Product Manual
Page 3
User Manual DFL-210/260/800/860/1600/1660/2500/2560/2560G NetDefendOS Version 2.27.01 Published 2010-06-22 Copyright © 2010 Copyright Notice This publication, including all photographs, illustrations and software, is subject to ...notify any of the material contained herein, may be reproduced without the written consent of Liability UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS...
User Manual DFL-210/260/800/860/1600/1660/2500/2560/2560G NetDefendOS Version 2.27.01 Published 2010-06-22 Copyright © 2010 Copyright Notice This publication, including all photographs, illustrations and software, is subject to ...notify any of the material contained herein, may be reproduced without the written consent of Liability UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS...
Product Manual
Page 30
..., 800, 860, 1600 and 2500, the default management interface IP address is 192.168.1.1. • On the NetDefend DFL-1660, 2560 and 2560G, the default management interface IP address is recommended) and point the browser at the address 192.168.1.1. The factory default ... initial connection to the Web Interface To access the Web Interface using a standard web browser. Assignment of a Default IP Address For a new D-Link NetDefend firewall with factory defaults, a default internal IP address is successfully established, a user authentication dialog similar to the hardware's LAN1 interface (or ...
..., 800, 860, 1600 and 2500, the default management interface IP address is 192.168.1.1. • On the NetDefend DFL-1660, 2560 and 2560G, the default management interface IP address is recommended) and point the browser at the address 192.168.1.1. The factory default ... initial connection to the Web Interface To access the Web Interface using a standard web browser. Assignment of a Default IP Address For a new D-Link NetDefend firewall with factory defaults, a default internal IP address is successfully established, a user authentication dialog similar to the hardware's LAN1 interface (or ...
Product Manual
Page 65
...can be used: gw-world:/> hwm -all hardware monitoring functionality. 2.4. Hardware Monitoring Chapter 2. Hardware Monitoring Availability Certain D-Link hardware models allow the administrator to use the CLI to query the current value of hardware monitor values. Configuring and ...Hardware Monitoring section of each the sensor listing indicates that currently support hardware monitoring are the DFL-1600, 1660, 2500, 2560 and 2560G. Management and Maintenance 2.4. The D-Link NetDefend models that the sensor is available: Enable Sensors Enable/disable all This can be ...
...can be used: gw-world:/> hwm -all hardware monitoring functionality. 2.4. Hardware Monitoring Chapter 2. Hardware Monitoring Availability Certain D-Link hardware models allow the administrator to use the CLI to query the current value of hardware monitor values. Configuring and ...Hardware Monitoring section of each the sensor listing indicates that currently support hardware monitoring are the DFL-1600, 1660, 2500, 2560 and 2560G. Management and Maintenance 2.4. The D-Link NetDefend models that the sensor is available: Enable Sensors Enable/disable all This can be ...
Product Manual
Page 75
... of Life Procedures The restore to 192.168.10.1. The management interface IP address for the NetDefend DFL-1600, 1660, 2500, 2560 and 2560G To reset the DFL-1600/1660/2500/2560/2560G models, press any key on the keypad when the Press keypad to function properly with its default ...: Do NOT abort a reset to defaults If the process of all sensitive information such as VPN settings. Reset Procedure for the DFL-1660, DFL-2560 and DFL-2560G models will continue to Factory Defaults Chapter 2. The default IP address factory setting for 10-15 seconds while powering on the front ...
... of Life Procedures The restore to 192.168.10.1. The management interface IP address for the NetDefend DFL-1600, 1660, 2500, 2560 and 2560G To reset the DFL-1600/1660/2500/2560/2560G models, press any key on the keypad when the Press keypad to function properly with its default ...: Do NOT abort a reset to defaults If the process of all sensitive information such as VPN settings. Reset Procedure for the DFL-1660, DFL-2560 and DFL-2560G models will continue to Factory Defaults Chapter 2. The default IP address factory setting for 10-15 seconds while powering on the front ...
Product Manual
Page 172
...an LS algorithm. Changes result in OSPF, offer a high degree of routing loops. OSPF is not available on the D-Link NetDefend DFL-800, 860, 1600, 1660 2500, 2560 and 2560G. OSPF is only available on all routers keep the same routing table information and have two NetDefend Firewalls A and B...routing process since its routing table. Figure 4.8. When a router receives these broadcasts it runs the LS algorithm and calculates its attached links and link costs to inform others of any route changes instead of A, OSPF 172 Each router uses the information it and then broadcasts the ...
...an LS algorithm. Changes result in OSPF, offer a high degree of routing loops. OSPF is not available on the D-Link NetDefend DFL-800, 860, 1600, 1660 2500, 2560 and 2560G. OSPF is only available on all routers keep the same routing table information and have two NetDefend Firewalls A and B...routing process since its routing table. Figure 4.8. When a router receives these broadcasts it runs the LS algorithm and calculates its attached links and link costs to inform others of any route changes instead of A, OSPF 172 Each router uses the information it and then broadcasts the ...
Product Manual
Page 174
...based upon RFC 2328, with each NetDefend Firewall involved in the OSPF network. IP packets are routed "as they are the criteria that sends Link-state Advertisements (LSAs) to RFC 1583. Each router maintains a database, known as router interface failures) and calculates new loop-free routes to... Item Bandwidth Load Delay The sum of networks with itself as the root. OSPF is not available on the NetDefend DFL-800, 860, 1600, 1660 2500, 2560 and 2560G. OSPF Concepts Chapter 4. The principal metrics used value for IP networks by CPU utilization and throughput. In NetDefendOS, an...
...based upon RFC 2328, with each NetDefend Firewall involved in the OSPF network. IP packets are routed "as they are the criteria that sends Link-state Advertisements (LSAs) to RFC 1583. Each router maintains a database, known as router interface failures) and calculates new loop-free routes to... Item Bandwidth Load Delay The sum of networks with itself as the root. OSPF is not available on the NetDefend DFL-800, 860, 1600, 1660 2500, 2560 and 2560G. OSPF Concepts Chapter 4. The principal metrics used value for IP networks by CPU utilization and throughput. In NetDefendOS, an...
Product Manual
Page 295
Dynamic Web Content Filtering 6.3.4.1. Access to the URL can be allowed or denied based on the D-Link NetDefend DFL-260, 860, 1660, 2560 and 2560G. 6.3.4. Click OK Finally, make the lookup process as fast as the Action 6. In the table, click on . Dynamic WCF Databases ... Filtering (WCF) of web traffic, which URLs to block or to retrieve the category of recently accessed URLs. Security Mechanisms 6. Instead, D-Link maintains a global infrastructure of databases containing huge numbers of the URLs in many different countries. Now click Add and select HTTP ALG URL from...
Dynamic Web Content Filtering 6.3.4.1. Access to the URL can be allowed or denied based on the D-Link NetDefend DFL-260, 860, 1660, 2560 and 2560G. 6.3.4. Click OK Finally, make the lookup process as fast as the Action 6. In the table, click on . Dynamic WCF Databases ... Filtering (WCF) of web traffic, which URLs to block or to retrieve the category of recently accessed URLs. Security Mechanisms 6. Instead, D-Link maintains a global infrastructure of databases containing huge numbers of the URLs in many different countries. Now click Add and select HTTP ALG URL from...
Product Manual
Page 309
Security Mechanisms 6.4. Malicious code in files. IDP is enabled. Most importantly, it completes. 309 NetDefendOS Anti-Virus is focused on the D-Link NetDefend DFL-260, 860, 1660, 2560 and 2560G. 6.4.2. Since files are being streamed and not being downloaded to a user behind the NetDefend Firewall. Overview The NetDefendOS Anti-Virus module protects against malicious code...
Security Mechanisms 6.4. Malicious code in files. IDP is enabled. Most importantly, it completes. 309 NetDefendOS Anti-Virus is focused on the D-Link NetDefend DFL-260, 860, 1660, 2560 and 2560G. 6.4.2. Since files are being streamed and not being downloaded to a user behind the NetDefend Firewall. Overview The NetDefendOS Anti-Virus module protects against malicious code...
Product Manual
Page 316
IDP does not come as a restricted subset of database signatures for all D-Link NetDefend models, including those that gives basic protection against IDP attacks. Subscribing to the D-Link Advanced IDP Service Advanced IDP is purchased as standard with a much broader range of ...is regularly updated with Maintenance IDP. The standard subscription is a simplified IDP that don't come as standard with the DFL-260, 860, 1660, 2560 and 2560G and a subscription to the base NetDefendOS license. Figure 6.9. It is a subscription service and subscribing means that the database...
IDP does not come as a restricted subset of database signatures for all D-Link NetDefend models, including those that gives basic protection against IDP attacks. Subscribing to the D-Link Advanced IDP Service Advanced IDP is purchased as standard with a much broader range of ...is regularly updated with Maintenance IDP. The standard subscription is a simplified IDP that don't come as standard with the DFL-260, 860, 1660, 2560 and 2560G and a subscription to the base NetDefendOS license. Figure 6.9. It is a subscription service and subscribing means that the database...
Product Manual
Page 470
... for the action to be triggered. • Threshold Type The rule can be some external source trying to put a limit on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 10.3. Threshold Rules 10.3.1. Threshold Rules Chapter 10. Either the option Audit or Protect can be selected. • Group By The...
... for the action to be triggered. • Threshold Type The rule can be some external source trying to put a limit on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 10.3. Threshold Rules 10.3.1. Threshold Rules Chapter 10. Either the option Audit or Protect can be selected. • Group By The...
Product Manual
Page 473
...sharing the load across multiple servers can handle many more requests than a single server. Note: SLB is not available on all D-Link NetDefend models The SLB feature is a powerful tool that can improve not just the performance of applications but also scalability by a NetDefend... Firewall. 473 Traffic Management 10.4. SLB is only available on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 10.4. The illustration below shows a typical SLB scenario, with an Action of servers (sometimes referred to internal ...
...sharing the load across multiple servers can handle many more requests than a single server. Note: SLB is not available on all D-Link NetDefend models The SLB feature is a powerful tool that can improve not just the performance of applications but also scalability by a NetDefend... Firewall. 473 Traffic Management 10.4. SLB is only available on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 10.4. The illustration below shows a typical SLB scenario, with an Action of servers (sometimes referred to internal ...
Product Manual
Page 482
... to an existing master firewall. Note: High Availability is only available on some NetDefend models The HA feature is inactive and on the D-Link NetDefend DFL-1600, 1660, 2500, 2560 and 2560G. HA works by NetDefendOS across the sync 482 The master and slave are continually sent by adding a back-up a logical HA Cluster...
... to an existing master firewall. Note: High Availability is only available on some NetDefend models The HA feature is inactive and on the D-Link NetDefend DFL-1600, 1660, 2500, 2560 and 2560G. HA works by NetDefendOS across the sync 482 The master and slave are continually sent by adding a back-up a logical HA Cluster...
Product Manual
Page 497
...switches. Blocked hosts and networks remain blocked until the system administrator manually unblocks them using the ZoneDefense feature. ZoneDefense This chapter describes the D-Link ZoneDefense feature. • Overview, page 497 • ZoneDefense Switches, page 498 • ZoneDefense Operation, page 499 12.1. Overview ...allows a NetDefend Firewall to the relevant switches and this can be made per second, or on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 497 When hosts or clients on a network become infected with viruses or another form of malicious code...
...switches. Blocked hosts and networks remain blocked until the system administrator manually unblocks them using the ZoneDefense feature. ZoneDefense This chapter describes the D-Link ZoneDefense feature. • Overview, page 497 • ZoneDefense Switches, page 498 • ZoneDefense Operation, page 499 12.1. Overview ...allows a NetDefend Firewall to the relevant switches and this can be made per second, or on the D-Link NetDefend DFL-800, 860, 1600, 1660, 2500, 2560 and 2560G. 497 When hosts or clients on a network become infected with viruses or another form of malicious code...