Netgear Prosecure Utm10 Unified Threat Management Utm Applliance Utm10Ew 100Nas Users Manual FullManual

2015-01-24

• ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
  • Contents
• About This Manual
  • Conventions, Formats, and Scope
  • How to Print This Manual
  • Revision History
  • Chapter 1 Introduction
    • What Is the ProSecure Unified Threat Management Appliance UTM10 or UTM25?
    • Key Features and Capabilities
      • Dual WAN Ports for Increased Reliability or Outbound Load Balancing (UTM25 Only)
      • Advanced VPN Support for Both IPsec and SSL
      • A Powerful, True Firewall
      • Stream Scanning for Content Filtering
      • Security Features
      • Autosensing Ethernet Connections with Auto Uplink
      • Extensive Protocol Support
      • Easy Installation and Management
      • Maintenance and Support
    • Service Registration Card with License Keys
    • Package Contents
    • Hardware Features
      • Front Panel
      • Rear Panel
      • Bottom Panel With Product Label
    • Choosing a Location for the UTM
      • Using the Rack-Mounting Kit
  • Chapter 2 Using the Setup Wizard to Provision the UTM in Your Network
    • Understanding the Steps for Initial Connection
      • Qualified Web Browsers
    • Logging In to the UTM
      • Understanding the Web Management Interface Menu Layout
    • Using the Setup Wizard to Perform the Initial Configuration
      • Setup Wizard Step 1 of 10: LAN Settings
      • Setup Wizard Step 2 of 10: WAN Settings
      • Setup Wizard Step 3 of 10: System Date and Time
      • Setup Wizard Step 4 of 10: Security Services
      • Setup Wizard Step 5 of 10: Email Security
      • Setup Wizard Step 6 of 10: Web Security
      • Setup Wizard Step 7 of 10: Web Categories to Be Blocked
      • Setup Wizard Step 8 of 10: Administrator Email Notification Settings
      • Setup Wizard Step 9 of 10: Security Subscription Update Settings
      • Setup Wizard Step 10 of 10: Saving the Configuration
    • Verifying Proper Installation
      • Testing Connectivity
      • Testing HTTP Scanning
    • Registering the UTM with NETGEAR
    • What to Do Next
  • Chapter 3 Manually Configuring Internet and WAN Settings
    • Understanding the Internet and WAN Configuration Tasks
    • Configuring the Internet Connections
      • Automatically Detecting and Connecting
      • Setting the UTM’s MAC Address
      • Manually Configuring the Internet Connection
    • Configuring the WAN Mode (Required for the UTM25’s Dual WAN Mode)
      • Network Address Translation (UTM10 and UTM25)
      • Classical Routing (UTM10 and UTM25)
      • Configuring Auto-Rollover Mode (UTM25 Only)
      • Configuring Load Balancing and Optional Protocol Binding (UTM25 Only)
    • Configuring Secondary WAN Addresses
    • Configuring Dynamic DNS
    • Configuring Advanced WAN Options
      • Additional WAN-Related Configuration Tasks
  • Chapter 4 LAN Configuration
    • Managing Virtual LANs and DHCP Options
      • Managing the UTM’s Port-Based VLANs
      • VLAN DHCP Options
        • DHCP Server
        • DHCP Relay
        • DNS Proxy
        • LDAP Server
      • Configuring a VLAN Profile
    • Configuring Multi-Home LAN IPs on the Default VLAN
    • Managing Groups and Hosts (LAN Groups)
      • Managing the Network Database
        • Adding PCs or Devices to the Network Database
        • Editing PCs or Devices in the Network Database
      • Changing Group Names in the Network Database
      • Setting Up Address Reservation
    • Configuring and Enabling the DMZ Port
    • Managing Routing
      • Configuring Static Routes
      • Configuring Routing Information Protocol (RIP)
      • Static Route Example
  • Chapter 5 Firewall Protection
    • About Firewall Protection
      • Administrator Tips
    • Using Rules to Block or Allow Specific Kinds of Traffic
      • Services-Based Rules
        • Outbound Rules (Service Blocking)
        • Inbound Rules (Port Forwarding)
      • Order of Precedence for Rules
      • Setting LAN WAN Rules
        • LAN WAN Outbound Services Rules
        • LAN WAN Inbound Services Rules
      • Setting DMZ WAN Rules
        • DMZ WAN Outbound Services Rules
        • DMZ WAN Inbound Services Rules
      • Setting LAN DMZ Rules
        • LAN DMZ Outbound Services Rules
        • LAN DMZ Inbound Services Rules
      • Attack Checks
      • Setting Session Limits
      • Managing the Application Level Gateway for SIP Sessions
      • Inbound Rules Examples
        • LAN WAN Inbound Rule: Hosting A Local Public Web Server
        • LAN WAN Inbound Rule: Allowing Videoconference from Restricted Addresses
        • LAN WAN or DMZ WAN Inbound Rule: Setting Up One-to-One NAT Mapping
        • LAN WAN or DMZ WAN Inbound Rule: Specifying an Exposed Host
      • Outbound Rules Example
        • LAN WAN Outbound Rule: Blocking Instant Messenger
    • Creating Services, QoS Profiles, and Bandwidth Profiles
      • Adding Customized Services
      • Creating Quality of Service (QoS) Profiles
      • Creating Bandwidth Profiles
    • Setting a Schedule to Block or Allow Specific Traffic
    • Enabling Source MAC Filtering
    • Setting up IP/MAC Bindings
    • Configuring Port Triggering
    • Using the Intrusion Prevention System
  • Chapter 6 Content Filtering and Optimizing Scans
    • About Content Filtering and Scans
      • Default E-mail and Web Scan Settings
    • Configuring E-mail Protection
      • Customizing E-mail Protocol Scan Settings
      • Customizing E-mail Anti-Virus and Notification Settings
      • E-mail Content Filtering
      • Protecting Against E-mail Spam
        • Setting Up the Whitelist and Blacklist
        • Configuring the Real-time Blacklist
        • By default, the UTM comes with three pre-defined blacklist providers: Dsbl, Spamhaus, and Spamcop. There is no limit to the number of blacklist providers that you can add to the RBL sources.
        • Configuring Distributed Spam Analysis
    • Configuring Web and Services Protection
      • Customizing Web Protocol Scan Settings and Services
      • Configuring Web Malware Scans
      • Configuring Web Content Filtering
      • Configuring Web URL Filtering
      • HTTPS Scan Settings
      • Specifying Trusted Hosts
      • Configuring FTP Scans
    • Setting Web Access Exceptions and Scanning Exclusions
      • Setting Web Access Exception Rules
      • Setting Scanning Exclusions
  • Chapter 7 Virtual Private Networking Using IPsec Connections
    • Considerations for Dual WAN Port Systems (UTM25 Only)
    • Using the IPsec VPN Wizard for Client and Gateway Configurations
      • Creating Gateway-to-Gateway VPN Tunnels with the Wizard
      • Creating a Client to Gateway VPN Tunnel
        • Using the VPN Wizard Configure the Gateway for a Client Tunnel
        • Using the NETGEAR VPN Client Security Policy Editor to Create a Secure Connection
    • Testing the Connections and Viewing Status Information
      • Testing the VPN Connection
      • NETGEAR VPN Client Status and Log Information
      • Viewing the UTM IPsec VPN Connection Status
      • Viewing the UTM IPsec VPN Log
    • Managing IPsec VPN Policies
      • Managing IKE Policies
        • The IKE Policies Screen
        • Manually Adding or Editing an IKE Policy
      • Managing VPN Policies
        • The VPN Policies Screen
        • Manually Adding or Editing a VPN Policy
    • Configuring Extended Authentication (XAUTH)
      • Configuring XAUTH for VPN Clients
      • User Database Configuration
      • RADIUS Client Configuration
    • Assigning IP Addresses to Remote Users (Mode Config)
      • Mode Config Operation
      • Configuring Mode Config Operation on the UTM
      • Configuring the ProSafe VPN Client for Mode Config Operation
      • Testing the Mode Config Connection
    • Configuring Keepalives and Dead Peer Detection
      • Configuring Keepalives
      • Configuring Dead Peer Connection
    • Configuring NetBIOS Bridging with IPsec VPN
  • Chapter 8 Virtual Private Networking Using SSL Connections
    • Understanding the SSL VPN Portal Options
    • Using the SSL VPN Wizard for Client Configurations
      • SSL VPN Wizard Step 1 of 6: Portal Settings
      • SSL VPN Wizard Step 2 of 6: Domain Settings
      • SSL VPN Wizard Step 3 of 6: User Settings
      • SSL VPN Wizard Step 4 of 6: Client IP Address Range and Routes
      • SSL VPN Wizard Step 5 of 6: Port Forwarding
      • SSL VPN Wizard Step 6 of 6: Verify and Save Your Settings
      • Accessing the New SSL Portal Login Screen
      • Viewing the UTM SSL VPN Connection Status
      • Viewing the UTM SSL VPN Log
    • Manually Configuring and Editing SSL Connections
      • Creating the Portal Layout
      • Configuring Domains, Groups, and Users
      • Configuring Applications for Port Forwarding
        • Adding Servers and Port Numbers
        • Adding A New Host Name
      • Configuring the SSL VPN Client
        • Configuring the Client IP Address Range
        • Adding Routes for VPN Tunnel Clients
      • Using Network Resource Objects to Simplify Policies
        • Adding New Network Resources
        • Editing Network Resources to Specify Addresses
      • Configuring User, Group, and Global Policies
        • Viewing Policies
        • Adding a Policy
  • Chapter 9 Managing Users, Authentication, and Certificates
    • Configuring VPN Authentication Domains, Groups, and Users
      • Configuring Domains
      • Configuring Groups for VPN Policies
        • Creating and Deleting Groups
        • Editing Groups
      • Configuring User Accounts
      • Setting User Login Policies
        • Configuring Login Policies
        • Configuring Login Restrictions Based on IP Address
        • Configuring Login Restrictions Based on Web Browser
      • Changing Passwords and Other User Settings
    • Managing Digital Certificates
      • Managing CA Certificates
      • Managing Self Certificates
        • Generating a CSR and Obtaining a Self Certificate from a CA
        • Viewing and Managing Self Certificates
      • Managing the Certificate Revocation List
  • Chapter 10 Network and System Management
    • Performance Management
      • Bandwidth Capacity
      • Features That Reduce Traffic
        • LAN WAN Outbound Rules and DMZ WAN Outbound Rules (Service Blocking)
        • Content Filtering
        • Source MAC Filtering
      • Features That Increase Traffic
        • LAN WAN Inbound Rules and DMZ WAN Inbound Rules (Port Forwarding)
        • Port Triggering
        • Configuring the DMZ Port
        • For the information on how to enable the DMZ port, see “Configuring and Enabling the DMZ Port” on page 4-18. For the procedures on how to configure DMZ traffic rules, see “Setting DMZ WAN Rules” on page 5-14.
        • Configuring Exposed Hosts
        • Configuring VPN Tunnels
      • Using QoS and Bandwidth Assignment to Shift the Traffic Mix
        • Assigning QoS Profiles
      • Monitoring Tools for Traffic Management
    • System Management
      • Changing Passwords and Administrator Settings
      • Configuring Remote Management Access
      • Using an SNMP Manager
      • Managing the Configuration File
        • Backup Settings
        • Restore Settings
        • Reverting to Factory Default Settings
      • Updating the Firmware
        • Viewing the Available Firmware Versions
        • Upgrading the Firmware and Rebooting the UTM
        • Rebooting Without Changing the Firmware
      • Updating the Scan Signatures and Scan Engine Firmware
        • Configuring Automatic Update and Frequency Settings
      • Configuring Date and Time Service
  • Chapter 11 Monitoring System Access and Performance
    • Enabling the WAN Traffic Meter
    • Configuring Logging, Alerts, and Event Notifications
      • Configuring the E-mail Notification Server
      • Configuring and Activating System, E-mail, and Syslog Logs
      • Configuring and Activating Update Failure and Attack Alerts
      • Configuring and Activating Firewall Logs
    • Monitoring Real-Time Traffic, Security, and Statistics
    • Viewing Status Screens
      • Viewing System Status
      • Viewing Active VPN Users
      • Viewing VPN Tunnel Connection Status
      • Viewing Port Triggering Status
      • Viewing the WAN Ports Status
      • Viewing Attached Devices and the DHCP Log
        • Viewing Attached Devices
        • Viewing the DHCP Log
    • Querying Logs and Generating Reports
      • Querying the Logs
        • Example: Using Logs to Identify Infected Clients
        • Log Management
      • Scheduling and Generating Reports
        • Generating Reports
        • Scheduling Reports
    • Using Diagnostics Utilities
      • Using the Network Diagnostic Tools
        • Sending a Ping Packet
        • Tracing a Route
        • Displaying the Routing Table
        • Looking up a DNS Address
      • Using the Realtime Traffic Diagnostics Tool
      • Gathering Important Log Information and Generating a Network Statistics Report
        • Gathering Important Log Information
      • Rebooting and Shutting Down the UTM
  • Chapter 12 Troubleshooting and Using Online Support
    • Basic Functioning
      • Power LED Not On
      • Test LED Never Turns Off
      • LAN or WAN Port LEDs Not On
    • Troubleshooting the Web Management Interface
    • When You Enter a URL or IP Address a Time-out Error Occurs
    • Troubleshooting the ISP Connection
    • Troubleshooting a TCP/IP Network Using a Ping Utility
      • Testing the LAN Path to Your UTM
      • Testing the Path from Your PC to a Remote Device
    • Restoring the Default Configuration and Password
    • Problems with Date and Time
    • Using Online Support
      • Enabling Remote Troubleshooting
      • Sending Suspicious Files to NETGEAR for Analysis
      • Accessing the Knowledge Base and Documentation
  • Appendix A Default Settings and Technical Specifications
  • Appendix B Network Planning for Dual WAN Ports (UTM25 Only)
    • What to Consider Before You Begin
      • Cabling and Computer Hardware Requirements
      • Computer Network Configuration Requirements
      • Internet Configuration Requirements
        • Where Do I Get The Internet Configuration Information?
        • Internet Connection Information
    • Overview of the Planning Process
    • Inbound Traffic
      • Inbound Traffic to a Single WAN Port System
      • Inbound Traffic to a Dual WAN Port System
        • Inbound Traffic: Dual WAN Ports for Improved Reliability
        • Inbound Traffic: Dual WAN Ports for Load Balancing
    • Virtual Private Networks (VPNs)
      • VPN Road Warrior (Client-to-Gateway)
        • VPN Road Warrior: Single Gateway WAN Port (Reference Case)
        • VPN Road Warrior: Dual Gateway WAN Ports for Improved Reliability
        • VPN Road Warrior: Dual Gateway WAN Ports for Load Balancing
      • VPN Gateway-to-Gateway
        • VPN Gateway-to-Gateway: Single Gateway WAN Ports (Reference Case)
        • VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Improved Reliability
        • VPN Gateway-to-Gateway: Dual Gateway WAN Ports for Load Balancing
      • VPN Telecommuter (Client-to-Gateway Through a NAT Router)
        • VPN Telecommuter: Single Gateway WAN Port (Reference Case)
        • VPN Telecommuter: Dual Gateway WAN Ports for Improved Reliability
        • VPN Telecommuter: Dual Gateway WAN Ports for Load Balancing
  • Appendix C System Logs and Error Messages
    • System Log Messages
      • System Startup
      • Reboot
      • Service Logs
      • NTP
      • Login/Logout
      • Firewall Restart
      • IPsec Restart
      • WAN Status
        • Auto-Rollover Mode
        • Load-Balancing Mode
        • PPP Logs
      • Traffic Metering Logs
      • Unicast Logs
        • ICMP Redirect Logs
        • Multicast/Broadcast Logs
      • Invalid Packet Logging
    • Content Filtering and Security Logs
      • Web Filtering and Content Filtering Logs
      • Spam Logs
      • Traffic Logs
      • Virus Logs
      • E-mail Filter Logs
      • IPS Logs
      • Port Scan Logs
      • Instant Messaging/Peer-to-Peer Logs
    • Routing Logs
      • LAN to WAN Logs
      • LAN to DMZ Logs
      • DMZ to WAN Logs
      • WAN to LAN Logs
      • DMZ to LAN Logs
      • WAN to DMZ Logs
  • Appendix D Two Factor Authentication
    • Why do I need Two-Factor Authentication?
      • What are the benefits of Two-Factor Authentication?
      • What is Two-Factor Authentication
    • NETGEAR Two-Factor Authentication Solutions
  • Appendix E Related Documents
  • Index