382 | NETGEAR UTM5EW-100NAS, STM150EW-100NAS specification

ProSecure Unified Threat Management (UTM) Appliance

Figure 226.

The User Portal Login screen displays three links:

•Download CA certificate. The first time that a user remotely connects to a UTM with a browser through an SSL connection, he or she might get a warning message about the SSL certificate. The user can follow the directions of his or her browser to accept the SSL certificate, or import the UTM’s root certificate by selecting the Download CA certificate link.

•Check you quarantined email. For information, see Spam Reports for End Users on page 519 and Configure the Quarantine Settings on page 460.

•Report a URL Misclassification. For information, see Configure Web Content Filtering on page 218.

After a user has logged in through the User Portal Login screen, a confirmation screen displays:

Manage Users, Authentication, and VPN Certificates

382

Image 382

NETGEAR UTM5EW-100NAS, STM150EW-100NAS manual 382

Contents

ProSecure Unified Threat Management UTM Appliance Trademarks ProSecure Product Updates ProSecure Forum Revision HistorySupport ProSecure Unified Threat Management UTM Appliance Application control see Configure Application Control Settings and Technical SpecificationsUpdated Features That Reduce Traffic and Features That Configure Quarantine Settings, Query and Manage Configure Distributed Spam Analysis section Appendix B, Wireless Network Module for the UTM9S UTM25SAdded the Requirements for Entering IP Addresses Contents Manually Configure Internet and WAN Settings Firewall Protection Content Filtering and Optimizing Scans Virtual Private Networking Using SSL Connections Network and System Management Troubleshoot and Use Online Support Appendix a xDSL Network Module for the UTM9S and UTM25S Appendix E ReadyNAS Integration Appendix H Default Settings and Technical Specifications Introduction Key Features and Capabilities Introduction Single or multiple exposed hosts Virtual private networks DSL Features Wireless FeaturesAdvanced VPN Support for Both IPSec and SSL Powerful, True Firewall Stream Scanning for Content Filtering Security Features Autosensing Ethernet Connections with Auto Uplink Easy Installation and Management Extensive Protocol Support Model Comparison Maintenance and SupportUTM model comparison Service Registration Card with License Keys Network Modules and Broadband Adapters Package Contents Hardware Features USB port Left LAN LEDs Power LEDFront Panel UTM5 and UTM10 Test LED Right WAN LED Right LAN LEDs USB port Left LAN LEDs Left WAN LEDs Active Front Panel UTM25Front Panel UTM50 Test LED Right LAN LEDs Right WAN LEDs LEDs LEDs Right WAN LEDs Test LED Right LAN LEDs Power LED Left LAN LEDs Left WAN LEDs USB portFront Panel UTM150 Active WAN LEDs Test LED Right LAN LEDs Right WAN LEDs Active WAN LEDs Power LED Left WAN LEDs Slot Left LAN LEDs USB portFront Panel UTM9S and UTM25S and Network Modules Test LED Right LAN LEDs Wireless Network Modules XDSL Network Modules LED descriptions UTM5, UTM10, UTM25, UTM50, and UTM150 LED Descriptions, UTM5, UTM10, UTM25, UTM50, and UTM150Activity Description DMZ LED Activity Description LAN portsWAN ports LED descriptions UTM9S and UTM25S LED Descriptions, UTM9S, UTM25S, and their Network ModulesUSB LED Receptacle Wireless network moduleRear Panel UTM5, UTM10, and UTM25 XDSL network modules Rear Panel UTM50 and UTM150 Factory Defaults Security lockReset button Receptacle Port Power Security lock AC power Receptacle Factory DefaultsReset button Console switch Switch Bottom Panels with Product Labels ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance Choose a Location for the UTM Use the Rack-Mounting Kit Use the Setup Wizard to Provision UTM in Your Network Steps for Initial Connection Qualified Web Browsers Use the Setup Wizard to Provision the UTM in Your NetworkLog In to the UTM Requirements for Entering IP Addresses ProSecure Unified Threat Management UTM Appliance Web Management Interface Menu Layout ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance Use the Setup Wizard to Perform the Initial Configuration  To start the Setup Wizard Setup Wizard of 10 LAN Settings Setting Description LAN TCP/IP Setup Dhcp Setting Description DNS Proxy Setup Wizard of 10 WAN Settings Setting Description Inter Vlan Routing Setting Description ISP Login Setup Wizard WAN Settings screen settingsISP Type ISP See Configure Load Balancing Multiple WAN Port ModelsInternet IP Address Dhcp Domain Name Server DNS Servers Setup Wizard of 10 System Date and TimeGet Automatically from ISP radio button Setting Description Set Time, Date, and NTP Servers Setup Wizard of 10 ServicesSetup Wizard System Date and Time screen settings For Daylight Savings Time check box Setup Wizard Services screen settings Web Setup Wizard Email Security screen settings Setup Wizard of 10 Email SecuritySetting Description Action Setup Wizard of 10 Web Security Scan Exceptions Http Setup Wizard of 10 Web Categories to Be Blocked Blocked Categories Scheduled Days Setup Wizard Web Categories to be blocked screen settingsSetting Description Blocked Web Categories Blocked Categories Time of Day Setup Wizard of 10 Email Notification Setup Wizard Email Notification screen settings Setup Wizard Signatures & Engine screen settings Setup Wizard of 10 Signatures & EngineSetting Description Update Settings Setting Description Update Frequency Setup Wizard of 10 Saving the ConfigurationHttps Proxy Settings Register the UTM with Netgear Use the Web Management Interface to Activate Licenses ProSecure Unified Threat Management UTM Appliance  To retrieve and display the registered information Electronic LicensingClick Retrieve Info Test Connectivity Verify Correct InstallationWhat to Do Next Test Http Scanning ProSecure Unified Threat Management UTM Appliance Manually Configure Internet and WAN Settings Manually Configure Internet and WAN Settings Internet and WAN Configuration Tasks Complete these steps ProSecure Unified Threat Management UTM Appliance ProSecure Unified Threat Management UTM Appliance Connection method Manual data input required Pptp If the automatic ISP configuration is successful Manually Configure the Internet ConnectionIf the automatic ISP configuration fails Pptp and PPPoE settings Balancing Multiple WAN Port Models on page 86 . To use load DNS server settings Identifier check box If the manual ISP configuration is successful If the manual ISP configuration fails Configure the WAN Mode Overview of the WAN Modes Configure Network Address Translation All Models Configure Classical Routing All Models Configure Auto-Rollover Mode  To configure auto-rollover mode Failure detection method settings Configure the Failure Detection Method To configure the failure detection method Setting Description WAN Failure Detection Method Ping Configure Load Balancing Multiple WAN Port Models  To configure load balancing Configure Protocol Binding Optional Screen see Outbound Rules Service Blocking on Add Protocol Binding screen settingsChange Group Names in the Network Database on Configure Secondary WAN Addresses  To edit a protocol binding  To add a secondary WAN address to a WAN interface Configure Dynamic DNS  To delete one or more secondary addresses  To configure Ddns Click Apply to save your configuration DNS service settings Set the UTM’s MAC Address and Configure Advanced WAN Options Advanced WAN settings Setting Description MTU Size 1000BaseT FullDuplex. Gigabit Ethernet Router’s MAC Address Setting Speed DescriptionUpload/Download Settings Failure Detection Method Additional WAN-Related Configuration Tasks LAN Configuration Manage Virtual LANs and Dhcp Options LAN Configuration Port-Based VLANs Assign and Manage Vlan Profiles 100 Vlan Dhcp Options 101 DNS Proxy Dhcp ServerDhcp Relay 102  To add or edit a Vlan profile Configure a Vlan ProfileLdap Server 103 104 105 Edit Vlan Profile screen settingsSetting Description Vlan Profile Port Membership 106 107  To configure a Vlan to have a unique MAC address Configure Vlan MAC Addresses and Advanced LAN Settings To enable, disable, or delete one or more Vlan profiles  To edit a Vlan profile Configure Multihome LAN IP Addresses on the Default 109  To add a secondary LAN IP address 110  To delete one or more secondary LAN IP addresses Manage Groups and Hosts LAN Groups To edit a secondary LAN IP address 111 Manage the Network Database 112 113 Add Computers or Devices to the Network Database Known PCs and devices settingsSetting Description Name Modify Computers or Devices in the Network Database  To edit the names of any of the eight available groups Change Group Names in the Network DatabaseDelete Computers or Devices from the Network Database 115 Set Up Address Reservation 116  To enable and configure the DMZ port Configure and Enable the DMZ Port117 Setting Description DMZ Port Setup DMZ Setup screen settings118 119 120  To add a static route to the Static Route table Configure Static RoutesManage Routing 121 Add Static Route screen settings 122  To edit a static route that is in the Static Routes table Configure Routing Information Protocol To enable and configure RIP Select Network Config Routing  To delete one or more routes RIP Configuration screen settings 124 Authentication for RIP-2B/2M 125 Static Route Example 126 About Firewall Protection 127 Firewall Protection Administrator Tips128 Number of supported firewall rule configurations Outbound Rules Service Blocking129 130 Setting Description Outbound RulesOutbound rules overview Block always 131 Groups and Hosts LAN Groups on Service Profiles on 132 133 Inbound Rules Port ForwardingNAT IP 134 Setting Description Inbound Rules 135 136 Quality of Service Profiles on 137 Order of Precedence for Rules 138  To change the default outbound policy Configure LAN WAN Rules139  To enable, disable, or delete one or more rules Create LAN WAN Outbound Service Rules To change an existing outbound or inbound service rule 140  To create an inbound LAN WAN service rule Create LAN WAN Inbound Service Rules141 Configure DMZ WAN Rules 142  To delete or disable one or more rules 143 Create DMZ WAN Inbound Service Rules Create DMZ WAN Outbound Service Rules144  To create an inbound DMZ WAN service rule Configure LAN DMZ Rules145 146  To create an outbound LAN DMZ service rule Create LAN DMZ Outbound Service RulesCreate LAN DMZ Inbound Service Rules  To create an inbound LAN DMZ service rule LAN WAN Inbound Rule Host a Local Public Web Server Examples of Firewall RulesInbound Rule Examples 148 149 Netgear UTM 150  To configure the UTM for additional IP addresses 151 LAN WAN or DMZ WAN Inbound Rule Specify an Exposed Host 152 LAN WAN Outbound Rule Block Instant Messenger Outbound Rule Example153  To create a Vlan rule Configure Other Firewall FeaturesVlan Rules 154 Add Customized Services on Add VLAN-VLAN Service screen settings155  To edit a Vlan rule  To delete or disable one or more Vlan rules156 Attack Checks, VPN Pass-through, and Multicast Pass-through Attack Checks screen settingsSetting Description WAN Security Checks 157 Setting Description LAN Security Checks Configure Multicast Pass-Through To configure multicast pass-through 158 159 Set Session Limits  To enable and configure session limitsSession Limit screen settings  To delete one or more multicast source addresses Session Timeout  To enable ALG for SIP and VPN scanning161 162 Add Customized Services 163 Services screen settings  To add a customized service164  To delete one or more services Create Service Groups To edit a service  To create a service group  To edit a service group 166  To create an IP group Create IP Groups167  To delete an IP group 168  To create a QoS profile Create Quality of Service Profiles169 Add QoS Profile screen settings 170  To edit a QoS profile Default High Medium High LowCreate Bandwidth Profiles  To delete one ore more QoS profiles  To add and enable a bandwidth profile 172 Add Bandwidth Profile screen settings 173  To delete one or more bandwidth profiles Create Traffic Meter Profiles To edit a bandwidth profile 174  To add a traffic meter profile 175 Add Traffic Meter Profile screen settings 176  To delete one or more traffic meter profiles Set a Schedule to Block or Allow Specific Traffic To edit a traffic meter profile  To add a schedule 178 Add Schedule screen settingsScheduled Days  To edit a schedule Enable Source MAC FilteringSetting Description Scheduled Time of Day  To delete one or more schedules  To remove one or more entries from the table 180  To set up IP/MAC bindings Set Up IP/MAC Bindings181 182 IP/MAC Binding screen settingsSetting Description Email IP/MAC Violations IP/MAC Bindings  To remove one or more IP/MAC bindings from the table Configure Port Triggering To edit an IP/MAC binding 183  To add a port-triggering rule Port Triggering screen settings184  To display the status of the port-triggering rules  To edit a port-triggering rule185 Configure Universal Plug and Play 186  To configure intrusion prevention Enable and Configure the Intrusion Prevention System To enable intrusion prevention IPS screen settings Security Category Settings 188 IPS, screen 1 Firewall Protection 189 190 IPS uncommon attack namesAttack Name Description Web Attack Name Description 191Misc About Content Filtering and Scans 192 Content Filtering and Optimizing Scans Default Email and Web Scan SettingsDefault email and web scan settings 193  To configure the email protocols and ports to scan Configure Email ProtectionCustomize Email Protocol Scan Settings Scan type Default scan setting Default action if applicable Protocol Scan Settings on 195  To configure the antivirus settings for email traffic Customize Email Antivirus and Notification Settings196 Anti-Virus screen settings for email traffic 197 Notification Settings Setting Description Scan Exceptions198 199 Email Content FilteringSetting Description Email Alert Settings SUBJECT%, %FILENAME%, %ACTION%, %VIRUSNAME% 200 Filter by Password-Protected Attachments ZIP, RAR, etc Email Filters screen settingsSetting Description Email Filters 201 202 Setting Description Filter by File TypeProtect Against Email Spam Filter by File Name Set Up the Whitelist and Blacklist 203  To configure the whitelist and blacklist 204 Whitelist/Blacklist screen settings 205  To add a blacklist provider to the real-time blacklist Configure the Real-Time Blacklist To enable the real-time blacklist 206 Configure Distributed Spam Analysis 207 Setting Description Distributed Spam Analysis Distributed Spam Analysis screen settings208 209 Anti-Spam Engine SettingsLow Medium-Low Setting Description Send Quarantine Spam Report Configure Web and Services ProtectionCustomize Web Protocol Scan Settings 210  To configure the web protocols and ports to scan 211 Configure Https Smart Block 212 Add or Edit Https Smart Block Profile settings 213 214  To change a profile 215 Configure Web Malware or Antivirus Scans 216 Scan Exception Anti-Virus screen settings for HTTP/HTTPS traffic217 Html Scan Configure Web Content Filtering 218  To configure web content filtering 219 220 Setting Description Content Filtering Content Filtering screen settings221 Performance Management on 222Full-Text Search Block Web Objects 223 224 Configure Web URL FilteringSetting Description Web Category Lookup URL  To configure web URL filtering 225 226 URL Filtering screen settingsSetting Description Whitelist Blacklist 227 URL% How Https Scanning Works Configure Https Scanning and SSL Certificates228 229 Https Settings screen settings Configure the Https Scan Settings To configure the Https scan settings 230 Manage SSL Certificates for Https Scanning 231 Manage the Active Https Certificate 232 Manage Trusted Https Certificates 233 Manage Untrusted Https Certificates  To specify trusted hosts Specify Trusted Hosts for Https Scanning To delete an untrusted certificate 235 Trusted Hosts screen settings 236 SSL Settings screen settings Configure the SSL Settings for Https Scanning To configure the SSL settings for Https scanning 237  To configure the antivirus settings for FTP traffic Configure FTP ScanningCustomize FTP Antivirus Settings Anti-Virus screen settings for FTP Setting Description Scan Exception Configure FTP Content Filtering To configure the FTP filters 239 Configure Application Control 240 241 242 243 To search for an application To select one or more categories of applicationsTo select one or more individual applications 244 245 246 Application Control Policy pop-up screen settingsSetting Description Policy for a category of applications Meter Profiles on  To change an existing application control profile 247  To delete one or more application control profiles Set Exception Rules for Web and Application Access248  To set web access exception rules 249 Application 250 Https Smart Block File Extension251 Web Category Add or Edit Exceptions screen settingsURL Filtering 252 253 Delete Groups on See Configure Radius VLANs on254 Ldap To select a single application 255To select a category of applications To search for an application For Exceptions for Web and Application Access on 256  To change an existing exception rule  To disable, enable, or delete one or more exception rules257  To create and manage custom categories 258 Custom categories applications 259 To select one or more categories of applications Custom Categories screen settings260 To select one or more individual applications Applications in this Category table 261To remove one or more categories or applications from To add a URL  To change an existing custom category  To configure scanning exclusion rulesSet Scanning Exclusions for IP Addresses and Ports  To delete one or more custom categories Scanning Exclusion screen settings 263 Virtual Private Networking 264 IP addressing for VPNs in dual WAN port systems 265 Create Gateway-to-Gateway VPN Tunnels with the Wizard 266 267 3DES Setting Default Value IKE policy268 SHA-1 IPSec VPN Wizard settings for a gateway-to-gateway tunnel 269 Setting Description Secure Connection Remote Accessibility 270 Create a Client-to-Gateway VPN Tunnel 271 272 273 IPSec VPN Wizard settings for a client-to-gateway tunnelSelect the VPN Client radio button. The default remote Fqdn Fqdn 274 275 Information required to configure the VPN clientComponent Example Information to be collected 276 277 278 279 VPN client advanced authentication settingsSetting Description Advanced features NAT-T 280 Type vpnclient  To create new authentication settings281 10.34.116.22 VPN client authentication settings282 IKE 283 Type netgearplatform  To create an IPSec configurationSetting Description Local and Remote ID 284 285 VPN client IPSec configuration settingsESP  To specify the global parameters 286 Test the Netgear VPN Client Connection 287 Click Gateway-Tunnel, and press Ctrl+O 288 View the UTM IPSec VPN Connection Status Netgear VPN Client Status and Log Information289 IPSec VPN Connection Status screen information View the UTM IPSec VPN Log To query the IPSec VPN log 290 Manage IPSec VPN and IKE Policies 291 IKE Policies Screen  To access the IKE Policies screenManage IKE Policies 292 List of IKE Policies table information 293  To add an IKE policy manually Manually Add or Edit an IKE Policy To delete one or more IKE polices 294 295 296 Add IKE Policy screen settingsSetting Description Mode Config Record General Remote 297IKE SA Parameters 298  To edit an IKE policy Setting Description Extended Authentication299 VPN Policies Screen Manage VPN Policies300 List of VPN Policies table information 301  To delete one or more VPN polices  To enable or disable one or more VPN policiesManually Add or Edit a VPN Policy  To add a VPN policy manually 303 Setting Description General Add New VPN Policy screen settings304 Traffic Selection Configure Keep-Alives305 Manual Policy Parameters 306 Setting Description Auto Policy Parameters 307  To edit a VPN policy Configure Extended Authentication Xauth308 Extended authentication settings Configure Xauth for VPN Clients To enable and configure Xauth 309  To configure primary and backup Radius servers User Database ConfigurationRadius Client and Server Configuration 310 Backup Radius Server Radius Client screen settingsSetting Description Primary Radius Server Connection Configuration Configure Mode Config Operation on the UTM Assign IP Addresses to Remote Users Mode ConfigMode Config Operation 312  To configure Mode Config on the UTM 313 Setting Description Client Pool Add Mode Config Record screen settings314 315 Traffic Tunnel Security Level 316 317 318 Setting Description IKE SA ParametersSelect Group 2 1024 bit User Database Configuration on Configure the ProSafe VPN Client for Mode Config Operation319 320 Type GWModeConfig 321 VPN client authentication settings Mode Config 322 VPN client advanced authentication settings Mode Config Type TunnelModeConfig323 324 VPN client IPSec configuration settings Mode ConfigEnter Configure the Mode Config Global Parameters 325 Test the Mode Config Connection 326  To delete one or more Mode Config records Modify or Delete a Mode Config Record To edit a Mode Config record 327 Configure Keep-Alives Configure Keep-Alives and Dead Peer Detection328 Keep-alive settings Configure Dead Peer Detection To configure DPD on a configured IKE policy 329 Dead Peer Detection settings Configure NetBIOS Bridging with IPSec VPN To enable NetBIOS bridging on a configured VPN tunnel 330 Configure the Pptp Server 331 Setting Description Pptp Server Pptp Server screen settings332  To view the active Pptp tunnel users Setting Description AuthenticationView the Active Pptp Users 333 334 Configure the L2TP ServerPptp Active Users screen information Pptp IP Setting Description L2TP Server L2TP Server screen settings335  To view the active L2TP tunnel users For More IPSec VPN InformationView the Active L2TP Users L2TP Active Users screen information SSL VPN Portal Options 337  To start the SSL VPN Wizard Build a Portal Using the SSL VPN WizardVirtual Private Networking Using SSL Connections 338 SSL VPN Wizard of 6 Portal Settings 339 Setting Description Portal Layout and Theme Name SSL VPN Wizard of 6 screen settings portal settings340 Wizard of 6 Client IP Addresses and Routes on 341SSL VPN Portal Pages to Display 6 Port Forwarding on SSL VPN Wizard of 6 Domain Settings 342 343 SSL VPN Wizard of 6 screen settings domain settingsServer Configuration Radius Client 344 345 Windows login account name in email format. ForDisplay name in the dn format. For example 346 SSL VPN Wizard of 6 screen settings user settings SSL VPN Wizard of 6 User Settings347 SSL VPN Wizard of 6 Client IP Addresses and Routes 348 349 Setting Description Client IP Address RangeAdd Routes for VPN Tunnel Clients SSL VPN Wizard of 6 Port Forwarding Setting Description Add New Application for Port Forwarding350 SSH SSL VPN Wizard of 6 Verify and Save Your Settings351 Add New Host Name for Port Forwarding 352 Access the New SSL VPN Portal 353 354 355 View the UTM SSL VPN Connection Status 356  To query the SSL VPN log Manually Configure and Modify SSL PortalsView the UTM SSL VPN Log 357 358  To create an SSL VPN portal layout Manually Create or Modify the Portal Layout359 360 Add Portal Layout screen settings 361  To edit a portal layout Configure Domains, Groups, and UsersSetting Description SSL VPN Portal Pages to Display  To delete one or more portal layouts  To add a server and a port number Configure Applications for Port ForwardingAdd Servers and Port Numbers 363 364  To add servers and host names for client name resolutionAdd a Host Name TCP application Port number Fully Qualified Domain Name. The full server name Configure the SSL VPN Client365  To define the client IP address range Configure the Client IP Address RangeSSL VPN Client screen settings 366  To add an SSL VPN tunnel client route Add Routes for VPN Tunnel Clients367  To change the LCP time-out Configure the Advanced SSL VPN Client Settings368  To define a network resource Use Network Resource Objects to Simplify PoliciesAdd New Network Resources 369  To delete one or more network resources Resources screen settings to edit a resourceEdit Network Resources to Specify Addresses  To edit network resources Configure User, Group, and Global Policies 371 Global Default Policy 372  To view the existing policies View PoliciesAdd a Policy  To add an SSL VPN policy 374 Add SSL VPN Policy screen settingsSetting Description Policy For Add SSL VPN Policies 375 Resource Objects to Simplify Policies on  To edit an SSL VPN policy 376  To delete one or more SSL VPN policies For More SSL VPN Information377 Authentication Process and Options 378 Authentication Description Protocol or method External authentication protocols and methodsManage Users, Authentication, and VPN Certificates 379 Administrative Users and Users with Guest Privileges Configure Authentication Domains, Groups, and UsersLogin Portals 380 Users with Special Access Privileges 381 382 383 How an Active Directory Works Active Directories and Ldap ConfigurationsUnauthenticated or Anonymous Users 384 How to Bind a DN in an Active Directory Configuration 385 386 Select Users Domains 387  To create a domain Configure DomainsCreate and Delete Domains 388 389 Add Domain screen settings 390 391 392 393  To delete one or more domains Configure GroupsEdit Domains  To edit a domain  To create a VPN group Create and Delete Groups395  To delete one or more groups Groups screen settingsEdit Groups  To edit a VPN group  To create and manage custom groups Configure Custom Groups397 398 Add Custom Group screen settings 399  To delete one or more custom groups  To change an existing custom group400  To create an individual user account Configure User Accounts401 402  To delete one or more user accounts Add User screen settingsSee Configure Extended Authentication Xauth on 403  To configure user login policies Set User Login PoliciesConfigure Login Policies 404  To restrict logging in based on IP address Configure Login Restrictions Based on IP Address405  To delete one or more addresses Configure Login Restrictions Based on Web BrowserBy Source IP Address screen settings  To restrict logging in based on the user’s browser  To delete one or more browsers Internet Explorer Opera Netscape Navigator407  To modify user settings, including passwords Change Passwords and Other User Settings408 DC Agent Edit User screen settingsConfigure Extended Authentication Xauth on 409 410  To download ProSecure DC Agent software and add a DC agent 411  To edit a DC agent  To configure AD SSO with a DC agentDC Agent screen settings 412 413 414  To configure a Radius Vlan Configure Radius VLANs To do so, follow this procedure 415 Configure Global User Settings 416  To log out all active users View and Log Out Active Users417  To view all or selected users Active Users screen settings418 Manage Digital Certificates for VPN Connections 419 VPN Certificates Screen 420  To view and upload trusted certificates Manage CA Certificates421  To delete one or more digital certificates Manage Self-Signed Certificates422 423 424 Generate self-signed certificate request settings512 1024 2048 425  To delete one or more SCRs Manage the Certificate Revocation ListView and Manage Self-Signed Certificates  To delete one or more self-signed certificates  To delete one or more CRLs 427 Bandwidth Capacity Performance Management428 Network and System Management Features That Reduce Traffic429 430 Content Filtering 431 Source MAC Filtering Features That Increase Traffic432 433 Port Triggering Configure the DMZ Port434 Use QoS and Bandwidth Assignments to Shift the Traffic Mix Configure Exposed HostsConfigure VPN Tunnels Assign QoS Profiles Monitoring Tools for Traffic Management Change Passwords and Administrator and Guest SettingsSystem Management 436 437  To configure the UTM for remote management Configure Remote Management Access438 Https//IPaddress or https//FullyQualifiedDomainName 439 Use a Simple Network Management Protocol Manager 440 441 SNMPv1/v2c Settings Global Snmp settings and SNMPv1/v2c settingsSetting Description Snmp Global Settings 442 Setting Description SNMPv3 Settings  To configure the SNMPv3 settingsSNMPv3 settings 443 444  To edit an SNMPv3 user profile Manage the Configuration FileRestore Settings  To delete one or more SNMPv3 user profiles  To back up settings Back Up Settings446 Revert to Factory Default Settings Restore Settings447 View the Available Firmware Versions Update the Firmware448 Firmware screen, available versions 449 Click Install Downloaded Firmware 450  To download the latest firmware for your UTM 451 452 453  To reboot the UTM without changing the firmware Update the Scan Signatures and Scan Engine FirmwareReboot without Changing the Firmware 454 455 Signatures & Engine screen settings Configure Date and Time ServiceConfigure Automatic Update and Frequency Settings 456  To set time, date, and NTP servers System Date & Time screen settingsAdjust for Daylight Savings Time check box 457 Connect to a ReadyNAS and Configure Quarantine Settings 458  To connect to the ReadyNAS on the UTM Log StorageConnect to a ReadyNAS 459 ReadyNAS Integration screen settings Configure the Quarantine Settings To configure the quarantine settings 460 Unauthenticated or Anonymous Users on Quarantine settings461 Enable the WAN Traffic Meter 462 Monitor System Access and Performance 463 Traffic Counter Setting Description Enable Traffic Meter464 Event Notifications on Setting Description When Limit is reached 465  To configure the email notification server Configure Logging, Alerts, and Event NotificationsConfigure the Email Notification Server 466 Email Notification screen settings Configure and Activate System, Email, and Syslog Logs467  To configure and activate logs 468 Email Logs to Administrator Email and Syslog screen settingsSetting Description System Logs Option 469 470 Logs screen see Configure and Activate Firewall Logs onSend Logs via Syslog Setting Description Clear the Following Logs Information How to Send Syslogs over a VPN Tunnel between SitesConfigure Gateway 1 at Site 471  To change the local IP address in the VPN policy Configure Gateway 2 at Site To change the remote IP address in the VPN policy 472  To specify the syslog server that is connected to Gateway Configure and Activate Update Failure and Attack Alerts To configure and activate the email alerts 473 Alerts screen settings 474 TIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT% 475FILENAME%, %ACTION%, %VIRUSNAME%  To configure and activate firewall logs Configure and Activate Firewall Logs476 Monitor Real-Time Traffic, Security, and Statistics Setting Description Routing Logs477 Dashboard, screen 1 478 479  To set the poll intervalDashboard screen threats and traffic information Total Threats Threats Counts 480Total Traffic Bytes Enable and Configure the Intrusion 481 Dashboard screen service statistics information 482 483 Spam blacklist see Set Up the Whitelist and Blacklist onMonitor Application Use in Real Time RBL 484 Application Dashboard screen  To set the monitoring period To filter the information that is displayed onscreen 485 View the System Status View Status Screens486 487 View the System Status ScreenSystem Status screen fields Status Description 488 Scan Settings onView the Network Status Screen System Information 489 Available Access Points TableNetwork Status screen fields LAN Vlan Information 490 View the Router Statistics Screen To view the Router Statistics screen Ssid Router Statistics screen fields View the Wireless Statistics Screen UTM9S and UTM25S Only To view the Wireless Statistics screen 491 Radio Statistics Details Wireless Statistics screen fields492 AP Statistics View the Detailed Status Screen 493 494 Detailed Status screen fields LAN Port ConfigurationConfigure and Enable the DMZ Port on 495 Manually Configure the Internet SettingsMAC Address and Configure 496 Access Points Information Wireless information in SLOT-1 Info or SLOT-2 Info497 View the Vlan Status Screen See Configure a Vlan Profile onConfigure a Vlan Profile on Vlan Status screen fields View the xDSL Statistics Screen UTM9S and UTM25S Only View the Active VPN Users499 View the VPN Tunnel Connection Status 500 View the Active Pptp and L2TP Users 501 View the Port Triggering Status  To view the status of the port-triggering feature502 Port Triggering Status pop-up screen information 503 Connection Status pop-up screen information View the WAN, xDSL, or USB Port Status To view the status of a WAN, xDSL, or USB port 504  To view the attached devices in the LAN Groups screen View Attached Devices and the Dhcp LeasesView Attached Devices 505 506  To view the Dhcp leases Query and Manage the LogsView the Dhcp Leases 507 Overview of the Logs 508  To query and download logs Query and Download Logs509 Logs Query screen settings 510 511 512  To identify infected clients EMERG, ALERT, CRITICAL, ERROR, WARNING, NoticeExample Use the Logs to Identify Infected Clients 513 Log Management Query and Manage the Quarantine Logs514  To query the quarantine logs Query the Quarantined Logs515 Quarantine screen settings 516 View and Manage the Quarantined Spam Table 517 View and Manage the Quarantined Infected Files Table 518  For an end user to send a spam report Spam Reports for End Users519 Click Send Report View, Schedule, and Generate Reports520 Enable Application Session Monitoring 521 Report Filtering Options  To configure filtering options522 Horizontal Bar Report screen filtering options settings523 Pie  To display the report templates and view reports onscreen Use Report Templates and View Reports Onscreen524 Report screen report template information 525 526 527 IPS & Application 528 Email Activity 529 Schedule, Email, and Manage Reports To schedule automatic generation and emailing of reports System Managing Saved Reports Report screen schedule report settingsSetting Description Schedule Reports 530 Use Diagnostics Utilities 531  To send a ping Use the Network Diagnostic ToolsSend a Ping Packet 532 Display the Routing Table Use the Real-Time Traffic Diagnostics ToolTrace a Route Look Up a DNS Address  To use the real-time traffic diagnostics tool 534  To gather log information about your UTM Gather Important Log InformationGenerate Network Statistics 535 Reboot and Shut Down the UTM Perform Maintenance on the USB Device536 537 Troubleshoot and Use Online Support 538 Verify the Correct Sequence of Events at Startup Power LED Not OnBasic Functioning Test LED Never Turns Off LAN or WAN Port LEDs Not On Troubleshoot the Web Management Interface540 Troubleshoot the ISP Connection When You Enter a URL or IP Address, a Time-Out Error Occurs541  To check the WAN IP address 542 Ping Troubleshoot a TCP/IP Network Using a Ping UtilityTest the LAN Path to Your UTM 543 Ping -n 10 IP address Test the Path from Your Computer to a Remote Device544 Restore the Default Configuration and Password 545 Use Online Support Problems with Date and TimeEnable Remote Troubleshooting  To initiate the support tunnel  To submit a file to Netgear for analysis Send Suspicious Files to Netgear for Analysis547 Malware Analysis screen settings Access the Knowledge Base and Documentation548 XDSL Network Module for the UTM9S UTM25S 549 XDSL Network Module for the UTM9S and UTM25S XDSL Network Module Configuration TasksConfigure the xDSL Settings 550  To configure the xDSL settings 551 Setting Description XDSL Settings XDSL settings552 VPI 553VCI 554 561, and Troubleshoot the ISP Connection on 555 Manually Configure the xDSL Internet Connection 556 557 PPPoE and PPPoA settings 558 559 ATM Ipoa 560 561 Configure Network Address Translation 562 Configure Classical Routing 563 564 565 Configure Load Balancing and Optional Protocol Binding 566 Configure Load Balancing 567 568 569 570  To add a secondary WAN address to the DSL interface 571 572 573 Setting Description SLOT-x Dynamic DNS Status 574 575 Default Address radio button Advanced DSL settings576 577 Wireless Network Module for UTM9S and UTM25S 578 Wireless Equipment Placement and Range Guidelines Overview of the Wireless Network ModuleConfiguration Order Wireless Network Module for the UTM9S and UTM25S  To configure the basic radio settings Configure the Basic Radio Settings580 581 Radio Settings screen settingsField Descriptions 582 Operating Frequency Channel Guidelines 583 Wireless Data Security Options 584 Wireless Security Profiles 585 Data encryption Network authentication586 WPA2 Radius settings Before You Change the SSID, WEP, and WPA SettingsWPA Radius settings 587 Wireless Profiles screen settings Configure and Enable Wireless Profiles To add a wireless profile 588 Field Description Profile Configuration Add Wireless Profiles screen settings589 590 Security Options on Tkip TKIP+AES 591WEP Index and Keys 592  To delete one or more wireless profiles Restrict Wireless Access by MAC Address To edit a wireless profile  To enable or disable one or more wireless profiles 594 595 596 Configure a Wireless Distribution SystemAccess Point Status screen fields Connected Clients  To enable and configure WDS 597  To configure advanced radio settings Configure Advanced Radio Settings To configure WDS on a peer 598 Advanced Wireless screen settings 599 Configure WMM QoS Priority Settings 600 601  To test for wireless connectivity Test Basic Wireless ConnectivityFor More Information About Wireless Configurations 602 3G/4G Dongle Configuration Tasks 603 3G/4G Dongles for the UTM9S and UTM25S Manually Configure the USB Internet Connection604  To configure the WAN ISP settings for the USB interface 605 Connection Settings USB ISP settingsSetting Description 3G Dongle Details 606 XDSL, or USB Port Status on 607  To configure the 3G/4G settings Configure the 3G/4G Settings608 Connection Setting 4G settingsSetting Description 3GStatus 609 610 APN 611 612 613 614 615 616 617 618 619 Setting Description USB Dynamic DNS Status 620 621 What to Consider Before You Begin 622 Internet WAN port Physical facility623 Where Do I Get the Internet Configuration Information? Computer Network Configuration RequirementsInternet Configuration Requirements Cabling and Computer Hardware Requirements Internet Connection Information 625 Overview of the Planning Process 626 Inbound Traffic 627 Inbound Traffic Dual WAN Ports for Improved Reliability Inbound Traffic to a Single WAN Port SystemInbound Traffic to a Dual WAN Port System Inbound Traffic Dual WAN Ports for Load Balancing Virtual Private Networks 629 VPN Road Warrior Client-to-Gateway 630 VPN Road Warrior Single-Gateway WAN Port Reference Case 631 VPN Road Warrior Dual-Gateway WAN Ports for Load Balancing 632 VPN Gateway-to-Gateway 633 634 VPN Telecommuter Single-Gateway WAN Port Reference Case VPN Telecommuter Client-to-Gateway through a NAT Router635 636 VPN Telecommuter Dual-Gateway WAN Ports for Load Balancing 637 Supported ReadyNAS Models 638 Select Add-ons Add New Install the UTM Add-On on the ReadyNAS To install the UTM add-on on the ReadyNAS ReadyNAS Integration Select Add-ons Installed 640 Connect to the ReadyNAS on the UTM 641 642 643 What Are the Benefits of Two-Factor Authentication? Why Do I Need Two-Factor Authentication?644 Two-Factor Authentication Netgear Two-Factor Authentication SolutionsWhat Is Two-Factor Authentication?  To use WiKID for end users 646 647 648 Log message termsTerm Description System Startup RebootSystem Log Messages 649 System logs NTP Login/LogoutSystem logs login/logout 650 IPSec Restart Auto-Rollover ModeFirewall Restart WAN Status 652 Load Balancing ModeSystem logs WAN status, auto rollover ACTIVEWAN2 System logs WAN status, load balancing System logs WAN status, PPPoE idle timeoutPPP Logs 653 System logs WAN status, Pptp idle timeout 654 Unicast, Multicast, and Broadcast Logs Traffic Metering Logs655 Multicast/Broadcast Logs Invalid Packet LoggingIcmp Redirect Logs 656 657 Service logs Service LogsContent-Filtering and Security Logs 658 Web Filtering and Content-Filtering Logs 659 Spam Logs Content-filtering and security logs spam660 Email Filter Logs Traffic LogsMalware Logs 661 IPS Logs Content-filtering and security logs IPSContent-filtering and security logs anomaly behavior Anomaly Behavior Logs LAN-to-WAN Logs Routing LogsApplication Logs 663 WAN-to-LAN Logs LAN-to-DMZ LogsDMZ-to-WAN Logs 664 Routing logs WAN to DMZ DMZ-to-LAN LogsWAN-to-DMZ Logs 665 Feature Login settings Default behavior Default SettingsUTM default configuration settings 666 Administrative and monitoring settings Default Settings and Technical SpecificationsFeature Default behavior WAN connections 667 SIP ALG Feature Default behavior Firewall and network security668 IPS Feature Application security Default behavior 669 Feature Default behavior 670 User, group, and domain settings Radius settingsSSL VPN settings 671 672 UTM physical and technical specifications Physical and Technical Specifications673 Interface specifications UTM IPSec VPN specificationsFeature Specification Major regulatory compliance Setting Specification 675 UTM SSL VPN specificationsFeature Description 802.11b/bg/ng wireless specifications Http//prosecure.netgear.com 676 Feature Description 802.11a/na wireless specificationsAES FCC Requirements for Operation in the United States Regulatory Compliance Information677 European Union Notification of Compliance Wired678 679 Additional CopyrightsTerms 680 MD5 681 Europe EU Declaration of ConformityEdoc in Languages of the European Community Language Statement Notification of Compliance Wireless 682 FCC Caution 683 Avertissement Industry CanadaImportant Note Radiation Exposure Statement 684 Interference Reduction Table 685 Index 686 687 688 See also 689 DMZ 690 Blocking 202, 218, 222 setting access exceptions 691 692 Logs 469, 508-510traffic statistics 693 LAN 694 695 696 697 698 699 SSL VPN 700 TCP/IP 701 702 Logs 290, 470 Dhcp 50, 106, 119 ModeConfig 703 704