Netgear FVS328 참조 매뉴얼
Model FVS328 ProSafe VPN Firewall with Dial Back-up Reference Manual
2-2
Introduction
May 2004, 202-10031-01
•
Remote Access Server (RAS) allows you to log in remotely through the serial port to access a
server on your LAN, other LAN resources, or the Internet based on a user name and password
you define.
server on your LAN, other LAN resources, or the Internet based on a user name and password
you define.
•
LAN-to-LAN access between two FVS328 firewalls through the serial port with the option of
enabling auto-failover Internet access across the serial LAN-to-LAN connection.
enabling auto-failover Internet access across the serial LAN-to-LAN connection.
Virtual Private Networking
The FVS328 Firewall provides a secure encrypted connection between your local network and
remote networks or clients. Its VPN features include:
remote networks or clients. Its VPN features include:
•
Support for up to 50 simultaneous VPN connections.
•
Support for industry standard VPN protocols.
The FVS328 ProSafe VPN Firewall with Dial Back-up supports standard keying methods
(Manual or IKE), standard authentication methods (MD5 and SHA-1), and standard
encryption methods (DES, 3DES). It is compatible with many other VPN products.
(Manual or IKE), standard authentication methods (MD5 and SHA-1), and standard
encryption methods (DES, 3DES). It is compatible with many other VPN products.
•
Support for up to 168 bit encryption (3DES) for maximum security.
•
Support for VPN Main Mode, Aggressive mode, or Manual Keying.
•
Support for Fully Qualified Domain Name (FQDN) configuration when the Dynamic DNS
feature is enabled with one of the supported service providers.
feature is enabled with one of the supported service providers.
A Powerful, True Firewall
Unlike simple Internet sharing NAT routers, the FVS328 is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
inspection to defend against hacker attacks. Its firewall features include:
•
DoS protection
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack and IP Spoofing.
Attack and IP Spoofing.
•
Blocks unwanted traffic from the Internet to your LAN.
•
Blocks access from your LAN to Internet locations or services that you specify as off-limits.
•
Logs security incidents
The FVS328 will log security events such as blocked incoming traffic, port scans, attacks, and
administrator logins. You can configure the firewall to e-mail the log to you at specified
intervals. You can also configure the firewall to send immediate alert messages to your e-mail
address or e-mail pager whenever a significant event occurs.
administrator logins. You can configure the firewall to e-mail the log to you at specified
intervals. You can also configure the firewall to send immediate alert messages to your e-mail
address or e-mail pager whenever a significant event occurs.