Table of Contents
Advertisement
VPN
Using the DFL-1000 integrated VPN, you can provide a secure connection between widely separated
office networks or securely link telecommuters or travellers to your office network. The DFL-1000 industry
standard VPN creates an encrypted traffic tunnel between DFL-1000-protected networks or between a
DFL-1000 and third-party VPN products that support IPSec. VPN features include:
•
IPSec, ESP security in tunnel mode
•
Hardware accelerated encryption using IPSEC, DES, and 3DES (triple-DES)
•
HMAC MD5 or HMAC SHA authentication and data integrity
•
Automatic IKE (Internet Key Exchange) and manual key exchange
•
PPTP for easy connectivity with the VPN standard supported by the most popular operating systems
•
L2TP for easy connectivity with a more secure VPN standard also supported by many popular
operating systems
Virus and worm protection
D-Link's DFL-1000 secure gateway solution adds anti-virus and anti-worm functionality to conventional
VPN and firewall. Virus and worm protection screens the information found in web (HTTP protocol) and
email content (SMTP, POP3, and IMAP protocols) for the following types of target files:
•
Executable files (exe, bat, and com)
•
Visual basic files (vbs)
•
Compressed files (zip, gzip, tar, hta, and rar)
•
Screen saver files (scr)
•
Dynamic link libraries (dll)
•
MS Office files
You can configure DFL-1000 virus scanning to block the target files or scan them for viruses and worms.
You can configure three levels of virus protection:
•
High level protection removes target files from HTTP transfers and email attachments before they
pass through the firewall
With high level protection turned on, the DFL-1000 does not perform virus scanning. Instead, all files
and attachments are identified and removed from content protocol data streams.
•
Medium level protection scans all target files for viruses
You can configure the virus scanning engine to perform up to four different types of virus scans on
each target file.
•
Low level protection temporarily suspends virus protection
All target files are forwarded unchanged to their destinations.
You can also configure worm scanning to look for filenames known to be used by worms. For example,
the Nimda worm uses files named readme.exe and sample.exe.
DFL-1000 content virus and worm prevention is transparent to the end user. Client and server programs
require no special configuration, and D-Link high-performance hardware and software ensure there are
no noticeable download delays.
Web content filtering
Using Web content filtering, you can screen for three types of web content:
DFL-1000 User's Manual
11
Advertisement
Table of Contents
