UTM Firewalls

Attention:

NETGEAR Inc. will exit from the ProSECURE business on January 1, 2017. To complete the full exit from the business, NETGEAR Inc. will no longer provide ProSECURE software support or subscription updates for any ProSECURE devices after December 31, 2016.

NETGEAR Inc. will continue to honor valid warranty claims for all ProSECURE devices purchased from an authorized reseller. Click here for more details on NETGEAR Warranty.

A Next Generation Firewall for Today’s Businesses

The NETGEAR ProSECURE^® UTM series of all-in-one next-generation firewalls combine an advanced application firewall with best-of-breed enterprise-strength security technologies such as anti-virus, anti-spam, Web filtering, and intrusion prevention (IPS) to protect businesses against today’s application, Web, email, and network threats.

Redefining the Firewall

ProSECURE^® UTM firewalls bring advanced network security technologies to small and medium businesses and remote/branch offices. Traditional firewalls can only block/accept traffic based on IP addresses and ports and offer little protection outside of that. This approach is quickly becoming obsolete in today’s Internet where many applications send/receive traffic over ports that are typically allowed by traditional firewalls. The built-in application firewall of the UTM overcomes the limitations of yesterday’s firewall and allows the UTM to monitor, control, and block hundreds of applications such as Skype, Facebook, BitTorrent^®, and Yahoo! Messenger; helping enhance employee productivity and enforce network usage policies. The UTM application firewall combined with best-of-breed anti-virus, Web filter, and anti-spam technologies along with IPS and VPN functionality, form the ideal firewall for today’s businesses.

Revolutionary Stream Scanning Platform

Given the high performance requirements of virus scanning, protecting latency sensitive Web traffic has often been a very difficult task using traditional anti-virus scanning methods. Attempting to scan viruses on legacy firewall platforms can slow network traffic to a crawl. This exposes an entire vector of the network to malware-based attacks. ProSECURE^® UTMs feature patented Stream Scanning Technology which analyses data streams as they enter the network. This significantly reduces latency and in conjunction with a cloud-based anti-virus library with over 45 million signatures, offers an unprecedented combination of speed and coverage.

Secure VPN Remote Access

ProSECURE^® UTM Firewalls provide secure remote access for offsite employees to the network by offering multiple types of virtual private network (VPN) tunnels. IT administrators have the option to setup SSL, IPSec, PPTP, and L2TP VPNs. SSL VPN tunnels provide clientless remote access to your corporate data for individual access anywhere and anytime while IPSec VPN tunnels provide both secure site-to-site tunnels and legacy support for client-based remote access.

Simple Setup, Ease of Management

The ProSECURE^® UTM will easily replace any existing firewall or router. A simple 10-step setup wizard guides you through installation and the UTM will be up and protecting your network in minutes. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools using SNMP. Virus, application, and IPS signatures are all handled by the UTM - online and automatically – making it ideal for networks with little to no IT resources.

Key Features and Advantages

All-in-one Unified Threat Management
Advanced Application Control Firewall Monitors and Controls Application Use on the Network
Cloud-based Anti-Virus with Over 45 Million Virus Signatures
Patented Stream-Scanning Technology Ensures Minimal Latency
Hybrid In-the-Cloud Anti-Spam Leverages Intelligence from the Cloud for Accurate Spam Detection
Hybrid In-the-Cloud Web Filter Enforces Internet Usage Policies
Zero Hour Threat Protection stops Unknown Threats in Real-time
IPsec & SSL VPN for Secure Remote Access
Simple Subscription Options
No Per-User Licensing

NETGEAR Warranty

This product is backed by a NETGEAR ProSAFE^{^®} Limited Lifetime Hardware Warranty.
ProSUPPORT 24x7 Advanced Technical Support via phone for 90 days (Remote diagnostics performed by our technical experts for prompt resolution of technical issues). ProSUPPORT coverage can be extended by purchasing one, three, or five year contracts.

ProSECURE^® Next-gen Firewalls Provide the Ideal Security Solution for Small and Mid-sized Businesses.

Web Security

Web-based threats are an exponentially growing problem, with new threat types and attack vectors continuously emerging at pace of over a threat per second. As a result, IT managers must develop comprehensive security measures which consider the wide array of threats.

Protect Your Business Networks: The ProSecure^™ security appliances use a best-of-breed security architecture to protect business networks from viruses, worms, spyware, trojans, rootkits, keyloggers, and other Internet-based threats - without impacting network productivity. All inbound and outbound content over HTTP, HTTPS (secure HTTP), and FTP is inspected for millions of known threats and unknown threats, proactively discovering and blocking threats to the network.

Stream Scanning Technology: Instrumental to ProSecure^™ security appliances, the patented Stream Scanning Technology scans data streams as they enter the network, rather than waiting for the entire communication to download before a scan can be performed. This enables the ProSecure appliance to process large amounts of data quickly, using a single scan to stop malware at the gateway before it infiltrates the network.

Hybrid In-the-Cloud Distributed Web Analysis Technology: ProSecure^™ security appliances employ NETGEAR Hybrid In-the-Cloud Distributed Web Analysis technology to filter malicious and unwanted URLs. With a virtually limitless master database of over 100 million URLs located in the cloud divided into 64 categories, data feeds from HTTP connectors deployed "in the cloud" at service providers throughout the world are analyzed and categorized by the NETGEAR URL Classification Center in real-time. The NETGEAR^® Distributed Web Analysis URL filtering engine automatically self adapts and categorizes new URLs that have previously been unknown – unlike less effective approaches that force administrators to manually "submit" new entries one by one. The Distributed Web Analysis not only blocks access to unwanted sites, but also blocks sites containing malware and other security threats.

Email Security

The ProSECURE^® UTM Firewalls utilize a best-of-breed solution to proactively protect users and IT infrastructure from spam and Email-borne threats. While traditional spam filtering techniques limit their search to specific header content that is often useless against most new threats, the UTM detects and blocks outbreaks in real time, based on their rapid and wide distribution behavior.

The NETGEAR^® in-the-cloud Distributed Spam Analysis architecture continuously gathers data from more than 50 million sources from around the world. Using this information, it accurately assesses an Email's legitimacy in real-time by analyzing its distribution patterns, rather than its header information. Once an Email is classified as spam, the scanner assigns it a signature and immediately generates a corresponding pattern file - effectively stopping an outbreak before it becomes widespread.

The benefits of the NETGEAR UTM Distributed Spam Analysis architecture include:

High Detection Rate – blocking upwards of 97% of spam
Effectiveness against all spam – including double-byte languages and image-based spam
Low False Positives – Less than 1 in 1.5 million reported false positive

Network Security

ProSecure UTM appliances include firewall functionality that deploys an array of network security technologies such as stateful packet inspection (SPI), Intrusion prevention (IPS), and denial-of-service (DoS) protection to protect the network from threats such as hackers, port scans, DoS attacks, and TCP/UDP floods.

The ProSecure UTM's network intrusion prevention and detection system utilizes a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods, preventing hackers from penetrating the network perimeter. IPS is not only important, but a necessity for any network security architecture.

The IPS engine performs protocol analysis, content searching/matching, and can also block or passively detect a variety of attacks and probes, such as buffer overflows, stealth port scans, web application attacks, and SQL injections amongst other attacks. Attacks are dropped as they are taking place.

In addition to protecting the network from outside threats, enforcing company network usage policies can prevent internal users from pulling in threats due to misuse. The ProSecure UTM's application controls can be used t block access to public IM clients such as Yahoo!^® Messenger, MIRC, and MSN^® Messenger and save bandwidth by blocking peer-to-peer (P2P) clients like BitTorrent, eDonkey, and Gnutella.

Remote Access

The ProSecure^® UTM appliance with SSL & IPsec VPN offers the best of both worlds by offering two types of virtual private network (VPN) tunnels, Secure Sockets Layer (SSL) and IP security (IPsec), for optimal secure connection to your network. SSL VPN tunnels provide clientless remote access to your corporate data for individual access anywhere and anytime while IPsec VPN tunnels provide both secure site-to-site tunnels and legacy support for client-based remote access.

The ProSecure UTM appliance enables easy, secure and cost-effective clientless remote access for any employee without complicated installations or PC administrative access. VPN tunnel protocol redirection enables users with administrative access to their PCs to:

Use any application on their corporate PC
No need to install, configure, and maintain IPsec software clients on corporate PCs
Freedom from complex network limitations associated with IPsec such as NAT Traversal, multiple PCs from one public NAT address, etc.
Freedom to access VPNs from any PC with a browser
Use only a browser to connect – no software installation necessary
Securely connect through a dissolvable Java/ActiveX agent

Working Remotely via SSL VPN Tunnel Protocol Redirection: Because corporate laptops are already loaded with the applications employees need to do their jobs, they require full corporate network access for file sharing and email connectivity. The ProSecure UTM appliance is able to connect to the corporate network using VPN tunneling, enabling users to securely and privately transfer information.

BACK TO MODELS

Product Number

UTM50

Product Thumbnail

Get Support

Datasheet (PDF)

UTM Series Datasheet

Firewall Throughput

980 Mbps

Application Firewall Throughput

905 Mbps

Anti-virus Throughput

42 Mbps

IPS Throughput

320 Mbps

UTM Throughput (HTTP Traffic)

32 Mbps

UTM Throughput (non-HTTP Traffic, e.g. P2P, DNS, SSH)

320 Mbps

Maximum VPN Throughput

85 Mbps

Maximum Concurrent Connections

40000

802.1q VLANs

CONTENT SECURITY

Web and Email Scanned Protocols

HTTP, HTTPS, FTP, SMTP, IMAP, POP3

Stream Scanning

Inbound and Outbound Inspection

Signature-Less Zero Hour Protection

Malware Signatures

45 Million

Web Content Filters

Filter By: HTTPS Smart Block, HTML Body Keywords, File Extension

Web Object Filters

ActiveX, Java^™, Flash, JavaScript^™, Proxy, Cookies

Email Content Filters

Filter By: Subject Keywords, Password-protected Attachments, File Extension, File Name

Distributed Spam Analysis

Distributed Spam Analysis Supported Protocols

SMTP, POP3

Anti-spam Real-time Blacklist (RBL)

User Defined Spam Allowed/Block Lists

Unlimited

FIREWALL FEATURES

Stateful Packet Inspection (SPI)

Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control

Application Firewall

Global Mode, Policy Mode, SSL Decryption, Granular Application Policies, Application Session Monitoring, Application Dashboard

Applications Protected

1212

Intrusion Detection & Prevention (IPS)

IPS Signatures

2114

WAN modes

NAT, Classical Routing

ISP Address Assignment

DHCP, Static IP Assignment, PPPoE, PPTP

Secondary WAN IP Addresses

NAT Modes

1-1 NAT, PAT

Routing

Static, Dynamic, RIPv1, RIPv2

VoIP

SIP ALG

DDNS

DynDNS.org, TZO.com, Oray.net, 3322 DDNS

Firewall Functions

Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS)

DHCP

DHCP Server, DHCP Relay

User Authentication for VPN

Active Directory, LDAP, Radius, Local User Database

Security Policies Based on Active Directory with Single Sign-On (SSO)

PCI Compliance Two Factor Authentication Support

VPN

Site to Site VPN Tunnels

SSL VPN Tunnels

L2TP, PPTP VPN Tunnels

IPsec Encryption Algorithm

DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5

Key Exchange

IKE, Manual Key, Pre-Shared Key, PKI, X.500

IPsec NAT Traversal

iPhone Native VPN Client Support

Included ProSafe VPN Client Lite Licenses

SSL Version Support

SSLv3, TLS1.0

SSL Encryption Support

DES, 3DES, ARC4, AES(128,256bit)

SSL Message Integrity

MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1

SSL Certificate Support

RSA, Diffie-Hellman, Self (Key Lengths 512-bit, 1024-bit, 2048-bit )

SSL VPN Platforms Supported

Windows 2000 / XP / Vista^® (32bit), Windows 7 (32 and 64bit), Mac OS^® X 10.4.x/10.6.

DEPLOYMENT

VLAN Support

Multi-WAN Fall-over

Intelligent Traffic Load Balancing Based on Traffic Byte Count

USB Dongle Support for 3G/4G WAN Connections

Configuration Wizards

Setup, IPsec VPN, SSL VPN

Electronic License

LOGGING AND REPORTING

Management

HTTP/HTTPS, SNMP v2c

Reporting

Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic Malware Notifications, System Notifications

Logging

Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Application, Port Scan, IM, P2P, Firewall, IPsec VPN, SSL VPN

Log Delivery

Management GUI Query, Email Delivery, Syslog

HARDWARE

Gigabit RJ454 Ports WAN/LAN

DMZ Interfaces (Configurable)

Flash memory/RAM

2 GB/1 GB

USB Ports

Certifications

ICSA: Anti-virus VPNC: AES Interop, Basic Interop Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering

Major Regulatory Compliance

FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS

Storage and Operating Temperature

Operating Temperature 0-45°C (32°-113°F), Storage Temperature -20-70°C (-4°-158°F)

Humidity

Operation 90% Maximum Relative, Storage 95% Maximum Relative

Power Input Rating

100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max

Dimensions (W x H x D) cm

44 x 4.3 x 25.3

Dimensions (W x H xD) in

17.3 x 1.7 x 9.96

Weight kg/lb

2.9/6.4

Package Contents

ProSecure UTM Appliance, Power Cable, Rubber Feet, Resource CD, Rackmount Kit, Warranty Card, Quick Installation Guide, Electronic License (Bundles only)

Warranty

Lifetime