NETGEAR FVS114 ProSafe VPN Firewall User Manual

NETGEAR FVS114 ProSafe VPN Firewall

Help is there when you need it!NETGEAR provides 24×7 technical support* in English, with selected local language support during office hours.

Powerful Security, With 8 IPSec VPN Tunnels for Secure Remote Access
Want strong security at a small price? NETGEAR’s ProSafe VPN Firewall 8 FVS114 provides business-class protection. Stateful Packet Inspection (SPI) stops major Denial of Service (DoS) attacks. Intrusion Detection alerts you to hackers and attacks. Up to 8 simultaneous Virtual Private Network (VPN) connections protect links between business locations, encrypting all traffic as it traverses the Internet—perfect for telecommuters and remote offices. With 4 10/100 Mbps auto-sensing, Auto Uplink™ switched LAN ports, and Network Address Translation (NAT) routing, up to 253 users can access your broadband connection at the same time.

Trusted Security

More than just a NAT router, the ProSafe VPN Firewall 8 FVS114 provides a true SPI firewall, protecting you from DoS attacks such as Ping of Death, SYN Flood, Land Attacks, IP Spoofing, tear drop, and many more. Up to 8 IPSec VPN connections can be initiated automatically—perfect for connecting telecommuters and road warriors into the home office. DES, 3DES, or 256-bit AES encryption secures remote access and keyword content filtering allows you to control Web access and block unacceptable sites. Logging, reporting, and real-time notification alert you to problems or attacks.

Full Feature Set
As a part of a family of business-class firewalls, the ProSafe FVS114 is a complete SMB solution. Four integrated 10/100 Mbps LAN ports offer LAN connectivity to PCs and servers, or to Fast Ethernet switches and wireless access points. 10/100 Mbps WAN port is ready for new, higher-speed broadband capabilities. It even comes with an Ethernet cable (up to $10 value).

Superior Value and Usability
Smart Wizard™ connects to your ISP quickly, and the easy-to-use Web-based configuration screen and Install Assistant reduces setup time. The VPN Wizard capability makes setting up secure, remote connections a breeze. The ProSafe FVS114 is VPNC compliant and is compatible with all major VPNC certified devices, including those from Cisco®, Juniper®/Netscreen, and Checkpoint®, and supports standards-based IPSec VPN Client software including NETGEAR’s ProSafe VPN Client Software (VPN01L/05L) and Safenet VPN clients. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. Auto Uplink™ on the LAN ports eliminates the need for crossover cables. Compatible with Windows®, Macintosh®, UNIX®, and Linux®, or any other TCP/IP based platforms.

Physical Interfaces

LAN ports
Four (4) 10/100 Mbps auto-sensing, Auto Uplink™, RJ-45 ports.

WAN port
10/100BASE-T Ethernet RJ-45 port to connect to any broadband modem, such as DSL or cable.

Security Features

• SPI Firewall : Stateful Packet Inspection (SPI) to prevent notorious Denial of Service (DoS) attacks, Intrusion Detection System (IDS) including logging, reporting and e-mail alerts, address, service and proto-col, Web URL keyword filtering, prevent replay attack (reassembly attack), port/service blocking. Advanced features include block Java/URL/ActiveX based on extension, FTP/SMTP/RPC program filtering

• VPN Functionality : Eight (8) dedicated VPN tunnels, Manual key and Internet Key Exchange Security Association (IKE SA) assignment with pre-shared key and RSA/DSA signatures, key life and IKE lifetime time settings, perfect forward secrecy (Diffie-Hellman groups 1 and 2 and Oakley support), operating modes (Main, Aggressive, Quick), fully qualified domain name (FQDN) support for dynamic IP address
  VPN connections.

• IPSec Support: IPSec-based 56-bit (DES), 168-bit (3DES), or 256-bit (AES) encryption algorithm, MD5 or SHA-1 hashing algorithm, AH/AH-ESP support, PKI features with X.509 v.3 certificate support, remote access VPN (client-to-site), site-to-site VPN, IPSec NAT traversal (VPN pass-through)

• Mode of Operation: One-to-one/many-to-one Multi-Network Address Translation (NAT), classical routing, unrestricted users per port

• IP Address Assignment: Static IP address assignment, internal DHCP server on LAN, DHCP client on WAN, PPPoE client support

• Performance Features

• Throughput: Up to 11.5 Mbps WAN-to-LAN, up to 2.1 Mbps for 3DES throughput

• Management Features

• Administration Interface: Web graphic user interface, Secure Sockets Layer (SSL) remote management, user name and password protected; secure remote manage-ment support authenticated through IP address or IP address range and password; configuration changes/upgrades through web GUI.

• Configuration and Upgrades : Upload and download configuration settings, firmware upgradeable flash memory

• Logging : SYSLOG, e-mail alerts

Functions

VPN Wizard to simplify the configuration of the VPN, Smart Wizard to automatically detect ISP Address type (static, dynamic, PPPoE), Port Range Forwarding, Port Triggering, Exposed Host (DMZ), Enable/Disable WAN Ping, DNS Proxy, MAC Address cloning/spoof-ing, Network Time Protocol NTP support, Keyword Content Filtering, email Alerts, DHCP Server (Info and dis-play table), PPPoE login client support, WAN DHCP Client, Diagnostic tools (ping, trace route, other), Port/service, Auto-Uplink on switch ports

Protocol Support

• Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
• IP Addressing: DHCP (client and server)
• Routing: RIP v1, RIPv2 (Static Routing, Dynamic Routing)
• VPN/Security: IPSec (ESP, AH), MD5, SHA-1, DES, 3DES, IKE, PKI, AES

User Support

• LAN: Up to 253 users

Maintenance

• Save/Restore Configuration, Restore Defaults, Upgrades via Web Browser, Display Statistics, Logging, SYSLOG support.

Hardware Specifications

• Processor: 200 Mhz 32-bit RISC
• Memory: 2MB Flash, 16MB SDRAM
• Power requirements: 100-240VAC, 50-60Hz
• Power adapter: 12V DC, 1.0A Plug is localized to the country of sale
• Dimensions: 5.54 x 3.92 x 1.05 in (14.06 x 9.95 x 2.66 cm)
• Weight: .81 lb (368 kg)

Environmental Specifications

• Operating temperature: 0 to 40°C (32 to 104ºF)
• Operating humidity: 90% maximum relative humidity, non-condensing

Warranty

• NETGEAR 3-year warranty

System Requirements

• Cable, DSL, Satellite or Wireless Broadband modem and Internet service
• Ethernet connectivity from a Broadband modem
• Network card for each connected PC
• Network Software (e.g. Windows)
• Internet Explorer 5.0 or higher or Netscape Navigator 7.2 or higher

Package Contents

• FVS114 ProSafe VPN Firewall 8
• Ethernet cable
• Installation guide
• Resource CD
• Warranty/Support information card

NETGEAR Related Products

• Accessories:
  • VPN01L and VPN05L ProSafe VPN Client Software
• VPN Firewalls:
  • FVS318 ProSafe VPN Firewall 8
  • FVS124G ProSafe Gigabit VPN Firewall 25
• Wireless:
  • WG102 ProSafe 802.11g Access Point
  • FWG114P ProSafe 802.11g Wireless Firewall with USB Print Server
• Switches:
  • FS750T2 ProSafe 48+2 10/100 Smart Switch
  • FS726T ProSafe 24+2 10/100 Smart Switch
  • FS726TP ProSafe 24+2 10/100 Smart Switch w/12 PoE

4500 Great America Parkway Santa Clara, CA 95054 USA Phone: 1-888-NETGEAR
E-mail: info@NETGEAR.com www.NETGEAR.com

©2006 NETGEAR, Inc. NETGEAR, the NETGEAR logo, Connect with Innovation, Everybody’s connecting, the Gear Guy logo, IntelliFi, ProSafe, RangeMax, and Smart Wizard are trademarks or registered trademarks of NETGEAR, Inc. in the United States and/or other countries. Microsoft and Windows are trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice. All rights reserved.

Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials, and construction,
and network overhead, lower actual data throughput rate.

This product has been tested for quality assurance and this product or its components may have been recycled.

Free basic installation support is provided for 90 days from the date of purchase. Advanced product features and configurations are not included in free basic installation support; optional premium support is available.
D-FVS114-01

Frequently Asked Questions

What is the NETGEAR FVS114 ProSafe VPN Firewall?

The NETGEAR FVS114 ProSafe VPN Firewall is a network security device designed to provide firewall protection and Virtual Private Network (VPN) capabilities for small to medium-sized businesses or home offices.

What features does the FVS114 ProSafe VPN Firewall offer?

The FVS114 offers features such as Stateful Packet Inspection (SPI), Denial- of-Service (DoS) protection, VPN pass-through, IPsec VPN support, NAT traversal, web content filtering, and a built-in 4-port Ethernet switch.

How does the FVS114 Firewall enhance security?

The FVS114 Firewall provides a Stateful Packet Inspection, which examines the characteristics of network packets to determine if they are legitimate or potentially harmful. It also includes DoS protection to prevent network attacks and unauthorized access.

Can the FVS114 Firewall be used for VPN connections?

Yes, the FVS114 supports IPsec VPN connections, allowing remote users to securely access the network. It offers VPN pass-through capabilities, allowing VPN traffic to pass through the firewall without interference.

How many VPN tunnels does the FVS114 Firewall support?

The FVS114 Firewall supports up to 8 simultaneous IPsec VPN tunnels, which can be used to establish secure connections between remote locations or remote users.

Does the FVS114 Firewall support web content filtering?

Yes, the FVS114 includes web content filtering capabilities. It allows you to restrict access to certain websites or content categories, helping to enforce your organization's internet usage policies.

What is NAT traversal, and does the FVS114 support it?

NAT traversal (Network Address Translation traversal) is a technique that allows VPN traffic to pass through NAT devices like routers or firewalls. The FVS114 Firewall supports NAT traversal, ensuring seamless VPN connectivity even when behind NAT devices.

Can the FVS114 Firewall be managed remotely?

Yes, the FVS114 supports remote management. You can configure and manage the firewall settings using a web-based interface accessible from a remote location.

Is the FVS114 Firewall easy to set up?

The FVS114 Firewall features an intuitive web-based interface that simplifies the setup process. It also includes a setup wizard to guide you through the initial configuration steps, making it relatively easy to set up for most users.

What are some typical use cases for the FVS114 Firewall?

The FVS114 Firewall is suitable for small to medium-sized businesses or home offices that require network security and VPN connectivity. It can be used to protect the network from unauthorized access, secure remote connections, and control internet access through web content filtering.

Download this PDF Link:NETGEAR-FVS114-ProSafe-VPN- Firewall

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>