FVX538

ProSafe™ VPN Firewall 200

with 8-port 10/100 and 1 Gigabit

LAN and Dual WAN Port Switch

• Help is there when you need it!

NETGEAR provides 24x7 technical support* in English, with selected local language support during office hours.

Richer Security

Capacity To Spare

Superior Value and

Usability

High Performance, Manageable Dual WAN Security Firewall

At the heart of your office network, NETGEAR's high performance security appliance, ProSafe™ VPN

Firewall 200 offers a complete security solution for small and medium sized companies. This rackmountable, Stateful Packet Inspection (SPI) firewall is equipped with support for up to 200 security associations (VPN tunnels). The FVX538 can serve as a DHCP Server, supports Simple Network

Management Protocol (SNMP), Quality of Service (QoS) and has a powerful SPI firewall to protect your PCs against intruders and most common Internet attacks. With support for Trend Micro anti-virus policy enforcement functionality, the FVX538 ships with a 60 day evaluation copy of

Trend Micro ™ Client/Server Suite for SMB and Trend Micro Client/Server/Messaging Suite for SMB for customers without current licenses. Designed with small businesses in mind, the Trend Micro CS and CSM combine workstation and server virus protection (including Trojans, worms, and hackers, plus spyware, grayware, and blended threats) into a single solution, empowering small business owners to deploy and manage an effective antivirus strategy with limited IT investment.

Featuring eight auto-sensing 10/100 Mbps LAN ports, one Gigabit LAN port and two 10/100

WAN ports, the ProSafe VPN Firewall FVX538 lets multiple computers in your office share two

Internet connections. The dual WAN ports let you connect a second Internet line as a backup to insure that you're never disconnected. One LAN port can be dedicated as a hardware DMZ port for safely providing services to the Internet without compromising security on your LAN.

This powerful VPN Firewall extends security from the network core to the perimeter by preventing unauthorized network access using a SPI firewall, blocking denial of service (DoS) and other attacks, encrypting traffic traveling across the Internet and added support for anti-virus and anti-spam policy enforcement.

Dual WAN ports support two broadband connections. A second WAN port supports an additional broadband connection. This second WAN connection may be configured as a failover connection in case the primary connection fails or can be used to balance the workload by distributing traffic across the two connections for optimal per user bandwidth.

Competitively priced and SNMP manageable, convenient VPN Wizard gathers basic information about your networks and recommends a VPN solution with supporting instructions. Bundled with

NETGEAR's ProSafe VPN client software (VPN05L) — a five user license is included. Virtual

Private Network Consortium (VPNC) certified VPN supports secure data connectivity and transmission over the Internet and ensures interoperability with many other popular security products.

Broadband modem

Internet

Broadband modem

Laptop PC with NETGEAR

ProSafe VPN Client Software

VPN01L

FVX538 ProSafe VPN firewall 200

GSM7348 ProSafe 48-port

Gigabit L3 Managed Switch

Desktop PCs with FA311 network card installed Workstation with

GA311 Gigabit

PCI Adapter

Servers with

GA311 Gigabit PCI Adapter

WAG302 ProSafe

Dual Band Wireless

Access Point

Everybody ’s connecting.™

NMS100 ProSafe Network Management System

Software CD

Version 1.0

Instructions:

This CD should automatically run when inserted into your

CD-ROM drive. If the CD does not start automatically, browse to the CD drive and click on NMSsetup.exe

© 2004 NETGEAR, INC.

ALL RIGHTS RESERVED

© 2004 NETGEAR, Inc.

240-10129-01

Desktop PC with GA311

NMS100 ProSafe Network

Management Software

FVX538 ProSafe™ VPN Firewall 200

NETGEAR Related Products

• Accessories:

- VPN01L and VPN05L

ProSafe VPN Client Software

- NMS100 ProSafe Network

Management Software

• VPN Firewalls:

- FVS124G ProSafe Gigabit

VPN Firewall 25

- FVS338 ProSafe VPN

Firewall 50

- FVL328 ProSafe VPN

Firewall 100

• Wireless:

- WAG302 ProSafe Dual Band

Access Point

- WG302 ProSafe 802.11g

Access Point

VPNC

CERTIFIED

AES

Interop

4500 Great America Parkway

Santa Clara, CA 95054 USA

Phone: 1-888-NETGEAR

E-mail: [email protected]

www.NETGEAR.com

©2006 NETGEAR, Inc. NETGEAR, the

NETGEAR logo, Connect with Innovation,

Everybody’s connecting, the Gear Guy logo,

IntelliFi, ProSafe, RangeMax and Smart

Wizard are trademarks or registered trademarks of NETGEAR, Inc. in the United

States and/or other countries. Microsoft and

Windows are trademarks or registered trademarks of Microsoft Corporation in the

United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice. All rights reserved.

Maximum wireless signal rate derived from IEEE Standard 802.11 specifications.

Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.

This product has been tested for quality assurance and this product or its components may have been recycled.

* Free basic installation support provided for 90 days from date of purchase.

Advanced product features and configurations are not included in free basic installation support; optional premium support available.

D-FVX538-01

• Switches:

- GSM7348 ProSafe 48 Port Gigabit L3 Managed

Switch

- GSM7324 ProSafe 24 Port Gigabit L3 Managed

Switch

- GSM7312 ProSafe 12 Port Gigabit L3 Managed

Switch

Physical Interfaces

- LAN ports: Eight (8) 10/100 Mbps auto-sensing,

Auto-Uplink ™ RJ-45 ports; one (1) Gigabit

10/100/1000 Mbps LAN port; one LAN port can be dedicated hardware DMZ port

- WAN port: Two 10/100Mbps Ethernet RJ-45 ports with auto fail-over and load balancing

- Serial Port: One console port for command line interface (CLI) support

• Security Features:

- SPI Firewall: Stateful Packet Inspection (SPI) to prevent notorious Denial of Service (DoS) attacks,

Intrusion Detection System (IDS) including logging, reporting and e-mail alerts, address, service and protocol, Web URL keyword filtering, prevent replay attack (reassembly attack), port/service blocking. Advanced features include block Java/URL/

ActiveX based on extension, FTP/SMTP/RPC program filtering

- VPN Functionality: Two hundred (200) dedicated

VPN tunnels, Manual key and Internet Key

Exchange Security Association (IKE SA) assignment with pre-shared key and RSA/DSA signatures, key life and IKE lifetime time settings, perfect forward secrecy (Diffie-Hellman groups 1 and 2 and Oakley support), operating modes (Main, Aggressive,

Quick), fully qualified domain name (FQDN) support for dynamic IP address VPN connections.

- IPSec Support: IPSec-based 56-bit (DES), 168-bit

(3DES), or 256-bit (AES) encryption algorithm,

MD5 or SHA-1 hashing algorithm, AH/AH-ESP support, PKI features with X.509 v.3 certificate support, remote access VPN (client-to-site), site-to-site

VPN, IPSec NAT traversal (VPN pass-through)

- Mode of Operation: One-to-one/many-to-one

Multi-Network Address Translation (NAT), classical routing, unrestricted users per port

- IP Address Assignment: Static IP address assignment, internal DHCP server on LAN, DHCP client on WAN, PPPoE client support

• Performance Features:

- Throughput: Up to 90 Mbps WAN-to-LAN and

100 Mbps 3DES throughput

• Management Features:

- Administration Interface: SNMP (v.2c) support,

Telnet, web graphic user interface, Secure Sockets

Layer (SSL) remote management, user name and password protected; secure remote management support authenticated through IP address or IP address range and password; configuration changes/upgrades through web GUI.

- Configuration and Upgrades: Upload and down load configuration settings, firmware upgradeable flash memory

- Logging: SYSLOG, e-mail alerts

• Functions:

VPN Wizard to simplify configuration of the VPN,

Smart Wizard to automatically detect ISP Address type (static, dynamic, PPPoE), Port Range Forwarding, Port

Triggering, Exposed Host (DMZ), Hardware DMZ,

Enable/Disable WAN Ping, DNS Proxy, MAC Address cloning/spoofing, Network Time Protocol NTP support,

Keyword Content Filtering, email Alerts, DHCP Server

(Info and display table), PPPoE login client support, WAN

DHCP Client, Diagnostic tools (ping, trace route, other),

Port/service, Auto-Uplink on switch ports and Quality of

Service (QoS).

• Protocol Support:

- Network: IP routing, TCP/IP, UDP, ICMP, PPPoE

- IP Addressing: DHCP (client and server)

- Routing: RIP v1, RIPv2 (Static Routing, Dynamic Routing)

- VPN/Security: IPSec (ESP, AH), MD5, SHA-1, DES,

3DES, IKE, PKI, AES

• User Support:

- LAN: Up to 253 users

• Maintenance:

Save/Restore Configuration, Restore Defaults, Upgrades via

Web Browser, Display Statistics, Logging, SYSLOG support

• Hardware Specifications:

- Processor: 533 MHz Intel XScale IXP425

- Memory: 32MB Flash, 64MB DRAM

- Encryption Accelerator: Cavium Processor with 60+

Mbps (3DES+SHA-1) encryption

- Power requirements: 100-240VAC, 50-60Hz-

Dimensions: 33 x 20.3 x 4.4 cm. (13 x 8 x 1.75 in.)

- Weight: 4.42 lbs (2.01 kg)

• Environmental Specifications:

- Operating temperature: 0 to 40ºC (32 to 104ºF)

- Operating humidity: 90% maximum relative humidity, non-condensing

• Warranty:

- NETGEAR 3 year warranty

System Requirements

- Cable, DSL or wireless broadband modem and

Internet service

- Ethernet connectivity from broadband modem

- Network card for each connected PC

- Network software (e.g. Windows)

- Internet Explorer 5.0 or higher or Netscape Navigator 4.7

or higher

Package Contents

- FVX538 ProSafe VPN Firewall 200

- Ethernet cable

- Rack mount kit

- Installation guide

- Resource CD with five user license of ProSafe VPN Client

Software and 60 trial of Trend Micro SMB suite software

- Warranty/Support information card