Virtual Private Networking; A Powerful, True Firewall With Content Filtering - NETGEAR FWG114P Reference Manual

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P

Virtual Private Networking

The FWG114P Wireless Firewall/Print Server provides a secure encrypted connection between
your local network and remote networks or clients. Its VPN features include:
• Support for up to 2 simultaneous VPN connections.
• Support for industry standard VPN protocols.
The ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P supports standard
keying methods (Manual or IKE), standard authentication methods (MD5 and SHA-1), and
standard encryption methods (DES, 3DES). It is compatible with many other VPN products.
• Support for up to 168 bit encryption (3DES) for maximum security.
• Support for VPN Main Mode, Aggressive mode, or Manual Keying.
• Support for Fully Qualified Domain Name (FQDN) configuration when the Dynamic DNS
feature is enabled with one of the supported service providers.

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the FWG114P is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• DoS protection.
Automatically detects and thwarts DoS attacks, such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents.
The FWG114P will log security events, such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the router to e-mail the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your e-mail
address or e-mail pager whenever a significant event occurs.
• With its content filtering feature, the FWG114P prevents objectionable content from reaching
your PCs. The router allows you to control access to Internet content by screening for
keywords within Web addresses. You can configure the router to log and report attempts to
access objectionable Internet sites.
Introduction
March 2004, 202-10027-01
2-3