FVS336G

FVS336G

Specification

Physical Interfaces

LAN ports: Four (4) 10/100/1000 ––Mbps auto-sensing, Auto Uplink™ RJ-45 ports
WAN ports: Two (2) 10/100/1000 ––Mbps auto-sensing, Auto Uplink™ RJ-45 ports to connect to any broadband modem, such as DSL or cable
Load balancing or fail-over modes

SPI firewall

Stateful packet inspection (SPI):

prevents denial-of-service (DoS) attacks
provides stealth mode
User support: Unrestricted

Keyword filtering on:

address
service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3,SSH, etc.)
protocol
Web URL port/service blocking
file extension (ex. Java, URL, ActiveX)

Port/service blocking
SIP Application Layer Gateway
SIP compatibility list:

Linksys SPA-901
Linksys SPA-941
SNOM M3
Cisco 7940G
X-Lite 3.0 (software for phones)
D-Link DPH-140S
Grandstream GXP-2000
Polycom SoundStation 6000
Siemens C450
Aastra 51i

IPsec VPN functionality

Twenty-five (25) dedicated IPsec VPN tunnels
Manual key and Internet Key Exchange Security Association (IKE SA) assignment

pre-shared key signature
RSA/DSA signature

Key life and IKE lifetime time settings
Perfect forward secrecy
Diffie-Hellman groups 1 and 2
Oakley support
Operating modes

main
aggressive

Fully qualified domain name (FQDN) support for dynamic IP address VPN connections

IPsec support

IPsec-based 56-bit (DES) 168-bit (3DES), or 256-bit (AES) encryption algorithm
MD5 or SHA-1 hashing algorithm
ESP support
PKI features with X.509 v.3 certificate support
remote access VPN (client-to-site), site-to-site VPN
IPsec NAT traversal (VPN pass-through)

SSL VPN Functionality

Ten (10) dedicated SSL VPN tunnels
SSL version support: SSLv3 and TLS 1.0
SSL encryption support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit
SSL message integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1
Certificate support:

RSA
Diffie-Hellman
Self

Routing Modes of Operation

Many-to-one Multi-network Address Translation (NAT)
Classical routing
Unrestricted users per port

IP Address Assignment

Static IP address assignment
Internal DHCP server on LAN
DHCP client on WAN
PPPoE client support

Performance Features
Throughput

LAN-to-WAN: 60 Mbps total
IPsec VPN (3DES): 16 Mbps
SSL VPN: 10 Mbps

Connections

10,000 concurrent sessions

Management Features
Administrative Interface

SNMP (v2c) support
Web graphic user interface
Secure Sockets Layer (SSL) remote management
User name and password protected
Secure remote management support authenticated through IP address (or IP address range) and password
Configuration changes/upgrades through Web GUI

Logging:

SYSLOG
Email alerts

Functions

VPN Wizard to simplify configuration of IPsec VPNs
Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE)
Port range forwarding
Port triggering
Enable/disable WAN ping
DNS proxy
MAC address cloning/spoofing
Network Time Protocol NTP support
Diagnostic tools (ping, DNS lookup, trace route, other)
Port/service
Auto-Uplink on switch ports
L3 Quality of Service (QoS) LAN-to-WAN and WAN-to-LAN (ToS)

Protocol support

Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
IP addressing: DHCP (client and server)
Routing: RIP v1, RIPv2 (static routing, dynamic routing)
VPN/security: IPsec (ESP), IKE, PKI, HTTPS

User support

LAN: Up to 253 users

Maintenance

Save/restore configuration, restore defaults, upgrades via Web browser, display statistics

Hardware Specifications

Processor Speed: 300 MHz
Memory: 16 MB flash, 64 MB DRAM
Power adapter: 12V DC, 1.2A -plug is localized to country of sale
Dimensions: 25.4 x 17.8 x 3.96 cm (10 x 7 x 1.56 in)
Weight: 1.7 kg (3.7 lb)

Environmental Specifications

Operating temperature: 0° to 40°C (32° to 104°F)
Operating humidity: 90% maximum relative humidity, non-condensing

Warranty

Firewall: NETGEAR Lifetime Warranty†
Power supply: NETGEAR 3-year Warranty

Package Contents

ProSafe Dual WAN Gigabit Firewall (FVS336G)
Ethernet cable
Installation guide
Warranty/support information card
Resource CD with single user ProSafe VPN Client Software license