DFL-870 NetDefend UTM Firewall
DFL-870
SPECIFICATION
Specifications
|
Hardware |
|
|
Interfaces |
• 6 ports 10/100/1000Base-T • 2 USB 2.0 ports1 • Console port with mini-USB connector |
|
Indicators |
• Power • Link/Activity/Speed (per port) |
|
Buttons |
• Reset Button • Button for power on/off |
|
Power connector |
• Connector for power supply (alternating current) |
|
Performance2 |
|
|
Firewall Throughput3 |
• 4 GB/s |
|
VPN bandwidth4 |
• 1 GB/s |
|
IPS throughput5 |
• 450 Mbps |
|
Anti-virus throughput5 |
• 600 Mbps |
|
Bandwidth control function applications5 |
• 700 Mbps |
|
Max. number of parallel sessions |
• 500 000000 |
|
How many new sessions per second |
• 45 000000 |
|
Firewall policy |
• 2000 |
|
Network |
|
|
Type of Internet connection |
• Static/dynamic IP address • PPPoE/PPTP/L2TP • Russia PPTP/L2TP (Dual Access) • Russia PPPoE (Dual Access) |
|
Firewall |
• NAT, PAT • Dynamic Routing Protocol: OSPFv2 • Application Layer Gateway -HTTP -FTP -H. 323 -POP3 -SMTP -SIP -TFTP -TLS 1.0 (RFC2246) • Transparent mode (Transparent mode) • H. 323 NAT Traversal • Policy on a schedule • Active network security ZoneDefense • Authentication: the local database, RADIUS, Microsoft Active Directory, LDAP, |
|
Network features |
• DHCP Server/client • DHCP Relay • IP Multicast: IGMPv3 • IPv6 • Policy-based Routing • IEEE 802 .1Q VLAN: up to 128 VLAN • Channel Aggregation |
|
Load balancing |
• Balancing outgoing traffic • Server load balancing • Traffic redirection when Cliff channel (failover) |
|
High Availability (HA) |
• WAN channel Reservation • Device failure Detection • Sync sessions FW/VPN • Active/Passive Mode • Identification of breakage of the channel |
|
A virtual private network (VPN) |
• VPN tunnels: 200 • The method of encryption: DES • IKE/IKEv2 • Redundant IPSec VPN gateway • Hub and Spoke • IPSec NAT Traversal • Detect inactive nodes • Server/client PPTP/L2TP • SSL VPN6 • GRE |
|
Intrusion detection and Prevention System (IDP/IPS) 7 |
• 12-month subscription to the service • Automatic updating templates • Protection against DoS, DDoS • Warning about attacks by email • IP blacklist (threshold or IDP/IPS) • Extended IDP/IPS subscription (sold separately) |
|
Content filtering 7
|
• 12-month subscription to the service • Type of HTTP/HTTPS: white/black list URL • Configure the list of prohibited Web pages • The maximum size of the file • SafeSearch Enforcement8 • Filtering based on the types of scripts: Java applets, JavaScript, VBScript, ActiveX, cookies |
|
Anti-virus protection 7 |
• 12-month subscription to the service • Real-time scanning • Anti-virus scanning for HTTP, FTP, SMTP, POP3, IMAP • Streaming scan • Anti-virus protection of a virtual private network (VPN) • Scan compressed files ZIP/GZIP up to 10 levels of nesting • Signature Provider: Kaspersky |
|
Managing applications 7 |
• 12-month subscription to the service • Support 1000 + recognized applications • Office for the schedule and on the basis of the rules of • Application bandwidth management, policy management and prioritization |
|
The security of e-mail |
• Support for SMTP, POP3, IMAP • White/black list by file type • Filtering of e-mail addresses: black list of senders/recipients to exceptions list • Check the extension and MIME type of the file • Antispam |
|
Office |
|
|
Bandwidth management |
• Guaranteed bandwidth • Bandwidth based on priority • Dynamic bandwidth allocation • Maximum bandwidth • Bandwidth management in VPN tunnel • Traffic shaping on a schedule • Policy-based Traffic shaping • IDP traffic shaping |
|
System management |
• The Setup Wizard • Command line interface (CLI) • SNMP v1/v2c • Email notifications • Web interface (HTTP/HTTPS) • Secure Shell (SSH) • System log • Monitor performance in real time |
|
Physical parameters |
|
|
Dimensions (l x w x h) |
• 278 x 183 x 44 mm |
|
Weight |
• 1.7 kg |
|
Operating conditions |
|
|
Nutrition |
• 100-240 VAC, internal power supply |
|
Max. power consumption |
• 20 W |
|
MTBF (hours) |
• 374 681 |
|
Temperature |
• Operating: 0 to 40° c • Storage: -20 up to 70° c |
|
Humidity |
• Operating: 5% to 95% non-condensing • Storage: 5% to 95% non-condensing |
|
Delivery Kit |
|
|
• Firewall DFL-870 • Power cord • Ethernet cable • Console cable with mini-USB connectors and USB • Kit for installation in 19-inch rack • Quick install guide |
|
|
Miscellaneous |
|
|
EMI |
• FCC Class A • CE Class A • VCCI |
|
Security |
• LVD (EN60950-1) |
1 Reserved for use in subsequent versions of the firmware.
2 Actual performance depends on network conditions and activated services.
3 Firewall throughput Testing was performed using UDP traffic with packet size is 1518 bytes in accordance with RFC2544.
4 VPN bandwidth Testing was performed using UDP traffic with packet size 1420 bytes in accordance with RFC2544.
5 Performance IPS and anti-virus has been determined on the basis of file transfer protocol (FTP), file attachment 1 GB, running on IXIA IxLoad. Testing conducted with many threads across multiple pairs of ports.
6 For SSL VPN is only available server mode.
7 12-month subscription to the service is purchased additionally.
8 SafeSearch Enforcement only supports search engines Google, Bing and Yahoo.