NetDefend™ UTM Firewall Series
D-Link
NetDefend™
Unified Threat Management
(UTM) firewalls (DFL-210, DFL-260, DFL-800, and DFL-860) provide a powerful security solution to protect business networks from a wide variety of threats. UTM Firewalls offer a comprehensive defense against virus attacks, unauthorized intrusions, and harmful content, enhancing fundamental capabilities for managing, monitoring, and maintaining a healthy network.
Enterprise-class Firewall Security
The DFL-210, DFL-260, DFL-800, and DFL-860 provide complete advanced security features to manage, monitor, and maintain a healthy and secure network. Network management features include: Remote Management, Bandwidth Control Policies, URL Black/White Lists, Access Policies and SNMP . For network monitoring, these firewalls support e-mail alerts, system logs, consistency checks and real-time statistics.
Unified Threat Management
For superior Layer 7 content inspection and protection, the DFL-210, DFL-260, DFL-800, and DFL-860 provide an integrated intrusion detection and prevention system, gateway antivirus, and content filtering services. The real-time update service keeps the IPS information, antivirus signatures, and URL databases current. Combined, these enhancements help to protect the office network from appl
ication exploits, network worms, and malicious code attacks, and provide everything a business needs to safely manage employee Internet access.
Powerful VPN Performance
The DFL-210, DFL-260, DFL-800, and DFL-860 offer an integrated VPN client and server. This allows remote offices to securely connect to a head office or a trusted partner network. Mobile users working from home or
remote locations can also safely connect to the office or access company data and e-mail. The firewalls support IPSec, PPTP , and L2TP protocols in Client/Server mode and can handle pass-through traffic as well. Advanced VPN configuration options include: DES/3DES/AES/Twofish/Blowfish/CAST-128 encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an external RADIUS server or a large user database.延吉市十二中
Robust Intrusion Prevention
NetDefend UTM firewalls employ component-based signatures, a unique IPS technology that recogn
izes and protects against all varieties of known and unknown attacks. This system can address all critical aspects of an attack or potential attack including payload, NOP sled, infection, and exploits. In terms of signature coverage, the IPS database includes attack sensor-grid and exploits collected from public sites such as the National Vulnerability Database and Bugtrax. NetDefend UTM firewalls constantly create and optimize NetDefend signatures via the D-Link Auto-Signature Sensor System without overloading existing security appliances. These signatures ensure a high ratio of detection accuracy and a low ratio of false positives.
Stream-based Virus Scanning
The DFL-210, DFL-260, DFL-800, and DFL-860 examine files of any size, using a stream-based virus scanning technology that eliminates the need to cache incoming files. The zero-cache scanning method not only increases inspection performance but also reduces network bottlenecks. NetDefend UTM firewalls use virus signatures from Kaspersky Labs to provide systems with reliable and accurate antivirus protection, as well as prompt signature updates. Consequently, viruses and malware can be effectively blocked before they reach the network’s desktops or mobile devices.
Network Security Firewall
Integrated Firewall/VPN
+ Powerful Firewall Engine
+ Virtual Private Network (VPN) Security + Granular Bandwidth Management + 802.1Q VLAN Tagging
+ D-Link End-to-End Security Solution (E2ES) Integration with ZoneDefense™1
Advanced Functions
+ Stateful Packet Inspection (SPI)+ Detect/Drop Intruding Packets + Server Load Balancing 1+ Policy-based Routing
Unified Threat Management
+ Intrusion Prevention System (IPS)3+ Antivirus (AV) Protection powered by Kaspersky 2,3+ Web Content Filtering (WCF)2,3+ Optional Service Subscriptions + DNSBL-based Anti-SPAM
Virtual Private Network (VPN)
湖南大学
综合教务
系统+ IPSec NAT Transversal + VPN Hub and Spoke + IPSec, PPTP , L2TP+ DES, 3DES, AES, Twofish, Blowfish, CAST-128 Encryption + Automated Key Management via IKE/ISAKMP + Aggressive/Main/Quick Negotiation
™
Web Content Filtering
Web Content Filtering helps administrators monitor, manage, and control employee usage of and access to the Internet. The NetDefend UTM firewalls implement multiple global index servers with millions of URLs and real-time website data to enhance performance capacity and maximize service availability. These firewalls use highly granular policies and explicit black/white lists to control access to certain types of websites for any combination of users, interfaces and IP networks. The firewall can actively handle Internet content by stripping potential malicious objects, such as Java Applets, JavaScripts/VBScripts, ActiveX objects, and cookies.
UTM Services
Maintaining an effective defense against various threats originating from the Internet requires that all three
databases used by NetDefend UTM firewalls are kept up-to-date. In order to provide a robust defense, D-Link offers NetDefend Firewall UTM service subscriptions, which include updates for every aspect of defense: Intrusion Prevention Systems (IPS), Antivirus (AV), and Web Content Filtering (WCF). NetDefend UTM Subscriptions ensure that each of the firewalls’ service databases is complete and effective.
NetDefend UTM Subscription
The standard NetDefend UTM Subscription provides your firewall with UTM service updates for two years 3 starting from the day you activate or extend your service. The NetDefend UTM Subscription can be renewed annually to provide your firewall with the most up-to-date security service available from D-Link.
Enhanced Network Services
+ DHCP Server/Client/Relay + IGMP V3
+ H.323 NAT Transversal
+ Robust Application Security for ALGs + OSPF Dynamic Routing Protocol 1+ Run-time Web-based Authentication
Technical Specifications DFL-210/260
DFL-800/860
Interfaces
Ethernet
1 10/100 WAN Port 1 10/100 DMZ Port 4 10/100 LAN Ports
2 10/100 WAN Ports 1 10/100 DMZ Port 7 10/100 LAN Ports Console
1 DB-9 RS-232
System Performance
Firewall Throughput 480Mbps 150Mbps VPN Throughput 525Mbps 45Mbps IPS Throughput 62040Antivirus Throughput 61020Concurrent Sessions 10,00020,000Policies
500
1,000
Firewall System
Transparent Mode yes yes NAT, PAT
yes yes Dynamic Routing Protocol -OSPF H.323 NAT Transversal yes yes Time-Scheduled Policies yes yes Application Layer Gateway yes yes Protective End-Point Security
-ZoneDefense
Networking
安全联轴器
DHCP Server/Client yes yes DHCP Relay yes yes Policy-based Routing yes yes IEEE 802.1q VLAN816 IP Multicast IGMP v3IGMP v3 Virtual Private Network (VPN)
Encryption Methods yes yes Dedicated VPN Tunnels100200 PPTP/L2TP Server yes yes Hub and Spoke yes yes IPSec NAT Transversal yes yes Outbound Load Balancing yes yes Server Load Balancing yes yes
Outbound Load Balance Algorithms Round-robin, Weight-based Round-robin,
Destination-based, Spill-over Round-robin, Weight-based Round-robin, Destination-based, Spill-over
Traffic Redirect at Fail-Over yes yes Bandwidth Management
Policy-based Traffic Shaping yes yes
Guaranteed Bandwidth yes yes
Maximum Bandwidth yes yes
Priority Bandwidth yes yes
Dynamic Bandwidth Balancing yes yes
High Availibility (HA)
WAN Fail-Over yes yes Intrusion Detection & Prevention System (IDS/IPS)3
Automatic Pattern Update yes yes
DoS, DDoS Protection yes yes
Attack Alarm via E-mail yes yes
Advanced IDS/IPS Subscription yes yes
IP Blacklist by Threshold or IDS/IPS-yes Content Filtering
HTTP Type URL Blacklist/Whitelist URL Blacklist/Whitelist Script Type Java, Cookie, ActiveX, VB Java, Cookie, ActiveX, VB E-mail Type E-mail Blacklist/Whitelist E-mail Blacklist/Whitelist External Database Content
Filtering2,3
yes yes
Antivirus2,3
Real Time AV Scanning yes yes
Unlimited File Size yes yes
Scans VPN Tunnels yes yes
Supports Compressed Files yes yes
Signature Licensor Kaspersky Kaspersky
Automatic Pattern Update yes yes
Physical and Environmental
Power Supply External Power Adapter External Power Adapter
Dimensions (W x D x H)9.25in x 6.38in x 1.42in (235mm x 162mm x 36mm)11.02in x 8.43in x 1.73in (280mm x 214mm x 44mm) Operating Temperature32 to 104o F (0 to 40o C)33 to 104o F (0 to 40o C)
Storage Temperature-4 to 158o F (-20 to 70o C)-4 to 158o F (-20 to 70o C)
Operating Humidity5% to 95% Non-Condensing5% to 95% Non-Condensing
EMI FCC Class A, CE Class A, C-Tick, VCCI FCC Class A, CE Class A, C-Tick, VCCI Safety UL LVD (EN60950-1)LVD (EN60950-1)
MTBF186,614 Hours140,532 Hours Subscription Services
IPS Subscription DFL-210 (90-Day Trial)
DFL-260 (2 Years)DFL-800 (90-Day Trial) DFL-860 (2 Years)乙酸乙酯的性质
AV Subscription DFL-210 (90-Day Trial)
DFL-260 (2 Years)DFL-800 (90-Day Trial) DFL-860 (2 Years)
WCF Subscription DFL-210 (90-Day Trial)
DFL-260 (2 Years)DFL-800 (90-Day Trial) DFL-860 (2 Years)
Warranty Information
中大
网络电视
Warranty1-Year Limited71-Year Limited7 Ordering Information
DFL-210NetDefend Network Security UTM Firewall, 1 WAN, 1 DMZ, 4 LAN, 90-Day IPS/AV/WCF Subscription DFL-260NetDefend Network Security UTM Firewall, 1 WAN, 1 DMZ, 4 LAN, 2-Year IPS/AV/WCF Subscription DFL-800NetDefend Network Security UTM Firewall, 2 WAN, 1 DMZ, 7 LAN, 90-Day IPS/AV/WCF Subscription DFL-860NetDefend Network Security UTM Firewall, 2 WAN, 1 DMZ, 7 LAN, 2-Year IPS/AV/WCF Subscription DFL-210-AV-122NetDefend AV 1-Year Subscription for DFL-210
DFL-260-AV-12NetDefend AV 1-Year Subscription for DFL-260
DFL-800-AV-122NetDefend AV 1-Year Subscription for DFL-800
DFL-860-AV-12NetDefend AV 1-Year Subscription for DFL-860
DFL-210-IPS-12NetDefend IPS 1-Year Subscription for DFL-210
DFL-260-IPS-12NetDefend IPS 1-Year Subscription for DFL-260
DFL-800-IPS-12NetDefend IPS 1-Year Subscription for DFL-800
DFL-860-IPS-12NetDefend IPS 1-Year Subscription for DFL-860
Ordering Information
DFL-210-WCF-122NetDefend WCF 1-Year Subscription for DFL-210
DFL-260-WCF-12NetDefend WCF 1-Year Subscription for DFL-260
DFL-800-WCF-122NetDefend WCF 1-Year Subscription for DFL-800
DFL-860-WCF-12NetDefend WCF 1-Year Subscription for DFL-860
1 Feature available in DFL-800/860 models only.
2 Feature available in DFL-210/800 models with firmware or higher.
3 2-year subscriptions are included with DFL-260/860 models only. DFL-210/800 models require additional license purchases for services after the 90-day trial period expires.
4 The maximum firewall plaintext throughput is based on RFC2544 testing methodologies.
5 VPN throughput is measured using UDP traffic at 1420 byte packet size adhering to RFC 2544.
6 IPS and Anti-Virus performance test based on HTTP protocol with a 1Mb file attachment run on the IXIAIxLoad. Testing is done with multiple flows through multiple port pairs.
7 1-Year Limited Warranty available only in the USA and Canada.
All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual product
appearance may differ from that depicted herein.
豫公网安备41160202000603
站长QQ:729038198
关于我们
投诉建议