D-Link WORKGROUP FIREWALL 1LAN
Contents
1. DFL 1000 Rack mount firewall with complete virus scanning access control intruder protection remote VPN connection and DMZ functions for company networks Network Secure VPN Firewall for Departmental The DFL 1000 is a cost effective departmental firewall thatprovides comprehensive network protection high performance andeasy installation A hardware device that is mucheasier to installand more effective than software based firewalls the DFL 1000 offers ideal protection for Smallto medium Buisnesses or corporate departments with plug and play connection complete security against outside intruders Virtual Private Network VPN support through data encryption and authentication and easy administration Complete Security Your office 1s connected to the outside world through the Internet It iseasy for hackersto analyse your databases to steal ordestroy data The DFL 1000 providesa wide range of protectionagainst outside attacks plus comprehensive security thatincludes user authentication scheduled policies and Virtual Server Mapping The DFL 1000 provides NAT translation of IP addresses from the internal privatenetwork to the public IP network Content Filtering amp Virus Scanning The DFL 1000 provides filtering of potentially malicious codes embedded inweb pages toremove Activeobjects Java JavaScript and other potential threats It provides virus scanning forall incoming andoutgoing email and attachment2. 1000 usesa special design ASIC toperform VPN encryption anddecryption It off loads CPU loading through hardware based acceleration Management The DFL 1000 supports web based management using a secure SSLconnection from aremote terminal either on the internalcorporate network oreven from an external remote site The DFL 1000 can also be administered on site usingits RS 232 serial connection Secure system management via VPN Tunnel onany interface Triple DES dataencryption Anti virus scanning VPN Firewall tor Departmental DFL 1000 Technical Specifications VPN Firewall tor Departmental Hardware Specifications Processor 300MHz System Memory On board 256MB Flash Memory 64MB CompactFlash Card Network Interface 3 10 100Mbps ports 1 Internal 1 External 1 DMZ LED Indicators Power Status Interface linkand activity Software Specifications Security Feature Firewall Stateful Packet Inspection SPI to Prevent Denial of Service DoS attacks Syn flood ICMP flood UDP flood ping of death IP spoofing land attack tear drop attack IP address sweep attack Win Nuke attack Intrusion Detection System IDS including logging reporting and e mail alerts address service and protocol Web URL content filtering VPN Functionality One hundred dedicated VPN tunnels Manual key and IKE Security Association SA assignment 56 bit DES or 168 bit 3DES IPsec encryption algorithm MD5 or
3. Power Input 100 240V internal switching powersupply Power Consumption 11 Watts max Dimensions 441 x 250x 44 mm standard rack mount width 1 U height Operating Temperature 0 C 45 C Storage Temperature 0 C 60 C Humidity 5 95 non condensing EMI Certification FCC ClassA CE ClassA BSMI ClassA C Tick i C Fe E141136 y 66F9 ACN 052 202 838 Ordering Information Firewall With VPN amp DMZ port 3 10 100Mbps ports DFL 1000 For country specific power cord please specify one of the following after the model number U Includes no power cord A Includes an American standard power cord BE Includes both EU and U K standard power cords IN Includes an Australian standard power cord E Includes an EU standard power cord B Includes an U K standard power cord ICN Includes an Australian standard power cord D Link Specifications subject tochangs W SA TEL 1 949 788 0805 FAX 1 949 753 7033 www dlinkcom Slice oressteredtratemaxe Canada TEL 1 905 8295033 FAX 1 905 8295005 www diinkca of D Link Corpordion D ink Europe TEL 44 20 8731 5555 FAX 44 20 8731 5511 www dlinkco uk ee E TEL 44 20 8731 5555 FAX 44 20 731 5611 www dlinkco uk balong to thair prapnetors Gemany TEL 49619677990 FAX 49 6196 7799300 www dlinkde France TEL 33 1 30238688 FAX 33 1 30238689 www dlink france fr Benelux TEL 31 40 2668713 FAX 31 40 2668666 www dlink benelwcni Italy TEL 3902 2900 0
4. 676 FAX 39 02 2900 1723 www diinkit iberia TEL 34 93 4965751 FAX 34 93 4965701 vwaw dlinkiberia es Sweden TEL 46 0 8564 61900 FAX 46 0 8564 61901 www dlinkse Norway TEL 47 22 991890 FAX 47 22 207039 Denmark TEL 45 43 969040 FAX 4543424347 www dlinkdk Finland TEL 358 9 622 91660 FAX 358 9 622 91661 www dlink fi com Singapore TEL 65 6774 6233 FAX 65 6774 6322 vavw dlinkintl com Australia TEL 61 2 94177100 FAX 61 2 94171077 www dlinkcom au Japan TEL 81 3 54349678 FAX 81 3 5434 9868 vw dlinkco jp China TEL 86 10 8809 7777 FAX 86 10 8809 6789 gt India TEL 91 22 6526696 FAX 91 22 652 6914 www dlinkindia com te Middie East TEL 202 2456176 FAX 202 2456192 vew dlink me com South America TEL 58 2 232 3185 FAX 56 2 232 093 www dlinkcl RECYCLABLE South Africa TEL 27 0 126652165 FAX 27 0 1 26652186 www d linkco za Russia TEL 7095 7373389 FAX 7 095 737 3390 www diinkru Rev 01 Jul 2002 Taiwan TEL 886 2 2910 2626 FAX 8862 2910 1515 www dlinktw com tw Printed in Taiwan pink Corp TEL 886 2 2916 1600 FAX 8862 2914 6299 www dlinkcom tw DFL 1000 Technical Specifications VPN Firewall tor Departmental Internet Security Application DMZ Public Network 5 Mail Server oa e i A o 2 i OrLable A gt y Fast Web Server 2 l Modem Ethernet pa ony Switch all k 3 Bea 7 Remote Router or on Internet Gateway _ URL Blocking Stateful Inspection Denial of Service Fast Eth
5. SHA 1 authentication algorithm pre shared key perfect forward secrecy Diffie Helman and Oakley client support key life and IKE lifetime time settings prevent replay attack remote access VPN client to Site site to site VPN Mode of Operation Network Address Translation NAT static routing unrestricted users per port Protocol Support Network IP routing TCP IP UDP ICMP PPPoE IP addressing DHCP client and server Routing RIP v1 RIP v2 Static Routing Dynmic Routing VPN Security IPSec ESP MD5 SHA 1 DES 3DES IKE PPTP L2PT RFC Support PPTP client and server RFC 2637 IPSec tunnel mode RFC 2401 HMAC MD5 96 RFC 2403 HMAC SHA1 96 RFC 2404 Encapsulation Security Payload Protocol RFC 2406 DHCP server RFC 2131 DHCP client RFC 2131 TFTP client RFC 1350 IP routing RIP1 RIP2 RFC 2453 NAT many to one RFC 1631 PPPoE RFC 2516 Services ftp http NAT Authentication HMAC MD5 or HMAC SHA 1 Authentication data integrity Key Exchange Automatic IKE based on Pre Shared Key Attack Protection Provided IP Source Routing IP Spoofing SYN floodattack ICMP flood UDP flood Land attack Addresssweep attack Tear drop attack Winnuke attack Port Scanattack Ping of Death Dedicated VPN Tunnels 100 Concurrent Sessions 10 000 User Authentication Support RADIUS external database Physical amp Environmental
6. ernet Switch Internet File Server Internal Network Virtual Private Network Firewall F2 l DMZ Public Network Head Office Switch MailServer Web Server DSLorCable Modem Fast ki Ethernet Swite h ii Re mote Router Remote Router P Fast Ethernet Switch Mobile UserRunn ing i Internet File Server VPN Client Branch Office Internal Network
7. s plus viruschecking for Web plug ins and downloaded Web contents Easy Installation All you needto do isconnect the network cables To the outside world youconnect an RJ 45 plug to your DSL cable modem Internet gateway or router To your office you plug in another RJ 45 jack to your network switch or hub The DMZ port connects toan independent hub or switchfor the DMZnetwork The DFL 1000 provides CPU system memory and embedded software all ready torun Access Control Administration access can be controlled so that the DFL 1000 can be administered from the protected internal network or the Key Features Easy to install easy to manage Web basedmanagement and software updated via browser Intruders prevention through MAC Address binding with IP Addresses external public Internet The DFL 1000 supports an internal External RADIUS database for authenticating user access to various services It maps public IP addresses to information servers on the internal network to allow public access It also prevents access to particular web sites using powerful pattern matching to block access to URLs or keywords Scheduled Policies Firewall policies maybe scheduled for different times of the day week monthand for onetime use or recurring LAN to LAN VPN Connection The DFL 1000 supports VPN functions including PPTP L2TP IPSec ESP security in tunnel mode LAN to LAN and mobileremote access Hardware Acceleration The DFL
Download Pdf Manuals
Related Search