SonicWALL NFR NSA 240 Demo Unit Crom
Contents
1. High Availability Optional Active Passive with State S ync4 Optional Active Passive with State Sync Active Passive with State Sync Load Balancing Yes Outgoing with percent based round robin and spill over Incoming with round robin random distribution sticky IP block remap and symmetrical remap Standards TCP IP UDP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHCP PPPoE L2TP PPTP RADIUS IEEE 802 3 Wireless Standards Hardware Interfaces NSA 240 2 USB PC Card Slot Optional 3G Analog Modem 1 Console Interface 3 GE Gigabit Ports 6 10 100 802 11 a b g n WPA2 WPA TKIP 802 1x EAP PEAP EAP TTLS 6 10 100 1000 Copper Gigabit Ports 1 Console Interface 2 USB emory RAM 256 MB 512 MB 512 MB 512 MB Flash Memory 32 MB Compact Flash 512 MB Compact Flash 3G Wireless Modem With 3G USB Adapter Modem Power Supply 36W External Single 180W ATX Power Supply Fans No Fan 2 Fans Power Input 10 240V 50 60Hz 100 240Vac 60 50Hz ax Power Consumption 15W 42W 64W 66W Total Heat Dissipation 51 1BTU 144BTU 219BTU 225BTU Certifications VPN C ICSA Firewall 4 1 EAL4 FIPS 140 2 Level 2 VPNC ICSA Firewall 4 1 Certifications Pending EAL 4 4 FIPS 140 2 z Form Factor and Dimensions 7 125 x 1 5 x 10 5 in 18 10 x 3 81 x 26 67 cm 1U rack mountable 17 x 13 25 x 1 75 in 43 18 x 33 65 x 4 44 cm 1U rack mountabl2. NETWORK SECURITY E SonicWALL s next generation security E Scalable multi core hardware and Reassembly Free Deep Packet Inspection E Stateful High Availability and load balancing features m High performance and lowered TCO E Advanced routing services and networking features E Standards based Voice over IP VoIP E Secure distributed wireless LAN services E Onboard Quality of Service QoS The SonicWALL Network Security Appliance Series Next Generation Unified Threat Management Protection Organizations of all sizes depend on their networks to access internal and external mission critical applications As advances in networking continue to provide tremendous benefit to organizations they are increasingly challenged by sophisticated and financially motivated attacks designed to disrupt communication degrade performance and compromise data Malicious attacks penetrate outdated stateful packet inspection firewalls by exploiting higher network levels Point products add layers of security but are costly difficult to manage limited in controlling network misuse and ineffective against the latest multipronged attacks The SonicWALL Network Security Appliance NSA Series revolutionizes network security utilizing a breakthrough multi core design and patented Reassembly Free Deep Packet Inspection RFDPI technology offering complete protection without compromising network performance This platform was first m
3. 240 01 SSC 2887 For more information on SonicWALL network security solutions please visit Www sonicwall com Includes one year of Gateway Anti Virus Anti Spyware Intrusion Prevention Application Intelligence Service Content Filtering Service Dynamic Support 24x7 and ViewPoint Reporting Specifications Firewall NSA 240 NSA 2400 NSA 3500 NSA 4500 SonicOS Version SonicOS Enhanced 5 6 or higher Stateful Throughput 600 Mbps 775 Mbps 1 5 Gbps 2 75 Gbps GAV Performance 115 Mbps 160 Mbps 350 Mbps 690 MBps PS Performance 195 Mbps 275 Mbps 750 Mbps 1 4 Gbps UTM Performance 110 Mbps 150 Mbps 240 Mbps 600 Mbps MIX Performance 195 Mbps 235 Mbps 580 Mbps 700 Mbps aximum Connections 85 000 110 0004 225 000 325 000 500 000 aximum UTM Connections 32 000 50 0004 125 000 175 000 250 000 ew Connections Sec 2 000 4 000 7 000 10 000 odes Supported Unrestricted Denial of Service Attack Prevention 22 classes of DoS DDoS and scanning attacks SonicPoints Supported Maximum 16 32 32 64 VPN NSA 240 NSA 2400 3DES AES Throughput 150 Mbps 300 Mbps 625 Mbps 1 0 Gbps Site to Site VPN Tunnels 25 504 75 800 1 500 Bundled Global VPN Client Licenses 2 25 10 250 50 1 000 500 3 000 Maximum Bundled SSL VPN Licenses Maximum 2 15 2 25 2 30 2 30 Virtual Assist Bundled Maximum 1 30 day trial 5 1 5 2 10 2 10 Encryption Authentication DH Group Key Exchange DE
4. email files intranets and applications for remote users Upgrade licenses are available in a variety of user counts allowing this solution to scale as the organization grows SSL VPN Remote Access Upgrades provide clientless remote network level access for PC Mac and Linux based systems With integrated SSL VPN technology SonicWALL UTM appliances enable seamless and secure remote access to email files intranets and applications from a variety of client platforms via NetExtender a lightweight client that is pushed onto the user s machine NetExtender is installed and configured automatically requiring no user interaction ez SonicWALL Comprehensive Anti Spam Service blocks soam phishing and virus laden emails at the gateway There is no need to redirect an MX Record or send email to another vendor with one click the service is activated and immediately starts blocking junk email and saving valuable network bandwidth 5 SONICWALL gt ers r E E ann gt sis 7 Network Security Appliance 4500 01 SSC 7012 NSA 4500 TotalSecure 1 year O1 5G77032 sonia JE HLEA Network Security Appliance 3500 01 SSC 7016 NSA 3500 TotalSecure 1 year ols E7088 m Network Security Appliance 2400 01 SSC 7020 NSA 2400 TotalSecure 1 year 01 SG 7035 Network Security Appliance 240 TotalSecure 1 year 01 SSC 8760 SonicWALL PC Card to ExpressCard Adapter for NSA
5. scanning and control of threats for networks that carry bandwidth intensive and latency sensitive applications gt Processor i i i i i l Processor i i i Processor i i i i Z Inspection Performance a Elimi ons Eliminated my E Threats Mobile Users e Internet Clean Traffic UTM Engine Internal Network SonicWALL Clean VPN The Network Security Appliance Series includes innovative SonicWALL Clean VPN technology which decontaminates vulnerabilities and malicious code from remote mobile users and branch offices traffic before it enters the corporate network and without user intervention Policies Reports Monitor Console Basolino Systems Office Summary user gnader typo Administrators AertsiWarnings Number O1 Attacks enceeced throshokd of 10 Tote Attecke 42 15 otal Barrann Mentes e278 344 Total HTTP Bancwicth Bytes 160797 Total Attacks 42 0 00 3 00 6 00 9 00 12 00 16 00 20 00 24 00 Hour of Day Bandwidth M ytes by Virus Alteck Suremary No Dala Avadatie Centralized Policy Management The Network Security Appliance Series can be managed using the SonicWALL Global Management System GMS which provides flexible powerful and intuitive tools to centrally manage configurations view real time monitoring metrics and integrate policy and compliance reporting Flexible Customizable Deployment Options NSA S
6. S 3DES AES 128 192 256 bit MD5 SHA 1 DH Groups 1 2 5 14 Key Exchange IKE IKEv2 Manual Key PKI X 509 L2TP over IPSec Route Based VPN Yes OSPF RIP Certificate Support Verisign Thawte Cybertrust RSA Keon Entrust and Microsoft CA for SonicWALL to SonicWALL VPN SCEP Dead Peer Detection Yes DHCP Over VPN Yes PSec NAT Traversal Yes Redundant VPN Gateway Yes Global VPN Client Platforms Supported SSL VPN Platforms Supported Deep Packet Inspection Service Microsoft Security Services NSA 240 Microsoft Windows 2000 Windows XP Microsoft Vista 32 bit 64 bit Windows 7 Windows 2000 XP Vista 32 64 bit Windows 7 Mac 10 4 Linux FC 3 Ubuntu 7 OpenSUSE NSA 2400 NSA 3500 NSA 4500 Gateway Anti Virus Anti Spyware Intrusion Prevention and Application Intelligence Content Filtering Service Premium Edition CFS HTTP URL HTTPS IP keyword and content scanning ActiveX Java Applet and cookie blocking Gateway enforced Client Anti Virus and Anti Spyware HTTP S SMTP POP3 IMAP and FTP Enforced McAfee Clients Email attachment blocking Comprehensive Anti Spam Service Yes Application Intelligence Provides application level enforcement and bandwidth control regulate Web traffic email email attaches and file transfers scan and restrict documents and files for key words and phrases DPI SSL Provide
7. WALL s line up of comprehensive protection Sas o bid POLICY AND MANAGEMENT Us BACKUP AND RECOVERY LJ L SECURE REMOTE ACCESS NETWORK SECURITY WEB AND E MAIL SECURITY SONICWALL 2010 SonicWALL and the SonicWALL logo is registered trademarks of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice 02 10 SW 883
8. ade available on the SonicWALL E Class NSA Series and it is now available for mid sized organizations The NSA Series overcomes the limitations of existing security solutions by scanning the entirety of each packet for current internal and external threats in real time Built on a high speed multi core processing platform the NSA Series enables deep packet inspection without adversely impacting the performance of mission critical networks and applications The NSA Series applies next generation Unified Threat Management UTM against a comprehensive array of attacks combining intrusion prevention anti virus and anti spyware with the application level control of SonicWALL Application Intelligence Service With advanced routing stateful high availability and high speed IPSec and SSL VPN technology the NSA Series adds security reliability functionality and productivity to branch offices central sites and distributed mid enterprise networks while minimizing cost and complexity Comprised of the SonicWALL NSA 240 2400 NSA 3500 and NSA 4500 the NSA Series offers a scalable range of solutions designed to meet the network security needs of any organization Features and Benefits SonicWALL s next generation security incorporates a new level of UTM that integrates intrusion prevention gateway anti virus and anti spyware and features the Application Intelligence Service suite of configurable tools to prevent data leakage and offer granular ap
9. amp Non business Traffic SonicWALL Deep Packet Inspection Architecture Clean Traffic Firewall Gateway Anti Virus Anti Spyware Intrusion Prevention Content Filtering Application Intelligence Clean VPN Forwarding Engine Bandwidth Management Stateful Classification and Transformation Update Engine This functionality allows threats to be identified and eliminated over unlimited file sizes and unrestricted concurrent connections without interruption The Network Security Appliance Series provides dynamic network protection through continuous automated security updates protecting against emerging and evolving threats without requiring any administrator intervention Unified Threat Management Load Balancing Single processor designs that include multiple protection technologies are severely limited Multi processor Core Deep Packet Inspection Architecture with Deep Packet Inspection Processor i i gt T g Anti Spyware Clean VPN Gateway Anti Virus Intrusion Prevention Content Filtering Application Control by a single centralized processor SonicWALL UTM Load Balancing UTM load balancing integrates a high speed reer VT deep packet inspection and traffic classification in Traffic Out engine onto multiple security cores inspecting applications files and content based traffic in real time without significantly impacting performance or scalability This enables the
10. e 17 x 10 25 x 1 75 in 43 18 x 26x 4 44 cm Certifications D Nabs QUT rewa corporate Common Criteria EAL4 CERTIFIED i d SonicWALL Inc 2001 Logic Drive San Jose CA 95124 T 1 408 745 9600 F 1 408 745 9300 www sonicwall com Weight 2 55Lb 1 16Kg 8 05 lbs 3 65 kg 11 30 Ibs 5 14 kg WEEE Weight 3 15Lb 1 43Kg 8 05 lbs 3 65 kg 11 30 Ibs 5 14 kg ajor Regulatory FCC Class A CES Class A CE CTick VCCI Compliance MIC UL cUL TUV GS CB NOM RoHS WEEE Environment 32 105 F 0 40 C 40 105 F 5 40 C TBF 9 5 years 16 0 years 14 3 years 14 1 years Humidity 0 95 non condensing 10 90 non condensing Testing Methodologies Maximum performance based on RFC 2544 for firewall Actual performance may vary depending on network conditions and activated services 7UTM Gateway AV Anti Spyware IPS hroughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools Testing done with multi ower when UTM services are enabled Only with the NSA 240 Stateful HA and Expansion Upgrade VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544 Supported on the NSA ple flows through multiple port pairs Actual maximum connection counts are 3500 and higher Not available on NSA 2400 USB 3G card and modem are not included See http www sonicwall com us products cardsupport html for supported USB devices Sonic
11. edium sized corporate and branch office environments concerned about throughput capacity and performance Server Anti Virus and Anti Spyware Servers Anti Threat Protection g m The SonicWALL NSA 240 is ideal for small to medium sized businesses and branch office sites Security Services and Upgrades Gateway Anti Virus Anti Spyware Intrusion Prevention Service and Application Intelligence Service delivers intelligent real time network security protection against sophisticated application layer and content based attacks including viruses soyware worms Trojans and software Corporate Headquarters Branch Office Enforced Client VPN SSLVPN Global Gateway Anti Virus AE T SD hos aM Anti Spyware Intrusion Client PCs Anti kA Prevention and Application Content Filtering Service Web Site Upgrade and Content r Firewall Usage Control Perimeter and Network Protection Threat Protection Dynamic Support Services are available 8x5 or 24x7 depending on customer needs Features include world class technical support crucial firmware updates and upgrades access to extensive electronic tools and timely hardware replacement to help organizations get the greatest return on their vulnerabilities such as buffer overflows Application Intelligence Service SonicWALL investment delivers a suite of configurable tools designed to prevent data leakage while Global VPN Client Upgrades utilize a software client that i
12. eries At A Glance Every SonicWALL Network Security Appliance solution delivers next generation Unified Threat Management protection utilizing a breakthrough multi core hardware design and Reassembly Free Deep Packet Inspection for internal and external network protection without compromising network performance Each NSA Series product combines high speed intrusion prevention file and content inspection and powerful Reporting and analysis Application Intelligence Service controls with an extensive array of advanced networking and flexible configuration features The NSA Series offers an accessible affordable platform that is easy to deploy x and manage in a wide variety of corporate branch office and distributed network environments m The SonicWALL NSA 4500 is ideal for corporate Branch Office pE A E TOBE ed Fixed NSA Series Telecommuter peed central site and large distributed environments r aval requiring high throughput capacity and performance K O O Q o i A GMS C V m The SonicWALL NSA 3500 is ideal for corporate a A A a SonicPoint N O branch office and distributed environments needing GMS a VolP Corporate Desktop Corporate Desktop Corporate Desktop Corporate Desktop Servers m G g Centralized Marketing VLAN Finance VLAN Management Wireless Laptops significant throughput capacity and performance m The SonicWALL NSA 2400 is ideal for small to m
13. from communications equipment to VolP ready devices such as SIP Proxies H 323 Gatekeepers and Call Servers Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and configures SonicPoints SonicWALL wireless access points for secure remote access in distributed network environments Onboard Quality of Service QoS features use industry standard 802 1p and Differentiated Services Code Points DSCP Class of Service CoS designators to provide powerful and flexible bandwidth management that is vital for VoIP multimedia content and business critical SONICWALL gt Dynamic Security Architecture and Management SonicWALL Real time Unified Threat Management Automatic Threat Database Updates a Network 1 0 Engine Bandwidth Management Flow Order Emerging Blended Threats Best in Class Threat Protection Q SonicWALL deep packet inspection protects against network risks such as viruses worms Trojans soyware phishing attacks emerging threats and Internet misuse Application Application Intelligence adds highly configurable controls to prevent data leakage and manage bandwidth at the application level 2 The SonicWALL Reaseembly Free Deep Packet Inspection RFDPI technology utilizes SonicWALL s multi core architecture to scan packets in real time without stalling traffic in memory Eliminated Threats
14. plication control Scalable multi core hardware and Reassembly Free Deep Packet Inspection scans and eliminates threats of unlimited file sizes and provides virtually unrestricted concurrent connections with uncompromising speed The NSA 240 can be configured using primary or secondary modem or 3G wireless interfaces for future proofed extensibility Stateful High Availability and load balancing features in SonicOS 5 5 Enhanced maximize total network bandwidth and maintain seamless network uptime delivering uninterrupted access to mission critical resources and ensuring that VPN tunnels and other network traffic will not be interrupted in the event of a failover High performance and lowered TCO are achieved by using the processing power of multiple cores in unison to dramatically increase throughput and provide simultaneous inspection capabilities while lowering power consumption U S Patent 7 310 815 A method and apparatus for data stream analysis and blocking Advanced routing services and networking features incorporate advanced networking and security technology including 802 1q VLANs Multi WAN failover zone and object based management load balancing advanced NAT modes and more providing granular configuration flexibility and comprehensive protection at the administrator s discretion Standards based Voice over IP VoIP capabilities provide the highest levels of security for every element of the VoIP infrastructure
15. s providing granular application level controls LA Enforced Client and Server Anti Virus and Anti Spyware delivers comprehensive virus and spyware protection for laptops desktops and servers using a single integrated client and offers automated network wide enforcement of anti virus and anti spyware policies definitions and software updates Content Filtering Service enforces protection and productivity policies by employing an innovative rating architecture utilizing a dynamic database to block up to 56 categories of objectionable Web content ViewPoint Reporting delivers easy to use Web based capabilities that provide administrators with instant comprehensive insight into network performance and security Delivered through a series of historical reports using dashboards and detailed summaries ViewPoint helps organizations of all sizes track Internet usage fulfill regulatory compliance requirements and monitor the security status of their network gt SonicWALL Virtual Assist is a remote support tool that enables a technician to assume control of a PC or laptop for the purpose of providing remote technical assistance With permission the technician can gain instant access to a computer using a Web browser making it easy to diagnose and fix a problem remotely without the need for a pre installed fat client installed on Windows based computers and increase workforce productivity by providing secure access to
16. s the ability to decrypt HTTPS traffic transparently scan this traffic for threats using SonicWALL s Deep Packet Inspection technology GAV AS IPS App FW CFS then re encrypt the traffic and send it to its destination if no threats or vulnerabilities are found This feature works for both clients and servers Networking NSA 240 NSA 2400 NSA 3500 NSA 4500 P Address Assignment Static DHCP PPPoE L2TP and PPTP client Internal DHCP server DHCP relay AT Modes 1 1 I many many 1 many many flexible NAT overlapping IPs PAT transparent mode VLAN Interfaces 802 1q 10 254 25 50 200 Routing OSPF RIPv1 v2 static routes policy based routing Multicast QoS Bandwidth priority maximum bandwidth guaranteed bandwidth DSCP marking 802 1p Pv6 IPv6 Ready Authentication XAUTH RADIUS Active Directory SSO LDAP Novell internal user database Terminal Services Citrix nternal Database Single Sign on Users 100 100 Users 250 250 Users 300 500 Users 1 000 1 000 Users VolP Full H 323v1 5 SIP gatekeeper support outbound bandwidth management VoIP over WLAN deep inspection security full interoperability with most VoIP gateway and communications devices Zone Security Yes Schedules One Time Recurring Object based Group based Management Yes DDNS Yes Management and Monitoring Web GUI HTTP HTTPS Command Line SSH Console SNMP v2 Global management with SonicWALL GMS Logging and Reporting ViewPoint Local Log Syslog Solera Networks
Download Pdf Manuals
Related Search