PROSAFE® WIRELESS-N VPN FIREWALL

SRXN3205

Offers two types of virtual private network (VPN) tunnels, Secure Sockets Layer (SSL) and IP security (IPsec)

Provides clientless remote access to your corporate data

Dual-Band 5.0 / 2.4 GHz operation for maximum Wireless-N performance or 802.11 b/g backwards compatibility

Overview

Specifications

System Requirements

Related Products


 

Wireless

  • IEEE 802.11n draft 2.0 spec, 2.4 GHz and 5.0 GHz
  • IEEE 802.11a 5.0 GHz
  • IEEE 802.11g, IEEE 802.11b, 2.4 GHz
  • Wi-Fi Protected AccessTM (WPA, WPA2) with TKIP and AES
  • Wired Equivalent Prviacy (WEP) 64 bit, 128-biy encryptions for IEEE 802.11b and 802.11g
  • IEEE 802.1x RADIUS authentication with EAP TLS, TTLS, PEAP
  • 2 dipole antennas
  • 1 patch antenna
  • Three (3) reverse SMA antenna connectors

SPI Firewall

  • Stateful packet inspection
    - prevents DoS attacks
    - stealth mode
    - user support: unrestricted
  • Keyword filtering on:
    - address
    - service (FTP, SMTP, HTTP, RPL, SNMP, DNS, ICMP, NNTP, POP3, SSH)
    - protocol
    - Web UTL port / service blocking
    - ActiveX, Java, Javascript
  • Port/Service Blocking

IPsec VPN Functionality

  • 5 dedicated IPsec VPN tunnels
  • Manual and Internet Key Exchange Security Association (IKE SA) assignment
    - preshared key signature
    - RSA/DSA signature
  • Key life & IKE lifetimes time settings
  • Perfect forward secrecy
  • Diffie-Hellman groups 1 and 2
  • Oakley Support
  • Operating modes
    - main
    - aggressive
  • Fully qualified domain name (FQDN support) for dynamic IP address VPN connections

IPsec Support

  • DES (56 bit), 3DES(168 bit), AES (256 bit) encryption algorithm
  • MD5 or SHA-1 hashing algorithm
  • ESP support
  • PKI features with x.509 v.3 certificate support
  • Remote access VPN (client-to-site), site-to-site VPN
  • IPsec NAT traversal (VPN pass-through)

SSL VPN Functionality

  • 5 dedicated SSL VPN tunnels
  • SSL version support: SSLv3 and TLS1.0
  • SSL encryption support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit
  • SSL message integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1
  • Certificate Support:
    - RSA
    - Diffie-Hellman
    - Self-signed

Routing Modes of Operation

  • Many-to-one Multi-network Address Translation (NAT)
  • Classical routing

IP Address Assignment

  • Static IP address assignment
  • Internal DHCP server of LAN
  • DHCP client on WAN
  • PPoE client support

Throughput

  • LAN-to-WAN: 60 Mbps
  • Connections: 20,000 concurrent sessions
  • VPN throughput: 20 Mbps

HW Specifications

  • Dimensions: 252.7 x 179.5 x 35.1 mm (9.95 x 7.07 x 1.38 in)
  • Weight: 1.34 kg (2.95 lb)
  • Processor speed: 300 MHz
  • Memory: 64 MB RAM, 16 MB flash
  • Power supply: Output 12V/18W

Environmental Specifications

  • Operating temperature: 0° - 40° C (32° - 104° F)
  • Operating humidity: 90% maximum relative humidity

Physical Interfaces

  • 1 Gigabit Ethernet RJ45 WAN
  • 4 Gigabit Ethernet RJ45 LAN

Management Features

Administration Interface

  • SNMP (v2c) support
  • Web graphic user interface
  • Secure Sockets Layer (SSL) remote management
  • User name and password protected
  • Secure remote management support authenticated through IP address (or IP address range) and password
  • Configuration changes/upgrades through Web GUI

Logging

  • SYSLOG
  • Email alerts

Functions

  • VPN Wizard to simplify configuration of IPsec VPNs
  • Auto Detect to automatically detect ISP address type (static, dynamic, PPPoE)
  • Port range forwarding
  • Port triggering
  • Enable/disable WAN ping
  • DNS proxy
  • MAC address cloning/spoofing
  • Network Time Protocol NTP support
  • Diagnostic tools (ping, DNS lookup, trace route, other)
  • Port/service
  • Auto-Uplink on switch ports
  • L3 Quality of Service (QoS)
  • LAN-to-WAN and WAN-to-LAN (ToS)

Warranty

  • Netgear Lifetime Warranty†

Package Contents 

  • ProSafe Wireless-N VPN Firewall (SRXN3205)
  • Two (2) 5 dBi antennas and one (1) 3 dBi antenna
  • Ethernet cable
  • Power adapter
  • User guide
  • Resource CD with single-user ProSafe VPN Client Software license
  • Warranty/support information card

NETGEAR Related Products

Software

  • VPN01L and VPN05L ProSafe VPN Client Software

Adapters

  • RangeMax™ Wireless Notebook
  • Adapter (WN511B)
  • RangeMax™ Wireless USB 2.0
  • Adapter (WN111)
  • RangeMax™ Dual Band Wireless
  • USB 2.0 Adapter (WNDA3100)

Ordering Information

  • North America: SRXN3205-100NAS
  • Asia: SRXN3205-100AUS
  • Europe: SRXN3205-100EUS

ProSupport Service Packs Available

  • OnCall 24x7, Category 1
    - PMB0331-100 (US)
    - PMB0331 (non-US)
  • XPressHW, Category 1
    - PRR0331

†Lifetime warranty for product purchased after 05/01/2007.

Learn More

High-Res ImageHigh-Res Image

Low-Res ImageLow-Res Image

Reviews

"Simply put, those looking to combine wireless, a SPI firewall, SSL VPN and a multitude of other connectivity features need to look no further than the SRXN3205."
Frank Ohlhorst, eWeek Channel Insider

"The unit works fine and the wireless range is excellent. I would recommend and install it at customer sites. The SSL-VPN feature gives it an edge over the competition and offers an easy upgrade to clients who want to move up from using a standard ADSL connection to wireless with firewall and MultiNAT."
Mike Fodden, Raven Systems, United Kingdom

"I found the wireless range to be excellent, and got increased range over my previous firewall. The internet performance is especially good for streaming video (iPlayer etc) performance was absolutely flawless, even with other clients connected. Several of my customers will be replacing their current router with this device."
Andy Miller, Miller Systems, United Kingdom

Related Documents

Data Sheet Data Sheet

Related Products

RangeMax Wireless-N Notebook Adapter RangeMax Wireless-N Notebook Adapter - WN511B

ProSafe® VPN Client Software - Single User License ProSafe® VPN Client Software - Single User License - VPN01L

ProSafe® VPN Client Software - Five User License ProSafe® VPN Client Software - Five User License - VPN05L