其他功能
| 认证方法 |
Null, DES and 3DES, AES; Key management: manual and IKE |
| 接口 |
Ethernet/FastEthernet |
| 网路功能 |
LAN,WAN,VPN |
| 专用功能部件 |
IDS: NIDS pattern; DDoS and DoS detected; MAC address bind with IP; On-line pattern update; Detect CodeRed; Attack alarm (via e-mail); Log and report \n Bandwidth Management: Guaranteed bandwidth; Maximum bandwidth; Priority-bandwidth utilization; DiffServ stamp; Class-based policies; Application-specific traffic class; Policy-based traffic shaping; Subnet-specific traffic class \n High Availability (HA): Session protection for firewall and VPN; Active-Active cluster and load balance; Device failure detection; State synchronization; VPN synchronization; Synchronization method: Ethernet; Average fail-over time: <800ms; Network notification on fail over\n |
另外
| 数据传输率（最大） |
100 Mbit/s |
| 连接方式 |
Wired |
SMB SME Firewall w. 1 x 10 100Mbps WAN + 1 x 10 100Mbps LAN port + 1 x 10 100Mbps DMZ port + 1 x 10 100Mbps Backup AUX Port for High Availability. NAT and Transparent mode Policy based content filtering Policy Based Routing VLAN 802.1Q
The DFL-1100 includes a WAN link support, a trusted LAN port, a DMZ port to support local e-mail and web servers, and a backup port to connect to another firewall.
The DFL-1100 features enterprise-grade firewall functions, including Stateful Packet Inspection (SPI), detect/drop intruding packets, embedded VPN, a physical DMZ port, multiple-mapped IPs and multiple virtual servers. The DFL-1100 connects your office to a broadband modem such as cable or DSL through an external 10/100BASE-TX WAN port.
DFL-1100 provides advanced features including Content filtering, IDS (Intrusion Detection System), Bandwidth Management for complete solution protection to users's network. Content Filtering lets you filter/protect your network with customized policy. Bandwidth management guarantees bandwidth for different services.
The DFL-1100 provides complete firewall functions, including the NAT mode, PAT (Port Address Translation) mode, Transparent mode, Routing mode and SPI. It also supports customized policy and virtual server configuration. Administrators can easily manage the network through graphical statistics in a logging/monitoring system.
The DFL-1100 is equipped with embedded VPN support, allowing you to create multiple IPSec tunnels to remote sites/clients. IPSec on the DFL-1100 uses strong encryption with DES, 3DES, AES and Automated Key Management via IKE/ISAKMP. A VPN tunnel can be activated from the DFL-1100 to a remote site or a mobile user for secured traffic flow using triple DES encryption. This offers users a way to confidentially access and transfer sensitive information. Multiple VPN tunnels may be easily created without the need to setup IKE (Internet Key Exchange) policies.
The DFL-1100 can operate with up to 200,000 concurrent sessions, providing up to 1,000 VPN tunnels for up to 1,000 mobile telecommuters needing secure remote connections to the company network. In addition, this firewall also provides fault tolerance through redundancy backup with another firewall through a backup port, providing continuous firewall protection for mission-critical applications.
URL blocking is part of basic features offered by DFL-1100. This function provides the benefit of limiting access to undesirable Internet sites. Logs of real-time Internet traffic, alarms of Internet attacks, and notice of web-browsing activities are logged and can be reported through e-mail notification. DFL-1100 supports Radius authentication so you can make use of your existing Radius Server and user information.
The DFL-1100 includes a LAN port that connects to your internal office network, a backup port that connects to another firewall, and a physical DMZ (Demilitarized Zone) port that can connect your Web, mail or FTP servers for access from the Internet. DMZ alleviates congested server traffic from entering the Internal network, while protecting your other office computers from Internet attacks by hiding them behind the firewall.
