D-Link DFL-1100 Network Card User Manual


 
DFL-1100
No Licensing Required
Multi-Function Security
Network Firewall
VPN Server
Content Manager
Bandwidth Manager
No Licensing Required
Advanced Firewall Features
Stateful Packet Inspection
Detect/drop Intruding Packets
Embedded VPN
Physical DMZ Port
Policy-based NAPT
Multiple Virtual Servers
Embedded VPN Accelerator
Up to 1000 VPN Tunnels
IPSec, PPTP, L2TP Pass-through
DES, 3DES, and AES Encryption
Automated Key Management via
IKE/ISAKMP
Aggressive/Main/Quick Negotiation
Modes
Performance Optimization
VLAN Tagging
HA Port for Active Clustering/Load
Balancing
Enhanced Network Services
DHCP Server/Client
DHCP Relay
SYSLog Support
E-Mail Alert
SNMP Management
Consistency Checks
D-Link, an industry leading in innovative networking solutions, introduces the NetDefend family of
Firewall/VPN Security Appliances. With the growing concerns over network security, Denial of Service
attacks, virus damage, and privacy demands, D-Link’s NetDefend family provides the assurance of a
dedicated network security solution in a single device.
The new DFL-1100 network security appliance is an easy-to-deploy VPN and firewall solution designed
for enterprise and small to medium businesses that demand superior performance and security. This appliance
is a powerful security solution that provides integrated Network Address Translation (NAT), SPI Firewall,
advanced content filtering features, IDS protection, bandwidth management, as well as Virtual Private
Network (VPN) support. The DFL-1100 hardware includes a trusted LAN port, a WAN port that supports
virtually all WAN connection types, and an independent DMZ port to support local servers such as e-mail,
Web, and FTP. All of these features conveniently fit into a 1U rack-mountable chassis that can be easily
integrated into your switch/server rack
To provide enterprise-class network security, the DFL-1100 has several flexible firewall features to manage,
monitor, and maintain a healthy and secure network. Some network management features include: Remote
management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies, and SNMP. For
network monitoring, the DFL-1100 supports e-mail alerts, system log, consistency checks, and real-time
statistics. These features along with a firmware backup function provide and maintain maximum network
performance and security.
For optimal VPN configuration, the DFL-1100 has both an integrated IPSec VPN Client and Server to support
almost any required VPN policy. This high-end appliance has a hardware VPN engine to support and manage
up to 1000 VPN connections. The DFL-1100 can support IPSec, PPTP, and L2TP protocol pass-through traffic
as well. Advanced VPN configuration options include: AES/DES/3DES encryption, Manual or IKE/ISAKMP
key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an
RADIUS server or the internal 500-user database.
Additional network control features supported by the DFL-1100 include VLAN tagging and an optional
High Availability (HA) port. VLAN tagging supports integration of the DFL-1100 into your rack system
with L2/L3 managed switches to segment your network and prioritize traffic. The optional HA port can be
used as an additional DMZ port or connection point to another DFL-1100 to support Active Clustering or
Load Balancing to optimize network up-time and performance.
The DFL-1100 can be configured via D-Link’s Web-based interface or using the Command Line Interface
(CLI). These configuration options can be managed through Admin, Read/Write, or Read-Only administrator
rights. With these access management levels, any authorized user can easily configure or access the
administrative functions of the DFL-1100.
With businesses becoming increasingly network-dependent, the need to invest in a reliable security
solution is crucial. Each security appliance in the D-Link NetDefend SecureNetwork family of products
offers high return on investment through robust security features, flexible configuration, and maximum
network protection.
Product Data Sheet
Network Security
Rackmount VPN Firewall