D-Link 800 - DFL 800 - Security Appliance, User Manual

Page: 15 / 469

Address Translation.
VPN NetDefendOS supports a range of Virtual Private Network
(VPN) solutions. NetDefendOS supports IPsec, L2TP and
PPTP based VPNs concurrently, can act as either server or
client for all of the VPN types, and can provide individual
security policies for each VPN tunnel. The details for this can
be found in Chapter 9, VPN which includes a summary of
setup steps in Section 9.2, “VPN Quick Start”.
TLS Termination NetDefendOS supports TLS termination so that the D-Link
Firewall can act as the end point for connections by HTTP
web-browser clients (this feature is sometimes called SSL
termination). For detailed information, see Section 6.2.9,
“The TLS ALG”.
Anti-Virus Scanning NetDefendOS features integrated anti-virus functionality.
Traffic passing through the D-Link Firewall can be subjected
to in-depth scanning for viruses, and virus sending hosts can
be black-listed and blocked. For details of this feature,
seeSection 6.4, “Anti-Virus Scanning”.
Note
Anti-Virus scanning is only available on certain
D-Link NetDefendOS models.
Intrusion Detection and
Prevention To mitigate application-layer attacks towards vulnerabilities
in services and applications, NetDefendOS provides a
powerful Intrusion Detection and Prevention (IDP) engine.
The IDP engine is policy-based and is able to perform
high-performance scanning and detection of attacks and can
perform blocking and optional black-listing of attacking
hosts. More information about the IDP capabilities of
NetDefendOS can be found in Section 6.5, “Intrusion
Detection and Prevention”.
Note
IDP is only available on certain D-Link
NetDefendOS models.
Web Content Filtering NetDefendOS provides various mechanisms for filtering web
content that is deemed inappropriate according to your web
usage policy. Web content can be blocked based on category,
malicious objects can be removed and web sites can be
whitelisted
or blacklisted in multiple policies. More
information on filtering can be found in Section 6.3, “Web
Content Filtering”.
Note
Web Content Filtering is only available on
certain D-Link NetDefendOS models.
Traffic Management NetDefendOS provides broad traffic management capabilities
through Traffic Shaping, Threshold Rules (certain models
only) and Server Load Balancing. Traffic Shaping enables
limiting and balancing of bandwidth; Threshold Rules allow
specification of thresholds for sending alarms and/or limiting
network traffic; Server Load Balancing enables a device
running NetDefendOS to distribute network load to multiple
1.1. Features Chapter 1. NetDefendOS Overview
15