SonicWALL NSA 240 Secure UPG Plus 3 Yrs
Contents
1. Routing OSPF RIPv1 v2 static routes policy based routing Multicast QoS Bandwidth priority maximum bandwidth guaranteed bandwidth DSCP marking 802 1p Pv6 Yes XAUTH RADIUS Active Directory SSO LDAP Novell internal user database Terminal Services Citrix 100 100 Users 250 250 Users 300 500 Users 1 000 1 000 Users Authentication nternal Database Single Sign on Users VolP Full H 323v1 5 SIP gatekeeper support outbound bandwidth management VoIP over WLAN deep inspection security full interoperability with most VolP gateway and communications devices SonicWALL PC Card to System NSA 240 NSA 2400 NSA 3500 NSA 4500 ExpressCard Adapter Zope secu Yes for NSA 240 Schedules One Time Recurring 01 SSC 2887 Object based Group based Management Yes DDNS Yes Management and Monitoring Logging and Reporting High Availability Load Balancing Web GUI HTTP HTTPS Command Line SSH Console SNMP v2 Global management with SonicWALL GMS ViewPoint Local Log Syslog Solera Networks NetFlow v5 v9 IPFIX with Extensions Real time Visualization Optional Active Passive with State Sync Optional Active Passive with State Sync Active Passive with State Sync Yes Outgoing with percent based round robin and spill over Incoming with round robin random distribution sticky IP block remap and symmetrical remap TCP IP UDP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RAD2. Series provides dynamic network protection through continuous automated security updates protecting against emerging and 2 The SonicWALL Reassembly Free Deep Packet evolving threats without requiring any administrator Inspection RFDPI technology utilizes SonicWALL s intervention multi core architecture to scan packets in real time without stalling traffic in memory Application Intelligence and Control ve F SonicWALL Application Intelligence and Control IED Co provides granular control and real time visualization A SAR RSD NN ina RD i of applications to guarantee bandwidth prioritization a E A and ensure maximum network security and productivity An integrated feature of SonicWALL Next Generation Firewalls it uses SonicWALL Reassembly Free Deep Packet Inspection technology to identify and control applications in use with easy to use pre defined application categories such as social media or gaming regardless of port or protocol The SonicWALL Application Flow Monitor provides real time graphs of applications ingress and egress bandwidth active Web site connections and user activity Policies epora Monitor Console L gp jai ai Firewe A Baseline S ea N S user gnadert type Administrators E Elimin me Anh Airc on ated a Threats AlertsNarnings Number Of Attacks exceeded threshold of 10 Tote Attacks 42 Suppliers Internet Mobil
3. 400 TotalSecure 1 year Deep Packet Inspection Service Gateway Anti Virus Anti Spyware Intrusion Prevention and Application Intelligence and Control 01 SC 7035 Content Filtering Service Premium Edition CFS HTTP URL HTTPS IP keyword and content scanning ActiveX Java Applet and cookie blocking bandwidth management on filtering categories allow forbid lists Enforced Client Anti Virus and Anti Spyware HTTP S SMTP POP3 IMAP and FTP Enforced McAfee Clients Email attachment blocking Comprehensive Anti Spam Servicet Application Intelligence and Control DPI SSL Supported Application bandwidth management and control prioritize or block application by signatures control file transfers scan for key words or phrases Provides the ability to decrypt HTTPS traffic transparently scan this traffic for threats using SonicWALL s Deep Packet Inspection technology GAV AS IPS Application Intelligence CFS then re encrypt the traffic and send it to its destination if no threats or vulnerabilities are found This feature works for both clients and servers Networking NSA 240 NSA 4500 NSA 2400 P Address Assignment Static DHCP PPPoE L2TP and PPTP client Internal DHCP server DHCP relay Network Security Appliance 240 TotalSecure 1 year 01 SSC 8760 AT Modes 1 1 1 many many 1 many many flexible NAT overlapping IPs PAT transparent mode VLAN Interfaces 802 1q 10 254 25 50 200
4. IUS IEEE 802 3 802 11 a b g n WPA2 WPA TKIP 802 1x EAP PEAP EAP TTLS For more information on SonicWALL network security solutions please visit www sonicwall com Standards Includes one year of Gateway Anti Virus Wireless Sandard Anti Spyware Intrusion Prevention ication Fi i Teut EEE wwo ww S a E Application Firewall Service Content TEA Filtering Service Dynamic Support 24x7 i gt USB PC Card Slot 6 10 100 1000 Copper Gigabit Ports 1 Console Interface 2 USB and ViewPoint Reporting Optional 3G Analog Modem 1 Console Interface emory RAM 256 MB 512 MB 512 MB 512 MB Flash Memory 32 MB Compact Flash 512 MB Compact Flash 3G Wireless Modem With 3G USB Adapter Modem Power Supply 36W External Single 180W ATX Power Supply Fans No Fan 2 Fans Power Input 10 240V 50 60Hz 100 240Vac 60 50Hz ax Power Consumption 15W 42W 64W 66W Total Heat Dissipation 51 1BTU 144BTU 219BTU 225BTU Certifications EAL4 VPNC ICSA Firewall 4 1 EAL4 FIPS 140 2 Level 2 VPNC ICSA Firewall 4 1 Certifications Pending FIPS 140 2 7 125 x 1 5 x 10 5 in 18 10 x 3 81 x 26 67 cm 1U rack mountable 17 x 13 25 x 1 75 in 43 18 x 33 65 x 4 44 cm 8 05 Ibs 3 65 kg 11 30 Ibs 5 14 kg 8 05 Ibs 3 65 kg 11 30 Ibs 5 14 kg FCC Class A CES Class A CE CTick VCCI Compliance MIC UL cUL TUV GS CB NOM RoHS WEEE 32 105 F 0 40 C 40 105 F 5 40 C 9 5 yea
5. SONICWALL inemes ey aorta The SonicWALL Network Security Appliance Series Unified Threat Management Firewall FIREWALL Organizations of all sizes depend on their networks to access internal and external mission critical applications As advances in networking continue to provide tremendous benefit to organizations they are increasingly challenged by sophisticated and financially motivated attacks designed to disrupt communication degrade performance and compromise data Malicious attacks penetrate outdated stateful packet inspection firewalls with advanced application layer exploits Point products add layers of security but are costly difficult to manage limited in controlling network E Unified Threat Management E Scalable multi core hardware and Reassembly Free Deep Packet Inspection E Application intelligence control and visualization E Stateful high availability and load balancing m High performance and lowered TCO E Advanced routing services and networking features E Standards based Voice over IP VoIP E Secure distributed wireless LAN services E Onboard Quality of Service QoS misuse and ineffective against the latest multipronged attacks The SonicWALL Network Security Appliance NSA Series of Unified Threat Management UTM Firewalls utilizing a unique multi core design and patented Reassembly Free Deep Packet INspection RFDPI technology offers complete protection without compro
6. alization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity Stateful high availability and load balancing features maximize total network bandwidth and maintain seamless network uptime delivering uninterrupted access to mission critical resources and ensuring that VPN tunnels and other network traffic will not be interrupted in the event of a failover High performance and lowered TCO are achieved by using the processing power of multiple cores in unison to dramatically increase throughput and provide simultaneous inspection capabilities while lowering power consumption U S Patent 7 310 815 A method and apparatus for data stream analysis and blocking Advanced routing services and networking features incorporate 802 1q VLANs Multi WAN failover zone and object based management load balancing advanced NAT modes and more providing granular configuration flexibility and comprehensive protection at the administrator s discretion Standards based Voice over IP VoIP capabilities provide the highest levels of security for every element of the VoIP infrastructure from communications equipment to VolP ready devices such as SIP Proxies H 323 Gatekeepers and Call Servers Secure distributed wireless LAN services enable the appliance to function as a wireless switch and controller that automatically detects and configures SonicPoint wireless access points Onboard Quali
7. ction z Usage Control Lo SS Gateway Anti Virus Anti Spyware Intrusion Prevention and Application Intelligence and Control Service delivers intelligent real time network security protection against sophisticated application layer and content based attacks including viruses soyware worms Trojans and software vulnerabilities such as buffer overflows Application Intelligence and Control delivers a suite of configurable tools designed to prevent data leakage while providing granular application level controls along with tools enabling visualization of network traffic Enforced Client Anti Virus and Anti Spyware delivers comprehensive virus and spyware protection for laptops desktops and servers using a single integrated client and offers automated network wide enforcement of anti virus and anti spyware policies definitions and software updates Content Filtering Service enforces protection and productivity policies by employing an innovative rating architecture utilizinga dynamic database to block up to 56 categories of objectionable Web content ViewPoint Reporting delivers easy to use Web based capabilities that provide administrators with instant comprehensive insight into network performance and security Delivered through a series of historical reports using dashboards and detailed summaries ViewPoint helps EN Wala ro i Iil Dy organizations of all sizes track Internet usage fulfill regulatory co
8. deploy and manage in a wide variety of corporate branch office and distributed network environments Reporting and analysis m The SonicWALL NSA 4500 is ideal for corporate central site and large distributed environments requiring high throughput capacity and Branch Office E cee NSA Series Fixed Telecommuter peed performance i 1 2 O s Ma Sle olf ma m The SonicWALL NSA 3500 is ideal for corporate m Yo O O branch office and distributed environments E gt a s Paon O P Ce GMS Server VoIP Corporate Desktop Corporate Desktop Corporate Desktop Corporate Desktop Servers needing significant throughput capacity and pee a Semen Satta Management Wireless Laptops performance m The SonicWALL NSA 2400 is ideal for small to medium sized corporate and branch office environments concerned about throughput capacity and performance Server Anti Virus and Anti Spyware Servers Anti Threat Protection Anti Oi O Threa m The SonicWALL NSA 240 is ideal for small to medium sized businesses and branch office sites Enforced Client Corporate Headquarters Branch Office VPN SSL VPN aN Global Content Filtering Gateway Anti Virus 2 7 Al No 7 Virus SD Remote q VPN Service Anti Spyware Intrusion and Anti Spyware KX A Access X Y Client Web Site Prevention and Application Client PCs Anti Upgrade and Content Intelligence and Control t Prote
9. e Users Clean Traffic o 0 00 3 00 6 00 9 00 12 00 16 00 20 00 24 00 Bandwidth M ytes by Hour of Day UTM Engine Internal Network Virus Altack Summary No Dala Avadaitiie SonicWALL Clean VPN The Network Security Appliance Series includes innovative SonicWALL Clean VPN technology which decontaminates vulnerabilities and malicious code Centralized Policy Management from remote mobile users and branch offices traffic The Network Security Appliance Series can be managed before it enters the corporate network and without using the SonicWALL Global Management System GMS user intervention which provides flexible powerful and intuitive tools to centrally manage configurations view real time monitoring metrics and integrate policy and compliance reporting Flexible Customizable Deployment Options NSA Series At A Glance Every SonicWALL Network Security Appliance solution delivers Unified Threat Management protection utilizing a breakthrough multi core hardware design and Reassembly Free Deep Packet Inspection for internal and external network protection without compromising network performance Each NSA Series product combines high speed intrusion prevention file and content inspection and powerful application intelligence and control with an extensive array of advanced networking and flexible configuration features The NSA Series offers an accessible affordable platform that is easy to
10. ew Connections Sec 2 000 4 000 7 000 10 000 odes Supported Unrestricted Denial of Service Attack Prevention 22 classes of DoS DDoS and scanning attacks SonicPoints Supported Maximum 16 32 48 64 SONICWALL j pa E x 3DES AES Throughput 150 Mbps 300 Mbps 625 Mbps 1 0 Gbps Site to site VPN Tunnels 25 50 75 800 1 500 Bundled Global VPN Client Licenses 2 25 10 250 50 1 000 500 3 000 Network Security Appliance 3500 Maximum 01 SSC 7016 Bundled SSL VPN Licenses Maximum 2 15 2 25 2 30 2 30 NSA 3500 TotalSecure 1 year Virtual Assist Bundled Maximum 1 30 day trial 5 1 5 2 10 2 10 01 SC 7033 Encryption Authentication DH Group DES 3DES AES 128 192 256 bit MD5 SHA 1 DH Groups 1 2 5 14 Key Exchange Route Based VPN Key Exchange IKE IKEv2 Manual Key PKI X 509 L2TP over IPSec Yes OSPF RIP Certificate Support Verisign Thawte Cybertrust RSA Keon Entrust and Microsoft CA for SonicWALL to SonicWALL VPN SCEP Dead Peer Detection Yes _ o DHCP Over VPN Yes oT i PSec NAT Traversal Yes SONICWALL gt HH j Sle A Ch Em a oo Redundant VPN Gateway Yes Network Security Appliance 2400 Global VPN Client Platforms Supported Microsoft Windows 2000 Windows XP Microsoft Vista 32 64 bit Windows 7 32 64 bit SSL VPN Platforms Supported Microsoft Windows 2000 XP Vista 32 64 bit Windows 7 Mac 10 4 Linux FC 3 Ubuntu 7 OpenSUSE NSA 2
11. mising network performance The NSA Series overcomes the limitations of existing security solutions by scanning the entirety of each packet for current internal and external threats in real time The NSA Series applies UTM protection against a comprehensive array of attacks combining intrusion prevention anti virus and anti spyware anti soam and content filtering with application intelligence control and visualization With advanced routing stateful high availability and high speed IPSec and SSL VPN technology the NSA Series adds security reliability functionality and productivity to branch offices central sites and distributed mid enterprise networks while minimizing cost and complexity Comprised of the SonicWALL NSA 240 NSA 2400 NSA 3500 and NSA 4500 the NSA Series offers a scalable range of solutions designed to meet the network security needs of any organization Features and Benefits Unified Threat Management integrates intrusion prevention gateway anti virus anti spyware application intelligence and control content filtering and anti spam to block malware and spam and offer granular application control and prevent data leakage Scalable multi core hardware and Reassembly Free Deep Packet Inspection scans and eliminates threats of unlimited file sizes with near zero latency across thousands of connections at wire speed Application intelligence control and visualization provides granular control and real time visu
12. mpliance requirements and monitor the security status of their network Virtual Assist is a remote support tool that enables a technician to assume control of a PC or laptop for the purpose of providing remote technical assistance With permission the technician can gain instant access to a computer using a Web browser making it easy to diagnose and fix a problem remotely without the need for a pre installed fat client Dynamic Support Services are available 8x5 or 24x7 depending on customer needs Features include world class ER technical support crucial firmware updates and upgrades WW access to extensive electronic tools and timely hardware replacement to help organizations get the greatest return on their SonicWALL investment Global VPN Client Upgrades utilize a software client that is installed on Windows based computers and increase workforce productivity by providing secure access to email files intranets and applications for remote users Upgrade licenses are available in a variety of user counts allowing this solution to scale as the organization grows SSL VPN Remote Access Upgrades provide clientless remote network level access for PC Mac and Linux based systems With integrated SSL VPN technology SonicWALL UTM appliances enable seamless and secure remote access to email filles intranets and applications from a variety of client platforms via NetExtender a lightweight client that is pushed onto
13. onicwall com WEB AND E MAIL SECURITY mn LI SECURE REMOTE ACCESS f 9 L J BACKUP AND RECOVERY bid POLICY AND MANAGEMENT SONICWALL gt DYNAMIC SECURITY FOR THE GLOBAL NETWORK NETWORK SECURITY 2010 SonicWALL and the SonicWALL logo is registered trademarks of SonicWALL Inc Dynamic Security For The Global Network is a trademark of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice 10 10 SW 1042
14. rs 14 3 years 0 95 non condensing 10 90 non condensing 1U rack mountable 17 x 10 25 x 1 75 in 43 18 x 26x 4 44 cm Form Factor and Dimensions Weight WEEE Weight Major Regulatory Environment MTBF Humidity 2 55Lb 1 16Kg 3 15Lb 1 43Kg 16 0 years 14 1 years 1 Testing Methodologies Maximum performance based on RFC 2544 for firewall Actual performance may vary depending on network conditions and activated services UTM Gateway AV Anti Spyware IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools Testing done with multiple flows through multiple port pairs Actual maximum connection counts are lower when UTM services are enabled Only with the NSA 240 Stateful HA and Expansion Upgrade VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544 Supported on the NSA 3500 and higher 7Not available on NSA 2400 USB 3G card and modem are not included See http www sonicwall com us products cardsupport html for supported USB devices The Comprehensive Anti Spam Service supports an unrestricted number of users but is recommended for 250 users or less Certifications Nabs CE rewa CORPORATE Common Criteria EAL4 CERTIFIED SonicWALL s line up of dynamic security solutions q a SonicWALL Inc 2001 Logic Drive San Jose CA 95124 T 1 408 745 9600 F 1 408 745 9300 www s
15. the user s machine NetExtender is installed and configured automatically requiring no user interaction Comprehensive Anti Spam Service CASS offers small to medium sized businesses comprehensive protection from spam and viruses with instant deployment over existing SonicWALL firewalls CASS speeds deployment eases administration and reduces overhead by consolidating solutions providing one click anti spam services with advanced configuration in just ten minutes Deep Packet Inspection for of SSL Encrypted Traffic DPI SSL transparently decrypts and scans both inbound and outbound HTTPS traffic using SonicWALL RFDPI The traffic is then re encrypted and sent to its original destination if no threats or vulnerabilities are discovered Specifications Firewall NSA 240 NSA 2400 NSA3500 NSA 4500 SonicOS Enhanced 5 6 or higher SonicOS Version SONICWALL P ee H H JA Stateful Throughput 600 Mbps 775 Mbps 1 5 Gbps 2 75 Gbps O W E one m im a200 GAV Performance 115 Mbps 160 Mbps 350 Mbps 690 MBps PS Performance 195 Mbps 275 Mbps 750 Mbps 1 4 Gbps Network Security Appliance 4500 UTM Performance 110 Mbps 150 Mbps 240 Mbps 600 Mbps 01 SSC 7012 MIX Performance 195 Mbps 235 Mbps 580 Mbps 700 Mbps NSA 4500 TotalSecure 1 year aximum Connections 85 000 110 0004 225 000 325 000 500 000 01 SC 7032 Maximum DPI Connections 32 000 50 0004 125 000 175 000 250 000
16. ty of Service QoS features use industry standard 802 1p and Differentiated Services Code Points DSCP Class of Service CoS designators to provide powerful and flexible bandwidth management that is vital for VoIP multimedia content and business critical applications SONICWALL DYNAMIC SECURITY FOR THE GLOBAL NETWORK Dynamic Security Architecture and Management SonicWALL Deep Packet Inspection Architecture Eliminated Threats amp Non business Traffic m Te ab one SonicWALL Real time Automatic Threat Unified Threat Database Updates Management i Blended Threats Network 1 0 Engine ee Bandwidth N m Sy 5 A Management Bandwidth H Management Stateful Classification and Transformation Clean Traffic Firewall Gateway Anti Virus Anti Spyware Intrusion Prevention Content Filtering Application Intelligence Clean VPN Emerging Forwarding Engine Update Engine Best in Class Threat Protection Q SonicWALL deep packet inspection protects against This functionality allows threats to be identified and network risks such as viruses worms Trojans soyware eliminated over unlimited file sizes and unrestricted phishing attacks emerging threats and Internet misuse concurrent connections without interruption Application intelligence and control adds highly configurable controls to prevent data leakage and manage bandwidth at the application level The SonicWALL NSA
Download Pdf Manuals
Related Search