D-Link NetDefend DFL-210 User Manual page 15

1.1. Features
VPN
TLS Termination
Anti-Virus Scanning
Intrusion Detection and
Prevention
Web Content Filtering
Traffic Management
Address Translation.
NetDefendOS supports a range of Virtual Private Network
(VPN) solutions. NetDefendOS supports IPsec, L2TP and
PPTP based VPNs concurrently, can act as either server or
client for all of the VPN types, and can provide individual
security policies for each VPN tunnel. The details for this can
be found in Chapter 9, VPN which includes a summary of
setup steps in Section 9.2, "VPN Quick Start".
NetDefendOS supports TLS termination so that the D-Link
Firewall can act as the end point for connections by HTTP
web-browser clients (this feature is sometimes called SSL
termination). For detailed information, see Section 6.2.9,
"The TLS ALG".
NetDefendOS features integrated anti-virus functionality.
Traffic passing through the D-Link Firewall can be subjected
to in-depth scanning for viruses, and virus sending hosts can
be black-listed and blocked. For details of this feature,
seeSection 6.4, "Anti-Virus Scanning".
Note
Anti-Virus scanning is only available on certain
D-Link NetDefendOS models.
To mitigate application-layer attacks towards vulnerabilities
in services and applications, NetDefendOS provides a
powerful Intrusion Detection and Prevention (IDP) engine.
The IDP engine is policy-based and is able to perform
high-performance scanning and detection of attacks and can
perform blocking and optional black-listing of attacking
hosts. More information about the IDP capabilities of
NetDefendOS can be found in Section 6.5, "Intrusion
Detection and Prevention".
Note
IDP is only available on certain D-Link
NetDefendOS models.
NetDefendOS provides various mechanisms for filtering web
content that is deemed inappropriate according to your web
usage policy. Web content can be blocked based on category,
malicious objects can be removed and web sites can be
whitelisted or blacklisted in multiple policies. More
information on filtering can be found in Section 6.3, "Web
Content Filtering".
Note
Web Content Filtering is only available on
certain D-Link NetDefendOS models.
NetDefendOS provides broad traffic management capabilities
through Traffic Shaping, Threshold Rules (certain models
only) and Server Load Balancing. Traffic Shaping enables
limiting and balancing of bandwidth; Threshold Rules allow
specification of thresholds for sending alarms and/or limiting
network traffic; Server Load Balancing enables a device
running NetDefendOS to distribute network load to multiple
15
Chapter 1. NetDefendOS Overview