Manuals / NETGEAR / Computer Equipment / Network Router

NETGEAR VPN Firewall 200 FVX538 manual Pptp

Models: VPN Firewall 200 FVX538

1 222
Download 222 pages 46.4 Kb
Page 81
Image 81

ProSafe VPN Firewall 200 FVX538 Reference Manual

•LAN Security Checks. A UDP flood is a form of denial of service attack that can be initiated when one machine sends a large number of UDP packets to random ports on a remote host. As a result, the distant host will (1) check for the application listening at that port, (2) see that no application is listening at that port and (3) reply with an ICMP Destination Unreachable packet.

When the victimized system is flooded, it is forced to send many ICMP packets, eventually making it unreachable by other clients. The attacker may also spoof the IP address of the UDP packets, ensuring that the excessive ICMP return packets do not reach him, thus making the attacker’s network location anonymous.

If enabled, the router will not accept more than 20 simultaneous, active UDP connections from a single computer on the LAN.

•VPN Pass through. When the router is in NAT mode, all packets going to the Remote VPN Gateway are first filtered through NAT and then encrypted per the VPN policy.

For example, if a VPN Client or Gateway on the LAN side of this router wants to connect to another VPN endpoint on the WAN (placing this router between two VPN end points), encrypted packets are sent to this router. Since this router filters the encrypted packets through NAT, the packets become invalid unless VPN Pass through is enabled.

When enabled, the VPN tunnel will pass the VPN traffic without any filtering. Tunnels can be:

–IPSec

–PPTP

–L2TP

To enable the appropriate Attack Checks for your environment:

1.Select Security from the main menu, Firewall Rules from the submenu and then the Attack Checks tab. The Attack Checks screen will display.

2.Check the radio boxes of the Attack Checks you wish to initiate.

Firewall Protection and Content Filtering

4-15

v1.0, August 2006

Page 80 Page 82
Page 81
Image 81
NETGEAR VPN Firewall 200 FVX538 manual Pptp
Page 80 Page 82

VPN Firewall 200 FVX538 specifications

The NETGEAR VPN Firewall 200 FVX538 is a robust solution designed to meet the networking needs of small to medium-sized businesses. Engineered for resource management and security, this firewall combines the essential features of a VPN (Virtual Private Network) and firewall functionality into a single device, enabling secure, high-speed connectivity for various devices in any organizational environment.

One of the standout features of the FVX538 is its integrated VPN support, capable of handling up to 5 simultaneous VPN connections. This is particularly beneficial for remote workers and branch offices that require secure access to the company network. The device supports IPsec and L2TP VPN protocols, which helps ensure the integrity and confidentiality of data transmitted over the internet.

Another key characteristic of the FVX538 is its advanced firewall capabilities. This unit employs Stateful Packet Inspection (SPI) that scrutinizes incoming and outgoing packets, ensuring that only legitimate traffic is permitted. With customizable access control policies, network administrators can define specific permissions for various users. This feature is crucial for maintaining a secure environment and preventing unauthorized access to sensitive information.

The device also supports multiple WAN (Wide Area Network) connections, allowing for load balancing and failover capabilities. By utilizing two WAN ports, the FVX538 can switch between internet connections seamlessly, ensuring optimal uptime and performance even during network disruptions. Such functionality is essential for businesses that rely on constant connectivity.

Additionally, the FVX538 includes various security features such as Denial of Service (DoS) protection, NAT (Network Address Translation) support, and DHCP (Dynamic Host Configuration Protocol) server functionalities. These features work together to create a secure networking environment while simplifying the management of IP addresses within the network.

The user-friendly web management interface of the FVX538 makes it accessible for network administrators of all skill levels. With comprehensive logging and monitoring capabilities, organizations can keep an eye on network activities, enabling them to react swiftly to any potential threats.

In conclusion, the NETGEAR VPN Firewall 200 FVX538 stands out as a versatile, secure, and efficient solution for businesses looking to enhance their network security and performance. With its combination of VPN capabilities, robust firewall features, and user-friendly management tools, it is a reliable choice for ensuring secure and efficient networking operations.