NETGEAR UTM25-100NAS, UTM10EW-100NAS, UTM25EW-100NAS Advanced VPN Support for Both IPsec and SSL

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual

Dual WAN Ports for Increased Reliability or

Outbound Load Balancing (UTM25 Only)

The UTM25 has two broadband WAN ports. The second WAN port allows you to connect a second broadband Internet line that can be configured on a mutually-exclusive basis to:

•Provide backup and rollover if one line is inoperable, ensuring you are never disconnected.

•Load balance, or use both Internet lines simultaneously for outgoing traffic. The UTM25 balances users between the two lines for maximum bandwidth efficiency.

See “Network Planning for Dual WAN Ports (UTM25 Only)” on page B-1 for the planning factors to consider when implementing the following capabilities with dual WAN port gateways:

•Single or multiple exposed hosts.

•Virtual private networks.

Advanced VPN Support for Both IPsec and SSL

The UTM supports IPsec and SSL virtual private network (VPN) connections.

•IPsec VPN delivers full network access between a central office and branch offices, or between a central office and telecommuters. Remote access by telecommuters requires the installation of VPN client software on the remote computer.

–IPsec VPN with broad protocol support for secure connection to other IPsec gateways and clients.

–Bundled with a 1-user license of the NETGEAR ProSafe VPN Client software (VPN01L).

–Supports up to 10 (UTM10) or 25 (UTM25) site-to-site IPsec VPN tunnels.

•SSL VPN provides remote access for mobile users to selected corporate resources without requiring a pre-installed VPN client on their computers.

–Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, to provide client-free access with customizable user portals and support for a wide variety of user repositories.

–Browser based, platform-independent, remote access through a number of popular browsers, such as Microsoft Internet Explorer, Mozilla Firefox, or Apple Safari.

–Provides granular access to corporate resources based upon user type or group membership.

–Supports up to 5 (UTM10) or 13 (UTM25) dedicated SSL VPN tunnels.

Introduction 1-3

v1.0, September 2009