CPU: Dual Core X86 based 2.80GHz Processor
Memoria Sistema: 2GB
Compact Flash Card: 512MB
DRAM: 512MB
Acelerador de VPN
Modulo LCM: 20X2 caracteres con teclado.

10 Puertos GE configurables (10x100x1000Base-T)
Compatible con los siguientes estándares:
- IEEE802.3,
- IEEE802.3u
- IEEE802.3ab
- IEEE802.3x Flow Control
Consola: 1 x conector DB9, RS-232
02 Puertos USB 2.0 (uso reservado para el futuro)

Firewall Plaintext Throughput: 2Gbps
3DES/AES Throughput: 1Gbps
IPS (Intrusion Prevention) Throughput: 600Mbps
Anti-Virus Throughput: 450Mbps
Sesiones Concurrentes: 1,500,000
New Session/second: 20,000
Políticas: 6,000
Dedicated VPN Tunnels: up to 5,000 (Shared with IPSec, PPTP and L2TP)
Usuarios Soportados: Sin restricción

Certificado de ICSA Labs (firewall a nivel corporativo)
Layer 3: Route, NAT
Layer 2: Modo Transparente
Network Address Translation (NAT)
Port Address Translation (PAT)
Policy-base NAT
Port Forwarding
Configuración de políticas programables en el tiempo

Host/Network Based Abnormal and Malicious Traffic Detection and Prevention:
-Triggered by Network Threshold Detection
-Triggered by IPS/IDP Signature Detection
-Triggered by Anti-Virus Signature Detection
-Concurrent Connections/Sessions Control by Host/Network Based
Modelos de Switch D-Link Soportados:
DES-3226S
DES-3250TG
DES-3326S
DES-3350SR
DES-3500 series
DES-3800 series
DGS-3200 series
DGS/DXS-3300 series
DGS-3400 series
DGS-3600 series
DHS-3618/3626

Certificado de ICSA Labs (VPN IPSec versión 1.2 mejorada)
Protocolo IPSec: ESP
Modo IPSec: Túnel, Transporte
Método Encriptación: - -DES/3DES/AES/Twofish/Blowfish/CAST-128/NULL
Algoritmo de autenticación: MD5, SHA-1
Grupo PFS: Perfect Forward Secrecy (DH Group): Group 1, 2, 5
Soporta Servidor VPN: PPTP/L2TP/IPSec
Servidor PPTP soporta encriptación MPPE
Soporta múltiples clientes PPTP/L2TP detrás de Router NAT
Stateful MPPE – PPTP
VPN Sitio a Sitio, Acceso remoto VPN para IPSec
Túneles VPN Dedicados: hasta 2500
Modo IKE: Main, Aggressive
Peer Authentication: Built-in database, IP, DNS, E-Mail, X.500 Distinguished Name
PKI Certificate Request: PKCS#7, PKCS#10
Administración de Llaves Pre-share key, X.509 v3
IPSec NAT Traversal (NAT-T)
VPN Policy Selection Through: Firewall IP Rule Set / Routing / Policy-Base Routing
Deed Peer Detection (DPD)
VPN Tunnel Keep Alive
Prevención contra repetición de ataques (Replay Attack)
Redundant VPN Gateway
Soporta VPN Hub and Spoke
IPSec IKE Config Mode

Dirección IP estática
Entradas ARP estático
PPPoE para xDSL, cliente PPTP para xDSL y cliente DHCP para interfaz WAN
BigPond Cable, Telia compliance
Soporta Múltiples Túneles PPPoE
Soporta Unnumbered PPPoE
DHCP Server interno:
-Multiple DHCP Server Instances
-Custom DHCP options
DHCP Relay:
-Multiple DHCP Relay Instances
-Support Full DHCP Relay and BOOTP Forwarding
DHCP sobre IPSec
Static DHCP Addresses Assignment
IP NAT Pool
IP Alias
Static Routes
OSPF v2 Dynamic Routing Protocol
RFC 2328 and RFC 1583 Compliance
OSPF over IPSec
Multiple OSPF routing processes
Policy-Base Routing
BPDU Relay, Support BPDU spanning protocols:
Spanning Tree Protocol (STP)
Rapid Spanning Tree Protocol (RSTP)
Multiple Spanning Tree Protocol (MSTP)
Cisco PVST+ Protocol

Soporta Múltiples enlaces WAN
Soporta IEEE 802.1q VLAN: hasta 1024 VLANs
Policy-Base 802.1q VLAN
Interfaz IP: 1024
IP Multicast: IGMP v3 (RFC3376):
-Routing methods support Proxy mode and Snoop mode
-Compatible with v1 and v2 (RFC2236)
Cliente DDNS: D-Link DDNS, DynDNS.org, TZO.com, dhs.org, Peanut Hull (oray.net)
H323 NAT Traversal
Support ALG (Application Layer Gateway):
HTTP, FTP, H.323, POP3, SMTP, SIP, TFTP, TLS 1.0 (RFC 2246)
MPLS Passthrough

H.323 ALG:
-H.323 NAT Traversal
-Support Gatekeeper
-Support Application Sharing (T.120)
-Support Version: H.323 v5, H.225.0 v5 and H.245 v10
SIP ALG:
-SIP NAT Traversal for Client and Proxy
-TCP/UDP based media channels
-SIP/SDP protocol validation
-Media Bypass
-SIP Security with state tracking
-TCP based SIP Transport
-SIP Compliant Standard:
RFC2327: SDP (Session Description Protocol)
RFC2543: Session Initiation Protocol
RFC3261: SIP (Session Initiation Protocol)
RFC3264: An Offer/Answer Model with SDP
RFC3581: An Extension to SIP for Symmetric Response Routing
RFC4145: TCP-based Media Transport in SDP
RFC4961: Symmetric RTP/RTP Control Protocol (RTCP)

Asistente de instalación
Console Interface
Web UI interface
Command Line Interface (CLI)
Secure Command Shell (SSH)
SNTP y UDP sincronización de la hora.
Soporta servidor D-Link NTP

Múltiples Administradores
Multi-Level Control de permisos para usuario (Administrador y Solo Lectura)
Actualización de software, Configuración Backup/Restore y System Backup/Restaurar:
Web UI
SCP
Trust host para la administración remota
Multi-language Web GUI via upload specific language file. Language supports:
-Japanese
- Russian
- Simplified Chinese
-Traditional Chinese

Base de datos de usuario integrado: 5000
Base de datos de usuarios externos:
-RADIUS, Microsoft IAS, LDAP (LDAP es soportado con Microsoft Active
-Microsoft IAS
Microsoft Active Directory and Novell eDirectory, (support LDAP v3 and LDAP Referrals, RFC4510-4519 complaint).
Run-Time Web-based authentication with internal and external user database
Customize Web Authentication Page
RADIUS Accounting for External Accounting Server
Autenticación de Usuarios basada en Grupo
Soporta múltiples servidores de autenticación al mismo tiempo (máximo 3 servidores)
Xauth (Extended Authentication) para la autenticación IPSec

Capacidad de logs interno: 1600 registros
Visor de Logs
Notificación por Email
Soporta Servidor de Log Externo: Servidor Syslog
Soporta 08 receptores de log
Monitoreo en tiempo real de rendimiento
Log de Eventos y Alarmas
Sorting/Filtering/Search log messages
Soporta SNMP v1, v2c
SNMP Trap
SNMP Standard MIB-II and Custom MIB
Monitoreo de túnel VPN
PCAP Recording (for command line only)

Ancho de banda garantizado
Máximo ancho de banda
Priority-Bandwidth utilization
Traffic shaping basado en políticas
Traffic shaping programado con tiempo
Gestión de tráfico en el túnel VPN
Balanceo de carga Dinámica
Servicios diferenciados (DiffServ)
IP based connection limit
Aplicaciones IM/P2P Traffic Shaping (IDP Traffic Shaping):
-It supports to apply to specific source IP addresses or network subnet.
-It supports the “New Connections Throttling” feature; the triggered host will stop after a configured amount of time.

WAN Failover (Interface Failover)
Route Failover with ICMP MonitoringActivo-Pasivo modo HA
Host Monitor for Route Monitoring
Active-Passive HA mode
Device Failure detection
Dead Link Detection/Interface Detection
Configuration synchronization
Firewall/VPN session synchronization
Average failover time: < 800ms
Network notification on failover

Support advanced IPS/IDP update service with 17,000+ signature databases.
NIDS pattern auto update
DoS, DDoS attack protection
Detect Nimda, CodeRed attack
IP black-listing: It will be triggered by network threshold or IPS/IDP signature database.
Attack alarm via email notification
Support Asynchronous Mode for better performance when multiple sessions scanning.
ZoneDefense Feature triggered by IPS/IDP Signature Database.

Support Kaspersky Anti-Virus with 12,000+ signature databases
Support protocol: HTTP, FTP, SMTP, POP3, IMAP*.
Anti-Virus pattern auto update
Anti-Virus scanning over VPN
Scanning of all MIME types
Support compression file formats: ZIP, GZIP, RAR*
Support Stream-based technology without file size scanning limitation
Support Asynchronous Mode for better performance when multiple sessions scanning.
ZoneDefense Feature triggered by Anti-Virus Signature Database.

HTTP Type: Web URL filter. (Only for HTTP protocol, it doesn’t support HTTPS protocol)
Scripts Type: Java Applet, Java Scripts, VB Scripts, Cookies, Active X.
Web content categories: 32 Categories
Customize Forbidden Web Page
Maximum file size protection
Request URL reclassification
Allow User Override
Local database URL Cache

Outbound traffic load balancing
Algorithm for server load balancing feature:
-Round Robin
-Destination
-Spillover
-Server load balancing
Algorithm for server load balancing feature:
-Round Robin
-Connection Rate
-IP Address/Network Stickiness
Host Monitoring for Server Load Balancing
Traffic redirect when any WAN connection failover

Protocolos soportados: SMTP y POP3
Filtro del Email remitente/destinatario y Lista Negra/exentas (para el protocolo SMTP solamente)
Comprobación del encabezado MIME para filtrar extensiones de de archivos.
Email rate protection (para el protocolo SMTP solamente)
Protección de tamaño del correo electrónico (para el protocolo SMTP solamente)
Anti-Spam (para el protocolo SMTP solamente)
-Real-Time DNSBL/Open Relay Database Server
-Weight-based DNS blacklist
-Customize spam tag information in email subject
-Forward blocked emails

Signature List: (Based on Advanced IPS Signature Database)
Aimini
AOL Instant Messenger
Ares P2P
BitTorrent
Direct Connect
Emule
Gnutella
Google Talk
IRC
KaZaA
MSN Messenger
WinMX
Yahoo! Messenger

Input AC range 100 ~ 240V 50/60Hz.
Fuente de alimentación universal 

Por Dispositivo:
-Power
-System
Phone Jack 10/100/1000 Mbps Port:
-TX/RX Status (Right side)
-Link Speed (Left side)

310.000 Hrs

440mm x 400mm x 44mm
19’’ Standard Rack-Mount

6.82 Kg

FCC Class A
CE Class A
C-Tick
VCCI