Netgear UTM10 Data Sheet

ProSECURE® Unified Threat Management Firewall Data Sheet

Unified Gateway Security for Smart IT Networks —Without Compromise

The NETGEAR® ProSECURE® UTM series of all-in-one next-generation firewalls combine an
advanced application firewall with best-of-breed enterprise-strength security technologies
such as anti-virus, anti-spam, Web filtering, and intrusion prevention (IPS) to protect
businesses against today’s application, Web, email, and network threats. This gives business
owners and IT admins greater visibility and control over their network and protects their
businesses from threats that would otherwise bypass traditional firewalls.

Redefining the Firewall

Traditional firewalls can only block/accept trac based on IP addresses and ports. This approach is quickly becoming obsolete in today’s Internet where
many applications send/receive trac over ports that are typically allowed by traditional firewalls. The built-in application firewall of the ProSECURE UTM
overcomes the limitations of yesterday’s firewall and allows the UTM to monitor, control, and block hundreds of applications such as Skype, Facebook,
BitTorrent®, and Yahoo! Messenger; helping enhance employee productivity and enforce network usage policies. The UTM application firewall combined
with an array of advanced network security technologies form the ideal firewall for today’s businesses.

Advanced Cloud-based Virus Protection

ProSECURE UTM firewalls feature a next-generation cloud-based anti-virus engine with dual layer virus protection. It uses up-to-date information from
a global network of threat analysis centers along with the power of cloud look-ups and delivers eective protection against threats for multiple types of
trac with minimal impact on system resources. With over 45 million signatures in the cloud, this virus engine will allow the UTM to scale with today’s
exponentially increasing virus and malware threats.

Page 1 of 6

ProSECURE® Unified Threat Management Firewall Data Sheet

Revolutionary Stream Scanning Platform

Protecting latency sensitive Web trac has oen been a very dicult task using traditional anti-virus scanning methods and can slow network
trac to a crawl. ProSECURE UTMs feature patented Stream Scanning which analyses data streams as they enter the network. This significantly
reduces latency and in conjunction with a cloud-based anti-virus engine with over 45 million signatures, oers an unprecedented combination of
speed and coverage.

Traditional Batch-based Scanning Stream Scanning

Receive

Scan

Output

Latency

Time

Receive

Scan

Output

Latency

Time

Simple Setup, Ease of Management

The ProSECURE UTM will easily replace any existing firewall or router. A simple 10-step setup wizard guides you through installation and the UTM will
be up and running in minutes. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary
statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools using SNMP.
Malware and IPS signature, soware, and firmware updates are all handled by the UTM - online and automatically.

ProSECURE UTM Features and Highlights

Advanced Application Control Firewall

•Monitors and controls up to 1200 applications

•Granular per-application policies

•Preserve productivity and save bandwidth

Next-gen Cloud-based Anti-virus

•Revolutionary dual layer cloud-based virus
protection

•Scales with exponentially growing malware
threats with over 45 million malware signatures

•Blocks known malware sites

Patented Stream Scanning*

•Data streams are processed as they enter the
network

•Low latency Web trac scanning

Distributed Spam Analysis Anti-spam

•Cloud-based spam detection

•Gathers threat data from over 50 million

global sources

•New spam is classified and detected within
minutes

Distributed Web Analysis URL Filtering

•Hybrid in-the-cloud architecture

•Hundreds of millions of categorized URLs

•Real-time classification, 64 categories

•Per User & Group filtering policies

Virtually Limitless Logging, Reporting and
Quarantine Capability

• Integrate and store logs on NETGEAR ReadyNAS
with UTM app

•Up to 4.6 GB of log storage space

•Conduct security forensics and reporting years

in arrears

SSL & IPsec VPN Remote Access

•SSL VPN - clientless remote access,
anywhere, anytime

•IPsec VPN - secure site-to-site tunnels and
soware client-based remote access

•SSL VPN - no additional licenses to purchase

•IPsec VPN works with NETGEAR VPN

Professional Client

Built-in Intrusion Prevention

•Signature based network threat detection

•Prevents hackers from penetrating the

network perimeter

•Optimized for high throughput

Page 2 of 6

ProSECURE® Unified Threat Management Firewall Data Sheet

UTM Series Comparison

MODEL UTM5 UTM10 UTM25 UTM50 UT M15 0

SIZING GUIDELINES

Firewall Throughput¹ 500 Mbps 566 Mbps 700 Mbps 980 Mbps 980 Mbps

Application Firewall Throughput¹ 400 Mbps 450 Mbps 630 Mbps 905 Mbps 940 Mbps

Anti-virus Throughput¹ 20 Mbps 23 Mbps 25 Mbps 42 Mbps 110 Mbps

IPS Throughput¹ 130 Mbps 150 Mbps 200 Mbps 320 Mbps 620 Mbps

UTM Throughput¹ (HTTP Trac) 13 Mbps 15 Mbps 22 Mbps 32 Mbps 82 Mbps

UTM Throughput¹ (non-HTTP Trac, e.g. P2P, DNS,
SSH)

Maximum VPN Throughput¹ 80 Mbps 80 Mbps 85 Mbps 85 Mbps 586 Mbps

Maximum Concurrent Connections¹ 12,000 16,000 40,000 40,000 80,000

802.1q VLANs 255 255 255 255 255

CONTENT SECURITY

Web and Email Scanned Protocols HTTP, HTTPS, FTP, SMTP, IMAP, POP3, SMTPS, POP3S, IMAPS

Stream Scanning

Inbound and Outbound Inspection

Signature-Less Zero Hour Protection

Malware Signatures 45 Million 45 Million 45 Million 45 Million 45 Million

Web Content Filters Filter By: HTTPS Smart Block, HTML Body Keywords, File Extension

Web Object Filters ActiveX, Java

Email Content Filters Filter By: Subject Keywords, Password-protected Attachments,

Distributed Spam Analysis

Distributed Spam Analysis Supported Protocols SMTP, POP3, SMTPS. POP3S

Anti-spam Real-time Blacklist (RBL)

User-defined Spam Allowed/Block Lists Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain

Distributed Web Analysis w/ 64 categories

Maximum Number of Users Unlimited

Safe Search Enforcement Google, Yahoo, Bing

FIREWALL & NETWORKING

Stateful Packet Inspection (SPI) Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood,

Application Firewall Global Mode, Policy Mode, SSL Decryption, Granular Application Policies,

Applications Protected 332 332 1212 1212 1212

Intrusion Detection & Prevention (IPS)

IPS Signatures 619 619 2114 2114 2114

WAN Modes NAT, Classical Routing

ISP Address Assignment DHCP, Static IP Assignment, PPPoE, PPTP

Secondary WAN IP Addresses

2

130 Mbps 150 Mbps 200 Mbps 320 Mbps 620 Mbps

l l l l l

l l l l l

l l l l l

™

, Flash, JavaScript™, Proxy, Cookies

File Extension, File Name

l l l l l

l l l l l

l l l l l

Block UDP Flood, WAN/LAN Ping Response Control

Application Session Monitoring, Application Dashboard

l l l l l

16 16 32 32 64

Page 3 of 6

ProSECURE® Unified Threat Management Firewall Data Sheet

UTM Series Comparison

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

NAT Modes 1-1 NAT, PAT

Routing Static, Dynamic, RIPv1, RIPv2

VoIP SIP ALG

DDNS DynDNS.org, TZO.com, Oray.net, 3322 DDNS

Firewall Functions Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time Protocol

DHCP DHCP Server, DHCP Relay

User Authentication for VPN Active Directory, LDAP, Radius, Local User Database

Security Policies Based on Active Directory with
Single Sign-On (SSO)

PCI Compliance Two Factor Authentication
Support

VPN

Site to Site VPN Tunnels 5 10 25 50 150

SSL VPN Tunnels 2 5 14 25 75

L2TP, PPTP, VPN Tunnels 5 5 5 5 5

IPsec Encrypton/Authentication DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5

Key Exchange IKE, Manual Key, Pre-Shared Key, PKI, X.500

IPsec NAT Traversal (VPN Passthrough)

iPhone Native VPN Client Support

Included ProSAFE VPN Client Lite Licenses 0 1 1 3 3

SSL Version Support SSLv3, TLS1.0

SSL Encryption Support DES, 3DES, ARC4, AES(128,256 bit)

SSL Message Integrity MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1

SSL Certificate Support RSA, Die-Hellman, Self (Key Lengths 512-bit, 1024-bit, 2048-bit)

SSL VPN Platforms Supported Windows 2000 / XP / Vista® (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x

DEPLOYMENT

802.1q VLAN Support

Multi-WAN Failover

Intelligent Trac Load Balancing

Configuration Wizards Setup, IPsec VPN, SSL VPN

Electronic License

NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch Ports,

L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN, VLAN-to-VLAN

l l l l l

l l l l l

l l l l l

l l l l l

l l l l l

l l l

l l l

l l l l l

Page 4 of 6

ProSECURE® Unified Threat Management Firewall Data Sheet

UTM Series Comparison

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

LOGGING AND REPORTING

Management HTTP/HTTPS, SNMP v2c

Reporting Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic

Logging Trac, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Application, Port Scan, IM,

Log Delivery Management GUI Query, Email Delivery, Syslog

HARDWARE

Gigabit RJ45 Ports WAN/LAN 1/4 1/4 2/4 2/6 4/4

DMZ Interfaces (Configurable) 1 1 1 1 1

Flash Memory/RAM 2 GB/512 MB 2 GB/512 MB 2 GB/1 GB 2 GB/1 GB 2 GB/1 GB

USB Ports 1 1 1 1 1

Major Regulatory Compliance FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS

Storage and Operating Temperatures Operating Temperature 0°-45° C (32°-113° F),

Humidity Operation 90% Maximum Relative, Storage 95% Maximum Relative

Power Input Rating 100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max 100-240V, AC/50-60Hz, Universal Input,

Dimensions (W x H x D) cm 33 x 4.3 x 20.9 33 x 4.3 x 20.9 33 x 4.3 x 20.9 44 x 4.3 x 25.3 44 x 4.3 x 25.3

Dimensions (W x H x D) in 13 x 1.7 x 8.2 13 x 1.7 x 8.2 13 x 1.7 x 8.2 17.3 x 1.7 x 9.96 17.3 x 1.7 x 9.96

Weight kg/lb 2.1/ 4.6 2.1/ 4.6 2.1/ 4.6 2.9/6.4 2.9/6.4

Package Contents ProSECURE UTM Firewall, Power Cable, Rubber Feet, Resource CD,

Rackmount Kit, Warranty Card, Quick Installation Guide, Electronic License (Bundles Only)

Hardware Warranty Lifetime

Malware Notifications, System Notifications

P2P, Firewall, IPsec VPN, SSL VPN

Storage Temperature -20°-70° C (-4°-158° F)

1.0 Amp Max

3

Ordering Information

Hardware (Firewall and VPN Functionality Only)

North America Europe Asia

UTM5-100NAS UTM5-100EUS UTM5-100AJS

UTM10-100NAS UTM10-100EUS UTM10-100AJS

UTM25-100NAS UTM25-100EUS UTM25-100AJS

UTM50-100NAS UTM50-100EUS UTM50-100AJS

UTM150-100NAS UTM150-100EUS UTM150-100AJS

Page 5 of 6

ProSECURE® Unified Threat Management Firewall Data Sheet

Ordering Information

1-Year Bundle (Hardware including 1-year Web, 1-year Email, and 1-year Soware Maintenance and Upgrades, 24/7 Support, and Advanced Replacement)

North America Europe Asia

UTM5EW-100NAS UTM5EW-100EUS UTM5EW-100AJS

UTM10EW-100NAS UTM10EW-100EUS UTM10EW-100AJS

UTM25EW-100NAS UTM25EW-100EUS UTM25EW-100AJS

UTM50EW-100NAS UTM50EW-100EUS UTM50EW-100AJS

UTM150EW-100NAS UTM150EW-100EUS UTM150EW-100AJS

1-Year Subscriptions

Web Threat Management Email Threat Management Soware Maintenance and Upgrades,

24/7 Support, Advanced Replacement

UTM5W-10000S UTM5E-10000S UTM5M-10000S UTM5B-10000S

UTM10W-10000S UTM10E-10000S UTM10M-10000S UTM10B-10000S

UTM25W-10000S UTM25E-10000S UTM25M-10000S UTM25B-10000S

UTM50W-10000S UTM50E-10000S UTM50M-10000S UTM50B-10000S

UTM150W-10000S UTM150E-10000S UTM150M-10000S UTM150B-10000S

Subscription Bundle (Web + Email +
Support & Maintenance)

*U.S. Patent No. 7,971,254
¹Throughput measured in a lab environment. Actual performance may vary.

2

Maximum 16 secondary WAN IP addresses per WAN port.

3

Electronic Licenses are now used to register UTMs that are purchased as part of a bundle. A license key will be assigned to the UTM at the time it is registered with NETGEAR License servers.

NETGEAR, the NETGEAR logo, ProSAFE, ProSECURE, and ReadyNAS, are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other
countries. Other brand names mentioned herein are for identification purposes only and may be trademarks of their respective holder(s). Information is subject to change without notice.
© 2014 NETGEAR, Inc. All rights reserved.

This product comes with a limited warranty, the acceptance of which is a condition of sale.

NETGEAR, Inc. 350 E. Plumeria Drive, San Jose, CA 95134-1911 USA, 1-888-NETGEAR (638-4327), E-mail: info@NETGEAR .com, www.NETGEAR.com DS-UTM Series-7

Page 6 of 6