Netgear ProSafe SSL312 User Manual

202-10208-04 May 2007v2.0NETGEAR, Inc.4500 Great America Parkway Santa Clara, CA 95054 USANETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Man

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manualx About This Manualv2.0, May 2007• Scope. This manual is written for the SSL VPN Concen

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-12 Additional System Configurationv2.0, May 20073. Choose the location to save the co

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-13v2.0, May 2007Erasing the Configuration and Restori

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-14 Additional System Configurationv2.0, May 20071. Download the new firmware from NET

8-1v2.0, May 2007Chapter 8Monitoring and LoggingThis chapter describes the SSL VPN Concentrator status information, logging, alerting and reporting fe

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual8-2 Monitoring and Loggingv2.0, May 2007From the Status page, you may view:• The SSL VP

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualMonitoring and Logging 8-3v2.0, May 2007Active UsersThe Active Users screen displays th

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual8-4 Monitoring and Loggingv2.0, May 2007Event Log The SSL VPN Concentrator provides web

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualMonitoring and Logging 8-5v2.0, May 2007• User name. The User name field shows the auth

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual8-6 Monitoring and Loggingv2.0, May 2007so most standard firewall and networking report

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualMonitoring and Logging 8-7v2.0, May 20073. If you have a backup or second syslog server

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAbout This Manual xiv2.0, May 2007Each page in the HTML version of the manual is dedica

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual8-8 Monitoring and Loggingv2.0, May 2007Log categories are organized from most to least

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualMonitoring and Logging 8-9v2.0, May 2007DiagnosticsBasic network diagnostic tools are a

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual8-10 Monitoring and Loggingv2.0, May 2007

Default Settings and Technical Specifications A-1v2.0, May 2007Appendix ADefault Settings and Technical SpecificationsThis appendix provides the facto

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualA-2 Default Settings and Technical Specificationsv2.0, May 2007Technical Specifications

Related Documents B-1v2.0, May 2007Appendix BRelated DocumentsThis appendix provides links to reference documents you can use to gain a more complete

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualB-2 Related Documentsv2.0, May 2007

Index-1v2.0, May 2007IndexNumerics10.0.0.1Port 2 default 7-3192.168.1.1Port 1 default 7-2AActive Directory 3-2, 3-10, 4-15synchronizing 3-12Windows se

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIndex-2v2.0, May 2007console port A-2crt.zip 2-11CSR 2-9csr.zip 2-10DDate and Time sett

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIndex-3v2.0, May 2007group settingsdefining 2-14GroupsAdd Name 4-8configuring 4-7Domain

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manualxii About This Manualv2.0, May 2007Revision HistoryVersion Date Description of Changes-

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIndex-4v2.0, May 2007Policyservice type 4-6policy hierarchy 4-2Port 1 default login 2-4

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIndex-5v2.0, May 2007UUDP portfor syslog 8-6User Bookmarksadding 4-19editing 4-19User G

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIndex-6v2.0, May 2007

1-1v2.0, May 2007Chapter 1IntroductionThis chapter describes some of the key features of the NETGEAR® ProSafe™ SSL VPN Concentrator 25 SSL312. It also

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual1-2 Introductionv2.0, May 2007• Supports multiple user authentications, including local

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIntroduction 1-3v2.0, May 2007End Users can use Microsoft Internet Explorer 5.1 or high

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual1-4 Introductionv2.0, May 20071. LED Power Indicator:• Off – No power• On – Power is on

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualIntroduction 1-5v2.0, May 2007Steps for Deploying the SSL312Three basic steps are invol

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual1-6 Introductionv2.0, May 2007

2-1v2.0, May 2007Chapter 2Installing the SSL312This chapter describes how to install the ProSafe SSL VPN Concentrator 25 SSL312. The installation incl

iiv2.0, May 2007© 2007 by NETGEAR, Inc. All rights reserved. Technical SupportPlease register to obtain technical support. Please retain your proof of

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-2 Installing the SSL312v2.0, May 2007.Single arm mode has the advantage of being prot

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-3v2.0, May 2007authorized for that user. The user’s subsequent

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-4 Installing the SSL312v2.0, May 20071. Prepare a PC with an Ethernet adapter. If thi

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-5v2.0, May 20072. A certificate security warning may appear. Cl

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-6 Installing the SSL312v2.0, May 2007Configuring Basic Network SettingsBefore deployi

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-7v2.0, May 2007To prepare for installation:1. Change the admini

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-8 Installing the SSL312v2.0, May 2007Installing the SSL VPN ConcentratorYou are now r

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-9v2.0, May 2007strong assurance of the server’s identity. A sel

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-10 Installing the SSL312v2.0, May 20073. Fill out all of the fields with the appropri

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-11v2.0, May 20072. In the Digital Certificate Management sectio

v2.0, May 2007iiiEU Regulatory Compliance StatementProSafe SSL VPN Concentrator 25 is compliant with the following EU Council Directives: 89/336/EEC a

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-12 Installing the SSL312v2.0, May 20074. Click the Enable link adjacent to the new ce

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualInstalling the SSL312 2-13v2.0, May 20075. Enter the Certificate Password and click Ena

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual2-14 Installing the SSL312v2.0, May 2007Steps for Further ConfigurationThe next steps i

3-1v2.0, May 2007Chapter 3Authenticating UsersRemote users connecting to the SSL VPN Concentrator must be authenticated before being allowed to access

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-2 Authenticating Usersv2.0, May 2007 All of the configured domains will be listed in

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-3v2.0, May 20071. In the Domains menu, click Add Domain. An Add

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-4 Authenticating Usersv2.0, May 2007For example, if you create a RADIUS domain in the

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-5v2.0, May 20076. From the Portal Layout Name drop-down menu, se

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-6 Authenticating Usersv2.0, May 20072. In the Domain Name field, enter a descriptive

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-7v2.0, May 2007For an LDAP group, you can define LDAP attributes

v2.0, May 2007ivProduct and Publication DetailsModel Number: SSL312Publication Date: May 2007Product Family: ConcentratorProduct Name: ProSafe SSL VPN

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-8 Authenticating Usersv2.0, May 2007Sample LDAP Users and Attributes SettingsIf you m

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-9v2.0, May 2007Configuring for LDAP AuthenticationTo configure L

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-10 Authenticating Usersv2.0, May 20075. From the Portal Layout Name drop-down menu, s

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-11v2.0, May 20072. From the Authentication Type menu, select Act

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-12 Authenticating Usersv2.0, May 20077. Check the Require CIFS bookmark to home direc

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAuthenticating Users 3-13v2.0, May 20075. Enter the Kerberos domain name in the Kerbero

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual3-14 Authenticating Usersv2.0, May 2007

4-1v2.0, May 2007Chapter 4Setting Up User and Group Access PoliciesThis chapter describes how to define users and groups and how to configure SSL VPN

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-2 Setting Up User and Group Access Policiesv2.0, May 2007• To create complex policies

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-3v2.0, May 2007• An FTP server at 10.0.1.5,

vv2.0, May 2007ContentsAbout This ManualConventions, Formats and Scope ...

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-4 Setting Up User and Group Access Policiesv2.0, May 2007Editing Global Policy Settin

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-5v2.0, May 2007Adding and Editing Global Po

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-6 Setting Up User and Group Access Policiesv2.0, May 20074. From the Service pull-dow

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-7v2.0, May 2007Groups ConfigurationWhen con

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-8 Setting Up User and Group Access Policiesv2.0, May 2007.2. In the Group Name field.

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-9v2.0, May 2007You can set the inactivity t

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-10 Setting Up User and Group Access Policiesv2.0, May 2007addresses. If two policies

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-11v2.0, May 2007• If your policy applies to

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-12 Setting Up User and Group Access Policiesv2.0, May 2007.2. In the Bookmark Name fi

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-13v2.0, May 20072. In the Group Settings wi

viv2.0, May 2007Steps for Further Configuration ...2-14Chapter 3 Aut

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-14 Setting Up User and Group Access Policiesv2.0, May 2007 Adding a New UserTo create

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-15v2.0, May 20074. Click Apply.If the selec

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-16 Setting Up User and Group Access Policiesv2.0, May 2007Editing a UserTo edit a use

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-17v2.0, May 2007.2. To modify the user pass

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-18 Setting Up User and Group Access Policiesv2.0, May 2007Defining and Editing User P

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-19v2.0, May 20076. Click Apply to update th

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-20 Setting Up User and Group Access Policiesv2.0, May 2007Deleting a User To delete a

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-21v2.0, May 20072. Click Add Resource. An A

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-22 Setting Up User and Group Access Policiesv2.0, May 2007.2. From the Object Type pu

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualSetting Up User and Group Access Policies 4-23v2.0, May 2007.To delete a defined resour

viiv2.0, May 2007Editing a User ...4-16Defining

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual4-24 Setting Up User and Group Access Policiesv2.0, May 2007

5-1v2.0, May 2007Chapter 5Configuring the Remote Access Web PortalThis chapter explains how to create multiple Web portals for different users and how

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual5-2 Configuring the Remote Access Web Portalv2.0, May 2007To view the Portal Layout scr

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the Remote Access Web Portal 5-3v2.0, May 2007The configuration of the VPN

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual5-4 Configuring the Remote Access Web Portalv2.0, May 2007:b. In the Portal Site Title

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the Remote Access Web Portal 5-5v2.0, May 2007d. Check the Enable HTTP meta

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual5-6 Configuring the Remote Access Web Portalv2.0, May 20076. Click Apply to confirm you

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the Remote Access Web Portal 5-7v2.0, May 20072. In the Application and Pat

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual5-8 Configuring the Remote Access Web Portalv2.0, May 2007Duplicating and Editing Porta

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the Remote Access Web Portal 5-9v2.0, May 2007To modify the features of an

viiiv2.0, May 2007Erasing the Configuration and Restoring the Default Settings ...7-13Upgrading the SSL VPN Concentrator F

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual5-10 Configuring the Remote Access Web Portalv2.0, May 2007

6-1v2.0, May 2007Chapter 6Configuring the SSL VPN Tunnel Client and PortForwardingThis chapter describes the configuration for the SSL VPN Tunnel Clie

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual6-2 Configuring the SSL VPN Tunnel Client and Port Forwardingv2.0, May 2007• Detects an

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the SSL VPN Tunnel Client and Port Forwarding 6-3v2.0, May 2007– Split tunn

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual6-4 Configuring the SSL VPN Tunnel Client and Port Forwardingv2.0, May 20076. Restart t

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the SSL VPN Tunnel Client and Port Forwarding 6-5v2.0, May 2007If the assig

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual6-6 Configuring the SSL VPN Tunnel Client and Port Forwardingv2.0, May 2007.To delete a

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualConfiguring the SSL VPN Tunnel Client and Port Forwarding 6-7v2.0, May 2007To configure

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual6-8 Configuring the SSL VPN Tunnel Client and Port Forwardingv2.0, May 2007Configuring

7-1v2.0, May 2007Chapter 7Additional System ConfigurationThis chapter describes additional network and configuration management functions provided by

ixv2.0, May 2007About This ManualThe NETGEAR® Prosafe™ SSL VPN Concentrator 25 SSL312 Reference Manual describes how to install and configure the SSL3

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-2 Additional System Configurationv2.0, May 2007• Default gateway address (Firewall/Ro

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-3v2.0, May 20072. Enter the Ethernet Port 1 subnet ma

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-4 Additional System Configurationv2.0, May 20075. Enter the subnet mask. The subnet m

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-5v2.0, May 2007To configure a static route:1. In the

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-6 Additional System Configurationv2.0, May 2007Network Host Table SettingsFor the con

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-7v2.0, May 20073. In the Host Name field, enter the h

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-8 Additional System Configurationv2.0, May 20071. In the Network menu, check the DNS

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-9v2.0, May 2007Setting Date and TimeTo configure the

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual7-10 Additional System Configurationv2.0, May 2007• If you selected Use default NTP ser

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference ManualAdditional System Configuration 7-11v2.0, May 2007Encrypting the Configuration FileFor