Installation Guide

ProSecure™ Web/Email Security Threat Management Appliance STM150

Start Here

Follow these instructions for setting up a gateway configuration where a single

STM150 is installed between your firewall and the LAN core switch.

After completing these installation steps, your network will resemble this illustration.

For server group or segmented

LAN configurations, refer to the

Reference Manual .

You can download the

Reference Manual from the documentation link in the Web Support page of the product user interface or from the ProSecure site at: http://prosecure.netgear.com/resources/document-library.php

Before you begin, ensure you have the IP configuration parameters of your network

(available reserved IP address, subnet range, gateway, and DNS addresses).

Estimated completion time: 25 minutes.

Verify the Package Contents

Unpack the box and verify the contents:

• ProSecure Web/Email Security Threat Management Appliance STM150

• Depending on the model purchased, license registration card

• Rubber feet (4) with adhesive backing

• Rack mount brackets hardware

• Power cord

• Straight through Category 5 Ethernet Cable

• Installation Guide

Familiarize Yourself with the STM150

Take note of the connectors, status lights, and controls on the front and back of the unit.

1

2

3

1.

Power . Green power LED.

2.

Test .

Amber test LED.

3.

NETGEAR Diagnostic USB ports.

4.

UPLINK Gigabit Ethernet port.

5.

Four DOWNLINK Gigabit Ethernet ports.

4 5

6 7 8 9 10

6.

Serial console port.

7.

Kensington lock connector to prevent unauthorized removal of the unit

.

8.

Power button - press once for normal shut down; press and hold for forced shutdown.

9.

Recessed pin-push back to factory default reset button.

10. Power connector.

Connect the STM150 to Your Network

1. Power on the STM150 by plugging in the power cable and connecting it to the power connector on the rear of the unit. Verify the following:

• Power. The power LED (1) should turn solid green. If it does not turn solid green, see the Troubleshooting section in the Reference Manual .

• Test.

Initially, the amber test LED (2) will be lit for approximately 2 minutes. If it is still on after 2 minutes, see the Troubleshooting Tips.

2. Connect the UPLINK Ethernet port (4) to your gateway firewall.

3. Use the Ethernet port LEDs to verify the status and speed of the connection, according to the legend printed on the front of the unit.

4. Connect a computer to the STM150 a.

The STM150 factory default IP address is 192.168.1.201. Configure a computer with a static IP address such as 192.168.1.111. b.

Connect this computer to one of the DOWNLINK Ethernet ports (5). c.

Use the Ethernet port LEDs to verify the status and speed of the connection, according to the legend printed on the front of the unit.

Configure the STM150 Network Settings

1. Log in to the STM150 a.

Use a browser to connect to https://192.168.1.201

.

https://192.168.1.201

b.

When prompted, enter admin for the User Name and password for the Password. c.

Click Login. You are now connected. The default Status screen displays.

The Web Support tab on the main menu contains links to the online ProSecure STM150 product documentation and support knowledgebase.

Note : After 5 minutes of inactivity (the default login time-out), you are automatically logged out.

2. Configure the Network Settings a.

Select Global Settings > Network

Settings. The Network Settings tab displays.

b.

Fill in the settings, according to the configuration requirements of your network. Be sure to record the IP address you assign the STM150; you will need it in the future when you log in to this unit. For now, ignore the speed and MTU settings.

Note : If your network uses DHCP, be sure to reserve this IP address for the

STM150 in your DHCP server or gateway firewall.

c.

Click Apply to save your changes.

The STM150 will reboot. Your computer will loose its connection to the unit if its IP address is now on a different subnet than the STM150. If so, re-configure the computer to match the settings of your network.

Activate the Service Licenses

Note : Activating the service licenses initiates their term of use. Activate the licenses only when you are ready to start using this unit.

1. If your STM150 included a license key card, refer to it

Be sure to store the license key card in a secure location. Not only will you need these keys to activate your product during the initial setup, but also to reactivate the licenses if you ever have to reset the unit back to its factory defaults.

If you did not get a license key card, have your license keys available.

2. Register the licenses.

Note : Be sure the unit has

Internet access before registering the licenses.

a.

Log in to the unit. b.

Select Support >

Registration to display the

Registration tab.

c.

Enter the first registration key and customer information. Then, click Register .

d.

Repeat this step for the remaining keys. The STM150 will activate the licenses and register the unit with the ProSecure support server.

Run the Setup Wizard

1. Start the Setup Wizard.

Select Global Settings > Setup

Wizard to start the wizard.

For guidance on how to fill in the wizard screens, refer to the online help or Reference Manual .

2. Configure the Web/Email Threat

Management settings.

Follow the wizard prompts to configure these settings:

• Network settings - update these as needed.

• Define internal domains for scan policies on various types of traffic.

• Set the system time (NTP server) and time zone.

• Enable scanning of network protocols.

• Define default scan actions when the unit detects threats.

• Define scan exceptions like the maximum file size.

• Specify the notification server and notices for email notices.

• Configure web interface security (inactivity time-out and ACL members).

• Specify how firmware updates will be made.

• Enter HTTP proxy settings.

• Select web categories to block.

Online Documentation and Support

Select Support > Documentation to view the STM150 reference manual.

Select Support > Knowledge Base to view the STM150 support page, which includes this document and the reference manual. Going to http://www.netgear.com/support and selecting STM150 takes you to the same page.

Technical Support

Thank you for selecting ProSecure products.

After configuring your Web/Email Security Threat Management Appliance , locate the serial number on the bottom label of your product and use it to register your product at http://www.netgear.com/register . Registration on the web site is required before you can use our telephone support service.

The phone numbers for worldwide regional customer support centers are on the Warranty and Support Information card that came with your product.

Go to http://prosecure.netgear.com/support for product updates and web support.

This symbol was placed in accordance with the European Union Directive 2002/96 on the Waste

Electrical and Electronic Equipment (the WEEE Directive). If disposed of within the European Union, this product should be treated and recycled in accordance with the laws of your jurisdiction implementing the WEEE Directive.

© 2009 by NETGEAR, Inc. All rights reserved. NETGEAR and the NETGEAR logo are registered trademarks of NETGEAR, Inc. in the United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice.

December 2009