Security Features; Autosensing Ethernet Connections With Auto Uplink; Extensive Protocol Support - NETGEAR ProSafe SRX5308 Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

Security Features

The VPN firewall is equipped with several features designed to maintain security:
• PCs hidden by NAT. NAT opens a temporary path to the Internet for requests originating
from the local network. Requests originating from outside the LAN are discarded,
preventing users outside the LAN from finding and directly accessing the computers on
the LAN.
• Port forwarding with NAT. Although NAT prevents Internet locations from directly
accessing the PCs on the LAN, the VPN firewall allows you to direct incoming traffic to
specific PCs based on the service port number of the incoming request. You can specify
forwarding of single ports or ranges of ports.
• DMZ port. Incoming traffic from the Internet is normally discarded by the VPN firewall
unless the traffic is a response to one of your local computers or a service for which you
have configured an inbound rule. Instead of discarding this traffic, you can use the
dedicated demilitarized zone (DMZ) port to forward the traffic to one PC on your network.

Autosensing Ethernet Connections with Auto Uplink

With its internal four-port 10/100/1000 Mbps switch and four 10/100/1000 WAN ports, the
VPN firewall can connect to either a 10 Mbps standard Ethernet network, a 100 Mbps Fast
Ethernet network, or a 1000 Mbps Gigabit Ethernet network. The four LAN and four WAN
interfaces are autosensing and capable of full-duplex or half-duplex operation.
The VPN firewall incorporates Auto Uplink
senses whether the Ethernet cable plugged into the port should have a normal connection
such as to a PC or an uplink connection such as to a switch or hub. That port then configures
itself correctly. This feature eliminates the need for you to think about crossover cables, as
Auto Uplink accommodates either type of cable to make the right connection.

Extensive Protocol Support

The VPN firewall supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and
Routing Information Protocol (RIP). For further information about TCP/IP, see
Configuration Requirements
support:
• IP address sharing by NAT. The VPN firewall allows many networked PCs to share an
Internet account using only a single IP address, which might be statically or dynamically
assigned by your Internet Service Provider (ISP). This technique, known as NAT, allows
the use of an inexpensive single-user ISP account.
• Automatic configuration of attached PCs by DHCP. The VPN firewall dynamically
assigns network configuration information, including IP, gateway, and Domain Name
Server (DNS) addresses, to attached PCs on the LAN using the Dynamic Host
Configuration Protocol (DHCP). This feature greatly simplifies configuration of PCs on
your local network.
technology. Each Ethernet port automatically
TM
on page 308. The VPN firewall provides the following protocol
Introduction
12
Internet