NETGEAR ProSafe FVS336G VPN Firewall Dual WAN Gigabit SSL & IPSEC VPN Firewall

Up for your consideration is a Netgear ProSafe firewall / VPN appliance. Includes unit and standard power cable only. The FVS336G provides the following key features: • Dual 10/100/1000 Mbps Gigabit Ethernet WAN ports forload balancing or failover protection of your Internet connection, providingincreased system reliability or increased throughput. • Built-in four-port 10/100/1000 Mbps Gigabit EthernetLAN switch for extremely fast data transfer between local network resources. • Advanced IPsec and SSL VPN support. • Advanced stateful packet inspection (SPI) firewall withmulti-NAT support. • Easy, web-based setup for installation and management. • Front panel LEDs for easy monitoring of status andactivity. • Flash memory for firmware upgrade. • Internal universal switching power supply. Dual WAN Ports for IncreasedReliability or Outbound Load Balancing The FVS336G has two broadband WANports. The second WAN port allows you to connect a second broadband Internetline that can be configured on a mutually-exclusive basis to: • Provide backup and rollover if one line isinoperable, ensuring you are never disconnected. • Load balance, or use both Internet lines simultaneouslyfor outgoing traffic. The FVS336G balances users between the two lines formaximum bandwidth efficiency. See “Network Planning for Dual WANPorts” on page B-1 for the planning factors to consider whenimplementing the following capabilities with dual WAN port gateways: • Single or multiple exposed hosts. • Virtual private networks. Advanced VPN Support forBoth IPsec and SSL The FVS336G supports IPsec and SSL virtual private network(VPN) connections. • IPsec VPN delivers full network access between acentral office and branch offices, or between a central office andtelecommuters. Remote access by telecommuters requires the installation of VPNclient software on the remote computer. – IPsec VPN with broad protocol support for secureconnection to other IPsec gateways and clients. – Bundled with the single-user license of the NETGEARProSafe VPN Client software (VPN01L) – Supports 25 concurrent IPsec VPN tunnels. • SSL VPN provides remote access for mobile users toselected corporate resources without requiring a pre-installed VPN client ontheir computers. – Uses the familiar Secure Sockets Layer (SSL) protocol,commonly used for e-commerce transactions, to provide client-free access withcustomizable user portals and support for a wide variety of user repositories. – Browser based, platform-independent, remote accessthrough a number of popular browsers, such as Microsoft Internet Explorer orApple Safari. – Provides granular access to corporate resources basedupon user type or group membership. – Supports 10 concurrent SSL VPN sessions. A Powerful, True Firewallwith Content Filtering Unlike simple Internet sharing NAT routers, the FVS336G isa true firewall, using stateful packet inspection (SPI) to defend againsthacker attacks. Its firewall features include: • Automatically detects and thwarts denial of service(DoS) attacks such as Ping of Death and SYN Flood. • Blocks unwanted traffic from the Internet to your LAN. • Blocks access from your LAN to Internet locations orservices that you specify as off-limits. • Prevents objectionable content from reaching your PCs.You can control access to Internet content by screening for Web services, Webaddresses, and keywords within Web addresses. You can configure the FVS336G tolog and report attempts to access objectionable Internet sites. • Permits scheduling of firewall policies by day andtime. • Logs security events such as blocked incoming traffic,port scans, attacks, and administrator logins. You can configure the FVS336G toe-mail the log to you at specified intervals. You can also configure theFVS336G to send immediate alert messages to your e-mail address or e-mail pagerwhenever a significant event occurs. Autosensing EthernetConnections with Auto Uplink Withits internal 4-port 10/100/1000 Mbps switch and dual 10/100/1000 WAN ports, theFVS336G can connect to either a 10 Mbps standard Ethernet network, a 100 MbpsFast Ethernet network, or a 1000 Mbps Gigabit Ethernet network. The four LANand two WAN interfaces are autosensing and capable of full-duplex orhalf-duplex operation. TheFVS336G incorporates Auto Uplink TM technology. Each Ethernet portwill automatically sense whether the Ethernet cable plugged into the portshould have a “normal” connection such as to a PC or an “uplink” connectionsuch as to a switch or hub. That port will then configure itself to the correctconfiguration. This feature eliminates the need to worry about crossovercables, as Auto Uplink will accommodate either type of cable to make the rightconnection. Extensive Protocol Support The FVS336G supports the Transmission ControlProtocol/Internet Protocol (TCP/IP) and Routing Information Protoco l (RIP). For further information about TCP/IP,refer to “Internet Configuration Requirements” on pageB-3 . • IP AddressSharing by NAT . The FVS336G allows many networked PCs to share an Internetaccount using only a single IP address, which may be statically or dynamicallyassigned by your Internet service provider (ISP). This technique, known as NAT,allows the use of an inexpensive single-user ISP account. • AutomaticConfiguration of Attached PCs by DHCP . The FVS336G dynamically assignsnetwork configuration information, including IP, gateway, and domain nameserver (DNS) addresses, to attached PCs on the LAN using the Dynamic HostConfiguration Protocol (DHCP). This feature greatly simplifies configuration ofPCs on your local network. • DNS Proxy .When DHCP is enabled and no DNS addresses are specified, the FVS336G providesits own address as a DNS server to the attached PCs. The FVS336G obtains actualDNS addresses from the ISP during connection setup and forwards DNS requestsfrom the LAN. • PPP overEthernet (PPPoE) . PPPoE is a protocol for connecting remote hosts to theInternet over a DSL connection by simulating a dial-up connection. This featureeliminates the need to run a login program such as EnterNet or WinPOET on yourPC. • Quality ofService (QoS) . Support for traffic prioritization.