Firewalls - IAC - DTIC

Section 3 Firewall Products – Multifunction Firewalls
GeNUScreen Firewall & VPN Appliance
Abstract
The GeNUScreen Firewall & VPN Appliance provides
the same packet inspection firewall found in the
GeNUGate Two-Tier Firewall, and adds IPsec
network-layer VPN that supports both tunneling and
transport (packet payload only is encrypted) modes,
as well as policy-based bridging and network mode
(routing protocols, e.g., OSPF, over VPN connections).
VPN authentication is possible using RSA, preshared
keys, or X.509 PKI. Encryption is provided via AES,
3DES, Blowfish, or CAST, with hashing via MD5,
SHA-1, or SHA-2. As with the firewall, the VPN
appliance provides high availability through activeactive
load balancing; the VPN appliance also
implements switch trunking and hot standby for
automatic failover. In addition to GeNUScreen’s
packet filtering firewall and VPN capabilities,
optional modules are available to implement
application-level capabilities such as virus scanning
for HTTP and SMTP traffic, DNS and HTTP caching,
and URL filtering.
118 Firewalls IA Tools Report – Seventh Edition
GeNUScreen Firewall & VPN Appliance
Type of Firewall VPN firewall (with SIF [+ waF option])
oS Included (openBSd)
Format appliance
License Commercial
NIaP Validated No (BSI)
Common Criteria EaL4+ (http://www.commoncriteriaportal.
org/files/epfiles/0565a_pdf.pdf)
developer GeNUa mbH (Germany)
Information http://www.netgear.com/business/
products/security/UTM-series/default.aspx