High Performance, Manageable Dual WAN Security Firewall
At the heart of your office network, NETGEAR's high performance security appliance, ProSafe™ VPN Firewall 200 offers a complete security solution for small and medium sized companies. This rack-mountable, Stateful Packet Inspection (SPI) firewall is equipped with support for up to 200 security associations (VPN tunnels). The FVX538 can serve as a DHCP Server, supports Simple Network Management Protocol (SNMP), Quality of Service (QoS) and has a powerful SPI firewall to protect your PCs against intruders and most common Internet attacks. Featuring eight auto-sensing 10/100 Mbps LAN ports, one Gigabit LAN port and two 10/100 WAN ports, the ProSafe VPN Firewall FVX538 lets multiple computers in your office share two Internet connections. The dual WAN ports let you connect a second Internet line as a backup to insure that you're never disconnected. Or, use both Internet ports at the same time, and let the router balance your office's requirements between them for maximum bandwidth efficiency. One LAN port can be dedicated as a hardware DMZ port for safely providing services to the Internet without compromising security on your LAN. With enterprise-class 90+ Mbps firewall and up to 100 Mbps VPN throughput, the FVX538 is an ideal headquarter security solution for companies that need rock solid network protection and fast, secure VPN access for remote employees and branch offices at a cost-effective price point. NETGEAR's timesaving VPN Wizard and SmartWizard™ simplify setup and VPN administration. Includes, at no extra cost, the ProSafe VPN Client software 5-user license, a $150 value.

Richer Security
Virtual Private Network Consortium (VPNC) tested* and certified VPN supports secure data connectivity and transmission over the Internet and ensures interoperability with many other popular security products. The FVX538 also employs the Cavium Networks NITROX security processor to offload the CPU for near wire-speed VPN throughput and blazing fast tunnel setup. Future firmware upgrades will support anti-virus, anti-spam and anti-spyware policy enforcement, a robust intrusion detection system (IDS) as well as the option to use SSL VPN.
*Currently in testing for VPNC

Capacity to Spare
Dual WAN ports support two broadband connections. A second WAN port supports an additional broadband connection. This second WAN connection may be configured as a failover connection in case the primary connection fails or can be used to balance the workload by distributing traffic across the two connections for optimal per user bandwidth.

Superior Value and Usability
Competitively priced and SNMP manageable, convenient VPN Wizard gathers basic information about your networks and recommends a VPN solution with supporting instructions. Optimized for NETGEAR’s ProSafe VPN Client software – a five user license is included.

Product Specifications
• Physical Interfaces:
- LAN ports: Eight (8) 10/100 Mbps auto-sensing, Auto-Uplink™ RJ-45 ports; one (1) 1 Gigabit 10/100/1000 Mbps LAN port; one LAN port can be dedicated hardware DMZ port
- WAN port: Two 10/100Mbps Ethernet RJ-45 ports with auto fail-over and load balancing
- Serial Port: One console port for command line interface (CLI) support

• Security Features:
- SPI Firewall: Stateful Packet Inspection (SPI) to prevent notorious Denial of Service (DoS) attacks, Intrusion Detection System (IDS) including logging, reporting and e-mail alerts, address, service and protocol, Web URL keyword filtering, prevent replay attack (reassembly attack), port/service blocking. Advanced features include block Java/URL/ActiveX based on extension, FTP/SMTP/RPC program filtering
- VPN Functionality: Two hundred (200) VPNCcertifiable dedicated VPN tunnels, Manual key and Internet Key Exchange Security Association (IKE SA) assignment with pre-shared key and RSA/DSA signatures, key life and IKE lifetime time settings, perfect forward secrecy (Diffie- Hellman groups 1 and 2 and Oakley support), operating modes (Main, Aggressive, Quick), fully qualified domain name (FQDN) support for dynamic IP address VPN connections.
- IPSec Support: IPSec-based 56-bit (DES), 168-bit (3DES), or 256-bit (AES) encryption algorithm, MD5 or SHA-1 hashing algorithm, AH/AH-ESP support, PKI features with X.509 v.3 certificate support, remote access VPN (client-tosite), site-to-site VPN, IPSec NAT traversal (VPN pass-through)
- Mode of Operation: One-to-one/many-to-one Multi-Network Address Translation (NAT), classical routing, unrestricted users per port
- IP Address Assignment: Static IP address assignment, internal DHCP server on LAN, DHCP client on WAN, PPPoE client support

• Functions:
VPN Wizard to simplify configuration of the VPN, Smart Wizard to automatically detect ISP Address type (static, dynamic, PPPoE, Port Range Forwarding, Port Triggering, Exposed Host (DMZ), Hardware DMZ, Enable/Disable WAN Ping, DNS Proxy, MAC Address cloning/spoofing, Network Time Protocol NTP support, Keyword Content Filtering, email Alerts, DHCP Server (Info and display table), PPPoE login client support, WAN DHCP Client, Diagnostic tools (ping, trace route, other), Port/service/MAC address blocking, Auto-Uplink™ on switch ports and QoS.

• Performance Features:
- Throughput: Up to 90 Mbps WAN-to-LAN and 100 Mpbs 3DES throughput

• Management Features:
- Administration Interface: SNMP (v.2c) support, Telnet, web graphic user interface, Secure Sockets Layer (SSL) remote management, user name and password protected; Smart Wizard and Auto Detect for basic parameter settings; VPN Wizard simplifies VPN configuration; secure remote management support authenticated through IP address or IP address range and password; configuration changes/upgrades through web GUI.
- Configuration and Upgrades: Upload and down load configuration settings, firmware upgradeable flash memory
- Logging: SYSLOG, e-mail alerts

• Protocol Support:
- Network: IP routing, TCP/IP, UDP, ICMP, PPPoE
- IP Addressing: DHCP (client and server)
- Routing: RIP v1, RIPv2 (Static Routing, Dynamic Routing)
- VPN/Security: IPSec (ESP, AH), MD5, SHA-1, DES, 3DES, IKE, PKI, AES

• User Support:
- LAN: Up to 253 users

• Maintenance:
Save/Restore Configuration, Restore Defaults, Upgrades via Web Browser, Display Statistics, Logging, SYSLOG support.

• Hardware Specifications:
- Processor: 533 MHz Intel XScale IXP425
- Memory: 16MB Flash, 32MB DRAM
- Encryption Accelerator: Cavium CN501 with 60+ Mbps (3DES+SHA-1) encryption
- Power requirements: 100-240VAC, 50-60Hz
- Dimensions: 33 x 20.3 x 1.75 cm. (13 x 8 x 1.75 in.)
- Weight: 4.42 lbs (2.01 kg)

• Warranty:
- 3 years

Package Contents
- FVX538 ProSafe VPN Firewall 200
- Ethernet cable
- Rack mount kit
- Installation guide
- Resource CD with five user ProSafe VPN Client Software license
- Warranty/Support information card

System Requirements
- Cable, DSL or wireless broadband modem and Internet service
- Ethernet connectivity from broadband modem
- Network card for each connected PC
- Network software (e.g. Windows)
- Internet Explorer 5.0 or higher OR Netscape Navigator 4.7 or higher

Netgear Part Number: FVX538NA