Web Content Filtering; Firewall; Nat/Route Mode - D-Link DFL-500 User Manual

DFL-500 virus and worm prevention is transparent to the end user. Client and server programs require no
special configuration, and DFL-500 high-performance hardware and software ensure there are no noticeable
download delays.

Web content filtering

DFL-500 Web content filtering can be configured to scan all HTTP content protocol streams for URLs or for
web page content. If a match is found between a URL on the URL block list, or if a web page is found to
contain a word or phrase in the content block list, the DFL-500 blocks the web page. The blocked web page is
replaced with a message that you can edit using the DFL-500 web-based manager.
You can configure URL blocking to block all or just some of the pages on a website. Using this feature you
can deny access to parts of a web site without denying access to it completely.
Content blocking can block words and word patterns using Western, Simplified Chinese, Traditional Chinese,
Japanese, or Korean character sets.
Web content filtering also includes a script filter feature that can be configured to block unsecure web content
such as:
·
Java Applets
·
Cookies
·
ActiveX

Firewall

The DFL-500 state-of-the-art firewall protects your computer networks from the hostile environment of the
Internet. After you have performed the basic installation of the DFL-500, the firewall is configured to allow
users on the protected network to access the Internet while blocking Internet access to internal networks.
Using the web-based manager you can modify this firewall configuration to place controls on access to the
Internet from the protected network and to allow controlled access to internal networks.
DFL-500 security policies include a complete range of options that:
· Control incoming and outgoing traffic
·
Block or allow access for all policy options
·
Control when individual policies are in effect
·
Accept or deny traffic to and from individual addresses
· Control standard and user defined network services individually or in groups
·
Require users to enter passwords before gaining access to the Internet
·
Include traffic shaping to set access priorities and guarantee or limit bandwidth for each policy
·
Include logging to track connections for individual policies
The DFL-500 firewall can operate in NAT/Route mode or Transparent mode.

NAT/Route mode

In NAT/Route mode, the DFL-500 is installed as a privacy barrier between the internal network and the
Internet. The firewall provides network address translation (NAT) to protect the internal private network. You
can also configure the firewall to provide public access to servers on your internal network.
In NAT/Route mode you can control whether firewall policies run in NAT mode or route mode. NAT mode
policies route allowed connections between firewall interfaces, performing network address translation to hide
DFL-500 User Manual
10