NOTE: Opening holes in your firewall can compromise your LAN's security if done incorrectly.

The UG3200 supports 10 single-port-number-to-LAN IP mappings, called Virtual Servers. You no longer can specify TCP or UDP protocol for the mapping (both protocols are forwarded) since MaxGate removed the selection...most users didn't know what to do with it!  You also have one Exposed Host, (often called DMZ Computer on other routers), which puts one computer completely outside the UG3200's firewall.  "Loopback", i.e. the ability to access a mapped server from a LAN-side machine using the router's WAN-side address, checked out ok for a mapped HTTP server.

Port range mappings are supported via the Special Applications feature.  You can specify 10 port ranges, and each port range has an associated port range trigger for the mapping (see this page for an explanation of Triggered port maps).

Access control 
is done via port filtering.  You can define up to 6 groups of IP addresses, and either allow all Internet access, deny all Internet access, or block access for up to 30 single ports for each group.

Dynamic DNS
The UG3200 offers one year of dynamic DNS service through a partnership with TZO.  What this basically means is that after you register for the service and properly configure the UG3200, you'll be able to access computers in your LAN by name instead of by IP address.  When the IP address issued by your ISP changes, TZO tracks the change and automatically keeps your computer names linked to the new IP address.

The main limitation is that your domain name must end in Ugate.net.  If you already have your own domain name registered and want to use it with the UG3200, TZO can handle that too, but that's not a free service.  If you'd like to explore this aspect of the UG3200 more, try this link to some on-line documentation.

Routing
Dynamic RIP protocols are not supported, but you can set up to 20 static routes.

VPN
The UG3200 will allow PPTP and IPsec clients on the LAN side to access PPTP and IPsec servers on the Internet.  You can also set the unit to allow a PPTP server on your LAN to be accessed from the Internet, but support for a LAN side IPsec server is not provided.

The UG3200 has an entirely different circuit board and faster processor than the UG3000, so the speed test results did not disappoint, and are among the faster routers in this class:

All numbers are in Mbits per second (Mbps).
(Details of the measurement method can be found here.)

Here's what the UG3200 doesn't do:

• filter content by URL

• control user access by time period, password, or MAC address

• act as a VPN endpoint

• log traffic

The UG3200 is an evolutionary step in MaxGate's product line and if it follows tradition, should be a solid performer.  The pricing is fair for what you get, i.e. a 7 port 10/100 switch and fast router in one box, but more expensive than the other switched routers that have only four ports.  MaxGate has shown that it will competitively price, but as a follower, not a leader, so don't expect any bargains until directly competing units appear.