Manuals / NETGEAR / Computer Equipment / Network Hardware

NETGEAR UTM5-100NAS, UTM50-100NAS manual Invalidbadchecksumdrop SRC=192.168.20.10

Models: UTM5-100NAS UTM50-100NAS

1 484

Download 484 pages 53.33 Kb

Page 455

ProSecure Unified Threat Management (UTM) Appliance Reference Manual

Table C-17. System Logs: Invalid Packets (continued)

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][BAD_CHECKSUM]DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Bad checksum.

Recommended Action	None

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][BAD_HW_CHECKSUM][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=ICMP TYPE=3 CODE=0

Explanation	Bad hardware checksum for ICMP packets.

Recommended Action	None

Message	[INVALID][MALFORMED_PACKET][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Malformed packet.

Recommended Action	None

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][SHORT_PACKET][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Short packet.

Recommended Action	None

Message	[INVALID][ INVALID_STATE][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Packet with invalid state.

Recommended Action	None

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][REOPEN_CLOSE_CONN][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Attempt to re-open/close session.

Recommended Action	None

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][OUT_OF_WINDOW][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899

Explanation	Packet not in TCP window.

Recommended Action	None

Message	2007 Oct 1 00:44:17 [UTM] [kernel]
	[INVALID][ERR_HELPER_ROUTINE][DROP] SRC=192.168.20.10
	DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899


System Logs and Error Messages		C-11

v1.0, January 2010

Image 455

NETGEAR UTM5-100NAS, UTM50-100NAS Invalidbadchecksumdrop SRC=192.168.20.10, Invalidbadhwchecksumdrop SRC=192.168.20.10

Contents

NETGEAR, Inc Bestätigung des Herstellers/Importeurs TrademarksStatement of Conditions EU Regulatory Compliance StatementTerms Voluntary Control Council for Interference Vcci StatementAdditional Copyrights AESMD5 Product Name Product and Publication DetailsModel Number Publication Date January Product FamilyV1.0, January Contents Dual-WAN Port Models Only Chapter Manually Configuring Internet and WAN SettingsChapter LAN Configuration Chapter Content Filtering and Optimizing Scans Chapter Virtual Private Networking Using SSL Connections Changing Passwords and Administrator Settings Features That Reduce TrafficFeatures That Increase Traffic Using QoS and Bandwidth Assignment to Shift the Traffic MixConfiguring and Activating System, E-mail, and Syslog Logs Configuring Date and Time ServiceConfiguring Logging, Alerts, and Event Notifications Configuring the E-mail Notification ServerTesting the Path from Your PC to a Remote Device Troubleshooting the ISP ConnectionTroubleshooting a TCP/IP Network Using a Ping Utility Testing the LAN Path to Your UTMAppendix D Two Factor Authentication Xvi Conventions, Formats, and Scope About This ManualPart Number Version Date Description How to Print This ManualRevision History Chapter Introduction Key Features and Capabilities Advanced VPN Support for Both IPsec and SSL Stream Scanning for Content Filtering Powerful, True FirewallAutosensing Ethernet Connections with Auto Uplink Security FeaturesExtensive Protocol Support Easy Installation and ManagementDifferences Between the UTM Models Maintenance and SupportModel Comparison Deployment Service Registration Card with License KeysPackage Contents Front Panel Hardware FeaturesDMZ LED LED DescriptionsObject Activity Description LAN PortsReceptacle Security lock Console port Reset button AC power ReceptacleRear Panel Bottom Panel With Product Label4shows the product label for the UTM5 6shows the product label for the UTM25 Choosing a Location for the UTMUsing the Rack-Mounting Kit V1.0, January Understanding the Steps for Initial Connection Using the Setup Wizard to Provision the UTM in Your NetworkQualified Web Browsers Logging In to the UTMV1.0, January V1.0, January Understanding the Web Management Interface Menu Layout V1.0, January Using the Setup Wizard to Perform the Initial Configuration Setup Wizard of 10 LAN Settings Dhcp Setup Wizard LAN SettingsSetting Description or Subfield and Description Setting Description or Subfield and Description DNS Proxy Setup Wizard of 10 WAN SettingsISP Type Setup Wizard WAN SettingsSetting Description or Subfield and Description ISP Login Get Automatically from ISP radio button Internet IP AddressISP Domain Name Server DNS ServersSetup Wizard of 10 System Date and Time Adjust for Daylight Savings Time checkbox Setup Wizard System Date and Time SettingsSetup Wizard of 10 Services Peer-to-Peer P2P Setup Wizard Services SettingsWeb Instant MessagingSetting Description or Subfield and Description Action Setup Wizard of 10 Email SecuritySetup Wizard Email Security Settings Scan Exceptions Setup Wizard of 10 Web SecuritySee Performance Management on Setup Wizard Web Security SettingsSetup Wizard of 10 Web Categories to Be Blocked Blocked Categories Time of Day Setup Wizard Content Filtering SettingsBlocked Categories Scheduled Days Administrator Email Notification Settings Setup Wizard of 10 Email NotificationSetup Wizard Administrator Email Notification Settings Setup Wizard of 10 Signatures & Engine Update Frequency Setup Wizard of 10 Saving the ConfigurationSetup Wizard Signatures & Engine Settings Update SettingsRegistering the UTM with Netgear Verifying Proper InstallationTesting Connectivity Testing Http ScanningClick Register What to Do Next Understanding the Internet and WAN Configuration Tasks Manually Configuring Internet and WAN SettingsAutomatically Detecting and Connecting Configuring the Internet ConnectionsV1.0, January Pptp Internet connection methodsConnection Method Data Required Manually Configuring the Internet Connection Setting the UTM’s MAC AddressV1.0, January Pptp and PPPoE Settings Internet IP Address Settings DNS Server Settings Network Address Translation All Models Classical Routing All Models Configuring Auto-Rollover Mode Dual-WAN Port Models OnlySetting Description or Subfield and Description Port Mode Auto-Rollover Mode Settings Dual-WAN Port Models OnlyWAN2 Configuring the Internet Connections onWAN1 V1.0, January Using the Services menu see Services-Based Rules on Protocol Binding Settings Dual-WAN Port Models OnlyDestination Configuring Secondary WAN Addresses V1.0, January Select Network Config Dynamic DNS from the menu Configuring Dynamic DNSV1.0, January WAN2 Dynamic DNS Status DNS Service SettingsConfiguring Advanced WAN Options Port Speed Advanced WAN SettingsSetting Description or Subfield and Description MTU Size Use Default Address radio buttonUpload/Download Settings Additional WAN-Related Configuration TasksManaging Virtual LANs and Dhcp Options Chapter LAN ConfigurationManaging the UTM’s Port-Based VLANs V1.0, January Dhcp Server Vlan Dhcp OptionsDNS Proxy Dhcp RelayLdap Server Configuring a Vlan ProfileV1.0, January Vlan Vlan Profile SettingsVlan ID Port MembershipEnable Dhcp Starting IP Inter Vlan Routing Configuring Multi-Home LAN IPs on the Default Vlan Managing Groups and Hosts LAN Groups Managing the Network Database V1.0, January Adding PCs or Devices to the Network Database Add Known PCs and Devices SettingsSetting Up Address Reservation on Editing PCs or Devices in the Network Database Changing Group Names in the Network DatabaseSetting Up Address Reservation Configuring and Enabling the DMZ Port V1.0, January DMZ Setup Settings Own LAN IP address as the primary DNS server IP address Managing Routing Configuring Static Routes Static Route Settings Configuring Routing Information Protocol RIPSelect Network Configuration Routing from the menu Out Only . RIP Configuration SettingsAuthentication for RIP-2B/2M Static Route Example V1.0, January About Firewall Protection Chapter Firewall ProtectionAdministrator Tips Number of Supported Firewall Rule Configurations Using Rules to Block or Allow Specific Kinds of TrafficServices-Based Rules Outbound Rules Service Blocking Hosts LAN Groups on Customized Services onOutbound Rules Overview To Block or Allow Specific Traffic onNAT IP Inbound Rules Port ForwardingV1.0, January Inbound Rules Overview Hosts LAN Groups on Useful when debugging your rules Order of Precedence for Rules Setting LAN WAN Rules LAN WAN Outbound Services Rules LAN WAN Inbound Services Rules Setting DMZ WAN Rules V1.0, January DMZ WAN Outbound Services Rules DMZ WAN Inbound Services Rules Setting LAN DMZ Rules LAN DMZ Outbound Services Rules LAN DMZ Inbound Services Rules LAN WAN Inbound Rule Hosting a Local Public Web Server Inbound Rules ExamplesV1.0, January V1.0, January LAN WAN or DMZ WAN Inbound Rule Specifying an Exposed Host LAN WAN Outbound Rule Blocking Instant Messenger Outbound Rules ExampleAttack Checks Configuring Other Firewall FeaturesAttack Checks Settings L2TP VPN Pass throughSetting Session Limits Managing the Application Level Gateway for SIP Sessions Session Limit SettingsSession Timeout Adding Customized Services Creating Services, QoS Profiles, and Bandwidth ProfilesV1.0, January TCP Services SettingsCreating Quality of Service QoS Profiles V1.0, January Default High Medium High Low QoS Profile SettingsCreating Bandwidth Profiles V1.0, January Bandwidth Profile Settings Setting a Schedule to Block or Allow Specific Traffic Enabling Source MAC Filtering V1.0, January Setting up IP/MAC Bindings IP/MAC Bindings IP/MAC Binding SettingsEvent Notifications on Configuring Port Triggering V1.0, January 10. Port Triggering Settings Using the Intrusion Prevention System V1.0, January V1.0, January Misc 11. IPS Less Familiar Attack NamesAttack Name Description or Subfield and Description Web About Content Filtering and Scans Content Filtering and Optimizing ScansDefault E-mail and Web Scan Settings Default E-mail and Web Scan SettingsScan Type Default Scan Setting Default Action if applicable Configuring E-mail ProtectionCustomizing E-mail Protocol Scan Settings Customizing E-mail Anti-Virus and Notification Settings Performance see Performance Management on E-mail Anti-Virus and Notification SettingsNotification Settings Mail Email Alert SettingsFILENAME%, %ACTION%, %VIRUSNAME% Mail Content FilteringTIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT% V1.0, January Filter by Password-Protected Attachments ZIP, RAR, etc E-mail Filter SettingsProtected Attachments ZIP, RAR, etc. section above Password-Protected Attachments ZIP, RAR, etc. section aboveProtecting Against E-mail Spam Filter by File NameSetting Up the Whitelist and Blacklist V1.0, January Whitelist/Blacklist Settings Configuring the Real-time BlacklistV1.0, January Configuring Distributed Spam Analysis Distributed Spam Analysis Settings Block spam email Anti-Spam Engine SettingsLow Medium-Low Customizing Web Protocol Scan Settings and Services Configuring Web and Services ProtectionSetting Description or Subfield and Description Web Web Protocol, Instant Messaging, and Peer-to-Peer SettingsConfiguring Web Malware Scans Malware Scan Settings Html Scan Configuring Web Content FilteringV1.0, January Content Filtering, screen 1 10 Content Filtering, screen 2 11 Content Filtering, screen 3 Block Web Objects Content Filtering SettingsPerformance Management on Full-Text SearchBlocked Categories Scheduled Days Netgear Configuring Web URL FilteringURL V1.0, January Blacklist URL Filtering SettingsSetting Description or Subfield and Description Whitelist URL% Https Scan Settings V1.0, January V1.0, January Specifying Trusted Hosts 10. Https SettingsV1.0, January 11. Trusted Hosts Settings Configuring FTP Scans12. FTP Scan Settings Block Files with the Following Extensions Setting Web Access Exceptions and Scanning ExclusionsSetting Web Access Exception Rules To set Web access exception rules Groups and Hosts LAN Groups on 13. Add and Edit Block Scanning Exception SettingsSetting Scanning Exclusions 14. Add Scanning Exclusion Settings V1.0, January Chapter Virtual Private Networking Using IPsec Connections IP Addressing for VPNs in Dual WAN Port Systems UTMIP Addressing for VPNs in Dual WAN Port Systems Creating Gateway-to-Gateway VPN Tunnels with the Wizard V1.0, January Connection Name and Remote IP Type IPsec VPN Wizard Settings for a Gateway-to-Gateway TunnelEnd Point Information a Secure Connection Remote AccessibilityManually Adding or Editing a VPN Policy on V1.0, January Creating a Client to Gateway VPN Tunnel V1.0, January Fqdn IPsec VPN Wizard Settings for a Client-to-Gateway TunnelV1.0, January V1.0, January Status on Security Policy Editor Remote Party SettingsOnly Connect Manually checkbox Gateway TunnelSecurity Policy Editor My Identity Settings On page 7-10. In this example, the domain name is Detection checkbox Testing the Connections and Viewing Status InformationTesting the VPN Connection Security Policy Editor Security Policy SettingsNetgear VPN Client Status and Log Information V1.0, January System Tray Icon Status Viewing the UTM IPsec VPN Connection StatusStatus Indications for the VPN Client System Tray Icon IPsec VPN Connection Status Information Viewing the UTM IPsec VPN LogManaging IPsec VPN Policies IKE Policies Screen Managing IKE PoliciesList of IKE Policies Information Manually Adding or Editing an IKE Policy V1.0, January General 10. Add IKE Policy SettingsDescription or Subfield and Description Mode Config Record IKE SA Parameters LocalRemote Keepalives and Dead ConfiguringGroup 1 768 bit Group 5 1536 bitConfiguration on Screen see User Database Configuration onVPN Policies Screen Managing VPN PoliciesRemote 11. List of VPN Policies InformationManually Adding or Editing a VPN Policy V1.0, January Dead Peer 12. Add VPN Policy SettingsConfiguring Keepalives Description or Subfield and Description GeneralManual Policy Parameters Traffic SelectionAuto Policy Parameters Group 1536 bit Configuring Extended Authentication XauthGroup 768 bit Configuring Xauth for VPN Clients Information, see Radius Client Configuration on User Database ConfigurationRadius Client Configuration V1.0, January Primary Radius Server 14. Radius Client SettingsBackup Radius Server Connection ConfigurationConfiguring Mode Config Operation on the UTM Assigning IP Addresses to Remote Users Mode ConfigMode Config Operation V1.0, January Description or Subfield and Description Client Pool 15. Add Mode Config Record SettingsTraffic Tunnel Security Level V1.0, January 16. Add IKE Policy Settings for a Mode Config Configuration Menu, select Group 2 1024 bit Description or Subfield and Description RemoteConfiguring the ProSafe VPN Client for Mode Config Operation 192.168.1.0 Mask Gateway Tunnel 18. Security Policy Editor My Identity, Mode Config Settings Menu Testing the Mode Config Connection Configuring Keepalives and Dead Peer DetectionConfiguring Keepalives 20. Keepalive Settings Configuring Dead Peer Connection21. Dead Peer Detection Settings Configuring NetBIOS Bridging with IPsec VPN V1.0, January Understanding the SSL VPN Portal Options Chapter Virtual Private Networking Using SSL ConnectionsUsing the SSL VPN Wizard for Client Configurations SSL VPN Wizard of 6 Portal Settings Screen as shown in -8 on SSL VPN Wizard Portal SettingsPortal Layout and Theme Name SSL VPN Portal Pages to Display SSL VPN Wizard of 6 Domain SettingsRadius Client SSL VPN Wizard Domain SettingsDomain Name SSL VPN Wizard of 6 User Settings SSL VPN Wizard User Settings SSL VPN Wizard of 6 Client IP Address Range and Routes Add Routes for VPN Tunnel Clients SSL VPN Wizard Client IP Address Range and Routes SettingsClient IP Address Range SSL VPN Wizard of 6 Port Forwarding SSL VPN Wizard Port Forwarding SettingsAdd New Host Name for Port Forwarding SSHSSL VPN Wizard of 6 Verify and Save Your Settings Accessing the New SSL Portal Login Screen V1.0, January Viewing the UTM SSL VPN Log Viewing the UTM SSL VPN Connection StatusManually Configuring and Editing SSL Connections Creating the Portal Layout V1.0, January V1.0, January Revalidate Add Portal Layout SettingsConfiguring Applications for Port Forwarding Configuring Domains, Groups, and UsersAdding Servers and Port Numbers TCP Application Port Number Adding a New Host NamePort Forwarding Applications/TCP Port Numbers Fully Qualified Domain Name. The full server name Configuring the SSL VPN ClientConfiguring the Client IP Address Range Tunnel Clients on Adding Routes for VPN Tunnel ClientsUsing Network Resource Objects to Simplify Policies Adding New Network Resources Editing Network Resources to Specify Addresses Add Resource Addresses Settings Configuring User, Group, and Global PoliciesViewing Policies Adding a Policy Policy For 10. Add Policy SettingsNetwork Resource Objects to Simplify Policies on Description or Subfield and Description Add SSL VPN Policies10. Add Policy Settings V1.0, January V1.0, January Configuring VPN Authentication Domains, Groups, and Users Managing Users, Authentication, and CertificatesAuthentication Protocols and Methods Configuring DomainsLdap Add Domain Settings Creating the Portal Layout on Configuring Groups for VPN Policies Creating and Deleting Groups Editing Groups VPN Group SettingsConfiguring User Accounts V1.0, January Policies on Add User SettingsSee Configuring Extended Authentication Xauth on Configuring Login Policies Setting User Login PoliciesConfiguring Login Restrictions Based on IP Address Add Defined Addresses Settings Configuring Login Restrictions Based on Web BrowserInternet Explorer Opera Netscape Navigator Changing Passwords and Other User Settings Managing Digital Certificates Edit User SettingsEnabled see Configuring Extended Authentication Xauth on V1.0, January 11 Certificates, screen 1 Managing CA CertificatesManaging Self Certificates Generating a CSR and Obtaining a Self Certificate from a CA Setting Generate Self Certificate Request Settings512 1024 2048 V1.0, January Viewing and Managing Self Certificates Managing the Certificate Revocation List15Certificates, screen 3 Bandwidth Capacity Performance ManagementFeatures That Reduce Traffic Network and System Management 10-3 Content Filtering Source MAC Filtering Features That Increase Traffic10-6 Network and System Management Port Triggering Configuring the DMZ PortAssigning QoS Profiles Using QoS and Bandwidth Assignment to Shift the Traffic MixConfiguring Exposed Hosts Configuring VPN TunnelsAssigning Bandwidth Profiles Changing Passwords and Administrator SettingsSystem Management Monitoring Tools for Traffic Management10-10 Network and System Management Network and System Management 10-11 Configuring Remote Management Access Https//IPaddress or https//FullyQualifiedDomainName Using an Snmp Manager Trusted Snmp Hosts Managing the Configuration FileSnmp Settings Setting Description or Subfield and Description SettingsBackup Settings Restore Settings Updating the Firmware Reverting to Factory Default SettingsViewing the Available Firmware Versions Upgrading the Firmware and Rebooting the UTM Updating the Scan Signatures and Scan Engine Firmware Rebooting Without Changing the Firmware10-22 Network and System Management Signatures & Scan Engine Settings Configuring Automatic Update and Frequency SettingsSystem Date & Time Settings Configuring Date and Time ServiceNetwork and System Management 10-25 10-26 Network and System Management Enabling the WAN Traffic Meter Monitoring System Access and Performance11-2 Monitoring System Access and Performance Logging, Alerts, and Event Notifications on WAN Traffic Meter SettingsTraffic Counter System, E-mail, and Syslog Logs on Configuring the E-mail Notification Server Configuring Logging, Alerts, and Event NotificationsServer requires authentication checkbox and enter Configuring and Activating System, E-mail, and Syslog LogsE-mail Notification Settings Monitoring System Access and Performance 11-7 Email Logs to Administrator E-mail and Syslog SettingsSend Logs via Syslog Configuring and Activating Update Failure and Attack Alerts Alerts Settings ACTION%, %VIRUSNAME% PROTOCOL%, %FROM%, %TO%, %SUBJECT%, %FILENAME%Configuring and Activating Firewall Logs Monitoring Real-Time Traffic, Security, and Statistics Firewall Logs SettingsDashboard, screen 1 System on Settings onSpam to configure, see Protecting Against E-mail Spam on Total ThreatsTotal Traffic Bytes Threats CountsPrevention System on Categories, see Using the IntrusionDashboard Most Recent 5 and Top 5 Information Category Most Recent 5 Description Top 5 DescriptionDashboard, screen 3 Dashboard Service Statistics InformationViewing System Status Viewing Status ScreensSystem Status Status and System Information Setting Status11 System Status, screen 2 Dhcp NATLAN Port 11. System Status Interface Statistics Viewing Active VPN UsersViewing VPN Tunnel Connection Status 12. IPsec VPN Connection Status Information Viewing Port Triggering Status To view the status of the Port Triggering feature13. Port Triggering Status Information Viewing the WAN Ports Status11-28 Monitoring System Access and Performance Viewing Attached Devices Models see Manually Configuring the Internet Connection onEdit Vlan Profile screen see Configuring a Vlan Profile on Viewing Attached Devices and the Dhcp Log11-30 Monitoring System Access and Performance Viewing the Dhcp Log Querying the Logs Querying Logs and Generating ReportsMonitoring System Access and Performance 11-33 15. Logs Query Settings Following protocols can be selected See Configuring and Activating Firewall Logs onThis field is available for the following logs This field is available only for the Malware log Following categories can be selectedFollowing reasons can be selected This field is available only for the Spam logThis field is available only for the Content filters log EMERG, ALERT, CRITICAL, ERROR, WARNING, NoticeThis field is available only for the Service log Log Management Example Using Logs to Identify Infected ClientsScheduling and Generating Reports Generating Reports System Reports 16. Generate Report SettingsEmail Reports Web ReportsScheduling Reports 17. Schedule Report SettingsReport List Using Diagnostics UtilitiesEmail Reports Web Reports System Reports Sending a Ping Packet Using the Network Diagnostic ToolsLooking up a DNS Address Tracing a RouteDisplaying the Routing Table 27 Diagnostics, screen 2 Using the Realtime Traffic Diagnostics ToolGenerating Network Statistics Gathering Important Log InformationRebooting and Shutting Down the UTM Troubleshooting and Using Online Support Test LED Never Turns Off Power LED Not OnBasic Functioning LAN or WAN Port LEDs Not On Troubleshooting the Web Management InterfaceWhen You Enter a URL or IP Address a Time-out Error Occurs Troubleshooting the ISP Connection 12-6 Troubleshooting and Using Online Support Testing the LAN Path to Your UTM Troubleshooting a TCP/IP Network Using a Ping UtilityPing -n 10 IP address Testing the Path from Your PC to a Remote DeviceRestoring the Default Configuration and Password Enabling Remote Troubleshooting Problems with Date and TimeUsing Online Support Sending Suspicious Files to Netgear for Analysis Malware Analysis Settings Accessing the Knowledge Base and DocumentationLocal Network LAN Table A-1. UTM Default Configuration SettingsFeature Default behavior Router Login Internet ConnectionTable A-2. UTM Physical and Technical Specifications Setting Specification Table A-3. UTM IPsec VPN SpecificationsFeature Specification Environmental Specifications Interface SpecificationsMD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1 Table A-4. UTM SSL VPN SpecificationsWhat to Consider Before You Begin Internet WAN port Physical facilityCabling and Computer Hardware Requirements Computer Network Configuration RequirementsInternet Configuration Requirements Internet Connection Information Where Do I Get The Internet Configuration Information?Overview of the Planning Process Figure B-2 Inbound Traffic to a Single WAN Port System Inbound TrafficInbound Traffic Dual WAN Ports for Load Balancing Inbound Traffic to a Dual WAN Port SystemInbound Traffic Dual WAN Ports for Improved Reliability To-Gateway Through a NAT Virtual Private Networks VPNsVPN Road Warrior Client To-GatewayFigure B-7 VPN Road Warrior Single Gateway WAN Port Reference Case VPN Road Warrior Client-to-GatewayFigure B-10 VPN Road Warrior Dual Gateway WAN Ports for Load Balancing VPN Gateway-to-GatewayFigure B-13 Figure B-15 VPN Telecommuter Single Gateway WAN Port Reference Case VPN Telecommuter Client-to-Gateway Through a NAT RouterFigure B-18 Figure B-20 VPN Telecommuter Dual Gateway WAN Ports for Load BalancingTerm Description or Subfield and Description Table C-1. Log Message TermsSystem Startup RebootTable C-3. System Logs Reboot System Log MessagesTable C-5. System Logs NTP Service LogsTable C-4. System Logs Service IPsec Restart Login/LogoutFirewall Restart ACTIVEWAN2 Auto-Rollover ModeWAN Status System Logs WAN Status, Auto RolloverTable C-9. System Logs WAN Status, Load Balancing Load-Balancing ModePPP Logs Table C-10. System Logs WAN Status, PPPoE Idle-TimeoutTable C-12. System Logs WAN Status, PPP Authentication Table C-11. System Logs WAN Status, Pptp Idle-TimeoutIcmp Redirect Logs Traffic Metering LogsUnicast Logs Table C-17. System Logs Invalid Packets Invalid Packet LoggingMulticast/Broadcast Logs Table C-16. System Logs Multicast/BroadcastInvalidshortpacketdrop SRC=192.168.20.10 Invalidbadchecksumdrop SRC=192.168.20.10Invalidbadhwchecksumdrop SRC=192.168.20.10 Invalidmalformedpacketdrop SRC=192.168.20.10Web Filtering and Content Filtering Logs Content Filtering and Security LogsSpam Logs Table C-19. Content Filtering and Security Logs SpamVirus Logs Table C-20. Content Filtering and Security Logs TrafficTable C-21. Content Filtering and Security Logs Virus Traffic LogsPort Scan Logs Table C-23. Content Filtering and Security Logs IPSTable C-24. Content Filtering and Security Logs Port Scan IPS LogsDMZ to WAN Logs Routing LogsLAN to WAN Logs LAN to DMZ LogsWAN to DMZ Logs WAN to LAN LogsDMZ to LAN Logs V1.0, January What are the benefits of Two-Factor Authentication? Why do I need Two-Factor Authentication?What is Two-Factor Authentication Netgear Two-Factor Authentication SolutionsFigure D-1 Figure D-3 Document Link Appendix E Related DocumentsV1.0, January Numerics IndexIndex-2 Index-3 Index-4 Index-5 Index-6 Index-7 Index-8 Index-9 Index-10 Index-11 Index-12 Index-13 Index-14 Index-15 Index-16