Netgear FVS336g гигабитова защитна стена

 DUAL WAN GIGABIT SSL VPN FIREWALL

FVS336G

Supports up to 25 IPsec VPN tunnels and 10 SSL VPN tunnels simultaneously

Supports two broadband connections, in either a load-balancing or fail-over configuration

Backed by a lifetime warranty


Technical Specifications:

Physical Interfaces

* LAN ports: Four (4) 10/100/1000 ––Mbps auto-sensing, Auto Uplink™ RJ-45 ports
* WAN ports: Two (2) 10/100/1000 ––Mbps auto-sensing, Auto Uplink™ RJ-45 ports to connect to any broadband modem, such as DSL or cable
* Load balancing or fail-over modes

SPI firewall

* Stateful packet inspection (SPI):
o prevents denial-of-service (DoS) attacks
o provides stealth mode
o User support: Unrestricted
* Keyword filtering on:
o address
o service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3,SSH, etc.)
o protocol
o Web URL port/service blocking
o file extension (ex. Java, URL, ActiveX)
* Port/service blocking

IPsec VPN functionality

* Twenty-five (25) dedicated IPsec VPN tunnels
* Manual key and Internet Key Exchange Security Association (IKE SA) assignment
o pre-shared key signature
o RSA/DSA signature
* Key life and IKE lifetime time settings
* Perfect forward secrecy
* Diffie-Hellman groups 1 and 2
* Oakley support
* Operating modes
o main
o aggressive
* Fully qualified domain name (FQDN) support for dynamic IP address VPN connections

IPsec support

* IPsec-based 56-bit (DES) 168-bit (3DES), or 256-bit (AES) encryption algorithm
* MD5 or SHA-1 hashing algorithm
* ESP support
* PKI features with X.509 v.3 certificate support
* remote access VPN (client-to-site), site-to-site VPN
* IPsec NAT traversal (VPN pass-through)

SSL VPN Functionality

* Ten (10) dedicated SSL VPN tunnels
* SSL version support: SSLv3 and TLS 1.0
* SSL encryption support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit
* SSL message integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1
* Certificate support:
o RSA
o Diffie-Hellman
o Self

Routing Modes of Operation

* Many-to-one Multi-network Address Translation (NAT)
* Classical routing
* Unrestricted users per port

IP Address Assignment

* Static IP address assignment
* Internal DHCP server on LAN
* DHCP client on WAN
* PPPoE client support

Performance Features

Throughput

* LAN-to-WAN: 60 Mbps total
* IPsec VPN (3DES): 16 Mbps
* SSL VPN: 10 Mbps

Connections

* 10,000 concurrent sessions

Management Features

Administrative Interface

* SNMP (v2c) support
* Web graphic user interface
* Secure Sockets Layer (SSL) remote management
* User name and password protected
* Secure remote management support authenticated through IP address (or IP address range) and password
* Configuration changes/upgrades through Web GUI

Logging:

* SYSLOG
* Email alerts

Functions

* VPN Wizard to simplify configuration of IPsec VPNs
* Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE)
* Port range forwarding
* Port triggering
* Enable/disable WAN ping
* DNS proxy
* MAC address cloning/spoofing
* Network Time Protocol NTP support
* Diagnostic tools (ping, DNS lookup, trace route, other)
* Port/service
* Auto-Uplink on switch ports
* L3 Quality of Service (QoS) LAN-to-WAN and WAN-to-LAN (ToS)

Protocol support

* Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
* IP addressing: DHCP (client and server)
* Routing: RIP v1, RIPv2 (static routing, dynamic routing)
* VPN/security: IPsec (ESP), IKE, PKI, HTTPS

User support

* LAN: Up to 253 users

Maintenance

* Save/restore configuration, restore defaults, upgrades via Web browser, display statistics

Hardware Specifications

* Processor Speed: 300 MHz
* Memory: 16 MB flash, 64 MB DRAM
* Power adapter: 12V DC, 1.2A -plug is localized to country of sale
* Dimensions: 25.4 x 17.8 x 3.96 cm (10 x 7 x 1.56 in)
* Weight: 1.7 kg (3.7 lb)

Environmental Specifications

* Operating temperature: 0° to 40°C (32° to 104°F)
* Operating humidity: 90% maximum relative humidity, non-condensing