ProSecure Unified Threat Management UTM Appliance
ProSecure Unified Threat Management UTM Appliance
ProSecure Product Updates ProSecure Forum Revision History
Support
Trademarks
Configure Quarantine Settings, Query and Manage
Settings and Technical Specifications
Updated Features That Reduce Traffic and Features That
Application control see Configure Application Control
Configure Distributed Spam Analysis section
Appendix B, Wireless Network Module for the UTM9S UTM25S
Added the Requirements for Entering IP Addresses
Contents
Manually Configure Internet and WAN Settings
Firewall Protection
Content Filtering and Optimizing Scans
Virtual Private Networking Using SSL Connections
Network and System Management
Troubleshoot and Use Online Support
Appendix a xDSL Network Module for the UTM9S and UTM25S
Appendix E ReadyNAS Integration
Appendix H Default Settings and Technical Specifications
Introduction
Introduction
Key Features and Capabilities
Single or multiple exposed hosts Virtual private networks
DSL Features
Wireless Features
Advanced VPN Support for Both IPSec and SSL
Stream Scanning for Content Filtering
Powerful, True Firewall
Autosensing Ethernet Connections with Auto Uplink
Security Features
Extensive Protocol Support
Easy Installation and Management
Model Comparison
Maintenance and Support
UTM model comparison
Network Modules and Broadband Adapters
Service Registration Card with License Keys
Hardware Features
Package Contents
Test LED Right WAN LED Right LAN LEDs
Power LED
Front Panel UTM5 and UTM10
USB port Left LAN LEDs
Test LED Right LAN LEDs Right WAN LEDs LEDs
Front Panel UTM25
Front Panel UTM50
USB port Left LAN LEDs Left WAN LEDs Active
Active WAN LEDs Test LED Right LAN LEDs Right WAN LEDs
Power LED Left LAN LEDs Left WAN LEDs USB port
Front Panel UTM150
LEDs Right WAN LEDs Test LED Right LAN LEDs
Test LED Right LAN LEDs
Power LED Left WAN LEDs Slot Left LAN LEDs USB port
Front Panel UTM9S and UTM25S and Network Modules
Active WAN LEDs
XDSL Network Modules
Wireless Network Modules
LED descriptions UTM5, UTM10, UTM25, UTM50, and UTM150
LED Descriptions, UTM5, UTM10, UTM25, UTM50, and UTM150
Activity Description
DMZ LED
Activity Description LAN ports
WAN ports
LED descriptions UTM9S and UTM25S
LED Descriptions, UTM9S, UTM25S, and their Network Modules
USB LED
XDSL network modules
Wireless network module
Rear Panel UTM5, UTM10, and UTM25
Receptacle
Port
Factory Defaults Security lock
Reset button Receptacle
Rear Panel UTM50 and UTM150
Switch
Security lock AC power Receptacle Factory Defaults
Reset button Console switch
Power
Bottom Panels with Product Labels
ProSecure Unified Threat Management UTM Appliance
ProSecure Unified Threat Management UTM Appliance
Choose a Location for the UTM
Use the Rack-Mounting Kit
Steps for Initial Connection
Use the Setup Wizard to Provision UTM in Your Network
Requirements for Entering IP Addresses
Use the Setup Wizard to Provision the UTM in Your Network
Log In to the UTM
Qualified Web Browsers
ProSecure Unified Threat Management UTM Appliance
Web Management Interface Menu Layout
ProSecure Unified Threat Management UTM Appliance
ProSecure Unified Threat Management UTM Appliance
To start the Setup Wizard
Use the Setup Wizard to Perform the Initial Configuration
Setup Wizard of 10 LAN Settings
Dhcp
Setting Description LAN TCP/IP Setup
DNS Proxy
Setting Description
Setting Description Inter Vlan Routing
Setup Wizard of 10 WAN Settings
Setting Description ISP Login
Setup Wizard WAN Settings screen settings
ISP Type
Dhcp
See Configure Load Balancing Multiple WAN Port Models
Internet IP Address
ISP
Domain Name Server DNS Servers
Setup Wizard of 10 System Date and Time
Get Automatically from ISP radio button
For Daylight Savings Time check box
Setup Wizard of 10 Services
Setup Wizard System Date and Time screen settings
Setting Description Set Time, Date, and NTP Servers
Web
Setup Wizard Services screen settings
Setup Wizard Email Security screen settings
Setup Wizard of 10 Email Security
Setting Description Action
Scan Exceptions
Setup Wizard of 10 Web Security
Http
Setup Wizard of 10 Web Categories to Be Blocked
Blocked Categories Time of Day
Setup Wizard Web Categories to be blocked screen settings
Setting Description Blocked Web Categories
Blocked Categories Scheduled Days
Setup Wizard Email Notification screen settings
Setup Wizard of 10 Email Notification
Setup Wizard Signatures & Engine screen settings
Setup Wizard of 10 Signatures & Engine
Setting Description Update Settings
Setting Description Update Frequency
Setup Wizard of 10 Saving the Configuration
Https Proxy Settings
Use the Web Management Interface to Activate Licenses
Register the UTM with Netgear
ProSecure Unified Threat Management UTM Appliance
To retrieve and display the registered information
Electronic Licensing
Click Retrieve Info
Test Http Scanning
Verify Correct Installation
What to Do Next
Test Connectivity
ProSecure Unified Threat Management UTM Appliance
Manually Configure Internet and WAN Settings
Manually Configure Internet and WAN Settings
Internet and WAN Configuration Tasks
Complete these steps
ProSecure Unified Threat Management UTM Appliance
ProSecure Unified Threat Management UTM Appliance
Pptp
Connection method Manual data input required
If the automatic ISP configuration is successful
Manually Configure the Internet Connection
If the automatic ISP configuration fails
Pptp and PPPoE settings
Balancing Multiple WAN Port Models on page 86 . To use load
Identifier check box
DNS server settings
If the manual ISP configuration fails
If the manual ISP configuration is successful
Overview of the WAN Modes
Configure the WAN Mode
Configure Network Address Translation All Models
Configure Classical Routing All Models
To configure auto-rollover mode
Configure Auto-Rollover Mode
Setting Description WAN Failure Detection Method
Configure the Failure Detection Method
To configure the failure detection method
Failure detection method settings
Ping
To configure load balancing
Configure Load Balancing Multiple WAN Port Models
Configure Protocol Binding Optional
Screen see Outbound Rules Service Blocking on
Add Protocol Binding screen settings
Change Group Names in the Network Database on
To edit a protocol binding
Configure Secondary WAN Addresses
To add a secondary WAN address to a WAN interface
To delete one or more secondary addresses
Configure Dynamic DNS
To configure Ddns
DNS service settings
Click Apply to save your configuration
Set the UTM’s MAC Address and Configure Advanced WAN Options
Setting Description MTU Size
Advanced WAN settings
Failure Detection Method
Setting Speed Description
Upload/Download Settings
1000BaseT FullDuplex. Gigabit Ethernet Router’s MAC Address
Additional WAN-Related Configuration Tasks
Manage Virtual LANs and Dhcp Options
LAN Configuration
Port-Based VLANs
LAN Configuration
100
Assign and Manage Vlan Profiles
101
Vlan Dhcp Options
102
Dhcp Server
Dhcp Relay
DNS Proxy
103
Configure a Vlan Profile
Ldap Server
To add or edit a Vlan profile
104
Port Membership
Edit Vlan Profile screen settings
Setting Description Vlan Profile
105
106
107
To edit a Vlan profile
Configure Vlan MAC Addresses and Advanced LAN Settings
To enable, disable, or delete one or more Vlan profiles
To configure a Vlan to have a unique MAC address
109
Configure Multihome LAN IP Addresses on the Default
110
To add a secondary LAN IP address
111
Manage Groups and Hosts LAN Groups
To edit a secondary LAN IP address
To delete one or more secondary LAN IP addresses
112
Manage the Network Database
113
Modify Computers or Devices in the Network Database
Known PCs and devices settings
Setting Description Name
Add Computers or Devices to the Network Database
115
Change Group Names in the Network Database
Delete Computers or Devices from the Network Database
To edit the names of any of the eight available groups
116
Set Up Address Reservation
To enable and configure the DMZ port
Configure and Enable the DMZ Port
117
Setting Description DMZ Port Setup
DMZ Setup screen settings
118
119
120
121
Configure Static Routes
Manage Routing
To add a static route to the Static Route table
122
Add Static Route screen settings
To delete one or more routes
Configure Routing Information Protocol
To enable and configure RIP Select Network Config Routing
To edit a static route that is in the Static Routes table
124
RIP Configuration screen settings
125
Authentication for RIP-2B/2M
126
Static Route Example
127
About Firewall Protection
Firewall Protection
Administrator Tips
128
Number of supported firewall rule configurations
Outbound Rules Service Blocking
129
Block always
Setting Description Outbound Rules
Outbound rules overview
130
Groups and Hosts LAN Groups on
131
132
Service Profiles on
133
Inbound Rules Port Forwarding
NAT IP
134
135
Setting Description Inbound Rules
136
137
Quality of Service Profiles on
138
Order of Precedence for Rules
To change the default outbound policy
Configure LAN WAN Rules
139
140
Create LAN WAN Outbound Service Rules
To change an existing outbound or inbound service rule
To enable, disable, or delete one or more rules
To create an inbound LAN WAN service rule
Create LAN WAN Inbound Service Rules
141
142
Configure DMZ WAN Rules
143
To delete or disable one or more rules
Create DMZ WAN Inbound Service Rules
Create DMZ WAN Outbound Service Rules
144
To create an inbound DMZ WAN service rule
Configure LAN DMZ Rules
145
146
To create an inbound LAN DMZ service rule
Create LAN DMZ Outbound Service Rules
Create LAN DMZ Inbound Service Rules
To create an outbound LAN DMZ service rule
148
Examples of Firewall Rules
Inbound Rule Examples
LAN WAN Inbound Rule Host a Local Public Web Server
149
150
Netgear UTM
151
To configure the UTM for additional IP addresses
152
LAN WAN or DMZ WAN Inbound Rule Specify an Exposed Host
LAN WAN Outbound Rule Block Instant Messenger
Outbound Rule Example
153
154
Configure Other Firewall Features
Vlan Rules
To create a Vlan rule
Add Customized Services on
Add VLAN-VLAN Service screen settings
155
To edit a Vlan rule
To delete or disable one or more Vlan rules
156
157
Attack Checks screen settings
Setting Description WAN Security Checks
Attack Checks, VPN Pass-through, and Multicast Pass-through
158
Configure Multicast Pass-Through
To configure multicast pass-through
Setting Description LAN Security Checks
159
To delete one or more multicast source addresses
To enable and configure session limits
Session Limit screen settings
Set Session Limits
Session Timeout
To enable ALG for SIP and VPN scanning
161
162
163
Add Customized Services
Services screen settings
To add a customized service
164
To create a service group
Create Service Groups
To edit a service
To delete one or more services
166
To edit a service group
To create an IP group
Create IP Groups
167
168
To delete an IP group
To create a QoS profile
Create Quality of Service Profiles
169
170
Add QoS Profile screen settings
To delete one ore more QoS profiles
Default High Medium High Low
Create Bandwidth Profiles
To edit a QoS profile
172
To add and enable a bandwidth profile
173
Add Bandwidth Profile screen settings
174
Create Traffic Meter Profiles
To edit a bandwidth profile
To delete one or more bandwidth profiles
175
To add a traffic meter profile
176
Add Traffic Meter Profile screen settings
To add a schedule
Set a Schedule to Block or Allow Specific Traffic
To edit a traffic meter profile
To delete one or more traffic meter profiles
178
Add Schedule screen settings
Scheduled Days
To delete one or more schedules
Enable Source MAC Filtering
Setting Description Scheduled Time of Day
To edit a schedule
180
To remove one or more entries from the table
To set up IP/MAC bindings
Set Up IP/MAC Bindings
181
IP/MAC Bindings
IP/MAC Binding screen settings
Setting Description Email IP/MAC Violations
182
183
Configure Port Triggering
To edit an IP/MAC binding
To remove one or more IP/MAC bindings from the table
To add a port-triggering rule
Port Triggering screen settings
184
To display the status of the port-triggering rules
To edit a port-triggering rule
185
186
Configure Universal Plug and Play
IPS screen settings
Enable and Configure the Intrusion Prevention System
To enable intrusion prevention
To configure intrusion prevention
188
Security Category Settings
189
IPS, screen 1 Firewall Protection
190
IPS uncommon attack names
Attack Name Description Web
Attack Name Description
191
Misc
192
About Content Filtering and Scans
193
Default Email and Web Scan Settings
Default email and web scan settings
Content Filtering and Optimizing Scans
Scan type Default scan setting Default action if applicable
Configure Email Protection
Customize Email Protocol Scan Settings
To configure the email protocols and ports to scan
195
Protocol Scan Settings on
To configure the antivirus settings for email traffic
Customize Email Antivirus and Notification Settings
196
197
Anti-Virus screen settings for email traffic
Notification Settings
Setting Description Scan Exceptions
198
SUBJECT%, %FILENAME%, %ACTION%, %VIRUSNAME%
Email Content Filtering
Setting Description Email Alert Settings
199
200
201
Email Filters screen settings
Setting Description Email Filters
Filter by Password-Protected Attachments ZIP, RAR, etc
Filter by File Name
Setting Description Filter by File Type
Protect Against Email Spam
202
203
Set Up the Whitelist and Blacklist
204
To configure the whitelist and blacklist
205
Whitelist/Blacklist screen settings
206
Configure the Real-Time Blacklist
To enable the real-time blacklist
To add a blacklist provider to the real-time blacklist
207
Configure Distributed Spam Analysis
Setting Description Distributed Spam Analysis
Distributed Spam Analysis screen settings
208
209
Anti-Spam Engine Settings
Low Medium-Low
210
Configure Web and Services Protection
Customize Web Protocol Scan Settings
Setting Description Send Quarantine Spam Report
211
To configure the web protocols and ports to scan
212
Configure Https Smart Block
213
Add or Edit Https Smart Block Profile settings
214
215
To change a profile
216
Configure Web Malware or Antivirus Scans
Html Scan
Anti-Virus screen settings for HTTP/HTTPS traffic
217
Scan Exception
218
Configure Web Content Filtering
219
To configure web content filtering
220
Setting Description Content Filtering
Content Filtering screen settings
221
Block Web Objects
222
Full-Text Search
Performance Management on
223
URL
Configure Web URL Filtering
Setting Description Web Category Lookup
224
225
To configure web URL filtering
Blacklist
URL Filtering screen settings
Setting Description Whitelist
226
URL%
227
How Https Scanning Works
Configure Https Scanning and SSL Certificates
228
229
230
Configure the Https Scan Settings
To configure the Https scan settings
Https Settings screen settings
231
Manage SSL Certificates for Https Scanning
232
Manage the Active Https Certificate
233
Manage Trusted Https Certificates
Manage Untrusted Https Certificates
235
Specify Trusted Hosts for Https Scanning
To delete an untrusted certificate
To specify trusted hosts
236
Trusted Hosts screen settings
237
Configure the SSL Settings for Https Scanning
To configure the SSL settings for Https scanning
SSL Settings screen settings
Anti-Virus screen settings for FTP
Configure FTP Scanning
Customize FTP Antivirus Settings
To configure the antivirus settings for FTP traffic
239
Configure FTP Content Filtering
To configure the FTP filters
Setting Description Scan Exception
240
Configure Application Control
241
242
243
244
To select one or more categories of applications
To select one or more individual applications
To search for an application
245
Meter Profiles on
Application Control Policy pop-up screen settings
Setting Description Policy for a category of applications
246
247
To change an existing application control profile
To delete one or more application control profiles
Set Exception Rules for Web and Application Access
248
249
To set web access exception rules
250
Application
Https Smart Block
File Extension
251
252
Add or Edit Exceptions screen settings
URL Filtering
Web Category
253
Ldap
See Configure Radius VLANs on
254
Delete Groups on
To search for an application
255
To select a category of applications
To select a single application
256
For Exceptions for Web and Application Access on
To change an existing exception rule
To disable, enable, or delete one or more exception rules
257
258
To create and manage custom categories
259
Custom categories applications
To select one or more individual applications
Custom Categories screen settings
260
To select one or more categories of applications
To add a URL
261
To remove one or more categories or applications from
Applications in this Category table
To delete one or more custom categories
To configure scanning exclusion rules
Set Scanning Exclusions for IP Addresses and Ports
To change an existing custom category
263
Scanning Exclusion screen settings
264
Virtual Private Networking
265
IP addressing for VPNs in dual WAN port systems
266
Create Gateway-to-Gateway VPN Tunnels with the Wizard
267
SHA-1
Setting Default Value IKE policy
268
3DES
269
IPSec VPN Wizard settings for a gateway-to-gateway tunnel
270
Setting Description Secure Connection Remote Accessibility
271
Create a Client-to-Gateway VPN Tunnel
272
Fqdn
IPSec VPN Wizard settings for a client-to-gateway tunnel
Select the VPN Client radio button. The default remote Fqdn
273
274
275
Information required to configure the VPN client
Component Example Information to be collected
276
277
278
NAT-T
VPN client advanced authentication settings
Setting Description Advanced features
279
280
Type vpnclient
To create new authentication settings
281
IKE
VPN client authentication settings
282
10.34.116.22
283
284
To create an IPSec configuration
Setting Description Local and Remote ID
Type netgearplatform
285
VPN client IPSec configuration settings
ESP
286
To specify the global parameters
287
Test the Netgear VPN Client Connection
288
Click Gateway-Tunnel, and press Ctrl+O
View the UTM IPSec VPN Connection Status
Netgear VPN Client Status and Log Information
289
290
View the UTM IPSec VPN Log
To query the IPSec VPN log
IPSec VPN Connection Status screen information
291
Manage IPSec VPN and IKE Policies
292
To access the IKE Policies screen
Manage IKE Policies
IKE Policies Screen
293
List of IKE Policies table information
294
Manually Add or Edit an IKE Policy
To delete one or more IKE polices
To add an IKE policy manually
295
General
Add IKE Policy screen settings
Setting Description Mode Config Record
296
Remote
297
IKE SA Parameters
298
To edit an IKE policy
Setting Description Extended Authentication
299
VPN Policies Screen
Manage VPN Policies
300
301
List of VPN Policies table information
To add a VPN policy manually
To enable or disable one or more VPN policies
Manually Add or Edit a VPN Policy
To delete one or more VPN polices
303
Setting Description General
Add New VPN Policy screen settings
304
Manual Policy Parameters
Configure Keep-Alives
305
Traffic Selection
306
307
Setting Description Auto Policy Parameters
To edit a VPN policy
Configure Extended Authentication Xauth
308
309
Configure Xauth for VPN Clients
To enable and configure Xauth
Extended authentication settings
310
User Database Configuration
Radius Client and Server Configuration
To configure primary and backup Radius servers
Connection Configuration
Radius Client screen settings
Setting Description Primary Radius Server
Backup Radius Server
312
Assign IP Addresses to Remote Users Mode Config
Mode Config Operation
Configure Mode Config Operation on the UTM
313
To configure Mode Config on the UTM
Setting Description Client Pool
Add Mode Config Record screen settings
314
Traffic Tunnel Security Level
315
316
317
318
Setting Description IKE SA Parameters
Select Group 2 1024 bit
User Database Configuration on
Configure the ProSafe VPN Client for Mode Config Operation
319
320
321
Type GWModeConfig
322
VPN client authentication settings Mode Config
VPN client advanced authentication settings Mode Config
Type TunnelModeConfig
323
324
VPN client IPSec configuration settings Mode Config
Enter
325
Configure the Mode Config Global Parameters
326
Test the Mode Config Connection
327
Modify or Delete a Mode Config Record
To edit a Mode Config record
To delete one or more Mode Config records
Configure Keep-Alives
Configure Keep-Alives and Dead Peer Detection
328
329
Configure Dead Peer Detection
To configure DPD on a configured IKE policy
Keep-alive settings
330
Configure NetBIOS Bridging with IPSec VPN
To enable NetBIOS bridging on a configured VPN tunnel
Dead Peer Detection settings
331
Configure the Pptp Server
Setting Description Pptp Server
Pptp Server screen settings
332
333
Setting Description Authentication
View the Active Pptp Users
To view the active Pptp tunnel users
Pptp IP
Configure the L2TP Server
Pptp Active Users screen information
334
Setting Description L2TP Server
L2TP Server screen settings
335
L2TP Active Users screen information
For More IPSec VPN Information
View the Active L2TP Users
To view the active L2TP tunnel users
337
SSL VPN Portal Options
338
Build a Portal Using the SSL VPN Wizard
Virtual Private Networking Using SSL Connections
To start the SSL VPN Wizard
339
SSL VPN Wizard of 6 Portal Settings
Setting Description Portal Layout and Theme Name
SSL VPN Wizard of 6 screen settings portal settings
340
6 Port Forwarding on
341
SSL VPN Portal Pages to Display
Wizard of 6 Client IP Addresses and Routes on
342
SSL VPN Wizard of 6 Domain Settings
Radius Client
SSL VPN Wizard of 6 screen settings domain settings
Server Configuration
343
344
345
Windows login account name in email format. For
Display name in the dn format. For example
346
SSL VPN Wizard of 6 screen settings user settings
SSL VPN Wizard of 6 User Settings
347
348
SSL VPN Wizard of 6 Client IP Addresses and Routes
349
Setting Description Client IP Address Range
Add Routes for VPN Tunnel Clients
SSL VPN Wizard of 6 Port Forwarding
Setting Description Add New Application for Port Forwarding
350
Add New Host Name for Port Forwarding
SSL VPN Wizard of 6 Verify and Save Your Settings
351
SSH
352
353
Access the New SSL VPN Portal
354
355
356
View the UTM SSL VPN Connection Status
357
Manually Configure and Modify SSL Portals
View the UTM SSL VPN Log
To query the SSL VPN log
358
To create an SSL VPN portal layout
Manually Create or Modify the Portal Layout
359
360
361
Add Portal Layout screen settings
To delete one or more portal layouts
Configure Domains, Groups, and Users
Setting Description SSL VPN Portal Pages to Display
To edit a portal layout
363
Configure Applications for Port Forwarding
Add Servers and Port Numbers
To add a server and a port number
TCP application Port number
To add servers and host names for client name resolution
Add a Host Name
364
Fully Qualified Domain Name. The full server name
Configure the SSL VPN Client
365
366
Configure the Client IP Address Range
SSL VPN Client screen settings
To define the client IP address range
To add an SSL VPN tunnel client route
Add Routes for VPN Tunnel Clients
367
To change the LCP time-out
Configure the Advanced SSL VPN Client Settings
368
369
Use Network Resource Objects to Simplify Policies
Add New Network Resources
To define a network resource
To edit network resources
Resources screen settings to edit a resource
Edit Network Resources to Specify Addresses
To delete one or more network resources
371
Configure User, Group, and Global Policies
372
Global Default Policy
To add an SSL VPN policy
View Policies
Add a Policy
To view the existing policies
Add SSL VPN Policies
Add SSL VPN Policy screen settings
Setting Description Policy For
374
Resource Objects to Simplify Policies on
375
376
To edit an SSL VPN policy
To delete one or more SSL VPN policies
For More SSL VPN Information
377
378
Authentication Process and Options
379
External authentication protocols and methods
Manage Users, Authentication, and VPN Certificates
Authentication Description Protocol or method
380
Configure Authentication Domains, Groups, and Users
Login Portals
Administrative Users and Users with Guest Privileges
381
Users with Special Access Privileges
382
383
384
Active Directories and Ldap Configurations
Unauthenticated or Anonymous Users
How an Active Directory Works
385
How to Bind a DN in an Active Directory Configuration
386
387
Select Users Domains
388
Configure Domains
Create and Delete Domains
To create a domain
389
390
Add Domain screen settings
391
392
393
To edit a domain
Configure Groups
Edit Domains
To delete one or more domains
To create a VPN group
Create and Delete Groups
395
To edit a VPN group
Groups screen settings
Edit Groups
To delete one or more groups
To create and manage custom groups
Configure Custom Groups
397
398
399
Add Custom Group screen settings
To delete one or more custom groups
To change an existing custom group
400
To create an individual user account
Configure User Accounts
401
402
403
Add User screen settings
See Configure Extended Authentication Xauth on
To delete one or more user accounts
404
Set User Login Policies
Configure Login Policies
To configure user login policies
To restrict logging in based on IP address
Configure Login Restrictions Based on IP Address
405
To restrict logging in based on the user’s browser
Configure Login Restrictions Based on Web Browser
By Source IP Address screen settings
To delete one or more addresses
To delete one or more browsers
Internet Explorer Opera Netscape Navigator
407
To modify user settings, including passwords
Change Passwords and Other User Settings
408
409
Edit User screen settings
Configure Extended Authentication Xauth on
DC Agent
410
411
To download ProSecure DC Agent software and add a DC agent
412
To configure AD SSO with a DC agent
DC Agent screen settings
To edit a DC agent
413
414
415
Configure Radius VLANs
To do so, follow this procedure
To configure a Radius Vlan
416
Configure Global User Settings
To log out all active users
View and Log Out Active Users
417
To view all or selected users
Active Users screen settings
418
419
Manage Digital Certificates for VPN Connections
420
VPN Certificates Screen
To view and upload trusted certificates
Manage CA Certificates
421
To delete one or more digital certificates
Manage Self-Signed Certificates
422
423
424
Generate self-signed certificate request settings
512 1024 2048
425
To delete one or more self-signed certificates
Manage the Certificate Revocation List
View and Manage Self-Signed Certificates
To delete one or more SCRs
427
To delete one or more CRLs
Bandwidth Capacity
Performance Management
428
Network and System Management
Features That Reduce Traffic
429
430
431
Content Filtering
Source MAC Filtering
Features That Increase Traffic
432
433
Port Triggering
Configure the DMZ Port
434
Assign QoS Profiles
Configure Exposed Hosts
Configure VPN Tunnels
Use QoS and Bandwidth Assignments to Shift the Traffic Mix
436
Change Passwords and Administrator and Guest Settings
System Management
Monitoring Tools for Traffic Management
437
To configure the UTM for remote management
Configure Remote Management Access
438
439
Https//IPaddress or https//FullyQualifiedDomainName
440
Use a Simple Network Management Protocol Manager
441
442
Global Snmp settings and SNMPv1/v2c settings
Setting Description Snmp Global Settings
SNMPv1/v2c Settings
443
To configure the SNMPv3 settings
SNMPv3 settings
Setting Description SNMPv3 Settings
444
To delete one or more SNMPv3 user profiles
Manage the Configuration File
Restore Settings
To edit an SNMPv3 user profile
To back up settings
Back Up Settings
446
Revert to Factory Default Settings
Restore Settings
447
View the Available Firmware Versions
Update the Firmware
448
449
Firmware screen, available versions
450
Click Install Downloaded Firmware
451
To download the latest firmware for your UTM
452
453
454
Update the Scan Signatures and Scan Engine Firmware
Reboot without Changing the Firmware
To reboot the UTM without changing the firmware
455
456
Configure Date and Time Service
Configure Automatic Update and Frequency Settings
Signatures & Engine screen settings
457
System Date & Time screen settings
Adjust for Daylight Savings Time check box
To set time, date, and NTP servers
458
Connect to a ReadyNAS and Configure Quarantine Settings
459
Log Storage
Connect to a ReadyNAS
To connect to the ReadyNAS on the UTM
460
Configure the Quarantine Settings
To configure the quarantine settings
ReadyNAS Integration screen settings
Unauthenticated or Anonymous Users on
Quarantine settings
461
462
Enable the WAN Traffic Meter
463
Monitor System Access and Performance
Event Notifications on
Setting Description Enable Traffic Meter
464
Traffic Counter
465
Setting Description When Limit is reached
466
Configure Logging, Alerts, and Event Notifications
Configure the Email Notification Server
To configure the email notification server
Email Notification screen settings
Configure and Activate System, Email, and Syslog Logs
467
468
To configure and activate logs
469
Email and Syslog screen settings
Setting Description System Logs Option
Email Logs to Administrator
470
Logs screen see Configure and Activate Firewall Logs on
Send Logs via Syslog
471
How to Send Syslogs over a VPN Tunnel between Sites
Configure Gateway 1 at Site
Setting Description Clear the Following Logs Information
472
Configure Gateway 2 at Site
To change the remote IP address in the VPN policy
To change the local IP address in the VPN policy
473
Configure and Activate Update Failure and Attack Alerts
To configure and activate the email alerts
To specify the syslog server that is connected to Gateway
474
Alerts screen settings
TIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT%
475
FILENAME%, %ACTION%, %VIRUSNAME%
To configure and activate firewall logs
Configure and Activate Firewall Logs
476
Monitor Real-Time Traffic, Security, and Statistics
Setting Description Routing Logs
477
478
Dashboard, screen 1
Total Threats
To set the poll interval
Dashboard screen threats and traffic information
479
Threats Counts
480
Total Traffic Bytes
481
Enable and Configure the Intrusion
482
Dashboard screen service statistics information
RBL
Spam blacklist see Set Up the Whitelist and Blacklist on
Monitor Application Use in Real Time
483
484
485
To set the monitoring period
To filter the information that is displayed onscreen
Application Dashboard screen
View the System Status
View Status Screens
486
Status Description
View the System Status Screen
System Status screen fields
487
System Information
Scan Settings on
View the Network Status Screen
488
LAN Vlan Information
Available Access Points Table
Network Status screen fields
489
Ssid
View the Router Statistics Screen
To view the Router Statistics screen
490
491
View the Wireless Statistics Screen UTM9S and UTM25S Only
To view the Wireless Statistics screen
Router Statistics screen fields
AP Statistics
Wireless Statistics screen fields
492
Radio Statistics Details
493
View the Detailed Status Screen
494
495
LAN Port Configuration
Configure and Enable the DMZ Port on
Detailed Status screen fields
496
Settings
MAC Address and Configure
Manually Configure the Internet
Access Points Information
Wireless information in SLOT-1 Info or SLOT-2 Info
497
Vlan Status screen fields
See Configure a Vlan Profile on
Configure a Vlan Profile on
View the Vlan Status Screen
View the xDSL Statistics Screen UTM9S and UTM25S Only
View the Active VPN Users
499
500
View the VPN Tunnel Connection Status
501
View the Active Pptp and L2TP Users
View the Port Triggering Status
To view the status of the port-triggering feature
502
503
Port Triggering Status pop-up screen information
504
View the WAN, xDSL, or USB Port Status
To view the status of a WAN, xDSL, or USB port
Connection Status pop-up screen information
505
View Attached Devices and the Dhcp Leases
View Attached Devices
To view the attached devices in the LAN Groups screen
506
507
Query and Manage the Logs
View the Dhcp Leases
To view the Dhcp leases
508
Overview of the Logs
To query and download logs
Query and Download Logs
509
510
Logs Query screen settings
511
512
513
EMERG, ALERT, CRITICAL, ERROR, WARNING, Notice
Example Use the Logs to Identify Infected Clients
To identify infected clients
Log Management
Query and Manage the Quarantine Logs
514
To query the quarantine logs
Query the Quarantined Logs
515
516
Quarantine screen settings
517
View and Manage the Quarantined Spam Table
518
View and Manage the Quarantined Infected Files Table
For an end user to send a spam report
Spam Reports for End Users
519
Click Send Report
View, Schedule, and Generate Reports
520
521
Enable Application Session Monitoring
Report Filtering Options
To configure filtering options
522
Pie
Report screen filtering options settings
523
Horizontal Bar
To display the report templates and view reports onscreen
Use Report Templates and View Reports Onscreen
524
525
Report screen report template information
526
IPS & Application
527
Email Activity
528
System
Schedule, Email, and Manage Reports
To schedule automatic generation and emailing of reports
529
530
Report screen schedule report settings
Setting Description Schedule Reports
Managing Saved Reports
531
Use Diagnostics Utilities
532
Use the Network Diagnostic Tools
Send a Ping Packet
To send a ping
Look Up a DNS Address
Use the Real-Time Traffic Diagnostics Tool
Trace a Route
Display the Routing Table
534
To use the real-time traffic diagnostics tool
535
Gather Important Log Information
Generate Network Statistics
To gather log information about your UTM
Reboot and Shut Down the UTM
Perform Maintenance on the USB Device
536
537
538
Troubleshoot and Use Online Support
Test LED Never Turns Off
Power LED Not On
Basic Functioning
Verify the Correct Sequence of Events at Startup
LAN or WAN Port LEDs Not On
Troubleshoot the Web Management Interface
540
Troubleshoot the ISP Connection
When You Enter a URL or IP Address, a Time-Out Error Occurs
541
542
To check the WAN IP address
543
Troubleshoot a TCP/IP Network Using a Ping Utility
Test the LAN Path to Your UTM
Ping
Ping -n 10 IP address
Test the Path from Your Computer to a Remote Device
544
545
Restore the Default Configuration and Password
To initiate the support tunnel
Problems with Date and Time
Enable Remote Troubleshooting
Use Online Support
To submit a file to Netgear for analysis
Send Suspicious Files to Netgear for Analysis
547
Malware Analysis screen settings
Access the Knowledge Base and Documentation
548
549
XDSL Network Module for the UTM9S UTM25S
550
XDSL Network Module Configuration Tasks
Configure the xDSL Settings
XDSL Network Module for the UTM9S and UTM25S
551
To configure the xDSL settings
Setting Description XDSL Settings
XDSL settings
552
VPI
553
VCI
554
555
561, and Troubleshoot the ISP Connection on
556
Manually Configure the xDSL Internet Connection
557
558
PPPoE and PPPoA settings
ATM Ipoa
559
560
561
562
Configure Network Address Translation
563
Configure Classical Routing
564
565
566
Configure Load Balancing and Optional Protocol Binding
567
Configure Load Balancing
568
569
570
571
To add a secondary WAN address to the DSL interface
572
573
574
Setting Description SLOT-x Dynamic DNS Status
575
Default Address radio button
Advanced DSL settings
576
577
578
Wireless Network Module for UTM9S and UTM25S
Wireless Network Module for the UTM9S and UTM25S
Overview of the Wireless Network Module
Configuration Order
Wireless Equipment Placement and Range Guidelines
To configure the basic radio settings
Configure the Basic Radio Settings
580
581
Radio Settings screen settings
Field Descriptions
582
583
Operating Frequency Channel Guidelines
584
Wireless Data Security Options
585
Wireless Security Profiles
Data encryption
Network authentication
586
587
Before You Change the SSID, WEP, and WPA Settings
WPA Radius settings
WPA2 Radius settings
588
Configure and Enable Wireless Profiles
To add a wireless profile
Wireless Profiles screen settings
Field Description Profile Configuration
Add Wireless Profiles screen settings
589
Security Options on
590
Tkip TKIP+AES
591
WEP Index and Keys
592
To enable or disable one or more wireless profiles
Restrict Wireless Access by MAC Address
To edit a wireless profile
To delete one or more wireless profiles
594
595
Connected Clients
Configure a Wireless Distribution System
Access Point Status screen fields
596
597
To enable and configure WDS
598
Configure Advanced Radio Settings
To configure WDS on a peer
To configure advanced radio settings
599
Advanced Wireless screen settings
600
Configure WMM QoS Priority Settings
601
602
Test Basic Wireless Connectivity
For More Information About Wireless Configurations
To test for wireless connectivity
603
3G/4G Dongle Configuration Tasks
3G/4G Dongles for the UTM9S and UTM25S
Manually Configure the USB Internet Connection
604
605
To configure the WAN ISP settings for the USB interface
606
USB ISP settings
Setting Description 3G Dongle Details
Connection Settings
607
XDSL, or USB Port Status on
To configure the 3G/4G settings
Configure the 3G/4G Settings
608
609
4G settings
Setting Description 3GStatus
Connection Setting
APN
610
611
612
613
614
615
616
617
618
619
620
Setting Description USB Dynamic DNS Status
621
622
What to Consider Before You Begin
Internet
WAN port Physical facility
623
Cabling and Computer Hardware Requirements
Computer Network Configuration Requirements
Internet Configuration Requirements
Where Do I Get the Internet Configuration Information?
625
Internet Connection Information
626
Overview of the Planning Process
627
Inbound Traffic
Inbound Traffic Dual WAN Ports for Load Balancing
Inbound Traffic to a Single WAN Port System
Inbound Traffic to a Dual WAN Port System
Inbound Traffic Dual WAN Ports for Improved Reliability
629
Virtual Private Networks
630
VPN Road Warrior Client-to-Gateway
631
VPN Road Warrior Single-Gateway WAN Port Reference Case
632
VPN Road Warrior Dual-Gateway WAN Ports for Load Balancing
633
VPN Gateway-to-Gateway
634
VPN Telecommuter Single-Gateway WAN Port Reference Case
VPN Telecommuter Client-to-Gateway through a NAT Router
635
636
637
VPN Telecommuter Dual-Gateway WAN Ports for Load Balancing
638
Supported ReadyNAS Models
ReadyNAS Integration
Install the UTM Add-On on the ReadyNAS
To install the UTM add-on on the ReadyNAS
Select Add-ons Add New
640
Select Add-ons Installed
641
Connect to the ReadyNAS on the UTM
642
643
What Are the Benefits of Two-Factor Authentication?
Why Do I Need Two-Factor Authentication?
644
To use WiKID for end users
Netgear Two-Factor Authentication Solutions
What Is Two-Factor Authentication?
Two-Factor Authentication
646
647
648
Log message terms
Term Description
649
Reboot
System Log Messages
System Startup
650
Login/Logout
System logs login/logout
System logs NTP
WAN Status
Auto-Rollover Mode
Firewall Restart
IPSec Restart
ACTIVEWAN2
Load Balancing Mode
System logs WAN status, auto rollover
652
653
System logs WAN status, PPPoE idle timeout
PPP Logs
System logs WAN status, load balancing
654
System logs WAN status, Pptp idle timeout
Unicast, Multicast, and Broadcast Logs
Traffic Metering Logs
655
656
Invalid Packet Logging
Icmp Redirect Logs
Multicast/Broadcast Logs
657
658
Service Logs
Content-Filtering and Security Logs
Service logs
659
Web Filtering and Content-Filtering Logs
Spam Logs
Content-filtering and security logs spam
660
661
Traffic Logs
Malware Logs
Email Filter Logs
Anomaly Behavior Logs
Content-filtering and security logs IPS
Content-filtering and security logs anomaly behavior
IPS Logs
663
Routing Logs
Application Logs
LAN-to-WAN Logs
664
LAN-to-DMZ Logs
DMZ-to-WAN Logs
WAN-to-LAN Logs
665
DMZ-to-LAN Logs
WAN-to-DMZ Logs
Routing logs WAN to DMZ
666
Default Settings
UTM default configuration settings
Feature Login settings Default behavior
667
Default Settings and Technical Specifications
Feature Default behavior WAN connections
Administrative and monitoring settings
IPS
Feature Default behavior Firewall and network security
668
SIP ALG
669
Feature Application security Default behavior
670
Feature Default behavior
671
Radius settings
SSL VPN settings
User, group, and domain settings
672
UTM physical and technical specifications
Physical and Technical Specifications
673
Setting Specification
UTM IPSec VPN specifications
Feature Specification Major regulatory compliance
Interface specifications
Http//prosecure.netgear.com
UTM SSL VPN specifications
Feature Description 802.11b/bg/ng wireless specifications
675
676
Feature Description 802.11a/na wireless specifications
AES
FCC Requirements for Operation in the United States
Regulatory Compliance Information
677
European Union
Notification of Compliance Wired
678
679
Additional Copyrights
Terms
MD5
680
Language Statement
Europe EU Declaration of Conformity
Edoc in Languages of the European Community
681
682
Notification of Compliance Wireless
683
FCC Caution
684
Industry Canada
Important Note Radiation Exposure Statement
Avertissement
685
Interference Reduction Table
686
Index
687
See also
688
DMZ
689
690
691
Blocking 202, 218, 222 setting access exceptions
Logs 469, 508-510traffic statistics
692
LAN
693
694
695
696
697
698
SSL VPN
699
TCP/IP
700
701
Logs 290, 470
702
703
Dhcp 50, 106, 119 ModeConfig
704