Datasheet
• Enterprise-class URL Filter - The STM’s URL filtering engine employs enterprise-class Web
filter technology with URLs divided into 64 categories for specific and targeted administration.
With a database of over 100 million URLs, the NETGEAR STM URL filtering engine relies on
HTTP connectors deployed “in the cloud” at service providers throughout the world to classify
and update URL entries in real time. The NETGEAR STM URL filtering engine automatically self-
adapts and categorizes new URLs that have previously been unknown – unlike less effective
approaches that force administrators to manually “submit” new entries one by one. The URL
filter not only blocks access to unwanted sites, but also blocks sites containing spyware.
• IM, P2P, Toolbar Application Control** – Enforce company network usage policies with the
STM’s application control feature. Preserve productivity by blocking access to public IM clients
such as AIM
®
, Yahoo!
®
Messenger, ICQ, and MSN
®
Messenger and save bandwidth by blocking
streaming audio and video applications like RealPlayer
®
, iTunes
®
, and Winamp. Stop annoying
toolbars from downloading and running on client Web browsers.
With the STM, NETGEAR brings security to the SMB that was previously reserved for the enterprise.
Revolutionary Stream
Scanning Platform
Typically, best-of-breed security software technologies are very processor and memory intensive.
Given the high performance requirements of scanning latency sensitive Web traffic, incorporating
enterprise grade security software technologies onto SMB-priced hardware platforms has
traditionally been a very difficult task. The NETGEAR STM features patent-pending Stream
Scanning Technology which analyses data streams as they enter the network. The NETGEAR
Stream Scanning approach is many times faster than that of more traditional batch-based
scanning methods where the entire file is buffered before it is scanned. Because of its nature,
traditional batch-based scanning methods introduce latency to network traffic. While latency is
more tolerable for email traffic, for large amounts of HTTP Web traffic, such latency often slows
Web browsing to a crawl. Traditional approaches to work around this problem include the use
of proxies, scanning only a handful of file types, or clustering multiple units. However, these
strategies are typically difficult to configure and install, very expensive, often less secure, and still
do not provide the same level of performance made possible by NETGEAR patent-pending
Stream Scanning Technology. This Stream Scanning architecture is the foundation on which
the STM is built.
Simple Setup,
Ease of Management
The STM deploys in-line in a matter of minutes, anywhere in the network. It runs automatically
and unobtrusively. There is no need to reconfigure the network, unlike traditional proxy-based
solutions. Simply set and forget. Administration is performed through an intuitive Web-based
interface. Set granular policies and alerts, check summary statistics and graphical reports, drill
down to IP address-level data, and integrate log data with standard network management tools
such as SNMP.
For many administrators and IT personnel one of their biggest nightmares is the management
of individual licenses or “seats”. Buying additional licenses when computers and personnel are
added to the network is time-consuming and costly. The NETGEAR STM series offers Web and
email protection subscriptions with no “per-user” licensing.
ProSecure Web and Email Threat Management Appliance STM Series
Traditional Batch-based Scanning Stream Scanning
Receive
Scan
Output
Latency
Time
Receive
Scan
Output
Latency
Time
Internet
Connects to
Desktop PC
Mail Server
STM Appliance
Switch
Firewall




