NETGEAR
ProSecure
UTM9S
Prosecure Unified Threat Management Appliance

Please Note: Wireless and VDSL/ADSL2+ Modules Sold Separately
| NETGEAR Products | ||
|---|---|---|
| NETGEAR ProSecure UTM Series | ||
| ProSecure
UTM9S Unified Threat Management Appliance *Firewall and VPN Functionality Only *Wireless and VDSL/ADSL2+ Modules Sold Seperately |
#UTM9S-100NAS List Price: $520.00 Our Price: $367.00 |
|
| ProSecure
UTM9S Unified Threat Management Appliance Bundle - 1-Year *Includes 1-year Web, Email, Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement *Wireless and VDSL/ADSL2+ Modules Sold Seperately *$40.00 Mail-in-Rebate till 3/31/12 - Learn More! |
#UTM9SEW-100NAS List Price: $759.00 Our Price: $536.00 |
|
| ProSecure
UTM9S Unified Threat Management Appliance Bundle - 3-Years *Includes 3-year Web, Email, Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement *Wireless and VDSL/ADSL2+ Modules Sold Seperately *$80.00 Mail-in-Rebate till 3/31/12 - Learn More! |
#UTM9SEW3-100NAS List Price: $1,283.00 Our Price: $906.00 |
|
| NETGEAR VDSL Module for ProSecure | ||
| VDSL Module for ProSecure UTM9S | #UTM9SDSL-10000S List Price: $129.00 Our Price: $91.00 |
|
| NETGEAR Wireless N Module | ||
| Netgear UTM9S Dual-Band Wireless-N Module | #UTM9SWLSN-10000S List Price: $79.00 Our Price: $55.00 |
|
Click here to jump to more pricing!
NETGEAR
UTM9S Overview:
View
Product Demo (Pop-up)
The ProSecure UTM series of all-in-one gateway security firewalls combine best-of-breed enterprise-strength security technologies from Commtouch®, Mailshell™, and Sophos™ with patented* Stream Scanning Technology to protect businesses against today's Web, email, and network threats. Malware hosted on Web pages, phishing attacks, spam, virus infected emails, hackers, denial-of-service attacks, and other threats are now all part of a regular repertoire of sophisticated blended attacks that bypass traditional non-UTM firewalls with ease. Because comprehensive network security solutions require an abundance of processing power to examine network traffic in real time, existing all-in-one security solutions often use rudimentary security technologies that trade comprehensiveness for speed. True security must satisfy the requirements in both speed and coverage.
All-in-one Network Security - Redefined
ProSecure Unified Threat Management (UTM) firewalls combine performance with comprehensive security coverage. Patented Stream Scanning Technology enables the ProSecure UTM to utilize virus and malware threat databases from ProSecure and Sophos™ that are over one million signatures in size - up to 400x more comprehensive than legacy all-in-one platforms at a speed that is up to 5x faster than conventional methods. This architecture, combined with best-of-breed hybrid in-the-cloud Web filter and anti-spam technologies along with proven firewall, IPS, and VPN functionality, form the ideal growing business gateway security solution.

Revolutionary Stream Scanning Platform
Given the high performance requirements of scanning latency sensitive Web traffic, incorporating enterprise-grade security software technologies onto traditional all-in-one platforms has been a very difficult task. Traditional batch-based scanning methods introduce large amounts of latency into network traffic and can slow Web browsing to a crawl. All-in-one solutions in the past have tried to overcome this by minimizing the malware signature set, scanning only a select few file types, or by avoiding Web scanning altogether. This exposes an entire vector of the network to malware-based attacks. The ProSecure UTM features patented Stream Scanning Technology which analyses data streams as they enter the network. This significantly reduces latency and allows the use of an extensive malware signature library for scanning – thus offering an unprecedented combination of speed and coverage in an all-in-one solution.

Simple Setup, Ease of Management
The ProSecure UTM will easily replace any existing firewall or router. A simple 10-step setup wizard guides you through installation and the UTM will be up and running in minutes. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools using SNMP. Malware and IPS signature, software, and firmware updates are all handled by the UTM - online and automatically.
For many administrators and IT personnel one of their biggest nightmares is the management of individual licenses or "seats." Buying additional licenses when computers and personnel are added to the network is time-consuming and costly. The ProSecure UTM offers Web and email protection subscriptions with no "per-user " licensing.
Expandability
The ProSecure UTM9S has two modular slots that allow for optional interface cards to be added to tailor the appliance for specific installation requirements.
A VDSL/ADSL2+ Modem Module, available in both Annex A and Annex B versions, furnishes direct, always-on Internet connectivity. VDSL capability provides Internet connection speeds up to three times faster than traditional ADSL2+ DSL networks while providing backwards compatibility with ADSL2+.
In conjunction with two onboard RJ45 WAN ports for redundancy and failover, the VDSL/ADSL 2+ Modem Module, if installed, can be employed either as the primary WAN connection or as a third WAN port in a redundant/ load balancing scenario.
A Wireless-N Module provides access point capability to connect Wireless-N clients at both 2.4 GHz and 5.0 GHz frequencies at up to 15x the speed and 10x the coverage of legacy 802.11g networks.
Backwards compatibility with 802.11a, 802.11g, and 802.11b network devices allows for flexible deployment scenarios.
ProSecure UTM Features and Highlights:
Best-of-breed Anti-malware Engine
ProSecure Patented Stream Scanning Technology
Distributed Spam Analysis Anti-spam Technology
Distributed Web Analysis URL Filtering
|
Virtually Limitless Logging, Reporting and Quarantine Capability
IM and P2P Application Control
SSL & IPsec VPN Remote Access
Built-in SPI Firewall
|
Optional Modules:
UTM9S Wireless-N Module Specifications
|
|
UTM9S VDSL/ADSL2+ Module Specifications (Annex A)
|
|
UTM9S VDSL/ADSL2+ Module Specifications (Annex B)
|
UTM Series Comparison:
UTM Comparison Chart
| UTM5 | UTM9S | UTM10 | UTM25 | UTM50 | UTM150 | |
|---|---|---|---|---|---|---|
| Sizing Guidelines | ||||||
| Average Anti-virus Throughput¹ | 15 Mbps | 21 Mbps | 20 Mbps | 25 Mbps | 45 Mbps | 130 Mbps |
| Stateful Packet Inspection Firewall Throughput¹ | 90 Mbps | 130 Mbps | 90 Mbps | 127 Mbps | 400 Mbps | 900 Mbps |
| Maximum VPN Throughput¹ | 40 Mbps | 50 Mbps | 50 Mbps | 70 Mbps | 200 Mbps | 400 Mbps |
| Maximum Concurrent Connections | 8,000 | 16,000 | 12,000 | 27,000 | 40,000 | 65,000 |
| VLANs | 255 | 255 | 255 | 255 | 255 | 255 |
| Content Security | ||||||
| Web and Email Scanned Protocols | HTTP, HTTPS, FTP, SMTP, IMAP, POP3 | |||||
| Stream Scanning | ||||||
| Inbound and Outbound Inspection | ||||||
| Signature-Less Zero Hour Protection | ||||||
| Malware Signatures | 1.2 Million | 1.2 Million | 1.2 Million | 1.2 Million | 1.2 Million | 1.2 Million |
| Automatic Signature Updates | Hourly | Hourly | Hourly | Hourly | Hourly | Hourly |
| Web Content Filters | Filter By: HTML Body Keywords, File Extension | |||||
| Web Object Filters | ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies | |||||
| Email Content Filters | Filter By: Subject Keywords, Password-protected Attachments, File Extension, File Name | |||||
| Distributed Spam Analysis | ||||||
| Distributed Spam Analysis Supported Protocols | SMTP, POP3 | |||||
| Anti-spam Real-time Blacklist (RBL) | ||||||
| User Defined Spam Allowed/Block Lists | Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain | |||||
| Distributed Web Analysis w/ 64 categories | ||||||
| Instant Messaging (IM) Control | MSN® Messenger, Yahoo!® Messenger, mIRC, Google Talk | |||||
| Peer to Peer (P2P) Control | BitTorrent™, eDonkey, Gnutella | |||||
| Maximum Number of Users | Unlimited | |||||
| Firewall Features | ||||||
| Stateful Packet Inspection (SPI) | Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control | |||||
| Intrusion Detection & Prevention (IPS) | ||||||
| WAN Modes | NAT, Classical Routing | |||||
| ISP Address Assignment | DHCP, Static IP Assignment, PPPoE, PPTP | |||||
| NAT Modes | 1-1 NAT, PAT | |||||
| Routing | Static, Dynamic, RIPv1, RIPv2 | |||||
| VoIP | SIP ALG | |||||
| DDNS | DynDNS.org, TZO.com, Oray.net | |||||
| Firewall Functions | Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS) | |||||
| DHCP | DHCP Server, DHCP Relay | |||||
| User Authentication for VPN | Active Directory, LDAP, Radius, Local User Database | |||||
| Security Policies Based on Active Directory with Single Sign-On (SSO) | ||||||
| PCI Compliance Two Factor Authentication Support | ||||||
| VPN | ||||||
| Site to Site VPN Tunnels | 5 | 10 | 10 | 25 | 50 | 150 |
| Simultaneous SSL VPN Tunnels | 2 | 5 | 5 | 13 | 25 | 75 |
| IPsec Encryption Algorithm | DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5 | |||||
| Key Exchange | IKE, Manual Key, Pre-Shared Key, PKI, X.500 | |||||
| IPsec NAT Traversal | ||||||
| iPhone Native VPN Client Support | ||||||
| Included ProSafe VPN Client Lite Licenses | 0 | 0 | 1 | 1 | 3 | 3 |
| SSL Version Support | SSLv3, TLS1.0 | |||||
| SSL Encryption Support | DES, 3DES, ARC4, AES(128,256bit) | |||||
| SSL Message Integrity | MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1 | |||||
| SSL Certificate Support | RSA, Diffie-Hellman, Self | |||||
| SSL VPN Platforms Supported | Windows 2000 / XP / Vista® (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x | |||||
| Deployment | ||||||
| VLAN Support | ||||||
| Multi-WAN Fail-over | ||||||
| Intelligent Traffic Load Balancing Based on Traffic Byte Count | ||||||
| Configuration Wizards | Setup, IPsec VPN, SSL VPN | |||||
| Logging and Reporting | ||||||
| Management | HTTP/HTTPS, SNMP v2c | |||||
| Reporting | Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic Malware Notifications, System Notifications | |||||
| Logging | Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Port Scan, IM, P2P, Firewall, IPsec VPN, SSL VPN | |||||
| Log Delivery | Management GUI Query, Email Delivery, Syslog | |||||
| Hardware | ||||||
| Gigabit RJ45 Ports WAN/LAN | 1/4 | 2/4 | 1/4 | 2/4 | 2/6 | 4/4 |
| DMZ Interfaces (Configurable) | 1 | 1 | 1 | 1 | 1 | 1 |
| Flash Memory/RAM | 2 GB/512 MB | 2 GB/512 MB | 2 GB/512 MB | 2 GB/1 GB | 2 GB/1 GB | 2 GB/1 GB |
| USB Ports | 1 | 1 | 1 | 1 | 1 | 1 |
| Certifications | ICSA: Anti-virus VPNC: AES Interop, Basic Interop Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering |
|||||
| Major Regulatory Compliance | FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS | |||||
| Storage and Operating Temperatures | Operating Temperature 0-45°C (32°-113°F), Storage Temperature -20-70°C (-4°-158°F) |
|||||
| Humidity | Operation 90% Maximum Relative, Storage 95% Maximum Relative | |||||
| Power Input Rating | 100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max | 100-240V, AC/50-60Hz, Universal Input, 1.0 Amp Max | ||||
| Dimensions (W x H x D) cm | 33 x 4.3 x 20.9 | 33 x 4.3 x 28.6 | 33 x 4.3 x 20.9 | 33 x 4.3 x 20.9 | 44 x 4.3 x 25.3 | 44 x 4.3 x 25.3 |
| Dimensions (W x H x D) in | 13 x 1.7 x 8.2 | 13 x 1.7 x 11.25 | 13 x 1.7 x 8.2 | 13 x 1.7 x 8.2 | 17.3 x 1.7 x 9.96 | 17.3 x 1.7 x 9.96 |
| Weight kg/lb | 2.1/4.6 | 2.56/5.65 | 2.1/4.6 | 2.1/4.6 | 2.9/6.4 | 2.9/6.4 |
| Package Contents | ProSecure UTM Appliance , Power Cable, Rubber Feet, Resource CD, Rackmount Kit, Warranty Card, Quick Installation Guide, Subscription Card (Bundles Only) | |||||
| Hardware Warranty | Lifetime | |||||
¹ Throughput measured in a lab environment. Actual performance may vary.
*Available on the UTM25 and UTM50.
Screenshots:
Sizing Guidelines:
ProSecure™ UTM appliances are situated between an organization's internal network and the Internet. The UTM acts as a stateful packet inspection firewall, keeping track of TCP connection state for every connection that is maintained through the UTM. Moreover, the UTM manages an organization's Internet usage and protects these organizations from Internet borne malware, spam, viruses, and inappropriate web surfing. With the ProSecure™ UTM appliance sitting between the organization and the Internet, it is critical that the UTM appliance is sized appropriately and matches the performance needs of the organization.
There are no industry-standard metrics for determining the model to select, as every organization is unique and displays different network traffic characteristics. Moreover, the performance of the UTM can vary widely depending on a number factors including the complexity of the firewall rules loaded, the number of current active VPN users, the IPS signatures employed, the number of active connections used by each user, and a host of other metrics, including, last but not least, the number of protocols inspected by the Antivirus engine and the number of signatures applied to the AV engine.
As such, NETGEAR highly recommends that you contact your ProSecure™ authorized VAR who is well versed in UTM sizing to benchmark your organization and recommend the best model for your needs. That said, NETGEAR generally uses several specifications to roughly evaluate the applicability of an UTM appliance:
Firewall Throughput:
A starting point is to estimate the throughput your organization requires between its internal network and the Internet. As the UTM appliance sits between your internal network and the Internet, firewall throughput number is the total amount of traffic that can be passed with the UTM in place.
Concurrent Sessions:
Users typically engage in a host of activities that consume TCP sessions. Web browsing over HTTP and HTTPS, FTP file transfers, Email over POP3, SMTP, and IMAP, Instant Messenger, Peer to Peer Traffic, TELNET, SSH and streaming audio and video all consume TCP sessions.
On the average, "normal" users typically consume 100-300 active TCP sessions. Virus Infected PCs turned into zombies can often consume upwards of 1000 active TCP sessions, although ProSecure™ UTM appliances have administrator-definable limits to contain infected PCs from consuming an excessive number of TCP sessions.
Anti-Virus Throughput & Virus Coverage:
Anti-Virus scanning can be performed against files or data embedded in time-sensitive applications such as web browsing over HTTP(s) or in latency-tolerant applications such as Email. Because Anti-Virus speed is directly correlated to the number of signatures applied in the scanning process and in the protocols being scanned, Anti-Virus throughput can typically be inflated by reducing the signature set size or reducing the numbers of protocols scanned. Thus, Anti-Virus effectiveness is often a balance between speed and thoroughness. ProSecure™ UTM appliances employ signature sets that are up 400x larger than competing legacy small business UTM solutions while employing patent-pending Stream Scanning technology to vastly increase Anti-Virus throughput.
UTM Appliance Model Comparison
| UTM5 | UTM10 | UTM25 | UTM50 | UTM150 | |
|---|---|---|---|---|---|
| Firewall Throughput (Mb/s) | 90 | 90 | 127 | 400 | 900 |
| Concurrent TCP Sessions | 8,000 | 12,000 | 27,000 | 40,000 | 65,000 |
| Anti-Virus Throughput (Mb/s) | 15 | 20 | 25 | 45 | 130 |
| Anti-Virus Signature Set Size | 1 Million+ | 1 Million+ | 1 Million+ | 1 Million+ | 1 Million+ |
Documentation:
![]()
Download the NETGEAR UTM Series Datasheet (.PDF)
Pricing Notes:
- Two-year hardware warranty included
- Package Contents: ProSecure Appliance (UTM5, UTM9S, UTM10, UTM25 or UTM50), Ethernet Cable, Power Cable, Rubber Feet, Warranty Card, Quick Installation Guide, Subscription Card (Bundles Only)
- Wireless and VDSL/ADSL2+ Modules Sold Seperately
| NETGEAR Products | ||
|---|---|---|
| NETGEAR ProSecure UTM Series | ||
| ProSecure
UTM9S Unified Threat Management Appliance *Firewall and VPN Functionality Only *Wireless and VDSL/ADSL2+ Modules Sold Seperately |
#UTM9S-100NAS List Price: $520.00 Our Price: $367.00 |
|
| ProSecure
UTM9S Unified Threat Management Appliance Bundle - 1-Year *Includes 1-year Web, Email, Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement *Wireless and VDSL/ADSL2+ Modules Sold Seperately *$40.00 Mail-in-Rebate till 3/31/12 - Learn More! |
#UTM9SEW-100NAS List Price: $759.00 Our Price: $536.00 |
|
| ProSecure
UTM9S Unified Threat Management Appliance Bundle - 3-Years *Includes 3-year Web, Email, Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement *Wireless and VDSL/ADSL2+ Modules Sold Seperately *$80.00 Mail-in-Rebate till 3/31/12 - Learn More! |
#UTM9SEW3-100NAS List Price: $1,283.00 Our Price: $906.00 |
|
| NETGEAR VDSL Module for ProSecure | ||
| VDSL Module for ProSecure UTM9S | #UTM9SDSL-10000S List Price: $129.00 Our Price: $91.00 |
|
| NETGEAR Wireless N Module | ||
| Netgear UTM9S Dual-Band Wireless-N Module | #UTM9SWLSN-10000S List Price: $79.00 Our Price: $55.00 |
|
| Firewall Pre-Configuration Service - Learn More | ||
| Basic Configuration (Any ProSecure Appliance) | #NTGR-BAS Our Price: $99.95 |
|
| Advanced Configuration (Any ProSecure Appliance) | #NTGR-ADV Our Price: $199.95 |
|
| NETGEAR VPN Client Licenses - Learn More | ||
| NETGEAR ProSafe VPNG01L
VPN Client Professional Software - One User License *Please Note: This product is delivered electronically. |
#VPNG01L List Price: $69.00 Our Price: $48.00 |
|
| NETGEAR ProSafe VPNG05L
VPN Client Professional Software - Five User License *Please Note: This product is delivered electronically. |
#VPNG05L List Price: $297.00 Our Price: $189.00 |
|
| NETGEAR ProSecure UTM Series Bundle Renewals | ||
| ProSecure
UTM9S Full Subscription Bundle, 1-Year Renewal *Includes 1 Year of Web, Email and Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement |
#UTM9SB-10000S List Price: $338.00 Our Price: $238.00 |
|
| ProSecure
UTM9S Full Subscription Bundle, 3-Year Renewal *Includes 3 Years of Web, Email and Software Maintenance & Upgrades, 24/7 Support, and Advanced Replacement |
#UTM9SB3-10000S List Price: $862.00 Our Price: $609.00 |
|
| NETGEAR ProSecure UTM Series Web Threat Management | ||
| ProSecure UTM9S Web Threat Management Subscription, 1-Year | #UTM9SW-10000S List Price: $130.00 Our Price: $91.00 |
|
| ProSecure UTM9S Web Threat Management Subscription, 3-Year | #UTM9SW3-10000S List Price: $331.00 Our Price: $234.00 |
|
| NETGEAR ProSecure UTM Series Email Threat Management | ||
| ProSecure UTM9S Email Threat Management Subscription, 1-Year | #UTM9SE-10000S List Price: $130.00 Our Price: $91.00 |
|
| ProSecure UTM9S Email Threat Management Subscription, 3-Year | #UTM9SE3-10000S List Price: $331.00 Our Price: $234.00 |
|
| NETGEAR ProSecure UTM Series Software Maintenance & Support | ||
| ProSecure UTM9S Software Maintenance & Upgrades, 24/7 Support, & Advanced Replacement, 1-Year | #UTM9SM-10000S List Price: $78.00 Our Price: $55.00 |
|
| ProSecure UTM9S Software Maintenance & Upgrades, 24/7 Support, & Advanced Replacement, 3-Year | #UTM9SM3-10000S List Price: $199.00 Our Price: $140.00 |
|












