DFL-260E/860E/1660/2560/2560G
NetDefend UTM Firewall Series

Integrated Firewall/VPN

Powerful Firewall Engine Virtual Private Network (VPN) Security Granular Bandwidth Management 802.1Q VLAN Tagging and port-based VLAN D-Link End-to-End Security Solutions (E2ES) Integration with ZoneDefense Todays continuously shifting security environment presents a challenge for small/home office networks with limited IT capabilities. Fortunately, the D-Link NetDefend Unified Threat Management (UTM) firewalls provide a powerful security solution to protect business networks from a wide variety of threats. UTM Firewalls offer a comprehensive defense against virus attacks, unauthorized intrusions, and harmful content, successfully enhancing fundamental capabilities for managing, monitoring, and maintaining a healthy network. Enterprise-Class Firewall Security NetDefend UTM Firewalls provide complete advanced security features to manage, monitor, and maintain a healthy and secure network. Network management features include: Remote Management, Bandwidth Control Policies, URL Black/White Lists, Access Policies, and SNMP. For network monitoring, these firewalls support e-mail alerts, system logs, consistency checks and real-time statistics. Unified Threat Management NetDefend UTM Firewalls integrate an intrusion detection and prevention system, gateway antivirus, and content filtering for superior Layer 7 content inspection protection. An acceleration engine increases throughput, while the real-time update service keeps the IPS information, antivirus signatures, and URL databases current. Combined, these enhancements help to protect the office network from application exploits, network worms, malicious code attacks, and provide everything a business needs to safely manage employee Internet access. Powerful VPN Performance NetDefend UTM Firewalls offer an integrated VPN Client and Server. This allows remote offices to securely connect to a head office or a trusted partner network. Mobile users working from home or remote locations can also safely connect to the office network to access company data and e-mail. NetDefend UTM Firewalls have hardware-based VPN engines to support and manage a large number of VPN configurations. They support IPSec, PPTP, and L2TP protocols in Client/Server mode and can handle passthrough traffic as well. Advanced VPN configuration options include: DES/3DES/AES/Twofish/Blowfish/ CAST-128 encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an external RADIUS server or a large user database. UTM Services Maintaining an effective defense against the various threats originating from the Internet requires that all three databases used by the NetDefend UTM Firewalls are kept up-to-date. In order to provide a robust defense, D-Link offers optional NetDefend Firewall UTM Service subscriptions which include updates for each aspect of defense: Intrusion Prevention Systems (IPS), Antivirus and Web Content Filtering (WCF). NetDefend UTM Subscriptions ensure that each of the firewalls service databases are complete and effective. Robust Intrusion Prevention The NetDefend UTM Firewalls employ componentbased signatures, a unique IPS technology which recognizes and protects against all varieties of known and unknown attacks. This system can address all critical aspects of an attack or potential attack including payload, NOP sled, infection, and exploits. In terms of signature coverage, the IPS database includes attack information and data from a global attack sensor-grid and exploits collected from public sites such as the National Vulnerability Database and Bugtrax. The NetDefend UTM Firewalls constantly create and optimize NetDefend signatures via the D-Link Auto-Signature Sensor System without overloading existing security appliances. These signatures ensure a high ratio of detection accuracy and a low ratio of false positives. Stream-Based Virus Scanning The NetDefend UTM Firewalls examine files of any size, using a stream-based virus scanning technology which eliminates the need to cache incoming files. This zero-cache scanning method not only increases inspection performance but also reduces network bottlenecks. NetDefend UTM firewalls use virus signatures from Kaspersky Labs to provide systems with reliable and accurate antivirus protection, as well as prompt signature updates. Consequentially, viruses and malware can be effectively blocked before they reach the desktops or mobile devices. Web Content Filtering Web Content Filtering helps administrators monitor, manage, and control employee Internet usage. The NetDefend UTM Firewalls implement multiple global index servers with millions of URLs and real-time website data to enhance performance capacity and maximize service availability. These firewalls use granular policies and explicit black/white lists to control access to certain types of websites for any combination of users, interfaces and IP networks. The firewall can actively handle Internet content by stripping potential malicious objects, such as Java Applets, JavaScripts/VBScripts, ActiveX objects, and cookies.

Advanced Functions

Stateful Packet Inspection (SPI) Detect/Drop Intruding Packets Server Load Balancing Policy-Based Routing
Unified Threat Management
Intrusion Prevention System (IPS) Antivirus (AV) Protection Web Content Filtering (WCF) Optional Service Subscriptions

Virtual Private Network

IPSec NAT Traversal VPN Hub and Spoke IPSec, PPTP, L2TP DES, 3DES, AES, Twofish, Blowfish, CAST 128 Encryption Automated Key Management via IKE/ ISAKMP Aggressive/Main/Quick Negotiation
Enhanced Network Services
DHCP Server/Client/Relay IGMP V3 H.323 NAT Traversal Robust Application Security for ALGs OSPF Dynamic Routing Protocol Run-Time Web-Based Authentication

Performance Optimization

UTM Acceleration Engine Multiple WAN Interfaces for Traffic Load Sharing

CERTIFIED AES Interop

CERTIFIED Basic Interop

DFL-260E

Firewall Throughput: 150 Mbps VPN Performance: 45 Mbps (3DES/AES) 1 10/100/1000 Ethernet WAN Ports 5 10/100/1000 Ethernet LAN Ports 1 10/100/1000 Ethernet DMZ Port NetDefend UTM Subscription The standard NetDefend UTM Subscription provides your firewall with UTM service updates for 12 months* starting from the day you activate or extend your service. The NetDefend UTM Subscription can be renewed regularly to provide your firewalls with the most up-to-date security service available from D-Link. NetDefend Center: http://security.dlink.com.tw
*Actual service package may vary depending on region.
Licensed for Unlimited Users Optional subscription services for IPS, Antivirus Scanning, and Web Content Filtering are priced per firewall rather than per user, thus reducing the total cost of ownership for licensing. WAN Link Load-Balancing and Fault-Tolerance Multiple WAN ports support traffic load balancing and failover, thus guaranteeing Internet availability and bandwidth. D-Link End-to-End Security (E2ES) Solutions* The ZoneDefense mechanism operating in conjunction with D-Link xStack switches automatically quarantines infected workstations and prevents them from flooding the internal network with malicious traffic.
*For DFL-860E, DFL-1660, and DFL-2560(G) only

DFL-860E

Firewall Throughput: 200 Mbps VPN Performance: 60 Mbps (3DES/AES) 2 10/100/1000 Ethernet WAN Ports 8 10/100/1000 Ethernet LAN Ports 1 10/100/1000 Ethernet DMZ Port

DFL-1660

Firewall Throughput: 1.2 Gbps VPN Performance: 350 Mbps (3DES/AES) 6 Configurable Gigabit Ethernet Ports

DFL-2560(G)

Firewall Throughput: 2 Gbps VPN Performance: 1 Gbps (3DES/AES) 10 Configurable Gigabit Ethernet Ports 4 SFP Ports (DFL-2560G) D-Link Green Certified The D-Link Green certified DFL-1660 and DFL-2560(G) are built with an 80 PLUS internal power supply. 80 PLUS certified power supplies offer increased reliability due to greater efficiency, and provide a reduced cost of ownership through longer equipment life. Additionally, 80 PLUS power supplies help prevent pollution by limiting energy consumption, and run at a lower temperature to reduce cooling costs. The DFL-260E and DFL-860E save energy automatically through cable length and link status detection. By detecting the length of cables connected to a port, the amount of power used for the port can be adjusted, only using as much as is needed. The DFL-260E/860E can also detect if a port is not in use, such as when a connected computer is shut down or if nothing is connected to the port, and can automatically reduce the power used for that port, cutting energy used for it by a substantial amount. D-Link Green certified devices comply with RoHS (Restriction of Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment) directives. RoHS directives restrict the use of specific hazardous materials during manufacturing, while WEEE implements standards for proper recycling and disposal. Together, these considerations make D-Link Green firewall products the environmentally responsible choice.

Powerful VPN Engine Hardware-based data encryption and authentication for IPSec, PPTP, and L2TP in Client/Server mode enable fast and safe handling of VPN traffic. Professional Intrusion Prevention System (IPS) Automatic updates from a comprehensive IPS signature database focus on attack payloads to protect the network against zero-day attacks. Real-Time Antivirus Inspection (AV) The antivirus engine scans using the most complete, most up-to-date antivirus signature database. Streaming-based pattern matching provides the effective protection against viruses. Fast, Efficient Web Content Filtering Multiple index server implementation, granular policies, black lists and active content handling enhance performance and effectiveness of web surfing control. Acceleration Engine for Unified Threat Management A powerful processor allows the firewall to carry out IPS and Antivirus scanning simultaneously without performance degradation.

Technical Specifications

Interfaces

Ethernet

1 10/100/1000 WAN port 1 10/100/1000 DMZ port (configurable) 5 10/100/1000 LAN ports
2 10/100/1000 WAN ports 1 10/100/1000 DMZ port (configurable) 8 10/100/1000 LAN ports 2 USB ports (reserved) RJ-Mbps 60 Mbps 80 Mbps 50 Mbps 40,000 4,000 1,000
6 configurable 10/100/1000 ports
10 configurable 10/100/1000 ports

SFP USB Console

2 USB ports (reserved) RJ-Mbps 45 Mbps 60 Mbps
2 USB ports (reserved) 1 DB-9 RS-232 1.2 Gbps 350 Mbps 400 Mbps 225 Mbps 600,000 15,000 4,000 OSPF
4 SFP ports (DFL-2560G only) USB ports (reserved) 1 DB-9 RS-Gbps 1 Gbps 600 Mbps 450 Mbps 1,500,000 20,000 6,000

System Performance1

Firewall Throughput2 VPN Throughput IPS Throughput
Antivirus Throughput Concurrent Sessions New Sessions (per second) Policies

35 Mbps 25,000 2,

Firewall System
Transparent Mode NAT, PAT Dynamic Routing Protocol H.323 NAT Traversal Time-Scheduled Policies Application Layer Gateway Proactive End-Point Security

ZoneDefense

Networking
DHCP Server/Client DHCP Relay Policy-Based Routing IEEE 802.1q VLAN Port-based VLAN IP Multicast

16 IGMP v3

1024

2048

Virtual Private Network (VPN)

Encryption Methods

(DES/ 3DES/ AES/ Twofish/ Blowfish/ CAST-128)

100

Available in future update

2,500

5,000
Dedicated VPN Tunnels PPTP/L2TP Server Hub and Spoke IPSec NAT Traversal SSL VPN

Traffic Load Balancing

Outbound Load Balancing Server Load Balancing Outbound Load Balance Algorithms Traffic Redirect at FailOver
Round-robin, Weight-based Round-robin, Destination-based, Spill-over

Bandwidth Management

Policy-Based Traffic Shaping Guaranteed Bandwidth Maximum Bandwidth Priority Bandwidth Dynamic Bandwidth Balancing
High Availability WAN Fail-Over (HA) Active-Passive Mode
Device Failure Detection Link Failure Detection FW/VPN Session SYN

6

Intrusion Detection & Prevention System (IDP/IPS)
Automatic Pattern Update DoS, DDoS Protection Attack Alarm via E-mail Advanced IDP/IPS Subscription IP Blacklist by Threshold or IDP/IPS

Content Filtering

HTTP Type Script Type E-mail Type External Database Content Filtering
URL Blacklist/Whitelist Java, Cookie, ActiveX, VB E-mail Blacklist/Whitelist

Antivirus

Real Time AV Scanning Unlimited File Size Scans VPN Tunnels Supports Compressed Files Signature Licensor Automatic Pattern Update

Kaspersky

Physical & Environmental
Power Supply Dimensions Operating Temperature Storage Temperature Operating Humidity EMI
Internal Power Supply 280 x 180 x 44 mm 11 Rack-Mount 330 x 180 x 44 mm 13 Rack-Mount 0 to 40 C -20 to 70 C 5% to 95% non-condensing FCC Class A CE Class A C-Tick VCCI
80 PLUS Internal Power Supply 440 x 400 x 44 mm 19 Standard Rack-Mount

Safety MTBF

UL LVD (EN60950-1) 186,614 Hours
LVD (EN60950-1) 140,532 Hours 400,000 Hours

cUL, CB 310,000 Hours

Actual performance may vary depending on network conditions and activated services. The maximum firewall plaintext throughput is based on RFC2544 testing methodologies. VPN throughput is measured using UDP traffic at 1420 byte packet size adhering to RFC 2544. 4 IPS and Anti-Virus performance test is based on HTTP protocol with a 1Mb file attachment run on the IXIA IxLoad. Testing is done with multiple flows through multiple port pairs. 5 Performance based on firmware 2.27.00 and above 6 Available when DMZ port is configured as WAN port 7 Compatible with D-Link SFP module transceivers: DEM-310GT, DEM-311GT, DEM-312GT2, DEM-314GT, DEM-315GT, DEM-330T, DEM-330R, DEM-331T, DEM-331R, DGS-712

Secure Network Implementation Using NetDefend UTM Firewalls

ACN 838

D-Link Corporation No. 289 Xinhu 3rd Road, Neihu, Taipei 114, Taiwan Specifications are subject to change without notice. D-Link is a registered trademark of D-Link Corporation and its overseas subsidiaries. All other trademarks belong to their respective owners. 2010 D-Link Corporation. All rights reserved. Release 02 (December 2010)

LASYSTEMS - Brusselsesteenweg 208 - 1730 Asse - Belgium
Phone: +32-2-4531312 - Fax: +32-2-4531763 E-mail: info@lasystems.be
D-link DFL - 1660 Network Security UTM Firewall (DFL-1660/E)
DFL-1660 / Network Security UTM Firewall 6 x Gigabit, 2x USB, 1x DB-9 RS-232

Price details:

Price excl. VAT: 2,695.18 Eco fees: 0.00 VAT 21 %: 565.99
PDF generated on: 9 June, 2011

Product details:

Product code: DFL-1660/E EAN: 0790069334306 Manufacturer: D-Link

3,261.17

* VAT included
Product is discontinued. You can not order it anymore.
The DFL-1660 is new UTM (Unified Threat Management) firewall members of D-Link NetDefend Security product line. It"s designed to protect SME from a wide variety of networkthreats and support complete advanced feature set to manage network security. This device integrates powerful hardware platform and delivers more advanced security features. Such as Intrusion Prevention (IPS), Anti-Virus, Anti-Spam, Web Content Filtering, Traffic Load Balancing, Fault-Tolerance, Zone-Defense, User Authentication, IM/P2P blocking, Denial of Service (DoS) protection as well as Virtual Private Network (VPN) support. Within industrial 1U rack-mount sized chassis and high port density design, the DFL-1660 supports 6 x Base-T Gigabit Ethernet ports. Each port is configurable that allows you to configure it as another network segments for policy control. Also, DFL-1660 built-in a fancy and high quality LCD monitor with keypad on front bezel of appliance that can show several basic system information. It"s a useful tool to assist users for routine monitoring, maintenance and administration. Main specifications:

Data transmission

Firewall throughput: VPN throughput: 1200 Mbit/s 350 Mbit/s 2500 Y Y Y SNMP v1, v2c OSPF PPTP/L2TP Server;Hub & Spoke;IPSec NAT Traversal; DES/ 3DES/ AES/ Twofish/ Blowfish/ CAST-128; Gigabit Wired 6 x Gigabit FCC Class ACE Class AC-TickVCCI

Networking

VPN tunnels quantity: Multicast support: DHCP server: DHCP client:

Protocols

Management protocols: Routing protocol:

Security

VPN support: Firewall security:

Connectivity

Interface: Connectivity technology: USB 2.0 ports quantity: RS-232 ports: I/O ports:

Certificates

Certification:

Safety:

cUL, CB 440 x 400 x 44 mm Y 80 PLUS 19” h 0 - 40 C 5 - 95 % -20 - 70 C

Weight & dimensions

Dimensions W x D x H:

Management features

Web-based management:

Energy management

Power supply type:

Technical details

Rack mounting: Concurrent connections:

Endurance

Mean time between failures (MTBF):

Environmental conditions

Operating temperature range (T-T): Operating relative humidity range: Storage temperature range (T-T):
*PLEASE NOTE: Every effort has been made to ensure the accuracy of all information contained herein. Lasystems makes no warranty expressed or implied with respect to accuracy of the information, including price, editorials or specifications. Lasystems or its suppliers shall not be liable for incidental, consequential or special damages arising from, or as a result of, any electronic transmission or the accuracy of the information contained herin, even if Lasystems has been advised of the possibility of such damages. Product and manufacturer names are used only for the purpose of identification.