Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Manage Users, Authentication, and VPN Certificates 
509  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
The Router Status screen displays.
6. Select Users > Users. 
The Users screen displays.
7. In the List of Users table, to the right of the user for which you want to set login policies, click 
the corresponding Policies button.
The policies submenu tabs display, with the Login Policies screen in view.
8. Click the By Client Browser submenu tab. 
The By Client Browser screen displays. The...

Manage Users, Authentication, and VPN Certificates 
510 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
12. Click the Add button. 
The browser is added to the Defined Browsers table.
13. Repeat Step 11 and Step 12 for any other browsers that you want to add to the Defined 
Browsers table.
Remove One or More Web Browsers for Login Restrictions
The following procedure describes how to remove one or more web browsers that you no 
longer need for login restrictions.
To remove one or more web...

Manage Users, Authentication, and VPN Certificates 
511  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Change Passwords and Automatic Logout Period
For any user, you can change the password and automatic logout period. Only administrators 
have read/write access and can change these settings. All other users have read-only 
access.
IMPORTANT:
The default administrator passwords for the web management 
interface are both password. NETGEAR recommends that you 
change the password for the...

Manage Users, Authentication, and VPN Certificates 
512 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. In the List of Users table, to the right of the user for which you want to change the settings, 
click the corresponding Edit button.
The Edit Users screen displays.
8. Change the password and logout period settings as described in the following table.
9. Click the Apply button.
Your settings are saved.
Manage Digital Certificates for VPN Connections
The following sections provide...

Manage Users, Authentication, and VPN Certificates 
513  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
VPN Certificates Overview
The VPN firewall uses digital certificates (also known as X509 certificates) during the Internet 
Key Exchange (IKE) authentication phase to authenticate connecting IPSec VPN gateways 
or clients, or to be authenticated by remote entities:
•On the VPN firewall, you can enter a digital certificate when you manually configure an 
IKE policy. For an IKE policy, the...

Manage Users, Authentication, and VPN Certificates 
514 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
You can view loaded digital certificates, upload a new digital certificate, and generate a 
certificate signing request (CSR). The VPN firewall typically holds two types of digital 
certificates:
•CA certificates. Each CA issues its own digital certificate to validate communication with 
the CA and to verify the validity of digital certificates that are signed by the CA.
•Self-signed...

Manage Users, Authentication, and VPN Certificates 
515  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
4. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name is admin and the default 
password is password.
5. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the...

Manage Users, Authentication, and VPN Certificates 
516 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Remove a CA Certificate
The following procedure describes how to remove one or more CA certificates that you no 
longer need.
To remove one or more CA certificates:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is...

Manage Users, Authentication, and VPN Certificates 
517  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Generate a Certificate Signing Request and Obtain a Self-Signed Certificate 
from a CA
To use a self-signed certificate, you first must request the digital certificate from a CA and 
then download and activate the digital certificate on the VPN firewall. To request a 
self-signed certificate from a CA, you must generate a certificate signing request (CSR) for 
and on the VPN firewall. The CSR...

Manage Users, Authentication, and VPN Certificates 
518 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. In the Generate Self Certificate Request section, enter the settings as described in the 
following table.
SettingDescription
Name A descriptive name of the domain for identification and management purposes.
Subject The name that other organizations see as the holder (owner) of the certificate. In 
general, use your registered business name or official company name for this 
purpose....