D-Link 800 - DFL 800 - Security Appliance, Руководство пользователя

Страница: 14 / 469

Chapter 1. NetDefendOS Overview
This chapter outlines the key features of NetDefendOS.
• Features, page 14
• NetDefendOS Architecture, page 17
• NetDefendOS State Engine Packet Flow, page 20
1.1. Features
D-Link NetDefendOS is the base software engine that drives and controls an advanced range of
D-Link Firewall products.
NetDefendOS as a Network Operating System
Designed as a network security operating system, NetDefendOS features high throughput
performance with high reliability plus super-granular control. In contrast to products built on
standard operating systems such as Unix or Microsoft Windows, NetDefendOS offers seamless
integration of all subsystems, in-depth administrative control of all functionality as well as a
minimal attack surface which helps negate the risk of being a target for security attacks.
NetDefendOS Objects
From the administrator's perspective the conceptual approach of NetDefendOS is to visualize
operations through a set of logical building blocks or objects, which allow the configuration of the
product in an almost limitless number of different ways. This granular control allows the
administrator to meet the requirements of the most demanding network security scenario.
Key Features
NetDefendOS is an extensive and feature-rich network operating system. The list below presents the
key features of the product:
IP Routing NetDefendOS provides a variety of options for IP routing
including static routing, dynamic routing, as well as multicast
routing capabilities. In addition, NetDefendOS supports
features such as Virtual LANs, Route Monitoring, Proxy ARP
and
Transparency. For more information, please see
Chapter 4, Routing.
Firewalling Policies NetDefendOS provides stateful inspection-based firewalling
for a wide range of protocols such as TCP, UDP and ICMP.
The administrator can define detailed firewalling policies
based on source/destination network/interface, protocol,
ports, user credentials, time-of-day and more. Section 3.5,
“The IP Rule Set”, describes how to set up these policies to
determine
what traffic is allowed or rejected by
NetDefendOS.
Address Translation For functionality as well as security reasons, NetDefendOS
supports policy-based address translation. Dynamic Address
Translation (NAT) as well as Static Address Translation
(SAT) is supported, and resolves most types of address
translation needs. This feature is covered in Chapter 7,
14