Netgear UTM50 User Manual

ProSecure® Uniﬁed Threat Management Appliance Data Sheet

UTM Series

Uniﬁed Gateway Security for Smart IT Networks – Without Compromise

The ProSecure UTM series of all-in-one gateway security appliances combine best-of-breed enterprise-strength security technologies from Commtouch patent-pending Stream Scanning Technology to protect businesses against today’s Web, email, and network threats. Malware hosted on Web pages, phishing attacks, spam, virus infected emails, hackers, denial-of-service attacks, and other threats are now all part of a regular repertoire of sophisticated blended attacks that bypass traditional ﬁrewalls with ease. Because comprehensive network security solutions require an abundance of processing power to examine network trafﬁc in real time, existing all-in-one security solutions often use rudimentary security technologies that trade comprehensiveness for speed. True security must satisfy the requirements in both speed and coverage.

All-in-one Network Security - Redeﬁned

ProSecure Uniﬁed Threat Management (UTM) Appliances combine performance with comprehensive security coverage. Patent-pending Stream Scanning Technology enables the ProSecure UTM to

ProSecure UTM Features

and Highlights

• Best-of-breed Anti-malware Engine

– Enterprise-class malware scan engine – Up to 400 times the coverage of

legacy all-in-one solutions – Over 1 million malware signatures – Hourly automatic signature updates – Zero hour heuristic based threat

protection

• ProSecure Patent Pending Stream Scanning Technology

– Data streams are processed as they

enter the network – Low latency Web trafﬁc scanning

• Distributed Spam Analysis

Revolutionary Stream Scanning Platform

Anti-spam Technology

– Hybrid in-the-cloud architecture – Gathers threat data from over 50

million global sources – New spam is classiﬁed and detected

within minutes – No learning period, works right out

of the box

• Distributed Web Analysis URL Filtering

– Hybrid in-the-cloud architecture – Hundreds of millions of categorized

URLs – Real-time classiﬁcation, 64 categories – Per User & Group ﬁltering policies

• IM and P2P Application Control

– Blocks access to public IM clients – Blocks peer-to-peer (P2P) clients – Preserve productivity and

save bandwidth

utilize virus and malware threat databases from ProSecure and Sophos™ that are over one million signatures in size - up to 400x more comprehensive than legacy all-in-one platforms at a speed that is up to 5x faster than conventional methods. This architecture, combined with best-of-breed hybrid in-the-cloud Web ﬁlter and anti-spam technologies along with proven ﬁrewall, IPS, and VPN functionality, form the ideal growing business gateway security solution.

Internet

Unfiltered network stream

Firewall

Inspection

Intrusion

Prevention

VPN

Anti-spam

URL

Filtering

UTM Appliance

Given the high performance requirements of scanning latency sensitive Web trafﬁc, incorporating enterprise-grade security software technologies onto traditional all-in-one platforms has been a very difﬁcult task. Traditional batch-based scanning methods introduce large amounts of latency into network trafﬁc and can slow Web browsing to a crawl. All-in-one solutions in the past have tried to overcome this by minimizing the malware signature set, scanning only a select few ﬁle types, or by avoiding Web scanning altogether. This exposes an entire vector of the network to malware-based attacks. The ProSecure UTM features patent-pending Stream Scanning Technology which analyses data streams as they enter the network. This signiﬁcantly reduces latency and allows the use of an extensive malware signature library for scanning – thus offering an unprecedented combination of speed and coverage in an all-in-one solution.

Traditional Batch-based Scanning Stream Scanning

Rece ive

Scan

Output

Latency

Remote Users

Malware

Anti-

, Mailshell™, and Sophos™ with

Clean and secure traffic

IM & P2P

Control

Rece ive

Scan

Output

Latency

LAN

24/7

T E C H N I C A L

S U P P O R T*

1-888-NETGEAR (638-4327) Email: info@NETGEAR.com

VPNC

CERTIFIED

Basic

Interop

AES

Interop

Time

ProSecure® Uniﬁed Threat Management Appliance UTM Series

• SSL & IPsec VPN

Simple Setup, Ease of Management

Remote Access

– SSL VPN - clientless remote access,

anywhere, anytime – IPsec VPN - secure site-to-site tunnels

and client-based remote access – No additional licenses to purchase

• Built-in SPI Firewall

– Dual/Quad WAN Gigabit Firewall*

provides load balancing and failover – Gigabit LAN ports, conﬁgurable

hardware DMZ port – Stateful packet inspection (SPI) – Denial-of-service (DoS) protection – IPS prevents hackers from penetrating

the network perimeter

UTM SERIES COMPARISON

MODEL UTM5 UTM10 UTM25 UTM50 UTM150

SIZING GUIDELINES

Average Anti-virus Throughput¹ 15 Mbps 20 Mbps 25 Mbps 45 Mbps 130 Mbps

Stateful Packet Inspection Firewall Throughput¹ 90 Mbps 90 Mbps 127 Mbps 400 Mbps 900 Mbps

Maximum VPN Throughput¹ 40 Mbps 50 Mbps 70 Mbps 200 Mbps 400 Mbps

Maximum Concurrent Connections¹ 8,000 12,000 27,000 40,000 65,000

VLANs 255 255 255 255 255

CONTENT SECURITY

Web and Email Scanned Protocols HTTP, HTTPS, FTP, SMTP, IMAP, POP3

Stream Scanning

Inbound and Outbound Inspection

Signature-Less Zero Hour Protection

Malware Signatures 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million

Automatic Signature Updates Hourly Hourly Hourly Hourly Hourly

Web Content Filters Filter By: HTML Body Keywords, File Extension

Web Object Filters ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies

Email Content Filters Filter By: Subject Keywords, Password-protected Attachments,

Distributed Spam Analysis

Distributed Spam Analysis Supported Protocols SMTP, POP3

Anti-spam Real-time Blacklist (RBL)

User-deﬁned Spam Allowed/Block Lists Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain

Distributed Web Analysis w/ 64 categories

Instant Messaging (IM) Control MSN

Peer to Peer (P2P) Control BitTorrent™, eDonkey, Gnutella

Maximum Number of Users Unlimited

FIREWALL FEATURES

Stateful Packet Inspection (SPI) Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood,

Intrusion Detection & Prevention (IPS)

WAN Modes NAT, Classical Routing

ISP Address Assignment DHCP, Static IP Assignment, PPPoE, PPTP

NAT Modes 1-1 NAT, PAT

Routing Static, Dynamic, RIPv1, RIPv2

VoIP SIP ALG

The ProSecure UTM will easily replace any existing ﬁrewall or router. A simple 10-step setup wizard guides you through installation and the UTM will be up and running in minutes. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools using SNMP. Malware and IPS signature, software, and ﬁrmware updates are all handled by the UTM - online and automatically.

For many administrators and IT personnel one of their biggest nightmares is the management of individual licenses or “seats.” Buying additional licenses when computers and personnel are added to the network is time-consuming and costly. The ProSecure UTM offers Web and email protection subscriptions with no “per-user” licensing.

File Extension, File Name

Messenger, Yahoo!® Messenger, mIRC, Google Talk

Block UDP Flood, WAN/LAN Ping Response Control

+ 2 hidden pages