NETGEAR UTM25EW-100NAS, UTM25-100NAS, UTM10EW-100NAS specification

ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual

The diagrams and table below show how the WAN mode selection relates to VPN configuration.

WAN Auto-Rollover: FQDN Required for VPN

UTM25

Rest of		UTM25		UTM25
UTM25		WAN Port		Rollover
UTM25		WAN Port		Rollover
Functions		Functions		Control

Figure 7-1

WAN Load Balancing: FQDN Optional for VPN

UTM25

Rest of		UTM25		Load
Rest of		UTM25		Load
UTM25		WAN Port		Balancing
UTM25		WAN Port		Balancing
Functions		Functions		Control
Functions		Functions		Control

Figure 7-2

	WAN 1 Port
	WAN 1 Port	Internet
	WAN 2 Port	Internet
	WAN 2 Port

Same FQDN required for both WAN ports

	WAN 1 Port
	WAN 1 Port	Internet
	WAN 2 Port	Internet
	WAN 2 Port

FQDN required for dynamic IP addresses FQDN optional for static IP addresses

Table 7-1summarizes the WAN addressing requirements (FQDN or IP address) for a VPN tunnel in either dual WAN mode.

Table 7-1. IP Addressing for VPNs in Dual WAN Port Systems

	Configuration and WAN IP address		Rollover Modea	Load Balancing Mode

	VPN “Road Warrior”	Fixed	FQDN required	FQDN Allowed (optional)
	(client-to-gateway)
	(client-to-gateway)	Dynamic	FQDN required	FQDN required
		Dynamic	FQDN required	FQDN required

	VPN “Gateway-to-Gateway”	Fixed	FQDN required	FQDN Allowed (optional)

		Dynamic	FQDN required	FQDN required

	VPN “Telecommuter”	Fixed	FQDN required	FQDN Allowed (optional)
	(client-to-gateway through a
	(client-to-gateway through a	Dynamic	FQDN required	FQDN required
	NAT router)	Dynamic	FQDN required	FQDN required
	NAT router)

a. All tunnels must be re-established after a rollover using the new WAN IP address.

7-2	Virtual Private Networking Using IPsec Connections

v1.0, September 2009

Image 212

NETGEAR UTM25EW-100NAS, UTM25-100NAS, UTM10EW-100NAS manual IP Addressing for VPNs in Dual WAN Port Systems

Contents

NETGEAR, Inc Trademarks Statement of ConditionsEU Regulatory Compliance Statement Bestätigung des Herstellers/Importeurs Voluntary Control Council for Interference Vcci Statement Additional CopyrightsAES Terms MD5 Product and Publication Details Model NumberPublication Date September Product Family Product Name V1.0, September Contents Configuring Secondary WAN Addresses Classical Routing UTM10 and UTM25 Chapter LAN Configuration Chapter Content Filtering and Optimizing Scans Chapter Virtual Private Networking Using SSL Connections Features That Reduce Traffic Features That Increase TrafficUsing QoS and Bandwidth Assignment to Shift the Traffic Mix Changing Passwords and Administrator Settings Configuring Logging, Alerts, and Event Notifications Configuring the E-mail Notification ServerConfiguring and Activating System, E-mail, and Syslog Logs Configuring and Activating Firewall Logs Testing the LAN Path to Your UTM Testing the Path from Your PC to a Remote DeviceRestoring the Default Configuration and Password Problems with Date and Time Appendix D Two Factor Authentication Xvi About This Manual Conventions, Formats, and Scope How to Print This Manual Revision History Chapter Introduction Key Features and Capabilities Advanced VPN Support for Both IPsec and SSL Powerful, True Firewall Stream Scanning for Content Filtering Security Features Autosensing Ethernet Connections with Auto Uplink Easy Installation and Management Extensive Protocol Support Maintenance and Support Service Registration Card with License Keys Package Contents Hardware Features Power LED USB port Left LAN LEDsActive Right WAN LEDs LEDs WAN Ports Object Activity Description LAN PortsDMZ LED Security lock Console port Reset button AC power Receptacle Rear PanelBottom Panel With Product Label Receptacle 4shows the product label for the UTM10 Using the Rack-Mounting Kit Choosing a Location for the UTM Using the Setup Wizard to Provision the UTM in Your Network Understanding the Steps for Initial Connection Logging In to the UTM Qualified Web Browsers V1.0, September V1.0, September Understanding the Web Management Interface Menu Layout V1.0, September Using the Setup Wizard to Perform the Initial Configuration Setup Wizard of 10 LAN Settings Setup Wizard LAN Settings Dhcp Setting Description or Subfield and Description Setup Wizard of 10 WAN Settings Setting Description or Subfield and Description DNS Proxy ISP Type Setup Wizard WAN SettingsSetting Description or Subfield and Description ISP Login Internet IP Address ISPDomain Name Server DNS Servers Get Automatically from ISP radio button Setup Wizard of 10 System Date and Time Setup Wizard System Date and Time Settings Adjust for Daylight Savings Time checkbox Setup Wizard of 10 Security Services Setup Wizard Security Services Settings WebInstant Messaging Peer-to-Peer P2P Setting Description or Subfield and Description Action Setup Wizard of 10 Email SecuritySetup Wizard Email Security Settings Setup Wizard of 10 Web Security Scan Exceptions Setup Wizard Web Security Settings See Performance Management on Setup Wizard of 10 Web Categories to Be Blocked Blocked Categories Time of Day Setup Wizard Content Filtering SettingsBlocked Categories Scheduled Days Setup Wizard Administrator Email Notification Settings Administrator Email Notification Settings Setup Wizard of 10 Security Subscription Update Settings Setup Wizard Security Subscription Update Settings Update SettingsUpdate Frequency Https Proxy Settings Verifying Proper Installation Setup Wizard of 10 Saving the ConfigurationTesting Connectivity Testing Http Scanning Registering the UTM with Netgear Click Register What to Do Next V1.0, September Manually Configuring Internet and WAN Settings Understanding the Internet and WAN Configuration Tasks Configuring the Internet Connections Automatically Detecting and Connecting V1.0, September Pptp Internet connection methodsConnection Method Data Required Setting the UTM’s MAC Address Manually Configuring the Internet Connection V1.0, September Pptp and PPPoE Settings Internet IP Address Settings DNS Server Settings Network Address Translation UTM10 and UTM25 Classical Routing UTM10 and UTM25 Configuring Auto-Rollover Mode UTM25 Only Auto-Rollover Mode Settings UTM25 Only Setting Description or Subfield and Description Port Mode WAN2 Configuring the Internet Connections onWAN1 V1.0, September Protocol Binding Settings UTM25 Only Using the Services menu see Services-Based Rules on Destination Configuring Secondary WAN Addresses V1.0, September Configuring Dynamic DNS Select Network Config Dynamic DNS from the menu V1.0, September DNS Service Settings WAN2 Dynamic DNS Status Configuring Advanced WAN Options Advanced WAN Settings Setting Description or Subfield and Description MTU SizeUse Default Address radio button Port Speed Additional WAN-Related Configuration Tasks Upload/Download Settings Chapter LAN Configuration Managing Virtual LANs and Dhcp Options Managing the UTM’s Port-Based VLANs V1.0, September Vlan Dhcp Options Dhcp Server Dhcp Relay DNS Proxy Edit Add Configuring a Vlan ProfileLdap Server V1.0, September Vlan Profile Settings Vlan IDPort Membership Vlan Address Contiguous addresses in the IP address pool. Any Settings below Configuring Multi-Home LAN IPs on the Default Vlan Managing Groups and Hosts LAN Groups Managing the Network Database V1.0, September Adding PCs or Devices to the Network Database Add Known PCs and Devices SettingsSetting Up Address Reservation on Changing Group Names in the Network Database Editing PCs or Devices in the Network Database Setting Up Address Reservation Configuring and Enabling the DMZ Port V1.0, September DMZ Setup Settings Own LAN IP address as the primary DNS server IP address Managing Routing Configuring Static Routes Configuring Routing Information Protocol RIP Static Route Settings Select Network Configuration Routing from the menu Out Only . RIP Configuration SettingsAuthentication for RIP-2B/2M Static Route Example V1.0, September Chapter Firewall Protection About Firewall Protection Administrator Tips Number of Supported Firewall Rule Configurations Using Rules to Block or Allow Specific Kinds of TrafficServices-Based Rules Outbound Rules Service Blocking Customized Services on Outbound Rules OverviewTo Block or Allow Specific Traffic on Hosts LAN Groups on Inbound Rules Port Forwarding NAT IP V1.0, September Inbound Rules Overview By this rule. The options are Order of Precedence for Rules Setting LAN WAN Rules LAN WAN Outbound Services Rules LAN WAN Inbound Services Rules Setting DMZ WAN Rules V1.0, September DMZ WAN Outbound Services Rules DMZ WAN Inbound Services Rules Setting LAN DMZ Rules LAN DMZ Outbound Services Rules LAN DMZ Inbound Services Rules Attack Checks Attack Checks Settings VPN Pass through L2TP Setting Session Limits Managing the Application Level Gateway for SIP Sessions Session Limit SettingsSession Timeout Inbound Rules Examples LAN WAN Inbound Rule Hosting a Local Public Web Server V1.0, September V1.0, September LAN WAN or DMZ WAN Inbound Rule Specifying an Exposed Host Outbound Rules Example LAN WAN Outbound Rule Blocking Instant Messenger Creating Services, QoS Profiles, and Bandwidth Profiles Adding Customized Services V1.0, September Services Settings TCP Creating Quality of Service QoS Profiles V1.0, September QoS Profile Settings Default High Medium High Low Creating Bandwidth Profiles V1.0, September Bandwidth Profile Settings Setting a Schedule to Block or Allow Specific Traffic Enabling Source MAC Filtering V1.0, September Setting up IP/MAC Bindings IP/MAC Bindings IP/MAC Binding SettingsEvent Notifications on Configuring Port Triggering V1.0, September 10. Port Triggering Settings Using the Intrusion Prevention System V1.0, September V1.0, September Misc 11. IPS Less Familiar Attack NamesAttack Name Description or Subfield and Description Web Content Filtering and Optimizing Scans About Content Filtering and Scans Default E-mail and Web Scan Settings Default E-mail and Web Scan Settings Configuring E-mail Protection Scan Type Default Scan Setting Default Action if applicable Customizing E-mail Protocol Scan Settings Customizing E-mail Anti-Virus and Notification Settings Performance see Performance Management on E-mail Anti-Virus and Notification SettingsNotification Settings Email Alert Settings Mail FILENAME%, %ACTION%, %VIRUSNAME% Mail Content FilteringTIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT% V1.0, September E-mail Filter Settings Filter by Password-Protected Attachments ZIP, RAR, etc Password-Protected Attachments ZIP, RAR, etc. section above Protecting Against E-mail SpamFilter by File Name Protected Attachments ZIP, RAR, etc. section above Setting Up the Whitelist and Blacklist V1.0, September Configuring the Real-time Blacklist Whitelist/Blacklist Settings V1.0, September Configuring Distributed Spam Analysis Distributed Spam Analysis Settings Block spam email Anti-Spam Engine SettingsLow Medium-Low Configuring Web and Services Protection Customizing Web Protocol Scan Settings and Services Web Protocol, Instant Messaging, and Peer-to-Peer Settings Setting Description or Subfield and Description Web Configuring Web Malware Scans Malware Scan Settings Configuring Web Content Filtering Html Scan V1.0, September Content Filtering, screen 1 10 Content Filtering, screen 2 11 Content Filtering, screen 3 Content Filtering Settings Performance Management onFull-Text Search Block Web Objects Blocked Categories Scheduled Days Netgear Configuring Web URL FilteringURL V1.0, September Blacklist URL Filtering SettingsSetting Description or Subfield and Description Whitelist URL% Https Scan Settings V1.0, September V1.0, September 10. Https Settings Specifying Trusted Hosts 11. Trusted Hosts Settings Configuring FTP Scans Hosts 12. FTP Scan Settings Block Files with the Following Extensions Setting Web Access Exceptions and Scanning ExclusionsSetting Web Access Exception Rules To set Web access exception rules 13. Add and Edit Block Scanning Exception Settings Groups and Hosts LAN Groups on Setting Scanning Exclusions 14. Add Scanning Exclusion Settings V1.0, September Chapter Virtual Private Networking Using IPsec Connections Considerations for Dual WAN Port Systems UTM25 Only IP Addressing for VPNs in Dual WAN Port Systems Creating Gateway-to-Gateway VPN Tunnels with the Wizard V1.0, September IPsec VPN Wizard Settings for a Gateway-to-Gateway Tunnel Connection Name and Remote IP Type End Point Information a Secure Connection Remote AccessibilityAdding or Editing a VPN Policy on V1.0, September Creating a Client to Gateway VPN Tunnel V1.0, September IPsec VPN Wizard Settings for a Client-to-Gateway Tunnel Fqdn V1.0, September V1.0, September Security Policy Editor Remote Party Settings Only Connect Manually checkboxGateway Tunnel Status on Security Policy Editor My Identity Settings On page 7-9. In this example, the domain name is Testing the Connections and Viewing Status Information Testing the VPN ConnectionSecurity Policy Editor Security Policy Settings Detection checkbox Netgear VPN Client Status and Log Information V1.0, September Viewing the UTM IPsec VPN Connection Status System Tray Icon Status Client policy is deactivated Viewing the UTM IPsec VPN Log IPsec VPN Connection Status Information Managing IPsec VPN Policies Managing IKE Policies IKE Policies Screen List of IKE Policies Information Manually Adding or Editing an IKE Policy V1.0, September General 10. Add IKE Policy SettingsMode Config Record IKE SA Parameters LocalRemote Configuring Keepalives Group 1 768 bitGroup 5 1536 bit Dead Peer Extended Authentication Managing VPN Policies VPN Policies Screen 11. List of VPN Policies Information Remote Manually Adding or Editing a VPN Policy V1.0, September 12. Add VPN Policy Settings Description or Subfield and Description Traffic Selection Manual Policy Parameters Auto Policy Parameters Group 1536 bit Configuring Extended Authentication XauthGroup 768 bit Configuring Xauth for VPN Clients Information, see Radius Client Configuration on User Database ConfigurationRadius Client Configuration V1.0, September 14. Radius Client Settings Backup Radius ServerConnection Configuration Primary Radius Server Configuring Mode Config Operation on the UTM Assigning IP Addresses to Remote Users Mode ConfigMode Config Operation V1.0, September 15. Add Mode Config Record Settings Client Pool Traffic Tunnel Security Level V1.0, September 16. Add IKE Policy Settings for a Mode Config Configuration Configuring Menu, select Group 2 1024 bitKeepalives and Dead Peer Detection on Configuring the ProSafe VPN Client for Mode Config Operation 192.168.1.0 Gateway Tunnel 18. Security Policy Editor My Identity, Mode Config Settings Menu Configuring Keepalives and Dead Peer Detection Testing the Mode Config Connection Configuring Keepalives Configuring Dead Peer Connection 20. Keepalive Settings 21. Dead Peer Detection Settings Configuring NetBIOS Bridging with IPsec VPN Chapter Virtual Private Networking Using SSL Connections Understanding the SSL VPN Portal Options Using the SSL VPN Wizard for Client Configurations SSL VPN Wizard of 6 Portal Settings Screen as shown in -8 on SSL VPN Wizard Portal SettingsPortal Layout and Theme Name SSL VPN Wizard of 6 Domain Settings SSL VPN Portal Pages to Display Radius Client SSL VPN Wizard Domain SettingsDomain Name SSL VPN Wizard of 6 User Settings SSL VPN Wizard User Settings SSL VPN Wizard of 6 Client IP Address Range and Routes Add Routes for VPN Tunnel Clients SSL VPN Wizard Client IP Address Range and Routes SettingsClient IP Address Range SSL VPN Wizard Port Forwarding Settings SSL VPN Wizard of 6 Port Forwarding SSH Add New Host Name for Port Forwarding SSL VPN Wizard of 6 Verify and Save Your Settings Accessing the New SSL Portal Login Screen V1.0, September Viewing the UTM SSL VPN Connection Status Viewing the UTM SSL VPN Log Manually Configuring and Editing SSL Connections Creating the Portal Layout V1.0, September V1.0, September Add Portal Layout Settings Configuring Domains, Groups, and Users Configuring Applications for Port Forwarding Adding Servers and Port Numbers TCP Application Port Number Adding a New Host NamePort Forwarding Applications/TCP Port Numbers Configuring the SSL VPN Client Fully Qualified Domain Name. The full server name Configuring the Client IP Address Range Adding Routes for VPN Tunnel Clients Tunnel Clients on Using Network Resource Objects to Simplify Policies Adding New Network Resources Editing Network Resources to Specify Addresses Configuring User, Group, and Global Policies Add Resource Addresses Settings Viewing Policies Adding a Policy 10. Add Policy Settings Policy For Description or Subfield and Description Add SSL VPN Policies Network Resource Objects to Simplify Policies on 10. Add Policy Settings V1.0, September V1.0, September Managing Users, Authentication, and Certificates Configuring VPN Authentication Domains, Groups, and Users Configuring Domains Authentication Protocols and Methods Ldap Add Domain Settings Creating the Portal Layout on Configuring Groups for VPN Policies Creating and Deleting Groups VPN Group Settings Editing Groups Configuring User Accounts V1.0, September Policies on Add User SettingsSee Configuring Extended Authentication Xauth on Setting User Login Policies Configuring Login Policies Configuring Login Restrictions Based on IP Address Configuring Login Restrictions Based on Web Browser Add Defined Addresses Settings Internet Explorer Opera Netscape Navigator Changing Passwords and Other User Settings Managing Digital Certificates Edit User SettingsEnabled see Configuring Extended Authentication Xauth on V1.0, September Managing CA Certificates 11 Certificates, screen 1 Managing Self Certificates Generating a CSR and Obtaining a Self Certificate from a CA Setting 13 Certificates, screen 2 512 1024 2048 V1.0, September Managing the Certificate Revocation List Viewing and Managing Self Certificates 15Certificates, screen 3 Performance Management Bandwidth Capacity Features That Reduce Traffic Network and System Management 10-3 Content Filtering Features That Increase Traffic Source MAC Filtering 10-6 Network and System Management Configuring the DMZ Port Port Triggering Using QoS and Bandwidth Assignment to Shift the Traffic Mix Configuring Exposed HostsConfiguring VPN Tunnels Assigning QoS Profiles Changing Passwords and Administrator Settings System ManagementMonitoring Tools for Traffic Management Assigning Bandwidth Profiles 10-10 Network and System Management Network and System Management 10-11 Configuring Remote Management Access Https//IPaddress or https//FullyQualifiedDomainName Using an Snmp Manager Managing the Configuration File Snmp SettingsSetting Description or Subfield and Description Settings Trusted Snmp Hosts Backup Settings Restore Settings Reverting to Factory Default Settings Updating the Firmware Viewing the Available Firmware Versions Upgrading the Firmware and Rebooting the UTM Rebooting Without Changing the Firmware Updating the Scan Signatures and Scan Engine Firmware 10-22 Network and System Management Configuring Automatic Update and Frequency Settings Signatures & Scan Engine Settings Configuring Date and Time Service System Date & Time Settings Network and System Management 10-25 10-26 Network and System Management Monitoring System Access and Performance Enabling the WAN Traffic Meter 11-2 Monitoring System Access and Performance Logging, Alerts, and Event Notifications on WAN Traffic Meter SettingsTraffic Counter Mail, and Syslog Logs on Configuring Logging, Alerts, and Event Notifications Configuring the E-mail Notification Server Server requires authentication checkbox and enter Configuring and Activating System, E-mail, and Syslog LogsE-mail Notification Settings Monitoring System Access and Performance 11-7 E-mail and Syslog Settings Email Logs to Administrator Send Logs via Syslog Configuring and Activating Update Failure and Attack Alerts Alerts Settings PROTOCOL%, %FROM%, %TO%, %SUBJECT%, %FILENAME% ACTION%, %VIRUSNAME% Configuring and Activating Firewall Logs Firewall Logs Settings Monitoring Real-Time Traffic, Security, and Statistics Dashboard, screen 1 Settings on Spam to configure, see Protecting Against E-mail Spam onTotal Threats System on Threats Counts Total Traffic Bytes Categories, see Using the Intrusion Dashboard Most Recent 5 and Top 5 InformationCategory Most Recent 5 Description Top 5 Description Prevention System on Dashboard Service Statistics Information Dashboard, screen 3 Viewing Status Screens Viewing System Status Setting Status System Status Status and System Information 11 System Status, screen 2 Dhcp NATLAN Port 11. System Status Interface Statistics Viewing Active VPN UsersViewing VPN Tunnel Connection Status 12. IPsec VPN Connection Status Information To view the status of the Port Triggering feature Viewing Port Triggering Status Viewing the WAN Ports Status 13. Port Triggering Status Information 11-28 Monitoring System Access and Performance Configuring the Internet Connection on Edit Vlan Profile screen see Configuring a Vlan Profile onViewing Attached Devices and the Dhcp Log Viewing Attached Devices 11-30 Monitoring System Access and Performance Viewing the Dhcp Log Querying Logs and Generating Reports Querying the Logs Monitoring System Access and Performance 11-33 15. Logs Query Settings Following protocols can be selected See Configuring and Activating Firewall Logs onThis field is available for the following logs Following categories can be selected Following reasons can be selectedThis field is available only for the Spam log This field is available only for the Malware log This field is available only for the Content filters log EMERG, ALERT, CRITICAL, ERROR, WARNING, NoticeThis field is available only for the Service log Example Using Logs to Identify Infected Clients Log Management Scheduling and Generating Reports Generating Reports 16. Generate Report Settings Email ReportsWeb Reports System Reports 17. Schedule Report Settings Scheduling Reports Report List Using Diagnostics UtilitiesEmail Reports Web Reports System Reports Using the Network Diagnostic Tools Sending a Ping Packet Looking up a DNS Address Tracing a RouteDisplaying the Routing Table Using the Realtime Traffic Diagnostics Tool 27 Diagnostics, screen 2 Gathering Important Log Information Generating Network Statistics Rebooting and Shutting Down the UTM Troubleshooting and Using Online Support Test LED Never Turns Off Power LED Not OnBasic Functioning Troubleshooting the Web Management Interface LAN or WAN Port LEDs Not On When You Enter a URL or IP Address a Time-out Error Occurs Troubleshooting the ISP Connection Troubleshooting a TCP/IP Network Using a Ping Utility Testing the LAN Path to Your UTM Testing the Path from Your PC to a Remote Device Restoring the Default Configuration and Password Problems with Date and Time Using Online Support Enabling Remote Troubleshooting Malware Analysis Settings Sending Suspicious Files to Netgear for Analysis Accessing the Knowledge Base and Documentation Table A-1. UTM Default Configuration Settings Feature Default behavior Router LoginInternet Connection Local Network LAN Table A-2. UTM Physical and Technical Specifications Table A-3. UTM IPsec VPN Specifications Feature Specification Environmental SpecificationsInterface Specifications Setting Specification Table A-4. UTM SSL VPN Specifications MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1 Appendix B Network Planning for Dual WAN Ports UTM25 Only What to Consider Before You Begin WAN port Physical facility Internet Cabling and Computer Hardware Requirements Computer Network Configuration RequirementsInternet Configuration Requirements Where Do I Get The Internet Configuration Information? Internet Connection Information Overview of the Planning Process Figure B-2 Inbound Traffic Inbound Traffic to a Single WAN Port System Inbound Traffic Dual WAN Ports for Load Balancing Inbound Traffic to a Dual WAN Port SystemInbound Traffic Dual WAN Ports for Improved Reliability Virtual Private Networks VPNs VPN Road Warrior ClientTo-Gateway To-Gateway Through a NAT Figure B-7 VPN Road Warrior Client-to-Gateway VPN Road Warrior Single Gateway WAN Port Reference Case Figure B-10 VPN Gateway-to-Gateway VPN Road Warrior Dual Gateway WAN Ports for Load Balancing Figure B-13 Figure B-15 VPN Telecommuter Client-to-Gateway Through a NAT Router VPN Telecommuter Single Gateway WAN Port Reference Case Figure B-18 VPN Telecommuter Dual Gateway WAN Ports for Load Balancing Figure B-20 Table C-1. Log Message Terms Term Description or Subfield and Description Reboot Table C-3. System Logs RebootSystem Log Messages System Startup Table C-5. System Logs NTP Service LogsTable C-4. System Logs Service IPsec Restart Login/LogoutFirewall Restart Auto-Rollover Mode WAN StatusSystem Logs WAN Status, Auto Rollover ACTIVEWAN2 Load-Balancing Mode Table C-9. System Logs WAN Status, Load Balancing Table C-10. System Logs WAN Status, PPPoE Idle-Timeout PPP Logs Table C-11. System Logs WAN Status, Pptp Idle-Timeout Table C-12. System Logs WAN Status, PPP Authentication Icmp Redirect Logs Traffic Metering LogsUnicast Logs Invalid Packet Logging Multicast/Broadcast LogsTable C-16. System Logs Multicast/Broadcast Table C-17. System Logs Invalid Packets Invalidbadchecksumdrop SRC=192.168.20.10 Invalidbadhwchecksumdrop SRC=192.168.20.10Invalidmalformedpacketdrop SRC=192.168.20.10 Invalidshortpacketdrop SRC=192.168.20.10 Content Filtering and Security Logs Web Filtering and Content Filtering Logs Table C-19. Content Filtering and Security Logs Spam Spam Logs Table C-20. Content Filtering and Security Logs Traffic Table C-21. Content Filtering and Security Logs VirusTraffic Logs Virus Logs Table C-23. Content Filtering and Security Logs IPS Table C-24. Content Filtering and Security Logs Port ScanIPS Logs Port Scan Logs Routing Logs LAN to WAN LogsLAN to DMZ Logs DMZ to WAN Logs WAN to DMZ Logs WAN to LAN LogsDMZ to LAN Logs V1.0, September Why do I need Two-Factor Authentication? What are the benefits of Two-Factor Authentication? Netgear Two-Factor Authentication Solutions What is Two-Factor Authentication Figure D-1 Figure D-3 Appendix E Related Documents Document Link V1.0, September Index Numerics Index-2 Index-3 Index-4 Index-5 Index-6 Index-7 Index-8 Index-9 Index-10 Index-11 Index-12 Index-13 Index-14 Index-15 Index-16