The D-Link DFL-300 Office Firewall is a hardware-based firewall designed for the small office environment. The DFL-300 Office Firewall provides an economical solution for providing small offices with dependable firewall protection against malicious attacks from hackers on the Internet. The DFL-300 provides a web-based interface for easy setup and configuration but is also designed with more advanced security features than typically found in residential gateways. The DFL-300 defends networks against damaging Denial of Service (DoS) attacks and offers network reliability through Stateful Packet Inspection (SPI). It can detect hacker attacks and disallow intruding packets from entering the office network.

Additionally, the DFL-300 is equipped with embedded VPN support that can create multiple IPSec tunnels to remote offices. IPSec on the DFL-300 uses strong encryption with DES, 3DES, and Automated Key Management via IKE/ISAKMP. A VPN tunnel can be activated from the DFL-300 to a remote office for a secured traffic flow between the two locations for mobile users using triple DES Encryption. This offers users a way to confidentially access and transfer sensitive information. Multiple VPN tunnels may be easily created without the need to setup IKE (Internet Key Exchange) policies.

The DFL-300 can support an unlimited number of network clients without the cost of additional licensing fees for the clients. URL blocking is part of the basic feature offered by DFL-300 and provides the benefit of limiting access to undesirable Internet sites. Logs of real-time Internet traffic, alarms of Internet attacks, and notice of web-browsing activities are logged and can be reported through e-mail notification.

The DFL-300 is a cost-effective firewall solution for small and medium-sized businesses because it features SPI (Stateful Packet Inspection), Detect/Drop intruding packets (DoS and Hacker attacks), embedded VPN, DMZ port, multiple-mapped IPs, multiple virtual servers, and server load balancing, typically found on more expensive firewalls.

The DFL-300 includes with three auto-sensing 10Base-T, 100Base-TX, RJ-45 ports. The Internal LAN port connects to the office network and the External WAN port connects to a broadband modem such as Cable or DSL. The DFL-300 Office Firewall also offers a DMZ (Demilitarized Zone) port which allows DMZ computers to be accessed from the Internet. This particular feature is useful because it alleviates congested server traffic from entering the Internal network. Web, Mail, and FTP Servers can take advantage of the DMZ port.

The web-based management offered by the DFL-300 provides an easy-to-use interface and is password-protected but still easily accessible through any Internet browser. Thus, incoming and outgoing policies for firewall traffic, as well as, setup configuration are easily accomplished through the web-based interface.

The DFL-300 Office Firewall detects SYN, Ping of Death, Spoof, Tear Drop, ICMP Flood, UDP Flood, and other attacks against the local network and can be set up to log and send the attack report notification to a specified e-mail address. The DFL-300 can be configured to log all these attacks, locate the source IP address generating the attack, and establish the policy to restrict incoming traffic from that specific IP address source.