D-Link DES-7200 User Manual
Page 69
63
Security
utM Firewalls
utM Firewalls
Model
DFL-260
DFL-860
DFL-1660
DFL-2560
DFL-2560G
Port interface
ethernet WAN Port
1
2
-
Ethernet DMZ Port
(user-configurable)
1
1
-
ethernet LAN Port
4
7
-
user-configurable
Gigabit RJ-45 Port
-
6
10
6
user-configurable
Gigabit SFP Port
-
4
uSB 2.0
-
2 (reserved)
DB-9 rS-232 console
1
System
Performance
Firewall throughput
80Mbps
150Mbps
1.2Gbps
2Gbps
VPN throughput
25Mbps
45Mbps
350Mbps
1Gbps
iPS throughput
20Mbps
40Mbps
400Mbps
600Mbps
Anti-Virus throughput
10Mbps
20Mbps
225Mbps
450Mbps
concurrent Sessions
10,000**
20,000**
600,000
1,500,000
New Sessions
(per second)
2,000
4,000
15,000
20,000
Policies
500
1,000
4,000
6,000
Firewall System
transparent Mode; Network Address translation (NAt), Port Address translation (PAt);
Dynamic Routing Protocol: Open Shortest Path First (OSPF) (Not applicable on DFL-160/260);
H.323 NAT Traversal (Not applicable on DFL-160); Time-Scheduled Policies; Application Layer Gateway (ALG);
Proactive Network Security: ZoneDefense (Not applicable on DFL-160/210)
Networking
DHCP Server/Client; DHCP Relay; Policy-based Routing; IP Multicast: IGMPv3
Virtual LAN (VLAN)
8
16
1,024
2,048
Virtual Private Network (VPN)
encryption Methods: DeS/3DeS/AeS/twofish/Browfish/cASt-128; iPSec NAt traversal;
Dedicated VPN tunnels: 30 (DFL-160), 100 (DFL-260), 200** (DFL-860),
2,500 (DFL-1660), 5,000 (DFL-2560/2560G);
Point-to-Point tunneling Protocol (PPtP) / Layer 2 tunneling Protocol (L2tP) Server;
Hub and Spoke (Not applicable on DFL-160)
traffic Load Balancing
(Not applicable on DFL-160)
Outbound Load Balancing; Server Load Balancing (Not applicable for DFL-260); Traffic Redirect at Fail-Over;
Outbound Load Balance Algorithms: Round-Robin, Weight-based Round-Robin, Destination-based, Spill-over
Bandwidth Management
(Not applicable on DFL-160)
Policy-based Traffic Shaping; Guaranteed Bandwidth; Maximum Bandwidth;
Priority Bandwidth; Dynamic Bandwidth Balancing
High Availability (HA)
(Not applicable on DFL-160)
WAN Fail-Over (DFL-210: When DMZ Port is Configured as WAN Port);
Active/Passive Modes (Not applicable on DFL-260/860);
Device Failure Detection (Not applicable on DFL-260/860);
Link Failure Detection (Not applicable on DFL-260/860);
Firmware / Virtual Private Network (VPN) Session Synchronization (Not applicable on DFL-260/860)
Intrusion Detection & Prevention
System (iDP/iPS)
Automatic Pattern update; Denial of Service (DoS), Distributed DoS (DDoS) update;
Attack Alarm via email; Advanced iDP/iPS Subscription;
iP Blacklist by threshold or iPS/iDP (Not applicable on DFL-160/210)
content Filtering
HTTP Type: URL Blacklist/Whitelist; Script Type: Java, Cookie, ActiveX, VB (Not applicable on DFL-160);
Email Type: Email Blacklist/Whitelist (Not applicable on DFL-160); External Database Content Filtering
Anti-Virus
real time AV Scanning; unlimited File Size; Scans VPN tunnels; Support compressed Files;
Signature Licensor: Kaspersky; Automatic Pattern update
Physical &
environmental
Dimension (WxDxH)
Desktop;
235x162x36mm
11-inch Desktop;
1U Height;
280x214x44mm
19-inch rack-Mount;
1U Height;
440x400x44mm
Power input
External Power Adapter
80 PLuS internal universal Power Supply
Operating Temperature
0 to 40 °C
Storage temperature
-20 to 70 °C
Operating Humidity
5% to 95% Non-condensing
Mean time Before
Failure (MtBF)
186,614 hours
140,532 hours
400,000 hours
310,000 hours
certification
eMi-eMc compliance
Fcc class A; ce class A; Vcci; c-tick
Safety compliance
uL; LVD(eN60950-1)
LVD (eN60950-1)
cuL; cB
** Available in Firmware 2.26.00 and above; Performance based on Firmware 2.26.00 and above
67