NETGEAR UTM9S

To Next Page

350 East Plumeria Drive

San Jose, CA 95134

USA

September 2011

202-10780-01

1.0

ProSecure Unified Threat

Management (UTM)

Appliance

Reference Manual

Main Page

Default Chapter2
- Revision History2
- Technical Support2
- Table of Contents4
Chapter 1 Introduction13
- What Is the Prosecure Unified Threat Management (UTM) Appliance13
- Key Features and Capabilities14
- Service Registration Card with License Keys20
- Package Contents21
- Hardware Features22
- Choose a Location for the UTM35
  - Use the Rack-Mounting Kit36
Chapter 2 Using the Setup Wizard to Provision the UTM in Your37
- Steps for Initial Connection37
  - Qualified Web Browsers38
  - Requirements for Entering IP Addresses38
- Log in to the UTM38
  - Web Management Interface Menu Layout40
- Use the Setup Wizard to Perform the Initial Configuration42
- Verify Correct Installation61
  - Test Connectivity62
  - Test HTTP Scanning62
- Register the UTM with NETGEAR62
  - Electronic Licensing64
- What to Do Next64
Chapter 3 Manually Configuring Internet and WAN Settings66
- Internet and WAN Configuration Tasks67
- Automatically Detecting and Connecting the Internet Connections67
  - Set the Utm's MAC Address71
- Manually Configure the Internet Connection71
- Configure the WAN Mode75
- Configure Secondary WAN Addresses85
- Configure Dynamic DNS87
- Configure Advanced WAN Options90
  - Additional WAN-Related Configuration Tasks92
Chapter 4 LAN Configuration93
- Manage Virtual Lans and DHCP Options93
- Configure Multihome LAN Ips on the Default VLAN104
- Manage Groups and Hosts (LAN Groups)106
- Configure and Enable the DMZ Port112
- Manage Routing115
Chapter 5 Firewall Protection121
- About Firewall Protection121
  - Administrator Tips122
- Use Rules to Block or Allow Specific Kinds of Traffic122
- Configure Other Firewall Features144
- Create Services, Qos Profiles, and Bandwidth Profiles152
- Set a Schedule to Block or Allow Specific Traffic163
- Enable Source MAC Filtering164
- Set up IP/MAC Bindings166
- Configure Port Triggering168
- Configure Universal Plug and Play171
- Use the Intrusion Prevention System172
Chapter 6 Content Filtering and Optimizing Scans175
- About Content Filtering and Scans175
  - Default Email and Web Scan Settings176
- Configure Email Protection178
- Configure Web and Services Protection194
- Set Web Access Exception Rules221
  - Create Custom Groups for Web Access Exceptions228
  - Create Custom Categories for Web Access Exceptions231
- Set Scanning Exclusions235
Chapter 7 Virtual Private Networking Using Ipsec Connections237
- Considerations for Dual WAN Port Systems (Multiple WAN Port Models Only)237
- Use the Ipsec VPN Wizard for Client and Gateway Configurations239
  - Create Gateway-To-Gateway VPN Tunnels with the Wizard239
  - Create a Client-To-Gateway VPN Tunnel243
- Test the Connection and View Connection and Status Information258
- Manage Ipsec VPN Policies262
  - Manage IKE Policies262
  - Manage VPN Policies269
- Configure Extended Authentication (XAUTH)277
- Assign IP Addresses to Remote Users (Mode Config)281
- Configure Keep-Alives and Dead Peer Detection297
  - Configure Keep-Alives297
  - Configure Dead Peer Detection298
- Configure Netbios Bridging with Ipsec VPN299
- Configure the PPTP Server (UTM9S Only)300
  - View the Active PPTP Users302
- Configure the L2TP Server (UTM9S Only)303
  - View the Active L2TP Users304
Chapter 8 Virtual Private Networking Using SSL Connections306
- SSL VPN Portal Options306
- Use the SSL VPN Wizard for Client Configurations307
- Manually Configure and Edit SSL Connections323
Chapter 9 Managing Users, Authentication, and VPN Certificates343
- Authentication Process and Options343
- Configure Authentication Domains, Groups, and Users345
- Manage Digital Certificates for VPN Connections381
Chapter 10 Network and System Management389
- Performance Management389
- System Management397
- Connect to a Readynas and Configure Quarantine Settings (UTM9S Only)414
Chapter 11 Monitoring System Access and Performance418
- Enable the WAN Traffic Meter419
- Configure Logging, Alerts, and Event Notifications422
- Monitor Real-Time Traffic, Security, and Statistics433
- View Status Screens439
- Query the Logs460
- Query the Quarantine Logs (UTM9S Only)467
- View, Schedule, and Generate Reports473
- Use Diagnostics Utilities482
Chapter 12 Troubleshooting and Using Online Support491
- Basic Functioning492
- Troubleshoot the Web Management Interface493
- When You Enter a URL or IP Address, a Time-Out Error Occurs494
- Troubleshoot the ISP Connection494
- Troubleshoot a TCP/IP Network Using a Ping Utility496
  - Test the LAN Path to Your UTM496
  - Test the Path from Your PC to a Remote Device497
- Restore the Default Configuration and Password498
- Problems with Date and Time499
- Use Online Support499
Appendix A Xdsl Module for the UTM9S502
- Xdsl Module Configuration Tasks502
- Configure the Xdsl Settings503
- Automatically Detecting and Connecting the Internet Connection505
  - Set the Utm's MAC Address508
- Manually Configure the Internet Connection508
- Configure the WAN Mode512
- Configure Secondary WAN Addresses521
- Configure Dynamic DNS523
- Configure Advanced WAN Options526
  - Additional WAN-Related Configuration Tasks528
Appendix B Wireless Module for the UTM9S529
- Overview of the Wireless Module529
  - Configuration Order530
  - Wireless Equipment Placement and Range Guidelines530
- Configure the Basic Radio Settings531
  - Operating Frequency (Channel) Guidelines534
- Wireless Data Security Options534
- Wireless Security Profile536
  - Before You Change the SSID, WEP, and WPA Settings537
  - Configure and Enable Wireless Security Profiles538
- Configure the Access Point542
  - Restrict Wireless Access by MAC Address545
  - View the Access Point Status and Connected Clients546
- Configure a Wireless Distribution System548
- Configure Advanced Radio Settings549
- Configure Advanced Profile and WMM Qos Priority Settings551
  - Advanced Profile Settings551
  - WMM Qos Priority Settings553
- Test Basic Wireless Connectivity554
Appendix C Network Planning for Dual WAN Ports556
- (Multiple WAN Port Models Only)556
- What to Consider before You Begin556
- Overview of the Planning Process560
- Inbound Traffic561
  - Inbound Traffic to a Single WAN Port System562
  - Inbound Traffic to a Dual WAN Port System562
- Virtual Private Networks563
Appendix D Readynas Integration572
- Supported Readynas Models572
- Install the UTM9S Add-On on the Readynas573
- Connect to the Readynas on the UTM9S575
Appendix E Two-Factor Authentication578
- Why Do I Need Two-Factor Authentication578
  - What Are the Benefits of Two-Factor Authentication578
  - What Is Two-Factor Authentication579
- NETGEAR Two-Factor Authentication Solutions579
Appendix F System Logs and Error Messages582
- System Log Messages583
- Content-Filtering and Security Logs592
- Routing Logs597
Appendix G Default Settings and Technical Specifications599
- Default Settings599
- Physical and Technical Specifications601
Appendix H Notification of Compliance (Wired)605
Appendix I Notification of Compliance (Wireless)609
- Regulatory Compliance Information609
- Fcc Declaration of Conformity611
- Industry Canada612
Index614

Table of Contents

Other manuals for NETGEAR UTM9S

Related product manuals