D-link DFL-260, DFL-860, DFL-2560G DATASHEET [de]

INTEGRATED FIREWALL/VPN

Powerful Firewall Engine



Virtual Private Network (VPN) Security



Granular Bandwidth Management



802.1Q VLAN Tagging



D-Link End-to-End Security Solution



(E2ES) Integration with ZoneDefense

ADVANCED FUNCTIONS

Stateful Packet Inspection (SPI)



Detect/Drop Intruding Packets



Server Load Balancing



Policy-Based Routing



DFL-260/860/1660/2560/2560G

NetDefend UTM Firewall Series

UNIFIED THREAT MANAGEMENT

Intrusion Prevention System (IPS)



Antivirus (AV) Protection



Web Content Filtering (WCF)



Optional Service Subscriptions



VIRTUAL PRIVATE NETWORK

IPSec NAT Traversal



VPN Hub and Spoke



IPSec, PPTP, L2TP



DES, 3DES, AES, Twoﬁsh, Blowﬁsh,



CAST-128 Encryption

Automated Key Management via IKE/



ISAKMP

Aggressive/Main/Quick Negotiation



(VPN)

ENHANCED NETWORK SERVICES

DHCP Server/Client/Relay



IGMP V3



H.323 NAT Traversal



Robust Application Security for ALGs



OSPF Dynamic Routing Protocol



Run-Time Web-Based Authentication



Today’s continuously shifting security environment presents a challenge for small/home office networks with limited IT capabilities. Fortunately, the D-Link NetDefend Uniﬁed Threat Management (UTM) firewalls provide a powerful security solution to protect business networks from a wide variety of threats. UTM Firewalls offer a comprehensive defense against virus attacks, unauthorized intrusions, and harmful content, successfully enhancing fundamental capabilities for managing, monitoring, and maintaining a healthy network.

Enterprise-Class Firewall Security

NetDefend UTM Firewalls provide complete advanced security features to manage, monitor, and maintain a healthy and secure network. Network management features include: Remote Management, Bandwidth Control Policies, URL Black/White Lists, Access Policies and SNMP. For network monitoring, these ﬁrewalls support e-mail alerts, system logs, consistency checks and real-time statistics.

Powerful VPN Performance

NetDefend UTM Firewalls offer an integrated VPN Client and Server. This allows remote offices to securely connect to a head office or a trusted partner network. Mobile users working from home or remote locations can also safely connect to the office network to access company data and e-mail. NetDefend UTM Firewalls have hardware-based VPN engines to support and manage a large number of VPN configurations. They support IPSec, PPTP, and

Uniﬁed Threat Management

NetDefend UTM Firewalls integrate an intrusion detection and prevention syst em, gateway antivirus, and content ﬁltering for superior Layer 7 content inspection protection. An acceleration engine increases throughput, while the realtime update service keeps the IPS information, antivirus signatures, and URL databases current.

L2TP protocols in Client/Server mode and can handle pass-through traffic as well. Advanced VPN configuration options include: DES/3DES/ AES/Twofish/Blowfish/CAST-128 encryption, Manual or IKE/ISAKMP key management, Quick/ Main/Aggressive Negotiation modes, and VPN authentication support using either an external RADIUS server or a large user database.

Combined, these enhancements help to protect the office network from application exploits, network worms, malicious code attacks, and provide everything a business needs to safely manage employee Internet access.

VPNC

CERTIFIED

AES

Interop

VPNC

CERTIFIED

Basic

Interop

PERFORMANCE OPTIMIZATION

UTM Acceleration Engine



Multiple WAN Interfaces for Trafﬁc



Load Sharing

DFL-260

Firewall Throughput: 80Mbps



VPN Performance: 25Mbps



1 10/100 Ethernet WAN Ports



4 10/100 Ethernet LAN Ports



1 10/100 Ethernet DMZ Port



(3DES/AES)

DFL-860

Firewall Throughput: 150Mbps



VPN Performance: 50Mbps



2 10/100 Ethernet WAN Ports



7 10/100 Ethernet LAN Ports



1 10/100 Ethernet DMZ Port



(3DES/AES)

DFL-1660

Firewall Throughput: 1.2Gbps



VPN Performance: 350Mbps



6 Conﬁgurable Gigabit Ethernet Ports



(3DES/AES)

DFL-2560(G)

Firewall Throughput: 2Gbps



VPN Performance: 1Gbps



10 Conﬁgurable Gigabit Ethernet Ports



4 SFP Ports



(DFL-2560G)

(3DES/AES)

DFL-260/860/1660/2560/2560G

NetDefend UTM Firewall Series

UTM Services

Maintaining an effective defense against the various threats originating from the Internet requires that all three databases used by the NetDefend UTM Firewalls are kept up-to-date. In order to provide a robust defense, D-Link offers optional NetDefend Firewall UTM Service subscriptions which include updates for each aspect of defense: Intrusion Prevention Systems (IPS), Antivirus and Web Content Filtering (WCF). NetDefend UTM Subscriptions ensure that each of the ﬁrewall's service databases are complete and effective.

Robust Intrusion Prevention

The NetDefend UTM Firewalls employ component-based signatures, a unique IPS technology which recognizes and protects against all varieties of known and unknown attacks. This system can address all critical aspects of an attack or potential attack including payload, NOP sled, infection, and exploits. In terms of signature coverage, the IPS database includes attack information and data from a global attack sensor-grid and exploits collected from public sites such as the National Vulnerability Database and Bugtrax. The NetDefend UTM Firewalls constantly create and optimize NetDefend signatures via the D-Link Auto-Signature Sensor System without overloading existing security appliances. These signatures ensure a high ratio of detection accuracy and a low ratio of false positives.

Stream-Based Virus Scanning

The NetDefend UTM Firewalls examine files of any size, using a stream-based virus scanning technology which eliminates the need to cache incoming ﬁles. This zero-cache scanning method not only increases inspection performance but also reduces network bottlenecks. NetDefend UTM ﬁrewalls use virus signatures from Kaspersky Labs to provide systems with reliable and accurate antivirus protection, as well as prompt signature updates. Consequentially, viruses and malware can be effectively blocked before they reach the network's desktops or mobile devices.

Web Content Filtering

Web Content Filtering helps administrators monitor, manage, and control employee usage of and access to the Internet. The NetDefend UTM Firewalls implement multiple global index servers with millions of URLs and real-time website data to enhance performance capacity and maximize service availability. These firewalls use highly granular policies and explicit black/white lists to control access to certain types of websites for any combination of users, interfaces and IP networks. The firewall can actively handle Internet content by stripping potential malicious objects, such as Java Applets, JavaScripts/VBScripts, ActiveX objects, and cookies.

NetDefend UTM Subscription

The standard NetDefend UTM Subscription provides your ﬁrewall with UTM service updates for 12 months starting from the day you activate or extend your service. The NetDefend UTM Subscription can be renewed regularly to provide your firewalls with the most up-to-date security service available from D-Link.

NetDefend Center: http://security.dlink.com.tw

DFL-260/860/1660/2560/2560G

NetDefend UTM Firewall Series

Powerful VPN Engine

Hardware-based data encryption and authentication for IPSec, PPTP, and L2TP in Client/Server mode enable fast and safe handling of VPN trafﬁc.

Professional Intrusion Prevention System (IPS)

Automatic updates from a comprehensive IPS signature database focus on attack payloads to protect the network against zero-day attacks.

Real-Time Antivirus Inspection (AV)

The antivirus engine scans using the most complete, most up-to-date antivirus signature database. Streaming-based pattern matching provides the effective protection against viruses.

Fast, Efﬁcient Web Content Filtering

Multiple index server implementation, highly granular policies, black lists and active content handling enhance performance and effectiveness of web surﬁng control.

Acceleration Engine for Uniﬁed Threat Management

A powerful processor allows the firewall to carry out IPS and Antivirus scanning simultaneously without performance degradation.

Licensed for Unlimited Users

Optional subscription services for IPS, Antivirus Scanning, and Web Content Filtering are priced per ﬁrewall rather than per user, thus reducing the total cost of ownership for licensing.

WAN Link Load-Balancing and Fault-Tolerance

Multiple WAN ports support trafﬁc load balancing and failover, thus guaranteeing Internet availability and bandwidth.

D-Link End-to-End Security (E2ES) Solution

The ZoneDefense mechanism operating in conjunction with D-Link xStack switches automatically quarantines infected workstations and prevents them from ﬂooding the internal network with malicious trafﬁc.

D-Link Green Certiﬁed

The DFL-1660 and DFL-2560(G) have attained D-Link Green Certiﬁcation. These ﬁrewalls are built with an 80 PLUS internal power supply. 80 PLUS certiﬁed power supplies offer increased reliability due to greater efﬁciency, and provide a reduced cost of ownership through longer equipment life. Additionally, 80 PLUS power supplies help to prevent pollution by limiting energy consumption, and run at a lower temperature to reduce cooling costs.

D-Link Green certified devices comply with RoHS (Restriction of Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment) directives. RoHS directives restrict the use of specific hazardous materials during manufacturing, while WEEE implements standards for proper recycling and disposal. Together, these considerations make D-Link Green firewall products the environmentally responsible choice.

+ 4 hidden pages