D-Link NetDefend DFL-800 User manual

Building Networks for People
NetDefend Intrusion Prevention System
(IPS) Subscription
D-Link’s IPS service adopts a unique technology – component-based signatures, which are built to recognize and protect
against all varieties of known and unknown attacks, and which address all critical aspects of an attack or potential attack
including payload, NOP sled, infection, and exploits.
In terms of signature coverage, the IPS database includes attack information and data from a global attack sensor-grid and
exploits collected from public sites such as the National Vulnerability Database and Bugtrax.
D-Link is committed to deliver high quality IPS signatures by constantly creating and optimizing NetDefend signatures via
the D-Link Auto-Signature Sensor System. Without overloading existing security appliances, D-Link IPS signatures ensure
a high ratio of detection accuracy and the lowest ratio of false positives.
My D-Link
My D-Link provides a registration and management
platform for all D-Link customers. D-Link customers
need to register their firewall to receive IPS update
service from the NetDefend Center’s My D-Link.
The current status of all registered products will be
presented, including Model Names, MAC addresses,
Serial Numbers, Registration dates, and IPS Service
Expiration dates. Customers can easily maintain all
firewalls registered under My D-Link.
NetDefend Live
The NetDefend Center includes a ‘NetDefend Live’
service for our customers. NetDefend Live is a platform
for providing information about potential security
breaches and associated advisories. When D-Link
Security Center discovers new exploits and releases new signatures, associated security advisories will be simultaneously
updated. This update frequency is provided on a 7x24x365 basis. The main purpose of NetDefend Live is to help our
customers know more about new signatures and vulnerabilities. MIS departments can use NetDefend Live as reference to
uproot threats and patch vulnerabilities within the enterprise before they are exploited. With NetDefend firewalls as the
first line of defense and NetDefend Live as the second, D-Link helps customers to counteract emerging network threats
promptly, before they have an impact on business.

Building Networks for People
Features and Benefits
• Focus on Attack Payload, not Attackers or IP Addresses
The IPS scan engine is an in-depth inspection of data from Layer 2 to Layer 7 protecting against both false positives and
false negatives and preventing various types of network-based threats with a high degree of accuracy.
• IM and P2P Management
D-Link’s IPS service provides signatures to manage
Instant Messaging (IM) and Peer-to-Peer (P2P)
applications, so that you control what IM and P2P
applications are blocked or allowed in your network.
• Zero Day Attack Protection
IPS captures variations of attacks and stealthy
malicious traffic to prevent outbreaks of these threats
without creating unnecessary new signatures while
still protecting against Zero-Day attacks.
• Continuous Automatic Signature Updates
All IPS signatures are continuously updated
automatically and made available through D-Link
update servers worldwide. The service keeps your IPS signature database as current as possible at the outside of new
threats.
• Comprehensive IPS Signature Database
Protect the system against network attacks using over 1,800 signatures as well as protocol anomaly inspection.
• Complete IPS Signature Advisory
Complete IPS logs with vulnerability ID numbers, severity levels, attack descriptions, and recovery solutions enable MIS
personnel to know about and respond quickly to network attacks.