Introduction; Antivirus Protection - D-Link DFL-500 User Manual

Introduction

The DFL-500 Network Protection Gateway (NPG) supports network-based deployment of application-level
services--including virus protection and full-scan content filtering. DFL-500 NPGs improve network security,
reduce network misuse and abuse, and help you use communications resources more efficiently without
compromising the performance of your network.
Your DFL-500 NPG is a dedicated easily managed security device that delivers a full suite of capabilities that
include:
· application-level services such as virus protection and content filtering
·
network-level services such as firewall, intrusion detection, VPN, and traffic shaping
Your DFL-500 NPG employs D-Link's Accelerated Behavior and Content Analysis System (ABACAS
technology, which leverages breakthroughs in chip design, networking, security, and content analysis. The
unique ASIC-based architecture analyzes content and behavior in real-time, enabling key applications to be
deployed right at the network edge where they are most effective at protecting your networks. The DFL-500
series complements existing solutions, such as host-based antivirus
protection, and enables new applications and services while greatly
lowering costs for equipment, administration and maintenance.
The DFL-500 NPG is an easy-to-deploy and easy-to-administer solution
that delivers exceptional value and performance for small office and
home office (SOHO) applications. The DFL-500 installation wizard
guides users through a simple process that enables most installations to
be up and running in minutes.

Antivirus protection

DFL-500 antivirus protection screens the information found in web (HTTP protocol) and email content (SMTP,
POP3, and IMAP protocols) as it passes through the DFL-500. The content can be contained in normal
network traffic that is allowed to pass between DFL-500 interfaces as well as in IPSec VPN traffic. Antivirus
protection can scan HTTP and email files and attachments in MIME (Multipurpose Internet Mail Extensions)
and Uuencode format.
Antivirus protection screens content traffic for the following types of target files that can contain viruses:
· Executable files (exe, bat, and com)
·
Visual basic files (vbs)
·
Compressed files (zip, gzip, tar, hta, and rar)
·
Screen saver files (scr)
· Dynamic link libraries (dll)
·
MS Office files that contain macros
You can configure antivirus protection to:
·
Block target files
The DFL-500 removes from content protocol data streams target files and attachments that can contain
viruses. You can configure antivirus protection to remove all target files or just selected target file types.
You can also configure antivirus protection to remove different target file types from each content protocol.
· Scan all target files for viruses
The antivirus scanning engine performs signature and macro virus scanning on all target files. If the anti-
virus scanner finds a virus, the file is deleted from the data stream.
·
Identify and remove files known to be used by worms
DFL-500 User Manual
TM
)
9