D-Link DFL-2560 rev.A NetDefend UTM Firewall Firmware 11.10.01

New Features:

1. Improved fragmented packet handling
The possibility to drop fragmented SYN packets and/or SYN packets carrying payload data was added. The default settings for these options are: drop and log.

2. Improved Protection Against ZIP Bombs
The Anti-Virus subsystem has been updated to offer better protection against ZIP bomb attacks. The "Scan" Compression Ratio Action has been removed. Existing configurations will automatically be converted to use "Drop" instead. Moreover, the Compression Ratio setting can no longer be configured with values greater than 500.

3. Update New Application Control Library & GeoIP database

4. More categories added to Web Content Filtering
More categories allowing more granular control of Content Filtering in Web and email Control Profiles.

5. IPv6 support for IPsec tunnels
Support for IPv6 in IPsec tunnels has been added. This makes it possible to tunnel IPv4 packets inside an IPv6 tunnel, IPv6 in IPv4 or tunnels using IPv6 addresses only. The tunnel peer can be specified using an FQDN that resolves to an IPv4 or IPv6 address. CRL lookups can be performed against an IPv6 address.

6. Grouped FQDN Address objects
It is now possible to create and use groups of FQDN/DNS Addresses.

7. Support for Strong Password Policy
It is now possible to enforce a policy to ensure that user passwords within the local user database comply with predefined complexity rules.

8. Support for Multiple IPsec Config Mode Pools
The system now supports multiple config mode pools. Each IPsec interface can be configured to use its own pool or share pools with other interfaces. The pools can be configured to either distribute IPv4 or IPv6 addresses.

9. FQDN Address Object Support for IPsec Remote Endpoints
Host names that could resolve to multiple IPv4 and IPv6 addresses can be used as remote endpoint for IPsec tunnels. The firewall will connect to one IP only when acting as initiator (the first IP received from the DNS server), however all other resolved IPs are allowed to negotiate using this tunnel for incoming tunnel negotiations. Existing configurations using the 'dns:' keyword for FQDN names will get converted to FQDN address objects.

10. Option added to User Authentication Configuration
A new option has been added to the User Authentication Rule configuration object that makes it possible to specify in Multiple Username Logins to only allow one login per username without any exception.

11. IPsec Configuration Improvements
Many configuration options in the IPsec configuration pages in the WebUI have been modified and moved around to give a better overview of the IPsec configuration properties.

Installation Procedure:

- Save the downloadable package.
- Log into the router’s web user interface.
- Navigate to the firmware upgrade section of your wireless unit.
- Select the present firmware and configure your router to install this file.
- Wait as the device carries out this process.
- Reboot the unit if required. 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.