SonicWALL NSA 6600
Contents
1. Firewall throughput 9 0 Gbps Firewall throughput 12 0 Gbps IPS throughput 5 0 Gbps IPS throughput 4 5 Gbps Anti malware throughput 1 7 Gbps Anti malware throughput 5 0 Gbps Full DPI throughput 1 6 Gbps Full DPI throughput 3 0 Gbps IMIX throughput 2 4 Gbps IMIX throughput 5 5 Gbps Maximum DPI connections 500 000 Maximum DPI connections 500 000 New connections sec 60 000 sec New connections sec 90 000 sec Description SKU Description SKU NSA 5600 firewall only 01 SSC 3830 NSA 6600 firewall only 01 SSC 3820 NSA 5600 TotalSecure 1 year 01 SSC 3833 NSA 6600 TotalSecure 1 year 01 SSC 3823 Comprehensive Gateway Security Suite 1 year 01 SSC 4234 Comprehensive Gateway Security Suite 1 year 01 SSC 4210 Gateway Anti Malware IPS 1 year 01 SSC 4240 Gateway Anti Malware IPS 1 year 01 SSC 4216 Gold Support 24x7 1 year 01 SSC 4284 Gold Support 24x7 1 year 01 SSC 4278 Achieve deeper network security Dell SonicWALL NSA Series firewalls are capable of providing organizations of any size with a deeper level of network security because they are designed using a scalable multi core hardware architecture and a patented single pass low latency Reassembly Free Deep Packet Inspection RFDPI engine that can scan every byte of every packet while maintaining high performance The Dell SonicWALL NSA Series goes deeper than other firewalls with an RFDPI engine that co2. SIP Standards TCP IP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RADIUS IEEE 802 3 Certifications VPNC ICSA Firwall ICSA Anti Virus Certifications pending FIPS 140 2 Common Criteria EAL1 Common Access Card CAC Pending Hardware NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600 Power supply 200W Single Fixed 250W Fans Dual Fixed Dual redundant hot swappable Input power 100 240 VAC 60 50 Hz Maximum power consumption W 49 4 74 3 86 7 90 9 1153 1 Form factor 1U Rack Mountable Dimensions 1 75 x 10 25 x 17 in 1 75 x 19 1 x 17 in 4 5 x 26 x 43 cm 4 5 x 48 5 x 43 cm Weight 10 1 lb 4 6 kg 13 56 lb 16 15 Ko 14 93 lb 6 77 Kg WEEE weight 11 0 lb 5 0 kg 14 24 lb 6 46 Kg 19 78 lb 8 97 Kg Shipping weight 14 3 lb 6 5 kg 20 79 b 9 43 Kg 26 12 lb 11 85 Kg Major regulatory FCC Class A CE EMC LVD RoHS C Tick VCCI Class A MSIP KCC Class A UL cUL TUV GS CB Mexico CoC by UL WEEE REACH ANATEL BSMI CU Environment 52 105 F 0 40 deg C Humidity 10 90 non condensing MTBF Years 20 2 16 8 16 0 15 4 13 5 1 Testing Methodologies Maximum performance based on RFC 2544 for firewall Actual performance may vary depending on network conditions and activated services Full DPI GatewayAV Anti Spyware IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools Testing done with multiple flows through multiple port pairs VPN throughput measu
3. Full DPI throughput 110 Mbps 130 Mbps Application inspection throughput 195 Mbps 250 Mbps IPS throughput 195 Mbps 250 Mbps Anti malware inspection throughput 115 Mbps 140 Mbps IMIX throughput 180 Mbps 210 Mbps VPN throughput 150 Mbps 200 Mbps Connections per second 2 200 sec 3 000 sec Maximum connections SPI 85 000 110 000 Maximum connections DPI 32 000 64 000 SonicPoints supported Maximum 16 16 Single Sign On SSO Users 250 250 Site to site tunnels 25 50 IPSec VPN clients Maximum 2 25 2 25 SSL VPN licenses Maximum 2 15 2 15 Encryption Authentication DES 3DES AES 128 192 256 bit MD5 SHA 1 Key exchange Diffie Hellman Groups 1 2 5 14 Route based VPN RIP OSPF IP IP address assignment Static DHCP PPPoE L2TP and PPTP client Internal DHCP server DHCP Relay NAT modes 1 1 many 1 1 many flexible NAT overlapping IPS PAT transparent mode VLAN interfaces Zo 35 Routing protocols BGP OSPF RIPv1 v2 static routes policy based routing multicast QoS Bandwidth priority max bandwidth guaranteed bandwidth DSCP marking 802 1p Authentication XAUTH RADIUS Active Directory SSO LDAP Novell internal user database Terminal Services Citrix VoIP Full H323 v1 5 SIP Standards TCP IP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RADIUS IEEE 802 3 Certifications VPNC ICSA Firwall ICSA Anti Virus Certifications pending FIPS 140 2 Common Criteria EAL1 Common Access Card CAC Supported
4. New connections sec 64 000 sec Description NSA 250M and 250M W NSA 250M firewall only 01 SSC 9755 NSA 250M Wireless N firewall only 01 SSC 9757 NSA 250M TotalSecure 1 year 01 SSC 9747 NSA 250M Wireless N TotalSecure 1 year 01 SSC 9748 Comprehensive Gateway Security Suite 01 SSC 4606 1 year Gateway Anti Malware IPS 1 year 01 SSC 4570 Dynamic Support Support 24x7 1 year 01 SSC 4588 Network Security Appliance 2600 Dual 8 x 1GbE USB ports ports Console 1GbE management Dual fans Expansion module Power Network Security Appliance 3600 4600 Dual 2 x 10GbE USB ports SFP ports Console 1GbE 4 x 1GbE management SFP ports Expansion bay for future use Dual fans 12 x IGbE ports The Dell SonicWALL NSA 2600 is designed to address the needs of growing small organizations branch offices and school campuses Firewall NSA 2600 Firewall throughput 1 9 Gbps IPS throughput 700 Mbps Anti malware throughput 400 Mbps Full DPI throughput 300 Mbps IMIX throughput 600 Mbps Maximum DPI connections 125 000 New connections sec 15 000 sec Description SKU NSA 2600 firewall only O1 SSC 3860 NSA 2600 TotalSecure 1 year 01 SSC 3863 Comprehensive Gateway Security Suite 1 year 01 SSC 4453 Gateway Anti Malware IPS 1 year 01 SSC 4459 Silver Support 24x7 1 year 01 SSC 4314 WN The Dell SonicWALL NSA 3600 4600 is idea
5. SSC 4570 Dynamic Support for NSA 250M 1 year 01 SSC 4588 Content Filtering Premium Business Edition for NSA 250M 1 year 01 SSC 4576 Comprehensive Anti Spam Service for NSA 250M 1 year 01 SSC 4600 NSA 2600 support and security subscriptions SKU Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 2600 1 year 01 SSC 4453 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 2600 1 year 01 SSC 4459 Silver 24x7 Support for NSA 2600 1 year 01 SSC 4314 Content Filtering Premium Business Edition for NSA 2600 1 year 01 SSC 4465 Comprehensive Anti Spam Service for NSA 2600 1 year 01 SSC 4471 NSA 3600 support and security subscriptions SKU Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 3600 1 year 01 SSC 4429 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 3600 1 year 01 SSC 4435 Silver 24x7 Support for NSA 3600 1 year 01 SSC 4302 Content Filtering Premium Business Edition for NSA 3600 1 year 01 SSC 4441 Comprehensive Anti Spam Service for NSA 3600 1 year 01 SSC 4447 NSA 4600 support and security subscriptions SKU Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 4600 1 year 01 SS
6. specific countries to either protect against attacks from Known or suspected origins of threat activity or to investigate Prevents data leakage by identifying and controlling content crossing the network through regular expression matching SonicOS feature summary Firewall e Reassembly Free Deep Packet Inspection e Deep packet inspection for SSL e Stateful packet inspection e TCP reassembly e Stealth mode e Common Access Card CAC support e DOS attack protection e UDP ICMP SYN flood protection Intrusion prevention e Signature based scanning e Automatic signature updates e Outbound threat prevention e IPS exclusion list e GeolP and reputation based filtering e Regular expression matching Anti malware e Stream based malware scanning e Gateway anti virus e Gateway anti spyware e SSL decryption e Bi directional inspection e No file size limitation e CloudAV threat database Application control e Application control e Application component blocking e Application bandwidth management e Custom application signature creation e Application traffic visualization e Data leakage prevention e Application reporting over NetFlow IPFIX e User activity tracking SSO e Comprehensive application signature database Web content filtering e URL filtering e Anti proxy technology e Keyword blocking e Bandwidth manage CFS rating categories e Unified policy model with app control e 56 Content filtering ca
7. 7 000 207 7 750 900 7 090 901 7 991 725 Benefits e Best in class protection e Multi core architecture e Ultra high performance e Intrusion prevention e Network based anti malware e Secure remote access e Secure wireless e URL filtering e Gateway anti spam e Application control e Centralized management In addition NSA Series firewalls feature network based malware protection with cloud assist to provide organizations with an essential primary layer of defense against millions of variants of malware NSA Series firewalls are also easy to administer and cost effective because they support Dell s award winning Global Management System platform that is capable of managing hundreds or even thousands of Dell SonicWALL firewalls from a single pane of glass console Comprehensive real time visualization shows what is happening on the network with thorough on box and off box reporting The Dell SonicWALL NSA Series next generation firewalls NGFWs utilize the latest multi core hardware design and Reassembly Free Deep Packet Inspection to protect the network from internal and external attacks without Network Security Appliance 220 and 220 Wireless N USB WAN Failover 1 GbE 5x1GbE LAN Switch Power Console 1 GbE WAN The Dell SonicWALL NSA 220 offers SMBs and branch offices in depth frontline security application and user control network productivity and optional 802 11n dual band wire
8. C 4405 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 4600 1 year 01 SSC 4411 Silver 24x7 Support for NSA 4600 1 year 01 SSC 4290 Content Filtering Premium Business Edition for NSA 4600 1 year 01 SSC 4417 Comprehensive Anti Spam Service for NSA 4600 1 year 01 SSC 4423 NSA Series ordering information NSA 5600 support and security subscriptions SKU Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 5600 1 year 01 SSC 4234 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 5600 1 year 01 SSC 4240 Gold 24x7 Support for NSA 5600 1 year 01 SSC 4284 Content Filtering Premium Business Edition for NSA 5600 1 year 01 SSC 4246 Comprehensive Anti Spam Service for NSA 5600 1 year 01 SSC 4252 NSA 6600 support and security subscriptions SKU Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 6600 1 year 01 SSC 4210 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 6600 1 year 01 SSC 4216 Gold 24x7 Support for NSA 6600 1 year 01 SSC 4278 Content Filtering Premium Business Edition for NSA 6600 1 year 01 SSC 4222 Comprehen
9. Network Security Appliance Series Next generation firewalls Today s organizations face unprecedented security challenges The sophistication and volume of attacks is increasing exponentially often resulting in lost company personal and customer data stolen intellectual property damaged reputations and lost productivity At the same time security has become more complex Organizations are grappling with the BYOD revolution and the explosion of personal devices connecting to the network Personal smartphones and tablets slow network performance and productivity and mobile applications such as social media and video streaming consume an enormous amount of bandwidth In order to address these network security and productivity challenges some organizations have chosen to compromise their security by turning off features to maintain network performance Now your organization can be both secure and productive without compromising network performance The Dell SonicWALL Network Security Appliance NSA Series next generation firewalls NGFWs deliver network security that does not compromise performance It delivers world class security and performance without compromise using the same architecture as the flagship SuperMassive next generation firewall line At the same time the NSA Series offers Dell s acclaimed ease of use and high value At the same time the NSA series offers Dell s acclaimed ease of use and high val
10. S E Service NTP aoe me Ose Remote E Chart Beat 3763 E Image 4239 gt dab SonicPoint MGMT Desktop 436 gt Firewall E 551 5159 E Facebook 6363 E Facebook 6921 E General HTTPS E General HTTP E Facebook 2822 Google 9379 HTTP 5147 DoubleClick 7900 ScoreCard Mode Configuration gt DoubleClick 6261 DNS 4398 IMR a To configure go to AppFlow gt Flow Reporting Using Local Collector 17 46 54 Sep 04 T C O u N te r M ea S u re S a g a l nN st po te n t l a l gt T Firewall Settings E General IKE MB Facebook 6985 E ocsp 6908 E Image 4254 E Image 4243 E DNS 4395 TT Site Scout 7883 Research 3990 Worldwide 7023 Googl Shock Flash v oer ss MM vouTube 5727 E OOS EE Others MM YouTube 9256 E YouTube 9255 EE Chart Beat 3767 F Betr ad 7871 700cwave Fas HTTP 5148 inbound or outbound attacks or Do wae an cick eee Gale aa A EE MediaMath 7892 WE Adsonar 7867 E Facebook 2821 Iti i Google 6015 DNS 6818 f b ttl k gt ZO Anti Spam Analytics 7885 Browsing 707 Browsing 708 Media 7910 I Y j Service HTTPS Encrypted Key R Service Kerberos Microsoft Microsoft RPC End Service RPC p e r O r a nN ce O e nN e C S gt 6 VPN Management m Exchange 5 E General LDAP E cIFs 5181 E Service SMB pey c a Netlogon 602 Point Mapper 477 Services IANA ba gt BY ssi vpn Service DCE Service Terminal Double r Google Aggregrate EndPoint Services TCP WM Atlas DMT 2228 Ml Verify 7872 E Serving Sys 7864 IE G
11. Wireless NSA 220 W NSA 250M W Standards 802 11a b g n WEP WPA WPA2 802 111 TKIP PSK 02 1x EAP PEAP EAP TTLS Virtual access points VAPs 5 External triple detachable antennas 5 dBi Diversity Radio power 802 11a 802 11b 802 11g 15 5 dBm max 18 dBm max 17 dBM 6 Mbps 13 dBM 54 Mbps Radio power 802 11n 2 4GHz 802 11n 5 0GHz 19 dBm MCS 0 11 dBm MCS 15 17 dBm MCS 0 12 dBm MCS 15 Radio receive sensitivity 802 11a 802 11b 802 11g 95 dBm MCS 0 81 dBm MCS 15 90 dBm 11Mbps 91 dBm 6Mbps 74 dBm 54 Mbps Radio receive sensitivity 89 dBm MCS 0 70 dBm MCS 15 95 dBm MCS 0 76 dBm MCS 15 802 11n 2 4GHz 802 11n 5 0GHz Hardware NSA 220 W NSA 250M W Power supply 56W external Fans No fan 1 internal fan 2 internal fans Input power 100 240 VAC 60 50 Hz Maximum power consumption W 11W 15W 12W 16W Form factor Desktop 1U Rack Mountable Kit Available Dimensions 7 125 x 1 5 x 10 5 in 18 10 x 3 81 x 26 67 cm Weight 1 95 lbs 0 88 kg 2 15 lbs 0 97 kg 3 05 lbs 1 38 kg 3 15 lbs 1 43 kg WEEE weight 3 05 lbs 1 38 kg 3 45 lbs 1 56 kg 4 4 lbs 2 0kg 4 65 lbs 2 11 kg Shipping weight 4 35lb 4 7 b 5 6 lb 5 9 lb Major regulatory FCC Class A CE EMC LVD RoHS C Tick VCCI Class A MSIP KCC Class A UL cUL TUV GS CB Mexico CoC by UL WEEE REACH ANATEL BSMI GOST R NSA 220 CU NSA 250M Environment 40 105 F 0 40 C Humidity 5 95 non condensing 1 Testing Methodologies Maximum performance based on RFC 2544 for firew
12. X throughput 600 Mbps 900 Mbps 1 6 Gbps 2 4 Gbps 5 5 Gbps SSL Inspection and Decryption DPI SSL 200 Mbps 300 Mbps 500 Mbps 800 Mbps 1 3 Gbps VPN throughput 1 1 Gbps 1 5 Gbps 3 0 Gbps 4 5 Gbps 5 0 Gbps Connections per second 15 000 sec 20 000 sec 40 000 sec 60 000 sec 90 000 sec Maximum connections SPI 225 000 325 000 400 000 750 000 750 000 Maximum connections DPI 125 000 175 000 200 000 500 000 500 000 SonicPoints supported Maximum 52 48 64 96 96 Single Sign On SSO Users 250 500 1 000 2 500 4 000 NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600 Site to site tunnels 75 800 1 500 4 000 6 000 IPSec VPN clients Maximum 10 250 50 1 000 500 3 000 2 000 4 000 2 000 6 000 SSL VPN licenses Maximum 2 25 2 30 2 30 2 50 2 50 Encryption Authentication DES 3DES AES 128 192 256 bit MD5 SHA 1 Key exchange Diffie Hellman Groups 1 2 5 14 Route based VPN RIP OSPF Networking NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600 IP address assignment Static DHCP PPPoE L2TP and PPTP client Internal DHCP server DHCP Relay NAT modes 1 1 many 1 I many flexible NAT overlapping IPS PAT transparent mode VLAN interfaces 50 50 200 400 500 Routing protocols BGP OSPF RIPv1 v2 static routes policy based routing multicast QoS Bandwidth priority max bandwidth guaranteed bandwidth DSCP marking 802 1p Authentication XAUTH RADIUS Active Directory SSO LDAP Novell internal user database Terminal Services Citrix VoIP Full H323 v1 5
13. all Actual performance may vary depending on network conditions and activated services Full DPI GatewayAV Anti Spyware IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools Testing done with multiple flows through multiple port pairs 3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544 All specifications features and availability are subject to change 4 Please refer to the latest SonicOS 5 9 release for the latest number of SSO users Future use NSA Series system specifications NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600 Operating system SonicOS 6 1 Security cores 4 6 8 10 24 10 GbE interfaces 2 x 10 GbE SFP 4 x 10 GbE SFP 1 GbE interfaces 8 x1 GbE 4 x 1 GbE SFP 8 x 1 GbE SFP 12 x 1 GbE 8x 1GbE 1 LAN Bypass pair Management interfaces 1 GbE 1 Console Memory RAM 2 0 GB 4 0 GB Expansion 1 Expansion Slot Rear SD Card Firewall inspection throughput 1 9 Gbps 3 4 Gbps 6 0 Gbps 9 0 Gbps 12 0 Gbps Full DPI throughput 300 Mbps 500 Mbps 800 Mbps 1 6 Gbps 3 0 Gbps Application inspection throughput 700 Mbps 1 1 Gbps 2 0 Gbps 3 0 Gbps 4 5 Gbps IPS throughput 700 Mbps 1 1 Gbps 2 0 Gbps 3 0 Gbps 4 5 Gbps Anti malware inspection throughput 400 Mbps 600 Mbps 1 1 Gbps 1 7 Gbps 3 0 Gbps IMI
14. chine is brought inside Proxy less and non buffering inspection technology provides ultra low latency performance for DPI of millions of simultaneous network streams without introducing file and stream size limitations and can be applied on common protocols as well as raw TCP streams The unique design of the RFDPI engine works with the multi core architecture to provide high DPI throughput and extremely high new session establishment rates to deal with traffic spikes in demanding networks A single pass DPI architecture simultaneously scans for malware intrusions and application identification drastically reducing DPI latency and ensuring that all threat information is correlated in a single architecture Intrusion prevention Feature Countermeasure based protection Automatic signature updates Intra zone IPS protection Botnet command and control CnC detection and blocking Protocol abuse anomaly detection and prevention Zero day protection Anti evasion technology Description Tightly integrated intrusion prevention system IPS leverages signatures and other countermeasures to scan packet payloads for vulnerabilities and exploits covering a broad spectrum of attacks and vulnerabilities The Dell SonicWALL Threat Research Team continuously researches and deploys updates to an extensive list of IPS countermeasures that covers more than 50 attack categories The new updates take immediate effect without any reboot
15. e database providing RFDPI with extensive coverage of threats The Dell SonicWALL Threat Research Team analyzes new threats and releases countermeasures 24 hours a day 7 days a week New threat updates are automatically pushed to firewalls in the field with active security services and take effect immediately without reboots or interruptions Decrypts and inspects SSL traffic on the fly without proxying for malware intrusions and data leakage and applies application URL and content control policies in order to protect against threats hidden in SSL encrypted traffic The RFDPI engine is capable of scanning raw TCP streams on any port bi directionally preventing attacks that try to sneak by outdated security systems that focus on securing a few well Known ports Identifies common protocols such as HTTP S FTP SMTP SMBv1 v2 and others which do not send data in raw TCP and decodes payloads for malware inspection even if they do not run on Standard well known ports Application intelligence and control Feature Application control Custom application identification Application bandwidth management On box off box traffic visualization Granular control Description Controls applications or individual application features which are identified by the RFDPI engine against a continuously expanding database of over 4 500 application signatures to increase network security and enhance network productivity Controls cus
16. eneral NETBIOS DNS 5183 Analytics 5874 Knowledge 7907 gt amp Virtual Assist gt 8 Users c gt High Availability Google Analytics 704 WB Gooole 6011 HB Image 8682 Dell SonicWALL Application Traffic Analytics provide granular insight into application traffic bandwidth utilization and security threats as well as powerful troubleshooting and forensics capabilities Additionally secure Single Sign On SSO capabilities ease the user experience increase productivity and reduce support calls gt Security Services gt L wan acceleration gt By AppFlow gt amp Log Status Ready The Dell SonicWALL Global Management System GMS simplifies management of application intelligence and control using an intuitive web based interface Features RFDPI engine Feature Reassempbly Free Deep Packet Inspection RFDPI Bi directional inspection Stream based inspection Highly parallel and scalable Single pass inspection Description This high performance proprietary and patented inspection engine performs stream based bi directional traffic analysis without proxying or buffering to uncover intrusion attempts malware and identify application traffic regardless of port Scans for threats in both inbound and outbound traffic simultaneously to ensure that the network is not used to distribute malware and does not become a launch platform for attacks in case an infected ma
17. ially dangerous applications Real time visualization identifies traffic anomalies as they happen enabling immediate of attacks covering tens of thousands of individual threats with a single signature In addition to the countermeasures on the appliance NSA appliances also have access to the Dell SonicWALL CloudAV Service which extends the onboard Signature intelligence with more than twelve million signatures This CloudAV database is accessed via a proprietary light weight protocol by the firewall to augment the inspection done on the appliance With Geo IP and botnet filtering capabilities Dell SonicWALL NGFWs are able to block traffic from dangerous domains or entire geographies in order to reduce the risk profile of the network Protection Gu SonicWALL Network Security Appliance v Dashboard Real Time Monitor Multi Core Monitor Real Time Monitor i AppFlow Dash OOO verro Data Source Refresh every sec AppFlow Monitor 20 0Mbp Classification Alert Wizards Help Logout e AppFlow Reports IP v4 and IPv6 v Applications Threat Reports 15 0Mbp User Monitor BWM Monitor 10 OMbps Packet Monitor 5 0Mbps a E Connection Monitor a a Log Monitor gt a System bps g n 17 27 17 28 17 29 17 40 17 41 17 42 17 43 17 44 gt Network Legends gt amp se ag modem General HTTPS Microsoft Remot WB General Multicast WE General DN
18. l for branch office and small to medium sized corporate environments concerned about throughput capacity and performance Firewall NSA 3600 NSA 4600 Firewall throughput 5 4 Gbps 6 0 Gbps IPS throughput 1 1 Gbps 2 0 Gbps Anti malware throughput 600 Mbps 1 1 Gbps Full DPI throughput 500 Mbps 800 Mbps IMIX throughput 900 Mbps 1 6 Gbps Maximum DPI connections 175 000 200 000 New connections sec 20 000 sec 40 000 sec Description NSA 3600 NSA 4600 Firewall only O01 S SC 3850 01 SSC 5840 TotalSecure 1 year 01 SSC 3853 01 SSC 3843 Comprehensive Gateway 01 SSC 4429 01 SSC 4405 Security Suite 1 year Gateway Anti Malware IPS 1 year 01 SSC 4435 01 SSC 4411 Silver Support 24x7 1 year 01 SSC 4302 01 SSC 4290 Network Security Appliance 5600 Network Security Appliance 6600 Dual 2 x 10GbE 12 x 1GbE Dual 4 x 10GbE 8 x 1GbE USB ports SFP ports ports USB ports SFP ports ports Console 1GbE 4 x 1GbE Console 1GbE 8 x 1GbE management SFP ports management SFP ports Dual hot Expansion bay Expansion bay swappable for future use Dual fans Power for future use fans Power The Dell SonicWALL NSA 5600 is ideal for distributed branch The Dell SonicWALL NSA 6600 is ideal for large distributed and office and corporate environments needing significant corporate central site environments requiring high throughput throughput capacity and performance Firewall NSA 5600 Firewall NSA 6600
19. less Firewall NSA 220 and 220 W Firewall throughput 600 Mbps IPS throughput 195 Mbps Anti malware throughput 115 Mbps Full DPI throughput 110 Mbps IMIX throughput 180 Mbps Maximum DPI connections 85 000 New connections sec 32 000 sec Description NSA 220 and 220 W NSA 220 firewall only 01 SSC 9750 NSA 220 Wireless N firewall only 01 SSC 9752 NSA 220 TotalSecure 1 year 01 SSC 9744 NSA 220 Wireless N TotalSecure 1 year 01 SSC 9745 Comprehensive Gateway Security Suite 01 SSC 4648 1 year Gateway Anti Malware IPS 1 year 01 SSC 4612 Dynamic Support Support 24x7 1 year 01 SSC 4630 compromising performance The NSA Series combines intrusion prevention content and URL inspection application intelligence and control high availability and other advanced networking features Network Security Appliance 250M and 250M Wireless N USB WAN Failover Expansion 5x16GbE module slot Switch Power Console The Dell SonicWALL NSA 250M offers branch offices and distributed enterprises in depth frontline security application and user control network productivity an expansion slot for specialized modules and optional 802 11n dual band wireless Firewall NSA 250M and 250M W Firewall throughput 750 Mbps IPS throughput 250 Mbps Anti malware throughput 140 Mbps Full DPI throughput 130 Mbps IMIX throughput 210 Mbps Maximum DPI connections 110 000
20. mbines real time SSL decryption and inspection an intrusion prevention system IPS that features sophisticated anti evasion technology and a network based malware protection system that leverages the power of the cloud Now organizations can block daily new threats as they appear It is estimated that organizations are blind to approximately one third of their network traffic due to SSL encryption SSL Decryption and Inspection technology available on the Dell SonicWALL NSA Series enables the RFDPI engine to decrypt and inspect all of network traffic on every port Every hour new variants of malware are developed The Dell SonicWALL NSA Series keeps you abreast of these threats with network based malware protection that leverages a cloud database which is updated continually and currently contains more than 13 million variants of malware The Dell SonicWALL Intrusion Prevention Service IPS protects against an array of network based application vulnerabilities and exploits New application vulnerabilities are discovered every day making ongoing IPS updates critical in Keeping Patented single pass RFDPI engine protection up to date from emerging threats Dell SonicWALL goes a step beyond traditional solutions with an intrusion prevention system that features sophisticated anti evasion technology It scans all network traffic for worms Trojans software vulnerabilities backdoor exploits and other types of malici
21. mplete list of supported SFP and SFP modules Regulatory model numbers NSA 220 APL24 08E NSA 2600 1RK29 0A9 NSA 220 W APL24 O08F NSA 3600 1RK26 0A2 NSA 250M APL25 090 NSA 4600 1RK26 0A3 NSA 250M W APL25 091 NSA 5600 1RK26 0A4 NSA 6600 1RK27 O0A5 For more information Dell SonicWALL 2001 Logic Drive San Jose CA 95124 www sonicwall com T 1 408 745 9600 F 1 408 745 9500 Dell Software 5 Polaris Way Aliso Viejo CA 92656 www dell com 2013 Dell Inc ALL RIGHTS RESERVED Dell Dell Software the Dell Software logo and products as If you are located outside North America you can find local identified in this document are registered trademarks of Dell Inc in the U S A and or other countries office information on our Web site All other trademarks and registered trademarks are property of their respective owners
22. net Internet Internet Multi WAN redundancy Dual ISP failover NSA Series as in line NGFW solution Full L2 L7 signature based inspection application awareness Internet Reassembly free packet scanning without proxy or content size limitations LIES EE G CIES i User zone Inspection capacity Dell SonicWALL architecture LIES CL G a m j mj EJ mjm Administrative Servers Security and protection The dedicated in house Dell SonicWALL Threat Research Team works on researching and developing counter measures to deploy to the firewalls in the field for up to date protection The team leverages more than one million sensors across the globe for malware samples and for telemetry feedback on the latest threat information which in turn is fed into the intrusion prevention anti malware and application detection capabilities Dell SonicWALL NGFW customers benefit from continuously updated threat protection around the clock with new updates taking effect immediately without reboots or interruptions The Signatures resident on the appliances are designed to protect against wide classes Application intelligence and control Application intelligence informs administrators of application traffic traversing their network so they can schedule application controls based on business priority throttle unproductive applications and block potent
23. or service interruption required Bolsters internal security by segmenting the network into multiple security zones with intrusion prevention preventing threats from propagating across the zone boundaries Identifies and blocks command and control traffic originating from bots on the local network to IPS and domains that are identified as propagating malware or are known CnC points Identifies and blocks attacks that abuse protocols in an attempt to sneak past the IPS Protects the network against zero day attacks with constant updates against the latest exploit methods and techniques that cover thousands of individual exploits Extensive stream normalization decoding and other techniques ensure that threats do not enter the network undetected by utilizing evasion techniques in Layers 2 7 Features Threat prevention Feature Network based malware protection CloudAssist malware protection Around the clock security updates SSL decryption and inspection Bi directional raw TCP inspection Extensive protocol support Description The Dell SonicWALL RFDPI engine scans all inbound outbound and intra zone traffic for viruses Trojans Key loggers and other malware in files of unlimited length and size across all ports and TCP streams A continuously updated database of over 12 million threat signatures resides in the Dell SonicWALL cloud servers and Is referenced to augment the capabilities of the onboard signatur
24. orical monitoring and reporting with tools such as Dell SonicWALL Scrutinizer or other tools that support IPFIX and NetFlow with extensions Virtual Private Networking Feature IPSec VPN for site to site connectivity SSL VPN or IPSec client remote access Redundant VPN gateway Route based VPN Description High performance IPSec VPN allows the NSA Series to act as a VPN concentrator for thousands of other large sites branch offices or home offices Utilizes clientless SSL VPN technology or an easy to manage PSec client for easy access to email files computers intranet sites and applications from a variety of platforms When using multiple WANs a primary and secondary VPN can be configured to allow seamless automatic failover and failback of all VPN sessions The ability to perform dynamic routing over VPN links ensures continuous uptime in the event of a temporary VPN tunnel failure by seamlessly re routing traffic between endpoints through alternate routes 10 Features Content context awareness Feature User activity tracking Description User identification and activity are made available through seamless AD LDAP Citrix Terminal Services SSO integration combined with extensive information obtained through DPI GeolP country traffic identification Suspicious traffic originating from the network Regular Expression DPI filtering Identifies and controls network traffic going to or coming from
25. ous attacks Cybercriminals often try to circumvent the IPS by using complex algorithms to evade detection Dell NGFWs feature advanced threat protection to decode hidden attacks before they can harm your organization By focusing on Known malicious traffic Dell SonicWALL IPS filters out false positives while increasing network reliability and performance Designed to protect against both internal and external threats Dell SonicWALL IPS monitors network traffic for malicious or anomalous behavior then blocks or logs traffic based on predefined policy Reassembly Free Deep Packet Inspection engine The Dell SonicWALL Reassembly Free Deep Packet Inspection RFDPI engine provides superior threat protection and application control without compromising performance It relies on streaming traffic payload inspection to detect threats at Layers 3 7 and takes network streams through extensive and repeated normalization and decryption in order to neutralize advanced evasion techniques that seek to confuse detection engines and sneak malicious code into the network Packet assembly based process Once a packet undergoes the necessary pre processing including SSL decryption it is analyzed against a single proprietary memory representation of three signature databases intrusion attacks malware and applications The connection state is then advanced to represent the position of the stream relative to these databases until it encounter
26. red using UDP traffic at 1280 byte packet size adhering to RFC 2544 All specifications features and availability are subject to change Future use 13 NSA Series ordering information Product SKU NSA 220 TotalSecure 1 year 01 SSC 9744 NSA 220 Wireless N TotalSecure 1 year 01 SSC 9745 NSA 250M TotalSecure 1 year 01 SSC 9747 NSA 250M Wireless N TotalSecure 1 year 01 SSC 9748 NSA 2600 TotalSecure 1 year 01 SSC 3863 NSA 3600 TotalSecure 1 year 01 SSC 3853 NSA 4600 TotalSecure 1 year 01 SSC 3843 NSA 5600 TotalSecure 1 year 01 SSC 3833 NSA 6600 TotalSecure 1 year 01 SSC 3823 Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 220 1 year 01 SSC 4648 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 220 1 year 01 SSC 4612 Dynamic Support for NSA 220 1 year 01 SSC 4630 Content Filtering Premium Business Edition for NSA 220 1 year 01 SSC 4618 Comprehensive Anti Spam Service for NSA NSA 220 1 year 01 SSC 4642 NSA 250M and 250M Wireless N support and security subscriptions Comprehensive Gateway Security Suite Application Intelligence Threat Prevention Content Filtering with Support for NSA 250M 1 year 01 SSC 4606 Threat Prevention Intrusion Prevention Gateway Anti Virus Gateway Anti Spyware Cloud Anti Virus for NSA 250M 1 year 01
27. s a state of attack or other match event at which point a pre set action is taken In most cases the connection is terminated and proper logging and notification events are created However the engine can also be configured for inspection only or in case of application detection to provide Layer 7 bandwidth management services for the remainder of the application stream as soon as the application is identified Packet reassembly free process Packet Proxy Scanning B gt Traffic in p a ee ee Inspection time When proxy becomes full or content too large files bypass scanning Competitive architecture Flexible customizable deployment options NSA Series at a glance Every Dell SonicWALL NSA appliance utilizes a breakthrough multi core hardware design and Reassembly Free Deep Packet Inspection for internal and external network protection without compromising network performance The NSA Series NGFWs combine high speed intrusion prevention file and content inspection and powerful application intelligence and control with an extensive array of advanced networking and flexible configuration features The NSA Series offers an affordable platform that is easy to deploy and manage in a wide variety of large branch office and distributed network environments disassembly Traffic out Traffic in a Inspection capacity Inspection time NSA Series as central site gateway Inter
28. sive Anti Spam Service for NSA 6600 1 year 01 SSC 4228 Modules and accessories SKU 10GBASE SR SFP Short Reach Module 01 SSC 9785 10GBASE LR SFP Long Reach Module 01 SSC 9786 10GBASE SFP 1M Twinax Cable 01 SSC 9787 10GBASE SFP 3M Twinax Cable 01 SSC 9788 1000BASE SX SFP Short Haul Module 01 SSC 9789 1000BASE LX SFP Long Haul Module 01 SSC 9790 1000BASE T SFP Copper Module 01 SSC 9791 NSA 220 250M Rack mount kit SKU NSA 220 Rack Mount Kit 01 SSC 9212 NSA 250M Rack Mount Kit 01 SSC 9211 NSA 250M expansion modules SKU 4 Port GbE Expansion Module for NSA 250M series 01 SSC 8619 2 Port SFP Module 01 SSC 8826 1 Port T1 E1 Module M1 01 SSC 8829 1 port ADSL Annex A Module M1 01 SSC 8827 1 port ADSL Annex B Module M1 01 SSC 8828 2 port GbE with LAN Bypass Module M1 01 SSC 8830 Management and reporting SKU Dell SonicWALL GMS 10 Node Software License 01 SSC 3363 Dell SonicWALL GMS E Class 24x7 Software Support for 10 node 1 year 01 SSC 6514 Dell SonicWALL Scrutinizer Virtual Appliance with Flow Analytics Module Software License for up to 5 nodes 01 SSC 3443 includes one year of 24x7 Software Support Dell SonicWALL Scrutinizer with Flow Analytics Module Software License for up to 5 nodes 01 SSC 4002 includes one year of 24x7 Software Support Dell SonicWALL Scrutinizer Advanced Reporting Module Software License for up to 5 nodes 01 SSC 3773 includes one year of 24x7 Software Support Please consult with a Dell Security Products SE for a co
29. tegories VPN e IPSec VPN for site to site connectivity e SSL VPN or IPSec client remote access e Redundant VPN gateway e Mobile Connect for iOS and Android e Route based VPN OSPF RIP Networking e Dynamic routing e SonicPoint wireless controller e Policy based routing e Advanced NAT e DHCP server e Bandwidth management e Link aggregation e Port redundancy e A P high availability with state sync e A A clustering e INbound outbound load balancing e L2 bridge wire mode tap mode NAT mode VoIP e Advanced QoS e Bandwidth management e DPI for VoIP traffic e H 3243 gatekeeper and SIP proxy support Management and monitoring e Web GUI e Command line interface CLI e SNMPv2 v3 e Off box reporting Scrutinizer e Centralized management and reporting e Logging e Netflow IPFix exporting e App traffic visualization e Centralized policy management e Single Sign On SSO e Terminal service Citrix support e Solera Networks Forensics integration 11 NSA Series system specifications NSA 220 W NSA 250M W Operating system SonicOS 5 9 Security cores 2 1 GbE interfaces 7 x 1GbE 5 x 1GbE Management interfaces CLI SSH GUI GMS Memory RAM 512 MB 512 MB Expansion 2 USB SD Card 1 Module Interface 2 USB SD Card Firewall inspection throughput 600 Mbps 750 Mbps
30. ting The NSA Series can be deployed in traditional NAT Layer 2 Bridge Wire Mode and Network Tap modes The NSA Series supports Active Passive with state synchronization Active Active DPI and Active Active Clustering high availability modes Active Active DPI offloads the Deep Packet Inspection load to cores on the passive appliance to boost throughput Load balances multiple WAN interfaces using Round Robin Spillover or Percentage based methods Creates routes based on protocol to direct traffic to a preferred WAN connection with the ability to fail back to a secondary WAN in the event of an outage Guarantees critical communications with 802 1p and DSCP tagging and remapping of VoIP traffic on the network Blocks spam calls by requiring that all incoming calls are authorized and authenticated by H 323 gatekeeper or SIP proxy Management and reporting Feature Global Management System Powerful single device management IPFIX NetFlow application flow reporting Description The Dell SonicWALL GMS monitors configures and reports on multiple Dell SonicWALL appliances through a single management console with an intuitive interface to reduce management costs and complexity An intuitive web based interface allows quick and convenient configuration in addition to a comprehensive CLI and support for SNMPv2 3 Exports application traffic analytics and usage data through IPFIX or NetFlow protocols for real time and hist
31. tom applications by creating signatures based on specific parameters or patterns unique to an application in its network communications in order to gain further control over the network Restricts or prioritizes applications or application categories in order to maximize available bandwidth for critical applications while eliminating or reducing undesired application traffic Identifies bandwidth utilization and analyzes network behavior with real time on box application traffic visualization and off box application traffic reporting via NetFlow IPFix Controls applications or specific components of an application based on schedules user groups exclusion lists and a range of actions with full SSO user identification through LDAP AD Terminal Services Citrix integration i a N DOLL S Features Firewall and networking Feature Stateful Packet Inspection DDoS DosS attack protection Flexible deployment options High availability clustering WAN load balancing Policy based routing Advanced QoS H 323 gatekeeper and SIP proxy support Description All network traffic is inspected analyzed and brought into compliance with firewall access policies SYN Flood protection provides a defense against DOS attacks using both Layer 3 SYN proxy and Layer 2 SYN blacklisting technologies Additionally it provides the ability to protect against DOS DDoS through UDP ICMP flood protection and connection rate limi
32. ue Based on years of research and development the NSA Series is designed from the ground up for distributed enterprises small to medium sized businesses branch offices school Campuses and government agencies It combines a revolutionary multi core architecture with a patented Reassembly Free Deep Packet Inspection RFDPI single pass threat prevention engine in a massively scalable design This gives organizations industry leading protection performance and scalability with a high number of concurrent connections low latency and high connections per second with no file size limitations Highly respected independent third party testing firms have evaluated and or certified the technology of the NSA Series firewalls Unlike competing legacy firewall and intrusion prevention technologies the NSA Series looks at all traffic regardless of port or protocol The NSA Series blocks advanced malware attacks with the industry s highest on the fly SSL decryption rates Its authentication server integration efficiently enforces acceptable use policy through granular application controls for bandwidth management and enhanced productivity Unlike antiquated two box solutions that do not share threat information the NSA Series integrates firewall and IPS This connected intelligence enforces policy decisions to intensify security effectiveness while slashing management burdens and organizational risk US Patents 7 510 019
Download Pdf Manuals
Related Search