ProSafe VPN Firewall 200 FVX538 Reference Manual

To reserve an IP address, use the Groups and Hosts screen under the Network Configuration menu, LAN Groups submenu (see “Creating the Network Database” on page 3-6).

Note: The reserved address will not be assigned until the next time the PC contacts the firewall's DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew.

Configuring and Enabling the DMZ Port

The De-Militarized Zone (DMZ) is a network which, when compared to the LAN, has fewer firewall restrictions, by default. This zone can be used to host servers (such as a web server, ftp server, or email server, for example) and give public access to them. The eighth LAN port on the router can be dedicated as a hardware DMZ port for safely providing services to the Internet, without compromising security on your LAN.

The DMZ port feature is also helpful when using some online games and videoconferencing applications that are incompatible with NAT. The firewall is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, local PCs can run the application properly if those PCs are used on the DMZ port.

Note: A separate firewall security profile is provided for the DMZ port that is independent of the standard firewall security used for the LAN.

The DMZ Setup screen allows you to set up the DMZ port. It permits you to enable or disable the hardware DMZ port (LAN port 8, see “Router Front Panel” on page 1-6) and configure an IP address and Mask for the DMZ port.

To enable and configure the DMZ port:

1.From the main menu, select Network Configuration and then select DMZ Setup from the submenu. The DMZ Setup screen will display.

2.Check the Do you want to enable DMA Port? radio box.

3.Enter an IP Address and the Subnet mask for the DMZ port. Make sure that the DMZ port IP address and LAN Port IP address are in different subnets (for example, an address outside the LAN Address pool, such as 192.168.1.101).

3-10

LAN Configuration

v1.0, August 2006

Page 57 Page 59
Page 58
Image 58
NETGEAR VPN Firewall 200 FVX538 Configuring and Enabling the DMZ Port, Check the Do you want to enable DMA Port? radio box
Page 57 Page 59

VPN Firewall 200 FVX538 specifications

The NETGEAR VPN Firewall 200 FVX538 is a robust solution designed to meet the networking needs of small to medium-sized businesses. Engineered for resource management and security, this firewall combines the essential features of a VPN (Virtual Private Network) and firewall functionality into a single device, enabling secure, high-speed connectivity for various devices in any organizational environment.

One of the standout features of the FVX538 is its integrated VPN support, capable of handling up to 5 simultaneous VPN connections. This is particularly beneficial for remote workers and branch offices that require secure access to the company network. The device supports IPsec and L2TP VPN protocols, which helps ensure the integrity and confidentiality of data transmitted over the internet.

Another key characteristic of the FVX538 is its advanced firewall capabilities. This unit employs Stateful Packet Inspection (SPI) that scrutinizes incoming and outgoing packets, ensuring that only legitimate traffic is permitted. With customizable access control policies, network administrators can define specific permissions for various users. This feature is crucial for maintaining a secure environment and preventing unauthorized access to sensitive information.

The device also supports multiple WAN (Wide Area Network) connections, allowing for load balancing and failover capabilities. By utilizing two WAN ports, the FVX538 can switch between internet connections seamlessly, ensuring optimal uptime and performance even during network disruptions. Such functionality is essential for businesses that rely on constant connectivity.

Additionally, the FVX538 includes various security features such as Denial of Service (DoS) protection, NAT (Network Address Translation) support, and DHCP (Dynamic Host Configuration Protocol) server functionalities. These features work together to create a secure networking environment while simplifying the management of IP addresses within the network.

The user-friendly web management interface of the FVX538 makes it accessible for network administrators of all skill levels. With comprehensive logging and monitoring capabilities, organizations can keep an eye on network activities, enabling them to react swiftly to any potential threats.

In conclusion, the NETGEAR VPN Firewall 200 FVX538 stands out as a versatile, secure, and efficient solution for businesses looking to enhance their network security and performance. With its combination of VPN capabilities, robust firewall features, and user-friendly management tools, it is a reliable choice for ensuring secure and efficient networking operations.
Top Page Image Contents