D-Link DFL-1660 driver and firmware
Drivers and firmware downloads for this D-Link item
Related D-Link DFL-1660 Manual Pages
Download the free PDF manual for D-Link DFL-1660 and other D-Link manuals at ManualOwl.com
Product Manual - Page 16
... Architecture, page 19 • NetDefendOS State Engine Packet Flow, page 23
1.1. Features
D-Link NetDefendOS is the base software engine that drives and controls the range of NetDefend Firewall hardware products.
NetDefendOS as a Network Security Operating System
Designed as a network security operating system, NetDefendOS features high throughput performance with high reliability plus super...
Product Manual - Page 30
... (WebUI) for management of the system via an Ethernet interface using a standard web browser. This allows the administrator to perform remote management from anywhere on a private network or the public Internet using a standard computer without having to install client software.
Assignment of a Default IP Address
For a new D-Link NetDefend firewall with factory defaults, a default internal IP...
Product Manual - Page 31
... Setup Wizard to run since this appears in a popup window.
Multi-language Support
The Web Interface login dialog offers the option to select a language other than English for the interface. Language support is provided by a set of separate resource files. These files can be downloaded from the D-Link website.
It may occasionally be the case that a NetDefendOS upgrade...
Product Manual - Page 32
...Center - Manually update or schedule updates of the intrusion detection and antivirus signatures.
• License - View license details or enter activation code.
• Backup - Make a backup of the configuration to your local computer or restore a previously downloaded backup.
• Reset - Restart the firewall or reset to factory default.
• Upgrade - Upgrade the firewall's firmware...
Product Manual - Page 37
... the serial console port on your D-Link hardware, see the D-Link Quick Start Guide .
To use the console port, you need the following equipment:
• A terminal or a computer with a serial port and the ability to emulate a terminal (such as using the Hyper Terminal software included in some Microsoft Windows™ editions). The serial console port uses the following default settings: 9600...
Product Manual - Page 44
...script on each device.
If we already have a NetDefendOS installation that already has the objects configured that need to be copied, then running the script -create command on that installation provides a way ...script -create command is one of:
COMPortDevice Ethernet EthernetDevice Device
If one of these node types is used then the error message script file empty is returned by NetDefendOS.
Commenting Script...
Product Manual - Page 45
...download files to or from the NetDefend Firewall, the secure copy (SCP) protocol can be used. SCP is based on the SSH protocol and many freely available SCP clients exist for almost all platforms. The command line examples below are based on the most common command format for SCP client software... do not show the password prompt
SCP will normally prompt for the user password after the command line ...
Product Manual - Page 46
...Firmware upgrades
Certificates SSH public keys Web auth banner files Web content filter banner files
Upload possible Yes Yes Yes Yes Yes
Download...all the object types can be displayed using the CLI command ls.
The...".
• certificate/ - The object type for all digital certificates.
• script/ - The object type for ... username is admin1 and the IP address of the NetDefend Firewall is 10.5....
Product Manual - Page 47
... that time the message Press any key to abort and load boot menu is displayed as shown below:
If any console key is pressed during these 3 seconds then NetDefendOS startup pauses and the console boot menu is displayed.
Initial Boot Menu Options without a Password Set
When NetDefendOS is started for the first time with no...
Product Manual - Page 73
... is a complete backup of both the configuration and the installed NetDefendOS software. This is useful if both the configuration is to be changed and the NetDefendOS version upgraded.
Backup files can be created both by downloading the files directly from the NetDefend Firewall using SCP (Secure Copy) or alternatively using the WebUI. It cannot be done...
Product Manual - Page 129
...
Important
Make sure the NetDefendOS date and time are set correctly when using certificates.
Certificate Revocation Lists
A Certificate...downloaded. In some cases, certificates do not contain this field. In those cases the location of the CRL has to be configured manually.
A CA usually updates... identification list is a list naming all the remote identities that are allowed access through a specific ...
Product Manual - Page 131
...are as follows: 1. Create the gateway certificate on the Windows CA server and export it to a .pfx file on the
local NetDefendOS management workstation disk. 2. Now convert the local .pfx file to a...names.
4. Start a text editor and open the downloaded .pem file and locate the line that begins:
-----BEGIN RSA PRIVATE KEY-----
5. Mark and copy into the system clipboard that line and everything under ...
Product Manual - Page 132
... system clock from the response to queries sent over the public Internet to special external servers which are known as Time Servers.
3.8.2. Setting Date and Time
Current Date and Time The administrator can set the date and time manually and this is recommended when a new NetDefendOS installation is started for the first time.
Example 3.20...
Product Manual - Page 253
... return an IP address and port to the client on which it can set up the data transfer connection.
This IP address is normally manually specified by the administrator in the FTP server software and the natural choice is to specify the external IP address of the interface on the firewall that connects to the Internet. This is...
Product Manual - Page 309
... primarily directed at attacks against servers, Anti-Virus scanning is focused on downloads by clients. NetDefendOS Anti-Virus is designed to be a complement to the standard antivirus scanning normally carried out locally by specialized software installed on client computers. IDP is not intended as a complete substitute for local scanning but rather as an extra shield to boost...
Product Manual - Page 313
... over the Internet. NetDefendOS detects this and stops the file transfer. At this point, NetDefendOS has blocked the infected file from reaching the internal network. Hence, there would be no use in blocking the remote FTP server at the local switches since NetDefendOS has already stopped the virus. Blocking the server's IP address would...
Product Manual - Page 316
... IDP option functions.
Subscribing to the D-Link Advanced IDP Service
Advanced IDP is purchased as an additional component to the base NetDefendOS license. It is a subscription service and subscribing means that the IDP signature database can be downloaded to a NetDefendOS installation and also that the database is regularly updated with the latest intrusion threats.
Figure 6.9. IDP...
Product Manual - Page 317
...Link server network which delivers the latest signature database updates. If the server's signature database has a newer version than the current local database, the new database will be downloaded, replacing the older version...a given combination source/destination interfaces/addresses as well as being associated with a service object which defines which protocols to scan. A time schedule can also ...
Product Manual - Page 422
...part of the IKE exchange. Should typically be set to ENABLE except where the remote peer does not understand CRL payloads.
Note that this setting requires a restart to take effect.
Default: ...software allow the CA administrator to issue new CRLs at any time, so even if the "next update" field says that a new CRL is available in 12 hours, there may already be a new CRL for download.
This setting...
Product Manual - Page 493
...Upgrading an HA Cluster
The NetDefendOS software versions running on the master and slave in an HA cluster should be the same. When a new NetDefendOS version becomes available and is to be installed on both units, the upgrade...the status is ALIVE.
gw-world:/> ha
This device is a HA SLAVE This device is currently INACTIVE (won't forward traffic) This device has been inactive: 2 sec HA cluster peer is...