Netgear Pro Secure UTM25 Unified Threat Management 100NAS Utm Series DS

User Manual: Netgear ProSecure UTM25 Unified Threat Management UTM25-100NAS

Open the PDF directly: View PDF PDF.
Page Count: 4

DownloadNetgear Pro Secure UTM25 Unified Threat Management UTM25-100NAS Utm Series DS
Open PDF In BrowserView PDF
ProSecure® Unified Threat
Management Appliance
UTM Series

Data Sheet

Unified Gateway Security for Smart IT Networks – Without Compromise
The ProSecure UTM series of all-in-one gateway security appliances combine best-of-breed
enterprise-strength security technologies from Commtouch®, Mailshell™, and Sophos™ with
patent-pending Stream Scanning Technology to protect businesses against today’s Web, email,
and network threats. Malware hosted on Web pages, phishing attacks, spam, virus infected
emails, hackers, denial-of-service attacks, and other threats are now all part of a regular
repertoire of sophisticated blended attacks that bypass traditional firewalls with ease. Because
comprehensive network security solutions require an abundance of processing power to
examine network traffic in real time, existing all-in-one security solutions often use rudimentary
security technologies that trade comprehensiveness for speed. True security must satisfy the
requirements in both speed and coverage.

				

ProSecure UTM Features
and Highlights
• Best-of-breed Anti-malware
		Engine
–– Enterprise-class malware scan engine
–– Up to 400 times the coverage of
legacy all-in-one solutions
–– Over 1 million malware signatures
–– Hourly automatic signature updates
–– Zero hour heuristic based threat
protection

• ProSecure Patent Pending
		Stream Scanning Technology
–– Data streams are processed as they
				
enter the network
–– Low latency Web traffic scanning

• 				
Distributed Spam Analysis
		Anti-spam Technology
–– Hybrid in-the-cloud architecture
–– Gathers threat data from over 50
million global sources
–– New spam is classified and detected
within minutes
–– No learning period, works right out
of the box

• Distributed Web Analysis
URL Filtering
–– Hybrid in-the-cloud architecture
–– Hundreds of millions of categorized
URLs
–– Real-time classification, 64 categories
–– Per User & Group filtering policies

• IM and P2P Application
		Control
–– Blocks access to public IM clients
–– Blocks peer-to-peer (P2P) clients
–– Preserve productivity and
save bandwidth

24 / 7

TECHNICAL
S U P P O R T*

VPNC
CERTIFIED

Basic (638-4327)
1-888-NETGEAR
Interop
AES
Email: info@NETGEAR.com
Interop

All-in-one Network Security - Redefined
ProSecure Unified Threat Management (UTM) Appliances combine performance with comprehensive
security coverage. Patent-pending Stream Scanning Technology enables the ProSecure UTM to
utilize virus and malware threat databases from ProSecure and Sophos™ that are over one million
signatures in size - up to 400x more comprehensive than legacy all-in-one platforms at a speed
that is up to 5x faster than conventional methods. This architecture, combined with best-of-breed
hybrid in-the-cloud Web filter and anti-spam technologies along with proven firewall, IPS, and VPN
functionality, form the ideal growing business gateway security solution.

Internet

VPN
Firewall
Inspection

Intrusion
Prevention

URL
Filtering

Remote Users

Anti-spam

AntiMalware

IM & P2P
Control

Clean and
secure traffic
LAN

Unfiltered
network stream
UTM Appliance

Revolutionary Stream Scanning Platform
Given the high performance requirements of scanning latency sensitive Web traffic, incorporating
enterprise-grade security software technologies onto traditional all-in-one platforms has been a
very difficult task. Traditional batch-based scanning methods introduce large amounts of latency
into network traffic and can slow Web browsing to a crawl. All-in-one solutions in the past have
tried to overcome this by minimizing the malware signature set, scanning only a select few file
types, or by avoiding Web scanning altogether. This exposes an entire vector of the network to
malware-based attacks. The ProSecure UTM features patent-pending Stream Scanning Technology
which analyses data streams as they enter the network. This significantly reduces latency
and allows the use of an extensive malware signature library for scanning – thus offering an
unprecedented combination of speed and coverage in an all-in-one solution.
Traditional Batch-based Scanning
Receive

Stream Scanning
Receive

Scan

Scan
Output

Output

Latency
Latency

Time

Time

ProSecure® Unified Threat Management Appliance
• SSL & IPsec VPN
		Remote Access
––		SSL VPN - clientless remote access, 		
anywhere, anytime
––		IPsec VPN - secure site-to-site tunnels
and client-based remote access
––		No additional licenses to purchase

• Built-in SPI Firewall
––		Dual/Quad WAN Gigabit Firewall*
provides load balancing and failover
––		Gigabit LAN ports, configurable
hardware DMZ port
––		Stateful packet inspection (SPI)
––		Denial-of-service (DoS) protection
–– IPS prevents hackers from penetrating
the network perimeter

UTM Series

Simple Setup, Ease of Management
The ProSecure UTM will easily replace any existing firewall or router. A simple 10-step setup
wizard guides you through installation and the UTM will be up and running in minutes.
Administration is performed through an intuitive Web-based interface. Set granular policies
and alerts, check summary statistics and graphical reports, drill down to IP address-level data,
and integrate log data with standard network management tools using SNMP. Malware and
IPS signature, software, and firmware updates are all handled by the UTM - online
and automatically.
For many administrators and IT personnel one of their biggest nightmares is the management
of individual licenses or “seats.” Buying additional licenses when computers and personnel are
added to the network is time-consuming and costly. The ProSecure UTM offers Web and email
protection subscriptions with no “per-user” licensing.

UTM SERIES COMPARISON
MODEL

UTM5

UTM10

UTM25

UTM50

UTM150

SIZING GUIDELINES
Average Anti-virus Throughput¹

15 Mbps

20 Mbps

25 Mbps

45 Mbps

130 Mbps

Stateful Packet Inspection Firewall Throughput¹

90 Mbps

90 Mbps

127 Mbps

400 Mbps

900 Mbps

Maximum VPN Throughput¹

40 Mbps

50 Mbps

70 Mbps

200 Mbps

400 Mbps

8,000

12,000

27,000

40,000

65,000

255

255

255

255

255

Maximum Concurrent Connections¹
VLANs

CONTENT SECURITY
Web and Email Scanned Protocols

HTTP, HTTPS, FTP, SMTP, IMAP, POP3

Stream Scanning
Inbound and Outbound Inspection
Signature-Less Zero Hour Protection
Malware Signatures
Automatic Signature Updates
Web Content Filters
Web Object Filters
Email Content Filters

1.2 Million

1.2 Million

1.2 Million

1.2 Million

1.2 Million

Hourly

Hourly

Hourly

Hourly

Hourly

Filter By: HTML Body Keywords, File Extension
ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies
Filter By: Subject Keywords, Password-protected Attachments,
File Extension, File Name

Distributed Spam Analysis
Distributed Spam Analysis Supported Protocols

SMTP, POP3

Anti-spam Real-time Blacklist (RBL)
User-defined Spam Allowed/Block Lists

Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain

Distributed Web Analysis w/ 64 categories
Instant Messaging (IM) Control
Peer to Peer (P2P) Control
Maximum Number of Users

MSN® Messenger, Yahoo!® Messenger, mIRC, Google Talk
BitTorrent™, eDonkey, Gnutella
Unlimited

FIREWALL FEATURES
Stateful Packet Inspection (SPI)

Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood,
Block UDP Flood, WAN/LAN Ping Response Control

Intrusion Detection & Prevention (IPS)
WAN Modes
ISP Address Assignment
NAT Modes
Routing
VoIP

NAT, Classical Routing
DHCP, Static IP Assignment, PPPoE, PPTP
1-1 NAT, PAT
Static, Dynamic, RIPv1, RIPv2
SIP ALG

ProSecure® Unified Threat Management Appliance
MODEL

UTM5

UTM Series
UTM10

DDNS
Firewall Functions

UTM25

UTM50

UTM150

DynDNS.org, TZO.com, Oray.net
Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time
Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch
Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS)

DHCP

DHCP Server, DHCP Relay

User Authentication for VPN

Active Directory, LDAP, Radius, Local User Database

Security Policies Based on Active Directory with
Single Sign-On (SSO)
PCI Compliance Two Factor
Authentication Support

VPN
Site to Site VPN Tunnels

5

Simultaneous SSL VPN Tunnels

2

IPsec Encrypton/Authentication

10

25

50

150

5

13

25

75

DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5

Key Exchange

IKE, Manual Key, Pre-Shared Key, PKI, X.500

IPsec NAT Traversal (VPN Passthrough)
iPhone Native VPN Client Support
Included ProSafe VPN Client Lite Licenses

0

1

1

SSL Version Support

3

SSLv3, TLS1.0

SSL Encryption Support

DES, 3DES, ARC4, AES(128,256 bit)

SSL Message Integrity

MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1

SSL Certificate Support
SSL VPN Platforms Supported

3

RSA, Diffie-Hellman, Self
Windows 2000 / XP / Vista (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x
®

DEPLOYMENT
VLAN Support
Dual-WAN Fail-over
Intelligent Traffic Load Balancing
Configuration Wizards

Setup, IPsec VPN, SSL VPN

LOGGING AND REPORTING
Management

HTTP/HTTPS, SNMP v2c

Reporting
Logging

Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic
Malware Notifications, System Notifications
Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Port Scan, IM,
P2P, Firewall, IPsec VPN, SSL VPN

Log Delivery

Management GUI Query, Email Delivery, Syslog

HARDWARE
Gigabit RJ45 Ports WAN/LAN

1/4

1/4

2/4

2/6

4/4

DMZ Interfaces (Configurable)

1

1

1

1

1

2 GB/512 MB

2 GB/512 MB

2 GB/1 GB

2 GB/1 GB

2 GB/1 GB

1

1

1

1

1

Flash Memory/RAM
USB Ports
Certifications
Major Regulatory Compliance

ICSA: Anti-virus VPNC: AES Interop, Basic Interop
Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering
FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS

Storage and Operating Temperatures

Operating Temperature 0°-45° C (32°-113° F),
Storage Temperature -20°-70° C (-4°-158° F)

Humidity

Operation 90% Maximum Relative, Storage 95% Maximum Relative

Power Input Rating

100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max

Dimensions (W x H x D) cm

33 x 4.3 x 20.9

33 x 4.3 x 20.9

33 x 4.3 x 20.9

44 x 4.3 x 25.3

44 x 4.3 x 25.3

Dimensions (W x H x D) in

13 x 1.7 x 8.2

13 x 1.7 x 8.2

13 x 1.7 x 8.2

17.3 x 1.7 x 9.96

17.3 x 1.7 x 9.96

2.1/ 4.6

2.1/ 4.6

2.1/ 4.6

2.9/6.4

2.9/6.4

Weight kg/lb

100-240V, AC/50-60Hz, Universal Input,
1.0 Amp Max

ProSecure® Unified Threat Management Appliance

UTM Series

MODEL

UTM5

Package Contents

ProSecure UTM Appliance , Power Cable, Rubber Feet, Resource CD,
Rackmount Kit, Warranty Card, Quick Installation Guide, Subscription Card (Bundles Only)

UTM10

UTM25

Hardware Warranty

UTM50

UTM150

Lifetime

ORDERING INFORMATION
Hardware (Firewall and VPN Functionality Only)
North America

Europe

Asia

UTM5-100NAS

UTM5-100EUS

UTM5-100AJS

UTM10-100NAS

UTM10-100EUS

UTM10-100AJS

UTM25-100NAS

UTM25-100EUS

UTM25-100AJS

UTM50-100NAS

UTM50-100EUS

UTM50-100AJS

UTM150-100NAS

UTM150-100EUS

UTM150-100AJS

1-Year Bundle (Hardware including 1-year Web, 1-year Email, and 1-year Software Maintenance and Upgrades, 24/7 Support, and Advanced Replacement)
North America

Europe

Asia

UTM5EW-100NAS

UTM5EW-100EUS

UTM5EW-100AJS

UTM10EW-100NAS

UTM10EW-100EUS

UTM10EW-100AJS

UTM25EW-100NAS

UTM25EW-100EUS

UTM25EW-100AJS

UTM50EW-100NAS

UTM50EW-100EUS

UTM50EW-100AJS

UTM150EW-100NAS

UTM150EW-100EUS

UTM150EW-100AJS

3-Year Bundle (Hardware including 3-year Web, 3-year Email, and 3-year Software Maintenance and Upgrades, 24/7 Support, and Advanced Replacement)
North America

Europe

Asia

UTM5EW3-100NAS

UTM5EW3-100EUS

UTM5EW3-100AJS

UTM10EW3-100NAS

UTM10EW3-100EUS

UTM10EW3-100AJS

UTM25EW3-100NAS

UTM25EW3-100EUS

UTM25EW3-100AJS

UTM50EW3-100NAS

UTM50EW3-100EUS

UTM50EW3-100AJS

UTM150EW3-100NAS

UTM150EW3-100EUS

UTM150EW3-100AJS

1-Year Subscriptions
Web Threat Management

Email Threat Management

Software Maintenance and Upgrades,
24/7 Support, Advanced Replacement

Subscription Bundle (Web + Email +
Support & Maintenance)

UTM5W-10000S

UTM5E-10000S

UTM5M-10000S

UTM5B-10000S

UTM10W-10000S

UTM10E-10000S

UTM10M-10000S

UTM10B-10000S

UTM25W-10000S

UTM25E-10000S

UTM25M-10000S

UTM25B-10000S

UTM50W-10000S

UTM50E-10000S

UTM50M-10000S

UTM50B-10000S

UTM150W-10000S

UTM150E-10000S

UTM150M-10000S

UTM150B-10000S

Web Threat Management

Email Threat Management

Software Maintenance and Upgrades,
24/7 Support, Advanced Replacement

Subscription Bundle (Web + Email +
Support & Maintenance)

UTM5W3-10000S

UTM5E3-10000S

UTM5M3-10000S

UTM5B3-10000S

UTM10W3-10000S

UTM10E3-10000S

UTM10M3-10000S

UTM10B3-10000S

UTM25W3-10000S

UTM25E3-10000S

UTM25M3-10000S

UTM25B3-10000S

UTM50W3-10000S

UTM50E3-10000S

UTM50M3-10000S

UTM50B3-10000S

UTM150W3-10000S

UTM150E3-10000S

UTM150M3-10000S

UTM150B3-10000S

3-Year Subscriptions

*Available on the UTM25, UTM50, and UTM150.
¹Throughput measured in a lab environment. Actual performance may vary.

350 E. Plumeria Drive
San Jose, CA 95134-1911
1-888-NETGEAR (638-4327)
E-mail: info@NETGEAR.com
www.NETGEAR.com

© 2011 NETGEAR, Inc. NETGEAR, the NETGEAR Logo, Connect with Innovation, ProSafe, NETGEAR Green and Smart Wizard are
trademarks and/or registered trademarks of NETGEAR, Inc. and/or subsidiaries in the United States and/or other countries. Mac and the
Mac logo are trademarks of Apple, Inc., registered in the U.S. and other countries. Other brand names mentioned herein are for identification
purposes only and may be trademarks of their respective holder (s). Information is subject to change without notice. All rights reserved.
This product comes with a limited warranty, the acceptance of which is a condition of sale.
		

DS-UTM_Series-4



Source Exif Data:
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.5
Linearized                      : Yes
XMP Toolkit                     : Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41
Instance ID                     : uuid:ddfea31b-8424-43b2-8ba0-cb42a20292cc
Document ID                     : xmp.did:8328FDA631531168A613EE8C46B6D2F9
Original Document ID            : adobe:docid:indd:50d65ddd-9a28-11df-a5b4-98a94de331f1
Rendition Class                 : proof:pdf
Derived From Instance ID        : xmp.iid:8328FDA531531168A613EE8C46B6D2F9
Derived From Document ID        : xmp.did:494EC3E12BEC1168A613EE8C46B6D2F9
Derived From Original Document ID: adobe:docid:indd:50d65ddd-9a28-11df-a5b4-98a94de331f1
Derived From Rendition Class    : default
History Action                  : saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved, saved
History Instance ID             : xmp.iid:30FF306E266A1168AFFDBD605CA198BF, xmp.iid:30FF306F266A1168AFFDBD605CA198BF, xmp.iid:30FF3070266A1168AFFDBD605CA198BF, xmp.iid:30FF3073266A1168AFFDBD605CA198BF, xmp.iid:30FF3074266A1168AFFDBD605CA198BF, xmp.iid:C8F177862BCF1168A613EE8C46B6D2F9, xmp.iid:C8F177872BCF1168A613EE8C46B6D2F9, xmp.iid:C8F177882BCF1168A613EE8C46B6D2F9, xmp.iid:494EC3E02BEC1168A613EE8C46B6D2F9, xmp.iid:494EC3E12BEC1168A613EE8C46B6D2F9, xmp.iid:B230E0CB15206811871FF50B58D23AEB, xmp.iid:B330E0CB15206811871FF50B58D23AEB, xmp.iid:F85FAC032E231168A613EE8C46B6D2F9, xmp.iid:F85FAC042E231168A613EE8C46B6D2F9, xmp.iid:8328FDA431531168A613EE8C46B6D2F9, xmp.iid:8328FDA531531168A613EE8C46B6D2F9, xmp.iid:8328FDA631531168A613EE8C46B6D2F9, xmp.iid:99490A9C31831168A613EE8C46B6D2F9, xmp.iid:99490A9D31831168A613EE8C46B6D2F9, xmp.iid:7716441A322D1168A613EE8C46B6D2F9, xmp.iid:0FCE9A86324C1168A613EE8C46B6D2F9, xmp.iid:C470B85733BA1168A613EE8C46B6D2F9, xmp.iid:C470B85833BA1168A613EE8C46B6D2F9
History When                    : 2010:10:28 14:05:24-07:00, 2010:10:28 14:05:24-07:00, 2010:10:28 14:06-07:00, 2010:10:28 14:28:47-07:00, 2010:10:28 14:28:47-07:00, 2011:02:15 11:17:01-08:00, 2011:02:15 11:24:24-08:00, 2011:02:15 11:25:45-08:00, 2011:02:15 14:26:58-08:00, 2011:02:15 14:26:58-08:00, 2011:02:15 15:54:04-08:00, 2011:02:15 16:41:28-08:00, 2011:02:18 16:11:10-08:00, 2011:02:18 16:12:59-08:00, 2011:02:22 11:10:55-08:00, 2011:02:22 11:11:07-08:00, 2011:02:22 11:11:07-08:00, 2011:02:22 17:44:37-08:00, 2011:02:22 17:45:45-08:00, 2011:02:23 16:48:53-08:00, 2011:02:23 16:50:01-08:00, 2011:02:25 12:35:01-08:00, 2011:02:25 14:59:39-08:00
History Software Agent          : Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0, Adobe InDesign 6.0
History Changed                 : /, /metadata, /, /metadata, /, /, /, /, /metadata, /;/metadata, /, /, /, /, /, /metadata, /, /, /, /, /, /, /
Manifest Link Form              : ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream, ReferenceStream
Manifest Placed X Resolution    : 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 300.00
Manifest Placed Y Resolution    : 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 72.00, 300.00
Manifest Placed Resolution Unit : Inches, Inches, Inches, Inches, Inches, Inches, Inches, Inches, Inches, Inches
Manifest Reference Instance ID  : uuid:4eb04556-88cf-8c41-abbe-7149ede04b06, uuid:D4987918B84D11DB84F8D336CA63EC6D, uuid:2183ef47-3701-4a02-84fd-4dd63407501e, uuid:aad3580a-2d06-4d4f-84c7-8482cbad381a, uuid:709ffa07-2925-4b80-b441-9e341d061e21, uuid:a621d05e-cd98-4e77-8694-8313ea914c2e, uuid:bd876c5d-cd2f-4003-a11d-7804b0be43b2, uuid:1bb27354-ffea-47cf-b71a-2230c0d3cfaa, uuid:81c48b4f-f4da-4ed9-ac95-74403932240b, xmp.iid:39C339A331671168B69997066146002E
Manifest Reference Document ID  : uuid:962D3A32509ADF118D3880488A6B9AD4, uuid:D4987917B84D11DB84F8D336CA63EC6D, uuid:BCB671C3B99611DE86988009DA41C953, uuid:BCB671C7B99611DE86988009DA41C953, uuid:BA81C1CD010311DFA4D3FE9F9DD62347, uuid:72195608B99511DE8F61CD186F6C746B, uuid:FB566079B97F11DE8F61CD186F6C746B, uuid:64D38FAF88AD11DE85D6CFC641A44881, uuid:E0EA04A9AE5111DDA7C3AACC33FDCD5E, uuid:C216DDEC289ADF119A33CE3B091BF427
Create Date                     : 2011:02:25 15:00:03-08:00
Modify Date                     : 2011:02:25 15:00:11-08:00
Metadata Date                   : 2011:02:25 15:00:11-08:00
Creator Tool                    : Adobe InDesign CS4 (6.0.6)
Thumbnail Format                : JPEG
Thumbnail Width                 : 256
Thumbnail Height                : 256
Thumbnail Image                 : (Binary data 14112 bytes, use -b option to extract)
Doc Change Count                : 262
Format                          : application/pdf
Producer                        : Adobe PDF Library 9.0
Trapped                         : False
Page Count                      : 4
Creator                         : Adobe InDesign CS4 (6.0.6)
EXIF Metadata provided by EXIF.tools

Navigation menu