D-Link IP Camera DCS-2120 - Manual (Page 2)

Firewalls Guide
www.dlink.co.uk tel: +44 (0)20 8955 9000
Local variations may occur. The information is correct at time of publication. D-Link will not be held liable for any changes to this information.
All D-Link Firewalls come with a 2-year
warranty and FREE lifetime technical support.
FIREWALLS
Model DFL-800 DFL-1600 DFL-2500
Image
Interfaces Fast Ethernet interfaces (FE)
2 x WAN FE
6 x Configurable GbE 8 x Configurable GbE 1 x DMZ FE
7 x LAN FE
System performance
Firewall throughput 150Mbps 320Mbps 600Mbps
VPN throughput 60Mbps 120Mbps 300Mbps
Concurrent sessions 25,000 400,000 1,000,000
Policies 1,000 2,500 4,000
Firewall system
PPPoE ✓ ✓ ✓
Transparent mode
✓ ✓ ✓
NAT, PAT ✓ ✓ ✓
Dynamic routing protocol OSPF OSPF OSPF
H.323 NAT traversal ✓ ✓ ✓
Time-scheduled policies ✓ ✓ ✓
Application Layer Gateway (ALG) ✓ ✓ ✓
Proactive network security ZoneDefense ZoneDefense ZoneDefense
Networking
DHCP server/client
✓ ✓ ✓
DHCP relay ✓ ✓ ✓
Policy-based routing
✓ ✓ ✓
802.1q VLAN ✓ ✓ ✓
IP Multicast support IGMP, IGMP Snooping IGMP, IGMP Snooping IGMP, IGMP Snooping
VPN
Encryption method:
(DES/3DES/AES/Twofish/Blowfish/CAST-128)
All All All
Dedicated VPN tunnel 300 1,200 2,500
PPTP/L2TP server ✓ ✓ ✓
Hub and spoke ✓ ✓ ✓
IPSec NAT traversal
✓ ✓ ✓
System management
Console interface RS-232 RS-232 RS-232
Web UI interface HTTP, HTTPS HTTP, HTTPS HTTP, HTTPS
Command line/SSH ✓ ✓ ✓
Upgrade and Config backup/restore
✓ ✓ ✓
Trusted host for remote management ✓ ✓ ✓
User authentication
Built-in database
✓ ✓ ✓
External database
• RADIUS
• LDAP
• Active Directory ✓ ✓ ✓
✓ ✓ ✓
✓ ✓ ✓
IP and MAC binding ✓ ✓ ✓
XAUTH for IPSec
authentication
✓ ✓ ✓
Logging and monitoring
Internal log ✓ ✓ ✓
External log Syslog Server Syslog Server Syslog Server
Email notification
✓ ✓ ✓
External report server* WebTrends, FirewallAnalyzer WebTrends, FirewallAnalyzer WebTrends, FirewallAnalyzer
Event log and alarm
✓ ✓ ✓
SNMP SNMP v1, v2c SNMP v1, v2c SNMP v1, v2c
Traffic load balance
Outbound load balancing ✓ ✓ ✓
Server load balancing ✓ ✓ ✓
Support load balance algorithms 3 types 3 types 3 types
Traffic redirect when failover
✓ ✓ ✓
Bandwidth management
Policy-based traffic shaping ✓ ✓ ✓
Guarantee bandwidth ✓ ✓ ✓
Maximum bandwidth ✓ ✓ ✓
Priority bandwidth ✓ ✓ ✓
High Availability (HA)
WAN failover ✓ ✓ ✓
Active-Passive mode ✓ ✓
Device failure detection
✓ ✓
Link failure detection ✓ ✓
FW/VPN session SYN ✓ ✓
Intrusion Detection Service (IDS)
NIDS pattern ✓ ✓ ✓
Automatic pattern update ✓ ✓ ✓
DoS, DDoS protection
✓ ✓ ✓
Customisable detection signature ✓ ✓ ✓
Attack alarm via email
✓ ✓ ✓
Content filtering
HTTP type URL, Keyword URL, Keyword URL, Keyword
Script type Java, Cookie, ActiveX, VB Java, Cookie, ActiveX, VB Java, Cookie, ActiveX, VB
Email type Black list, keyword Black list, keyword Black list, keyword
IM/P2P blocking
Instant message support MSN, Yahoo, SoftEther MSN, Yahoo, SoftEther MSN, Yahoo, SoftEther
Peer to peer support Skype, eMule Skype, eMule Skype, eMule
* Firmware Release 2
ALSO AVAILABLE
DFL-M510 Information Security Gateway
Controls & Manages Instant Messaging/Peer-to-Peer
Applications to secure the network against emerging risks.
VPN Software DS-601 VPN Client Software (1 User License)
DS-605 VPN Client Software (5 User License)
IPS Subscription Packages
DFL800IPS12 12 months IPS subscription pack for DFL-800
DFL1600IPS12 12 months IPS subscription pack for DFL-1600
DFL2500IPS12 12 months IPS subscription pack for DFL-2500