uplink RJ-45 ports to connect to any broadband modem, such as DSL or cable
SPI Firewall
Stateful Packet Inspection (SPI): prevents Denial-Of-Service (DoS) attacks, provides stealth mode, User support: unrestricted
Keyword filtering on: address, service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH, etc.), protocol, Web URL port/service blocking, file extension (ex. Java, URL, ActiveX)
SIP Application Layer Gateway
SIP compatibility list: Linksys SPA-901, Linksys SPA-941, SNOM M3, Cisco 7940G, X-Lite 3.0 (software for phones, D-Link DPH-140S, Grandstream GXP-2000, Polycom SoundStation 6000, Siemens C450, Aastra 51i
IPsec VPN Functionality
Five (5) dedicated IPsec VPN tunnels
Manual key and Internet Key Exchange Security Association (IKE SA) assignment: pre-shared key signature, RSA/DSA signature
Key life and IKE lifetime time settings
Diffie-Hellman groups 1 and 2
Operating modes: main, aggressive
Fully qualified domain name (FQDN) support for dynamic IP address VPN connections
IPsec Support
IPsec-based 56-bit (DES), 168-bit (3DES), or 256-bit (AES) encryption algorithm
MD5 or SHA-1 hashing algorithm
PKI features with X.509 v.3 certificate support
Remote access VPN (client-to-site), site-to-site VPN
IPsec NAT traversal (VPN passthrough)
Two-factor authentication support
Routing Modes of Operation
Many-to-one Multi-network Address Translation (NAT)
Unrestricted users per port
IP Address Assignment
Static IP address assignment
Internal DHCP server on LAN
Performance Features
Throughput: LAN-to-WAN: 25 Mbps total, IPsec VPN (3DES): 7 Mbps
Connections: 6,000 concurrent sessions
Administration Interface
Web graphic user interface
User name and password protected
Secure remote management support authenticated through IP address (or IP address range) and password
Configuration changes/upgrades through Web GUI
Two-factor authentication support for administrator interface
Logging
Functions
VPN wizard to simplify configuration of IPsec VPNs
Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE)
MAC address cloning/spoofing
Network Time Protocol NTP support
Diagnostic tools (ping, DNS lookup, trace route, other)
Auto Uplink on switch ports
L3 Quality of Service (QoS) LAN-to-WAN and WAN-to-LAN (ToS)
Protocol Support
Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
IP addressing: DHCP (client and server)
Routing: RIP v1, RIP v2 (static routing, dynamic routing)
VPN/security: IPsec (ESP), IKE, PKI, HTTPS
Maintenance
Save/restore configuration, restore defaults, upgrades via Web browser, display statistics
Hardware Specifications
Memory: 8 MB flash, 32 MB DRAM
Power adapter: 12V DC, 1.5A plug is localised to country of sale
Dimensions: 190 x 125 x 35 cm (7.5 x 4.9 x 1.4 in)
Environmental Specifications
Operating temperature: 0° to 45°C (32° to 113°F)
Operating humidity: 95% maximum relative humidity, non-condensing
Warranty
Firewall: NETGEAR® Lifetime Warranty
Power supply: NETGEAR 3-Year Warranty
Package Contents
ProSafe Gigabit Firewall (FVS318G)
Warranty/support information card
Resource CD with single user ProSafe VPN Client Software licence
