NETGEAR UTM and Other Next-gen Firewashers

Transcription

1 Unified Gateway Security for Smart IT Networks Without Compromise Redefining the Firewa The NETGEAR ProSECURE UTM S Series is a moduar a-in-one next-gen firewa with an advanced appication firewa and ayers of enterprise-strength security such as anti-virus, antispam, Web fitering, and intrusion prevention (IPS) buit in. This gives business owners and IT admins greater visibiity and contro over their network and protects their businesses from today s appication, Web, emai, and network threats. UTM S Series firewas aso have two moduar sots that aow for optiona interface cards to taior the firewa for specific connectivity requirements. Traditiona firewas can ony bock/accept traffic based on IP addresses and ports. This approach is quicky becoming obsoete in today s Internet where many appications send/receive traffic over ports that are typicay aowed by traditiona firewas. The buit-in appication firewa of the ProSECURE UTM overcomes the imitations of yesterday s firewa and aows the UTM to monitor, contro, and bock hundreds of appications such as Skype, Facebook, BitTorrent, and Yahoo! Messenger; heping enhance empoyee productivity and enforce network usage poicies. The UTM appication firewa combined with an array of advanced network security technoogies form the idea firewa for today s businesses. Advanced Coud-based Virus Protection ProSECURE UTM firewas feature a next-generation coud-based anti-virus engine with dua ayer virus protection. It uses up-to-date information from a goba network of threat anaysis centers aong with the power of coud ook-ups and deivers effective protection against threats for mutipe types of traffic with minima impact on system resources. With over 45 miion signatures in the coud, this virus engine wi aow the UTM to scae with today s exponentiay increasing virus and maware threats. Page 1 of 7

2 Simpe Setup, Ease of Management The ProSECURE UTM wi easiy repace any existing firewa or router. A simpe 10-step setup wizard guides you through instaation and the UTM wi be up and running in minutes. Administration is performed through an intuitive Web-based interface. Set granuar poicies and aerts, check summary statistics and graphica reports, dri down to IP address-eve data, and integrate og data with standard network management toos using SNMP. Maware and IPS signature, software, and firmware updates are a handed by the UTM - onine and automaticay. Expandabiity ProSECURE UTM S Series firewas have two moduar sots that aow for optiona interface cards to be added to taior the appiance for specific instaation requirements. A VDSL/ADSL2+ Modem Modue, avaiabe in both Annex A and Annex B versions, furnishes direct, aways-on Internet connectivity. VDSL capabiity provides Internet connection speeds up to three times faster than traditiona ADSL2+ DSL networks whie providing backwards compatibiity with ADSL2+. In conjunction with two onboard RJ45 WAN ports for redundancy and faiover, the VDSL/ADSL 2+ Modem Modue, if instaed, can be empoyed either as the primary WAN connection or as a third WAN port in a redundant/ oad baancing scenario. A Wireess-N Modue provides access point capabiity to connect Wireess-N cients at both 2.4 GHz and 5.0 GHz frequencies at up to 15x the speed and 10x the coverage of egacy g networks. The buit-in USB port supports quaified 3G/4G USB donges from major ISPs to be used as either a primary or backup WAN connection. ProSECURE UTM Features and Highights Advanced Appication Contro Firewa Monitors and contros up to 1200 appications Granuar per-appication poicies Preserve productivity and save bandwidth Next-gen Coud-based Anti-virus Revoutionary dua ayer coud-based virus protection Scaes with exponentiay growing maware threats with over 45 miion maware signatures Bocks known maware sites Patented Stream Scanning* Data streams are processed as they enter the network Low atency Web traffic scanning Distributed Spam Anaysis Anti-spam Coud-based spam detection Gathers threat data from over 50 miion goba sources New spam is cassified and detected within minutes Distributed Web Anaysis URL Fitering Hybrid in-the-coud architecture Hundreds of miions of categorized URLs Rea-time cassification, 64 categories Per User & Group fitering poicies Virtuay Limitess Logging, Reporting and Quarantine Capabiity Integrate and store ogs on NETGEAR ReadyNAS with UTM app Up to 4.6 GB of og storage space Conduct security forensics and reporting years in arrears SSL & IPsec VPN Remote Access SSL VPN - cientess remote access, anywhere, anytime IPsec VPN - secure site-to-site tunnes and software cient-based remote access SSL VPN - no additiona icenses to purchase IPsec VPN works with NETGEAR VPN Professiona Cient Buit-in Intrusion Prevention Signature based network threat detection Prevents hackers from penetrating the network perimeter Optimized for high throughput Page 2 of 7

3 SIZING GUIDELINES Firewa Throughput¹ 933 Mbps 980 Mbps Appication Firewa Throughput¹ 900 Mbps 905 Mbps Anti-virus Throughput¹ 23 Mbps 30 Mbps IPS Throughput¹ 172 Mbps 240 Mbps UTM Throughput¹ (HTTP Traffic) 18 Mbps 24 Mbps UTM Throughput¹ (non-http Traffic, e.g. P2P, DNS, SSH) 172 Mbps 240 Mbps Maximum VPN Throughput¹ 80 Mbps 90 Mbps Maximum Concurrent Connections¹ 16,000 40, q VLANs CONTENT SECURITY Web and Emai Scanned Protocos HTTP, HTTPS, FTP, SMTP, IMAP, POP3, SMTPS, POP3S, IMAPS Stream Scanning Inbound and Outbound Inspection Signature-Less Zero Hour Protection Maware Signatures 45 Miion 45 Miion Web Content Fiters Web Object Fiters Emai Content Fiters HTTPS Smart Bock, HTML Body Keywords, Fie Extension ActiveX, Java, Fash, JavaScript, Proxy, Cookies Fiter By: Subject Keywords, Password-protected Attachments, Fie Extension, Fie Name Distributed Spam Anaysis Distributed Spam Anaysis Supported Protocos SMTP, POP3, SMTPS. POP3S Anti-spam Rea-time Backist (RBL) User-defined Spam Aowed/Bock Lists Fiter By: Sender Emai Address, Domain, IP Address, Recipient Emai Address, Domain Distributed Web Anaysis w/64 categories Maximum Number of Users Safe Search Enforcement FIREWALL & NETWORKING Statefu Packet Inspection (SPI) Appication Firewa Unimited Googe, Yahoo, Bing Port/Service Bocking, Denia-of-service (DoS) Prevention, Steath Mode, Bock TCP Food, Bock UDP Food, WAN/LAN Ping Response Contro Goba Mode, Poicy Mode, SSL Decryption, Granuar Appication Poicies, Appication Session Monitoring, Appication Dashboard Appications Protected Intrusion Detection & Prevention (IPS) IPS Signatures WAN Modes ISP Address Assignment NAT, Cassica Routing DHCP, Static IP Assignment, PPPoE, PPTP Page 3 of 7

4 FIREWALL & NETWORKING Secondary WAN IP Addresses NAT Modes 1-1 NAT, PAT Routing VoIP DDNS Firewa Functions FIREWALL FEATURES DHCP User Authentication for VPN Security Poicies Based on Active Directory with Singe Sign-On (SSO) PCI Compiance Two Factor Authentication Support VPN Static, Dynamic, RIPv1, RIPv2 SIP ALG DynDNS.org, TZO.com, Oray.net, 3322 DDNS Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Coning/spoofing, Network Time Protoco NTP Support, Diagnostic Toos (ping, DNS ookup, trace route, other), Auto-Upink on Switch Ports, L3 Quaity of Service (QoS),LAN-to-WAN and WAN-to-LAN, VLAN-to-VLAN DHCP Server, DHCP Reay Active Directory, LDAP, Radius, Loca User Database IPSec VPN Tunnes SSL VPN Tunnes 5 14 L2TP, PPTP VPN Tunnes 5 5 IPSec Encryption/Authentication DES, 3DES, AES(128,192,256 bit)/sha-1, MD5 Key Exchange IKE, Manua Key, Pre-Shared Key, PKI, X.500 IPSec NAT Traversa (VPN Passthrough) iphone Native VPN Cient Support Incuded ProSafe VPN Cient Lite Licenses 1 1 SSL Version Support SSL Encryption Support SSL Message Integrity SSLv3, TLS1.0 DES, 3DES, ARC4, AES(128,256 bit) MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1 SSL Certificate Support RSA, Diffie-Heman, Sef (Key Lengths 512-bit, 1024-bit, 2048-bit ) SSL VPN Patforms Supported Windows 2000/XP/Vista (32bit), Windows 7 (32 and 64bit), Mac OS X 10.4.x/10.6.x Page 4 of 7

5 DEPLOYMENT 802.1q VLAN Support Muti-WAN Faiover Inteigent Traffic Load Baancing USB Donge Support for 3G/4G WAN Connections Configuration Wizards Setup, IPsec VPN, SSL VPN Eectronic License LOGGING AND REPORTING Management Reporting Logging Log Deivery HARDWARE HTTP/HTTPS, SNMP v2c Summary Statistics, Graphica Reporting, Automatic Outbreak Aerts, Automatic Maware Notifications, System Notifications Traffic, Maware, Spam, Content Fiter, Emai Fiter, System, Service, IPS, Appication, Port Scan, IM, P2P, Firewa, IPsec VPN, SSL VPN Management GUI Query, Emai Deivery, Sysog Gigabit RJ45 Ports WAN/LAN 2/4 2/4 DMZ Interfaces (Configurabe) 1 1 Fash Memory/RAM 2 GB/512 MB 2 GB/1 GB USB Ports 1 1 Major Reguatory Compiance FCC Part 15 Cass A, CE mark commercia, VCCI, C-Tick Cass A, CE/LVD, cul, RoHS, China RoHS Storage and Operating Temperatures Operating Temperature 0-45 C ( F), Storage Temperature C ( F) Humidity Power Input Rating Operation 90% Maximum Reative, Storage 95% Maximum Reative V, AC/50-60Hz, Universa Input, 1.0 Amp Max Dimensions (W x H x D) cm 33 x 4.3 x x 4.3 x 28.6 Dimensions (W x H x D) in 13 x 1.7 x x 1.7 x Weight kg/b 2.56/ /5.65 Package Contents Hardware Warranty ProSECURE UTM Firewa, Power Cabe, Rubber Feet, Resource CD, Rackmount Kit, Warranty Card, Quick Instaation Guide, Eectronic License (Bundes ony)² Lifetime Page 5 of 7

6 UTM Wireess-N Modue Specifications UTM VDSL/ADSL2+ Modue Specifications (Annex A) UTM VDSL/ADSL2+ Modue Specifications (Annex B) IEEE n, 2.4 GHz and 5.0 GHz, Dua Band Seectabe IEEE a 5.0 GHz IEEE g, IEEE b, 2.4GHz WiFi Protected Access (WPA, WPA2) Wired Equivaent Privacy (WEP) 64, 128, & 256 bit IEEE 802.1x RADIUS authentication with EAP TLS, TTLS, PEAP Detachabe antennas Ordering Part Number: NMWLSN-10000S Annex A/Annex M Support VDSL2 support ADSL 2/ADSL 2+ ADSL over ISDN (ITU G.992.3, ITU Annex G Annex A) ATM Support of ayer 1 protoco AAL5, PVCs, RFC 1483 ATM Support of ATM traffic management (COS - CBR, VBR, UBR) Ordering Part Number: NMVDSLA-10000S Annex B/Annex M Support ADSL/ADSL2+ over ISDN (ITU G Annex B, ISDN - compatibe to U-R2 connection of Deutsche Teekom, G.Lite (ITU G.922.2) VDSL2 support ADSL 2/ADSL 2+ ADSL over ISDN (ITU G.992.3, ITU Annex G Annex B) ATM Support of ayer 1 protoco AAL5, PVCs, RFC 1483 ATM Support of ATM traffic management (COS - CBR, VBR, UBR) Ordering Part Number: NMVSDSLB-10000S Page 6 of 7

7 Ordering Information Hardware (Firewa and VPN Functionaity Ony) North America Europe Asia UTM9S-100NAS UTM9S-100EUS UTM9S-100AJS UTM25S-100NAS UTM25S-100EUS UTM25S-100AJS 1-Year Bunde (Hardware incuding 1-year Web, 1-year Emai, and 1-year Software Upgrades, IPS, App Firewa, 24/7 Support, and Advanced Repacement) North America Europe Asia UTM9SEW-100NAS UTM9SEW-100EUS UTM9SEW-100AJS UTM25SEW-100NAS UTM25SEW-100EUS UTM25SEW-100AJS Optiona Hardware Modues (not incuded with bundes) Wireess-N Modue VDSL/ADSL2+ Modue (Annex A) VDSL/ADSL2+ Modue (Annex B) NMWLSN-10000S NMVDSLA-10000S NMVDSLB-10000S 1-Year Subscriptions Web Threat Management Emai Threat Management Software Maintenance and Upgrades, 24/7 Support, Advanced Repacement Subscription Bunde (Web + Emai + Support & Maintenance) UTM9SW-10000S UTM9SE-10000S UTM9SM-10000S UTM9SB-10000S UTM25SW-10000S UTM25SE-10000S UTM25SM-10000S UTM25SB-10000S *U.S. Patent No. 7,971,254 **Additiona WAN connections avaiabe through the optiona ADSL modue and quaified 3G/4G USB donges. ¹Throughput measured in a ab environment. Actua performance may vary depending on network conditions and activated services. 2 Eectronic Licenses are now used to register UTMs that are purchased as part of a bunde. A icense key wi be assigned to the UTM at the time it is registered with NETGEAR License servers. NETGEAR, the NETGEAR ogo, ProSafe, ProSECURE, and ReadyNAS, are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Other brand names mentioned herein are for identification purposes ony and may be trademarks of their respective hoder(s). Information is subject to change without notice NETGEAR, Inc. A rights reserved. This product comes with a imited warranty, the acceptance of which is a condition of sae. NETGEAR, Inc. 350 E. Pumeria Drive, San Jose, CA USA, NETGEAR ( ), E-mai: info@netgear.com, DS-UTMS Series-3 Page 7 of 7