D-Link D DFL-1100 DFL-1100 Brochure & Specs
Text of the manual
No Licensing Required
Multi-Function Security
• Network Firewall
• VPN Server
• Content Manager
• Bandwidth Manager
• No Licensing Required
Advanced Firewall Features
• Stateful Packet Inspection
• Detect/drop Intruding Packets
• Embedded VPN
• Physical DMZ Port
• Policy-based NAPT
• Multiple Virtual Servers
Embedded VPN Accelerator
• Up to 1000 VPN Tunnels
• IPSec, PPTP, L2TP Pass-through
• DES, 3DES, and AES Encryption
• Automated Key Management via
IKE/ISAKMP
• Aggressive/Main/Quick Negotiation
Modes
Performance Optimization
• VLAN Tagging
• HA Port for Active Clustering/Load
Balancing
Enhanced Network Services
• DHCP Server/Client
• DHCP Relay
• SYSLog Support
• E-Mail Alert
• SNMP Management
• Consistency Checks
D-Link, an industry leading in innovative networking solutions, introduces the NetDefend family of
Firewall/VPN Security Appliances. With the growing concerns over network security, Denial of Service
attacks, virus damage, and privacy demands, D-Link’s NetDefend family provides the assurance of a
dedicated network security solution in a single device.
The new DFL-1100 network security appliance is an easy-to-deploy VPN and firewall solution designed
for enterprise and small to medium businesses that demand superior performance and security. This appliance
is a powerful security solution that provides integrated Network Address Translation (NAT), SPI Firewall,
advanced content filtering features, IDS protection, bandwidth management, as well as Virtual Private
Network (VPN) support. The DFL-1100 hardware includes a trusted LAN port, a WAN port that supports
virtually all WAN connection types, and an independent DMZ port to support local servers such as e-mail,
Web, and FTP. All of these features conveniently fit into a 1U rack-mountable chassis that can be easily
integrated into your switch/server rack
To provide enterprise-class network security, the DFL-1100 has several flexible firewall features to manage,
monitor, and maintain a healthy and secure network. Some network management features include: Remote
management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies, and SNMP. For
network monitoring, the DFL-1100 supports e-mail alerts, system log, consistency checks, and real-time
statistics. These features along with a firmware backup function provide and maintain maximum network
performance and security.
For optimal VPN configuration, the DFL-1100 has both an integrated IPSec VPN Client and Server to support
almost any required VPN policy. This high-end appliance has a hardware VPN engine to support and manage
up to 1000 VPN connections. The DFL-1100 can support IPSec, PPTP, and L2TP protocol pass-through traffic
as well. Advanced VPN configuration options include: AES/DES/3DES encryption, Manual or IKE/ISAKMP
key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an
RADIUS server or the internal 500-user database.
Additional network control features supported by the DFL-1100 include VLAN tagging and an optional
High Availability (HA) port. VLAN tagging supports integration of the DFL-1100 into your rack system
with L2/L3 managed switches to segment your network and prioritize traffic. The optional HA port can be
used as an additional DMZ port or connection point to another DFL-1100 to support Active Clustering or
Load Balancing to optimize network up-time and performance.
The DFL-1100 can be configured via D-Link’s Web-based interface or using the Command Line Interface
(CLI). These configuration options can be managed through Admin, Read/Write, or Read-Only administrator
rights. With these access management levels, any authorized user can easily configure or access the
administrative functions of the DFL-1100.
With businesses becoming increasingly network-dependent, the need to invest in a reliable security
solution is crucial. Each security appliance in the D-Link NetDefend SecureNetwork family of products
offers high return on investment through robust security features, flexible configuration, and maximum
network protection.
Product Data Sheet
Network Security
Rackmount VPN Firewall
Firewall Mode of Operation
• Policy-based NAPT
• Route mode
• Virtual IP
• Policy-based traffic shaping
VPN Security
• VPN Tunnels: 1,000 Maximum
• IPSec Server/Client
• IPSec/PPTP/L2TP Pass-through
• Encryption Transform: Null, DES, 3DES and AES
• DHCP over IPSec
• Remote access VPN
• Policy-Based Firewall and Session Protection
Firewall Security
• Stateful Packet Inspection (SPI)
• Packet filter, Custom Protocol Filters, Custom ICMP Filter
• Content filter (URL Keyword/Java/ActiveX/Cookie/Proxy)
• Microsoft Active Directory Integration (via MS IAS)
Network Service
• DHCP Server/Client
• DHCP Relay
• PPPoE for DSL
• PPTP for DSL
• DNS Resolving of Remote Gateway System
• SYSLog Support
• Firmware Backup
• E-mail Alerts
• Filtering Activity (logging rejected internal and external connection
requests)
• Web Access Log
• Internet Access Monitor
• Remote Management from WAN
• Simple Network Time Protocol (SNTP)
• Simple Network Management Protocol (SNMP)
• HTTPS (SSL)
• Consistency Checks
Firewall & VPN User Authentication
• RADIUS (external) database
• Built-in Database: 500 Users Maximum
Intrusion Detection System
• NIDS pattern
• DDOS and DOS detected
• MAC address bind with IP
• Online pattern update
• Detect CodeRed
• Attack alarm (via E-mail)
Bandwidth Management
• Guaranteed bandwidth
• Maximum bandwidth
• Priority-bandwidth utilization
• DiffServ stamp
• Class-based policies
• Policy-specific traffic class
• Application-specific traffic class
• Subnet-specific traffic class
Physical & Environmental
Device Ports
• WAN: 10/100BASE-TX port
• LAN: 10/100BASE-TX port
• DMZ: 10/100BASE-TX port
• SYN: 10/100BASE-TX port to be used in Active Cluster or Load Balance
Scenario
• Console port: serial COM port
Diagnostic LEDs
• Power
• Status
• WAN
• LAN
• DMZ
• SYN
Power Input
• 110/220VAC Standard PC Power Cable
Power Consumption
• 110W maximum power consumption
Dimensions
• 16.75” L x 9.875” W x 1.75” H
Weight
• 7.3lbs
Temperature & Humidity
• Operating: 0° to 55° C
• Storage: -20° to 70° C
Humidity
• 5% to 95%
Emission (EMI)
• FCC Class A
• CE Class A
• C-Tick
Safety
• UL
• TUV/GS
• LVD (EN60950)
Warranty
• 1 Year
Specifications
Network Security Rackmount VPN Firewall
DFL-1100
All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual
product appearance may differ from that depicted herein. Visit www.dlink.com for more details.
D-Link Systems, Inc. 17595 Mt Herrmann, Fountain Valley CA, 92708-4160 www.dlink.com ©2005 D-Link Corporation/D-Link Systems, Inc. All rights
reserved. D-Link, the D-Link logo and NetDefend trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States
and other countries. Other trademarks are the property of their respective owners.