Netgear ProSecure STM600 web security gateway
Although the Netgear ProSecure STM600 doesn't match the feature set and flexibility of some of the high-end web security gateways from vendors such as Bluecoat, Cisco and Trend Micro, it has a robust and solid design appropriate to midsized and small businesses
- Good web interface
- Doesn't match the feature set and flexibility of some high-end web security gateways,
By making a serious attempt to match the web security needs of small businesses, Netgear has created a product that sits between the relatively spare feature set of the UTM firewall and the expensive depth of enterprise-class web security gateways. The Netgear ProSecure STM600 gives network managers an excellent option to add web security at a reasonable price with minimum risk.
Netgear ProSecure STM600: web filtering made easy
With its bump-in-the-wire design, the Netgear ProSecure STM600 is easy to slip in and out of small networks to protect end users and control web usage. Web filtering on the STM600 includes antimalware scanning, category-based URL filtering, local block and allow lists, and some very basic content scanning, including blocking certain HTTP download file types and file extensions.
Although the web security settings on the Netgear ProSecure STM600 are system-wide, you do have the capability to apply some per-user rules which will override the basic settings. These can be done based on IP address or based on user authentication. We tested the STM600 by linking it to our corporate directory with RADIUS and Active Directory to verify that we could write rules so that some users could have full internet access with minimal content filtering, while others were restricted to a subset of sites. The mechanisms in the STM600 are a good match for the small business market.
The Netgear ProSecure STM600 can also inspect HTTPS traffic, a critical requirement for any web security gateway. The STM600 does this by signing a new digital certificate for any website protected by SSL. (The STM600 comes with a generic signing certificate, or you can supply your own.)
The Netgear ProSecure STM600 splices together the two encrypted connections: one between the STM600 and the real website, and the other between the STM600 and the end user, enabling it to inspect the traffic as it passes by. Of course, this requires the end user to accept the STM600's signing certificate as authentic or the network manager to pre-load it into end user systems, a necessary inconvenience.
We tested the Netgear ProSecure STM600's ability to identify recent viruses on web pages, in encrypted traffic, and found it lived up to its billing. We also tested the category-based URL filtering, and found about the normal success rate at categorisation and blocking.
An additional feature of the Netgear ProSecure STM600, Application Control, didn't show up as well in our testing. These controls purport to give the network manager greater control over applications. With vendors such as Palo Alto Networks pushing this as a key feature in managing end-user access, we were interested to see how the SMB-focused Netgear would do. Answer: not very well.
On the Netgear ProSecure STM600, Application Control includes four main categories of applications: messaging, media, peer-to-peer, and tools. Each category has between three and six applications. In theory, check the box and you turn off BitTorrent. We tested three of the four categories, but none of the applications we tested (BitTorrent, iTunes Music Store, Google Talk) were successfully blocked. Netgear needs to go back to the drawing board on that one.
Because the Netgear ProSecure STM600 sits in-line for all traffic, whether HTTP or not, we ran performance tests to see how well it would behave under load. Running typical loads through the STM600 with antimalware (but without URL filtering), we saw our system max out at 100 percent CPU around 33Mbps. With HTTPS traffic, the STM600 was about 15 percent slower, decrypting, scanning and re-encrypting at about 28Mbps.
Those speeds are fast enough for a typical small business internet connection. However, if you have bulk traffic in your network, such as backups, it would be better to avoid sending that through the Netgear ProSecure STM600, or make sure that you've configured the STM600 not to scan that traffic based on port number or IP address.
Our most significant criticism of the Netgear ProSecure STM600's design as a web security gateway is that it requires the network manager to know ahead of time all the TCP port numbers used to host malware. While most web traffic is running on Port 80 (or 443 for encrypted traffic), someone hosting malware on Port 81, for example, would be able to fly right by the STM600.
Although the Netgear ProSecure STM600 doesn't match the feature set and flexibility of some of the high-end web security gateways from vendors such as Bluecoat, Cisco, and Trend Micro, it has a robust and solid design appropriate to midsized and small businesses.
Join the Good Gear Guide newsletter!
Smart LED Bulb LB130
Epson EcoTank Expression ET-2500
UE Boom 2 Bluetooth speaker
Epson WorkForce ET-4550
Lexar® JumpDrive® S57 USB 3.0 flash drive
Samsung portable 1TB T3 drive
Everki ContemPRO Roll Top Laptop Backpack
Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop
Lexar® Portable SSD
Epson WorkForce DS-360W
Logitech G403 Prodigy mouse
Belkin MIXIT Metallic Lightning to USB Cable
Lexar® JumpDrive® S45 USB 3.0 flash drive
Huawei Mate 9
Google Daydream VR headset
3SIXT Ultra HD Sports Action Camera
Acer Swift 7
HP Pavilion x360 13”
Dell Inspiron 5000 series 2-in-1
HD Pan/Tilt Wi-Fi Camera with Night Vision NC450
Blade 28 backpack by Arc’teryx
Surface Pro 4
Audio-Technica ATH-ANC70 Noise Cancelling Headphones
Garmin Fenix Chronos smartwatch
Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards
Lexar® JumpDrive® C20c USB Type-C flash drive
Dell XPS 13 laptop
Most Popular Reviews
- 1 Gigabyte Aorus GA-AX370-Gaming 5 AMD Ryzen AM4 motherboard review
- 2 Kogan curved 4K UHD 55-inch LED LCD TV review
- 3 Panasonic Blu-ray recorder PVR set-top box review
- 4 Garmin Fenix Chronos fitness tracker smartwatch review
- 5 Star Wars Death Star Bluetooth levitating rotating speaker review
Latest News Articles
- FBI faces lawsuit because it's stayed mum on iPhone 5c hack
- Mozilla Firefox update fixes several vulnerabilities
- Australians targeted by Windows 10 phishing attacks
- How a burglar can make a copy of your door key, from a Facebook picture
- Vulnerability found in Samsung smartphone keyboard
PCW Evaluation Team
A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.
I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.
As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.
I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.
Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!
For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.
- Behind the scenes with Team Walkinshaw at V8 Supercars Melbourne 2017
- And the 2017 winner of the Formula 1 Best Pit Lane Boom Gantry is...
- First look at the Formula 1 2017 pit lane in Melbourne, Australia
- Which flagship TV is best? Sony 4K HDR Bravia 2016 versus LG 4K HDR OLED 2016
- 10 Blu-ray movies / Best looking Blu-ray movies
- FTSocial Media ExecutiveNSW
- FTDatabase Modelling SpecialistVIC
- FTCitrix ArchitectNSW
- FTOracle DeveloperACT
- FTData Storage Support Consultant (EMC)QLD
- FTField Deployment EngineerNSW
- FTSenior Full Stack Software Engineer, C#, Financial ServicesNSW
- TPProject SchedulerVIC
- FTInfrastructure ArchitectVIC
- FTIT Business Process Analyst x 3 - (government background)NSW
- FTUX DesignerNSW
- FTBusiness Solutions AnalystNSW
- FTSenior iOS DeveloperNSW
- FTProduct Manager / Business Analyst Clinical Solutions (Lorenzo)QLD
- FTSenior AGILE Business AnalystNSW
- FTHelpdesk TechnicianVIC
- CCSenior Network Architect l CCIE R&S l Cisco ACINSW
- CCSenior Network Architect l CCIE R&S l Cisco ACINSW
- FTJunior DevOps Developer - TelcoVIC
- FTNodeJS DeveloperNSW
- CCSenior Full Stack Web Developer - Port MacquarieQLD
- FTSCOM AdministratorACT
- FTFinance AnalystVIC
- FTHyperion SpecialistNSW
- TPBusiness Change ManagerQLD