Manuals / NETGEAR / Computer Equipment / Network Hardware

NETGEAR UTM50-100NAS, UTM5-100NAS manual Managing IPsec VPN Policies

Models: UTM5-100NAS UTM50-100NAS

1 484

Download 484 pages 53.33 Kb

Page 234

ProSecure Unified Threat Management (UTM) Appliance Reference Manual

Figure 7-19

Managing IPsec VPN Policies

After you have used the VPN Wizard to set up a VPN tunnel, a VPN policy and an IKE policy are stored in separate policy tables. The name that you selected as the VPN tunnel connection name during the VPN Wizard setup identifies both the VPN policy and IKE policy. You can edit existing policies, or manually add new VPN and IKE policies directly in the policy tables.

7-22	Virtual Private Networking Using IPsec Connections

v1.0, January 2010

Image 234

NETGEAR UTM50-100NAS, UTM5-100NAS manual Managing IPsec VPN Policies

Contents

NETGEAR, Inc EU Regulatory Compliance Statement TrademarksStatement of Conditions Bestätigung des Herstellers/ImporteursAES Voluntary Control Council for Interference Vcci StatementAdditional Copyrights TermsMD5 Publication Date January Product Family Product and Publication DetailsModel Number Product NameV1.0, January Contents Chapter Manually Configuring Internet and WAN Settings Dual-WAN Port Models OnlyChapter LAN Configuration Chapter Content Filtering and Optimizing Scans Chapter Virtual Private Networking Using SSL Connections Using QoS and Bandwidth Assignment to Shift the Traffic Mix Features That Reduce TrafficFeatures That Increase Traffic Changing Passwords and Administrator SettingsConfiguring the E-mail Notification Server Configuring Date and Time ServiceConfiguring Logging, Alerts, and Event Notifications Configuring and Activating System, E-mail, and Syslog LogsTesting the LAN Path to Your UTM Troubleshooting the ISP ConnectionTroubleshooting a TCP/IP Network Using a Ping Utility Testing the Path from Your PC to a Remote DeviceAppendix D Two Factor Authentication Xvi About This Manual Conventions, Formats, and ScopeHow to Print This Manual Revision HistoryPart Number Version Date Description Chapter Introduction Key Features and Capabilities Advanced VPN Support for Both IPsec and SSL Powerful, True Firewall Stream Scanning for Content FilteringSecurity Features Autosensing Ethernet Connections with Auto UplinkEasy Installation and Management Extensive Protocol SupportMaintenance and Support Model ComparisonDifferences Between the UTM Models Service Registration Card with License Keys DeploymentPackage Contents Hardware Features Front PanelLAN Ports LED DescriptionsObject Activity Description DMZ LEDBottom Panel With Product Label Security lock Console port Reset button AC power ReceptacleRear Panel Receptacle4shows the product label for the UTM5 Choosing a Location for the UTM 6shows the product label for the UTM25Using the Rack-Mounting Kit V1.0, January Using the Setup Wizard to Provision the UTM in Your Network Understanding the Steps for Initial ConnectionLogging In to the UTM Qualified Web BrowsersV1.0, January V1.0, January Understanding the Web Management Interface Menu Layout V1.0, January Using the Setup Wizard to Perform the Initial Configuration Setup Wizard of 10 LAN Settings Setup Wizard LAN Settings DhcpSetting Description or Subfield and Description Setup Wizard of 10 WAN Settings Setting Description or Subfield and Description DNS ProxySetup Wizard WAN Settings Setting Description or Subfield and Description ISP LoginISP Type Domain Name Server DNS Servers Internet IP AddressISP Get Automatically from ISP radio buttonSetup Wizard of 10 System Date and Time Setup Wizard System Date and Time Settings Adjust for Daylight Savings Time checkboxSetup Wizard of 10 Services Instant Messaging Setup Wizard Services SettingsWeb Peer-to-Peer P2PSetup Wizard of 10 Email Security Setup Wizard Email Security SettingsSetting Description or Subfield and Description Action Setup Wizard of 10 Web Security Scan ExceptionsSetup Wizard Web Security Settings See Performance Management onSetup Wizard of 10 Web Categories to Be Blocked Setup Wizard Content Filtering Settings Blocked Categories Scheduled DaysBlocked Categories Time of Day Setup Wizard of 10 Email Notification Setup Wizard Administrator Email Notification SettingsAdministrator Email Notification Settings Setup Wizard of 10 Signatures & Engine Update Settings Setup Wizard of 10 Saving the ConfigurationSetup Wizard Signatures & Engine Settings Update FrequencyTesting Http Scanning Verifying Proper InstallationTesting Connectivity Registering the UTM with NetgearClick Register What to Do Next Manually Configuring Internet and WAN Settings Understanding the Internet and WAN Configuration TasksConfiguring the Internet Connections Automatically Detecting and ConnectingV1.0, January Internet connection methods Connection Method Data RequiredPptp Setting the UTM’s MAC Address Manually Configuring the Internet ConnectionV1.0, January Pptp and PPPoE Settings Internet IP Address Settings DNS Server Settings Network Address Translation All Models Configuring Auto-Rollover Mode Dual-WAN Port Models Only Classical Routing All ModelsAuto-Rollover Mode Settings Dual-WAN Port Models Only Setting Description or Subfield and Description Port ModeConfiguring the Internet Connections on WAN1WAN2 V1.0, January Protocol Binding Settings Dual-WAN Port Models Only Using the Services menu see Services-Based Rules onDestination Configuring Secondary WAN Addresses V1.0, January Configuring Dynamic DNS Select Network Config Dynamic DNS from the menuV1.0, January DNS Service Settings WAN2 Dynamic DNS StatusConfiguring Advanced WAN Options Use Default Address radio button Advanced WAN SettingsSetting Description or Subfield and Description MTU Size Port SpeedAdditional WAN-Related Configuration Tasks Upload/Download SettingsChapter LAN Configuration Managing Virtual LANs and Dhcp OptionsManaging the UTM’s Port-Based VLANs V1.0, January Vlan Dhcp Options Dhcp ServerDhcp Relay DNS ProxyConfiguring a Vlan Profile Ldap ServerV1.0, January Port Membership Vlan Profile SettingsVlan ID VlanEnable Dhcp Starting IP Inter Vlan Routing Configuring Multi-Home LAN IPs on the Default Vlan Managing Groups and Hosts LAN Groups Managing the Network Database V1.0, January Add Known PCs and Devices Settings Setting Up Address Reservation onAdding PCs or Devices to the Network Database Changing Group Names in the Network Database Editing PCs or Devices in the Network DatabaseSetting Up Address Reservation Configuring and Enabling the DMZ Port V1.0, January DMZ Setup Settings Own LAN IP address as the primary DNS server IP address Managing Routing Configuring Static Routes Configuring Routing Information Protocol RIP Static Route SettingsSelect Network Configuration Routing from the menu RIP Configuration Settings Authentication for RIP-2B/2MOut Only . Static Route Example V1.0, January Chapter Firewall Protection About Firewall ProtectionAdministrator Tips Using Rules to Block or Allow Specific Kinds of Traffic Services-Based RulesNumber of Supported Firewall Rule Configurations Outbound Rules Service Blocking To Block or Allow Specific Traffic on Customized Services onOutbound Rules Overview Hosts LAN Groups onInbound Rules Port Forwarding NAT IPV1.0, January Inbound Rules Overview Hosts LAN Groups on Useful when debugging your rules Order of Precedence for Rules Setting LAN WAN Rules LAN WAN Outbound Services Rules LAN WAN Inbound Services Rules Setting DMZ WAN Rules V1.0, January DMZ WAN Outbound Services Rules DMZ WAN Inbound Services Rules Setting LAN DMZ Rules LAN DMZ Outbound Services Rules LAN DMZ Inbound Services Rules Inbound Rules Examples LAN WAN Inbound Rule Hosting a Local Public Web ServerV1.0, January V1.0, January LAN WAN or DMZ WAN Inbound Rule Specifying an Exposed Host Outbound Rules Example LAN WAN Outbound Rule Blocking Instant MessengerConfiguring Other Firewall Features Attack ChecksAttack Checks Settings VPN Pass through L2TPSetting Session Limits Session Limit Settings Session TimeoutManaging the Application Level Gateway for SIP Sessions Creating Services, QoS Profiles, and Bandwidth Profiles Adding Customized ServicesV1.0, January Services Settings TCPCreating Quality of Service QoS Profiles V1.0, January QoS Profile Settings Default High Medium High LowCreating Bandwidth Profiles V1.0, January Bandwidth Profile Settings Setting a Schedule to Block or Allow Specific Traffic Enabling Source MAC Filtering V1.0, January Setting up IP/MAC Bindings IP/MAC Binding Settings Event Notifications onIP/MAC Bindings Configuring Port Triggering V1.0, January 10. Port Triggering Settings Using the Intrusion Prevention System V1.0, January V1.0, January 11. IPS Less Familiar Attack Names Attack Name Description or Subfield and Description WebMisc Content Filtering and Optimizing Scans About Content Filtering and ScansDefault E-mail and Web Scan Settings Default E-mail and Web Scan SettingsConfiguring E-mail Protection Scan Type Default Scan Setting Default Action if applicableCustomizing E-mail Protocol Scan Settings Customizing E-mail Anti-Virus and Notification Settings E-mail Anti-Virus and Notification Settings Notification SettingsPerformance see Performance Management on Email Alert Settings MailMail Content Filtering TIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT%FILENAME%, %ACTION%, %VIRUSNAME% V1.0, January E-mail Filter Settings Filter by Password-Protected Attachments ZIP, RAR, etcFilter by File Name Password-Protected Attachments ZIP, RAR, etc. section aboveProtecting Against E-mail Spam Protected Attachments ZIP, RAR, etc. section aboveSetting Up the Whitelist and Blacklist V1.0, January Configuring the Real-time Blacklist Whitelist/Blacklist SettingsV1.0, January Configuring Distributed Spam Analysis Distributed Spam Analysis Settings Anti-Spam Engine Settings Low Medium-LowBlock spam email Configuring Web and Services Protection Customizing Web Protocol Scan Settings and ServicesWeb Protocol, Instant Messaging, and Peer-to-Peer Settings Setting Description or Subfield and Description WebConfiguring Web Malware Scans Malware Scan Settings Configuring Web Content Filtering Html ScanV1.0, January Content Filtering, screen 1 10 Content Filtering, screen 2 11 Content Filtering, screen 3 Full-Text Search Content Filtering SettingsPerformance Management on Block Web ObjectsBlocked Categories Scheduled Days Configuring Web URL Filtering URLNetgear V1.0, January URL Filtering Settings Setting Description or Subfield and Description WhitelistBlacklist URL% Https Scan Settings V1.0, January V1.0, January 10. Https Settings Specifying Trusted HostsV1.0, January Configuring FTP Scans 11. Trusted Hosts Settings12. FTP Scan Settings Setting Web Access Exceptions and Scanning Exclusions Setting Web Access Exception RulesBlock Files with the Following Extensions To set Web access exception rules 13. Add and Edit Block Scanning Exception Settings Groups and Hosts LAN Groups onSetting Scanning Exclusions 14. Add Scanning Exclusion Settings V1.0, January Chapter Virtual Private Networking Using IPsec Connections UTM IP Addressing for VPNs in Dual WAN Port SystemsIP Addressing for VPNs in Dual WAN Port Systems Creating Gateway-to-Gateway VPN Tunnels with the Wizard V1.0, January IPsec VPN Wizard Settings for a Gateway-to-Gateway Tunnel Connection Name and Remote IP TypeSecure Connection Remote Accessibility Manually Adding or Editing a VPN Policy onEnd Point Information a V1.0, January Creating a Client to Gateway VPN Tunnel V1.0, January IPsec VPN Wizard Settings for a Client-to-Gateway Tunnel FqdnV1.0, January V1.0, January Gateway Tunnel Security Policy Editor Remote Party SettingsOnly Connect Manually checkbox Status onSecurity Policy Editor My Identity Settings On page 7-10. In this example, the domain name is Security Policy Editor Security Policy Settings Testing the Connections and Viewing Status InformationTesting the VPN Connection Detection checkboxNetgear VPN Client Status and Log Information V1.0, January Viewing the UTM IPsec VPN Connection Status Status Indications for the VPN Client System Tray IconSystem Tray Icon Status Viewing the UTM IPsec VPN Log IPsec VPN Connection Status InformationManaging IPsec VPN Policies Managing IKE Policies IKE Policies ScreenList of IKE Policies Information Manually Adding or Editing an IKE Policy V1.0, January 10. Add IKE Policy Settings Description or Subfield and Description Mode Config RecordGeneral Local RemoteIKE SA Parameters Group 5 1536 bit ConfiguringGroup 1 768 bit Keepalives and DeadScreen see User Database Configuration on Configuration onManaging VPN Policies VPN Policies Screen11. List of VPN Policies Information RemoteManually Adding or Editing a VPN Policy V1.0, January Description or Subfield and Description General 12. Add VPN Policy SettingsConfiguring Keepalives Dead PeerTraffic Selection Manual Policy ParametersAuto Policy Parameters Configuring Extended Authentication Xauth Group 768 bitGroup 1536 bit Configuring Xauth for VPN Clients User Database Configuration Radius Client ConfigurationInformation, see Radius Client Configuration on V1.0, January Connection Configuration 14. Radius Client SettingsBackup Radius Server Primary Radius ServerAssigning IP Addresses to Remote Users Mode Config Mode Config OperationConfiguring Mode Config Operation on the UTM V1.0, January 15. Add Mode Config Record Settings Description or Subfield and Description Client PoolTraffic Tunnel Security Level V1.0, January 16. Add IKE Policy Settings for a Mode Config Configuration Description or Subfield and Description Remote Menu, select Group 2 1024 bitConfiguring the ProSafe VPN Client for Mode Config Operation 192.168.1.0 Mask Gateway Tunnel 18. Security Policy Editor My Identity, Mode Config Settings Menu Configuring Keepalives and Dead Peer Detection Testing the Mode Config ConnectionConfiguring Keepalives Configuring Dead Peer Connection 20. Keepalive Settings21. Dead Peer Detection Settings Configuring NetBIOS Bridging with IPsec VPN V1.0, January Chapter Virtual Private Networking Using SSL Connections Understanding the SSL VPN Portal OptionsUsing the SSL VPN Wizard for Client Configurations SSL VPN Wizard of 6 Portal Settings SSL VPN Wizard Portal Settings Portal Layout and Theme NameScreen as shown in -8 on SSL VPN Wizard of 6 Domain Settings SSL VPN Portal Pages to DisplaySSL VPN Wizard Domain Settings Domain NameRadius Client SSL VPN Wizard of 6 User Settings SSL VPN Wizard User Settings SSL VPN Wizard of 6 Client IP Address Range and Routes SSL VPN Wizard Client IP Address Range and Routes Settings Client IP Address RangeAdd Routes for VPN Tunnel Clients SSL VPN Wizard Port Forwarding Settings SSL VPN Wizard of 6 Port ForwardingSSH Add New Host Name for Port ForwardingSSL VPN Wizard of 6 Verify and Save Your Settings Accessing the New SSL Portal Login Screen V1.0, January Viewing the UTM SSL VPN Connection Status Viewing the UTM SSL VPN LogManually Configuring and Editing SSL Connections Creating the Portal Layout V1.0, January V1.0, January Add Portal Layout Settings RevalidateConfiguring Domains, Groups, and Users Configuring Applications for Port ForwardingAdding Servers and Port Numbers Adding a New Host Name Port Forwarding Applications/TCP Port NumbersTCP Application Port Number Configuring the SSL VPN Client Fully Qualified Domain Name. The full server nameConfiguring the Client IP Address Range Adding Routes for VPN Tunnel Clients Tunnel Clients onUsing Network Resource Objects to Simplify Policies Adding New Network Resources Editing Network Resources to Specify Addresses Configuring User, Group, and Global Policies Add Resource Addresses SettingsViewing Policies Adding a Policy 10. Add Policy Settings Policy ForDescription or Subfield and Description Add SSL VPN Policies Network Resource Objects to Simplify Policies on10. Add Policy Settings V1.0, January V1.0, January Managing Users, Authentication, and Certificates Configuring VPN Authentication Domains, Groups, and UsersConfiguring Domains Authentication Protocols and MethodsLdap Add Domain Settings Creating the Portal Layout on Configuring Groups for VPN Policies Creating and Deleting Groups VPN Group Settings Editing GroupsConfiguring User Accounts V1.0, January Add User Settings See Configuring Extended Authentication Xauth onPolicies on Setting User Login Policies Configuring Login PoliciesConfiguring Login Restrictions Based on IP Address Configuring Login Restrictions Based on Web Browser Add Defined Addresses SettingsInternet Explorer Opera Netscape Navigator Changing Passwords and Other User Settings Edit User Settings Enabled see Configuring Extended Authentication Xauth onManaging Digital Certificates V1.0, January Managing CA Certificates 11 Certificates, screen 1Managing Self Certificates Generating a CSR and Obtaining a Self Certificate from a CA Generate Self Certificate Request Settings Setting512 1024 2048 V1.0, January Managing the Certificate Revocation List Viewing and Managing Self Certificates15Certificates, screen 3 Performance Management Bandwidth CapacityFeatures That Reduce Traffic Network and System Management 10-3 Content Filtering Features That Increase Traffic Source MAC Filtering10-6 Network and System Management Configuring the DMZ Port Port TriggeringConfiguring VPN Tunnels Using QoS and Bandwidth Assignment to Shift the Traffic MixConfiguring Exposed Hosts Assigning QoS ProfilesMonitoring Tools for Traffic Management Changing Passwords and Administrator SettingsSystem Management Assigning Bandwidth Profiles10-10 Network and System Management Network and System Management 10-11 Configuring Remote Management Access Https//IPaddress or https//FullyQualifiedDomainName Using an Snmp Manager Setting Description or Subfield and Description Settings Managing the Configuration FileSnmp Settings Trusted Snmp HostsBackup Settings Restore Settings Reverting to Factory Default Settings Updating the FirmwareViewing the Available Firmware Versions Upgrading the Firmware and Rebooting the UTM Rebooting Without Changing the Firmware Updating the Scan Signatures and Scan Engine Firmware10-22 Network and System Management Configuring Automatic Update and Frequency Settings Signatures & Scan Engine SettingsConfiguring Date and Time Service System Date & Time SettingsNetwork and System Management 10-25 10-26 Network and System Management Monitoring System Access and Performance Enabling the WAN Traffic Meter11-2 Monitoring System Access and Performance WAN Traffic Meter Settings Traffic CounterLogging, Alerts, and Event Notifications on System, E-mail, and Syslog Logs on Configuring Logging, Alerts, and Event Notifications Configuring the E-mail Notification ServerConfiguring and Activating System, E-mail, and Syslog Logs E-mail Notification SettingsServer requires authentication checkbox and enter Monitoring System Access and Performance 11-7 E-mail and Syslog Settings Email Logs to AdministratorSend Logs via Syslog Configuring and Activating Update Failure and Attack Alerts Alerts Settings PROTOCOL%, %FROM%, %TO%, %SUBJECT%, %FILENAME% ACTION%, %VIRUSNAME%Configuring and Activating Firewall Logs Firewall Logs Settings Monitoring Real-Time Traffic, Security, and StatisticsDashboard, screen 1 Total Threats Settings onSpam to configure, see Protecting Against E-mail Spam on System onThreats Counts Total Traffic BytesCategory Most Recent 5 Description Top 5 Description Categories, see Using the IntrusionDashboard Most Recent 5 and Top 5 Information Prevention System onDashboard Service Statistics Information Dashboard, screen 3Viewing Status Screens Viewing System StatusSetting Status System Status Status and System Information11 System Status, screen 2 NAT LAN PortDhcp Viewing Active VPN Users Viewing VPN Tunnel Connection Status11. System Status Interface Statistics 12. IPsec VPN Connection Status Information To view the status of the Port Triggering feature Viewing Port Triggering StatusViewing the WAN Ports Status 13. Port Triggering Status Information11-28 Monitoring System Access and Performance Viewing Attached Devices and the Dhcp Log Models see Manually Configuring the Internet Connection onEdit Vlan Profile screen see Configuring a Vlan Profile on Viewing Attached Devices11-30 Monitoring System Access and Performance Viewing the Dhcp Log Querying Logs and Generating Reports Querying the LogsMonitoring System Access and Performance 11-33 15. Logs Query Settings See Configuring and Activating Firewall Logs on This field is available for the following logsFollowing protocols can be selected This field is available only for the Spam log Following categories can be selectedFollowing reasons can be selected This field is available only for the Malware logEMERG, ALERT, CRITICAL, ERROR, WARNING, Notice This field is available only for the Service logThis field is available only for the Content filters log Example Using Logs to Identify Infected Clients Log ManagementScheduling and Generating Reports Generating Reports Web Reports 16. Generate Report SettingsEmail Reports System Reports17. Schedule Report Settings Scheduling ReportsUsing Diagnostics Utilities Email Reports Web Reports System ReportsReport List Using the Network Diagnostic Tools Sending a Ping PacketTracing a Route Displaying the Routing TableLooking up a DNS Address Using the Realtime Traffic Diagnostics Tool 27 Diagnostics, screen 2Gathering Important Log Information Generating Network StatisticsRebooting and Shutting Down the UTM Troubleshooting and Using Online Support Power LED Not On Basic FunctioningTest LED Never Turns Off Troubleshooting the Web Management Interface LAN or WAN Port LEDs Not OnWhen You Enter a URL or IP Address a Time-out Error Occurs Troubleshooting the ISP Connection 12-6 Troubleshooting and Using Online Support Troubleshooting a TCP/IP Network Using a Ping Utility Testing the LAN Path to Your UTMTesting the Path from Your PC to a Remote Device Ping -n 10 IP addressRestoring the Default Configuration and Password Problems with Date and Time Using Online SupportEnabling Remote Troubleshooting Sending Suspicious Files to Netgear for Analysis Accessing the Knowledge Base and Documentation Malware Analysis SettingsInternet Connection Table A-1. UTM Default Configuration SettingsFeature Default behavior Router Login Local Network LANTable A-2. UTM Physical and Technical Specifications Interface Specifications Table A-3. UTM IPsec VPN SpecificationsFeature Specification Environmental Specifications Setting SpecificationTable A-4. UTM SSL VPN Specifications MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1What to Consider Before You Begin WAN port Physical facility InternetComputer Network Configuration Requirements Internet Configuration RequirementsCabling and Computer Hardware Requirements Where Do I Get The Internet Configuration Information? Internet Connection InformationOverview of the Planning Process Figure B-2 Inbound Traffic Inbound Traffic to a Single WAN Port SystemInbound Traffic to a Dual WAN Port System Inbound Traffic Dual WAN Ports for Improved ReliabilityInbound Traffic Dual WAN Ports for Load Balancing To-Gateway Virtual Private Networks VPNsVPN Road Warrior Client To-Gateway Through a NATFigure B-7 VPN Road Warrior Client-to-Gateway VPN Road Warrior Single Gateway WAN Port Reference CaseFigure B-10 VPN Gateway-to-Gateway VPN Road Warrior Dual Gateway WAN Ports for Load BalancingFigure B-13 Figure B-15 VPN Telecommuter Client-to-Gateway Through a NAT Router VPN Telecommuter Single Gateway WAN Port Reference CaseFigure B-18 VPN Telecommuter Dual Gateway WAN Ports for Load Balancing Figure B-20Table C-1. Log Message Terms Term Description or Subfield and DescriptionSystem Log Messages RebootTable C-3. System Logs Reboot System StartupService Logs Table C-4. System Logs ServiceTable C-5. System Logs NTP Login/Logout Firewall RestartIPsec Restart System Logs WAN Status, Auto Rollover Auto-Rollover ModeWAN Status ACTIVEWAN2Load-Balancing Mode Table C-9. System Logs WAN Status, Load BalancingTable C-10. System Logs WAN Status, PPPoE Idle-Timeout PPP LogsTable C-11. System Logs WAN Status, Pptp Idle-Timeout Table C-12. System Logs WAN Status, PPP AuthenticationTraffic Metering Logs Unicast LogsIcmp Redirect Logs Table C-16. System Logs Multicast/Broadcast Invalid Packet LoggingMulticast/Broadcast Logs Table C-17. System Logs Invalid PacketsInvalidmalformedpacketdrop SRC=192.168.20.10 Invalidbadchecksumdrop SRC=192.168.20.10Invalidbadhwchecksumdrop SRC=192.168.20.10 Invalidshortpacketdrop SRC=192.168.20.10Content Filtering and Security Logs Web Filtering and Content Filtering LogsTable C-19. Content Filtering and Security Logs Spam Spam LogsTraffic Logs Table C-20. Content Filtering and Security Logs TrafficTable C-21. Content Filtering and Security Logs Virus Virus LogsIPS Logs Table C-23. Content Filtering and Security Logs IPSTable C-24. Content Filtering and Security Logs Port Scan Port Scan LogsLAN to DMZ Logs Routing LogsLAN to WAN Logs DMZ to WAN LogsWAN to LAN Logs DMZ to LAN LogsWAN to DMZ Logs V1.0, January Why do I need Two-Factor Authentication? What are the benefits of Two-Factor Authentication?Netgear Two-Factor Authentication Solutions What is Two-Factor AuthenticationFigure D-1 Figure D-3 Appendix E Related Documents Document LinkV1.0, January Index NumericsIndex-2 Index-3 Index-4 Index-5 Index-6 Index-7 Index-8 Index-9 Index-10 Index-11 Index-12 Index-13 Index-14 Index-15 Index-16