Specifications

B-71 SECURITY UTM Firewalls
UTM Firewalls
Model DFL-160 DFL-260 DFL-860 DFL-1660 DFL-2560 DFL-2560G
Port Interface
Ethernet WAN Port 1 1 2 -
EthernetDMZPort
(User-configurable)
1 1 1 -
Ethernet LAN Port 4 4 7 -
User-Configurable
GigabitRJ-45Port
- 6 10 6
User-Configurable
Gigabit SFP Port
- 4
USB 2.0 1 - 2 (Reserved)
DB-9 RS-232 Console 1
System
Performance
Firewall Throughput 70Mbps 80Mbps 150Mbps 1.2Gbps 2Gbps
VPN Throughput 25Mbps 25Mbps 45Mbps 350Mbps 1Gbps
IPS Throughput 15Mbps 20Mbps 40Mbps 400Mbps 600Mbps
Anti-Virus Throughput 15Mbps 10Mbps 20Mbps 225Mbps 450Mbps
Concurrent Sessions 6,000 10,000** 20,000** 600,000 1,500,000
New Sessions
(per second)
5,000 2,000 4,000 15,000 20,000
Policies 300 500 1,000 4,000 6,000
Firewall System
Transparent Mode; Network Address Translation (NAT), Port Address Translation (PAT);
DynamicRoutingProtocol:OpenShortestPathFirst(OSPF)(NotapplicableonDFL-160/260);
H.323NATTraversal(NotapplicableonDFL-160);Time-ScheduledPolicies;ApplicationLayerGateway(ALG);
ProactiveNetworkSecurity:ZoneDefense(NotapplicableonDFL-160/210)
Networking DHCPServer/Client;DHCPRelay;Policy-basedRouting;IPMulticast:IGMPv3
Virtual LAN (VLAN) - 8 16 1,024 2,048
Virtual Private Network (VPN)
Encryption Methods: DES/3DES/AES/Twofish/Browfish/CAST-128; IPSec NAT Traversal;
Dedicated VPN Tunnels: 30 (DFL-160), 100 (DFL-260), 200** (DFL-860),
2,500 (DFL-1660), 5,000 (DFL-2560/2560G);
Point-to-Point Tunneling Protocol (PPTP) / Layer 2 Tunneling Protocol (L2TP) Server;
HubandSpoke(NotapplicableonDFL-160)
Traffic Load Balancing
(Not applicable on DFL-160)
OutboundLoadBalancing;ServerLoadBalancing(NotapplicableforDFL-260);TrafcRedirectatFail-Over;
OutboundLoadBalanceAlgorithms:Round-Robin,Weight-basedRound-Robin,Destination-based,Spill-over
Bandwidth Management
(Not applicable on DFL-160)
Policy-basedTrafcShaping;GuaranteedBandwidth;MaximumBandwidth;
Priority Bandwidth; Dynamic Bandwidth Balancing
HighAvailability(HA)
(Not applicable on DFL-160)
WANFail-Over(DFL-210:WhenDMZPortisConguredasWANPort);
Active/Passive Modes (Not applicable on DFL-260/860);
Device Failure Detection (Not applicable on DFL-260/860);
Link Failure Detection (Not applicable on DFL-260/860);
Firmware / Virtual Private Network (VPN) Session Synchronization (Not applicable on DFL-260/860)
IntrusionDetection&Prevention
System (IDP/IPS)
Automatic Pattern Update; Denial of Service (DoS), Distributed DoS (DDoS) Update;
Attack Alarm via Email; Advanced IDP/IPS Subscription;
IP Blacklist by Threshold or IPS/IDP (Not applicable on DFL-160/210)
Content Filtering
HTTPType:URLBlacklist/Whitelist;ScriptType:Java,Cookie,ActiveX,VB(NotapplicableonDFL-160);
EmailType:EmailBlacklist/Whitelist(NotapplicableonDFL-160);ExternalDatabaseContentFiltering
Anti-Virus
Real Time AV Scanning; Unlimited File Size; Scans VPN Tunnels; Support Compressed Files;
Signature Licensor: Kaspersky; Automatic Pattern Update
Physical&
Environmental
Dimension(WxDxH)
Desktop;
220x150x32.5mm
Desktop;
235x162x36mm
11-inch Desktop;
1UHeight;
280x214x44mm
19-inch Rack-Mount;
1UHeight;
440x400x44mm
Power Input ExternalPowerAdapter 80 PLUS Internal Universal Power Supply
OperatingTemperature 0to40°C
Storage Temperature -20to70°C
OperatingHumidity 5% to 95% Non-Condensing
Mean Time Before
Failure (MTBF)
119,642hours 186,614hours 140,532hours 400,000hours 310,000 hours
Certification
EMI-EMC Compliance
FCC Class B;
CE Class B,
VCCI; C-Tick
FCC Class A; CE Class A; VCCI; C-Tick
Safety Compliance
UL/cUL; UL;
LVD (EN60950-1) cUL; CB
LVD (EN60950-1) LVD(EN60950-1)
** Available in Firmware 2.26.00 and above; Performance based on Firmware 2.26.00 and above
B-75