Gateway Deployment | NETGEAR STM150EW3-100NAS specification

ProSecure Web/Email Security Threat Management Appliance STM150 Reference Manual

Gateway Deployment

Figure 2-1

In a typical gateway deployment scenario, a single STM150 appliance is installed at the gateway – between the firewall and the LAN core switch – to protect the network against all malware threats entering and leaving the gateway. Installing the STM150 behind the firewall protects it from DoS attacks.

2-2	Provisioning Threat Management Services

v1.1, March 2009

Image 22

NETGEAR STM150EW3-100NAS manual Gateway Deployment

Contents

NETGEAR, Inc EU Regulatory Compliance Statement TrademarksStatement of Conditions Bestätigung des Herstellers/Importeurs Voluntary Control Council for Interference Vcci Statement Additional Copyrights MD5 Product and Publication Details Zlib V1.1, March Contents Chapter Performing System Management Tasks Chapter Monitoring System Performance Page About This Manual Conventions, Formats, and Scope Revision History Manual Part Publication Version Description Number Date Chapter Introduction Key Features and Capabilities About Stream Scanning What Can You Do with an STM150? Service Registration Card with License Keys Front Panel Features Rear Panel Features Default IP Address, Login Name, and Password Location Choosing a Location for the STM150 Using the Rack Mounting Kit V1.1, March Provisioning Threat Management Services Choosing a Deployment Scenario Gateway Deployment Server Group Use the Installation Guide to Perform Initial Configuration Segmented LAN Deployment Logging In to the STM150 V1.1, March Registering the STM150 Click Register Email Security Use the Setup Wizard to Complete the ConfigurationSetup Wizard Options Web Security Email Notification Server Verifying the STM150 InstallationUpdate Settings Web Categories Testing Http Scanning Testing ConnectivityWhat to Do Next Configuring Network Settings Modifying System SettingsPerforming System Management Tasks V1.1, March Enabling Session Limits and Timeouts Scanning Exclusions On the menu, click Global Settings Scanning ExclusionsTo enter a scanning exclusion rule On the menu, click Administration Time Zone Setting the System TimeTo set the system time Specifying the Notification Server To specify a notification server Click Save Changes Customizing Email Alerts To enable system administrator email alerts To configure the Snmp settings Configuring Snmp SettingsOn the menu, click Administration Snmp Defining Trusted Snmp Hosts Supported MIB BrowsersTo define Snmp Traps Backing Up and Restoring Configurations Backing Up the STM150 Configuration Restoring a Configuration To Back Up the STM150 SettingsTo restore the STM150 settings Resetting to Factory Defaults Restarting the STM150 Enabling Remote Management Administering Software Updates Configuring Scheduled Updates Performing a Manual Update To configure scheduled updatesOn the menu, go to Administration Software Update Applying a Software Update that Requires a Reboot Administering Admin Login Timeouts and Passwords V1.1, March V1.1, March Default Scan Settings Chapter Customizing Scans Customizing Email Scanning Settings Email Security Anti-Virus Notification Settings on the menu End User Email Notification SettingsInsert Warning into Email Subject Line Smtp Append Safe Stamp Smtp & POP3 Send Warning Email When Malware Is FoundReplace Infected Attachment with Warning Message Email Content Filtering File Extension Filter by Password-protected AttachmentsFilter by Subject Keywords Filter by File Type Setting Up the Whitelist and Blacklist Protecting Against Email Spam To define the sender whitelist. On the menu, go to Email Security Anti-Spam Whitelist and Blacklist Configuring the Real-time Blacklist To define the recipient whitelist. On the menu, go to Configuring Distributed Spam Analysis To add a new provider To configure distributed spam analysis Customizing Web Scanning Settings Configuring Web Malware Scans Configuring Web Content Filtering V1.1, March V1.1, March Configuring Web URL Filtering White List Blacklist Http Tunneling Https Scan SettingsHttps Third Party Website Certificate Handling Show This Message When an SSL Connection Attempt Fails STM150 CA Certificate V1.1, March Certificate Management Web Security Https Scan Certificate Management Trusted Certificate Authorities To import a new certificate used for Https scansUntrusted Certificates Trusted Hosts To add hosts to the Host Access Control ListWeb Security Http and Https Trusted Hosts To delete hosts from the Host Access Control List Configuring FTP ScanWeb Security FTP V1.1, March Chapter Monitoring System Performance Viewing the System Status Using Statistics and Web Usage Data V1.1, March Monitoring Security Using the Network Diagnostic Tools Running DiagnosticsMonitoring Diagnostics Gathering Important Log Information Using the Realtime Traffic Diagnostic ToolsTo collect information about your STM150 Generate Network Statistics Report Using Reports to Optimize Protection and PerformanceWorking with Logs Querying Logs Sending Logs Using Logs to Identify Infected Clients Log Management Send Reports by Email Working with ReportsOn the menu, click Logs & Reports Scheduled Report Enabling Remote Troubleshooting Using Online SupportSupport Online Support Working with Hot Fixes To install a hot fixGo to Support Hot Fixes Sending Suspicious Files to Netgear for Analysis On the menu, go to Support Malware Analysis Appendix a Default Settings and Technical Specifications Table A-1. STM150 Default Configuration Settings STM150 specifications are listed in the table below Appendix B Related Documents Document Link V1.1, March Index N