D-Link DFL-860 Data Sheet
D
-Link, the world's leading provider of total network solutions for SOHO and SMB, with
products ranging from broadband modems/routers to managed Ethernet/Gigabit switches,
wireless LAN, surveillance IP cameras and network storage, introduces a series of high-
performance NetDefend UTM firewalls designed to answer businesses' need for complete
network integration across different product lines. The D-Link DFL-260 and DFL-860
NetDefend Unified Threat Management (UTM) firewalls are powerful security solution
designed to protect the small to mid-sized offices from a wide variety of network threats.
These firewalls provide integrated remote routing, Network Address Translation (NAT),
Virtual Private Network (VPN), proactive network security, Intrusion Prevention System (IPS),
Web Content Filtering (WCF), Anti-Virus (AV) Protection, traffic load balancing and
bandwidth management, all in one compact desktop chassis that can be easily integrated to
existing network.
wireless LAN, surveillance IP cameras and network storage, introduces a series of high-
performance NetDefend UTM firewalls designed to answer businesses' need for complete
network integration across different product lines. The D-Link DFL-260 and DFL-860
NetDefend Unified Threat Management (UTM) firewalls are powerful security solution
designed to protect the small to mid-sized offices from a wide variety of network threats.
These firewalls provide integrated remote routing, Network Address Translation (NAT),
Virtual Private Network (VPN), proactive network security, Intrusion Prevention System (IPS),
Web Content Filtering (WCF), Anti-Virus (AV) Protection, traffic load balancing and
bandwidth management, all in one compact desktop chassis that can be easily integrated to
existing network.
Enterprise-Class Firewall Security
The DFL-260 and DFL-860 provide complete advanced security features to manage, monitor,
and maintain a healthy and secure network. Network management features include: Remote
Management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies and
SNMP. For network monitoring, these firewalls support e-mail alerts, system log, consistency
checks and real-time statistics.
The DFL-260 and DFL-860 provide complete advanced security features to manage, monitor,
and maintain a healthy and secure network. Network management features include: Remote
Management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies and
SNMP. For network monitoring, these firewalls support e-mail alerts, system log, consistency
checks and real-time statistics.
Powerful VPN Performance
For optimal VPN configuration, the DFL-260 and DFL-860 have an integrated VPN Client
and Server to support almost any required VPN policy. This allows a remote office to
securely connect to a head office or a trusted partner network, while mobile users working
from home or at other places can also safely connect to the office network to access
company data and access e-mail. The DFL-260 and DFL-860 have hardware-based VPN
engines to support and manage a large number of VPN configurations. They support IPSec,
PPTP, and L2TP protocols in Client/Server mode and can handle pass-through traffic as well.
Advanced VPN configuration options include: DES/3DES/AES/Twofish/Blowfish/CAST-128
encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation
modes, and VPN authentication support using either an external RADIUS server or a large
user database.
For optimal VPN configuration, the DFL-260 and DFL-860 have an integrated VPN Client
and Server to support almost any required VPN policy. This allows a remote office to
securely connect to a head office or a trusted partner network, while mobile users working
from home or at other places can also safely connect to the office network to access
company data and access e-mail. The DFL-260 and DFL-860 have hardware-based VPN
engines to support and manage a large number of VPN configurations. They support IPSec,
PPTP, and L2TP protocols in Client/Server mode and can handle pass-through traffic as well.
Advanced VPN configuration options include: DES/3DES/AES/Twofish/Blowfish/CAST-128
encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation
modes, and VPN authentication support using either an external RADIUS server or a large
user database.
Unified Threat Management
The DFL-260 and DFL-860 integrate an Intrusion Detection and Prevention System (IDP/IPS),
gateway Anti-Virus (AV) and Content Filtering/Web URL Filtering for superior Layer 7 content
inspection protection. They use a hardware accelerator approach to increase IPS and AV
throughput, and a web surfing control database containing millions of URLs for Web Content
Filtering (WCF). IPS, Anti-Virus and URL database real-time update services protect the
office network from application exploits, network worms, malicious code attacks, and provide
everything a business needs to manage employee Internet access behavior.
The DFL-260 and DFL-860 integrate an Intrusion Detection and Prevention System (IDP/IPS),
gateway Anti-Virus (AV) and Content Filtering/Web URL Filtering for superior Layer 7 content
inspection protection. They use a hardware accelerator approach to increase IPS and AV
throughput, and a web surfing control database containing millions of URLs for Web Content
Filtering (WCF). IPS, Anti-Virus and URL database real-time update services protect the
office network from application exploits, network worms, malicious code attacks, and provide
everything a business needs to manage employee Internet access behavior.
Integrated Firewall/VPN Appliance
Powerful Firewall Engine
Virtual Private Network (VPN) Security
Granular Bandwidth Management
802.1Q VLAN Tagging
Granular Bandwidth Management
802.1Q VLAN Tagging
3
Proactive End-Point Security With D-Link ZoneDefense
Advanced Firewall Functions
Stateful Packet Inspection (SPI)
Detect/Drop Intruding Packets
Server Load Balancing
Policy-Based Routing
Robust Application Security for ALGs
Server Load Balancing
Policy-Based Routing
Robust Application Security for ALGs
Unified Threat Management
Intrusion Prevention System (IPS)
Anti-Virus (AV) Protection
Web Content Filtering (WCF)
Optional Service Subscriptions
Web Content Filtering (WCF)
Optional Service Subscriptions
Virtual Private Network (VPN)
IPSec NAT Traversal
VPN Hub and Spoke
IPSec, PPTP, L2TP
DES, 3DES, AES, Twofish, Blowfish, CAST-128 Encryption
Automated Key Management via IKE/ISAKMP
Aggressive/Main/Quick Negotiation
IPSec, PPTP, L2TP
DES, 3DES, AES, Twofish, Blowfish, CAST-128 Encryption
Automated Key Management via IKE/ISAKMP
Aggressive/Main/Quick Negotiation
Performance Optimization
Hardware-Based UTM Acceleration
1
Multiple WAN Interfaces for Traffic Load Sharing
Enhanced Network Services
DHCP Server/Client/Relay
2
IGMP V3
H.323 NAT Traversal
H.323 NAT Traversal
2
SIP ALG
3
OSPF Dynamic Routing Protocol
Run-Time Web-Based Authentication
Run-Time Web-Based Authentication
Integrated Firewall/VPN Appliance
Intrusion Prevention System (IPS)
Anti-Virus (AV) Protection
Web Content Filtering (WCF)
Intrusion Prevention System (IPS)
Anti-Virus (AV) Protection
Web Content Filtering (WCF)
3
Proactive End-Point Security With D-Link ZoneDefense
Powerful Hardware Accelerator & VPN Performance
Powerful Hardware Accelerator & VPN Performance
1
FEATURES
Powerful Unified Threat Management (UTM)
Firewalls for Small Businesses
Firewalls for Small Businesses
DFL-260/860 UTM Firewalls
1
Available on DFL-260 when DMZ port is configured as WAN2
2
Available in future firmware upgrade
3
Available on DFL-860
DFL-260
DFL-860