Netgear UTM10EW-100EUS Product Data Sheet

ProSecure® Unified Threat
Management Firewall Data Sheet

UTM Series

Unified Gateway Security for Smart IT Networks – Without Compromise

The NETGEAR® ProSecure® UTM series of all-in-one next-generation firewalls combine an advanced
application firewall with best-of-breed enterprise-strength security technologies such as anti-virus,
anti-spam, Web filtering, and intrusion prevention (IPS) to protect businesses against today’s
application, Web, email, and network threats. This gives business owners and IT admins greater
visibility and control over their network and protects their businesses from threats that would
otherwise bypass traditional firewalls.

ProSecure UTM Features

Redefining the Firewall

and Highlights

• Advanced Application
Control Firewall

– Monitors and controls application use
– Supports up to 1200 applications
– Granular per-application policies
– Preserve productivity and save

bandwidth

• Best-of-breed Anti-malware
Engine

– Enterprise-class malware scan engine
– Up to 400 times the coverage of

legacy all-in-one solutions
– Over 1 million malware signatures
– Hourly automatic signature updates
– Zero hour heuristic based threat

protection

• ProSecure Patented* Stream
Scanning Technology

– Data streams are processed as they

enter the network
– Low latency Web traffic scanning

• Distributed Spam Analysis
Anti-spam Technology

Revolutionary Stream Scanning Platform

– Hybrid in-the-cloud architecture
– Gathers threat data from over 50

million global sources
– New spam is classified and detected

within minutes
– No learning period, works right out

of the box

• Distributed Web Analysis
URL Filtering

– Hybrid in-the-cloud architecture
– Hundreds of millions of categorized URLs
– Real-time classification, 64 categories
– Per User & Group filtering policies

•Virtually Limitless Logging,
Reporting and Quarantine
Capability

– Integrates with NETGEAR ReadyNAS

models with UTM plugin
– Automatically store logs on

ReadyNAS NAS
– Up to 4.6 GB of log storage space

for reports
– Conduct security forensics and

reporting years in arrears

ProSecure UTM firewalls bring advanced network security technologies to small and medium
businesses and remote/branch offices. Traditional firewalls can only block/accept traffic based
on IP addresses and ports and offer little protection outside of that. This approach is quickly
becoming obsolete in today’s Internet where many applications send/receive traffic over ports
that are typically allowed by traditional firewalls. The built-in application firewall of the UTM
overcomes the limitations of yesterday’s firewall and allows the UTM to monitor, control, and
block hundreds of applications such as Skype, Facebook, BitTorrent®, and Yahoo! Messenger;
helping enhance employee productivity and enforce network usage policies.

The UTM application firewall combined with best-of-breed anti-virus, Web filter, and anti-spam
technologies along with IPS and VPN functionality, form the ideal firewall for today’s businesses.

Internet

Unfiltered
network stream

Firewall

Inspection

Intrusion

Prevention

VPN

Application

Control

UTM Appliance

Given the high-performance requirements of scanning latency sensitive Web traffic, incorporating
enterprise-grade security software technologies onto traditional all-in-one platforms has been
a very difficult task. Traditional batch-based scanning methods introduce large amounts of
latency into network traffic and can slow Web browsing to a crawl. All-in-one solutions in the
past have tried to overcome this by minimizing the malware signature set, scanning only a
select few file types, or by avoiding Web scanning altogether. This exposes an entire vector of
the network to malware-based attacks. The ProSecure UTM features patented Stream Scanning
Technology which analyzes data streams as they enter the network. This significantly reduces
latency and allows the use of an extensive malware signature library for scanning – thus offering
an unprecedented combination of speed and coverage in an all-in-one solution.

Traditional Batch-bas ed Scanning Stream Scanning

Rece ive

Scan

Output

Latency

Time

Remote Users

Web

Filtering

Anti-spam

Anti-virus

Rece ive

Scan

Output

Latency

Clean and
secure traffic

LAN

Time

VPNC

CERTIFIED

Basic

Interop

AES

Interop

®

UTM25 UTM150 UTM9S

ProSecure® Unified Threat Management Firewall UTM Series

ProSecure UTM Features

and Highlights

• SSL & IPSec VPN
Remote Access

– SSL VPN - clientless remote access,

anywhere, anytime

– IPSec VPN - secure site-to-site tunnels

and client-based remote access

– Purchase additional licenses for

IPSec VPN

• Built-in SPI Firewall

– Dual WAN Gigabit Firewall**

provides load balancing and failover

– Gigabit LAN ports, configurable

hardware DMZ port
– Stateful packet inspection (SPI)
– Denial-of-service (DoS) protection
– IPS prevents hackers from penetrating

the network perimeter

Simple Setup, Ease of Management

The ProSecure UTM will easily replace any existing firewall or router. A simple 10-step setup
wizard guides you through installation and the UTM will be up and running in minutes.
Administration is performed through an intuitive Web-based interface. Set granular policies
and alerts, check summary statistics and graphical reports, drill down to IP address-level data,
and integrate log data with standard network management tools using SNMP. Malware,
application, and IPS signature, software, and firmware updates are all handled by the
UTM - online and automatically.

For many administrators and IT personnel one of their biggest nightmares is the management
of individual licenses or “seats.” Buying additional licenses when computers and personnel

are added to the network is time-consuming and costly. The ProSecure UTM offers Web and
email protection subscriptions with no “per-user ” licensing.

UTM SERIES COMPARISON

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

SIZING GUIDELINES

Firewall Throughput¹ 500 Mbps 566 Mbps 700 Mbps 980 Mbps 980 Mbps

Application Firewall Throughput¹ 400 Mbps 450 Mbps 630 Mbps 905 Mbps 940 Mbps

Anti-virus Throughput¹ 20 Mbps 23 Mbps 25 Mbps 42 Mbps 110 Mbps

IPS Throughput¹ 130 Mbps 150 Mbps 200 Mbps 320 Mbps 620 Mbps

UTM Throughput¹ (HTTP Traffic) 13 Mbps 15 Mbps 22 Mbps 32 Mbps 82 Mbps

UTM Throughput¹ (non-HTTP Traffic,

e.g. P2P, DNS, SSH)

Maximum VPN Throughput¹ 80 Mbps 80 Mbps 85 Mbps 85 Mbps 586 Mbps

Maximum Concurrent Connections¹ 12,000 16,000 40,000 40,000 80,000

802.1q VLANs 255 255 255 255 255

130 Mbps 150 Mbps 200 Mbps 320 Mbps 620 Mbps

CONTENT SECURITY

Web and Email Scanned Protocols HTTP, HTTPS, FTP, SMTP, IMAP, POP3

Stream Scanning

Inbound and Outbound Inspection

Signature-Less Zero Hour Protection

Malware Signatures 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million

Automatic Signature Updates Hourly Hourly Hourly Hourly Hourly

Web Content Filters Filter By: HTTPS Smart Block, HTML Body Keywords, File Extension

Web Object Filters ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies

• • • • •

• • • • •

• • • • •

Email Content Filters Filter By: Subject Keywords, Password-protected Attachments, File Extension, File Name

Distributed Spam Analysis

Distributed Spam Analysis

Supported Protocols

Anti-spam Real-time Blacklist (RBL)

User-defined Spam Allowed/Block Lists Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain

Distributed Web Analysis w/64 categories

Maximum Number of Users Unlimited

• • • • •

SMTP, POP3

• • • • •

• • • • •