FVL328

P r o S a f e™ H i g h - S p e e d V P N F i r e w a l l
with 8-port 10/100 Mbps Switch

1 0 0 V P N Tu n n e l s f o r E n c r y p t e d R e m o t e A c c e s s

• Help is there when you need it! Drive down the total cost of your network with NETGEAR’s FVL328 ProSafe High-Speed VPN
NETGEAR provides 24x7 Firewall. For little more than the price of a typical NAT router, you get a completely equipped
technical* support in English, high-performance, broadband-capable Virtual Private Network (VPN) firewall. A low cost
with selected local language device that’s high on security, this true firewall provides Denial of Service (DoS) protection
support during office hours.
and Intrusion Detection using Stateful Packet Inspection (SPI), URL access and content
filtering, logging, reporting, and real-time alerts. It initiates up to 100 IPSec VPN tunnels
simultaneously, reducing your operating costs and maximizing the security of your network.
With 8 auto-sensing, Auto Uplink™ switched LAN ports and Network Address Translation
(NAT) routing, up to 253 users can access your broadband connection at the same time.

Business-Class Initiates up to 100 IPSec VPN tunnels simultaneously, allowing for secured connections to branch
Secure offices and your “on-the-go” mobile workforce. Network Address Translation (NAT) routing enables
shared access to your broadband connection, and transparent routing allows for customized network
configuration. Includes Web page URL content filtering and 168-bit 3DES IPSec encryption
capability. Sends you e-mail notification of network activity – reporting and tracking of hacker
attempts – as well as real-time alerts. A high-powered 150 MHz CPU ensures speedy data traffic.

Thoroughly Takes care of all your security needs, with True Firewall using Stateful Packet Inspection (SPI) and
Protected Intrusion Detection features, Denial of Service (DoS) attack protection, and VPN pass-through
for extra security. SYSLOG and reporting enable thorough network monitoring. IKE authentication
provides peace of mind against unauthorized VPN network access.

Easy To Use Smart Wizard connects to your ISP quickly; the user-friendly Web-based configuration screen and
Install Assistant reduce setup time. Remote administration capability makes it simple to connect to
multiple sites. This well-built firewall has an integrated 8-port 10/100 Mbps switch and is compati-
ble with Windows, UNIX, Macintosh, and Linux O/S. It comes with an Ethernet cable (up to $15
in value), and Auto Uplink™ on the LAN ports eliminates the need for crossover cables.

Flexible & Make a VPN connection to other VPN devices or connect through client software.* Support for
Durable DHCP (client and server) as well as PPPoE allows for easy, widespread deployment. The rugged
metal unit houses advanced, high-quality chip sets, and NETGEAR's tested and proven technology
is backed by a 3-year warranty.

Ty p i c a l Network
Telecommuter Telecommuter
Setup with client
software
with client
software

VPN Tunnel
encrypts your data
FVL328 VPN Firewall FVL328 VPN Firewall

Internet
Broadband Broadband
modem modem
100 Mbps
10 Mbps

Desktop PCs with

FA311 network card installed

Servers Desktop PCs with Telecommuter Telecommuter

FA311 network card installed with client with client
software software
Package Contents Technical Specifications
- FVL328 ProSafe Firewall • Physical Interfaces: • User Support:
- Power adapter - LAN ports: Eight (8) 10/100 Mbps auto-sensing, LAN: Up to 253 users
- Ethernet cable Auto Uplink RJ-45 ports (one Cat 5 UTP
cable included) • RFC Support:
- Installation Guide
- WAN port: 10/100BASE-T Ethernet RJ-45 port PPTP client and server (RFC 2637)
- Resource CD-ROM to connect to any Broadband modem, such as DSL IPSec tunnel mod (RFC 2401)
- Warranty/Support information card or cable Authentication Header Protocol (RFC 2402)
HMAC-MD5-96 (RFC 2403)
• Security Features: HMAC-SHA1-96 (RFC 2404)
System Requirements - Firewall: Stateful Packet Inspection (SPI) to DES-CBC Cipher algorithm (RFC 2405)
- Cable, DSL, Satellite or Wireless prevent notorious Denial of Service (DoS) attacks, Encapsulation Security Payload
Broadband modem and Internet service Intrusion Detection System (IDS) including Protocol (RFC 2406)
- Ethernet connectivity from logging, reporting and e-mail alerts, address, Domain of Interpretation (RFC 2407)
Broadband modem service and protocol, Web URL content filtering, Internet Security Association and
prevent replay attack (reassembly attack). Advanced Key Management Protocol (ISAKMP) (RFC 2408)
- Network card for each connected PC
features include block Java/URL/ActiveX based Oakley (RFC 2412)
- Network Software (e.g. Windows) on extension DHCP server (RFC 2131)
- Internet Explorer 5.0 or higher OR - VPN Functionality: One Hundred (100) DHCP client (RFC 2131)
- Netscape Navigator 4.7 or higher dedicated VPN tunnels, Manual key and IKE IP routing (RIP1, RIP2) (RFC 2453)
Security Association (SA) assignment with NAT (many-to-one) (RFC 1631)
pre-shared key and RSA/DSS signatures, key life Compression Control Protocol (RFC 1974)
NETGEAR Related Products and IKE lifetime time settings, perfect forward IP Control Protocol (RFC 1332)
For connecting computers: secrecy (Diffie-Hellman groups 1 and 2 and PPPoE (RFC 2516)
- Fast Ethernet PCI Adapter for Oakley support), operating modes (Main, Certificate Request Message Format(RFC 2511)
desktops (FA311) Aggressive, Quick)
- IPsec support: IPSec-based 56-bit (DES) or • Functions:
- Fast Ethernet Adapter for notebooks
168-bit (3DES) encryption algorithm, MD5 or Smart Wizard to automatically detect ISP Address
(FA511) SHA-1 hashing algorithm, AH/AH-ESP support, type (static, dynamic, PPPoE), Port Range Forwarding,
- Fast Ethernet USB Adapter PKI features with X.509 v.3 certificate support, Exposed Host (DMZ), Enable/Disable WAN Ping,
(FA101 or FA120) remote access VPN (client-to-site), site-to-site DNS Proxy, MAC Address Cloning/spoofing,
VPN, IPSec NAT traversal (VPN pass-through), NTP support, URL Content Filtering, E-mail Alerts,
tunnel or transport operating mode DHCP Server (Info and display table), PPPoE
- Mode of Operation: Network Address Translation login client support, Telstra Bigpond Cable login
(NAT) transparent routing, static routing, support, WAN DHCP Client, Diagnostic tools
unrestricted users per port (ping, trace route, other), Port/service blocking,
- IP Address Assignment: Static IP address Auto Uplink on switch ports, battery back-up for
assignment, internal DHCP server on LAN, power failure logging
DHC client on WAN, PPPoE client support
• Maintenance:
• Performance Features: Save/Restore Configuration, Restore Defaults,
- Throughput: 50+Mbps WAN-to-LAN Upgrades via Web Browser, Display Statistics,
throughput, 15+Mbps 3DES (168 bit) VPN tunnel Logging, SYSLOG
- IP addressing: DHCP (client and server)
- Routing: RIP v1, RIPv2 (Static Routing, • Hardware Specifications:
Dynamic Routing) - Processor: 150 MHz MIPS32
- VPN/Security: IPSec (ESP, AH), MD5, SHA-1, - Memory: 2Mb Flash, 16Mb DRAM
DES, 3DES, IKE - Power requirements: 12VDC, 1.2A, plug is localized
to country of sale
• Management Features: - Dimensions: H: 1.56" (3.96 cm); W: 10.0" (25.4 cm);
- Administration Interface: Web graphic user D: 9.0" (17.8 cm)
b Parkway
4500 Great America d interface, user name and password protected; - Weight: 2.7 lb. (1.23 kg)
Santa Clara, CA 95054 USA Smart Wizard and Auto Detect for basic parameter
Phone: 1-888-NETGEAR (638-4327) settings; remote management support authenticat- • Environmental Specifications:
E-mail: info@NETGEAR.com
www.NETGEAR.com ed through IP address or IP address range, and - Operating temperature: 0 to 40°C (32 to 104°F)
password; secure sockets layer (SSL) support; - Operating humidity: 90% maximum relative
©2004 NETGEAR, Inc. NETGEAR®, the
config changes/upgrades through web GUI humidity, noncondensing
Netgear Logo, ProSafe, and Everybody’s - Configuration and Upgrades: Upload and
connecting are trademarks or registered download configuration settings, firmware • Warranty:
trademark of Netgear, Inc. in the United
States and/or other countries. Microsoft, upgradable flash memory - NETGEAR 3 year warranty
Windows, and the Windows logo are - Logging: WELF-based logging format, SYSLOG,
trademarks, or registered trademarks of
Microsoft Corporation in the United
e-mail alerts
States and/or other countries. Other
brand and product names are trademarks • Protocol Support:
or registered trademarks of their respec-
tive holders. Information is subject to - Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
change without notice. All rights reserved. - IP addressing: DHCP (client and server)
- Routing: RIP v1, RIPv2 (Static Routing,
D-FVL328-1 Dynamic Routing)
- VPN/Security: IPSec (ESP, AH), MD5, SHA-1,
DES, 3DES, IKE

FVL328 ProSafe High-Speed VPN Firewall