NETGEAR Cable/DSL ProSafe Firewall FR328S - Manual (Page 16)

FR328S ProSafe Firewall with Dial Back-Up Reference Manual v2
2-2 Introduction
M-10207-01, Reference Manual v2
• Remote Access Server (RAS) allows you to log in remotely through the serial port to access a
server on your LAN, other LAN resources, or the Internet based on a user name and password
you define.
• LAN-to-LAN access between two FR328S firewalls through the serial port with the option of
enabling auto-failover Internet access across the serial LAN-to-LAN connection.
A Powerful, True Firewall with Comprehensive Content Filtering
Unlike simple Internet sharing NAT routers, the FR328S is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• Denial of Service (DoS) protection
Automatically detects and thwarts Denial of Service (DoS) attacks such as Ping of Death,
SYN Flood, LAND Attack and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents
The FR328S will log security events such as blocked incoming traffic, port scans, attacks, and
administrator logins. You can configure the firewall to email the log to you at specified
intervals. You can also configure the firewall to send immediate alert messages to your email
address or email pager whenever a significant event occurs.
• With its content filtering feature, the FR328S prevents objectionable content from reaching
your PCs. The firewall allows you to control access to Internet content by screening for
keywords within Web addresses. You can configure the firewall to log and report attempts to
access objectionable Internet sites.
Protocol Support
The FR328S supports the Transmission Control Protocol/Internet Protocol (TCP/IP) and Routing
Information Protocol (RIP).
Appendix B, “Networks, Routing, and Firewall Basics” provides
further information on TCP/IP.
• The Ability to Enable or Disable IP Address Sharing by NAT
The FR328S allows several networked PCs to share an Internet account using only a single IP
address, which may be statically or dynamically assigned by your Internet service provider
(ISP). This technique, known as NAT, allows the use of an inexpensive single-user ISP
account. This feature can also be turned off completely for using the FR328S in settings where
you want to manage the IP address scheme of your organization.