NETGEAR FVS328 ProSafe VPN Firewall Router Specifications And Datasheet

Contents hide

1 NETGEAR FVS328 ProSafe VPN Firewall Router

2 Introduction

3 Surefire

4 Business-Class Secure

5 Thoroughly Protected

6 Easy to Use

7 Flexible & Durable

8 Typical Network Setup

9 Technical Specifications

NETGEAR FVS328 ProSafe VPN Firewall Router

Introduction

50 VPN Tunnels for Encrypted Remote Access
NETGEAR’s ProSafe™ VPN Firewall with Dial Back-up is a low-cost, high-performance network solution that furnishes multidimensional security. Fully equipped and broadband-capable, this Virtual Private Network (VPN) firewall comes with connection insurance: a built-in serial port for dial-up access. This practical feature means your business can maintain operation if your broadband Internet connection fails. It lets you retain an analog or ISDN modem for emergency backup and also provides a migration path from analog and ISDN to broadband, making the transition effortless.

High on security, this true firewall provides Denial of Service (DoS) protection and Intrusion Detection using Stateful Packet Inspection (SPI), URL access and content filtering, logging, reporting, and real-time alerts. It supports up to 50 IPSec VPN tunnels simultaneously using Public Key Infrastructure (PKI), reducing your operating costs and improving the security of your network. With 8 auto-sensing, Auto Uplink™ switched LAN ports, and Network Address Translation (NAT) routing, up to 253 users can access your broadband connection at the same time.

Surefire

The built-in serial port provides a backup connection for an external ISDN or analog modem – no downtime if your broadband connection fails. Alternatively, the serial port can provide a dial-in or LAN-to-LAN function.

Business-Class Secure

Supports up to 50 IPSec VPN tunnels simultaneously, allowing for secured connections to branch offices and your “on-the-go” mobile workforce. Network Address Translation (NAT) routing enables shared access to your broadband connection. Additionally, in NAT-off mode, classical routing allows for customized network configuration. Includes Web page URL keyword filtering, 168-bit 3DES IPSec encryption capability, and secure Public Key Infrastructure (PKI) support. Sends you e-mail notifications of network activity – reporting and tracking of hacker attempts – as well as real-time alerts. A high-powered 150 MHz CPU ensures speedy data traffic and VPN throughput.

Thoroughly Protected

Takes care of all your security needs, with True Firewall using Stateful Packet Inspection (SPI), Denial of Service (DoS) attack protection, and VPN pass-through for extra security. SYSLOG and reporting enable thorough network monitoring. IKE authentication provides peace of mind against unauthorized VPN network access. The ProSafe VPN Firewall with Dial backup provides optimal value and defense against network security threats.

Easy to Use

Smart Wizard connects to your ISP quickly; the user-friendly Web-based configuration screen and install assistant reduce setup time. Secure remote administration via Secure Socket Layer (SSL) makes it simple to connect to multiple sites. This well-built firewall has an integrated 8-port 10/100 Mbps switch and is compatible with Windows®, UNIX®, Macintosh®, and Linux® O/S. It comes with an Ethernet cable (up to $15 in value), and Auto Uplink™ on the LAN ports eliminates the need for crossover cables.

Flexible & Durable

Make a VPN connection to other VPN devices or connect through NETGEAR’s ProSafe VPN Client software, sold separately in single and five-user licenses- supports popular Microsoft® Windows® platforms and is easy to configure, cost-effective and provides broad security support. Support for DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. The rugged metal unit houses advanced, high-quality electronics, and NETGEAR’s tested and proven technology is backed by a 3-year warranty.

Typical Network Setup

Technical Specifications

Physical Interfaces:

LAN ports: Eight (8) 10/100 Mbps auto-sensing, Auto Uplink™ RJ-45 ports (one Cat 5 UTP cable included)

WAN ports:

10/100BASE-T Ethernet RJ-45 port to connect to any broadband modem, such as DSL or cable

RS-232 serial port with DB-9 connector for an external analog or ISDN modem

Security Features:

Firewall: Stateful Packet Inspection (SPI) to prevent notorious Denial of Service (DoS) attacks, Intrusion Detection System (IDS) including logging, reporting and e-mail alerts, Web URL keyword filtering
VPN Functionality: Fifty (50) dedicated VPN tunnels, Manual key and Internet Key Exchange (IKE) Security Association (SA) assignment with pre-shared key and RSA/DSA signatures, key life and IKE lifetime time settings, perfect forward secrecy (Diffie- Hellman groups 1 and 2 and Oakley support), operating modes (Main, Aggressive, Quick)

Mode of Operation: Network Address Translation (NAT), static routing, unrestricted users per port, NAT-off classical routing
IP Address Assignment: Static IP address assignment, internal DHCP server on LAN, DHCP client on WAN, PPPoE client support

Performance Features:

Throughput: 50+ Mbps WAN-to-LAN throughput, 20 Mbps 3DES (168 bit) VPN tunnel

Management Features:

Administration Interface: Web graphic user interface, user name and password protected; Smart Wizard and Auto Detect for basic parameter settings; remote management support authenticated through IP address or IP address range, and password

Configuration and Upgrades: Upload and download configuration settings, firmware upgradeable flash memory, and DRAM
Logging: SYSLOG, e-mail alerts

Protocol Support:
Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
IP addressing: DHCP (client and server)

Routing: RIP v1, RIP v2 (Static Routing, Dynamic Routing)
VPN/Security: IPSec (ESP, AH), MD5, SHA-1, DES, 3DES, IKE, PKI

User Support:
LAN: Up to 253 users

Modem Support:

Most popular broadband, ISDN and analog modems. See the technical support section at www.netgear.com for compatible ISDN and analog modems.

RFC Support:

PPTP client and server (RFC 2637)
IPSec tunnel mode (RFC 2401)
Authentication Header Protocol (RFC 2402)
HMAC-MD5-96 (RFC 2403)
HMAC-SHA1-96 (RFC 2404)
DES-CBC Cipher algorithm (RFC 2405)
Encapsulation Security
Payload Protocol (RFC 2406)
Domain of Interpretation (RFC 2407)
Internet Security Association and Key
Management Protocol (ISAKMP) (RFC 2408)
Oakley (RFC 2412)
DHCP server (RFC 2131)
DHCP client (RFC 2131)

IP routing (RIP1, RIP2) (RFC 2453)
NAT (many-to-one) (RFC 1631)
Compression Control Protocol (RFC 1974)

IP Control Protocol (RFC 1332)
PPPoE (RFC 2516)

Functions:

Smart Wizard to automatically detect ISP Address type (static, dynamic, PPPoE)
Port Range Forwarding
Exposed Host (DMZ)

Enable/Disable WAN Ping
DNS Proxy
MAC Address Cloning/Spoofing

NTP support
PPPoE login client support
Telstra BigPond cable login support

Diagnostic tools (ping, traceroute, other)
Port/Service blocking

Maintenance:

Save/Restore Configuration
Restore Defaults,
Upgrades via Web Browser

Display Statistics

Hardware Specifications:

Processor: 150 MHz MIPS32

Memory: 2Mb Flash, 16 Mb DRAM
Power adapter: 12VDC, 1.2A Plug is localized to country of sale in North America, Australia, Europe, United Kingdo
Dimensions: 25.4 x 17.8 x 3.96 cm (10 x 7 x 1.56 in.)

Weight: 1.23 kg (2.7 lb.)
Environmental Specifications:
Operating temperature: 0 to 40°C

Operating humidity: 90% maximum relative humidity, non-condensing

Package Contents

FVS328 ProSafe VPN Firewall with Dial Back-up
Power adapter

10ft Ethernet cable
Installation guide
Warranty/Support Information card

Support

Address: 4500 Great America Parkway Santa Clara, CA 95054 USA
Phone: 1-888-NETGEAR

E-mail: info@NETGEAR.com
Website: www.NETGEAR.com

Trademarks

©2004 NETGEAR, Inc. NETGEAR®, the Netgear Logo, the Gear Guy, Auto Uplink, ProSafe, and Everybody’s Connecting are trademarks or registered trademarks of Netgear, Inc. in the United States and/or other countries. Microsoft, Windows, Windows Media, and the Windows logo are trademarks, or registered trademarks of Microsoft Corporation in the United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice. All rights reserved.

Free basic installation support is provided for 90 days from the date of purchase: optional premium support is available.

FAQ’s

What is the main purpose of the NETGEAR FVS328 VPN Firewall Router?

The FVS328 is made to allow site-to-site communication and secure network connectivity while supporting VPN for remote access.

How many VPN tunnels can this router support?

Up to 50 IPSec VPN tunnels can be supported by the router, enabling secure communication between numerous sites or distant users.

What type of firewall does the FVS328 router use?

A Stateful Packet Inspection (SPI) firewall built into the router keeps track of and controls incoming and outgoing network traffic depending on the status of active connections.

Can I set up content filtering and URL blocking with this router?

Yes, you can limit access to specific websites and content categories with the router's content filtering and URL blocking functions.

What are the supported VPN protocols for remote access?

The router offers versatility for various VPN client configurations by supporting the IPSec, PPTP, and L2TP VPN protocols.

Is the FVS328 suitable for small businesses with multiple branch locations?

Yes, the FVS328 is built with VPN capability and numerous LAN ports to be suited for small to medium-sized organizations.

Can I manage this router remotely?

Yes, the router has a web-based management interface that enables remote configuration and management of the router's settings.

Does the router provide protection against common cyber threats?

Yes, the FVS328 has characteristics to protect against many cyber threats, including Denial of Service (DoS) defense, Intrusion Detection System (IDS), and Intrusion Prevention System (IPS).

Can I prioritize certain types of network traffic using Quality of Service (QoS)?

Yes, the router has Quality of Service (QoS) capabilities that let you give particular network traffic higher priority in order to guarantee the best possible performance for crucial applications.

What type of support does the router provide for dynamic IP addresses?

The router has a DHCP server that may give devices on your network changeable IP addresses.

Is the router compatible with third-party VPN clients?

Yes, a number of third-party VPN clients that support IPSec, PPTP, or L2TP are compatible with the router's VPN capabilities.

Does the router support SNMP for network monitoring?

The Simple Network Management Protocol (SNMP), which enables network management and monitoring, is supported by the FVS328.

References: NETGEAR FVS328 ProSafe VPN Firewall Router – Device.report

References

User Manual