D-Link DFL-860 – NetDefend UTM Firewall with Dual WAN, DMZ, 7 LAN Ports, IPS / Antivirus / Web Content Filtering, 150Mbps Firewall Throughput, VPN & ZoneDefense Support
Overview:
• The D-Link DFL-860 is a NetDefend Unified Threat Management Firewall designed to protect small and mid-sized business networks from viruses, intrusions, malicious content, and unauthorized access.
• It integrates firewall, VPN, NAT, Intrusion Prevention System IPS, Anti-Virus AV, Web Content Filtering WCF, traffic load balancing, bandwidth management, and ZoneDefense endpoint protection in one compact desktop appliance.
• The DFL-860 provides 2 × Ethernet WAN ports, 1 × Ethernet DMZ port, and 7 × Ethernet LAN ports for small business gateway, server separation, and branch office deployments.
• It delivers firewall throughput up to 150Mbps, VPN throughput up to 60Mbps, supports up to 25,000 concurrent sessions, and supports up to 1,000 policies.
• The firewall supports IPSec, PPTP, L2TP, Hub and Spoke VPN, IPSec NAT Traversal, DES / 3DES / AES / Twofish / Blowfish / CAST-128 encryption, and hardware-based VPN acceleration.
• The DFL-860 is suitable for legacy D-Link NetDefend firewall environments that need UTM protection, VPN connectivity, WAN load balancing, content filtering, and business-grade security management.
Key Features:
• NetDefend UTM Firewall.
• Designed for small and mid-sized business networks.
• 2 × Ethernet WAN ports.
• 1 × Ethernet DMZ port.
• 7 × Ethernet LAN ports.
• Firewall throughput up to 150Mbps.
• VPN throughput up to 60Mbps.
• Supports up to 25,000 concurrent sessions.
• Supports up to 1,000 policies.
• Integrated firewall and VPN appliance.
• Stateful Packet Inspection SPI.
• Intrusion Prevention System IPS.
• Anti-Virus AV protection.
• Web Content Filtering WCF.
• Optional NetDefend UTM service subscriptions.
• Hardware-based UTM acceleration.
• Hardware-based VPN acceleration.
• Supports IPSec, PPTP, and L2TP VPN.
• Supports VPN Hub and Spoke.
• Supports IPSec NAT Traversal.
• Supports DES, 3DES, AES, Twofish, Blowfish, and CAST-128 encryption.
• Supports NAT and PAT.
• Supports transparent mode.
• Supports OSPF dynamic routing.
• Supports policy-based routing.
• Supports server load balancing.
• Supports outbound load balancing.
• Supports traffic redirect at failover.
• Supports WAN failover.
• Supports bandwidth management and dynamic bandwidth balancing.
• Supports URL and keyword filtering.
• Supports Java, Cookie, ActiveX, and VB script filtering.
• Supports email blacklist and keyword filtering.
• Supports Kaspersky antivirus signatures.
• Supports D-Link ZoneDefense endpoint protection.
Technical Specifications:
• Product Type: UTM Firewall
• Brand: D-Link
• Model: DFL-860
• Series: NetDefend UTM Firewall Series
• Ethernet Interfaces: 2 × Ethernet WAN Ports, 1 × Ethernet DMZ Port, 7 × Ethernet LAN Ports
• Firewall Throughput: 150Mbps
• VPN Throughput: 60Mbps
• Concurrent Sessions: 25,000
• Policies: 1,000
• Firewall Features: Transparent Mode, NAT, PAT, Stateful Packet Inspection, Time-Scheduled Policies, Application Layer Gateway
• Dynamic Routing: OSPF
• Proactive Network Security: ZoneDefense
• Networking: DHCP Server / Client, DHCP Relay, Policy-Based Routing, IEEE 802.1Q VLAN, IGMP v3
• VLAN Support: 16 VLANs
• VPN Tunnels: 300 Dedicated VPN Tunnels
• VPN Protocols: IPSec, PPTP, L2TP
• VPN Features: PPTP / L2TP Server, Hub and Spoke, IPSec NAT Traversal
• VPN Encryption: DES, 3DES, AES, Twofish, Blowfish, CAST-128
• Traffic Load Balancing: Outbound Load Balancing, Server Load Balancing, Traffic Redirect at Failover
• Load Balance Algorithms: 3 Types
• Bandwidth Management: Policy-Based Traffic Shaping, Guaranteed Bandwidth, Maximum Bandwidth, Priority Bandwidth, Dynamic Bandwidth Balancing
• High Availability: WAN Failover
• IPS / IDP: Automatic Pattern Update, DoS / DDoS Protection, Attack Alarm via Email, Advanced IDP / IPS Subscription, IP Blacklist by Threshold or IDP / IPS
• Content Filtering: URL / Keyword Filtering, Java / Cookie / ActiveX / VB Script Filtering, Email Blacklist / Keyword Filtering, External Database Content Filtering
• Antivirus: Real-Time AV Scanning, Unlimited File Size, Scans VPN Tunnels, Supported Compressed File, Kaspersky Signature Licensor, Automatic Pattern Update
• Power Input: External Power Adapter
• Dimensions: 280 × 214 × 44 mm
• Form Factor: Desktop Size
• Operating Temperature: 0°C to 40°C
• Storage Temperature: -20°C to 70°C
• Operating Humidity: 5% to 95%, Non-Condensing
• EMI: FCC Class B, CE Class B, C-Tick
• Safety: LVD EN60950-1
• MTBF: 36,879 Hours
Applications:
• Small business network perimeter security.
• Branch office firewall deployment.
• Secure VPN connectivity between head office and branches.
• Remote user VPN access.
• DMZ deployment for web, mail, or FTP servers.
• Employee internet access control.
• Web content filtering and URL / keyword control.
• Antivirus and intrusion prevention at the gateway.
• WAN failover and outbound load balancing.
• Server load balancing and traffic management.
• VLAN-based department segmentation.
• Legacy D-Link NetDefend firewall replacement or support projects.
Connect Gates Recommendation:
• Recommended for legacy D-Link NetDefend environments where DFL-860 compatibility, replacement, or support is required.
• Suitable for small and mid-sized business networks that need firewall, VPN, IPS, antivirus, web filtering, dual WAN, DMZ, server load balancing, and bandwidth management.
• Best used when the client needs 2 WAN ports, DMZ, 7 LAN ports, 150Mbps firewall throughput, 60Mbps VPN performance, 300 VPN tunnels, and ZoneDefense support.
• For new firewall projects, Connect Gates recommends using newer firewall or security gateway solutions with active subscriptions, higher throughput, updated firmware support, and modern threat protection.
Documents