SonicWALL PRO 4100 Internet gateway
Contents
1. Gateway Anti Virus Anti Spyware and Intrusion Prevention Content Filtering Service CFS Standard Edition Gateway enforced Network Anti Virus Dynamic signature database prevents intrusions worms spyware and application exploits Peer to peer and instant messaging control and signature updates through Distributed Enforcement Architecture URL keyword and content scanning Activex Java Applet and Cookie Blocking HTTP S SMTP POP3 IMAP and FTP Enforced McAfee Clients E mail attachment blocking Testing Methodologies Maximum performance based on RFC 2544 for firewall Actual performance may vary depending on network conditions and activated services Throughput measured using HTTP throughput test VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544 1 30 day service included 2 30 day service included 3 30 day 50 user service included PRO 4100 Front gt APII a x 4 i283 4 M i SONICWALL Console port PRO 4100 10 10 100 1000 gigabit Ethernet interfaces SonicWALL Value added Security Services SonicWALL Internet security appliances integrate seamlessly with an expanding array of value added security services to provide a comprehensive security solution Gateway anti virus anti spyware intrusion prevention desktop enforced anti virus and content SonicWALL Inc 1143 Borregas Avenue Sunnyvale CA 94089 1306 T 1 408 745 9600 F2. 1 408 745 9300 Networking DHCP Relay internal server 4 096 leases NAT Modes 1 1 1 many many 1 flexible NAT overlapping IPs PAT transparent mode VLANs Supported 300 Authentication VolP Routing Protocols System Internal user database RADIUS LDAP Microsoft Active Directory Full H 323v1 5 SIP gatekeeper support inbound outbound bandwidth management call tracking and monitoring full interoperability with most VolP gateway and communications devices OSPF Open Shortest Path First and RIP Router Information Protocol Zone Security Object based Management Management Reporting WAN WAN Failover Hardware Failover Yes Yes Local CLI Web GUI SNMP v2 WebTrends Global Management with SonicWALL GMS Comprehensive reporting and graphing automated scheduling bandwidth monitoring with SonicWALL ViewPoint reporting suite Yes with percent based round robin and spill over load balancing Active Passive Standards TCP IP UDP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RADIUS Hardware Interfaces 10 10 100 1000 auto sensing Ethernet 1 Serial Port Fans Redundant high capacity fans Power Supply Power Input Max Power Consumption Total Heat Dissipation Processors Dimensions Weight Major Regulatory Compliance Environment Humidity MTBF 250 W 100 240 VAC 60 50 Hz 6 3 A 163 W 556 BTU Intel Pentium main processor Cavium Nitrox
3. cryptographic accelerator 17 00 x 16 25 x 1 75 in 43 18 x 41 23 x 4 45 cm 15 05 Ibs 6 83 kg FCC Class A ICES Class A CE GTick VCCI Class A BSMI Class A MIC NOM UL cUL TUV GS CB 40 105 F 5 40 C 10 90 non condensing 7 0 years PRO 4100 Rear APMP Np PME Pp Wali T TT Redundant high capacity fans filtering can be enforced over both the wired and wireless LANS For more information on SonicWALL security services please visit our Web site at http www sonicwall com products vpnsoft html www sonicwall com SONICWALL gt 2005 SonicWALL Inc is a registered trademark of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice G139_4100 DS US v6
4. and flexible bandwidth management that is vital for Voice over IP VoIP multimedia content and business critical applications Advanced security and networking features include 802 1q VLANs enterprise routing support WAN WAN failover zone and object based management load balancing advanced NAT modes and more providing granular configuration flexibility and comprehensive protection SONICWALL gt Real time unified threat management protection in an affordable easy to manage platform Robust Internal Security Network security and control is accomplished through a robust and flexible platform SonicWALL Real time Unified Threat Management Emerging Blended Threats Viruses N Gateway Anti Virus Eliminated Threats amp Non business Traffic E Toae e Clean Traffic Anti Spyware Intrusion Prevention Content Filtering Application Control Clean VPN Spyware Bandwidth mM N Bandwidth Traffic ao ol Management 2 f OUT Exploits Qos Defrag Flow Order The SonicWALL deep packet inspection architecture inspects traffic to ensure network risks such as viruses worms Trojans spyware phishing attacks emerging threats and Internet misuse are properly prevented The uniquely scalable approach scans traffic in real time as it moves through the engine without having to stall traffic in memory This allows threats to be identified and eliminated over un
5. Business applications are sensitive to bandwidth speed and compatibility The PRO 4100 optimizes business critical traffic such as VoIP and corporate server traffic for complete end to end bandwidth and speed management Other applications such as instant messaging peer to peer and multimedia pose both productivity and security issues The PRO 4100 affords administrators complete control over the usage of these non business applications Business amp Non business Traffic SonicWALL Eliminated Mm e Non business e Traffic Applications Central site Primary Gateway The PRO 4100 is ideal as a security gateway for central site deployments and distributed environments with a focus on both external as well as internal security Advanced networking features allow seamless deployment into virtually any environment SonicWALL f BREE Features E Suite of advanced security services for comprehensive multi layered protection E Zone security for segmenting internal groups and eliminating threats between network groups E Granular QoS features prioritize business critical traffic and applications over non essential functions E SonicWALL Clean VPN ensures remote users do not infect the corporate site location Operations Engineering Server Zone Zone Zone E Secondary VPN gateway support with automatic VPN failover Data Center Environments With its powerful VPN performance and enhanced NAT modes the P
6. PRO SERIES The SonicWALL PRO 4100 Real time threat protection and internal security Organizations of all sizes rely on their networked infrastructure as the primary means of communication and productivity These same networks are under attack from a continually evolving array of dynamic threats Securing data from external as well as internal threats across distributed often highly complex architectures is challenging Today s organizations need a solution that not only provides high speed threat protection at the gateway but also the flexibility and port density to segment the network into workgroups for extended internal security The SonicWALL PRO 4100 solves these issues with the first real time unified threat management firewall appliance utilizing 10 gigabit interfaces to deliver high speed internal and external network protection for corporate central sites distributed environments and data centers The PRO 4100 is based on a dynamically updateable platform that includes an extensive array of advanced networking and configuration flexibility features in an accessible affordable platform that is easy to deploy and manage in a wide variety of environments Features and Benefits Powerful re assembly free deep packet inspection engine eliminates threats over unlimited file sizes and unrestricted concurrent connections offering ultimate scalability Real time gateway anti virus anti spyware anti SPAM and intrusion prevention se
7. RO 4100 is ideal for segmenting high speed data center environment traffic Features m 800 Mbps stateful packet inspection firewall throughput mM Suite of advanced security services for comprehensive multi layered protection mM Zone security for segmenting internal groups and eliminating threats between internal groups E Object based management for easy administration OL EE WULU Egi EIT E Granular QoS features prioritize server traffic to meet the most demanding service level agreements E ntegrated high availability HA and load balancing features guarantee network uptime and maximize total network bandwidth SonicWALL GMS a Multi site LAN WAN management and reporting Integration with overall security management Secure WLAN Security and Management The PRO 4100 features secure distributed WLAN capabilities that rival those of the most sophisticated WLAN switch vendors on the market m Features a Z E Complete integration of WLAN security into overall network security management and reporting system SonicWALL Switch or PoE Switch E Centrally manage and configure SonicPoints 802 11a b g and 802 11 b g dependent access points from PRO 4100 security appliances to enable wireless intrusion detection secure wireless roaming wireless guest services and more oe 4 mE Zone security for segmenting internal groups and eliminating threats between internal segments j q E Stand
8. ards based WEP WPA and IPSec encryption options SonicWALL VPN Client SonicWALL WLAN Zone Legacy WLAN Zone IPSec WPA WEP Basic connectivity m Guest services User roaming Rogue AP detection and wireless IDP Specifications SonicWALL PRO 4100 Firewall Nodes Supported Stateful Throughput Deep Packet Inspection Gateway Anti Virus Throughput Intrusion Prevention Throughput Connections Policies Denial of Service Attack Prevention VPN Unrestricted 800 Mbps Protection from viruses spyware worms Trojans and application layer attacks Requires Gateway Anti Virus Anti Spyware and Intrusion Prevention Service for signature updates 300 Mbps 300 Mbps 600 000 10 000 22 classes of DoS DDoS and scanning attacks 3DES AES Throughput Site to Site VPN Remote Access VPN Encryption Authentication Key Exchange XAUTH RADIUS L2TP IPSec Flexible VPN Termination Certificate Support Dead Peer Detection DHCP Over VPN IPSec NAT Traversal Redundant VPN Gateway Single arm VPN 350 Mbps MDS 168 bit 3 500 tunnels max 5 000 tunnels max 1 500 clients bundled DES 3DES AES 128 192 256 bit MD5 SHA 1 Manual Key PKI X 509 IKE Yes Yes Any port for site to site and remote access tunnels Verisign Thawte Baltimore RSA Keon Entrust and Microsoft CA for SonicWALL to SonicWALL VPN Yes Yes Yes NAT_Tv00 and v03 Yes Yes Deep Inspection Security Services
9. cures the network against a comprehensive array of dynamic threats including viruses soyware worms Trojans phishing attacks and software vulnerabilities such as buffer overflows Innovative SonicWALL Clean VPN deep packet inspection architecture assures mobile user connections and branch office traffic are decontaminated to prevent vulnerabilities and malicious code from being introduced into the corporate network from remote connections Comprehensive application control prevents non business traffic such as peer to peer and instant messaging applications at the administrator s discretion Integrated high availability and load balancing features maximize total network bandwidth and maintain network uptime ensuring uninterrupted access to critical resources Standards based Voice over IP capabilities provide the highest levels of security for every element of the VoIP infrastructure from communications equipment to VolP ready devices such as SIP Proxies H 323 Gatekeepers and Call Servers Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and configures SonicPoints SonicWALL wireless access points for secure remote access in distributed network environments Onboard Quality of Service QoS features use industry standard 802 1p and Differentiated Services Code Points DSCP Class of Service CoS designators to provide powerful
10. limited file sizes and Stateful Classification and Transformation 2 Update Engine unrestricted concurrent connections without any interruptions No other solution offers the same scalability and limitless protection 3 Because threats are always evolving dynamic network protection is accomplished through automated and continuous security updates ensuring the PRO 4100 can prevent emerging threats without requiring any administrator intervention Internal Security The PRO 4100 delivers robust trusted network protection across 10 gigabit Ethernet interfaces Inter departmental traffic is inspected to prevent the spread of threats and attacks that occur on the internal network The high speed prevention engine detects threats over both virtual and connected wireless LANs delivering end to end protection throughout the network x Eliminated G Ai Threats M Eliminated m Threats Suppliers gI Telecommuters SonicWALL Mobile Users Clean Traffic SonicWALL Clean VPN The PRO 4100 includes innovative SonicWALL Clean VPN technology that prevents vulnerabilities and malicious code by decontaminating mobile user connections and branch office traffic before they enter the corporate network Based on a real time deep packet inspection engine the PRO 4100 eliminates viruses worms Trojans soyware and malicious code without any user intervention Intelligent Application Control
Download Pdf Manuals
Related Search