DFL-1100
No Licensing Required
Multi-Function Security
•Network Firewall
•VPN Server
•Content Manager
•Bandwidth Manager
•No Licensing Required
Advanced Firewall Features
•Stateful Packet Inspection
•Detect/drop Intruding Packets
•Embedded VPN
•Physical DMZ Port
•Policy-based NAPT
•Multiple Virtual Servers
Embedded VPN Accelerator
•Up to 1000 VPN Tunnels
•IPSec, PPTP, L2TP Pass-through
•DES, 3DES, and AES Encryption
•Automated Key Management via
IKE/ISAKMP
•Aggressive/Main/Quick Negotiation Modes
Performance Optimization
•VLAN Tagging
•HA Port for Active Clustering/Load Balancing
Enhanced Network Services
•DHCP Server/Client
•DHCP Relay
•SYSLog Support
•E-Mail Alert
•SNMP Management
•Consistency Checks
Product Data Sheet
Network Security
Rackmount VPN Firewall
D-Link, an industry leading in innovative networking solutions, introduces the NetDefend family of Firewall/VPN Security Appliances. With the growing concerns over network security, Denial of Service attacks, virus damage, and privacy demands, D-Link’s NetDefend family provides the assurance of a dedicated network security solution in a single device.
The new DFL-1100 network security appliance is an easy-to-deploy VPN and firewall solution designed for enterprise and small to medium businesses that demand superior performance and security. This appliance is a powerful security solution that provides integrated Network Address Translation (NAT), SPI Firewall, advanced content filtering features, IDS protection, bandwidth management, as well as Virtual Private Network (VPN) support. The DFL-1100 hardware includes a trusted LAN port, a WAN port that supports virtually all WAN connection types, and an independent DMZ port to support local servers such as e-mail, Web, and FTP. All of these features conveniently fit into a 1U rack-mountable chassis that can be easily integrated into your switch/server rack
To provide enterprise-class network security, the DFL-1100 has several flexible firewall features to manage, monitor, and maintain a healthy and secure network. Some network management features include: Remote management, Bandwidth Control Policies, URL/Keyword Blocking, Access Policies, and SNMP. For network monitoring, the DFL-1100 supports e-mail alerts, system log, consistency checks, and real-time statistics. These features along with a firmware backup function provide and maintain maximum network performance and security.
For optimal VPN configuration, the DFL-1100 has both an integrated IPSec VPN Client and Server to support almost any required VPN policy. This high-end appliance has a hardware VPN engine to support and manage up to 1000 VPN connections. The DFL-1100 can support IPSec, PPTP, and L2TP protocol pass-through traffic as well. Advanced VPN configuration options include: AES/DES/3DES encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an RADIUS server or the internal 500-user database.
Additional network control features supported by the DFL-1100 include VLAN tagging and an optional High Availability (HA) port. VLAN tagging supports integration of the DFL-1100 into your rack system with L2/L3 managed switches to segment your network and prioritize traffic. The optional HA port can be used as an additional DMZ port or connection point to another DFL-1100 to support Active Clustering or Load Balancing to optimize network up-time and performance.
The DFL-1100 can be configured via D-Link’s Web-based interface or using the Command Line Interface (CLI). These configuration options can be managed through Admin, Read/Write, or Read-Only administrator rights. With these access management levels, any authorized user can easily configure or access the administrative functions of the DFL-1100.
With businesses becoming increasingly network-dependent, the need to invest in a reliable security solution is crucial. Each security appliance in the D-Link NetDefend SecureNetwork family of products offers high return on investment through robust security features, flexible configuration, and maximum network protection.
