Netgear FVS338 User Manual

March 2008202-10046-06 v1.0NETGEAR, Inc.4500 Great America Parkway Santa Clara, CA 95054 USAFVS338 ProSafe VPN Firewall 50 Reference Manual

x Contentsv1.0, March 2008Configuring the ProSafe VPN Client for ModeConfig ...5-30Certificates ...

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-6 Virtual Private Networkingv1.0, March 2008In addition, a CA (Certificate Authority) can also be us

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-7v1.0, March 2008– Reconnect after failure count: Fresh negotiation start

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-8 Virtual Private Networkingv1.0, March 2008Creating a VPN Gateway Connection: Between FVS338 and FV

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-9v1.0, March 2008The IKE Policies screen will display showing the new “to

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-10 Virtual Private Networkingv1.0, March 2008Click the IKE Policies tab to view the corresponding IK

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-11v1.0, March 2008Configuring the FVX538To configure the FVX538 using the

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-12 Virtual Private Networkingv1.0, March 20086. Enter the remote LAN IP address and subnet mask. 7.

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-13v1.0, March 2008Using the FVS338 VPN Wizard, we will create a single se

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-14 Virtual Private Networkingv1.0, March 2008Configuring the VPN ClientOn a remote PC that has a NET

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-15v1.0, March 2008To configure the VPN Client:1. Right-click on the VPN c

Contents xiv1.0, March 2008Performing Diagnostics ...6-26Chapte

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-16 Virtual Private Networkingv1.0, March 20088. In the left frame, click on My Identity (shown in Fi

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-17v1.0, March 200812. Before leaving the My Identity menu, click Pre-Shar

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-18 Virtual Private Networkingv1.0, March 200814. In the left frame, click Security Policy (shown in

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-19v1.0, March 200818. In the left frame, expand Key Exchange (Phase 2) an

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-20 Virtual Private Networkingv1.0, March 2008Extended Authentication (XAUTH) ConfigurationWhen conne

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-21v1.0, March 2008.Configuring XAUTH for VPN ClientsOnce the XAUTH has be

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-22 Virtual Private Networkingv1.0, March 2008• IPSec Host if you want to be authenticated by the rem

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-23v1.0, March 20083. Enter a Password for the user, and reenter the passw

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-24 Virtual Private Networkingv1.0, March 2008information such as a username/password or some encrypt

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-25v1.0, March 2008Manually Assigning IP Addresses to Remote Users (ModeCo

xii Contentsv1.0, March 2008Routing Logs ...

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-26 Virtual Private Networkingv1.0, March 2008ModeConfig OperationAfter IKE Phase 1 is complete, the

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-27v1.0, March 20089. Specify the VPN policy settings. These settings must

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-28 Virtual Private Networkingv1.0, March 20082. Click Add to configure a new IKE Policy. The Add IKE

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-29v1.0, March 20089. If Edge Device was enabled, select the Authenticatio

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-30 Virtual Private Networkingv1.0, March 2008Configuring the ProSafe VPN Client for ModeConfigFrom a

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-31v1.0, March 2008b. From the Select Certificate pull-down menu, select N

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-32 Virtual Private Networkingv1.0, March 2008 5. Click on Key Exchange (Phase 2) on the left-side of

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-33v1.0, March 2008To test the connection:1. Right-click on the VPN client

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-34 Virtual Private Networkingv1.0, March 20082. Click Browse to locate the trusted certificate on yo

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-35v1.0, March 2008• Name – Enter a name that will identify this Certifica

xiiiv1.0, March 2008About This ManualThe NETGEAR® ProSafe™ VPN Firewall 50 FVS338 Reference Manual describes how to install, configure and troublesho

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-36 Virtual Private Networkingv1.0, March 2008.To submit your Self Certificate request to a CA:1. Con

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-37v1.0, March 2008When you obtain the certificate from the CA, you can th

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-38 Virtual Private Networkingv1.0, March 2008

Router and Network Management 6-1v1.0, March 2008Chapter 6Router and Network ManagementThis chapter describes how to use the network management featur

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-2 Router and Network Managementv1.0, March 2008Service BlockingYou can control specific outbound tra

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-3v1.0, March 2008See “Using Rules to Block or Allow Specific Kinds of

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-4 Router and Network Managementv1.0, March 2008You can bypass keyword blocking for trusted domains b

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-5v1.0, March 2008You can control specific inbound traffic (i.e., from

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-6 Router and Network Managementv1.0, March 2008• Services – You can specify the desired Services or

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-7v1.0, March 2008Using QoS to Shift the Traffic MixThe QoS priority se

FVS338 ProSafe VPN Firewall 50 Reference Manual xiv About This Manualv1.0, March 2008• Scope. This manual is written for the VPN firewall according to

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-8 Router and Network Managementv1.0, March 2008To modify User or Admin settings:1. Select Administra

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-9v1.0, March 2008Enabling Remote Management AccessUsing the Remote Man

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-10 Router and Network Managementv1.0, March 2008To configure your firewall for Remote Management:1.

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-11v1.0, March 20082. Specify the Port Number that will be used for acc

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-12 Router and Network Managementv1.0, March 20083. Specify what external addresses will be allowed t

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-13v1.0, March 2008• If you want to make the VPN firewall globally acce

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-14 Router and Network Managementv1.0, March 2008Settings Backup and Firmware Upgrade Once you have i

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-15v1.0, March 2008You must manually restart the VPN firewall in order

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-16 Router and Network Managementv1.0, March 2008To upgrade router software: 1. Select Administration

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-17v1.0, March 20083. If supported in your region, check the Automatica

FVS338 ProSafe VPN Firewall 50 Reference Manual About This Manual xvv1.0, March 2008• Printing from PDF. Your computer must have the free Adobe Acroba

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-18 Router and Network Managementv1.0, March 2008Enabling the Traffic MeterTo monitor traffic limits

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-19v1.0, March 2008Setting Login Failures and Attacks NotificationFigur

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-20 Router and Network Managementv1.0, March 2008Figure 6-8Select the types of Enable email alerts.ev

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-21v1.0, March 2008Viewing Port Triggering StatusYou can view the statu

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-22 Router and Network Managementv1.0, March 2008Viewing Router Configuration and System Status The R

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-23v1.0, March 2008Monitoring WAN Ports StatusYou can monitor the statu

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-24 Router and Network Managementv1.0, March 2008.Monitoring VPN Tunnel Connection StatusYou can view

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-25v1.0, March 2008VPN LogsThe VPN Logs screen gives log details for re

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-26 Router and Network Managementv1.0, March 2008Performing DiagnosticsYou can perform diagnostics su

FVS338 ProSafe VPN Firewall 50 Reference Manual Router and Network Management 6-27v1.0, March 2008Figure 6-15Table 6-4. Diagnostics FieldsItem Descri

FVS338 ProSafe VPN Firewall 50 Reference Manual xvi About This Manualv1.0, March 2008

FVS338 ProSafe VPN Firewall 50 Reference Manual 6-28 Router and Network Managementv1.0, March 2008Reboot the Router Used to perform a remote reboot (r

Troubleshooting 7-1v1.0, March 2008Chapter 7TroubleshootingThis chapter provides troubleshooting tips and information for your ProSafe VPN Firewall 50

FVS338 ProSafe VPN Firewall 50 Reference Manual 7-2 Troubleshootingv1.0, March 2008LEDs Never Turn Off When the firewall is turned on, the LEDs turns

FVS338 ProSafe VPN Firewall 50 Reference Manual Troubleshooting 7-3v1.0, March 2008• Make sure your PC’s IP address is on the same subnet as the firew

FVS338 ProSafe VPN Firewall 50 Reference Manual 7-4 Troubleshootingv1.0, March 2008Troubleshooting the ISP ConnectionIf your firewall is unable to acc

FVS338 ProSafe VPN Firewall 50 Reference Manual Troubleshooting 7-5v1.0, March 2008– Configure your firewall to spoof your PC’s MAC address. This can

FVS338 ProSafe VPN Firewall 50 Reference Manual 7-6 Troubleshootingv1.0, March 2008If the path is not functioning correctly, you could have one of the

FVS338 ProSafe VPN Firewall 50 Reference Manual Troubleshooting 7-7v1.0, March 2008Restoring the Default Configuration and PasswordThis section explai

FVS338 ProSafe VPN Firewall 50 Reference Manual 7-8 Troubleshootingv1.0, March 2008

Default Settings and Technical Specifications A-1v1.0, March 2008Appendix ADefault Settings and Technical SpecificationsYou can use the reset button l

Introduction 1-1v1.0, March 2008Chapter 1IntroductionThe ProSafe VPN Firewall 50 with 8 port switch connects your local area network (LAN) to the Inte

FVS338 ProSafe VPN Firewall 50 Reference Manual A-2 Default Settings and Technical Specificationsv1.0, March 2008Technical Specifications for the ProS

FVS338 ProSafe VPN Firewall 50 Reference Manual Default Settings and Technical Specifications A-3v1.0, March 2008Environmental SpecificationsOperating

FVS338 ProSafe VPN Firewall 50 Reference Manual A-4 Default Settings and Technical Specificationsv1.0, March 2008

System Logs and Error Messages B-1v1.0, March 2008Appendix BSystem Logs and Error MessagesThis appendix uses the following log parameter terms.System

FVS338 ProSafe VPN Firewall 50 Reference Manual B-2 System Logs and Error Messagesv1.0, March 2008RebootThis section describes log messages generated

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-3v1.0, March 2008Login/LogoutThis section describes logs generated by

FVS338 ProSafe VPN Firewall 50 Reference Manual B-4 System Logs and Error Messagesv1.0, March 2008IPSec RestartThis logging is always done.WAN StatusT

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-5v1.0, March 2008Auto RolloverWhen WAN mode is configured to Auto Rol

FVS338 ProSafe VPN Firewall 50 Reference Manual B-6 System Logs and Error Messagesv1.0, March 2008PPP LogsThis section describes the WAN PPP connectio

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-7v1.0, March 2008PPPoE Idle-Timeout Logs. Table B-9. System Logs: WA

FVS338 ProSafe VPN Firewall 50 Reference Manual 1-2 Introductionv1.0, March 2008• Flash memory for firmware upgrade.Full Routing on Both the Broadband

FVS338 ProSafe VPN Firewall 50 Reference Manual B-8 System Logs and Error Messagesv1.0, March 2008PPTP Idle-Timeout Logs. PPP Authentication Logs. Web

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-9v1.0, March 2008Table B-12. System Logs: Web Filtering and Content F

FVS338 ProSafe VPN Firewall 50 Reference Manual B-10 System Logs and Error Messagesv1.0, March 2008Traffic Metering LogsUnicast LogsICMP Redirect Logs

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-11v1.0, March 2008Multicast/Broadcast LogsFTP LoggingInvalid Packet L

FVS338 ProSafe VPN Firewall 50 Reference Manual B-12 System Logs and Error Messagesv1.0, March 2008Recommended Action1. Invalid packets are dropped.2.

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-13v1.0, March 2008Recommended Action1. Invalid packets are dropped.2.

FVS338 ProSafe VPN Firewall 50 Reference Manual B-14 System Logs and Error Messagesv1.0, March 2008Routing LogsThis section is used to configure the l

FVS338 ProSafe VPN Firewall 50 Reference Manual System Logs and Error Messages B-15v1.0, March 2008LAN to WAN LogsLAN to DMZ LogsDMZ to WAN LogsWAN to

FVS338 ProSafe VPN Firewall 50 Reference Manual B-16 System Logs and Error Messagesv1.0, March 2008DMZ to LAN LogsWAN to DMZ LogsTable B-23. Routing L

Related Documents C-1v1.0, March 2008Appendix CRelated DocumentsThis appendix provides links to reference documents you can use to gain a more complet

FVS338 ProSafe VPN Firewall 50 Reference Manual Introduction 1-3v1.0, March 2008• Port Forwarding with NAT. Although NAT prevents Internet locations f

FVS338 ProSafe VPN Firewall 50 Reference Manual C-2 Related Documentsv1.0, March 2008

Index-1v1.0, March 2008IndexAAdd LAN WAN Inbound Service screen 4-9, 4-15Add LAN WAN Outbound Service screen 4-8address reservation 3-10AHVPN Polic

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-2v1.0, March 2008Ddatetroubleshooting 7-7Daylight Savings Timesetting 6-17Dead Peer Detection

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-3v1.0, March 2008technical specifications A-1firewall accessremote management 6-9Firewall Logs

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-4v1.0, March 2008examples of 4-23LL2TPVPN Tunnel 4-11LANconfiguration 3-1ports and attached d

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-5v1.0, March 2008Ppackage contents 1-4Packet Trace 6-28Passwordschanging 6-7restoring 7-7per

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-6v1.0, March 2008blocking traffic 4-1service blocking 4-2services-based 4-2SScheduleblocking

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-7v1.0, March 2008LEDs Never Turn Off 7-2NTP 7-7Power LED Not On 7-1Web configuration 7-2Trus

FVS338 ProSafe VPN Firewall 50 Reference Manual Index-8v1.0, March 2008

iiv1.0, March 2008© 2007 by NETGEAR, Inc. All rights reserved.TrademarksNETGEAR, the NETGEAR logo and ProSafe are trademarks and/or registered tradema

FVS338 ProSafe VPN Firewall 50 Reference Manual 1-4 Introductionv1.0, March 2008Easy Installation and ManagementYou can install, configure, and operat

FVS338 ProSafe VPN Firewall 50 Reference Manual Introduction 1-5v1.0, March 2008• ProSafe VPN Firewall 50.•AC power adapter.• Category 5 Ethernet cabl

FVS338 ProSafe VPN Firewall 50 Reference Manual 1-6 Introductionv1.0, March 2008Router Rear PanelThe rear panel of the ProSafe VPN Firewall 50 (Figure

FVS338 ProSafe VPN Firewall 50 Reference Manual Introduction 1-7v1.0, March 2008Viewed from left to right, the rear panel contains the following eleme

FVS338 ProSafe VPN Firewall 50 Reference Manual 1-8 Introductionv1.0, March 2008To log in to the FVS338 once it is connected:1. Open a Web browser.2.

2-1v1.0, March 2008Chapter 2Connecting the FVS338 to the InternetThis section provides instructions for connecting the VPN firewall. Setting up VPN tu

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-2 Connecting the FVS338 to the Internetv1.0, March 2008To log in to the VPN firewall:Step 1.Open a I

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-3v1.0, March 2008 2. Click Auto Detect at the bottom of the sc

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-4 Connecting the FVS338 to the Internetv1.0, March 20083. Click Broadband Status at the top right of

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-5v1.0, March 2008Step 1.Select Network Configuration from the

v1.0, March 2008iiiFederal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been grant

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-6 Connecting the FVS338 to the Internetv1.0, March 20083. Specify the method to use for your Dial-up

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-7v1.0, March 2008Set up the traffic meter for the Dialup ISP i

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-8 Connecting the FVS338 to the Internetv1.0, March 2008This could occur on some older broadband mode

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-9v1.0, March 2008.Manually Configuring Your Internet Connectio

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-10 Connecting the FVS338 to the Internetv1.0, March 2008To manually configure your WAN1 ISP settings

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-11v1.0, March 2008– Domain Name: Your domain name or workgroup

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-12 Connecting the FVS338 to the Internetv1.0, March 20084. If your ISP has not assigned any Domain N

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-13v1.0, March 2008Figure 2-8

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-14 Connecting the FVS338 to the Internetv1.0, March 2008Table 2-2. Traffic Meter SettingsParameter

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-15v1.0, March 2008Configuring the WAN ModeThe WAN Mode screen

v1.0, March 2008ivOpen SSL Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved.Redistribution and use in source and binary forms, with or

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-16 Connecting the FVS338 to the Internetv1.0, March 2008• If you have both ISP links connected for I

FVS338 ProSafe VPN Firewall 50 Reference Manual Connecting the FVS338 to the Internet 2-17v1.0, March 2008This router firmware includes software that

FVS338 ProSafe VPN Firewall 50 Reference Manual 2-18 Connecting the FVS338 to the Internetv1.0, March 2008If you have configured Single Port, select t

LAN Configuration 3-1v1.0, March 2008Chapter 3LAN ConfigurationThis chapter describes how to configure LAN Setup, LAN Groups and Routing (Static IP) f

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-2 LAN Configurationv1.0, March 2008To modify your LAN setup:1. Select Network Configuration from the

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-3v1.0, March 20083. Enter the IP Subnet Mask. The subnet mask specifies the networ

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-4 LAN Configurationv1.0, March 2008The feature is particularly useful in Auto Rollover mode. For exa

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-5v1.0, March 2008The Available Secondary LAN IPs table lists the secondary LAN IP

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-6 LAN Configurationv1.0, March 2008Managing Groups and Hosts The Known PCs and Devices table on the

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-7v1.0, March 2008• MAC-level Control over PCs. The Network Database uses the MAC a

v1.0, March 2008vMD5 Copyright (C) 1990, RSA Data Security, Inc. All rights reserved. License to copy and use this software is granted provided that

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-8 LAN Configurationv1.0, March 2008The Network Database is created by:• Using the DHCP Server: The r

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-9v1.0, March 2008• Name: The name of the computer or device. Computers that do not

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-10 LAN Configurationv1.0, March 2008Setting Up Address ReservationWhen you specify a reserved IP add

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-11v1.0, March 20085. Type the Destination IP Address or network of the route’s fin

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-12 LAN Configurationv1.0, March 2008• You have an ISDN firewall on your home network for connecting

FVS338 ProSafe VPN Firewall 50 Reference Manual LAN Configuration 3-13v1.0, March 2008To enable RIP:1. Select Network Configuration from the main menu

FVS338 ProSafe VPN Firewall 50 Reference Manual 3-14 LAN Configurationv1.0, March 2008• None – the router neither broadcasts its route table nor does

Firewall Protection and Content Filtering 4-1v1.0, March 2008Chapter 4Firewall Protection and Content FilteringThe ProSafe VPN Firewall 50 provides yo

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-2 Firewall Protection and Content Filteringv1.0, March 2008• Outbound: Allow all access from the LAN

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-3v1.0, March 2008Table 4-1. Outbound Rules FieldsItem Desc

v1.0, March 2008viProduct and Publication DetailsModel Number: FVS338Publication Date: March 2008Product Family: VPN firewallProduct Name: ProSafe VPN

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-4 Firewall Protection and Content Filteringv1.0, March 2008Inbound Rules (Port Forwarding)Because th

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-5v1.0, March 2008Table 4-2. Inbound Rules FieldsItem Descr

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-6 Firewall Protection and Content Filteringv1.0, March 2008Remember that allowing inbound services o

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-7v1.0, March 2008Setting LAN WAN RulesThe Default Outbound

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-8 Firewall Protection and Content Filteringv1.0, March 20081. In the Action column adjacent to the r

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-9v1.0, March 2008.LAN WAN Inbound Services RulesThis Inbou

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-10 Firewall Protection and Content Filteringv1.0, March 2008Attack ChecksThis screen allows you to s

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-11v1.0, March 2008• LAN Security Checks. A UDP flood is a

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-12 Firewall Protection and Content Filteringv1.0, March 2008.Session LimitSession Limit allows you t

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-13v1.0, March 2008To enable Session Limit:1. Click the Yes

Contents viiv1.0, March 2008ContentsAbout This ManualConventions, Formats and Scope ...

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-14 Firewall Protection and Content Filteringv1.0, March 2008Allowing Videoconference from Restricted

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-15v1.0, March 2008Setting Up One-to-One NAT MappingIn this

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-16 Firewall Protection and Content Filteringv1.0, March 20086. From the Public Destination IP Addres

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-17v1.0, March 2008To test the connection from a PC on the

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-18 Firewall Protection and Content Filteringv1.0, March 2008Outbound Rules Example – Blocking Instan

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-19v1.0, March 2008Although the FVS338 already holds a list

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-20 Firewall Protection and Content Filteringv1.0, March 2008To add a service:1. Select Security from

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-21v1.0, March 2008• Normal-Service: No special priority gi

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-22 Firewall Protection and Content Filteringv1.0, March 2008Repeat these 5 steps to set to a schedul

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-23v1.0, March 2008You can bypass Keyword blocking for trus

viii Contentsv1.0, March 2008Configuring the WAN Mode ...2-15Co

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-24 Firewall Protection and Content Filteringv1.0, March 2008Enabling Source MAC FilteringSource MAC

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-25v1.0, March 2008• When enabled, traffic will be dropped

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-26 Firewall Protection and Content Filteringv1.0, March 20086. When you have completed adding MAC ad

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-27v1.0, March 2008The IP/MAC Binding Table lists the curre

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-28 Firewall Protection and Content Filteringv1.0, March 20084. To remove an entry from the table, se

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-29v1.0, March 20082. From the Enable pull-down menu, indic

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-30 Firewall Protection and Content Filteringv1.0, March 2008b. Enter the End Port range (1 - 65534).

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-31v1.0, March 2008• Bandwidth limiting for outbound traffi

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-32 Firewall Protection and Content Filteringv1.0, March 2008• WAN : Displays the WAN interface for t

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-33v1.0, March 2008other general information based on the s

Contents ixv1.0, March 2008Setting Block Sites (Content Filtering) ...4-22Enabl

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-34 Firewall Protection and Content Filteringv1.0, March 2008To set up Firewall Logs and E-mail alert

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-35v1.0, March 2008• LOG_WARNING (Warning conditions)• LOG_

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-36 Firewall Protection and Content Filteringv1.0, March 2008Administrator InformationConsider the fo

FVS338 ProSafe VPN Firewall 50 Reference Manual Firewall Protection and Content Filtering 4-37v1.0, March 2008

FVS338 ProSafe VPN Firewall 50 Reference Manual 4-38 Firewall Protection and Content Filteringv1.0, March 2008

Virtual Private Networking 5-1v1.0, March 2008Chapter 5Virtual Private NetworkingThis chapter describes how to use the Virtual Private Networking (VPN

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-2 Virtual Private Networkingv1.0, March 2008Setting up a VPN Connection using the VPN WizardSetting

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-3v1.0, March 2008The Local WAN IP address is the address used in the IKE

FVS338 ProSafe VPN Firewall 50 Reference Manual 5-4 Virtual Private Networkingv1.0, March 2008IKE Policies The IKE (Internet Key Exchange) protocol pe

FVS338 ProSafe VPN Firewall 50 Reference Manual Virtual Private Networking 5-5v1.0, March 2008• Name. Uniquely identifies each IKE policy. The name is