ajax-loader  Loading... Please wait...

Dlink DFL860 D-Link UTM Security Firewall 150 Mbps 1 Yr AV/IPS 3 Mnth WCF

Availability :
Sold Out
Product ID :
24 - 48 Hours

  • Nationwide Delivery
  • Buyer Protection Guarantee
  • Trusted Sellers Only
  • 7 days Return Policy
  • Customer Service
  • 03-111-476-725

Product Description


D-Link's NetDefend Unified Threat Management (UTM) firewall (DFL-860) provides a powerful security solution to protect business networks from a wide variety of threats.

The D-Link DFL-860 NetDefend™ Unified Threat Management (UTM) firewall provides a powerful security solution to protect business networks from a wide variety of threats. UTM Firewall offers a comprehensive defense against virus attacks, unauthorized intrusions, and harmful content, enhancing fundamental capabilities for managing, monitoring, and maintaining a healthy network.

Enterprise-class Firewall Security
The DFL-860 provides complete advanced security features to manage, monitor, and maintain a healthy and secure network. Network management features include: Remote Management, Bandwidth Control Policies, URL Black/White Lists, Access Policies and SNMP. For network monitoring, this firewall supports e-mail alerts, system logs, consistency checks and real-time statistics.

Unified Threat Management
For superior Layer 7 content inspection and protection, the DFL-860 provides an integrated intrusion detection and prevention system, gateway antivirus, and content filtering services. The real-time update service keeps the IPS information, antivirus signatures, and URL databases current. Combined, these enhancements help to protect the office network from application exploits, network worms, and malicious code attacks, and provide everything a business needs to safely manage employee Internet access.

Powerful VPN Performance
The DFL-860 offers an integrated VPN client and server. This allows remote offices to securely connect to a head office or a trusted partner network. Mobile users working from home or remote locations can also safely connect to the office or access company data and e-mail. The firewall DFL-860 supports IPSec, PPTP, and L2TP protocols in Client/Server mode and can handle pass-through traffic as well. Advanced VPN configuration options include: DES/3DES/AES/Twofish/Blowfish/CAST-128 encryption, Manual or IKE/ISAKMP key management, Quick/Main/Aggressive Negotiation modes, and VPN authentication support using either an external RADIUS server or a large user database.

Robust Intrusion Prevention
NetDefend UTM firewall employs component-based signatures, a unique IPS technology that recognizes and protects against all varieties of known and unknown attacks. This system can address all critical aspects of an attack or potential attack including payload, NOP sled, infection, and exploits. In terms of signature coverage, the IPS database includes attack sensor-grid and exploits collected from public sites such as the National Vulnerability Database and Bugtrax. NetDefend UTM firewall DFL-860 constantly creates and optimizes NetDefend signatures via the D-Link Auto-Signature Sensor System without overloading existing security appliances. These signatures ensure a high ratio of detection accuracy and a low ratio of false positives.

Stream-based Virus Scanning
The DFL-860 examines files of any size, using a stream-based virus scanning technology that eliminates the need to cache incoming files. The zero-cache scanning method not only increases inspection performance but also reduces network bottlenecks. NetDefend UTM firewall uses virus signatures from Kaspersky Labs to provide systems with reliable and accurate antivirus protection, as well as prompt signature updates. Consequently, viruses and malware can be effectively blocked before they reach the network's desktops or mobile devices.

Web Content Filtering
Web Content Filtering helps administrators monitor, manage, and control employee usage of and access to the Internet. The NetDefend UTM firewall implements multiple global index servers with millions of URLs and real-time website data to enhance performance capacity and maximize service availability. This firewall uses highly granular policies and explicit black/white lists to control access to certain types of websites for any combination of users, interfaces and IP networks. The firewall can actively handle Internet content by stripping potential malicious objects, such as Java Applets, JavaScripts/VBScripts, ActiveX objects, and cookies.

UTM Services
Maintaining an effective defense against various threats originating from the Internet requires that all three databases used by NetDefend UTM firewalls are kept up-to-date. In order to provide a robust defense, D-Link offers NetDefend Firewall UTM service subscriptions, which include updates for every aspect of defense: Intrusion Prevention Systems (IPS), Antivirus (AV), and Web Content Filtering (WCF). NetDefend UTM Subscriptions ensure that each of the firewalls' service databases is complete and effective.

NetDefend UTM Subscription
The standard NetDefend UTM Subscription provides your firewall with UTM service updates for two years starting from the day you activate or extend your service. The NetDefend UTM Subscription can be renewed annually to provide your firewall with the most up-to-date security service available from D-Link.


  • Multiple User-Configurable Ports: 2 Ethernet WAN Ports, 1 Ethernet DMZ Port1, 7 Ethernet LAN Ports

System Performance2

  • Firewall Throughput: 150Mbps
  • VPN Throughput: 60Mbps
  • Concurrent Sessions: 25,000
  • Policies: 1,000

Firewall System

  • Transparent Mode
  • NAT, PAT
  • Dynamic Routing Protocol: OSPF
  • H.323 NAT Traversal
  • Time-Scheduled Policies
  • Application Layer Gateway (ALG)
  • Proactive End-Point Security: ZoneDefense


  • DHCP Server/Client
  • DHCP Relay
  • Policy-Based Routing
  • IEEE 802.1q VLAN: 16
  • IP Multicast3: IGMP v3

Virtual Private Network (VPN)

  • Encryption Methods (DES/3DES/AES/Twofish/Blowfish/CAST-128)
  • Dedicated VPN Tunnels: 300
  • PPTP/L2TP Server
  • Hub and Spoke
  • IPSec NAT Traversal

Traffic Load Balancing

  • Outbound Load Balancing3
  • Server Load Balancing
  • Load Balance Algorithms: 3 Types
  • Traffic Redirect at Fail-Over

Bandwidth Management

  • Policy-Based Traffic Shaping
  • Guaranteed Bandwidth
  • Maximum Bandwidth
  • Priority Bandwidth
  • Dynamic Bandwidth Balancing

High Availability (HA)

  • WAN Fail-Over

Intrusion Detection & Prevention System (IDP/IPS)

  • Automatic Pattern Update
  • DoS, DDoS Protection
  • Attack Alarm via Email
  • Advanced IDP/IPS Subscription
  • IP Blacklist by Threshold or IDP/IPS

Content Filtering

  • HTTP Type4: URL, Keyword
  • Script Type: Java, Cookie, ActiveX, VB
  • Email Type5: Blacklist, Keyword
  • External Database Content Filtering


  • Real Time AV Scanning
  • Unlimited File Size
  • Scans VPN Tunnels
  • Supported Compression File
  • Signature Licensor: Kaspersky
  • Automatic Pattern Update

Power Input

  • External Power Adapter


  • 280 x 214 x 44 mm

Desktop Size

  • Operating Temperature 
  • Operating: 0° to 40°C
  • Storage: -20° to 70°C


  • 5% to 95% (Non-Condensing)


  • FCC Class B
  • CE Class B
  • C-Tick


  • LVD (EN60950-1)


  • 36,879 Hours


  • Limited Lifetime6

1 DMZ port is user-configurable.
 2 Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
 3 Available in future firmware upgrade.
 4 For HTTP protocol only.
 5 For SMTP protocol only.
All references to speed are for comparison purposes only. Product specifications, size and shape are subject to change without notice, and actual product appearance may differ from that depicted herein.

no image
Start the discussion …

Customer Review

Write your own product review

Product Reviews

This product hasn't received any reviews yet. Be the first to review this product!

Product is Coming Soon Or Out of Stock