NETGEAR UTM5-100NAS, UTM50-100NAS manual Advanced VPN Support for Both IPsec and SSL

ProSecure Unified Threat Management (UTM) Appliance Reference Manual

Dual-WAN Port Models for Increased Reliability or Outbound Load Balancing

The UTM product line offers models with two broadband WAN ports. The second WAN port allows you to connect a second broadband Internet line that can be configured on a mutually- exclusive basis to:

•Provide backup and rollover if one line is inoperable, ensuring you are never disconnected.

•Load balance, or use both Internet lines simultaneously for outgoing traffic. A UTM with dual- WAN ports balances users between the two lines for maximum bandwidth efficiency.

See “Network Planning for Dual WAN Ports (Dual-WAN Port Models Only)” on page B-1 for the planning factors to consider when implementing the following capabilities with dual WAN port gateways:

•Single or multiple exposed hosts.

•Virtual private networks.

Advanced VPN Support for Both IPsec and SSL

The UTM supports IPsec and SSL virtual private network (VPN) connections.

•IPsec VPN delivers full network access between a central office and branch offices, or between a central office and telecommuters. Remote access by telecommuters requires the installation of VPN client software on the remote computer.

–IPsec VPN with broad protocol support for secure connection to other IPsec gateways and clients.

–Depending on the model, bundled with a 1-user license of the NETGEAR ProSafe VPN Client software (VPN01L).

•SSL VPN provides remote access for mobile users to selected corporate resources without requiring a pre-installed VPN client on their computers.

–Uses the familiar Secure Sockets Layer (SSL) protocol, commonly used for e-commerce transactions, to provide client-free access with customizable user portals and support for a wide variety of user repositories.

–Browser based, platform-independent, remote access through a number of popular browsers, such as Microsoft Internet Explorer, Mozilla Firefox, or Apple Safari.

–Provides granular access to corporate resources based upon user type or group membership.

Introduction 1-3

v1.0, January 2010