NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch

Main Features

Standard Warranty: 5 Year(s) Limited

Amazon.com Product Description

The NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch offers: Eight auto-sensing 10/100 Mbps ports. Stateful Packet Inspection firewall and NAT for security. Eight dedicated VPN tunnels for secure remote links

The NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch offers the small office a space-saving design combining wired connectivity, a NAT router, VPN appliance, SPI firewall, and an eight-port 10/100 Mbps Ethernet switch.

NAT and an SPI firewall protects your network from most common attacks. View larger.

Wired and Wireless Connectivity
The FVS318 has a built-in switch, with eight 10/100 Mbps auto-sensing, Auto Uplink ports. With Network Address Translation (NAT) routing, up to 253 users can simultaneously access your connection.

High-class Security
For businesses that require more than just a simple NAT router, the FVS318 offers significantly more protection. It provides: a Stateful Packet Inspection (SPI) firewall to prevent Denial of Service attacks, an Intrusion Detection System (IDS), the ability to block Java/URL/ActiveX based on extension, and FTP/SMTP/RPC program filtering.

The FVS318 has eight dedicated VPN tunnels to protect links between remote locations, encrypting the data between them. IPSec-based encryption up to 256 bit is also supported. This lets you easily create secure connections to branch offices or mobile workforces.

Easy Setup
Even with all the functionality the FVS318 provides, NETGEAR makes setup a breeze with the intuitive Smart Wizard that connects you to your ISP quickly. The web-based configuration screen is easy-to-use and requires no additional software. DHCP and PPPoE support makes widespread deployment simple.

The NETGEAR FVS318 ProSafe VPN Firewall 8 with 8-Port 10/100 Switch is backed by a 3-year warranty.

What's in the Box
FVS318 ProSafe VPN Firewall, power adapter, category 5 ethernet cable, installation guide, resource CD, warranty/support information card.

We had it up and running in less than fifteen minutes. My son configured two ipsec vpn tunnels with his friends networks using Linksys VPN routers in short order and I have one configured to my Windows 2000 computer at work that is behind a nat router using Windows 2000 built in ipsec capabilities. All three of our ipsec tunnels have proven to be reliable. I also have no problems using remote desktop through port 3389 or going to my pptp Windows 2000 vpn server through port 1723 behind the FVS318.

We have not experienced any of the problems that other reviewers have, but we have experience configuring these kinds of devices. The FVS318 has fairly extensive built in logging though it does not store much information itself but it can be configured to transfer log information to another computer and can even send you an email alert if certain attacks are detected. It has configurable services based on ports and protocols that are used to create port forwarding to inbound services and block outbound services. However you are limited to 16 services. It can control outbound traffic which is very important to defend against undetected trojans or users [and kids] running things like file swapping or other unapproved applications that access the internet. Internet access can be even controlled by a day/time schedule. If your network is fairly simple, a default block all rule could be created [which must be at the end of the list] and then you can specify what outbound services are allowed. It is also possible to deny a computer or address range of computers from having internet access while allowing others full access. Though the block services is a great addition to this device, it is somewhat limited if you have more than a few variations of configurations compared to a more sophisticated [and much more expensive] soho firewall, and the services can not be configured to use certain ip address/subnet destinations for outbound control which should not be a big deal for most home/small office users. However inbound services/port mapping can be configure to come from specific ip address/subnet. That is an important security feature. For instance if you open an internal computer for remote managment, you can configure the FVS318 to accept connections from only one ip address, which will keep everyone else on the internet from trying to connect and guess your password!

I am very impressed with the Netgear FVS318. Being a true SPI firewall and ipsec VPN endpoint with all the other feaures it has in a quality package, I can highly recommend it to anyone that wants a bargain priced internet device that is a big step up from the consumer grade nat routers.


A great product for an advanced home user!   April 13, 2004
Eric J. Fridman (Baltimore, MD United States)
33 out of 36 found this review helpful

Hello -

I see that there are a mix of reviews, so I'll try to put my angle in perspective.

I am an advanced home user in the respect that I am pretty knowledgeable about basic networking and have a basic lab at home with three PCs.

Anyway, my needs are strictly limited to (1) providing the most security for my PCs and (2) allowing the networked PCs to see each other when needed.

The FVS318 is one of the few Netgear products that passes the GRC.COM and symantec.com security scans. No ports open and no responses - total stealth according to those scans. That is important because I have a cable connection and leave my machines running 24x7.

The router has been very stable. I don't think I've ever had to reboot it in the past year.

Most of the newer Netgear products are very poor but this one is still great.


Work great for the price - not for newbies   June 18, 2004
st0rmbringer (Redondo Beach, CA United States)
14 out of 15 found this review helpful

This device works great and has been the best of it's kind I've used for the price range. I currently access about 6 of these devices using SofteRemoteLT on a daily basis and I am very pleased with the performance. The VPN is rock solid and great for running terminal services over. If you are looking to send files over your VPN, I only got about a 6Mbps throughput rate when I used Chariot and 3DES to test it in my lab (my Linksys BEFSX41 got about 16Mbps).

For a few of my clients I've even set up "static" tunnels using the FVS318 and Linksys BEFSX41's as "clients". The performance is fantastic and it is the configuration I recommend for people connecting to the office from home. Using DDNS on both the FVS318 and the BEFSX41 work great for dynamic connections.

As for people having connections drop or trouble routing traffic to internal networks, I suggest they read up on how to properly set their key lifetime and learn how to setup static routes. It is also important to realize that you have to have each network on a different subnet in order to route traffic successfully :/ As for those having trouble with port forwarding, I suggest you RTFM. Regardless of your troubles, there are plenty of resources on the web to help you set up rock solid VPN regardless of the make or model.

My only criticism is that the latest firmware v2.4 seems to be a little buggy when using PPPoE. If you connect to a DSL provider using PPPoE I would either downgrade to firmware v2.3 or look for another solution. If you have a DSL provider that doesn't use PPPoE, then enjoy!

HTH

-----
Update January 2005: The newer Cisco BEFSX41's are utter junk! Of the three Cisco co-branded BEFSX41's I've installed, none have worked well or at all. I no longer recommend using a BEFSX41 for anything other than target practice ;)


Certainly the best near $100-$150 firewall/VPN router available.   June 23, 2005
ZT3000 (New York, NY USA)
20 out of 23 found this review helpful

I'm well acquainted with all three hardware versions (1,2,3) of this router. This, also, is my top recommendation to anyone wanting an easy to install, no maintenance security device for home or small business use (under 25 users).

No other product I sell in the under $100 category can even come close to this router. In fact, the next step upgrade would be an over $300 router which all home and most small businesses would not buy, when you have all the performance and features you need in this product at a reduced price level.

I'm not going to rehash the obvious features, like SPI firewall and inbound Intrusion Detection, VPN, etc.., but rather, I'd like to address some acrimonious remarks/reviews with answers below.

1.] There are three firmware versions successively created (1, 2, 3). Netgear didn't plaster the words version 1 on the original boxes. So? Version 2 wasn't marked either, but version 3 is marked no less than 6 times on the box and the box has a green and white front, not the older blue and orange. Netgear is NOT selling version 1 or version 2 as others note, but some hardware dealers still might be so it's not Netgear's fault if you get otherwise. Here's a tip: Version 1 firmware has a serial numbers starting: FVS8..., Version 2 firmware has a serial number starting: FVS1..., Version 3 firmware has a serial number starting: FVS9....,
AND the serial number IS listed outside the box.

2.] My version 1 has been running a DHCP lease on a Motorola Comcast Surfboard3100 cable router for the last 3 or so years. I've shut down the cable modem and FVS318 more than once for furniture rearranging or to take to someone's home to diagnose their network problems and EACH time, the DHCP lease works without any interference or problems. Here's a tip: Power your cable modem up first and let the lights stablize (2-3 minutes), then power up your FVS318 and let those lights stablize (1-2 minutes), then power up your computer. Also if you've been thru a lightning storm and your gear is acting up, just push and hold the factory default reset button (on the backside) for 30 seconds, while the power is on.

3.] The VPN client software is included in the box. In every box! Look for the included CD. If your box doesn't have it, it's probably a used box resold as new.

4.] Multiple subnet routing in an enterprise network (not an enterprise product) over VPN does work. Here's a tip: Enable RIP2 routing on both the receiving VPN and the distant subnet router, could try RIP1 but it doesn't route among a subnetted network. RIP2 is a subnet routing protocol for inter-router communications (among other things).

5.] If your router is rebooting all the time or acting very strangely, use the factory default reset button previously mentioned. If that doesn't fix it, look for the firmware upgrade for your version of router (see serial number data above) and install it (also very easy). If your router is still defective, Netgear will do an exchange. (Not sure if level 1 support IS India).

Only thing I wish it had was ability to forward syslog port data from other syslog reporting FVS318's across a multiple VPN WAN setup.

For under or near $100 to $150 (depending on where you buy it), this router cannot be beat.




Easy to Configure - Strong Protection   September 9, 2004
TommyElf (Denton, TX)
6 out of 7 found this review helpful

Had this for less than fifteen minutes and it was up and running with minimal effort. It gives you strong protection capability, with lots of options to configure and change as to whatever you desire. In the first day of operation, my DSL connection was protected against a handful of probes for open ports. I can't recommend this product highly enough.