Netgear Pro Secure UTM25 Unified Threat Management 100NAS Utm Series DS

User Manual: Netgear ProSecure UTM25 Unified Threat Management UTM25-100NAS

Open the PDF directly: View PDF .
Page Count: 4

24/7

T E C H N I C A L

SUPPORT*

1-888-NETGEAR (638-4327)

Email: info@NETGEAR.com

ProSecure® Unified Threat

Management Appliance Data Sheet

UTM Series

Unified Gateway Security for Smart IT Networks – Without Compromise

The ProSecure UTM series of all-in-one gateway security appliances combine best-of-breed

enterprise-strength security technologies from Commtouch®, Mailshell™, and Sophos™ with

patent-pending Stream Scanning Technology to protect businesses against today’s Web, email,

and network threats. Malware hosted on Web pages, phishing attacks, spam, virus infected

emails, hackers, denial-of-service attacks, and other threats are now all part of a regular

repertoire of sophisticated blended attacks that bypass traditional firewalls with ease. Because

comprehensive network security solutions require an abundance of processing power to

examine network traffic in real time, existing all-in-one security solutions often use rudimentary

security technologies that trade comprehensiveness for speed. True security must satisfy the

requirements in both speed and coverage.

All-in-one Network Security - Redefined

ProSecure Unified Threat Management (UTM) Appliances combine performance with comprehensive

security coverage. Patent-pending Stream Scanning Technology enables the ProSecure UTM to

utilize virus and malware threat databases from ProSecure and Sophos™ that are over one million

signatures in size - up to 400x more comprehensive than legacy all-in-one platforms at a speed

that is up to 5x faster than conventional methods. This architecture, combined with best-of-breed

hybrid in-the-cloud Web filter and anti-spam technologies along with proven firewall, IPS, and VPN

functionality, form the ideal growing business gateway security solution.

Revolutionary Stream Scanning Platform

Given the high performance requirements of scanning latency sensitive Web traffic, incorporating

enterprise-grade security software technologies onto traditional all-in-one platforms has been a

very difficult task. Traditional batch-based scanning methods introduce large amounts of latency

into network traffic and can slow Web browsing to a crawl. All-in-one solutions in the past have

tried to overcome this by minimizing the malware signature set, scanning only a select few file

types, or by avoiding Web scanning altogether. This exposes an entire vector of the network to

malware-based attacks. The ProSecure UTM features patent-pending Stream Scanning Technology

which analyses data streams as they enter the network. This significantly reduces latency

and allows the use of an extensive malware signature library for scanning – thus offering an

unprecedented combination of speed and coverage in an all-in-one solution.

Firewall

Inspection

Intrusion

Prevention

URL

Filtering

Anti-spam

Anti-

Malware

IM & P2P

Control

VPN

UTM Appliance

LAN

Remote Users

Unfiltered

network stream

Clean and

secure traffic

Internet

ProSecure UTM Features

and Highlights

• Best-of-breed Anti-malware

Engine

– Enterprise-class malware scan engine

– Up to 400 times the coverage of

legacy all-in-one solutions

– Over 1 million malware signatures

– Hourly automatic signature updates

– Zero hour heuristic based threat

protection

• ProSecure Patent Pending

Stream Scanning Technology

– Data streams are processed as they

enter the network

– Low latency Web traffic scanning

• Distributed Spam Analysis

Anti-spam Technology

– Hybrid in-the-cloud architecture

– Gathers threat data from over 50

million global sources

– New spam is classified and detected

within minutes

– No learning period, works right out

of the box

• Distributed Web Analysis

URL Filtering

– Hybrid in-the-cloud architecture

– Hundreds of millions of categorized

URLs

– Real-time classification, 64 categories

– Per User & Group filtering policies

• IM and P2P Application

Control

– Blocks access to public IM clients

– Blocks peer-to-peer (P2P) clients

– Preserve productivity and

save bandwidth

VPNC

CERTIFIED

Basic

Interop

AES

Interop

Traditional Batch-based Scanning Stream Scanning

Receive

Scan

Output

Latency

Time

Receive

Scan

Output

Latency

Time

Simple Setup, Ease of Management

The ProSecure UTM will easily replace any existing firewall or router. A simple 10-step setup

wizard guides you through installation and the UTM will be up and running in minutes.

Administration is performed through an intuitive Web-based interface. Set granular policies

and alerts, check summary statistics and graphical reports, drill down to IP address-level data,

and integrate log data with standard network management tools using SNMP. Malware and

IPS signature, software, and firmware updates are all handled by the UTM - online

and automatically.

For many administrators and IT personnel one of their biggest nightmares is the management

of individual licenses or “seats.” Buying additional licenses when computers and personnel are

added to the network is time-consuming and costly. The ProSecure UTM offers Web and email

protection subscriptions with no “per-user” licensing.

ProSecure® Unified Threat Management Appliance UTM Series

• SSL & IPsec VPN

Remote Access

– SSL VPN - clientless remote access,

anywhere, anytime

– IPsec VPN - secure site-to-site tunnels

and client-based remote access

– No additional licenses to purchase

• Built-in SPI Firewall

– Dual/Quad WAN Gigabit Firewall*

provides load balancing and failover

– Gigabit LAN ports, configurable

hardware DMZ port

– Stateful packet inspection (SPI)

– Denial-of-service (DoS) protection

– IPS prevents hackers from penetrating

the network perimeter

UTM SERIES COMPARISON

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

SIZING GUIDELINES

Average Anti-virus Throughput¹ 15 Mbps 20 Mbps 25 Mbps 45 Mbps 130 Mbps

Stateful Packet Inspection Firewall Throughput¹ 90 Mbps 90 Mbps 127 Mbps 400 Mbps 900 Mbps

Maximum VPN Throughput¹ 40 Mbps 50 Mbps 70 Mbps 200 Mbps 400 Mbps

Maximum Concurrent Connections¹ 8,000 12,000 27,000 40,000 65,000

VLANs 255 255 255 255 255

CONTENT SECURITY

Web and Email Scanned Protocols HTTP, HTTPS, FTP, SMTP, IMAP, POP3

Stream Scanning

Inbound and Outbound Inspection

Signature-Less Zero Hour Protection

Malware Signatures 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million

Automatic Signature Updates Hourly Hourly Hourly Hourly Hourly

Web Content Filters Filter By: HTML Body Keywords, File Extension

Web Object Filters ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies

Email Content Filters Filter By: Subject Keywords, Password-protected Attachments,

File Extension, File Name

Distributed Spam Analysis

Distributed Spam Analysis Supported Protocols SMTP, POP3

Anti-spam Real-time Blacklist (RBL)

User-defined Spam Allowed/Block Lists Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain

Distributed Web Analysis w/ 64 categories

Instant Messaging (IM) Control MSN® Messenger, Yahoo!® Messenger, mIRC, Google Talk

Peer to Peer (P2P) Control BitTorrent™, eDonkey, Gnutella

Maximum Number of Users Unlimited

FIREWALL FEATURES

Stateful Packet Inspection (SPI) Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood,

Block UDP Flood, WAN/LAN Ping Response Control

Intrusion Detection & Prevention (IPS)

WAN Modes NAT, Classical Routing

ISP Address Assignment DHCP, Static IP Assignment, PPPoE, PPTP

NAT Modes 1-1 NAT, PAT

Routing Static, Dynamic, RIPv1, RIPv2

VoIP SIP ALG

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

DDNS DynDNS.org, TZO.com, Oray.net

Firewall Functions Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time

Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch

Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS)

DHCP DHCP Server, DHCP Relay

User Authentication for VPN Active Directory, LDAP, Radius, Local User Database

Security Policies Based on Active Directory with

Single Sign-On (SSO)

PCI Compliance Two Factor

Authentication Support

VPN

Site to Site VPN Tunnels 5 10 25 50 150

Simultaneous SSL VPN Tunnels 2 5 13 25 75

IPsec Encrypton/Authentication DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5

Key Exchange IKE, Manual Key, Pre-Shared Key, PKI, X.500

IPsec NAT Traversal (VPN Passthrough)

iPhone Native VPN Client Support

Included ProSafe VPN Client Lite Licenses 0 1 1 3 3

SSL Version Support SSLv3, TLS1.0

SSL Encryption Support DES, 3DES, ARC4, AES(128,256 bit)

SSL Message Integrity MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1

SSL Certificate Support RSA, Diffie-Hellman, Self

SSL VPN Platforms Supported Windows 2000 / XP / Vista® (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x

DEPLOYMENT

VLAN Support

Dual-WAN Fail-over

Intelligent Traffic Load Balancing

Configuration Wizards Setup, IPsec VPN, SSL VPN

LOGGING AND REPORTING

Management HTTP/HTTPS, SNMP v2c

Reporting Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic

Malware Notifications, System Notifications

Logging Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Port Scan, IM,

P2P, Firewall, IPsec VPN, SSL VPN

Log Delivery Management GUI Query, Email Delivery, Syslog

HARDWARE

Gigabit RJ45 Ports WAN/LAN 1/4 1/4 2/4 2/6 4/4

DMZ Interfaces (Configurable) 1 1 1 1 1

Flash Memory/RAM 2 GB/512 MB 2 GB/512 MB 2 GB/1 GB 2 GB/1 GB 2 GB/1 GB

USB Ports 1 1 1 1 1

Certifications ICSA: Anti-virus VPNC: AES Interop, Basic Interop

Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering

Major Regulatory Compliance FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS

Storage and Operating Temperatures Operating Temperature 0°-45° C (32°-113° F),

Storage Temperature -20°-70° C (-4°-158° F)

Humidity Operation 90% Maximum Relative, Storage 95% Maximum Relative

Power Input Rating 100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max 100-240V, AC/50-60Hz, Universal Input,

1.0 Amp Max

Dimensions (W x H x D) cm 33 x 4.3 x 20.9 33 x 4.3 x 20.9 33 x 4.3 x 20.9 44 x 4.3 x 25.3 44 x 4.3 x 25.3

Dimensions (W x H x D) in 13 x 1.7 x 8.2 13 x 1.7 x 8.2 13 x 1.7 x 8.2 17.3 x 1.7 x 9.96 17.3 x 1.7 x 9.96

Weight kg/lb 2.1/ 4.6 2.1/ 4.6 2.1/ 4.6 2.9/6.4 2.9/6.4

ProSecure® Unified Threat Management Appliance UTM Series

350 E. Plumeria Drive

San Jose, CA 95134-1911

1-888-NETGEAR (638-4327)

E-mail: info@NETGEAR.com

www.NETGEAR.com

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

Package Contents ProSecure UTM Appliance , Power Cable, Rubber Feet, Resource CD,

Rackmount Kit, Warranty Card, Quick Installation Guide, Subscription Card (Bundles Only)

Hardware Warranty Lifetime

ProSecure® Unified Threat Management Appliance UTM Series

ORDERING INFORMATION

Hardware (Firewall and VPN Functionality Only)

North America Europe Asia

UTM5-100NAS UTM5-100EUS UTM5-100AJS

UTM10-100NAS UTM10-100EUS UTM10-100AJS

UTM25-100NAS UTM25-100EUS UTM25-100AJS

UTM50-100NAS UTM50-100EUS UTM50-100AJS

UTM150-100NAS UTM150-100EUS UTM150-100AJS

1-Year Bundle (Hardware including 1-year Web, 1-year Email, and 1-year Software Maintenance and Upgrades, 24/7 Support, and Advanced Replacement)

North America Europe Asia

UTM5EW-100NAS UTM5EW-100EUS UTM5EW-100AJS

UTM10EW-100NAS UTM10EW-100EUS UTM10EW-100AJS

UTM25EW-100NAS UTM25EW-100EUS UTM25EW-100AJS

UTM50EW-100NAS UTM50EW-100EUS UTM50EW-100AJS

UTM150EW-100NAS UTM150EW-100EUS UTM150EW-100AJS

3-Year Bundle (Hardware including 3-year Web, 3-year Email, and 3-year Software Maintenance and Upgrades, 24/7 Support, and Advanced Replacement)

North America Europe Asia

UTM5EW3-100NAS UTM5EW3-100EUS UTM5EW3-100AJS

UTM10EW3-100NAS UTM10EW3-100EUS UTM10EW3-100AJS

UTM25EW3-100NAS UTM25EW3-100EUS UTM25EW3-100AJS

UTM50EW3-100NAS UTM50EW3-100EUS UTM50EW3-100AJS

UTM150EW3-100NAS UTM150EW3-100EUS UTM150EW3-100AJS

1-Year Subscriptions

Web Threat Management Email Threat Management Software Maintenance and Upgrades,

24/7 Support, Advanced Replacement

Subscription Bundle (Web + Email +

Support & Maintenance)

UTM5W-10000S UTM5E-10000S UTM5M-10000S UTM5B-10000S

UTM10W-10000S UTM10E-10000S UTM10M-10000S UTM10B-10000S

UTM25W-10000S UTM25E-10000S UTM25M-10000S UTM25B-10000S

UTM50W-10000S UTM50E-10000S UTM50M-10000S UTM50B-10000S

UTM150W-10000S UTM150E-10000S UTM150M-10000S UTM150B-10000S

3-Year Subscriptions

Web Threat Management Email Threat Management Software Maintenance and Upgrades,

24/7 Support, Advanced Replacement

Subscription Bundle (Web + Email +

Support & Maintenance)

UTM5W3-10000S UTM5E3-10000S UTM5M3-10000S UTM5B3-10000S

UTM10W3-10000S UTM10E3-10000S UTM10M3-10000S UTM10B3-10000S

UTM25W3-10000S UTM25E3-10000S UTM25M3-10000S UTM25B3-10000S

UTM50W3-10000S UTM50E3-10000S UTM50M3-10000S UTM50B3-10000S

UTM150W3-10000S UTM150E3-10000S UTM150M3-10000S UTM150B3-10000S

*Available on the UTM25, UTM50, and UTM150.

¹Throughput measured in a lab environment. Actual performance may vary.

© 2011 NETGEAR, Inc. NETGEAR, the NETGEAR Logo, Connect with Innovation, ProSafe, NETGEAR Green and Smart Wizard are

trademarks and/or registered trademarks of NETGEAR, Inc. and/or subsidiaries in the United States and/or other countries. Mac and the

Mac logo are trademarks of Apple, Inc., registered in the U.S. and other countries. Other brand names mentioned herein are for identification

purposes only and may be trademarks of their respective holder (s). Information is subject to change without notice. All rights reserved.

This product comes with a limited warranty, the acceptance of which is a condition of sale.

DS-UTM_Series-4