The FVS336Gv2 ProSafe Dual WAN Gigabit Firewall Router with SSL and IPsec VPN from Netgear is an excellent way to securely connect remote users or remote LAN sites to your network and to distribute broadband Internet access within your network. This router offers two types of virtual private network (VPN) tunnels, Secure Sockets Layer (SSL) and IP security (IPsec), for optimal secure connection to your network. SSL VPN tunnels provide remote access to your corporate data for individual users anywhere and anytime without client-based software while IPsec VPN tunnels provide both secure site-to-site tunnels and legacy support for client-based remote access.
Beyond VPN capabilities, the router features dual WAN Ethernet 10/100/1000 ports for establishing a wired connection to your broadband Ethernet-enabled modem. With two WAN ports, you have the option of setting up your broadband connection as either a load-balancing or fail-over configuration. The router also features a total of four very speedy LAN Ethernet 10/100/1000 ports for establishing high-speed wired connections to servers, Wireless-N access points, desktop PCs, and anything else that's Ethernet-enabled on your LAN network. With Network Address Translation (NAT) routing and classical routing, up to 253 users can access your broadband connection at the same time. This router is easy to setup and features numerous advanced security options. It is compatible with Linux, Unix, Windows, and Mac operating systems.
| Protocols |
Network: IP routing, TCP/IP, UDP, ICMP, PPPoE IP addressing: DHCP (client and server) Routing: RIP v1, RIPv2 (static routing, dynamic routing) VPN/security: IPsec (ESP), IKE, PKI, HTTPS |
| Ports |
LAN ports: 4x 10/100/1000 Mbps auto-sensing, Auto Uplink RJ-45 ports; one LAN port can be a dedicated hardware DMZ port WAN ports: 2x 10/100/1000 Mbps auto-sensing, Auto Uplink RJ-45 ports to connect to any broadband modem, such as DSL or cable Load balancing or fail-over modes |
| Performance |
Throughput LAN-to-WAN: 60 Mbps total IPsec VPN (3DES): 16 Mbps SSL VPN: 10 Mbps Connections 10,000 concurrent sessions |
| Routing |
Routing Modes of Operation Many-to-one Multi-network Address Translation (NAT) Classical routing Unrestricted users per port |
| IP |
IP Address Assignment Static IP address assignment Internal DHCP server on LAN DHCP client on WAN PPPoE client support |
| Management |
Administration Interface SNMP (v2c) support Web graphic user interface Secure Sockets Layer (SSL) remote management User name and password protected Secure remote management support authenticated through IP address (or IP address range) and password Configuration changes/upgrades through Web GUI 2 factor authentication (WIKID) Logging SYSLOG Email alerts Functions VPN Wizard to simplify configuration of IPsec VPNs Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE) Port range forwarding Port triggering Enable/disable WAN ping DNS proxy MAC address cloning/spoofing Network Time Protocol NTP support Diagnostic tools (ping, DNS lookup, trace route, other) Port/service Auto-Uplink on switch ports L3 Quality of Service (QoS) LAN-to-WAN and WAN-to-LAN (ToS) SIP ALG |
| Security |
SPI Firewall Stateful packet inspection (SPI): prevents denial-of-service (DoS) attacks provides stealth mode user support: Unrestricted Keyword filtering on: address service (ex. FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH, etc.) protocol Web URL port/service blocking file extension (ex. Java, URL, ActiveX) Port/service blocking IPsec VPN Functionality Twenty-five (25) dedicated IPsec VPN tunnels Manual key and Internet Key Exchange Security Association (IKE SA) assignment: pre-shared key signature RSA/DSA signature Key life and IKE lifetime time settings Perfect forward secrecy Diffie-Hellman groups 1 and 2 Oakley support Operating modes: main and aggressive Fully qualified domain name (FQDN) support for dynamic IP address VPN connections IPsec Support IPsec-based 56-bit (DES) 168-bit (3DES), or 256-bit (AES) encryption algorithm MD5 or SHA-1 hashing algorithm ESP support PKI features with X.509 v.3 certificate support remote access VPN (client-to-site), site-to-site VPN IPsec NAT traversal (VPN passthrough) SSL VPN Functionality Ten (10) dedicated SSL VPN tunnels SSL version support: SSLv3 and TLS 1.0 SSL encryption support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit SSL message integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1 Certificate support: RSA Diffie-Hellman Self |
| General | |
|---|---|
| System Requirements |
Cable, DSL or wireless broadband modem and Internet service Ethernet connectivity from broadband modem Network card for each connected PC Network software (e.g. Windows) Internet Explorer 5.0 or higher or Netscape Navigator 4.7 or higher |
| Environmental Requirements |
Operating temperature: 32° to 104°F / 0° to 40°C Operating humidity: 90% maximum relative humidity, non-condensing |
| Processor Speed | 300 MHz |
| Hardware Platforms | 16 MB flash, 64 MB DRAM |
| Power Requirements | 12V DC, 1.2A |
| Dimensions (WxHxD) | 10 x 7 x 1.56" / 25.4 x 17.8 x 3.96 cm |
| Weight | 3.7 lb / 1.7 kg |
REVIEW SNAPSHOT®
by PowerReviewsPros
Cons
Best Uses
Reviewed by 3 customers
Sort by
Displaying reviews 1-3
Pros
Cons
Best Uses
Comments about Netgear FVS336Gv2 ProSafe Dual WAN Gigabit Firewall Router with SSL and IPsec VPN:
Allows for use with both cable and DSL services with rollover. If one fails the other picks up and continues providing internet service. I use 2 of them and connect them in Gateway to Gateway VPN configuration. Works great.
Pros
Cons
Best Uses
Comments about Netgear FVS336Gv2 ProSafe Dual WAN Gigabit Firewall Router with SSL and IPsec VPN:
The router setup was a breeze. Just a couple clicks and we were done. We installed it for a customer who has had a dreafull time with her ADSL service provider and now for less cost she sha two circuits at double the speed.
Pros
Cons
Best Uses
Comments about Netgear FVS336Gv2 ProSafe Dual WAN Gigabit Firewall Router with SSL and IPsec VPN:
FVS336 is now my VPN firewall. All office traffic in and out, including VOIP telephones passes through, apparently faster (based upon network testing with VOIP service provider) than my previous firewall router.
VPN setup is always troublesome for those of us without dedicated IT staff. I worked with technical support staff (free for 90 days) to get it up and running. They were patient with me and focused until I got it all running.
VPN client software supplied on CD was initially not working.
SSL VPN sounds like a great idea. But in practice an ActiveX must be loaded and installed at user computer and creates trouble with local security features. But if you can tolerate the ActiveX, the feature works as advertised.
Displaying reviews 1-3