DFL-260E/860E/1660/2560/2560G
NetDefend UTM Firewall Series
Advanced VPN configuration options include:
• DES/3DES/AES/Twofish/Blowfish/CAST-128 encryption
• Manual or IKE/ISAKMP key management
• Quick/Main/Aggressive Negotiation modes
• VPN Authentication support using Radius server or user database
Enterprise-Class Firewall Security
NetDefend UTM Firewalls provide a complete set of advanced security features to
manage, monitor, and maintain a healthy and secure network. Network management
features include:
• Remote Management and Access Policies
• Bandwidth Control Policies
• URL Blacklists and Whitelists
UTM Services
Maintaining an effective defense against the various threats originating from the Internet
requires that all three databases used by the NetDefend UTM Firewalls are kept up-to-date.
In order to provide a continuous defense, D-Link offers optional UTM Service subscriptions
which include updates for each defense:
• Intrusion Prevention Systems (IPS)
• Antivirus Protection (AV)
• Web Content Filtering (WCF).
NetDefend UTM Subscriptions ensure that each of the firewall’s service databases are
complete and effective.
Robust Intrusion Prevention
10
The NetDefend UTM Firewalls employ component-based signatures, a unique IPS
technology which recognizes and protects against all varieties of known and unknown
attacks. This system can address all critical aspects of an attack or potential attack including
payload, NOP sled, infection, and exploits. The IPS database includes attack information
and data from a global attack sensor-grid and exploits collected from public sites such as
the National Vulnerability Database and Bugtrax. The NetDefend UTM Firewalls constantly
create and optimize NetDefend signatures via the D-Link Auto-Signature Sensor System
without overloading existing security appliances. These signatures ensure a high ratio of
detection accuracy and a low ratio of false positives.
Stream-based Virus Scanning
10
The NetDefend UTM Firewalls examine files of any size, using a stream-based virus scanning
technology which eliminates the need to cache incoming files. This zero-cache scanning
method not only increases inspection performance but also reduces network bottlenecks.
NetDefend UTM firewalls use virus signatures from Kaspersky Labs to provide systems with
reliable and accurate antivirus protection, as well as prompt signature updates. Consequently,
viruses and malware can be effectively blocked before they reach desktops or mobile devices.
• Automated Key Management via IKE/ISAKMP
• Aggressive/Main/Quick Negotiation
• Multiple WAN Interfaces for Traffic Load
Sharing
6
Enhanced Network Services
• DHCP Server/Client/Relay
• IGMP V3
• H.323 NAT Traversal
• Robust Application Security ALGs
• OSPF Dynamic Routing Protocol
9
• Run-Time Web-Based Authentication
DFL-260E
• Firewall Throughput: 150 Mbps
• VPN Performance: 45 Mbps (3DES/AES)
• 1 10/100/1000 Ethernet WAN Port
• 5 Switched 10/100/1000 Ethernet LAN Ports
• 1 10/100/1000 Ethernet DMZ Port
DFL-860E
• Firewall Throughput: 200 Mbps
• VPN Performance: 60 Mbps (3DES/AES)
• 2 10/100/1000 Ethernet WAN Ports
• 8 Switched 10/100/1000 Ethernet LAN Ports
• 1 10/100/1000 Ethernet DMZ Port
DFL-1660
• Firewall Throughput: 1.2 Gbps
• VPN Performance: 350 Mbps (3DES/AES)
• 6 Configurable Gigabit Ethernet Ports
DFL-2560(G)
• Firewall Throughput: 2 Gbps
• VPN Performance: 1 Gbps (3DES/AES)
• 10 Configurable Gigabit Ethernet Ports
• 4 SFP Ports (DFL-2560G)
