NETGEAR FVX538NA manual Powerful, True Firewall with Content Filtering

ProSafe VPN Firewall 200 FVX538 Reference Manual

•Login capability.

•Front panel LEDs for easy monitoring of status and activity.

•Flash memory for firmware upgrade.

•One U Rack mountable.

Dual WAN Ports for Increased Reliability or Outbound Load Balancing

The FVX538 has two broadband WAN ports, WAN1 and WAN2, each capable of operating independently at speeds of either 10 Mbps or 100 Mbps. The two WAN ports let you connect a second broadband Internet line that can be configured on a mutually-exclusive basis to:

•Provide backup and rollover if one line is inoperable, ensuring you are never disconnected.

•Load balance, or use both Internet lines simultaneously for the outgoing traffic. The firewall balances users between the two lines for maximum bandwidth efficiency.

See “Network Planning for Dual WAN Ports” on page C-1 for the planning factors to consider when implementing the following capabilities with dual WAN port gateways:

•Single or multiple exposed hosts

•Virtual private networks

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the FVX538 is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include:

•DoS protection. Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND Attack, and IP Spoofing.

•Secure Firewall. Blocks unwanted traffic from the Internet to your LAN.

•Block Sites. Blocks access from your LAN to Internet locations or services that you specify as off-limits.

•Logs security incidents. The FVX538 will log security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the firewall to email the log to you at specified intervals. You can also configure the firewall to send immediate alert messages to your email address or email pager whenever a significant event occurs.

1-2 Introduction

v1.0, August 2006