355

ProSecure Unified Threat Management (UTM) Appliance

Figure 212.

Figure 213.

A portal screen displays a simple menu that provides the SSL user with the following menu selections:

•VPN Tunnel. Provides full network connectivity.

•Port Forwarding. Provides access to the network services that you defined as described in SSL VPN Wizard Step 5 of 6 (Port Forwarding) on page 350.

•Change Password. Allows the user to change his or her password.

•Support. Provides access to the NETGEAR website.

Virtual Private Networking Using SSL Connections

Page 355

Image 355

NETGEAR STM150EW-100NAS, UTM5EW-100NAS manual 355

Contents

ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance ProSecure Product Updates ProSecure Forum Revision HistorySupport Trademarks Configure Quarantine Settings, Query and Manage Settings and Technical SpecificationsUpdated Features That Reduce Traffic and Features That Application control see Configure Application Control Configure Distributed Spam Analysis section Appendix B, Wireless Network Module for the UTM9S UTM25SAdded the Requirements for Entering IP Addresses Contents Manually Configure Internet and WAN Settings Firewall Protection Content Filtering and Optimizing Scans Virtual Private Networking Using SSL Connections Network and System Management Troubleshoot and Use Online Support Appendix a xDSL Network Module for the UTM9S and UTM25S Appendix E ReadyNAS Integration Appendix H Default Settings and Technical Specifications Introduction Introduction Key Features and Capabilities Single or multiple exposed hosts Virtual private networks DSL Features Wireless FeaturesAdvanced VPN Support for Both IPSec and SSL Stream Scanning for Content Filtering Powerful, True Firewall Autosensing Ethernet Connections with Auto Uplink Security Features Extensive Protocol Support Easy Installation and Management Model Comparison Maintenance and SupportUTM model comparison Network Modules and Broadband Adapters Service Registration Card with License Keys Hardware Features Package Contents Test LED Right WAN LED Right LAN LEDs Power LEDFront Panel UTM5 and UTM10 USB port Left LAN LEDs Test LED Right LAN LEDs Right WAN LEDs LEDs Front Panel UTM25Front Panel UTM50 USB port Left LAN LEDs Left WAN LEDs Active Active WAN LEDs Test LED Right LAN LEDs Right WAN LEDs Power LED Left LAN LEDs Left WAN LEDs USB portFront Panel UTM150 LEDs Right WAN LEDs Test LED Right LAN LEDs Test LED Right LAN LEDs Power LED Left WAN LEDs Slot Left LAN LEDs USB portFront Panel UTM9S and UTM25S and Network Modules Active WAN LEDs XDSL Network Modules Wireless Network Modules LED descriptions UTM5, UTM10, UTM25, UTM50, and UTM150 LED Descriptions, UTM5, UTM10, UTM25, UTM50, and UTM150Activity Description DMZ LED Activity Description LAN portsWAN ports LED descriptions UTM9S and UTM25S LED Descriptions, UTM9S, UTM25S, and their Network ModulesUSB LED XDSL network modules Wireless network moduleRear Panel UTM5, UTM10, and UTM25 Receptacle Port Factory Defaults Security lockReset button Receptacle Rear Panel UTM50 and UTM150 Switch Security lock AC power Receptacle Factory DefaultsReset button Console switch Power Bottom Panels with Product Labels ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance Choose a Location for the UTM Use the Rack-Mounting Kit Steps for Initial Connection Use the Setup Wizard to Provision UTM in Your Network Requirements for Entering IP Addresses Use the Setup Wizard to Provision the UTM in Your NetworkLog In to the UTM Qualified Web Browsers ProSecure Unified Threat Management UTM Appliance Web Management Interface Menu Layout ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance  To start the Setup Wizard Use the Setup Wizard to Perform the Initial Configuration Setup Wizard of 10 LAN Settings Dhcp Setting Description LAN TCP/IP Setup DNS Proxy Setting Description Setting Description Inter Vlan Routing Setup Wizard of 10 WAN Settings Setting Description ISP Login Setup Wizard WAN Settings screen settingsISP Type Dhcp See Configure Load Balancing Multiple WAN Port ModelsInternet IP Address ISP Domain Name Server DNS Servers Setup Wizard of 10 System Date and TimeGet Automatically from ISP radio button For Daylight Savings Time check box Setup Wizard of 10 ServicesSetup Wizard System Date and Time screen settings Setting Description Set Time, Date, and NTP Servers Web Setup Wizard Services screen settings Setup Wizard Email Security screen settings Setup Wizard of 10 Email SecuritySetting Description Action Scan Exceptions Setup Wizard of 10 Web Security Http Setup Wizard of 10 Web Categories to Be Blocked Blocked Categories Time of Day Setup Wizard Web Categories to be blocked screen settingsSetting Description Blocked Web Categories Blocked Categories Scheduled Days Setup Wizard Email Notification screen settings Setup Wizard of 10 Email Notification Setup Wizard Signatures & Engine screen settings Setup Wizard of 10 Signatures & EngineSetting Description Update Settings Setting Description Update Frequency Setup Wizard of 10 Saving the ConfigurationHttps Proxy Settings Use the Web Management Interface to Activate Licenses Register the UTM with Netgear ProSecure Unified Threat Management UTM Appliance  To retrieve and display the registered information Electronic LicensingClick Retrieve Info Test Http Scanning Verify Correct InstallationWhat to Do Next Test Connectivity ProSecure Unified Threat Management UTM Appliance Manually Configure Internet and WAN Settings Manually Configure Internet and WAN Settings Internet and WAN Configuration Tasks Complete these steps ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance Pptp Connection method Manual data input required If the automatic ISP configuration is successful Manually Configure the Internet ConnectionIf the automatic ISP configuration fails Pptp and PPPoE settings Balancing Multiple WAN Port Models on page 86 . To use load Identifier check box DNS server settings If the manual ISP configuration fails If the manual ISP configuration is successful Overview of the WAN Modes Configure the WAN Mode Configure Network Address Translation All Models Configure Classical Routing All Models  To configure auto-rollover mode Configure Auto-Rollover Mode Setting Description WAN Failure Detection Method Configure the Failure Detection Method To configure the failure detection method Failure detection method settings Ping  To configure load balancing Configure Load Balancing Multiple WAN Port Models Configure Protocol Binding Optional Screen see Outbound Rules Service Blocking on Add Protocol Binding screen settingsChange Group Names in the Network Database on  To edit a protocol binding Configure Secondary WAN Addresses  To add a secondary WAN address to a WAN interface  To delete one or more secondary addresses Configure Dynamic DNS  To configure Ddns DNS service settings Click Apply to save your configuration Set the UTM’s MAC Address and Configure Advanced WAN Options Setting Description MTU Size Advanced WAN settings Failure Detection Method Setting Speed DescriptionUpload/Download Settings 1000BaseT FullDuplex. Gigabit Ethernet Router’s MAC Address Additional WAN-Related Configuration Tasks Manage Virtual LANs and Dhcp Options LAN Configuration Port-Based VLANs LAN Configuration 100 Assign and Manage Vlan Profiles 101 Vlan Dhcp Options 102 Dhcp ServerDhcp Relay DNS Proxy 103 Configure a Vlan ProfileLdap Server  To add or edit a Vlan profile 104 Port Membership Edit Vlan Profile screen settingsSetting Description Vlan Profile 105 106 107  To edit a Vlan profile Configure Vlan MAC Addresses and Advanced LAN Settings To enable, disable, or delete one or more Vlan profiles  To configure a Vlan to have a unique MAC address 109 Configure Multihome LAN IP Addresses on the Default 110  To add a secondary LAN IP address 111 Manage Groups and Hosts LAN Groups To edit a secondary LAN IP address  To delete one or more secondary LAN IP addresses 112 Manage the Network Database 113 Modify Computers or Devices in the Network Database Known PCs and devices settingsSetting Description Name Add Computers or Devices to the Network Database 115 Change Group Names in the Network DatabaseDelete Computers or Devices from the Network Database  To edit the names of any of the eight available groups 116 Set Up Address Reservation  To enable and configure the DMZ port Configure and Enable the DMZ Port117 Setting Description DMZ Port Setup DMZ Setup screen settings118 119 120 121 Configure Static RoutesManage Routing  To add a static route to the Static Route table 122 Add Static Route screen settings  To delete one or more routes Configure Routing Information Protocol To enable and configure RIP Select Network Config Routing  To edit a static route that is in the Static Routes table 124 RIP Configuration screen settings 125 Authentication for RIP-2B/2M 126 Static Route Example 127 About Firewall Protection Firewall Protection Administrator Tips128 Number of supported firewall rule configurations Outbound Rules Service Blocking129 Block always Setting Description Outbound RulesOutbound rules overview 130 Groups and Hosts LAN Groups on 131 132 Service Profiles on 133 Inbound Rules Port ForwardingNAT IP 134 135 Setting Description Inbound Rules 136 137 Quality of Service Profiles on 138 Order of Precedence for Rules  To change the default outbound policy Configure LAN WAN Rules139 140 Create LAN WAN Outbound Service Rules To change an existing outbound or inbound service rule  To enable, disable, or delete one or more rules  To create an inbound LAN WAN service rule Create LAN WAN Inbound Service Rules141 142 Configure DMZ WAN Rules 143  To delete or disable one or more rules Create DMZ WAN Inbound Service Rules Create DMZ WAN Outbound Service Rules144  To create an inbound DMZ WAN service rule Configure LAN DMZ Rules145 146  To create an inbound LAN DMZ service rule Create LAN DMZ Outbound Service RulesCreate LAN DMZ Inbound Service Rules  To create an outbound LAN DMZ service rule 148 Examples of Firewall RulesInbound Rule Examples LAN WAN Inbound Rule Host a Local Public Web Server 149 150 Netgear UTM 151  To configure the UTM for additional IP addresses 152 LAN WAN or DMZ WAN Inbound Rule Specify an Exposed Host LAN WAN Outbound Rule Block Instant Messenger Outbound Rule Example153 154 Configure Other Firewall FeaturesVlan Rules  To create a Vlan rule Add Customized Services on Add VLAN-VLAN Service screen settings155  To edit a Vlan rule  To delete or disable one or more Vlan rules156 157 Attack Checks screen settingsSetting Description WAN Security Checks Attack Checks, VPN Pass-through, and Multicast Pass-through 158 Configure Multicast Pass-Through To configure multicast pass-through Setting Description LAN Security Checks 159  To delete one or more multicast source addresses  To enable and configure session limitsSession Limit screen settings Set Session Limits Session Timeout  To enable ALG for SIP and VPN scanning161 162 163 Add Customized Services Services screen settings  To add a customized service164  To create a service group Create Service Groups To edit a service  To delete one or more services 166  To edit a service group  To create an IP group Create IP Groups167 168  To delete an IP group  To create a QoS profile Create Quality of Service Profiles169 170 Add QoS Profile screen settings  To delete one ore more QoS profiles Default High Medium High LowCreate Bandwidth Profiles  To edit a QoS profile 172  To add and enable a bandwidth profile 173 Add Bandwidth Profile screen settings 174 Create Traffic Meter Profiles To edit a bandwidth profile  To delete one or more bandwidth profiles 175  To add a traffic meter profile 176 Add Traffic Meter Profile screen settings  To add a schedule Set a Schedule to Block or Allow Specific Traffic To edit a traffic meter profile  To delete one or more traffic meter profiles 178 Add Schedule screen settingsScheduled Days  To delete one or more schedules Enable Source MAC FilteringSetting Description Scheduled Time of Day  To edit a schedule 180  To remove one or more entries from the table  To set up IP/MAC bindings Set Up IP/MAC Bindings181 IP/MAC Bindings IP/MAC Binding screen settingsSetting Description Email IP/MAC Violations 182 183 Configure Port Triggering To edit an IP/MAC binding  To remove one or more IP/MAC bindings from the table  To add a port-triggering rule Port Triggering screen settings184  To display the status of the port-triggering rules  To edit a port-triggering rule185 186 Configure Universal Plug and Play IPS screen settings Enable and Configure the Intrusion Prevention System To enable intrusion prevention  To configure intrusion prevention 188 Security Category Settings 189 IPS, screen 1 Firewall Protection 190 IPS uncommon attack namesAttack Name Description Web Attack Name Description 191Misc 192 About Content Filtering and Scans 193 Default Email and Web Scan SettingsDefault email and web scan settings Content Filtering and Optimizing Scans Scan type Default scan setting Default action if applicable Configure Email ProtectionCustomize Email Protocol Scan Settings  To configure the email protocols and ports to scan 195 Protocol Scan Settings on  To configure the antivirus settings for email traffic Customize Email Antivirus and Notification Settings196 197 Anti-Virus screen settings for email traffic Notification Settings Setting Description Scan Exceptions198 SUBJECT%, %FILENAME%, %ACTION%, %VIRUSNAME% Email Content FilteringSetting Description Email Alert Settings 199 200 201 Email Filters screen settingsSetting Description Email Filters Filter by Password-Protected Attachments ZIP, RAR, etc Filter by File Name Setting Description Filter by File TypeProtect Against Email Spam 202 203 Set Up the Whitelist and Blacklist 204  To configure the whitelist and blacklist 205 Whitelist/Blacklist screen settings 206 Configure the Real-Time Blacklist To enable the real-time blacklist  To add a blacklist provider to the real-time blacklist 207 Configure Distributed Spam Analysis Setting Description Distributed Spam Analysis Distributed Spam Analysis screen settings208 209 Anti-Spam Engine SettingsLow Medium-Low 210 Configure Web and Services ProtectionCustomize Web Protocol Scan Settings Setting Description Send Quarantine Spam Report 211  To configure the web protocols and ports to scan 212 Configure Https Smart Block 213 Add or Edit Https Smart Block Profile settings 214 215  To change a profile 216 Configure Web Malware or Antivirus Scans Html Scan Anti-Virus screen settings for HTTP/HTTPS traffic217 Scan Exception 218 Configure Web Content Filtering 219  To configure web content filtering 220 Setting Description Content Filtering Content Filtering screen settings221 Block Web Objects 222Full-Text Search Performance Management on 223 URL Configure Web URL FilteringSetting Description Web Category Lookup 224 225  To configure web URL filtering Blacklist URL Filtering screen settingsSetting Description Whitelist 226 URL% 227 How Https Scanning Works Configure Https Scanning and SSL Certificates228 229 230 Configure the Https Scan Settings To configure the Https scan settings Https Settings screen settings 231 Manage SSL Certificates for Https Scanning 232 Manage the Active Https Certificate 233 Manage Trusted Https Certificates Manage Untrusted Https Certificates 235 Specify Trusted Hosts for Https Scanning To delete an untrusted certificate  To specify trusted hosts 236 Trusted Hosts screen settings 237 Configure the SSL Settings for Https Scanning To configure the SSL settings for Https scanning SSL Settings screen settings Anti-Virus screen settings for FTP Configure FTP ScanningCustomize FTP Antivirus Settings  To configure the antivirus settings for FTP traffic 239 Configure FTP Content Filtering To configure the FTP filters Setting Description Scan Exception 240 Configure Application Control 241 242 243 244 To select one or more categories of applicationsTo select one or more individual applications To search for an application 245 Meter Profiles on Application Control Policy pop-up screen settingsSetting Description Policy for a category of applications 246 247  To change an existing application control profile  To delete one or more application control profiles Set Exception Rules for Web and Application Access248 249  To set web access exception rules 250 Application Https Smart Block File Extension251 252 Add or Edit Exceptions screen settingsURL Filtering Web Category 253 Ldap See Configure Radius VLANs on254 Delete Groups on To search for an application 255To select a category of applications To select a single application 256 For Exceptions for Web and Application Access on  To change an existing exception rule  To disable, enable, or delete one or more exception rules257 258  To create and manage custom categories 259 Custom categories applications To select one or more individual applications Custom Categories screen settings260 To select one or more categories of applications To add a URL 261To remove one or more categories or applications from Applications in this Category table  To delete one or more custom categories  To configure scanning exclusion rulesSet Scanning Exclusions for IP Addresses and Ports  To change an existing custom category 263 Scanning Exclusion screen settings 264 Virtual Private Networking 265 IP addressing for VPNs in dual WAN port systems 266 Create Gateway-to-Gateway VPN Tunnels with the Wizard 267 SHA-1 Setting Default Value IKE policy268 3DES 269 IPSec VPN Wizard settings for a gateway-to-gateway tunnel 270 Setting Description Secure Connection Remote Accessibility 271 Create a Client-to-Gateway VPN Tunnel 272 Fqdn IPSec VPN Wizard settings for a client-to-gateway tunnelSelect the VPN Client radio button. The default remote Fqdn 273 274 275 Information required to configure the VPN clientComponent Example Information to be collected 276 277 278 NAT-T VPN client advanced authentication settingsSetting Description Advanced features 279 280 Type vpnclient  To create new authentication settings281 IKE VPN client authentication settings282 10.34.116.22 283 284  To create an IPSec configurationSetting Description Local and Remote ID Type netgearplatform 285 VPN client IPSec configuration settingsESP 286  To specify the global parameters 287 Test the Netgear VPN Client Connection 288 Click Gateway-Tunnel, and press Ctrl+O View the UTM IPSec VPN Connection Status Netgear VPN Client Status and Log Information289 290 View the UTM IPSec VPN Log To query the IPSec VPN log IPSec VPN Connection Status screen information 291 Manage IPSec VPN and IKE Policies 292  To access the IKE Policies screenManage IKE Policies IKE Policies Screen 293 List of IKE Policies table information 294 Manually Add or Edit an IKE Policy To delete one or more IKE polices  To add an IKE policy manually 295 General Add IKE Policy screen settingsSetting Description Mode Config Record 296 Remote 297IKE SA Parameters 298  To edit an IKE policy Setting Description Extended Authentication299 VPN Policies Screen Manage VPN Policies300 301 List of VPN Policies table information  To add a VPN policy manually  To enable or disable one or more VPN policiesManually Add or Edit a VPN Policy  To delete one or more VPN polices 303 Setting Description General Add New VPN Policy screen settings304 Manual Policy Parameters Configure Keep-Alives305 Traffic Selection 306 307 Setting Description Auto Policy Parameters  To edit a VPN policy Configure Extended Authentication Xauth308 309 Configure Xauth for VPN Clients To enable and configure Xauth Extended authentication settings 310 User Database ConfigurationRadius Client and Server Configuration  To configure primary and backup Radius servers Connection Configuration Radius Client screen settingsSetting Description Primary Radius Server Backup Radius Server 312 Assign IP Addresses to Remote Users Mode ConfigMode Config Operation Configure Mode Config Operation on the UTM 313  To configure Mode Config on the UTM Setting Description Client Pool Add Mode Config Record screen settings314 Traffic Tunnel Security Level 315 316 317 318 Setting Description IKE SA ParametersSelect Group 2 1024 bit User Database Configuration on Configure the ProSafe VPN Client for Mode Config Operation319 320 321 Type GWModeConfig 322 VPN client authentication settings Mode Config VPN client advanced authentication settings Mode Config Type TunnelModeConfig323 324 VPN client IPSec configuration settings Mode ConfigEnter 325 Configure the Mode Config Global Parameters 326 Test the Mode Config Connection 327 Modify or Delete a Mode Config Record To edit a Mode Config record  To delete one or more Mode Config records Configure Keep-Alives Configure Keep-Alives and Dead Peer Detection328 329 Configure Dead Peer Detection To configure DPD on a configured IKE policy Keep-alive settings 330 Configure NetBIOS Bridging with IPSec VPN To enable NetBIOS bridging on a configured VPN tunnel Dead Peer Detection settings 331 Configure the Pptp Server Setting Description Pptp Server Pptp Server screen settings332 333 Setting Description AuthenticationView the Active Pptp Users  To view the active Pptp tunnel users Pptp IP Configure the L2TP ServerPptp Active Users screen information 334 Setting Description L2TP Server L2TP Server screen settings335 L2TP Active Users screen information For More IPSec VPN InformationView the Active L2TP Users  To view the active L2TP tunnel users 337 SSL VPN Portal Options 338 Build a Portal Using the SSL VPN WizardVirtual Private Networking Using SSL Connections  To start the SSL VPN Wizard 339 SSL VPN Wizard of 6 Portal Settings Setting Description Portal Layout and Theme Name SSL VPN Wizard of 6 screen settings portal settings340 6 Port Forwarding on 341SSL VPN Portal Pages to Display Wizard of 6 Client IP Addresses and Routes on 342 SSL VPN Wizard of 6 Domain Settings Radius Client SSL VPN Wizard of 6 screen settings domain settingsServer Configuration 343 344 345 Windows login account name in email format. ForDisplay name in the dn format. For example 346 SSL VPN Wizard of 6 screen settings user settings SSL VPN Wizard of 6 User Settings347 348 SSL VPN Wizard of 6 Client IP Addresses and Routes 349 Setting Description Client IP Address RangeAdd Routes for VPN Tunnel Clients SSL VPN Wizard of 6 Port Forwarding Setting Description Add New Application for Port Forwarding350 Add New Host Name for Port Forwarding SSL VPN Wizard of 6 Verify and Save Your Settings351 SSH 352 353 Access the New SSL VPN Portal 354 355 356 View the UTM SSL VPN Connection Status 357 Manually Configure and Modify SSL PortalsView the UTM SSL VPN Log  To query the SSL VPN log 358  To create an SSL VPN portal layout Manually Create or Modify the Portal Layout359 360 361 Add Portal Layout screen settings  To delete one or more portal layouts Configure Domains, Groups, and UsersSetting Description SSL VPN Portal Pages to Display  To edit a portal layout 363 Configure Applications for Port ForwardingAdd Servers and Port Numbers  To add a server and a port number TCP application Port number  To add servers and host names for client name resolutionAdd a Host Name 364 Fully Qualified Domain Name. The full server name Configure the SSL VPN Client365 366 Configure the Client IP Address RangeSSL VPN Client screen settings  To define the client IP address range  To add an SSL VPN tunnel client route Add Routes for VPN Tunnel Clients367  To change the LCP time-out Configure the Advanced SSL VPN Client Settings368 369 Use Network Resource Objects to Simplify PoliciesAdd New Network Resources  To define a network resource  To edit network resources Resources screen settings to edit a resourceEdit Network Resources to Specify Addresses  To delete one or more network resources 371 Configure User, Group, and Global Policies 372 Global Default Policy  To add an SSL VPN policy View PoliciesAdd a Policy  To view the existing policies Add SSL VPN Policies Add SSL VPN Policy screen settingsSetting Description Policy For 374 Resource Objects to Simplify Policies on 375 376  To edit an SSL VPN policy  To delete one or more SSL VPN policies For More SSL VPN Information377 378 Authentication Process and Options 379 External authentication protocols and methodsManage Users, Authentication, and VPN Certificates Authentication Description Protocol or method 380 Configure Authentication Domains, Groups, and UsersLogin Portals Administrative Users and Users with Guest Privileges 381 Users with Special Access Privileges 382 383 384 Active Directories and Ldap ConfigurationsUnauthenticated or Anonymous Users How an Active Directory Works 385 How to Bind a DN in an Active Directory Configuration 386 387 Select Users Domains 388 Configure DomainsCreate and Delete Domains  To create a domain 389 390 Add Domain screen settings 391 392 393  To edit a domain Configure GroupsEdit Domains  To delete one or more domains  To create a VPN group Create and Delete Groups395  To edit a VPN group Groups screen settingsEdit Groups  To delete one or more groups  To create and manage custom groups Configure Custom Groups397 398 399 Add Custom Group screen settings  To delete one or more custom groups  To change an existing custom group400  To create an individual user account Configure User Accounts401 402 403 Add User screen settingsSee Configure Extended Authentication Xauth on  To delete one or more user accounts 404 Set User Login PoliciesConfigure Login Policies  To configure user login policies  To restrict logging in based on IP address Configure Login Restrictions Based on IP Address405  To restrict logging in based on the user’s browser Configure Login Restrictions Based on Web BrowserBy Source IP Address screen settings  To delete one or more addresses  To delete one or more browsers Internet Explorer Opera Netscape Navigator407  To modify user settings, including passwords Change Passwords and Other User Settings408 409 Edit User screen settingsConfigure Extended Authentication Xauth on DC Agent 410 411  To download ProSecure DC Agent software and add a DC agent 412  To configure AD SSO with a DC agentDC Agent screen settings  To edit a DC agent 413 414 415 Configure Radius VLANs To do so, follow this procedure  To configure a Radius Vlan 416 Configure Global User Settings  To log out all active users View and Log Out Active Users417  To view all or selected users Active Users screen settings418 419 Manage Digital Certificates for VPN Connections 420 VPN Certificates Screen  To view and upload trusted certificates Manage CA Certificates421  To delete one or more digital certificates Manage Self-Signed Certificates422 423 424 Generate self-signed certificate request settings512 1024 2048 425  To delete one or more self-signed certificates Manage the Certificate Revocation ListView and Manage Self-Signed Certificates  To delete one or more SCRs 427  To delete one or more CRLs Bandwidth Capacity Performance Management428 Network and System Management Features That Reduce Traffic429 430 431 Content Filtering Source MAC Filtering Features That Increase Traffic432 433 Port Triggering Configure the DMZ Port434 Assign QoS Profiles Configure Exposed HostsConfigure VPN Tunnels Use QoS and Bandwidth Assignments to Shift the Traffic Mix 436 Change Passwords and Administrator and Guest SettingsSystem Management Monitoring Tools for Traffic Management 437  To configure the UTM for remote management Configure Remote Management Access438 439 Https//IPaddress or https//FullyQualifiedDomainName 440 Use a Simple Network Management Protocol Manager 441 442 Global Snmp settings and SNMPv1/v2c settingsSetting Description Snmp Global Settings SNMPv1/v2c Settings 443  To configure the SNMPv3 settingsSNMPv3 settings Setting Description SNMPv3 Settings 444  To delete one or more SNMPv3 user profiles Manage the Configuration FileRestore Settings  To edit an SNMPv3 user profile  To back up settings Back Up Settings446 Revert to Factory Default Settings Restore Settings447 View the Available Firmware Versions Update the Firmware448 449 Firmware screen, available versions 450 Click Install Downloaded Firmware 451  To download the latest firmware for your UTM 452 453 454 Update the Scan Signatures and Scan Engine FirmwareReboot without Changing the Firmware  To reboot the UTM without changing the firmware 455 456 Configure Date and Time ServiceConfigure Automatic Update and Frequency Settings Signatures & Engine screen settings 457 System Date & Time screen settingsAdjust for Daylight Savings Time check box  To set time, date, and NTP servers 458 Connect to a ReadyNAS and Configure Quarantine Settings 459 Log StorageConnect to a ReadyNAS  To connect to the ReadyNAS on the UTM 460 Configure the Quarantine Settings To configure the quarantine settings ReadyNAS Integration screen settings Unauthenticated or Anonymous Users on Quarantine settings461 462 Enable the WAN Traffic Meter 463 Monitor System Access and Performance Event Notifications on Setting Description Enable Traffic Meter464 Traffic Counter 465 Setting Description When Limit is reached 466 Configure Logging, Alerts, and Event NotificationsConfigure the Email Notification Server  To configure the email notification server Email Notification screen settings Configure and Activate System, Email, and Syslog Logs467 468  To configure and activate logs 469 Email and Syslog screen settingsSetting Description System Logs Option Email Logs to Administrator 470 Logs screen see Configure and Activate Firewall Logs onSend Logs via Syslog 471 How to Send Syslogs over a VPN Tunnel between SitesConfigure Gateway 1 at Site Setting Description Clear the Following Logs Information 472 Configure Gateway 2 at Site To change the remote IP address in the VPN policy  To change the local IP address in the VPN policy 473 Configure and Activate Update Failure and Attack Alerts To configure and activate the email alerts  To specify the syslog server that is connected to Gateway 474 Alerts screen settings TIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT% 475FILENAME%, %ACTION%, %VIRUSNAME%  To configure and activate firewall logs Configure and Activate Firewall Logs476 Monitor Real-Time Traffic, Security, and Statistics Setting Description Routing Logs477 478 Dashboard, screen 1 Total Threats  To set the poll intervalDashboard screen threats and traffic information 479 Threats Counts 480Total Traffic Bytes 481 Enable and Configure the Intrusion 482 Dashboard screen service statistics information RBL Spam blacklist see Set Up the Whitelist and Blacklist onMonitor Application Use in Real Time 483 484 485  To set the monitoring period To filter the information that is displayed onscreen Application Dashboard screen View the System Status View Status Screens486 Status Description View the System Status ScreenSystem Status screen fields 487 System Information Scan Settings onView the Network Status Screen 488 LAN Vlan Information Available Access Points TableNetwork Status screen fields 489 Ssid View the Router Statistics Screen To view the Router Statistics screen 490 491 View the Wireless Statistics Screen UTM9S and UTM25S Only To view the Wireless Statistics screen Router Statistics screen fields AP Statistics Wireless Statistics screen fields492 Radio Statistics Details 493 View the Detailed Status Screen 494 495 LAN Port ConfigurationConfigure and Enable the DMZ Port on Detailed Status screen fields 496 SettingsMAC Address and Configure Manually Configure the Internet Access Points Information Wireless information in SLOT-1 Info or SLOT-2 Info497 Vlan Status screen fields See Configure a Vlan Profile onConfigure a Vlan Profile on View the Vlan Status Screen View the xDSL Statistics Screen UTM9S and UTM25S Only View the Active VPN Users499 500 View the VPN Tunnel Connection Status 501 View the Active Pptp and L2TP Users View the Port Triggering Status  To view the status of the port-triggering feature502 503 Port Triggering Status pop-up screen information 504 View the WAN, xDSL, or USB Port Status To view the status of a WAN, xDSL, or USB port Connection Status pop-up screen information 505 View Attached Devices and the Dhcp LeasesView Attached Devices  To view the attached devices in the LAN Groups screen 506 507 Query and Manage the LogsView the Dhcp Leases  To view the Dhcp leases 508 Overview of the Logs  To query and download logs Query and Download Logs509 510 Logs Query screen settings 511 512 513 EMERG, ALERT, CRITICAL, ERROR, WARNING, NoticeExample Use the Logs to Identify Infected Clients  To identify infected clients Log Management Query and Manage the Quarantine Logs514  To query the quarantine logs Query the Quarantined Logs515 516 Quarantine screen settings 517 View and Manage the Quarantined Spam Table 518 View and Manage the Quarantined Infected Files Table  For an end user to send a spam report Spam Reports for End Users519 Click Send Report View, Schedule, and Generate Reports520 521 Enable Application Session Monitoring Report Filtering Options  To configure filtering options522 Pie Report screen filtering options settings523 Horizontal Bar  To display the report templates and view reports onscreen Use Report Templates and View Reports Onscreen524 525 Report screen report template information 526 IPS & Application 527 Email Activity 528 System Schedule, Email, and Manage Reports To schedule automatic generation and emailing of reports 529 530 Report screen schedule report settingsSetting Description Schedule Reports Managing Saved Reports 531 Use Diagnostics Utilities 532 Use the Network Diagnostic ToolsSend a Ping Packet  To send a ping Look Up a DNS Address Use the Real-Time Traffic Diagnostics ToolTrace a Route Display the Routing Table 534  To use the real-time traffic diagnostics tool 535 Gather Important Log InformationGenerate Network Statistics  To gather log information about your UTM Reboot and Shut Down the UTM Perform Maintenance on the USB Device536 537 538 Troubleshoot and Use Online Support Test LED Never Turns Off Power LED Not OnBasic Functioning Verify the Correct Sequence of Events at Startup LAN or WAN Port LEDs Not On Troubleshoot the Web Management Interface540 Troubleshoot the ISP Connection When You Enter a URL or IP Address, a Time-Out Error Occurs541 542  To check the WAN IP address 543 Troubleshoot a TCP/IP Network Using a Ping UtilityTest the LAN Path to Your UTM Ping Ping -n 10 IP address Test the Path from Your Computer to a Remote Device544 545 Restore the Default Configuration and Password  To initiate the support tunnel Problems with Date and TimeEnable Remote Troubleshooting Use Online Support  To submit a file to Netgear for analysis Send Suspicious Files to Netgear for Analysis547 Malware Analysis screen settings Access the Knowledge Base and Documentation548 549 XDSL Network Module for the UTM9S UTM25S 550 XDSL Network Module Configuration TasksConfigure the xDSL Settings XDSL Network Module for the UTM9S and UTM25S 551  To configure the xDSL settings Setting Description XDSL Settings XDSL settings552 VPI 553VCI 554 555 561, and Troubleshoot the ISP Connection on 556 Manually Configure the xDSL Internet Connection 557 558 PPPoE and PPPoA settings ATM Ipoa 559 560 561 562 Configure Network Address Translation 563 Configure Classical Routing 564 565 566 Configure Load Balancing and Optional Protocol Binding 567 Configure Load Balancing 568 569 570 571  To add a secondary WAN address to the DSL interface 572 573 574 Setting Description SLOT-x Dynamic DNS Status 575 Default Address radio button Advanced DSL settings576 577 578 Wireless Network Module for UTM9S and UTM25S Wireless Network Module for the UTM9S and UTM25S Overview of the Wireless Network ModuleConfiguration Order Wireless Equipment Placement and Range Guidelines  To configure the basic radio settings Configure the Basic Radio Settings580 581 Radio Settings screen settingsField Descriptions 582 583 Operating Frequency Channel Guidelines 584 Wireless Data Security Options 585 Wireless Security Profiles Data encryption Network authentication586 587 Before You Change the SSID, WEP, and WPA SettingsWPA Radius settings WPA2 Radius settings 588 Configure and Enable Wireless Profiles To add a wireless profile Wireless Profiles screen settings Field Description Profile Configuration Add Wireless Profiles screen settings589 Security Options on 590 Tkip TKIP+AES 591WEP Index and Keys 592  To enable or disable one or more wireless profiles Restrict Wireless Access by MAC Address To edit a wireless profile  To delete one or more wireless profiles 594 595 Connected Clients Configure a Wireless Distribution SystemAccess Point Status screen fields 596 597  To enable and configure WDS 598 Configure Advanced Radio Settings To configure WDS on a peer  To configure advanced radio settings 599 Advanced Wireless screen settings 600 Configure WMM QoS Priority Settings 601 602 Test Basic Wireless ConnectivityFor More Information About Wireless Configurations  To test for wireless connectivity 603 3G/4G Dongle Configuration Tasks 3G/4G Dongles for the UTM9S and UTM25S Manually Configure the USB Internet Connection604 605  To configure the WAN ISP settings for the USB interface 606 USB ISP settingsSetting Description 3G Dongle Details Connection Settings 607 XDSL, or USB Port Status on  To configure the 3G/4G settings Configure the 3G/4G Settings608 609 4G settingsSetting Description 3GStatus Connection Setting APN 610 611 612 613 614 615 616 617 618 619 620 Setting Description USB Dynamic DNS Status 621 622 What to Consider Before You Begin Internet WAN port Physical facility623 Cabling and Computer Hardware Requirements Computer Network Configuration RequirementsInternet Configuration Requirements Where Do I Get the Internet Configuration Information? 625 Internet Connection Information 626 Overview of the Planning Process 627 Inbound Traffic Inbound Traffic Dual WAN Ports for Load Balancing Inbound Traffic to a Single WAN Port SystemInbound Traffic to a Dual WAN Port System Inbound Traffic Dual WAN Ports for Improved Reliability 629 Virtual Private Networks 630 VPN Road Warrior Client-to-Gateway 631 VPN Road Warrior Single-Gateway WAN Port Reference Case 632 VPN Road Warrior Dual-Gateway WAN Ports for Load Balancing 633 VPN Gateway-to-Gateway 634 VPN Telecommuter Single-Gateway WAN Port Reference Case VPN Telecommuter Client-to-Gateway through a NAT Router635 636 637 VPN Telecommuter Dual-Gateway WAN Ports for Load Balancing 638 Supported ReadyNAS Models ReadyNAS Integration Install the UTM Add-On on the ReadyNAS To install the UTM add-on on the ReadyNAS Select Add-ons Add New 640 Select Add-ons Installed 641 Connect to the ReadyNAS on the UTM 642 643 What Are the Benefits of Two-Factor Authentication? Why Do I Need Two-Factor Authentication?644  To use WiKID for end users Netgear Two-Factor Authentication SolutionsWhat Is Two-Factor Authentication? Two-Factor Authentication 646 647 648 Log message termsTerm Description 649 RebootSystem Log Messages System Startup 650 Login/LogoutSystem logs login/logout System logs NTP WAN Status Auto-Rollover ModeFirewall Restart IPSec Restart ACTIVEWAN2 Load Balancing ModeSystem logs WAN status, auto rollover 652 653 System logs WAN status, PPPoE idle timeoutPPP Logs System logs WAN status, load balancing 654 System logs WAN status, Pptp idle timeout Unicast, Multicast, and Broadcast Logs Traffic Metering Logs655 656 Invalid Packet LoggingIcmp Redirect Logs Multicast/Broadcast Logs 657 658 Service LogsContent-Filtering and Security Logs Service logs 659 Web Filtering and Content-Filtering Logs Spam Logs Content-filtering and security logs spam660 661 Traffic LogsMalware Logs Email Filter Logs Anomaly Behavior Logs Content-filtering and security logs IPSContent-filtering and security logs anomaly behavior IPS Logs 663 Routing LogsApplication Logs LAN-to-WAN Logs 664 LAN-to-DMZ LogsDMZ-to-WAN Logs WAN-to-LAN Logs 665 DMZ-to-LAN LogsWAN-to-DMZ Logs Routing logs WAN to DMZ 666 Default SettingsUTM default configuration settings Feature Login settings Default behavior 667 Default Settings and Technical SpecificationsFeature Default behavior WAN connections Administrative and monitoring settings IPS Feature Default behavior Firewall and network security668 SIP ALG 669 Feature Application security Default behavior 670 Feature Default behavior 671 Radius settingsSSL VPN settings User, group, and domain settings 672 UTM physical and technical specifications Physical and Technical Specifications673 Setting Specification UTM IPSec VPN specificationsFeature Specification Major regulatory compliance Interface specifications Http//prosecure.netgear.com UTM SSL VPN specificationsFeature Description 802.11b/bg/ng wireless specifications 675 676 Feature Description 802.11a/na wireless specificationsAES FCC Requirements for Operation in the United States Regulatory Compliance Information677 European Union Notification of Compliance Wired678 679 Additional CopyrightsTerms MD5 680 Language Statement Europe EU Declaration of ConformityEdoc in Languages of the European Community 681 682 Notification of Compliance Wireless 683 FCC Caution 684 Industry CanadaImportant Note Radiation Exposure Statement Avertissement 685 Interference Reduction Table 686 Index 687 See also 688 DMZ 689 690 691 Blocking 202, 218, 222 setting access exceptions Logs 469, 508-510traffic statistics 692 LAN 693 694 695 696 697 698 SSL VPN 699 TCP/IP 700 701 Logs 290, 470 702 703 Dhcp 50, 106, 119 ModeConfig 704