SonicWALL TZ600
Contents
1. Product SKU Dell SonicWALL SOHO with 1 year TotalSecure 01 SSC 0651 Dell SonicWALL TZ300 with 1 year TotalSecure 01 SSC 0581 Dell SonicWALL TZ400 with 1 year TotalSecure 01 SSC 0514 Dell SonicWALL TZ500 with 1 year TotalSecure 01 SSC 0445 Dell SonicWALL TZ600 with 1 year TotalSecure 01 SSC 0219 High availability options each unit must be the same model Dell SonicWALL TZ500 High Availability 01 SSC 0439 Dell SonicWALL TZ600 High Availability 01 SSC 0220 Services SKU For Dell SonicWALL SOHO e Comprehensive Gateway Security Suite 1 year 01 SSC 0688 e Gateway Anti Virus Intrusion Prevention and Application Control 1 year 01 SSC 0670 e Content Filtering Service 1 year 01 SSC 0676 e Comprehensive Anti Spam Service 1 year 01 SSC 0682 e 24x7 Support 1 year 01 SSC 0700 For Dell SonicWALL TZ300 e Comprehensive Gateway Security Suite 1 year 01 SSC 0638 e Gateway Anti Virus Intrusion Prevention and Application Control 1 year 01 SSC 0602 e Content Filtering Service 1 year 01 SSC 0608 e Comprehensive Anti Spam Service 1 year 01 SSC 0632 e 24x7 Support 1 year 01 SSC 0620 For Dell SonicWALL TZ400 e Comprehensive Gateway Security Suite 1 year 01 SSC 0567 e Gateway Anti Virus Intrusion Prevention and Application Control 1 year 01 SSC 0534 e Content Filtering Service 1 year 01 SSC 0540 e Comprehensive Anti Spam Service 1 year 01 SSC 0561 e 24x7 Suppor2. FCC Class B ICES Class B CE EMC LVD ROHS C Tick VCCI Class B UL cUL TUV GS CB Mexico CoC by UL WEEE REACH SonicWALL SOHO FCC Class B ICES Class B CE EMC LVD RoHS C Tick VCCI Class B UL cUL TUV GS CB Mexico CoC by UL WEEE REACH SonicWALL TZ300 FCC Class B ICES Class B CE EMC LVD RoHS C Tick VCCI Class B UL cUL TUV GS CB Mexico CoC by UL WEEE REACH SonicWALL TZ400 FCC Class B ICES Class B CE EMC LVD RoHS C Tick VCCI Class B UL cUL TUV GS CB Mexico CoC by UL WEEE REACH BSMI SonicWALL TZ500 FCC Class A ICES Class A CE EMC LVD RoHS C Tick VCCI Class A UL cUL TUV GS CB Mexico CoC by UL WEEE REACH SonicWALL TZ600 Standards 802 11 a n 802 11 ac a n 802 11 ac a n 802 11 ac a n 802 11 ac a n Testing Methodologies Maximum performance based on RFC 2544 for firewall Actual performance may vary depending on network conditions and activated services Full DPI GatewayAV Anti Spyware IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools Testing done with multiple flows through multiple port pairs gt VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544 All specifications features and availability are subject to change Future use SonicWALL TZ Series ordering information
3. SPI 10 000 50 000 100 000 125 000 150 000 Maximum connections DPI 10 000 50 000 90 000 100 000 125 000 Single Sign On SSO Users 250 500 500 500 500 VLAN interfaces 25 25 50 50 50 SonicPoints supported Maximum 16 16 16 16 24 SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 Site to Site VPN Tunnels 10 10 20 25 50 IPSec VPN clients Maximum 1 5 1 10 2 25 2 25 2 25 SSL VPN licenses Maximum 1 10 1 50 2 100 2 150 2 200 Virtual assist bundled Maximum 1 30 day trial 1 30 day trial 1 30 day trial 1 30 day trial Encryption Authentication DES 3DES AES 128 192 256 bit MD5 SHA 1 Suite B Cryptography Key exchange Diffie Hellman Groups 1 2 5 14 Route based VPN RIP OSPF Certificate support Verisign Thawte Cybertrust RSA Keon Entrust and Microsoft CA for Dell SonicWALL to Dell SonicWALL VPN SCEP VPN features Dead Peer Detection DHCP Over VPN IPSec NAT Traversal Redundant VPN Gateway Route based VPN Global VPN client platforms supported Microsoft Windows Vista 32 64 bit Windows 7 32 64 bit Windows 8 0 32 64 bit Windows 8 1 32 64 bit NetExtender Microsoft Windows Vista 32 64 bit Windows 7 Windows 8 0 32 64 bit Windows 8 1 32 64 bit Mac OS X 10 4 Linux FC3 Ubuntu 7 OpenSUSE Mobile Connect Apple iOS Mac OS X Google Android Kindle Fire Windows 8 1 Embedded Soni
4. into application traffic bandwidth utilization and security threats as well as powerful troubleshooting and forensics capabilities Additionally secure single sign on SSO capabilities enhance the user experience increase productivity and reduce support calls Management of application intelligence and control is simplified by using an intuitive web based interface Global management and reporting For larger distributed enterprise deployments the optional Dell SonicWALL Global Management System GMS provides administrators a unified secure and extensible platform to manage Dell SonicWALL security appliances It enables enterprises to easily consolidate the management of security appliances reduce Internet Protected server network TZ product line Home work LAN TZ product line Q 3G analog failover o IA A A E E pE T Secure wireless zone administrative and troubleshooting complexities and governs all operational aspects of the security infrastructure including centralized policy management and enforcement real time event monitoring analytics and reporting and more GMS also meets the firewall change management requirements of enterprises through a workflow automation feature This enables enterprises to gain agility and confidence in deploying the right firewall policies at the right time and in conformance with compliance regulations GMS provides a better wa
5. prevention system IPS leverages signatures and other countermeasures to scan packet payloads for vulnerabilities and exploits covering a broad spectrum of attacks and vulnerabilities Automatic signature updates The Dell SonicWALL Threat Research Team continuously researches and deploys updates to an extensive list of IPS countermeasures that covers more than 50 attack categories The new updates take immediate effect without any reboot or service interruption required Intra zone IPS protection Bolsters internal security by segmenting the network into multiple security zones with intrusion prevention preventing threats from propagating across the zone boundaries Botnet command and control CnC detection and blocking Identifies and blocks command and control traffic originating from bots on the local network to IPs and domains that are identified as propagating malware or are known CnC points Protocol abuse anomaly Zero day protection Identifies and blocks attacks that abuse protocols in an attempt to sneak past the IPS Protects the network against zero day attacks with constant updates against the latest exploit methods and techniques that cover thousands of individual exploits Anti evasion technology Feature Threat prevention Extensive stream normalization decoding and other techniques ensure that threats do not enter the network undetected by utilizing evasion techniques in Layers 2 7 De
6. No file size limitation Cloud malware database Application control Application control Application component blocking Application bandwidth management Custom application signature creation Data leakage prevention Application reporting over NetFlow IPFIX User activity tracking SSO Comprehensive application signature database Web content filtering URL filtering Anti proxy technology Keyword blocking Bandwidth manage CFS rating categories Unified policy model with app control 55 content filtering categories Content Filtering Service Client VPN IPSec VPN for site to site connectivity SSL VPN and IPSec client remote access Redundant VPN gateway Mobile Connect for iOS and Android Route based VPN OSPF RIP Networking PortShield Layer 2 network discovery IPv6 Enhanced logging Port mirroring Layer 2 QoS Port Security Dynamic routing SonicPoint Support ACe ACi N2 NDR Ne Ni Policy based routing DHCP server Bandwidth management A P high availability with state sync Inbound outbound load balancing L2 bridge NAT mode DDNS 3G 4G WAN Fail over VoIP Granular QoS control Bandwidth management DPI for VoIP traffic H 323 gatekeeper and SIP proxy support Management and monitoring Web GUI Command line interface CLI SNMPv2 v3 Off box reporting Scrutinizer Centralized management and reporting Logging Netflow IPFix exporting App traffic visualization Centralized policy ma
7. SONICWALL TZ Series High performance network security for small and medium businesses remote branch offices and retail locations The Dell SonicWALL TZ Series of next generation firewalls NGFW is ideally Suited for any organization that requires enterprise grade network protection SonicWALL TZ Series firewalls provide broad protection from compromise by combining advanced security services consisting of on box and cloud based anti malware anti spyware intrusion prevention system IPS and content URL filtering To counter the trend of encrypted attacks the new SonicWALL TZ Series has the ability and processing power to inspect SSL connections against the latest threats providing an even higher level of security Backed by the Dell SonicWALL Global Response Intelligent Defense GRID network the SonicWALL TZ Series delivers continuous updates to maintain a strong network defense from cybercriminals With full deep packet inspection operating at performance levels that match broadband connection speeds the SonicWALL TZ Series is able to scan every byte of every packet on all ports and protocols with almost zero latency This eliminates bottlenecks and allows organizations to use security as an enabler not an inhibitor The SonicWALL TZ Series also features an integrated wireless access controller 1 Gigabit Ethernet ports and native VPN remote access clients for Apple IOS Google Android Windows Mac OS and L
8. and ever growing nature of network traffic When combined with multi core processor systems this parallel centric software architecture scales up perfectly to address the demands of deep packet inspection at high traffic loads The SonicWALL TZ Series platform relies on processors that unlike x86 are optimized for packet crypto and network processing while retaining flexibility and programmability in the field a weak point for ASICs systems This flexibility is essential when new code and behavior updates are necessary to protect against new attacks that require updated and more sophisticated detection techniques Home office IAN Corporate headquarters Branch office NSA or SuperMassive Branch office Global Software Management or virtual SST eyre Celene Branch office Branch office Security and protection The dedicated in house Dell SonicWALL Threat Research Team works on researching and developing countermeasures to deploy to the firewalls in the field for up to date protection The team leverages more than one million sensors across the globe for malware samples and for telemetry feedback on the latest threat Information which in turn is fed into the intrusion prevention anti malware and application detection capabilities Dell SonicWALL firewall customers with current subscriptions are provided continuously updated threat protection around the clock with new updates taking effect immediately wit
9. cWALL TZ500 SonicWALL TZ600 Security services Deep Packet Inspection services Content Filtering Service CFS SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 Gateway Anti Virus Anti Spyware Intrusion Prevention DPI SSL HTTP URL HTTPS IP keyword and content scanning Comprehensive filtering based on file types such as ActiveX Java Cookies for privacy allow forbid lists Enforced Client Anti Virus and Anti Spyware McAfee Comprehensive Anti Spam Service Supported Application Visualization No Yes Yes Yes Yes Application Control Yes Yes Yes Yes Yes Networking SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 IP address assignment Static DHCP PPPoE L2TP and PPTP client Internal DHCP server DHCP relay NAT modes 1 1 1 many many 1 many many flexible NAT overlapping IPs PAT transparent mode Routing protocols BGP OSPF RIPv1 v2 static routes policy based routing multicast QoS Bandwidth priority max bandwidth guaranteed bandwidth DSCP marking 802 1e WMM Authentication XAUTH RADIUS Active Directory SSO LDAP Novell internal user database Terminal Services Citrix Local user database 150 250 VoIP Full H 325vi 5 SIP Standards TCP IP UDP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RADIUS IEEE 802 3 SonicWALL TZ Series system spe
10. cification Networking SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 Certifications Certifications pending VPNC IPv6 Phase 2 Common Criteria NDPP FIPS 140 2 with Suite B Level 2 ICSA Firewall ICSA Anti virus UC APL Common Access Card CAC Supported High Availability WELEI No SonicWALL SOHO Active Standby SonicWALL TZ300 Active Standby Active Standby with stateful synchronization SonicWALL TZ400 SonicWALL TZ500 Active Standby with stateful synchronization SonicWALL TZ600 Form factor Desktop Power Supply W 24W external 24W external 24W external 36W external 60W external Maximum power consumption W 7 9 6 9 9 2 13 47 16 17 Input power 100 to 240 VAC 50 60 Hz 1A Total heat dissipation 21 8 BTU 22 5 BTU 28 6 BTU 58 7 BTU 48 3 BTU Dimensions 5 6x14 1x19cm 3 5x13 4x19cm 3 5x13 4x19cm 5 5x15x22 5cm 3 5x18x28cm Weight 0 34 Kg 0 725 Kg 0 725 Kg 0 915 Kg 1 47 Kg WEEE weight 0 8 Kg 1 145 Kg 1 148 Kg 1 338 Kg 1 893 Kg Shipping weight 1 2 Kg 1 373 Kg 1 573 Kg 1 928 Kg 2 483 Kg MTBF Years 58 9 56 1 54 40 8 18 4 Environment 40 105 F 0 40 C Humidity 5 95 non condensing Regulatory SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 Regulatory Model APL31 OB9 APL28 OB4 APL28 0B4 APL29 OB6 APL30 OB8 Major regulatory compliance Wireless controller
11. he Content Filtering Client On Features Content filtering Feature Description Granular controls Block content using the predefined categories or any combination of categories Filtering can be scheduled by time of day such as during school or business hours and applied to individual users or groups YouTube for Schools Enable teachers to choose from hundreds of thousands of free educational videos from YouTube EDU that are organized by subject and grade and align with common educational standards Web caching Feature Enforced anti virus and anti spyware URL ratings are cached locally on the Dell SonicWALL firewall so that the response time for subsequent access to frequently visited sites is only a fraction of a second Description Multi layered protection Utilize the firewall capabilities as the first layer of defense at the perimeter coupled with endpoint protection to block viruses entering network through laptops thumb drives and other unprotected systems Automated enforcement option Ensure every computer accessing the network has the most recent version of anti virus and anti spyware signatures installed and active eliminating the costs commonly associated with desktop anti virus and anti spyware management Automated deployment and installation option Machine by machine deployment and installation of anti virus and anti spyware clients is automatic across the network min
12. hout reboots or interruptions The signatures on the appliances protect against wide classes of attacks covering up to tens of thousands of individual threats with a single signature In addition to the countermeasures on the appliance all Dell SonicWALL firewalls also have access to the Dell SonicWALL CloudAV service which extends the onboard signature intelligence with more than 17 million signatures and growing This CloudAV database is accessed via a proprietary light weight protocol by the firewall to augment the inspection done on the appliance With Geo IP and botnet filtering capabilities Dell SonicWALL next generation firewalls are able to block traffic from dangerous domains or entire geographies in order to reduce the risk profile of the network Application intelligence and control Application intelligence informs administrators of application traffic traversing the network so they can schedule application controls based on business priority throttle unproductive applications and block potentially dangerous applications Real time visualization identifies traffic anomalies as they happen enabling immediate countermeasures against potential inbound or outbound attacks or performance bottlenecks Dell SonicWALL application traffic analytics provide granular insight Internet C Home office small office LAN Global Corporate Management headquarters System H i i Sales network
13. imizing administrative overhead Always on automatic virus protection Frequent anti virus and anti spyware updates are delivered transparently to all desktops and file servers to improve end user productivity and decrease security management Spyware protection Feature Firewall and networking Powerful spyware protection scans and blocks the installation of a comprehensive array of soyware programs on desktops and laptops before they transmit confidential data providing greater desktop security and performance Description Stateful packet inspection All network traffic is inspected analyzed and brought into compliance with firewall access policies DDoS DosS attack protection SYN Flood protection provides a defense against DOS attacks using both Layer 3 SYN proxy and Layer 2 SYN blacklisting technologies Additionally it provides the ability to protect against DOS DDoS through UDP ICMP flood protection and connection rate limiting Flexible deployment options IPv6 support The SonicWALL TZ Series can be deployed in traditional NAT Layer 2 Bridge Wire Mode and Network Tap modes Internet Protocol version 6 IPv6 is in its early stages to replace IPv4 With the latest SonicOS the hardware will support filtering implementations High availability Management and reporting Feature SonicWALL TZ500 and SonicWALL TZ600 models support high availability with Active Passive with state synchro
14. inux for fast secure mobile access The Dell SonicWALL Global Management System GMS enables deployment and management of SonicWALL TZ Series firewalls from a single system at the central office The products include fully tested routing features for IPv4 and IPv6 including route based VPN protocols OSPF and RIP vi v2 Authentication protocols support includes LDAP and RADIUS as well as single sign on capability that can integrate with Active Directory All Dell SonicWALL firewalls provide advanced threat protection from botnets and UDP and ICMP flooding Protection for SMB The SonicWALL TZ Series offers small and medium business SMB a broad range of security protection in an integrated solution with a wide selection of products to match speed and budget requirements Intuitive wizards simplify deployment and setup And should broadband service be interrupted connections can be retained with integrated 3G 4G support In addition many of the SonicWALL TZ Series products feature integrated wireless controller support for high speed 802 11ac SonicPoint wireless access points 1 All Dell SonicWALL TZ series firewalls support external wireless access points Integrated wireless functionality is available on our TZ 105 TZ 205 TZ 215 models High Availability is available on the SonicWALL TZ500 and the SonicWALL TZ600 Benefits Keep your network safe from sophisticated modern threats with highly effective anti ma
15. lware intrusion prevention and proven security architecture Attain a higher level of security with deep packet inspection on all traffic including encrypted SSL connections Deploy a complete WLAN security solution combining the integrated wireless controller on SonicWALL TZ appliances with Dell SonicPoint 802 11ac wireless access points Unleash the potential of your mobile workforce with highly secure SSL VPN remote access natively available for devices running Apple iOS Google Android Amazon Kindle Windows Mac OS and Linux Increase workplace productivity and reduce legal liability by filtering multiple categories of objectionable web content Drive down TCO by simplifying deployment and ongoing management with easy user friendly GUI Managed security for distributed environments Schools retail shops remote sites branch offices and distributed enterprises need a solution that integrates with their corporate firewall SonicWALL TZ Series firewalls share the same code base and same protection as our flagship SuperMassive next generation firewalls This simplifies remote site management as every administrator sees the same user interface UI In addition GMS enables remote Dell firewalls to be monitored configured and managed through a single pane of glass By adding high speed secure wireless the SonicWALL TZ Series also extends the protection perimeter to include customers and guests frequenting the retail si
16. nagement Single Sign On SSO Terminal service Citrix support Application and bandwidth visualization IPv4 and IPv6 management IPv6 IPv6 filtering 6rd rapid deployment DHCP prefix delegation BGP SonicWALL TZ Series system specification Performance overview SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 Operating system SonicOS 5 9 1 3 SonicOS 6 2 3 1 Security Processor 2x 400 MHz 2x 800 MHz 4x 800 MHz 4x 1 GHz 4x 14 GHz Memory RAM 512 MB 1 GB 1 GB 1 GB 1 GB Memory Flash 32 MB 64 MB 64 MB 64 MB 64 MB 1 GbE SFP interfaces 1 GbE Copper interfaces 5 5 7 8 10 100 MbE Copper interfaces Expansion USB USB USB USB Expansion Slot Rear USB Firewall inspection throughput 300 Mbps 750 Mbps 1 300 Mbps 1 400 Mbps 1 500 Mbps Full DPI throughput 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps Application inspection throughput 300 Mbps 900 Mbps 1 000 Mbps 1 100 Mbps IPS throughput 100 Mbps 300 Mbps 900 Mbps 1 000 Mbps 1 100 Mbps Anti malware inspection throughput2 50 Mbps 100 Mbps 300 Mbps 400 Mbps 500 Mbps IMIX throughput 60 Mbps 200 Mbps 500 Mbps 700 Mbps 900 Mbps SSL Inspection and Decryption throughput DPI SSL 15 Mbps 45 Mbps 100 Mbps 150 Mbps 200 Mbps IPSec VPN throughput 100 Mbps 300 Mbps 900 Mbps 1 000 Mbps 1 100 Mbps Connections per second 1 800 5 000 6 000 8 000 12 000 Maximum connections
17. nization Description Global Management System Dell SonicWALL GMS monitors configures and reports on multiple Dell SonicWALL appliances through a single management console with an intuitive interface to reduce management costs and complexity Powerful single device management An intuitive web based interface allows quick and convenient configuration Also a comprehensive command line interface and support for SNMPv2 3 IPFIX NetFlow application flow reporting Feature Virtual Private Networking Exports application traffic analytics and usage data through IPFIX or NetFlow protocols for real time and historical monitoring and reporting with tools such as Dell SonicWALL Scrutinizer or other tools that support IPFIX and NetFlow with extensions Description IPSec VPN for site to site connectivity High performance IPSec VPN allows the SonicWALL TZ Series to act as a VPN concentrator for thousands of other large sites branch offices or home offices SSL VPN or IPSec client remote access Utilizes clientless SSL VPN technology or an easy to manage IPSec client for easy access to email files computers intranet sites and applications from a variety of platforms Redundant VPN gateway Route based VPN Content context awareness Feature When using multiple WANs a primary and secondary VPN can be configured to allow seamless automatic failover and failback of all VPN sessions The abilit
18. nst a single proprietary memory representation of three signature databases intrusion attacks malware and applications The connection state is then advanced to represent the position of the stream relative to these databases until it encounters a state of attack or another match event at which point a pre set action is taken As malware is identified the SonicWALL firewall terminates the connection before any compromise can be achieved and properly logs the event However the engine can also be configured for inspection only or in the case of application detection to provide Layer 7 bandwidth management services for the remainder of the application stream as soon as the application Is identified Packet assembly based process Packet reassembly free process Packet Proxy Scanning disassembly Traffic in P Ha Traffic out Traffic in Traffic out mm cme a S 4 a 0 TREE a RY SEI Inspection time When proxy becomes full Inspection capacity Inspection time Inspection capacity OOOOROROCDOCOCIOIII A e DOOCCOCOCDOCOCIORII AOOCOCROCROCODIOIII UL Less More aha en Min Max Less More Min Max Reassembly free packet scanning without proxy or content size limitations Competitive architecture Dell SonicWALL architecture Extensible architecture for extreme scalability and performance The RFDPI engine is designed from the ground up with an emphasis on providing security scanning at a high performance level to match both the inherently parallel
19. s which do not send data in raw TCP and decodes payloads for malware inspection even if they do not run on standard well known ports Description Application control Control applications or individual application features that are identified by the RFDPI engine against a continuously expanding database of over 3 500 application signatures to increase network security and enhance network productivity Custom application identification Control custom applications by creating signatures based on specific parameters or patterns unique to an application in its network communications in order to gain further control over the network Application bandwidth management Granularly allocate and regulate available bandwidth for critical applications or application categories while inhibiting nonessential application traffic Granular control Content filtering Feature Control applications or specific components of an application based on schedules user groups exclusion lists and a range of actions with full SSO user identification through LDAP AD Terminal Services Citrix integration Description Inside outside content filtering Enforce acceptable use policies and block access to websites containing information or images that are objectionable or unproductive with Content Filtering Service Extend policy enforcement to block internet content for devices located outside the firewall perimeter with t
20. scription Gateway anti malware The RFDPI engine scans all inbound outbound and intra zone traffic for viruses Trojans key loggers and other malware in files of unlimited length and size across all ports and TCP streams CloudAV malware protection A continuously updated database of over 17 million threat signatures resides in the Dell SonicWALL cloud servers and is referenced to augment the capabilities of the onboard signature database providing RFDPI with extensive coverage of threats Around the clock security updates New threat updates are automatically pushed to firewalls in the field with active security services and take effect immediately without reboots or interruptions SSL decryption and inspection Decrypts and inspects SSL traffic on the fly without proxying for malware intrusions and data leakage and applies application URL and content control policies in order to protect against threats hidden in SSL encrypted traffic Included with security subscriptions for all models except SOHO Sold as a separate license on SOHO Bi directional raw TCP inspection The RFDPI engine is capable of scanning raw TCP streams on any port bi directionally preventing attacks that they to sneak by outdated security systems that focus on securing a few well known ports Extensive protocol support Feature Application intelligence and control Identifies common protocols such as HTTP S FTP SMTP SMBv1 v2 and other
21. t 1 year 01 SSC 0552 For Dell SonicWALL TZ500 e Comprehensive Gateway Security Suite 1 year 01 SSC 0488 e Gateway Anti Virus Intrusion Prevention and Application Control 1 year 01 SSC 0458 e Content Filtering Service 1 year 01 SSC 0464 e Comprehensive Anti Spam Service 1 year 01 SSC 0482 e 24x7 Support 1 year 01 SSC 0476 For Dell SonicWALL TZ600 e Comprehensive Gateway Security Suite 1 year 01 SSC 0258 e Gateway Anti Virus Intrusion Prevention and Application Control 1 year 01 SSC 0228 e Content Filtering Service 1 year 01 SSC 0234 e Comprehensive Anti Spam Service 1 year 01 SSC 0252 e 24x7 Support 1 year 01 SSC 0246 For more information Dell SonicWALL 2001 Logic Drive San Jose CA 95124 www sonicwall com T 1 408 745 9600 F 1 408 745 9500 Dell Software 5 Polaris Way Aliso Viejo CA 92656 www dell com 2015 Dell Inc ALL RIGHTS RESERVED Dell Dell Software the Dell Software logo and products as If you are located outside North America you can find local identified in this document are registered trademarks of Dell Inc in the U S A and or other countries office information on our Web site All other trademarks and registered trademarks are property of their respective owners Datasheet SonicWALL TZ Series US KS 26307
22. te or remote office For complex distributed environments Dell firewalls give you a strong security perimeter that extends from the central office to all remote locations to ensure consistent application of policies for the entire organization Series lineup The SonicWALL TZ Series offers superior performance scalability and energy efficiency Hardware specifications SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ600 Dimensions inches 1 4x5 6x7 5 1 5x5 5x7 5 1 5x5 5x7 5 1 4x5 9x8 9 1 4x7 1x11 0 Network interfaces all support 1 Gb Ethernet 5 5 7 8 10 Console 1 1 1 1 1 USB 3G 4G WAN failover 1 1 1 2 2 Expansion modle slot future use 1 SonicWALL SOHO SonicWALL TZ300 SonicWALL TZ300 SonicWALL TZ400 SonicWALL TZ400 SonicWALL TZ500 SonicWALL TZ500 SonicWALL TZ600 Reassembly Free Deep Packet Inspection RFDPI engine The RFDPI engine provides superior threat protection and application control without compromising performance This patented engine inspects the traffic stream to detect threats at Layers 3 7 The RFDPI engine takes network streams through extensive and repeated normalization and decryption in order to neutralize advanced evasion techniques that seek to confuse detection engines and sneak malicious code into the network Once a packet undergoes the necessary preprocessing including SSL decryption it is analyzed agai
23. y to manage network security by business processes and service levels that dramatically simplify the lifecycle management of your overall security environments rather than on a device by device basis Features RFDPI engine Feature Description Reassembly Free Deep Packet Inspection This high performance proprietary and patented inspection engine performs stream based bi directional traffic analysis without proxying or buffering to uncover intrusion attempts malware and identify application traffic regardless of port Bi directional inspection Scans for threats in both inbound and outbound traffic simultaneously to ensure that the network is not used to distribute malware and does not become a launch platform for attacks in case an infected machine is brought inside Single pass inspection A single pass DPI architecture simultaneously scans for malware intrusions and application identification drastically reducing DPI latency and ensuring that all threat information is correlated in a single architecture Stream based inspection Feature Intrusion prevention Proxy less and non buffering inspection technology provides ultra low latency performance for deep packet inspection of simultaneous network streams without introducing file and stream size limitations and can be applied on common protocols as well as raw TCP streams Description Countermeasure based protection Tightly integrated intrusion
24. y to perform dynamic routing over VPN links ensures continuous uptime in the event of a temporary VPN tunnel failure by seamlessly re routing traffic between endpoints through alternate routes Description User activity tracking User identification and activity are made available through seamless AD LDAP Citrix1 TerminalServices SSO integration combined with extensive information obtained through DPI GeolP country traffic identification Identifies and controls network traffic going to or coming from specific countries to either protect against attacks from known or suspected origins of threat activity or to investigate suspicious traffic originating from the network Regular expression DPI filtering Prevents data leakage by identifying and controlling content crossing the network through regular expression matching OD SonicOS feature summary Firewall Reassembly Free Deep Packet Inspection Deep packet inspection for SSL Stateful packet inspection Stealth mode Common Access Card CAC support DOS attack protection UDP ICMP SYN flood protection SSL decryption IPv6 Security Intrusion prevention Signature based scanning Automatic signature updates Bidirectional inspection engine Granular IPS rule capability GeolP and reputation based filtering Regular expression matching Anti malware Stream based malware scanning Gateway anti virus Gateway anti spyware Bi directional inspection
Download Pdf Manuals
Related Search