Netgear FVS318G Data Sheet [zh]

ProSAFE® VPN Firewall Series Data Sheet



FVS318G, FVS318N, FVS336G and SRX5308

Essential Business-class Network Protection

NETGEAR® ProSAFE® business-class VPN Firewalls are high performing
routers that deliver Stateful Packet Inspection (SPI), Virtual Private Network
(VPN), Network Address Translation (NAT), AES and 3DES Encryption,
Denial of Service (DoS) protection and provide full secure network access
between headquarter locations, remote/branch oces and remote workers.
This makes it the ideal solution to provide businesses with the essential
network security needed to stop unwanted intrusions.

Highlights

Secure

NETGEAR ProSAFE VPN Firewalls provide both secure IPsec site-to-site tunnels and IPsec secure access for

remote clients and also support client-less SSL VPN as well as secure L2TP and PPTP connections. Employing
a true SPI firewall with customizable firewall rules, this VPN router is a high-performance, SNMP-manageable,
network solution that furnishes multidimensional security including denial-of-service (DoS) protection, stateful
packet inspection (SPI), URL keyword filtering, logging, reporting, and real-time alerts.

Flexible

ProSAFE VPN Firewalls work perfectly with ISP modems, including cable or DSL broadband connections.

Wireless-N connectivity1 and Gigabit LAN/WAN ports keep your data moving at top speed and a configurable
DMZ port allows for flexible server deployment. With Network Address Translation (NAT) routing and classical
routing, all the users in your small oce can access your broadband connection at the same time. VLAN support
allows for guest networks plus better network segmentation and IPv6 support will enable you to future proof
your network.

Reliable

Models with multiple WAN ports can operate in either a load-balancing or fail-over configuration. The load-

balancing configuration enables maximum throughput by utilizing WAN connections to distribute trac across
two broadband connections, possibly with dierent ISP providers. Alternatively, a second WAN port may be
configured as a failover connection in case the primary connection fails, for another method of providing high
reliability.

The rugged metal unit houses advanced, high-quality electronics, and is backed by the industry-best ProSAFE

Lifetime Hardware Warranty*, Lifetime Technical Support*, and Lifetime Next Business Day Replacement*.











1

On Supported Models

Page 1 of 5

ProSAFE® VPN Firewall Series Data Sheet

FVS318G, FVS318N, FVS336G and SRX5308

Features and Benefits

Hardware Accelerated Network Processor

• High Performance LAN-to-WAN throughput
for today’s and tomorrow’s broadband speeds

Essential Business Networking Features

• IPv4/IPv6 Support

• 802.1Q VLAN

• QoS

• NAT and Classical Routing

• SIP ALG, VPN Passthrough

Secure Firewall

• Stateful Packet Inspection (SPI)

• DoS attack protection

• Block TCP/UDP packet floods

• Port/service blocking

• Hardware DMZ port

• MAC Address filter

• Web object and keyword blocking

Secure VPN Remote Access

• SSL VPN – clientless remote access,
anywhere, anytime

• IPsec VPN – secure site-to-site tunnels and
client-based remote access

• Industry-strength encryption algorithms

• IKE authentication protects against
unauthorized remote access

• L2TP and PPTP Server

1

Bandwidth Management

• Control end user bandwidth consumption with
Bandwidth Profiles

• Prioritize trac with Quality of Service (QoS)

• WAN Trac Metering

Dual or Quad WAN Ports1

• Connect multiple broadband connections
simultaneously

• 2 modes of session-based WAN load balancing

• WAN failover for maximum uptime

Easy to use

• Auto Detect connects to your ISP quickly

• DHCP (client and server) for fast deployment

• Intuitive Web management GUI

• IPsec VPN Wizard allows for easy VPN setup

• SNMP, telnet management support

• SYSLOG and emailed logs enable thorough
network monitoring

Reliable NETGEAR Hardware

• Industry-grade metal casing

• High-quality electronics

• Lifetime Hardware Warranty

• Lifetime Technical Support

• Lifetime Next Business Day Replacement

Internet

Laptops, Smartphones,
Tablets Connect via WiFi

Key
VLAN 1
VLAN 2

ProSAFE Gigabit VPN Firewall

Broadband Modem

ProSAFE 24-port Gigabit
Plus Switch (JGS524E)

ReadyNAS 314

Desktop PC

ProSAFE 8-port Gigabit Plus Switch
w/ 4 port PoE
(GS108PE)

ProSAFE Single Band

802.11n Wireless Access Point
(WN203)

IP Phone

ProSAFE VPN Firewall Deployment Diagram

1

On Supported Models

Page 2 of 5

ProSAFE® VPN Firewall Series Data Sheet

FVS318G, FVS318N, FVS336G and SRX5308

Technical Specifications

VPN FIREWALL FAMILY MATRIX

Model FVS318G-200 FVS318N-100 FVS336G-300 SRX5308-100

CONNECTIVITY

Gigabit Ports WAN/LAN 1/8 1/8 2/4 4/4

DMZ Interfaces (Configurable) 1 1 1 1

Wireless - b/g/n - -

IPv6 Support Yes Yes Yes Yes

PERFORMANCE

LAN-to-WAN Throughput

IPsec VPN (3DES) Throughput

SSL VPN Throughput

Maximum Concurrent Connections 6,000 6,000 10,000 200,000

Maximum Number of VLANs 254 254 254 254

Dedicated IPsec VPN Tunnels 12 12 25 125

Dedicated SSL VPN Tunnels - 5 10 75

SECURITY

Firewall Functions Stateful Packet Inspection (SPI), Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode,

Content Filtering (HTTP Only) Web Components (Proxy, Java, ActiveX, Cookies), Web Keyword Blocking, Trusted Domains

User Authentication for VPN Active Directory, LDAP, Radius, WIKID, MIAS, NT Domain, Local User Database

PCI Compliance Two Factor
Authentication Support

VoIP SIP ALG Compatibility List

VPN Pass Through IPsec, PPTP, L2TP

NETWORKING

WAN Modes NAT, Classical Routing

ISP Address Assignment DHCP, Static IP Assignment, PPPoE, PPTP

NAT Modes 1-1, NAT, PAT

Routing Static, Dynamic, RIPv1, RIPv2

IPv6 Support Yes

DHCP DHCP Server, DHCP Relay, DNS Proxy

DDNS DynDNS.org, TZO.com, Oray.net, 3322.org

VLANs 802.1Q

2

2

2

250Mbps 250Mbps 350Mbps 924Mbps

30Mbps 30Mbps 78Mbps 180Mbps

- 5Mbps 14Mbps 21Mbps

Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control

Yes

Linksys SPA-901, Linksys SPA-941, SNOM M3, Cisco 7940G, X-Lite 3.0 (soware for phones), D-Link

DPH-140S, Grandstream GXP-2000, Polycom SoundStation 6000, Siemens C450, Aastra 51i

WAN Fail-over -

WAN Load Balancing Modes - - Weighted Load Balancing, Round Robin

Page 3 of 5

-

Yes

ProSAFE® VPN Firewall Series Data Sheet

FVS318G, FVS318N, FVS336G and SRX5308

Technical Specifications

Model FVS318G-200 FVS318N-100 FVS336G-300 SRX5308-100

Essential Networking Features

VPN

IPsec Encryption/Authentication 56-bit DES, 168-bit 3DES, AES(128, 192, 256 bit)/SHA-1, MD5

Key Exchange IKE, Manual Key, Pre-shared Key, PKI, X.509 v3

IPsec NAT Traversal

IPsec Access Modes Client-to-site, Site-to-site

IPsec VPN Wizard Yes

Included ProSAFE VPN Client
Lite Soware Licenses

SSL Version Support - SSLv3, TLS1.0

SSL Encryption Support - DES, 3DES, ARC4, AES(ECB, CBC, XCBC, CNTR)128, 256 bit

SSL Message Integrity - MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1

SSL Certificate Support - RSA, Die-Hellman, Self

SSL VPN Platforms Supported -

L2TP Server Yes

PPTP Server - - Yes Yes

MANAGEMENT

Management Interface Options HTTP/HTTPS, SNMP v2c, Telnet

Logging Accepted Packets, Dropped Packets, System, Source MAC filter, Session Limit, Bandwidth Limit, IPsec VPN

Log Delivery Email Delivery, Syslog

Diagnostics Ping, DNS Lookup, Trace Route

Maintenance Save/restore Configuration, Restore to Factory Defaults, Firmware Upgrades via Web Browser, Display Statistics

HARDWARE

Processor Speed 300MHz 300MHz 500MHz 500MHz

Flash Memory/RAM 32MB/128MB 32MB/128MB 32MB/128MB 64MB/512MB

Certifications VPNC (Basic, AES Interop), ICSA Firewall

Major Regulatory Compliance

Temperatures Operating Temperature:

(VPN Passthrough) Yes

Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, NTP Support, UPnP, Auto­Uplink on Switch Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN(ToS), Bandwidth Profiling

1 1 1 5

Windows 7 32bit – IE 9/IE10, Windows 7 64bit - IE9, Windows 8 (32bit,

64bit) - IE10, MAC OS X 10.6+ - Firefox 27, Safari 5.1.7, Ubuntu – Firefox 12

Environment:

RoHS, China RoHS

Safety: CE/LVD, cUL

EMI: FCC Part 15 Class

A, CE mark commercial,

Class A, CCC

0˚ - 45˚C (32˚-113˚ F)

Storage Temperature:

-20˚ – 70˚ C

(-4˚ – 158˚ F)

Environment:

RoHS, China RoHS

Safety: CE/LVD, cUL

EMI: FCC Part 15 Class

A, CE mark commercial,

C-Tick Class A,

Operating Temperature:

0˚ - 45˚C (32˚-113˚ F)

Storage Temperature:

-20˚ – 70˚ C

(-4˚ – 158˚ F)

Environment:

RoHS, China RoHS

Safety: CE/LVD, cUL

EMI: FCC Part 15 Class

A, CE mark commercial,

RCM Class A, KC

Operating Temperature:

0˚ - 40˚C (32˚-104˚ F)

Storage Temperature:

-20˚ – 70˚ C

(-4˚ – 158˚ F)

Environment:

RoHS, China RoHS

Safety: CE/LVD, cUL

EMI: FCC Part 15 Class

A, CE mark commercial,

C-Tick Class A, VCCI

Operating Temperature:

0˚ - 45˚C (32˚-113˚ F)

Storage Temperature:

-20˚ – 70˚ C

(-4˚ – 158˚ F)

Page 4 of 5

ProSAFE® VPN Firewall Series Data Sheet

FVS318G, FVS318N, FVS336G and SRX5308

Technical Specifications

Model FVS318G-200 FVS318N-100 FVS336G-300 SRX5308-100

Humidity Operating humidity 90% maximum relative humidity, non-condensing

Storage humidity 95% maximum relative humidity, non-condensing

AC 100-240V,

50/60Hz Universal

Input, DC 5V/5A Output

Internal Power Supply

ProSAFE Quad WAN

Gigabit VPN

Firewall (SRX5308)

Ethernet cable

Install guide

Resource CD

Warranty card

5 ProSAFE VPN Client

Lite licenses

Electrical Specifications

Power adapter: 12V DC,

1.5A -plug is localized
to country of sale

Power adapter: 12V DC,

1.5A -plug is localized
to country of sale

Power adapter: 12V DC,

1.2A -plug is localized
to country of sale

Dimensions (W x D x H) cm 19 x 12.5 x 3.5 19 x 12.5 x 3.5 25.4 x 17.8 x 3.96 33 x 20.9 x 4.3

Dimensions (W x D x H) in 7.5 x 4.9 x 1.4 7.5 x 4.9 x 1.4 10 x 7 x 1.56 13 x 8.2 x 1.7

Weight kg/lb 0.59/1.3 0.59/1.3 1.7/3.7 2.1/4.6

System Requirements

Package Contents

Cable or DSL Broadband Modem, Internet Service, Windows/OSX/Linux/iOS/Android Client Device,

Internet Explorer/Firefox/Chrome/Safari Web Browser

ProSAFE 8-port

Gigabit VPN

Firewall (FVS318G)

Ethernet cable

Power adapter

Install guide

Resource CD

Warranty card

1 ProSAFE VPN Client

Lite license

ProSAFE Wireless-N

8-port Gigabit VPN
Firewall (FVS318N)

Ethernet cable

Power adapter

Install guide

Resource CD

Warranty card

1 ProSAFE VPN Client

Lite license

ProSAFE Dual WAN

Gigabit VPN

Firewall (FVS336G)

Ethernet cable

Install guide

Resource CD

Warranty card

1 ProSAFE VPN Client

Lite license

Hardware Warranty* Lifetime

Power Adapter Warranty 3 Years n/a

Technical Support* Lifetime

Next Business Day Replacement Lifetime

ORDERING INFORMATION

North America FVS318G-200NAS FVS318N-100NAS FVS336G-300NAS SRX5308-100NAS

Europe FVS318G -200EUS FVS318N-100EUS FVS336G -300EUS SRX5308-100EUS

Asia FVS336G -300AUS

ACCESSORIES

ProSAFE VPN Client
Professional Soware

1

On Supported Models

2

Actual performance may vary depending on network trac and environment.

VPNG01L-20000S (1-User), VPNG05L-20000S (5-User)

* This product comes with a limited warranty that is valid only if purchased from a NETGEAR authorized reseller, and modifications to product may void the warranty; covers hardware, fans,
and internal power supplies—not soware or external power supplies; see http://www.netgear.com/about/warranty/ for details. Lifetime technical support includes basic phone support for
90 days from purchase date and lifetime online chat support when purchased from a NETGEAR authorized reseller.

NETGEAR, the NETGEAR Logo and ProSAFE are trademarks of NETGEAR, Inc. in the United States and/or other countries. Other brand names mentioned herein are for identification purposes only
and may be trademarks of their respective holder(s). Information is subject to change without notice. © 2015 NETGEAR, Inc. All rights reserved.

NETGEAR, Inc. 350 E. Plumeria Drive, San Jose, CA 95134-1911 USA, 1-888-NETGEAR (638-4327), E-mail: info@NE TGEAR .com, ww w.NETGE AR.com

DS-ProSAFE VPN Firewall Series-4

Page 5 of 5