ProSafe™ SSL VPN Concentrator 25

Overview

Two Ways to Work Remotely
Employees need VPN access to corporate data and network functions. Whether you are a small or a mid-sized business trying to provide remote access to employees while they are physically away from work, the NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 provides businesses an easy, secure and cost-effective way to access their data with support for up to 25 concurrent SSL VPN connections.  However, the type of computer used and the applications needed dictate which access method is best suited to each organization’s needs. VPN tunnel protocol redirection is best for employees who need full network access. SSL application proxy best serves organizations that want to limit employees’ use to only the applications and network access necessary to meet their particular job requirements. 

From the Corporate Laptop: Full Network Access via VPN Tunnel Protocol Redirection 
Because corporate laptops are already loaded with the applications employees need to do their jobs, they require full corporate network access for file sharing and email connectivity. The NETGEAR ProSafe™ SSL VPN Concentrator 25 SSL312 is able to connect to the corporate network using VPN tunneling, enabling users to securely and privately transfer information.

The SSL312 enables easy, secure and cost-effective clientless remote access for any employee without complicated installations or administrator access.  VPN tunnel protocol redirection  enables users with administrative access to their PCs to:

• Use any application on their corporate PC
• Use only a browser to connect — no software installation necessary
• Securely connect through a dissolvable Java/ActiveX agent

 
Figure 1: Connecting through VPN tunnel protocol redirection is as simple as clicking the icon

Figure 2: Dissolvable Java/ActiveX agent

From a Non-Corporate Computer: SSL Application Proxy 
Employees often need to access information from their home PC, a friend’s computer, or even an Internet kiosk at an airport. In these situations, the user needs a front-end portal designed to run job-specific applications that the accessing computer may not have installed.

This is where the two SSL connection techniques differ. In this case, the user is able to connect to the corporate network through a web-page based application proxy via the SSL312.  This enables users to connect without having PC administrative privileges that would be otherwise required to run dissolvable ActiveX/Java agents. This scenario is ideal in cases where users are unable to install applications or agents on the accessing computer.

Figure 3: Applications via SSL Application Proxy

Figure 4: Remote Desktop via SSL Application Proxy

Figure 5: File Browsing via SSL Application Proxy

Figure 6: Utilities via SSL Application Proxy

With the SSL312’s built in application proxy, users connect to a portal that features the applications relevant to their specific job, limiting their access only to job-relevant tasks and applications. By double-clicking on the icon, the application is run virtually through the Web browser. The SSL312 enables users to create the virtual workplace they need to operate anytime, anywhere.

Moreover, the SSL312 allows small and mid-sized businesses to fully customize each user’s portal experience. Portals can be matched in form and function to the individual employees’ role, access needs, and technical knowledge. The intuitive administration GUI quickly guides administrators through the installation process and simplifies day-to-day maintenance. Granular policy configuration tools give administrator the flexibility of providing remote access based upon the individuals role and responsibility.

The SSL312 application proxy is best for users who:

• Use public or non-corporate PCs
• Require access to only specific applications and servers
• Lack administrative rights on their accessing PC to run ActiveX/Java dissolvable agents

   

Specifications

Hardware

• SSL VPN Acceleration
• Ethernet Ports: Two (2) 10/100 Mbps LAN, One (1) Serial Port
• Auto-Sensing and Uplink™ on all ports

Memory (Flash/DRAM)

• 16/128 M

Processor Speed

• 200 MHz

Mode of Operation

• Static routes
• User support: Unrestricted

SSL VPN

• SSL VPN Tunnels: 25
• SSL Version Support: SSLv3 and TLS 1.0
• SSL Encryption Support: DES, 3DES, ARC4, AES (ECB, CBC, XCBC, CNTR) 128/256 bit
• SSL Message Integrity: MD5, SHA-1, MAC-MDS/SHA-1, HMAC-MD5/SHA-1
• Certificate Support: RSA
• Diffie-Hellman, Self

Access Mode Support

• Browser Support: Microsoft® Internet Explorer, Apple® Safari
• Full Network Access Support
• Port Forwarding
• Support for Terminal Services and VNC
• WebCIFS, Telnet, FTP, SSH, WebFTP
• User- and group-level bookmarks
• Supports automatic cache cleanup after session termination

User Repository Support

• Local user database
• Microsoft Active Directory
• LDAP directory
• NT domains
• RADIUS (PAP, CHAP, MSCHAP, MSCHAPv2)

System Management

• E-mail notification
• NTP support
• Remote logging
• Telnet
• Web GUI

Physical Specifications

• Dimensions: (w x d x h) 251 x 178 x 40 mm (9.88 x 7.0 x 1.56 in)
• Weight: 1.16 kg (2.56 lb)

Environmental Specifications

• Operating temperature: 0-40°C
• Operating humidity: 10-90% relative humidity
• Mean Time Between Failure (MTBF): 300,000 hours (~34 years)
• Acoustic Noise: 0 dB

Warranty

• VPN Concentrator: NETGEAR Lifetime Warranty †
• Power supply: NETGEAR 3-year Warranty

Package Contents

• SSL312 VPN Concentrator
• Power Supply localized to country of sale
• Console cable and connector
• Ethernet cable
• Installation guide
• Warranty/Support card

†Lifetime warranty for product purchased after 05/01/2007. For product purchased before 05/01/2007, warranty is limited lifetime.

System Requirements