Netgear ProSecure UTM100 Installation manual

Installation Guide

ProSecure™ Unified Threat Management (UTM) Appliance

Follow these instructions to configure your ProSecure Unified Threat Management appliance to use a single WAN interface, and enable the default threat management scanning. Then, consult the Reference Manual for instructions on configuring other options such as multiple WAN settings, VPN, firewall, and custom scanning. You can access the Reference Manual from the product management interface, via the

Resource CD and from the NETGEAR support site: http://kbserver.netgear.com.

Estimated time: 30 minutes.

Verify the Package Contents

• ProSecure™ UTM appliance.

• Installation Guide.

• Resource CD.

• Rubber feet (4) with adhesive backing.

• Rack mount brackets (some models).

• Power cord.

Familiarize Yourself with the Unit

Familiarize yourself with the ports and status lights on the front of the unit.

1

2

3

1. Green power LED

4. Gigabit LAN ports

4 5 6

2. Amber test LED 3. USB port (for future use)

5. LAN port 4 DMZ identifier 6. Gigabit WAN ports, dual

WAN model shown

Familiarize yourself with the connectors and controls on the back of the unit

.

7

8

7. Kensington lock

9. Factory reset button

9

8. Console port

10. Power connector

Complete the Basic Setup

Follow these steps to quickly setup the UTM appliance.

10

Connect the Unit

For initial setup, connect the WAN Ethernet port to an active WAN connection such as a broadband modern, connect a DHCP enabled PC to a LAN port, and turn on the unit.

Verify the following:

• Power LED: It takes about a minute to boot. The power LED should turn solid green. If it does not, see the Troubleshooting section of the Reference Manual.

• Test LED: When you first turn on the unit, the amber test LED will be lit for approximately 2 minutes.

• WAN Status LED: The status LED on the connected WAN port should be lit. If not, make sure the Ethernet cable is securely attached to the modem and the

WAN port, and that the modem is powered on.

• LAN Status LED: A LAN status LED should be lit. If not, ensure that the Ethernet cable from the computer to the unit is securely attached at both ends, and that the computer is turned on.

Log in to the Unit

1. Use a browser to connect to

https://192.168.1.1.

https://192.168.1.1

2. When prompted, enter admin for the User

Name and password for the Password.

Click Login.

You are now connected. After 5 minutes of inactivity (the default login time-out), you are automatically logged out.

Note: When the unit scans secure HTTPS traffic, import its root CA certificate into client browsers. Click the link at the bottom of the login screen to download it.

Use the Setup Wizard for Basic Configuration

The Setup Wizard will guide you through the basic network and scanning setup.

Note: If you choose to bypass the Setup Wizard, be sure to configure an alerts email address and change the admin password.

1. Start the Setup Wizard.

Select Wizards > SetupWizard to start the wizard.

For guidance on how to fill in the wizard screens, refer to the online help or the Reference

Manual via a link in the

Support > Documentation page.

2. Use the Setup Wizard to configure these basic network and scanning settings:

• LAN and WAN network settings.

• System time (NTP server) and time zone.

• Scanning of network protocols and services.

• Default scan actions when the unit detects threats.

• Scan exceptions like the maximum file size.

• Specify the notification server and notices to be used in email notifications.

• Scan engine and signature updates.

3. Click Apply to save your changes.

The unit will reboot. Your computer will lose its connection to the unit if its IP address is now on a different subnet. If so, restart the computer to refresh its network settings.

Licenses

Your unit is bundled with three 30-day trial licenses.

• Web scanning

• Email scanning

• Support and maintenance

Activating the licenses starts their term of use. Activate the licenses only when you are ready to start using this unit. If your unit has never been registered before you can use the 30 day trial period for all 3 types of licenses to perform initial testing and configuration.

Note: Be sure the unit has Internet access before registering the licenses.

• Activate the trial licenses by selecting Support > Registration and click the

“Trial” button. Once you activate the trial licenses, you can then update the unit with the latest UTM build and signature & engines during the 30-day trial period.

November 2010

• If you purchase a license subscription bundled with your unit, a license will be assigned to your unit’s serial number. When you register your unit, the license key will automatically be downloaded to your unit. Select Support >

Registration, fill out the registration page, and click “Register” to activate the services.

Note: the 30-day trial licenses will be revoked once you activate the purchased service license keys. The purchased service license keys offer one year or three years of service.

For additional information on licenses see the reference manual.

Register and Activate the Licenses

Note: Be sure the unit has Internet access before registering the licenses.

1. Log in to the unit.

2. Select Support > Registration to display the Registration tab.

3. Enter the customer information. If using the trial licenses, click Trial. If you have purchased licenses, click Register. The unit will activate the licenses.

After registration is complete the unit will display the license keys and their expiration dates.

Online Documentation and Support

Select Support > Documentation to view the reference manual.

Select Support > Knowledge Base to view the support page, which includes this document and the reference manual. Going to

http://www.netgear.com/support and selecting your product model number takes you to the same page.

Consult the reference manual for instructions on how to use the online support remote diagnostics.

Technical Support

Thank you for selecting NETGEAR products.

After installing your device, locate the serial number on the label of your product and use it to register your product at http://www.NETGEAR.com/register . Registration is required before you can use the telephone support service. Registration via our website is strongly recommended.

Go to http://kbserver.netgear.com for product updates and Web support .

For additional information about setting up, configuring, and using your Product

Name Only, see the User Manual .

For complete DoC please visit the NETGEAR EU Declarations of Conformity website at: http://kb.netgear.com/app/answers/detail/a_id/11621/

This symbol was placed in accordance with the European Union Directive 2002/96 on the Waste

Electrical and Electronic Equipment (the WEEE Directive). If disposed of within the European Union, this product should be treated and recycled in accordance with the laws of your jurisdiction implementing the WEEE Directive.

©2010 by NETGEAR, Inc. All rights reserved. NETGEAR and the NETGEAR logo are registered trademarks of

NETGEAR, Inc. in the United States and/or other countries. Other brand and product names are trademarks or registered trademarks of their respective holders. Information is subject to change without notice.