ProSafe VPN Firewall 200 FVX538 Reference Manual
1-2 Introduction
v1.0, August 2006
• Login capability.
• Front panel LEDs for easy monitoring of status and activity.
• Flash memory for firmware upgrade.
• One U Rack mountable.
Dual WAN Ports for Increased Reliability or Outbound Load
Balancing
The FVX538 has two broadband WAN ports, WAN1 and WAN2, each capable of operating
independently at speeds of either 10 Mbps or 100 Mbps. The two WAN ports let you connect a
second broadb and Internet line that can be configured on a mutually-exclusive basis to:
• Provide backup and rollover if one line is inoperable, ensuring you are never disconnected.
• Load balance, or use both Internet lines simultaneously for the outgoing traffic. The firewall
balances users betwee n the two lines for maximum bandwidth efficiency.
See “Network Planning for Dual WAN Ports” on page C-1 for the planning factors to consider
when implementing the following capabilities with dual WAN port gateways:
• Single or multiple exposed hosts
• Virtual private networks
A Powerful, True Firewall with Content Filtering
Unlike simple Internet sharing NAT routers, the FVX538 is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• DoS protection. Automatically detects and thwarts DoS attacks such as Ping of Death, SYN
Flood, LAND Attack, and IP Spoofing.
•Secure Fi rewall. Blocks unwanted traffic from the Internet to your LAN.
•Block Sites. Blocks access from your LAN to Internet locations or services that you specify as
off-limits.
•Logs security incidents. The FVX538 will log security events such as blocked incoming
traffic, port scans, attacks, and administrator logins. You can configure the firewall to email
the log to you at specified intervals. You can also configure the firewall to send immediate
alert messages to your email address or email pager whenever a significant event occurs.