D-Link DFL-260E - Page 2

DFL-260E/860E/1660/2560/2560G NetDefend UTM Firewall Series
Advanced VPN conguration options include:
• DES/3DES/AES/Twosh/Blowsh/CAST-128 encryption
• Manual or IKE/ISAKMP key management
• Quick/Main/Aggressive Negotiation modes
• VPN Authentication support using Radius server or user database
Enterprise-Class Firewall Security
NetDefend UTM Firewalls provide a complete set of advanced security features to
manage, monitor, and maintain a healthy and secure network. Network management
features include:
• Remote Management and Access Policies
• Bandwidth Control Policies
• URL Blacklists and Whitelists
UTM Services
Maintaining an eective defense against the various threats originating from the Internet
requires that all three databases used by the NetDefend UTM Firewalls are kept up-to-date.
In order to provide a continuous defense, D-Link oers optional UTM Service subscriptions
which include updates for each defense:
• Intrusion Prevention Systems (IPS)
• Antivirus Protection (AV)
• Web Content Filtering (WCF).
NetDefend UTM Subscriptions ensure that each of the rewall’s service databases are
complete and eective.
Robust Intrusion Prevention
10
The NetDefend UTM Firewalls employ component-based signatures, a unique IPS
technology which recognizes and protects against all varieties of known and unknown
attacks. This system can address all critical aspects of an attack or potential attack including
payload, NOP sled, infection, and exploits. The IPS database includes attack information
and data from a global attack sensor-grid and exploits collected from public sites such as
the National Vulnerability Database and Bugtrax. The NetDefend UTM Firewalls constantly
create and optimize NetDefend signatures via the D-Link Auto-Signature Sensor System
without overloading existing security appliances. These signatures ensure a high ratio of
detection accuracy and a low ratio of false positives.
Stream-based Virus Scanning
10
The NetDefend UTM Firewalls examine les of any size, using a stream-based virus scanning
technology which eliminates the need to cache incoming les. This zero-cache scanning
method not only increases inspection performance but also reduces network bottlenecks.
NetDefend UTM rewalls use virus signatures from Kaspersky Labs to provide systems with
reliable and accurate antivirus protection, as well as prompt signature updates. Consequently,
viruses and malware can be eectively blocked before they reach desktops or mobile devices.
• Automated Key Management via IKE/ISAKMP
• Aggressive/Main/Quick Negotiation
• Multiple WAN Interfaces for Trac Load
Sharing
6
Enhanced Network Services
• DHCP Server/Client/Relay
• IGMP V3
• H.323 NAT Traversal
• Robust Application Security ALGs
• OSPF Dynamic Routing Protocol
9
• Run-Time Web-Based Authentication
DFL-260E
• Firewall Throughput: 150 Mbps
• VPN Performance: 45 Mbps (3DES/AES)
• 1 10/100/1000 Ethernet WAN Port
• 5 Switched 10/100/1000 Ethernet LAN Ports
• 1 10/100/1000 Ethernet DMZ Port
DFL-860E
• Firewall Throughput: 200 Mbps
• VPN Performance: 60 Mbps (3DES/AES)
• 2 10/100/1000 Ethernet WAN Ports
• 8 Switched 10/100/1000 Ethernet LAN Ports
• 1 10/100/1000 Ethernet DMZ Port
DFL-1660
• Firewall Throughput: 1.2 Gbps
• VPN Performance: 350 Mbps (3DES/AES)
• 6 Congurable Gigabit Ethernet Ports
DFL-2560(G)
• Firewall Throughput: 2 Gbps
• VPN Performance: 1 Gbps (3DES/AES)
• 10 Congurable Gigabit Ethernet Ports
• 4 SFP Ports (DFL-2560G)