DLINK DFL260IPS12

DFL-260 12-MONTHS IPS UPDATE LICS .

UTM Firewall for Small Business
The DFL-260 UTM Firewall offers a powerful security solution for small to mid-sized offices with up to 50 users against a wide variety of network threats in real time. By integrating an Intrusion Prevention System (IPS), gateway AntiVirus (AV) and Web Content Filtering (WCF) in a desktop-size industrial design, this appliance addresses business concerns regarding network security at a competitive price.

Unified Threat Management
The DFL-260 integrates an Intrusion Detection and Prevention System (IDP/IPS), gateway Anti-Virus (AV) and Content Filtering/Web URL Filtering for superior Layer 7 content inspection protection. Optional service subscriptions are available to keep each of these defenses updated in real time.

Robust Intrusion Prevention
The DFL-260 adopts a unique IPS technology, component-based signatures, that is built to recognise and protect against all varieties of known and unknown attacks and which can address all critical aspects of an attack or potential attack including payload, NOP sled, infection and exploits. In terms of signature coverage, the IPS database includes attack information and data from a global attack sensor-grid and furthermore exploits collected from public sites such as the National Vulnerability Database and Bugtrax.

The DFL-260 delivers high quality IPS signatures by constantly creating and optimising NetDefend signatures via the D-Link Auto-Signature Sensor System. Without overloading the appliance, these signatures ensure a high ratio of detection accuracy and the lowest ratio of false positives.

Stream-Based Virus Scanning
The DFL-260 scans files of any size, using a stream-based virus scanning technology that does not require any caching. This scanning method increases inspection performance while eliminating network bottlenecks.

The DFL-260 uses virus signatures from the respected antivirus company Kaspersky Labs to provide users with reliable and accurate antivirus signatures, as well as prompt signature updates. Viruses and malware consequently can be effectively blocked before they reach the network's desktops or mobile devices.

Web Content Filtering
Web Content Filtering helps administrators monitor, manage and control employee usage of the Internet. The DFL-260 implements multiple global index servers with millions of URLs and real-time website information to enhance performance capacity and maximise service availability.

The firewall uses highly granular policies and explicit black/white lists to allow or disallow access to certain types of websites for any combination of users, interfaces and IP networks. They can strip potential malicious objects, such as Java applets, JavaScripts/VBScripts, ActiveX objects and cookies to actively handle the Internet content.

Hardware Accelerator
The DFL-860 uses a hardware accelerator approach to carry out IPS and Anti-Virus scanning functions simultaneously without degrading firewall and VPN performance. This powerful accelerator allows the firewall to perform with a much higher throughput than other antivirus-capable UTM firewalls on the market.

Powerful VPN Performance
The DFL-260 has a hardware-based VPN engine to support and manage up to 100 VPN tunnels. It supports IPSec, PPTP, and L2TP protocols in Client/Server mode and can handle pass-through traffic as well.

User authentication can be performed using either an external RADIUS server or the internal firewall database that supports up to 150 accounts.

Monitoring and Management
The DFL-260 can be remotely managed via a web-based interface, CLI through the RS-232 console port or a Secure Shell (SSH) connection.

An installation wizard comes with the DFL-860 to allow a quick and easy set-up.

The DFL-860 also includes advanced features to monitor and maintain a healthy and secure network, such as e-mail alerts, system log, consistency checks and real-time statistics. In addition, the firewall implements bandwidth management, to ensure an efficient allocation of network capacity and to minimise congestion.
The DMZ port may be configured as a WAN interface to provide redundancy and load-balancing.

3rd party certification
The DFL-260 has passed rigorous testing by ICSA Labs, to achieve both Corporate-Level Firewall Certification and IPSec 1.2 Enhanced Certification. These are recognised worlwide as the benchmark for network security industry excellence.
Testing is performed against an industry-approved set of criteria and is periodically reviewed to ensure that the vendor has continued to develop a secure product that meets all the criteria.

In addition, the DFL-260 has passed the Virtual Private Network Consortium (VPNC) AES Interoperability test, ensuring that the firewall is generally interoperable with other IPsec systems when using the AES encryption algorithm.