Enhanced Wireless Security Through Ipsec; A Powerful, True Firewall With Content Filtering; Autosensing Ethernet Connections With Auto Uplink - NETGEAR FVM318 Reference Manual

Reference Manual for the Model FVM318 Cable/DSL ProSafe Wireless VPN Security Firewall

Enhanced Wireless Security Through IPSec

The FVM318 firewall allows you to easily create an IPSec-encrypted VPN tunnel from your
wireless PC to the firewall.
• Easy to deploy - The included SafeNet SoftRemote Basic VPN client requires only three
parameters to configure a secure connection to the firewall.
• 256 bit AES encryption provides a much higher level of protection than WEP.

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the FVM318 is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• Denial of Service (DoS) protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents.
The FVM318 will log security events such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the firewall to email the log to you at specified
intervals. You can also configure the firewall to send immediate alert messages to your email
address or email pager whenever a significant event occurs.
• With its content filtering feature, the FVM318 prevents objectionable content from reaching
your PCs. The firewall allows you to control access to Internet content by screening for
keywords within Web addresses. You can configure the firewall to log and report attempts to
access objectionable Internet sites.

Autosensing Ethernet Connections with Auto Uplink™

With its internal 8-port 10/100 switch, the FVM318 can connect to either a 10 Mbps standard
Ethernet network or a 100 Mbps Fast Ethernet network. The LAN interfaces are autosensing and
capable of full-duplex or half-duplex operation.
1-2 Introduction