NETGEAR fvs114 manual Powerful, True Firewall with Content Filtering, Security

Reference Manual for the ProSafe VPN Firewall FVS114

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT firewalls, the FVS114 is a true firewall, using stateful packet inspection to defend against hacker attacks. Its firewall features include:

•DoS protection.

Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND Attack, and IP Spoofing.

•Blocks unwanted traffic from the Internet to your LAN.

•Blocks access from your LAN to Internet locations or services that you specify as off-limits.

•Logs security incidents.

The FVS114 logs security events such as blocked incoming traffic, port scans, attacks, and administrator logins. You can configure the firewall to email the log to you at specified intervals. You can also configure the firewall to send immediate alert messages to your e-mail address or email pager whenever a significant event occurs.

•With its content filtering feature, the FVS114 prevents objectionable content from reaching your PCs. The firewall allows you to control access to Internet content by screening for keywords within Web addresses. You can configure the firewall to log and report attempts to access objectionable Internet sites.

Security

The FVS114 VPN Firewall is equipped with several features designed to maintain security, as described in this section.

•PCs Hidden by NAT

NAT opens a temporary path to the Internet for requests originating from the local network. Requests originating from outside the LAN are discarded, preventing users outside the LAN from finding and directly accessing the PCs on the LAN.

•Port Forwarding with NAT

Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the firewall allows you to direct incoming traffic to specific PCs based on the service port number of the incoming request, or to one designated “DNS” host computer. You can specify forwarding of single ports or ranges of ports.

2-2 Introduction

202-10098-01, April 2005