D-Link D DFL-1100 DFL-1100 Brochure & Specs

Text of the manual

No Licensing Required

Multi-Function Security • Network Firewall • VPN Server • Content Manager • Bandwidth Manager • No Licensing Required Advanced Firewall Features • Stateful Packet Inspection • Detect/drop Intruding Packets • Embedded VPN • Physical DMZ Port • Policy-based NAPT • Multiple Virtual Servers Embedded VPN Accelerator • Up to 1000 VPN Tunnels • IPSec, PPTP, L2TP Pass-through • DES, 3DES, and AES Encryption • Automated Key Management via IKE/ISAKMP • Aggressive/Main/Quick Negotiation Modes Performance Optimization • VLAN Tagging • HA Port for Active Clustering/Load Balancing Enhanced Network Services • DHCP Server/Client • DHCP Relay • SYSLog Support • E-Mail Alert • SNMP Management • Consistency Checks D-Link, an industry leading in innovative networking solutions, introduces the NetDefend family of Firewall/VPN Security Appliances. With the growing concerns over network security, Denial of Service attacks, virus damage, and privacy demands, D-Link’s NetDefend family provides the assurance of a dedicated network security solution in a single device. The new DFL-1100 network security appliance is an easy-to-deploy VPN and firewall solution designed for enterprise and small to medium businesses that demand superior performance and security. This appliance is a powerful security solution that provides integrated Network Address Translation (NAT), SPI Firewall, advanced content filtering features, IDS protection, bandwidth management, as well as Virtual Private Network (VPN) support. The DFL-1100 hardware includes a trusted LAN port, a WAN port that supports virtually all WAN connection types, and an independent DMZ port to support local servers such as e-mail, Web, and FTP. All of these features conveniently fit into a 1U rack-mountable chassis that can be easily integrated into your switch/server rack To provide enterprise-class network security, the DFL-1100 has several flexible firewall features to manage, monitor, and maintain a healthy and secure network. Some network management features include: Remote management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies, and SNMP. For network monitoring, the DFL-1100 supports e-mail alerts, system log, consistency checks, and real-time statistics. These features along with a firmware backup function provide and maintain maximum network performance and security. For optimal VPN configuration, the DFL-1100 has both an integrated IPSec VPN Client and Server to support almost any required VPN policy. This high-end appliance has a hardware VPN engine to support and manage up to 1000 VPN connections. The DFL-1100 can support IPSec, PPTP, and L2TP protocol pass-through traffic as well. Advanced VPN configuration options include: AES/DES/3DES encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an RADIUS server or the internal 500-user database. Additional network control features supported by the DFL-1100 include VLAN tagging and an optional High Availability (HA) port. VLAN tagging supports integration of the DFL-1100 into your rack system with L2/L3 managed switches to segment your network and prioritize traffic. The optional HA port can be used as an additional DMZ port or connection point to another DFL-1100 to support Active Clustering or Load Balancing to optimize network up-time and performance. The DFL-1100 can be configured via D-Link’s Web-based interface or using the Command Line Interface (CLI). These configuration options can be managed through Admin, Read/Write, or Read-Only administrator rights. With these access management levels, any authorized user can easily configure or access the administrative functions of the DFL-1100. With businesses becoming increasingly network-dependent, the need to invest in a reliable security solution is crucial. Each security appliance in the D-Link NetDefend SecureNetwork family of products offers high return on investment through robust security features, flexible configuration, and maximum network protection. Product Data Sheet Network Security Rackmount VPN Firewall

Firewall Mode of Operation

• Policy-based NAPT • Route mode • Virtual IP • Policy-based traffic shaping VPN Security • VPN Tunnels: 1,000 Maximum • IPSec Server/Client • IPSec/PPTP/L2TP Pass-through • Encryption Transform: Null, DES, 3DES and AES • DHCP over IPSec • Remote access VPN • Policy-Based Firewall and Session Protection Firewall Security • Stateful Packet Inspection (SPI) • Packet filter, Custom Protocol Filters, Custom ICMP Filter • Content filter (URL Keyword/Java/ActiveX/Cookie/Proxy) • Microsoft Active Directory Integration (via MS IAS) Network Service • DHCP Server/Client • DHCP Relay • PPPoE for DSL • PPTP for DSL • DNS Resolving of Remote Gateway System • SYSLog Support • Firmware Backup • E-mail Alerts • Filtering Activity (logging rejected internal and external connection requests) • Web Access Log • Internet Access Monitor • Remote Management from WAN • Simple Network Time Protocol (SNTP) • Simple Network Management Protocol (SNMP) • HTTPS (SSL) • Consistency Checks Firewall & VPN User Authentication • RADIUS (external) database • Built-in Database: 500 Users Maximum Intrusion Detection System • NIDS pattern • DDOS and DOS detected • MAC address bind with IP • Online pattern update • Detect CodeRed • Attack alarm (via E-mail) Bandwidth Management • Guaranteed bandwidth • Maximum bandwidth • Priority-bandwidth utilization • DiffServ stamp • Class-based policies • Policy-specific traffic class • Application-specific traffic class • Subnet-specific traffic class Physical & Environmental Device Ports • WAN: 10/100BASE-TX port • LAN: 10/100BASE-TX port • DMZ: 10/100BASE-TX port • SYN: 10/100BASE-TX port to be used in Active Cluster or Load Balance Scenario • Console port: serial COM port Diagnostic LEDs • Power • Status • WAN • LAN • DMZ • SYN Power Input • 110/220VAC Standard PC Power Cable Power Consumption • 110W maximum power consumption Dimensions • 16.75” L x 9.875” W x 1.75” H Weight • 7.3lbs Temperature & Humidity • Operating: 0° to 55° C • Storage: -20° to 70° C Humidity • 5% to 95% Emission (EMI) • FCC Class A • CE Class A • C-Tick Safety • UL • TUV/GS • LVD (EN60950) Warranty • 1 Year Specifications Network Security Rackmount VPN Firewall DFL-1100 All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual product appearance may differ from that depicted herein. Visit www.dlink.com for more details. D-Link Systems, Inc. 17595 Mt Herrmann, Fountain Valley CA, 92708-4160 www.dlink.com ©2005 D-Link Corporation/D-Link Systems, Inc. All rights reserved. D-Link, the D-Link logo and NetDefend trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States and other countries. Other trademarks are the property of their respective owners.

Other Switch Manuals