D-Link DES-7200 manual NetDefend Firewall Selection Matrix, IPS Firewalls UTM Firewalls, Pat

Page 72

7063

Security

NetDefend Firewall Selection Matrix

NetDefend Firewall Selection Matrix

 

 

 

IPS Firewalls

 

 

 

UTM Firewalls

 

 

 

DFL-210

DFL-800

DFL-1600

DFL-2500

DFL-260

DFL-860

 

DFL-1660

DFL-2560

DFL-2560G

Interface

 

 

 

 

 

 

 

 

 

 

Ethernet WAN Port

 

1

2

-

-

1

2

 

-

-

-

Ethernet DMZ Port

 

1

1

-

-

1

1

 

-

-

-

Ethernet LAN Port

 

4

7

-

-

4

7

 

-

-

-

User-Configurable Gigabit RJ-45 Port

 

-

-

6

8

-

-

 

6

10

6

User-Configurable Gigabit SFP Port

 

-

-

-

-

-

-

 

-

-

4

System Performance

 

 

 

 

 

 

 

 

 

 

Firewall Throughput (Mbps)

 

80

150

320

600

80

150

 

1,200

2,000

2,000

VPN Throughput (Mbps)

 

25

45

120

300

25

45

 

350

1,000

1,000

Concurrent Sessions

 

10K

20K

400K

1,000K

10K

20K

 

600K

1,500K

1,500K

Policies

 

500

1,000

2,500

4,000

500

1,000

 

4,000

6,000

6,000

Firewall System

 

 

 

 

 

 

 

 

 

 

Transparent Mode

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Network & Port Address Translation (NAT,

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

PAT)

 

 

 

 

 

 

 

 

 

 

 

 

 

OSFP Dynamic Routing Protocol

 

No

Yes

Yes

Yes

No

Yes

 

Yes

Yes

Yes

Time-Scheduled Policies

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Proactive Network Security (ZoneDefense)

 

No

Yes

Yes

Yes

No

Yes

 

Yes

Yes

Yes

ICSA Firewall Corporate Level Certified

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Networking

 

 

 

 

 

 

 

 

 

 

DHCP Server / Client

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

DHCP Relay / Policy-based Routing

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

IEEE 802.1Q Virtual LAN (VLAN)

 

8

16

128

1,024

8

16

 

1,024

2,048

2,048

IP Multicast (IGMPv3)

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Virtual Private Network (VPN)

 

 

 

 

 

 

 

 

 

 

DES/3DES/AES/Twofish/Blowfish/CAST-128

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Dedicated VPN Tunnels

 

100

200

1,200

2,500

100

200

 

2,500

5,000

5,000

PPTP/L2TP Server / IPSec NAT Traversal

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Hub and Spoke

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

ICSA IPSec 1.3 Enhanced Certified

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

System Management

 

 

 

 

 

 

 

 

 

 

Web-Based User Interface (HTTP/HTTPS)

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Command Line/SSH

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Configuration Backup/Restore

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

User Authentication

 

 

 

 

 

 

 

 

 

 

Built-in Database

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

External RADIUS / LDAP (IPSec only) Server

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

External Microsoft IAS Server

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

XAUTH for IPSec Authentication

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Logging and Monitoring

 

 

 

 

 

 

 

 

 

 

Internal / External Log (Syslog Server)

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Email Notification, Event Log & Alarm

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

SNMP v1, v2c

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Traffic Load Balancing

 

 

 

 

 

 

 

 

 

 

Outbound Traffic Load Balancing

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Server Load Balancing

 

No

Yes

Yes

Yes

No

Yes

 

Yes

Yes

Yes

Algorithms for Outbound Traffic Load Balancing

 

 

 

 

 

 

 

 

 

 

Round-Robin, Destination-Based, Spillover

 

Yes1

Yes1

Yes1

Yes1

Yes1

Yes1

 

Yes

Yes

Yes

Bandwidth Management

 

 

 

 

 

 

 

 

 

 

Policy-Based Traffic Shaping

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Guaranteed / Maximum / Priority Bandwidth

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Dynamic Bandwidth Balancing

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Bandwidth Management in VPN Tunnel

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

High Availability (HA)

 

 

 

 

 

 

 

 

 

 

WAN Fail-Over / Traffic Redirect at Fail-Over

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Device / Link Failure Detection

 

No

No

Yes

Yes

No

No

 

Yes

Yes

Yes

Intrusion Detection & Prevention System (IDP/IPS)

 

 

 

 

 

 

 

 

 

Automatic Pattern Update

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

DoS, DDoS Protection

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

IP Blacklist by Threshold or IPS/IDP

 

No

Yes

Yes

Yes

No

Yes

 

Yes

Yes

Yes

Content Filtering

 

 

 

 

 

 

 

 

 

 

HTTP / Script / Email Type

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

External Database Content Filtering

 

Yes2

Yes2

No

No

Yes

Yes

 

Yes

Yes

Yes

Anti-Virus

 

 

 

 

 

 

 

 

 

 

Real Time AV Scanning / Unlimited File Size

 

Yes2

Yes2

No

No

Yes

Yes

 

Yes

Yes

Yes

Scans VPN Tunnels / Compression File

 

Yes2

Yes2

No

No

Yes

Yes

 

Yes

Yes

Yes

Signature Licensor (Kaspersky)

 

Yes2

Yes2

No

No

Yes

Yes

 

Yes

Yes

Yes

Automatic Pattern Update

 

Yes2

Yes2

No

No

Yes

Yes

 

Yes

Yes

Yes

Email Security

 

 

 

 

 

 

 

 

 

 

SMTP & POP3 Protocol Support

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

MIME Header Check for File Extension

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

Filtering

 

 

 

 

 

 

 

 

 

 

 

 

 

Email Rate & Size Protection (SMTP Protocol

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

only)

 

 

 

 

 

 

 

 

 

 

 

 

 

Anti-Spam (for SMTP Protocol only)

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

IM/P2P Blocking

 

Yes

Yes

Yes

Yes

Yes

Yes

 

Yes

Yes

Yes

1Available in Firmware 2.25.01

2Available in Firmware 2.26.00

Page 71 Page 73
Image 72
Page 71 Page 73
Contents Business Solutions Guide Contents More functionality Key Solution L3 Core Ethernet SwitchesAccess Network Core Network Switches Gigabit Ethernet Layer 3 Chassis Switches DES-7200 SeriesDES-7200 Series ModelAAA Gigabit Ethernet xStack Layer 3 Core Switches DGS-3600 SeriesDGS-3600 Series Model DGS-3612G DGS-3627 DGS-3627G DGS-3650SFP Fast Ethernet xStack Layer 3 Core Switches DES-3800 SeriesDES-3800 Series Model DES-3828 DES-3828DC DES-3828P DES-385210BASE-T/100BASE-TX MtbfGigabit Ethernet xStack Layer 2 Edge Switches DGS-3400 SeriesDGS-3426P DGS-3427DGS-3400 Series Model DGS-3426P DGS-3427 DGS-3450Gigabit Ethernet xStack Layer 2 Secure Switches DPS-200 Watt AC Redundant Power Supply for DGS-3200-24DGS-3200 Series DGS-3200-10DGS-3200 Series Model DGS-3200-10 DGS-3200-24OAM Fast Ethernet xStack Layer 2 Edge Switches DES-3528/52 SeriesDES-3528 DES-3528PDES-3528/52 Series Model DES-3528 DES-3528P DES-3552Fast Ethernet Metro Ethernet Edge Switches DES-3200 SeriesDES-3200 Series Model DES-3200-10 DES-3200-18 DES-3200-28Gigabit Ethernet Entry-Level Managed Switches DGS-3100 SeriesMaximum Power Consumption Physical Standby Power ConsumptionDGS-3100 Series 1000BASE-T Port RJ-45 Port Interface SFP PortFast Ethernet Entry-Level Managed Switches DES-3028/52 SeriesDES-3028/52 Series Model DES-3028 DES-3028P DES-3052Port RJ-45 Port Interface Address Binding Entries Per DeviceDES-3000 Series DES-3010FDES-3010G DES-3026DES-3000 Series Model DES-3010F DES-3010G DES-3026100BASE-FX MMF 100BASE-FX SMFGigabit Ethernet Web Smart Switches DGS-1210 SeriesDGS-1210 Series Model DGS-1210-10P DGS-1210-16 DGS-1210-24 DGS-1210-48DGS-1200 Series DGS-1216TDGS-1224T DGS-1224TPCable Diagnostics Power Savings By Link Status DGS-1200 SeriesModel DGS-1216T DGS-1224T DGS-1224TP DGS-1248T Flash Memory 2MBytes PromFast Ethernet Web Smart Switches DES-1210 SeriesDES-1210-28 DES-1210-52DES-1210 Series DES-1200 Series DES-1228DES-1228P DES-1252General Features Packet Buffer Memory DES-1200 SeriesModel DES-1228 DES-1228P DES-1252 Gigabit Ethernet Unmanaged Switches DGS-1000 SeriesDGS-1016D DGS-1024D DGS-1000 Series Model DGS-1016D DGS-1024DFast Ethernet Unmanaged Switches DES-1000 SeriesDES-1016D DES-1016R+ DES-1024D DES-1024R+ DES-1026GDES-1000 Series Model DES-1016D DES-1024D DES-1016R+10BASE-T/100BASE Network Management D-View DV-600S & DV-600PPerformance Report View Plug-ins Topology MapModel Standard No. of Ports Connector Optional Accessories Expansion ModulesSwitch vs Expansion Module Compatible Matrix YesSFP/XFP Transceivers Gigabit Ethernet XFP TransceiversGigabit Ethernet WDM Bi-Directional SFP Transceivers Gigabit Ethernet SFP TransceiversSwitch vs SFP/XFP Transceiver Compatible Matrix GE SFP FE SFPRedundant Power Supplies Redundant Power SuppliesSwitch vs Redundant Power Supply Compatible Matrix Power Supply Chassis vs RPS Compatible MatrixMedia Converters Fast Ethernet Media ConvertersWeb Smart Switch Selection Matrix Chassis Switch Selection Matrix GeneralManaged Switch Selection Matrix Layer 2 Managed SwitchesBusiness Wireless Indoor Access Points Wireless N Dual Band PoE Access PointWireless N Quad Band PoE Access Point DAP-2590Indoor Access Points Model DAP-2590 DAP-2690EMI-EMC Wireless G PoE Access Point 802.11a/g Dual Band Wireless Access PointDWL-2200AP DWL-3200AP DWL-3260APModel DWL-2200AP DWL-3200AP DWL-3260AP DWL-8200AP Outdoor Access Points 802.11g Wireless Access PointDWL-2700AP Outdoor Access Points Model DWL-2700APUnified Wired/Wireless Access System DWS-3000 SeriesUnified Switches DWS-3000 Series Unified Switch DWS-4026 Unified Access Point DWL-8600APDWS-4000 Series 10km/2kmUnified Switch DWS-4000 Series Unified Access Point DWL-8600APRPS OfdmAccess Point Selection Matrix Indoor Standalone Access Points Outdoor StandaloneWPA/WPA2-PSK WPA/WPA2-EAPUnified Switch Selection Matrix Security IPS Firewalls DFL-210DFL-800 DFL-1600IPS Firewalls Model DFL-210 DFL-800 DFL-1600 DFL-2500IDP/IPS UTM Firewalls UTM Firewalls Model DFL-260 DFL-860 DFL-1660DFL-2560G Unified Services Routers DSR-1000NUnified Services Routers Model DSR-1000NNetDefend Firewall Selection Matrix IPS Firewalls UTM FirewallsPAT IP Surveillance Fixed Network Cameras DCS-3110DCS-3411 DCS-3415 Megapixel PoE CameraFixed Network Cameras Model DCS-3110 DCS-3411 DCS-3415Wireless N D&N Camera Hdtv WDR Camera DCS-3430 DCS-3710DCS-7410 DCS-7510 Outdoor PoE CameraModel DCS-3430 DCS-3710 DCS-7410 DCS-7510 WDRWireless N PTZ Camera PTZ Network CamerasDCS-5605 DCS-5635PTZ Network Cameras Model DCS-5605 DCS-5635Fixed Dome Network Cameras DCS-6110DCS-6111 Fixed Dome CameraFix Dome Network Cameras Model DCS-6110 DCS-6111PTZ Dome Network Cameras DCS-681518x Speed Dome Camera PTZ Dome Network Cameras Model DCS-6815DI/DO Network Camera Outdoor Enclosures DCS-60DCS-70 Outdoor EnclosureNetwork Camera vs Optional Accessory Compatible Matrix DCS-60 DCS-70DWL-P50 Network Video Recorders DNS-722-4DNS-726-4 Bay Basic NVRNetwork Video Recorders Model DNS-722-4 DNS-726-4Ddns Video Encoders DVS-210-1Video Encoder Video Encoders Model DVS-210-1Video Management Software VMS ViewCam StandardViewCam Professional & Enterprise ViewCam NVR ViewCamNetwork Camera Selection Matrix Image SensorNetwork Storage Storage Area Network SAN Arrays DSN-1100-10DSN-2100-10 DSN-3200-10 DSN-3400-10 Bay iSCSI SAN ArrayStorage Area Network SAN Arrays Model DSN-1100-10 DSN-2100-10 DSN-3200-10 DSN-3400-10Network Storage Selection Matrix SAN ArraysNetwork Peripherals Power over Ethernet PoE DWL-P20012VDC PoE Splitter 12VDC PoE KitIndex Link Europe

DES-7200 specifications

The D-Link DES-7200 is a versatile, high-performance Ethernet switch designed for enterprise networks that require efficient data management and enhanced connectivity. This switch is manufactured to meet the demands of modern networking environments, offering a combination of scalability, reliability, and advanced features.

One of the key features of the DES-7200 is its support for 10/100/1000 Mbps Ethernet speeds, allowing it to easily handle high-bandwidth applications and large-scale data traffic. Its switching capacity, which can support a substantial number of simultaneous connections, ensures that the switch can keep up with the increasing demands of users and devices within a network.

The DES-7200 incorporates advanced Layer 2 and Layer 3 switching capabilities, making it suitable for a wide range of networking scenarios. This includes support for Virtual LANs (VLANs) which allow network administrators to segment networks for improved performance and security. The switch supports up to 4,096 VLANs, enabling efficient traffic management and isolation of sensitive data.

Another notable feature of the DES-7200 is its robust security protocols. It includes IEEE 802.1X port-based authentication, ensuring that only authorized users can access the network. Additionally, it supports Access Control Lists (ACLs) and Denial of Service (DoS) attack prevention measures, further enhancing network security.

D-Link has also integrated quality of service (QoS) functionality into the DES-7200, allowing for better handling of voice, video, and mission-critical data applications. With the ability to prioritize traffic, administrators can ensure a seamless and uninterrupted user experience, minimizing latency and congestion in busy network environments.

The DES-7200 features a user-friendly web-based interface for easy management and monitoring of the switch. This interface allows network administrators to configure settings, monitor performance, and troubleshoot issues quickly and efficiently.

Scalability is another significant characteristic of the D-Link DES-7200. It offers stacking capabilities, which means multiple switches can be managed as a single unit, simplifying network management and expanding network capacity without requiring excessive configuration.

Overall, the D-Link DES-7200 is a reliable choice for organizations looking to enhance their network infrastructure. With its combination of speed, security, and management capabilities, it stands as a robust solution for both small and large-scale enterprise networks.
Top Page Image Contents