NETGEAR ProSecure UTM9S
Prosecure Unified Threat Management Appliance

NETGEAR UTM9S Overview:

Ideal for expanding businesses and includes modular wireless-N and modular broadband ADSL/VDSL capability. The UTM9S is a modular all-in-one next generation firewall – security features partnered with Sophos™, Commtouch™, and Mailshell™ include an advanced application firewall, industry-leading anti-malware/anti-virus scanning, hybrid in-the-cloud URL Filtering, Distributed Spam Analysis Anti-Spam, HTTP/HTTPS inspection, SSL and IPSec VPNs, and VOIP Support. Ideal as a standalone firewall for independent businesses or a ROBO solution / VPN Endpoint for larger distributed organizations.

View Product Demo (Pop-up)

The NETGEAR ProSecure UTM S Series is a modular all-in-one next-gen firewall with an advanced application firewall and layers of enterprise-strength security such as anti-virus, anti-spam, Web filtering, and intrusion prevention (IPS) built in. This gives business owners and IT admins greater visibility and control over their network and protects their businesses from today’s application, Web, email, and network threats. UTM S Series firewalls also have two modular slots that allow for optional interface cards to tailor the firewall for specific connectivity requirements.

All-in-one Network Security - Redefined

ProSecure UTM firewalls bring advanced network security technologies to small and medium businesses and remote/branch offices. Traditional firewalls can only block/accept traffic based on IP addresses and ports and offer little protection outside of that. This approach is quickly becoming obsolete in today’s Internet where many applications send/receive traffic over ports that are typically allowed by traditional firewalls. The built-in application firewall of the UTM overcomes the limitations of yesterday’s firewall and allows the UTM to monitor, control, and block hundreds of applications such as Skype, Facebook, BitTorrent®, and Yahoo! Messenger; helping enhance employee productivity and enforce network usage policies.

The UTM application firewall combined with best-of-breed anti-virus, Web filter, and anti-spam technologies along with IPS and VPN functionality, form the ideal firewall for today’s businesses.

Revolutionary Stream Scanning Platform

Given the high performance requirements of scanning latency sensitive Web traffic, incorporating enterprise-grade security software technologies onto traditional all-in-one platforms has been a very difficult task. Traditional batch-based scanning methods introduce large amounts of latency into network traffic and can slow Web browsing to a crawl. All-in-one solutions in the past have tried to overcome this by minimizing the malware signature set, scanning only a select few file types, or by avoiding Web scanning altogether. This exposes an entire vector of the network to malware-based attacks. The ProSecure UTM features patented Stream Scanning Technology which analyses data streams as they enter the network. This significantly reduces latency and allows the use of an extensive malware signature library for scanning – thus offering an unprecedented combination of speed and coverage in an all-in-one solution.

Simple Setup, Ease of Management

The ProSecure UTM will easily replace any existing firewall or router. A simple 10-step setup wizard guides you through installation and the UTM will be up and running in minutes. Administration is performed through an intuitive Web-based interface. Set granular policies and alerts, check summary statistics and graphical reports, drill down to IP address-level data, and integrate log data with standard network management tools using SNMP. Malware, Application, and IPS signature, software, and firmware updates are all handled by the UTM - online and automatically.

For many administrators and IT personnel one of their biggest nightmares is the management of individual licenses or “seats.” Buying additional licenses when computers and personnel are added to the network is time-consuming and costly. The ProSecure UTM offers Web and email protection subscriptions with no “per-user ” licensing.

Expandability

ProSecure UTM S Series firewalls have two modular slots that allow for optional interface cards to be addedto tailor the appliance for specific installation requirements.

A VDSL/ADSL2+ Modem Module, available in both Annex A and Annex B versions, furnishes direct, always-on Internet connectivity. VDSL capability provides Internet connection speeds up to three times faster than traditional ADSL2+ DSL networks while providing backwards compatibility with ADSL2+.

In conjunction with two onboard RJ45 WAN ports for redundancy and failover, the VDSL/ADSL 2+ Modem Module, if installed, can be employed either as the primary WAN connection or as a third WAN port in a redundant/ load balancing scenario.

A Wireless-N Module provides access point capability to connect Wireless-N clients at both 2.4 GHz and 5.0 GHz frequencies at up to 15x the speed and 10x the coverage of legacy 802.11g networks.

The built-in USB port supports qualified 3G/4G USB dongles from major ISPs to be used as either a primary or backup WAN connection.

ProSecure UTM Features and Highlights:

Advanced Application Control Firewall Monitors and controls application use Supports up to 1200 applications Granular per-application policies Preserve productivity and save bandwidth Best-of-breed Anti-malware Engine Enterprise-class malware scan engine Up to 400 times the coverage of legacy all-in-one solutions Over 1 million malware signatures Hourly automatic signature updates Zero hour heuristic based threat protection ProSecure Patented* Stream Scanning Technology Data streams are processed as they enter the network Low latency Web traffic scanning Distributed Spam Analysis Anti-spam Technology Hybrid in-the-cloud architecture Gathers threat data from over 50 million global sources New spam is classified and detected within minutes No learning period, works right out of the box

Distributed Web Analysis URL Filtering Hybrid in-the-cloud architecture Hundreds of millions of categorized URLs Real-time classification, 64 categories Per User & Group filtering policies Virtually Limitless Logging, Reporting and Quarantine Capability Integrates with NETGEAR ReadyNAS models with UTM plugin Automatically store logs on ReadyNAS NAS Up to 4.6 GB of log storage space for reports Conduct security forensics and reporting years in arrears SSL & IPSec VPN Remote Access SSL VPN - clientless remote access, anywhere, anytime IPSec VPN - secure site-to-site tunnels and client-based remote access Purchase additional licenses for IPSec VPN Built-in SPI Firewall Dual WAN Gigabit Firewall** provides load balancing and failover Gigabit LAN ports, configurable hardware DMZ port Stateful packet inspection (SPI) Denial-of-service (DoS) protection IPS prevents hackers from penetrating the network perimeter

* U.S. Patent No. 7,971,254
** Additional WAN connections available through the optional ADSL module and qualified 3G/4G USB dongles.

Optional Modules:

	UTM Wireless-N Module IEEE® 802.11n, 2.4 GHz and 5.0 GHz, Dual Band Selectable IEEE 802.11a 5.0 GHz IEEE 802.11g, IEEE 802.11b, 2.4GHz WiFi Protected Access® (WPA, WPA2) Wired Equivalent Privacy (WEP) 64, 128, & 256 bit IEEE 802.1x RADIUS authentication with EAP TLS, TTLS, PEAP Detachable antennas
	UTM VDSL/ADSL2+ Module Specifications (Annex A) Annex A/Annex M Support VDSL2 support ADSL 2/ADSL 2+ ADSL over ISDN (ITU G.992.3, ITU Annex G.992.5 Annex A) ATM Support of layer 1 protocol AAL5, PVCs, RFC 1483 ATM Support of ATM traffic management (COS - CBR, VBR, UBR)
	UTM VDSL/ADSL2+ Module Specifications (Annex B) Annex B/Annex M Support ADSL/ADSL2+ over ISDN (ITU G.992.1 Annex B, ISDN - compatible to U-R2 connection of Deutsche Telekom, G.Lite (ITU G.922.2) VDSL2 support ADSL 2/ADSL 2+ ADSL over ISDN (ITU G.992.3, ITU Annex G.992.1 Annex B) ATM Support of layer 1 protocol AAL5, PVCs, RFC 1483 ATM Support of ATM traffic management (COS - CBR, VBR, UBR)

UTM S Series Comparison:

	UTM9S	UTM25S
Performance
Firewall Throughput¹	933 Mbps	980 Mbps
Application Firewall Throughput¹	900 Mbps	905 Mbps
Anti-virus Throughput¹	23 Mbps	30 Mbps
IPS Throughput¹	172 Mbps	240 Mbps
UTM Throughput¹ (HTTP Traffic)	18 Mbps	24 Mbps
UTM Throughput¹ (non-HTTP Traffic, e.g. P2P, DNS, SSH)	172 Mbps	240 Mbps
Maximum VPN Throughput¹	80 Mbps	90 Mbps
Maximum Concurrent Connections¹	16,000	40,000
802.1q VLANs	255	255
Content Security
Web and Email Scanned Protocols	HTTP, HTTPS, FTP, SMTP, IMAP, POP3
Stream Scanning
Inbound and Outbound Inspection
Signature-Less Zero Hour Protection
Malware Signatures	1.2 Million	1.2 Million
Automatic Signature Updates	Hourly	Hourly
Web Content Filters	Filter By: HTML Body Keywords, File Extension
Web Object Filters	ActiveX, Java™, Flash, JavaScript™, Proxy, Cookies
Email Content Filters	Filter By: Subject Keywords, Password-protected Attachments, File Extension, File Name
Distributed Spam Analysis
Distributed Spam Analysis Supported Protocols	SMTP, POP3
Anti-spam Real-time Blacklist (RBL)
User Defined Spam Allowed/Block Lists	Filter By: Sender Email Address, Domain, IP Address, Recipient Email Address, Domain
Distributed Web Analysis w/ 64 categories
Firewall Features
Stateful Packet Inspection (SPI)	Port/Service Blocking, Denial-of-service (DoS) Prevention, Stealth Mode, Block TCP Flood, Block UDP Flood, WAN/LAN Ping Response Control
Applications Protected	332	1212
Intrusion Detection & Prevention (IPS)
IPS Signatures	619	2114
WAN Modes	NAT, Classical Routing
ISP Address Assignment	DHCP, Static IP Assignment, PPPoE, PPTP
Secondary WAN IP Addresses	32
NAT Modes	1-1 NAT, PAT
Routing	Static, Dynamic, RIPv1, RIPv2
VoIP	SIP ALG
DDNS	DynDNS.org, TZO.com, Oray.net
Firewall Functions	Port Range Forwarding, Port Triggering, DNS proxy, MAC Address Cloning/spoofing, Network Time Protocol NTP Support, Diagnostic Tools (ping, DNS lookup, trace route, other), Auto-Uplink on Switch Ports, L3 Quality of Service (QoS) ,LAN-to-WAN and WAN-to-LAN (ToS)
DHCP	DHCP Server, DHCP Relay
User Authentication for VPN	Active Directory, LDAP, Radius, Local User Database
Security Policies Based on Active Directory with Single Sign-On (SSO)
PCI Compliance Two Factor Authentication Support
VPN
IPSec VPN Tunnels	10	25
SSL VPN Tunnels	5	14
L2TP, PPTP VPN Tunnels	5	5
IPsec Encryption Algorithm	DES, 3DES, AES(128,192,256 bit)/SHA-1, MD5
Key Exchange	IKE, Manual Key, Pre-Shared Key, PKI, X.500
IPsec NAT Traversal
iPhone Native VPN Client Support
Included ProSafe VPN Client Lite Licenses	1	1
SSL Version Support	SSLv3, TLS1.0
SSL Encryption Support	DES, 3DES, ARC4, AES(128,256bit)
SSL Message Integrity	MD5, SHA-1, MAC-MD5/SHA-1, HMAC-MD5/SHA-1
SSL Certificate Support	RSA, Diffie-Hellman, Self
SSL VPN Platforms Supported	Windows 2000 / XP / Vista® (32bit), Windows 7 (32 and 64bit), Mac OS® X 10.4.x/10.6.x
Deployment
802.1q VLAN Support
Multi-WAN Failover
Intelligent Traffic Load Balancing
USB Dongle Support for 3G/4G WAN Connections
Configuration Wizards	Setup, IPsec VPN, SSL VPN
Electronic License
Logging and Reporting
Management	HTTP/HTTPS, SNMP v2c
Reporting	Summary Statistics, Graphical Reporting, Automatic Outbreak Alerts, Automatic Malware Notifications, System Notifications
Logging	Traffic, Malware, Spam, Content Filter, Email Filter, System, Service, IPS, Port Scan, IM, P2P, Firewall, IPsec VPN, SSL VPN
Log Delivery	Management GUI Query, Email Delivery, Syslog
Hardware
Gigabit RJ45 Ports WAN/LAN	2/4	2/4
DMZ Interfaces (Configurable)	1	1
Flash Memory/RAM	2 GB/512 MB	2 GB/1 GB
USB Ports	1	11111
Certifications	ICSA: Anti-virus VPNC: AES Interop, Basic Interop Checkmark: Anti-Malware, Anti-Spam, Enterprise Firewall, VPN, IPS, URL Filtering
Major Regulatory Compliance	FCC Part 15 Class A, CE mark commercial, VCCI, C-Tick Class A, CE/LVD, cUL, RoHS, China RoHS
Storage and Operating Temperatures	Operating Temperature 0-45°C (32°-113°F), Storage Temperature -20-70°C (-4°-158°F)
Humidity	Operation 90% Maximum Relative, Storage 95% Maximum Relative
Power Input Rating	100-240V, AC/50-60Hz, Universal Input, 1.2 Amp Max100-240V, AC/50-60Hz, Universal Input, 1.0 Amp Max
Dimensions (W x H x D) cm	33 x 4.3 x 28.6	33 x 4.3 x 28.6
Dimensions (W x H x D) in	13 x 1.7 x 11.25	13 x 1.7 x 11.25
Weight kg/lb	2.56/5.65	2.56/5.65
Package Contents	ProSecure UTM Appliance , Power Cable, Rubber Feet, Resource CD, Rackmount Kit, Warranty Card, Quick Installation Guide, Subscription Card (Bundles Only)
Hardware Warranty	Lifetime

* U.S. Patent No. 7,971,254
** Additional WAN connections available through the optional ADSL module and qualified 3G/4G USB dongles.
¹ Throughput measured in a lab environment. Actual performance may vary depending on network conditions and activated services.
² Electronic Licenses are now used to register UTMs that are purchased as part of a bundle. A license key will be assigned to the UTM at the time it is registered with NETGEAR License servers.

Screenshots:

 

Documentation:

Download the NETGEAR UTM S Series Datasheet (.PDF)