NETGEAR CONFIDENTIAL FVS338 ProSafe VPN Firewall 50

NETGEAR CONFIDENTIAL Main Features RS232 Serial Port with DB-9 connector –Analog Modem support for auto failover capability. SNMP support (optimized for NMS100) – SNMPv2. QoS traffic prioritization. Fast Mbps WAN-LAN and up to 60+ Mbps 3DES throughput. SPI Firewall and multi-NAT. Support 50 VPN tunnels. Includes VPN client software with 1-user license. Future upgradability to SSL VPN, IDS, Anti-virus, anti-spam and anti-spyware security measures.

NETGEAR CONFIDENTIAL ProSafe Firewalls Comparison

NETGEAR CONFIDENTIAL Front Panel

NETGEAR CONFIDENTIAL LEDs

NETGEAR CONFIDENTIAL Rear Panel

NETGEAR CONFIDENTIAL Bottom Label

NETGEAR CONFIDENTIAL GUI

NETGEAR CONFIDENTIAL Username: admin Password: password

NETGEAR CONFIDENTIAL WAN Setup – Broadband ISP Settings

NETGEAR CONFIDENTIAL Setup Wizard

NETGEAR CONFIDENTIAL WAN Status

NETGEAR CONFIDENTIAL WAN Setup – Dialup ISP Settings

NETGEAR CONFIDENTIAL WAN Setup – Dialup ISP Settings Modem properties can only be specified when modem type is user defined.

NETGEAR CONFIDENTIAL WAN Setup – DIAL UP Status

NETGEAR CONFIDENTIAL WAN Setup - Mode

NETGEAR CONFIDENTIAL WAN Setup – Options (Broadband) 28Kbps to 100Mbps

NETGEAR CONFIDENTIAL WAN Setup – Options (Dialup)

NETGEAR CONFIDENTIAL WAN Setup – Dynamic DNS

NETGEAR CONFIDENTIAL WAN Setup – Traffic Meter

NETGEAR CONFIDENTIAL WAN Setup – Traffic Meter Statistic by Protocol

NETGEAR CONFIDENTIAL Security – Groups and Hosts

NETGEAR CONFIDENTIAL Security – Groups and Hosts Add

NETGEAR CONFIDENTIAL Security – Groups and Hosts Edit Group Names

NETGEAR CONFIDENTIAL Security – Source MAC Filter

NETGEAR CONFIDENTIAL Security – Block Sites

NETGEAR CONFIDENTIAL Security – Rules

NETGEAR CONFIDENTIAL Security – Rules – Outbound Services

NETGEAR CONFIDENTIAL Security – Rules – Inbound Services

NETGEAR CONFIDENTIAL Security - Services

NETGEAR CONFIDENTIAL Security - Schedule

NETGEAR CONFIDENTIAL Security – Logs and s

NETGEAR CONFIDENTIAL Security – View Log

NETGEAR CONFIDENTIAL Security – Logs and s When Logs and Syslog are enabled

NETGEAR CONFIDENTIAL VPN – VPN Wizard Box-to-box

NETGEAR CONFIDENTIAL VPN – VPN Wizard Box-to-box Result:

NETGEAR CONFIDENTIAL VPN – VPN Wizard Client-to-box

NETGEAR CONFIDENTIAL VPN – VPN Wizard Client-to-box

NETGEAR CONFIDENTIAL VPN – VPN Status

NETGEAR CONFIDENTIAL VPN – IKE Policies Update current WAN address

NETGEAR CONFIDENTIAL VPN – IKE Policies - Add

NETGEAR CONFIDENTIAL VPN – VPN Policies

NETGEAR CONFIDENTIAL VPN – VPN Policies – Add Auto Policy

NETGEAR CONFIDENTIAL VPN – VPN Policies – Add Manual Policy

NETGEAR CONFIDENTIAL VPN - CAs

NETGEAR CONFIDENTIAL VPN - Certificates

NETGEAR CONFIDENTIAL VPN - CRL

NETGEAR CONFIDENTIAL Maintenance – Router Status

NETGEAR CONFIDENTIAL Maintenance – Router Status Show Statistics

NETGEAR CONFIDENTIAL Maintenance – Set Password

NETGEAR CONFIDENTIAL Maintenance – Remote management

NETGEAR CONFIDENTIAL Maintenance - SNMP

NETGEAR CONFIDENTIAL Maintenance - Diagnostics

NETGEAR CONFIDENTIAL Maintenance – Backup Settings

NETGEAR CONFIDENTIAL Maintenance – Router Upgrade

NETGEAR CONFIDENTIAL Advanced – LAN Setup

NETGEAR CONFIDENTIAL Advanced – LAN Setups Multi-Home LAN IP Setups

NETGEAR CONFIDENTIAL Advanced – DMZ Setups

NETGEAR CONFIDENTIAL Port Triggering Once configured, operation is as follows: 1. A PC makes an outgoing connection using a port number defined in the Port Triggering table. 2. This Router records this connection, opens the INCOMING port or ports associated with this entry in the Port Triggering table, and associates them with the PC. 3. The remote system receives the PCs request, and responds using a different port number. 4. This Router matches the response to the previous request, and forwards the response to the PC. (Without Port Triggering, this response would be treated as a new connection request rather than a response. As such, it would be handled in accordance with the Port Forwarding rules.)

NETGEAR CONFIDENTIAL Port Triggering Note Only 1 PC can use a "Port Triggering" application at any time. After a PC has finished using a "Port Triggering" application, there is a "Time-out" period before the application can be used by another PC. This is required because this Router cannot be sure when the application has terminated. Normally for games and chat.

NETGEAR CONFIDENTIAL Advanced – Port Triggering

NETGEAR CONFIDENTIAL Advanced – Static Routes

NETGEAR CONFIDENTIAL Knowledge Base / Documentation

NETGEAR CONFIDENTIAL Troubleshooting

NETGEAR CONFIDENTIAL FAQ#1 How does the FVS338 support QoS? The FVS338 prioritizes the routing of a packet through the router according to the TOS bit in the packet’s layer3 header. For a particular service, you can override the packet’s specified priority by selecting a different priority in the Services menu, Inbound rules or Outbound Rules. Changing the priority setting will affect the priority given to the packet by the router, but will not actually alter the TOS bits in the packet.

NETGEAR CONFIDENTIAL FAQ#2 My ISP has provided me with a range of public IP addresses. How can I assign them to servers behind the FVS338? When you configure the ISP Settings of your router, assign one IP address as the WAN address to be used by your PCs as the main NAT address for general traffic. In the DMZ Setup menu, you can assign the additional public IP addresses to individual PCs on either your LAN or DMZ (if you have activated port 8 as your DMZ port). To allow inbound traffic to reach one of these PCs, you must create an Inbound Rule for the desired service and set the rule’s Destination Address to the public IP address assigned to that PC.

NETGEAR CONFIDENTIAL FAQ#3 Is the VPN policy created by the VPN Wizard compatible to other Netgear VPN routers? The VPN Wizard will create a compatible configuration with our other products when using fixed IP addresses. When using FQDN, some modifications will be necessary after running the wizard. Please refer to our VPN application notes for detailed information.

NETGEAR CONFIDENTIAL Known Issues Error messages for upgrading with the wrong image are not working. If user gets a message “Document contains no data”, this means that the image upgrade did not take place. Click on “Router Upgrade” menu to recover and try again. Show statistics in Router Status is causing HTTP hang after couple of auto refreshes. No NETBIO support over VPN tunnel until March. Recommend to use WINS server or LMHOSTS file.