To Next Page

To Previous Page

Network Planning for Dual WAN Ports (Multiple WAN Port Models Only)

586

ProSecure Unified Threat Management (UTM) Appliance

VPN Telecommuter: Dual-Gateway WAN Ports for Load Balancing

In a dual WAN port load balancing gateway configuration, the remote PC client initiates the

VPN tunnel with the appropriate gateway WAN port (that is, port WAN1 or WAN2 as

necessary to balance the loads of the two gateway WAN ports) because the IP address of the

remote NAT router is not known in advance. The selected gateway WAN port needs to

function as the responder.

Figure 353.

The IP addresses of the gateway WAN ports can be either fixed or dynamic. If an IP address

is dynamic, you need to use an FQDN. If an IP address is fixed, an FQDN is optional.

Default Chapter2
- Technical Support2
- Revision History3
- Table of Contents5
Chapter 1 Introduction14
- What Is the Prosecure Unified Threat Management (UTM) Appliance14
- Key Features and Capabilities15
- Service Registration Card with License Keys21
- Package Contents23
- Hardware Features23
- Choose a Location for the UTM36
  - Use the Rack-Mounting Kit37
Chapter 2 Using the Setup Wizard to Provision the UTM in Your38
- Steps for Initial Connection38
  - Qualified Web Browsers39
  - Requirements for Entering IP Addresses39
- Log in to the UTM39
Chapter 3 Manually Configuring Internet and WAN Settings65
- Internet and WAN Configuration Tasks65
- Automatically Detecting and Connecting the Internet Connections66
  - Set the Utm's MAC Address70
- Manually Configure the Internet Connection70
- Configure the WAN Mode74
- Configure Secondary WAN Addresses84
- Configure Dynamic DNS85
- Configure Advanced WAN Options89
  - Additional WAN-Related Configuration Tasks91
Chapter 4 LAN Configuration92
- Manage Virtual Lans and DHCP Options92
- Configure Multihome LAN Ips on the Default VLAN103
- Manage Groups and Hosts (LAN Groups)105
- Configure and Enable the DMZ Port111
- Manage Routing115
Chapter 5 Firewall Protection120
- About Firewall Protection120
  - Administrator Tips121
- Use Rules to Block or Allow Specific Kinds of Traffic121
- Configure Other Firewall Features145
- Create Services, Qos Profiles, and Bandwidth Profiles153
- Set a Schedule to Block or Allow Specific Traffic168
- Enable Source MAC Filtering170
- Set up IP/MAC Bindings172
- Configure Port Triggering174
- Configure Universal Plug and Play177
- Use the Intrusion Prevention System178
Chapter 6 Content Filtering and Optimizing Scans183
- About Content Filtering and Scans183
  - Default Email and Web Scan Settings184
- Configure Email Protection185
- Configure Web and Services Protection201
- Configure HTTPS (SSL) Scanning215
  - Manage Digital Certificates for HTTPS Scans218
  - Specify Trusted Hosts223
- Configure FTP Scanning224
- Configure Application Control226
- Set Exception Rules for Web and Application Access234
  - Create Custom Categories for Exceptions for Web and235
  - Create Custom Categories for Exceptions for Web and Application Access243
- Set Scanning Exclusions for IP Addresses and Ports247
Chapter 7 Virtual Private Networking Using Ipsec Connections249
- Considerations for Dual WAN Port Systems249
- (Multiple WAN Port Models Only)249
- Use the Ipsec VPN Wizard for Client and Gateway Configurations251
  - Create Gateway-To-Gateway VPN Tunnels with the Wizard251
  - Create a Client-To-Gateway VPN Tunnel255
- Test the Connection and View Connection and Status Information270
- Manage Ipsec VPN Policies274
  - Manage IKE Policies274
  - Manage VPN Policies282
- Configure Extended Authentication (XAUTH)290
- Assign IP Addresses to Remote Users (Mode Config)294
- Configure Keep-Alives and Dead Peer Detection310
  - Configure Keep-Alives310
  - Configure Dead Peer Detection311
- Configure Netbios Bridging with Ipsec VPN312
- Configure the PPTP Server313
  - View the Active PPTP Users315
- Configure the L2TP Server316
  - View the Active L2TP Users318
Chapter 8 Virtual Private Networking Using SSL Connections319
- SSL VPN Portal Options319
- Use the SSL VPN Wizard for Client Configurations320
- Manually Configure and Edit SSL Connections336
Chapter 9 Managing Users, Authentication, and VPN Certificates356
- Authentication Process and Options356
- Configure Authentication Domains, Groups, and Users358
- Manage Digital Certificates for VPN Connections397
Chapter 10 Network and System Management405
- Performance Management405
- System Management412
- Connect to a Readynas and Configure Quarantine Settings430
Chapter 11 Monitoring System Access and Performance434
- Enable the WAN Traffic Meter434
- Configure Logging, Alerts, and Event Notifications438
- Monitor Real-Time Traffic, Security, and Statistics449
- Monitor Application Use in Real-Time455
- View Status Screens458
- Query the Logs478
- Query the Quarantine Logs485
- View, Schedule, and Generate Reports491
- Use Diagnostics Utilities502
Chapter 12 Troubleshooting and Using Online Support508
- Basic Functioning509
- Troubleshoot the Web Management Interface510
- When You Enter a URL or IP Address, a Time-Out Error Occurs511
- Troubleshoot the ISP Connection511
- Troubleshoot a TCP/IP Network Using a Ping Utility513
  - Test the LAN Path to Your UTM513
  - Test the Path from Your PC to a Remote Device514
- Restore the Default Configuration and Password514
- Problems with Date and Time515
- Use Online Support516
Appendix A Xdsl Module for the UTM9S518
- Xdsl Module Configuration Tasks518
- Configure the Xdsl Settings519
- Automatically Detecting and Connecting the Internet Connection521
  - Set the Utm's MAC Address524
- Manually Configure the Internet Connection524
- Configure the WAN Mode528
- Configure Secondary WAN Addresses537
- Configure Dynamic DNS539
- Configure Advanced WAN Options541
  - Additional WAN-Related Configuration Tasks543
Appendix B Wireless Module for the UTM9S544
- Overview of the Wireless Module544
  - Configuration Order545
  - Wireless Equipment Placement and Range Guidelines545
- Configure the Basic Radio Settings546
  - Operating Frequency (Channel) Guidelines549
- Wireless Data Security Options549
- Wireless Security Profile551
  - Before You Change the SSID, WEP, and WPA Settings552
  - Configure and Enable Wireless Security Profiles553
- Configure the Access Point557
  - Restrict Wireless Access by MAC Address560
  - View the Access Point Status and Connected Clients561
- Configure a Wireless Distribution System563
- Configure Advanced Radio Settings564
- Configure Advanced Profile and WMM Qos Priority Settings566
  - Advanced Profile Settings566
  - WMM Qos Priority Settings568
- Test Basic Wireless Connectivity570
Appendix C Network Planning for Dual WAN Ports571
- (Multiple WAN Port Models Only)571
- What to Consider before You Begin571
- Overview of the Planning Process575
- Inbound Traffic576
  - Inbound Traffic to a Single WAN Port System576
  - Inbound Traffic to a Dual WAN Port System577
- Virtual Private Networks578
Appendix D Readynas Integration587
- Supported Readynas Models587
- Install the UTM Add-On on the Readynas588
- Connect to the Readynas on the UTM590
Appendix E Two-Factor Authentication593
- Why Do I Need Two-Factor Authentication593
  - What Are the Benefits of Two-Factor Authentication593
  - What Is Two-Factor Authentication594
- NETGEAR Two-Factor Authentication Solutions594
Appendix F System Logs and Error Messages597
- System Log Messages598
- Content-Filtering and Security Logs607
- Routing Logs612
Appendix G Default Settings and Technical Specifications614
- Default Settings614
- Physical and Technical Specifications616
Appendix H Notification of Compliance (Wired)620
Appendix I Notification of Compliance (Wireless)625
Index629

NETGEAR UTM5 User Manual

Table of Contents

Questions and Answers:

NETGEAR UTM5 Specifications

Related product manuals

Brand	NETGEAR
Model	UTM5
Category	Firewall
Language	English