PRODUCT LINE. Dynamic Security for the Global Network

Transcription

1 PRODUCT LINE Dynamic Security for the Global Network

2

3 Table of Contents Overview...2 Network Security/Firewall Solutions Network Security Solution Summary...3 SuperMassive Solutions...3 E-Class Solutions...5 Branch Office and SMB Solutions...8 Wireless Enablers...14 Subscription Services, Licenses and Firmware...15 WAN Acceleration Solutions WAN Acceleration Summary...16 WAN Acceleration Products...16 Secure Remote Access Solutions Secure Remote Access Solution Summary...18 E-Class Solutions...18 Add-on Features...19 SMB and Branch Office Solutions...21 Add-on Features: Web Application Firewall, Virtual Assist, Virtual Access...22 Anti-Spam/ and Web Security Solutions Security Solution Summary...24 E-Class Solutions...24 SMB Solutions...25 Subscription Services...26 Backup and Recovery Solutions Backup and Recovery Solution Summary...27 SMB Solutions...28 Licenses and Services...28 Policy and Management Solutions Global Management System...30 ViewPoint...30 MySonicWALL...30 Global Support Services E-Class Support 24x Dynamic Support 8x5 and 24x Comprehensive Global Management System Support...31 Focused Technical Support...31 Remote Start-up and Configuration Service...32 Customer Advantage Program Secure Upgrade Plus...32 Customer Loyalty Bundle

4 Overview Dynamic Security for the Global Network Our vision is simple: we believe security solutions should be intelligent enough to adapt as organizations evolve and as threats evolve dynamically and globally. We believe customers around the world should have the ability to control, manage and protect their global network easily and automatically. We believe our customers should be able to receive and share threat and defense data around the world so they can anticipate and stop attacks before they happen. We want our customers to be able to secure any user, any device, using any application from anywhere so they can collaborate securely across different networks. All this needs to be achieved with maximum ease of deployment and at the best economic value and in a compliant framework. Application Intelligence, Control and Visualization SonicWALL Application Intelligence and Control provides granular control and real-time visualization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity. A tightly integrated feature of SonicWALL Next-Generation Firewalls, it uses SonicWALL Reassembly-Free Deep Packet Inspection to identify and control applications, regardless of port or protocol. With a continuously expanding signature database currently recognizing over 3,500 applications and millions of malware threats, it can maintain granular control over applications, prioritize or throttle bandwidth and deny Web site access. The SonicWALL Application Flow Monitor provides real-time graphs of applications, ingress and egress bandwidth, active Website connections and user activity. Threat Management Internet threats have transformed from mere annoyances to sophisticated malicious attacks that can dramatically impede business. SonicWALL solutions offer intelligent protection against these intricate and evolving threats by seamlessly integrating network security, and Web and security. SonicWALL Network Security provides deep protection against viruses, worms, Trojans, spyware and intrusions while delivering enterprise-levels of network performance without compromising performance. SonicWALL Web Security provides greater control to block inappropriate and illegal Web sites as well as to control the use of instant messaging and peer-to-peer applications. SonicWALL Application Intelligence, Control and Visualization extends control over nonproductive applications like online trading, instant messaging/chat, peer-to-peer sharing and streaming video sites. SonicWALL Security completes the offering with effective protection against spam and phishing attacks so employees only read legitimate s and are not exposed to fraudulent s. SonicWALL s intelligent solutions greatly simplify the centralized management of local, remote and mobile network services while protecting key information and communications resources in a cost-effective manner. Mobility The ubiquity of mobile technology, the increasingly distributed workforce, smartphones accessing the corporate network, and the demand for business continuity have made mobility a business imperative. SonicWALL provides organizations of all sizes with mobility solutions over broadband, wireless and dial-up connections. Integrated with SonicWALL Unified Threat Management protection, SonicWALL network security provides secure site-to-site connections or secure remote access using IPSec or SSL VPN. Combining these appliances with selfconfiguring SonicPoints instantly provides provisional temporary networks with secure wireless hotspot connectivity. The SonicWALL TZ 200 and TZ 210 allows temporary sites to establish secure 3G wireless broadband virtually anywhere in an instant without a fixed Internet connection. Additionally, SonicWALL dedicated SSL VPNs extend secure mobile access to virtually any remote location over standard Web browsers or mobile devices including wireless PDAs and smartphones. SonicWALL SSL VPN solutions also offer unsurpassed levels of granular access control. Business Continuity Whether triggered by a major disaster, a flu outbreak or a neighborhood power outage, any disruption to normal business operations can mean missed opportunities, lost revenue, and a damaged reputation. SonicWALL offers business continuity and recovery solutions for any size organization. With SonicWALL SSL VPN solutions, isolated workers can remain as productive from home or other contingent locations as if they were in the office. The SonicWALL Backup and Recovery solution provides automatic, real-time, hands-free disk-based data backup and flexible disaster recovery options for servers, laptops and PCs. The SonicWALL Continuous Data Protection (CDP) Series protects files locally as well as at offsite locations to ensure data can be instantly recovered. Compliance Security threats exist within a network as well. Whether intentionally or accidentally, employees can transmit inappropriate content, intellectual property or confidential data, resulting in significant damage or breach of industry or government regulations like HIPAA or Sarbanes-Oxley. Noncompliance may result in fines, executive liability and a damaging loss of credibility. SonicWALL can help any organization meet mandated regulations, with best-in-class encryption technology and deep packet inspection to ensure Clean VPN, connectivity. SonicWALL SSL VPN solutions offer data encryption and authentication, granular access control, policy management, logging capability and flexible authentication architecture. SonicWALL Security provides easy creation of outbound policies, intelligent identification of noncompliant s, robust monitoring and reporting tools, and a range of remediation options. And, SonicWALL Content Filtering Service protects your network from illicit or unproductive Web content. Finally, the award-winning SonicWALL Global Management System (GMS ) provides comprehensive audit trails with centralized real-time monitoring, and comprehensive policy and compliance reporting. Virtualization SonicWALL s Virtual Appliances bring together the cost and management advantages of virtualization plus the security of hardened appliance OS to offer improved choice and flexibility for SMBs, enterprises, and Managed Service Providers (MSPs). SonicWALL Virtual Appliances enable the enterprise to fully capitalize on security solutions while channel partners can deliver virtualized solutions and related benefits to their customers. 2

5 Network Security/Firewall Solutions SonicWALL s SuperMassive E10000 Series is a state-of-the-art Next-Generation Firewall engineered to provide application SonicWALL Firewall Network Security When deployed as a Next-Generation Firewall solution, SonicWALL firewalls tightly integrate Reassembly-Free Deep Packet Inspection to deliver superior intrusion prevention, malware protection, application intelligence, control and real-time visualization, and inspection for SSL encrypted sessions. Essential to an intelligent and highly adaptive security system, SonicWALL Next-Generation Firewalls scan every byte of every packet for the deepest level of protection and, unlike competitive offerings, massively scales to extend state-of-the-art security to growing and distributed enterprise networks. SonicWALL security appliances can also be deployed as Unified Threat Management (UTM) firewalls that offer comprehensive security combining gateway content filtering, anti-spam, anti-virus, anti-spyware, intrusion prevention, and application intelligence and control. SonicWALL is positioned in the Leaders Quadrant of the Gartner Magic Quadrant for UTM. intelligence and control while defending against a wide spectrum of internal and external network attacks with unprecedented speed. SuperMassive E10000 Series At-A-Glance The SuperMassive E10000 Series is SonicWALL s Next-Generation Firewall platform designed to deliver scalability, reliability and deep security at multi-gigabit speeds for large networks. Built to meet the needs of enterprise, government, university, and service provider deployments, the SuperMassive E10000 Series is ideal for securing enterprise networks, data centers and server farms. Combining massively scalable multi-core design and SonicWALL s patented* Reassembly- Free Deep Packet Inspection technology, the SuperMassive E10000 Series delivers industryleading application control, intrusion prevention, malware protection and SSL inspection. SuperMassive E10800 n Cores: 96 n IPS Throughput: 30 Gbps n Firewall Throughput: 40 Gbps n Max Connections: 12.0M n Application Inspection Throughput: 30 Gbps SuperMassive E10400 n Cores: 48 n Max Connections: 6.0M n Firewall Throughput: 20 Gbps n Upgrade Path: Field upgradeable to n Application Inspection Throughput: 15 Gbps the E10800 n IPS Throughput: 15 Gbps SuperMassive E10200 n Cores: 24 n Max Connections: 3.0M n Firewall Throughput: 10 Gbps n Upgrade Path: Field upgradeable to n Application Inspection Throughput: 7.5 Gbps the E10400 n IPS Throughput: 7.5 Gbps SuperMassive E10100 n Cores: 12 (+12 in Integrated HA mode) n IPS Throughput: 4.0 Gbps n Firewall Throughput: 5.0 Gbps n Max Connections: 1.5M n Application Inspection Throughput: 4.0 Gbps n Upgrade Path: Upgradeable to the E10200 *U.S. Patents 7,310,815; 7,600,257; 7,738,380; 7,835,361 3

6 Network Security/Firewall Solutions SuperMassive E10000 Series Feature E10100 E10200 E10400 E10800 System Specifications VPN Operating System Cores 12 (+ 12 HA) SonicOS 10 GbE Interfaces 6 x 10-GbE SFP+ 1 GbE Interfaces 16 x 1-GbE SFP Management Interfaces 1 GbE, 1 Console Memory (RAM) 8 GB 16 GB 32 GB 64 GB Storage 80 GB SSD, Flash Firewall Throughput 5.0 Gbps 10 Gbps 20 Gbps 40 Gbps Application Inspection Throughput 4.0 Gbps 7.5 Gbps 15 Gbps 30 Gbps IPS Throughput 4.0 Gbps 7.5 Gbps 15 Gbps 30 Gbps Anti-Malware Inspection Throughput 2.0 Gbps 3.0 Gbps 6.0 Gbps 12 Gbps VPN Throughput 2.5 Gbps 5.0 Gbps 10 Gbps 20 Gbps Connections per second 80,000/sec 160,000/sec 320,000/sec 640,000/sec Max. Connections (SPI) 1.5M 3.0M 6.0M 12.0M Max. Connections (DPI) 1.2M 2.5M 5.0M 10.0M Site-to-site Tunnels 10,000 10,000 (20,000)* 10,000 (40,000)* 10,000 (80,000)* IPSec VPN Clients 2,000 2,000 (4,000)* 2,000 (8,000)* 2,000 (16,000)* SSL VPN Licenses 50 (1,000)* 50 (2,000)* 50 (4,000)* 50 (8,000)* Encryption Authentication DES, 3DES, AES (128, 192, 256-bit) MD5, SHA-1 Key Exchange Diffie Hellman Groups 1, 2, 5, 14 Route-based VPN Networking IP Address Assignment NAT Modes RIP, OSPF Static (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay 1:1, many:1, 1:many, flexible NAT (overlapping Ips), PAT, transparent mode VLAN Interfaces 512 Routing Protocols OSPF, RIPv1/v2, BGP*, static routes, policy-based routing, multicast QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p Authentication IPv6 VoIP XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, terminal services, Citrix Full H323-v1-5, SIP Standards TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE Hardware Power Supply Fans Display Input Power Dual, Redundant, Hot Swappable, 850W Dual, Redundant, Field Replaceable Front LCD Display VAC, Hz Maximum Power Consumption (W) Form Factor Dimensions 4U Rack Mountable 17x18x7 in (43x43.5x17.8 cm) Weight 58 lb (26.3 kg) 58 lb (26.3 kg) 61 lb (27.7 kg) 67 lb (30.3 kg) WEEE Weight 59 lb (26.8 kg) 59 lb (26.8 kg) 62 lb (28.1 kg) 68 lb (30.8 kg) Shipping Weight 79 lb (35.8 kg) 79 lb (35.8 kg) 82 lb (37.2 kg) 88 lb (39.9 kg) Major Regulatory Environment Humidity *Available with expanded license. All specifications, features and availability are subject to change. FCC Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cul, TUV/GS, CB, NOM, RoHS, WEEE F, 5-40 deg C 10-90% non-condensing 4

7 Network Security/Firewall Solutions SonicWALL s enterpriselevel E-Class Network Security Appliance (NSA) uses a multi-core microprocessor that can run Reassembly- Free Deep Packet Inspection full throttle without compromising network speed. SonicWALL Enterprise Solutions: E-Class NSA Series At-A-Glance The SonicWALL E-Class Network Security Appliance (NSA) Series integrates Reassembly-Free Deep Packet Inspection (RFDPI) technology* with multi-core specialized security microprocessors to deliver intrusion prevention, application intelligence, control and visualization, and anti-malware at wire speed so you do not have to sacrifice network performance. Combining a powerful deep packet inspection firewall with multiple layers of protection technology and a suite of high availability features, the E-Class NSA Series offers the ultimate choice for a variety of enterprise deployments including distributed environments, campus networks and data centers. The E-Class NSA appliances, deployed as either Next-Generation Firewalls or as Unified Threat Management Firewalls, are engineered to be the most scalable, high-performance and reliable multi-function threat appliances in their class. Taking protection to new levels of control, application intelligence, control and visualization capabilities offer a complete view into network traffic and a set of customizable policies affording administrators highly granular control over applications and users on the network. To meet the operational reliability enterprise-class networks demand, the E-Class NSA Series incorporates a suite of high availability features at the hardware and system levels to maximize uptime and improve security coverage. The E-Class NSA Series lowers management complexity by providing an extensive array of advanced network configuration features that ease deployment and integration. This makes E-Class NSA an ideal solution for organizations that require high-performance network security deployed across a wide variety of environments. The E-Class NSA Series delivers: n Enterprise-class deep packet inspection (DPI) and application intelligence, control and visualization for every packet, every protocol, over every interface n Revolutionary multi-core performance utilizing up to 16 cores for high-speed multi-layered threat protection over both external and internal networks n Ultimate scalability in eliminating threats across unlimited file sizes and unrestricted concurrent connections by utilizing a Reassembly-Free Deep Packet Inspection engine n Dynamically updateable and customizable security defense n Flexible yet secure virtual private networking (VPN) technologies include IPSec VPN for site-to-site connectivity and both SSL VPN and IPSec VPN client connectivity to enable secure remote access n Uncompromising business continuity and high availability protection *U.S. Patent 7,310,815; 7,600,257; 7,738,380; 7,835,361 5

8 Network Security/Firewall Solutions Network Security Solutions SonicWALL E-Class NSA Series SonicWALL NSA E8510 The SonicWALL Network Security Appliance (NSA) E8510 is a 10 Gbps enabled multi-core Next-Generation Firewall designed for enterprise networks requiring full deep packet inspection protection and application control without compromising performance. The NSA E8510 combines tightly integrated intrusion prevention, powerful application intelligence, control and visualization, as well as sophisticated malware protection. With the SonicWALL Reassembly- Free Deep Packet Inspection (RFDPI) engine, the NSA E8510 can analyze and control thousands of applications, even if they are encrypted with SSL. This exceptional combination of software sophistication and incredibly powerful hardware leaves little room for application traffic to hide on the network, since SonicWALL s RFDPI engine is capable of inspecting hundreds of thousands of connections simultaneously across all ports, with nearly zero latency and without file size limitations. SonicWALL NSA E8500 The SonicWALL E-Class Network Security Appliance (NSA) E8500, deployed as either a Next-Generation Firewall or as a Unified Threat Management Firewall, provides tightly integrated intrusion prevention, powerful application intelligence, control and visualization, and sophisticated anti-malware protection. With the patented SonicWALL Reassembly-Free Deep Packet Inspection (RFDPI)* engine, the NSA E8500 can analyze and control over 3,500 applications, even if they are encrypted with SSL. This exceptional combination of software sophistication and incredibly powerful hardware leaves little room for application traffic to hide on the network, since SonicWALL s RFDPI engine is capable of inspecting hundreds of thousands of connections simultaneously across all ports, with nearly zero latency and without file size limitations. SonicWALL NSA E7500 The SonicWALL E-Class Network Security Appliance (NSA) E7500, deployed as either a Next-Generation Firewall or as a Unified Threat Management Firewall, is designed to be a highly scalable, high-performance and reliable solution. This protection is enabled through the NSA E7500 s 16-core architecture, a parallel performance design for ultra high-speed threat protection and deployment scalability. Taking protection to new levels of control, SonicWALL s Application Intelligence, Control and Visualization offers a real-time view into network traffic and a set of customizable policies affording administrators highly granular control over applications and users on the network. The NSA E7500 comes standard with four gigabit copper Ethernet ports, four expandable SFP ports for deployment flexibility and an LCD management screen for instant configuration access. Operational reliability is delivered through a suite of high availability features at the hardware level with dual power supplies and fans and at the system level with stateful failover to dramatically improve uptime. The NSA E7500 offers enterprise customers an extensive array of advanced network and deployment flexibility features for use in large scale enterprise network deployments. SonicWALL NSA E6500 The SonicWALL E-Class Network Security Appliance (NSA) E6500, deployed as either a Next-Generation Firewall or as a Unified Threat Management Firewall, is engineered to meet the needs of the expanding enterprise network by providing a high-performance and scalable solution. The NSA E6500 takes advantage of specialized multi-core processing technology, providing parallel traffic processing, in conjunction with SonicWALL s Reassembly-Free Deep Packet Inspection engine. Now enterprise administrators have a high-performance secure platform to combat the changing threat landscape. Taking protection to new levels of control, SonicWALL s Application Intelligence, Control and Visualization offers a real-time view into network traffic and a set of customizable policies affording administrators highly granular control over applications and users on the network. The NSA E6500 comes standard with eight gigabit copper Ethernet ports for deployment flexibility and includes a management LCD screen for ease of deployment. 6

9 Network Security/Firewall Solutions SonicWALL NSA E5500 The SonicWALL E-Class Network Security Appliance (NSA) E5500, deployed as either a Next-Generation Firewall or as a Unified Threat Management Firewall, is a high-performance solution engineered to be the workhorse of the enterprise network environment. Taking advantage of SonicWALL s Reassembly-Free Deep Packet Inspection engine and eight-core processor technology providing parallel traffic processing, the NSA E5500 delivers exceptional deep packet inspection performance for enterprise networks. Taking protection to new levels of control, SonicWALL s Application Intelligence, Control and Visualization offers a real-time view into network traffic and a set of customizable policies affording administrators highly granular control over applications and users on the network. The NSA E5500 comes standard with eight gigabit copper Ethernet ports for deployment flexibility and includes a management LCD screen for ease of deployment. This solutions offers enterprise network administrators an array of enterprise networking features, designed to provide lowered management complexity and unrivalled value. SonicWALL SMB and Branch Office Solutions: NSA Series At-A-Glance The SonicWALL Network Security Appliance (NSA) Series combines the patented SonicWALL Reassembly-Free Deep Packet Inspection (RFDPI) engine with a powerful and massively scalable multi-core architecture to deliver intrusion prevention, gateway anti-virus, gateway anti-spyware, and application intelligence and control for businesses of all sizes. By integrating automated and dynamic security capabilities into a single platform, the NSA Series provides comprehensive protection without compromising performance. SonicWALL Network Security Appliance 4500 The SonicWALL Network Security Appliance (NSA) 4500 deployed as either a Next-Generation Firewall or a Unified Threat Management Firewall, is designed to meet the demands of corporate central-site and large distributed environments. Built upon a breakthrough Reassembly-Free Deep Packet Inspection engine and eight-core hardware platform for corporate networks and distributed environments, the NSA 4500 delivers real-time internal and external network protection without compromising network performance. The NSA 4500 combines high-speed intrusion prevention, file and content inspection and powerful application intelligence, control and visualization capabilities with an extensive array of advanced networking, stateful high availability and configuration flexibility. With six configurable gigabit Ethernet (GbE) interfaces and SonicWALL Clean VPN technology, the NSA 4500 is an ideal solution for corporate perimeter protection and remote access connectivity. The NSA 4500 also supports virtual local area networks (VLANs), enterprise-class routing and QoS features, further extending security and performance throughout the network. SonicWALL Network Security Appliance 3500 The SonicWALL Network Security Appliance (NSA) 3500, deployed as either a Next-Generation Firewall or a Unified Threat Management Firewall, is designed to meet the needs of corporate, branch office and distributed environments. Utilizing a breakthrough Reassembly-Free Deep Packet Inspection engine and multi-core hardware design with four cores and six gigabit Ethernet (GbE) interfaces, the NSA 3500 delivers real-time internal and external network protection without compromising network performance. The NSA 3500 combines high-speed intrusion prevention, file and content inspection and powerful application intelligence, control and visualization capabilities with an extensive array of advanced networking and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments. With its intuitive Web management interface and easy-to-use wizards, the NSA 3500 simplifies set-up and configuration. The NSA 3500 also supports virtual local area networks (VLANs), enterprise-class routing and QoS features, further extending security and performance throughout the network. 7

10 Network Security/Firewall Solutions SonicWALL SMB and Branch Office Solutions: NSA Series At-A-Glance SonicWALL Network Security Appliance 2400 The SonicWALL Network Security Appliance (NSA) 2400, deployed as either a Next-Generation Firewall or a Unified Threat Management Firewall, utilizes a breakthrough multi-core hardware design and Reassembly-Free Deep Packet Inspection technology with six gigabit Ethernet (GbE) interfaces to deliver real-time network protection without compromising performance. Designed for small- to medium-sized corporate and branch office networks, the NSA 2400 offers best-inclass threat prevention, rapid deployment and lowered TCO. The NSA 2400 combines high-speed intrusion prevention, file and content inspection and powerful application intelligence, control and visualization capabilities with an extensive array of advanced network and configuration flexibility features in an accessible, affordable platform that is easy to deploy and manage in a wide variety of environments. SonicWALL Network Security Appliance 240 The SonicWALL NSA 240, deployed as either a Next-Generation Firewall or a Unified Threat Management Firewall for small- to medium-sized businesses and branch offices, integrates gigabit Ethernet (GbE), multi-core hardware and SonicWALL s Reassembly-Free Deep Packet Inspection engine for network protection without compromising performance. The NSA 240 combines Clean VPN threat prevention, file and content inspection, application intelligence, control and visualization, future-proofed extensibility and high availability. Ideal for distributed environments requiring high security, performance, rapid implementation, and lower TCO, the NSA 240 offers advanced networking, multiple WAN redundancy and flexible configuration features in a cost-effective solution that is easy to deploy and manage. 8

11 Network Security/Firewall Solutions SonicWALL Network Security Appliances SonicWALL E-Class Network Security Appliances Feature NSA 240 NSA 2400 NSA 3500 NSA 4500 NSA E5500 NSA E6500 NSA E7500 NSA E8500 NSA E8510 SonicOS Supported SonicOS SonicOS SonicOS SonicOS SonicOS SonicOS SonicOS SonicOS SonicOS Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.6 Enhanced 5.81 (or higher) (or higher) (or higher) (or higher) (or higher) (or higher) (or higher) (or higher) (or higher) Users and Nodes Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Unrestricted Network Interfaces 3 GbE/6 FE Copper Ports, (6) 10/100/1000 (6) 10/100/1000 (6) 10/100/1000 (8) 10/100/1000 (8) 10/100/1000 (4) SFP (SX, LX or TX), (4) SFP (SX, LX or TX), (2) SFP+ 10GbE, 1 Console Interface, Copper Gigabit Copper Gigabit Copper Gigabit Copper Gigabit Ports, (4) 10/100/1000 GbE, (4) 10/100/1000 GbE, (4) 10/100/1000 GbE, (4) 10/100/1000 GbE, 2 USB, Ports, Ports, Ports, 1 GbE HA Interface, 1 GbE HA Interface, 1GbE HA Interface, 1GbE HA Interface, 1 GbE HA Interface, 1 PC Card slot 1 Console Interface, 1 Console Interface, 1 Console Interface, 1 Console Interface, 1 Console Interface, 2 USB, 1 Console 2 USB, 1 Console 2 USB, 1 Console (3G/Modem) 2 USB (Future Use) 2 USB 2 USB 2 USB 2 USB Interface Interface Interface Power Supply External 36W Single 180W ATX Single 180W ATX Single 180W ATX Single 250W ATX Single 250W ATX Dual 250W ATX, Dual 250W ATX, Dual 250W ATX, Hot Swappable Hot Swappable Hot Swappable Cooling System (Fans) No Fans 2 Fans 2 Fans 2 Fans Dual Fans, Dual Fans, Dual Fans, Dual Fans, Dual Fans, Hot Swappable Hot Swappable Hot Swappable Hot Swappable Hot Swappable VLAN Interfaces 10/25* High Availability Active/Passive Active/Passive Active/Passive Active/Passive Active/Passive Active/Passive Active/Passive Active/Passive Active/Passive with Optional with Optional with Optional with State Sync with State Sync, with State Sync, with State Sync, with State Sync, with State Sync, State Sync State Sync State Sync Active/Active DPI Active/Active DPI Active/Active DPI Active/Active DPI Active/Active DPI with State Sync with State Sync with State Sync with State Sync with State Sync Stateful Throughput Mbps 775 Mbps 1.5 Gbps 2.75 Gbps 3.9 Gbps 5.0 Gbps 5.6 Gbps 8.0 Gbps 8.0 Gbps 3DES/AES Throughput Mbps 300 Mbps 625 Mbps 1.0 Gbps 1.7 Gbps 2.7 Gbps 3.0 Gbps 4.0 Gbps 4.0 Gbps Gateway Anti-Virus 115 Mbps 160 Mbps 350 Mbps 690 Mbps 1.0 Gbps 1.69 Gbps 1.84 Gbps 2.25 Gbps 2.25 Gbps Throughput 3 Intrusion Prevention 195 Mbps 275 Mbps 750 Mbps 1.4 Gbps 2.0 Gbps 2.3 Gbps 2.58 Gbps 3.7 Gbps 3.7 Gbps Throughput 3 Full DPI Performance Mbps 150 Mbps 240 Mbps 600 Mbps 850 Mbps 1.59 Gbps 1.7 Gbps 2.2 Gbps 2.2 Gbps IMIX Performance Mbps 235 Mbps 580 Mbps 700 Mbps 1.1 Gbps 1.4 Gbps 1.6 Gbps 2.0 Gbps 2.0 Gbps New Connections Per Second 2,000 4,000 7,000 10,000 30,000 60,000 64,000 85,000 85,000 Maximum Connections 85,000/110,000* 225, , , ,000 1,000,000 1,500,000 1,500,000 1,500,000 Maximum DPI 32,000/50,000* 125, , , , ,000 1,000,000 1,250,000 1,250,000 Connections Site-to-Site VPNs 25/50* ,500 4,000 6,000 10,000 10,000 10,000 Zone Security Object-based Management Policy-based NAT Multiple ISP Failover Load Balancing Integrated Wireless Switch and Controller 3G Wireless Failover Policy-based Routing Comprehensive Optional Optional Optional Optional Optional Optional Optional Optional Optional Anti-Spam Service Voice over IP (VoIP) IKEv2 VPN Secure Remote Management (SSHv2 Support) SSL VPN and IPSec VPN Remote Access Clients Virtual Assist Technicians 30-day Trial Route-based VPN TSA User Authentication Dynamic Address Objects Layer 2 Bridge Mode 802.1q VLANs RIPv2 and OSPF Routing Single Sign-On (SSO) Application Intelligence Optional Optional Optional Optional Optional Optional Optional and Control Deep Packet Optional Optional Optional Optional Optional Optional Optional Inspection SSL SSL Control IPv6 4 Application Visualization NetFlow/IPFIX Link Aggregation Port Redundancy 1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. 2 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. 4 IPv6 functionality requires separate firmware. 5 Static Link Aggregation. * With Stateful HA and Expansion Upgrade. 9

12 Network Security/Firewall Solutions SonicWALL SMB and Branch Office Solutions: NSA 2400MX SonicWALL Network Security Appliance 2400MX The all-new NSA 2400MX delivers robust, high-performance security on a Unified Threat Management (UTM) Firewall that features a breakthrough Reassembly-Free Deep Packet Inspection technology and multi-core hardware design to deliver real-time comprehensive network protection, high-speed intrusion prevention, file and content inspection, and powerful application intelligence and control capabilities, all without compromising performance. At the same time, the NSA 2400MX also provides flexible, intelligent switching capabilities with its unique PortShield architecture, increased port density with 26 interfaces, and advanced switching, routing, networking and connectivity features. The NSA 2400MX also supports integrated virtual private networks (VPNs), virtual local area networks (VLANs), standards-based Voice over IP (VoIP), dynamic routing and Quality of Service (QoS) features, further extending security and performance through the network environment. Feature SonicOS Supported Users and Nodes SonicOS Enhanced 5.7 (or higher) Unrestricted Network Interfaces (16) 10/100, (10) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB, 2 Module Slots (For Future Use) Power Supply Cooling System (Fans) Single 180W ATX 2 Fans VLAN Interfaces 25 High Availability Stateful Throughput 1 3DES/AES Throughput 2 Gateway Anti-Virus Throughput 3 Intrusion Prevention Throughput 3 UTM Performance 3 IMIX Performance 3 Optional Active/Passive with State Sync 775 Mbps 300 Mbps 160 Mbps 275 Mbps 150 Mbps 235 Mbps New Connections 4,000 Per Second Maximum 225,000 Connections Maximum UTM 125,000 Connections Switching Features VLAN Trunking, Rapid Spanning Tree, Layer 2 Discovery, Link Aggregation, Port Mirroring, Layer 2 QoS, Rate Control, Port Security Site-to-Site VPNs 75 Bundled Global VPN 10 (250) Client Licenses (Maximum) Bundled SSL VPN 2 (25) Licenses (Maximum) Bundled Virtual Assist 1 (5) Technicians (Maximum) Zone Security Object-based Management Policy-based NAT Multi-WAN Multiple ISP Failover Load Balancing Integrated Wireless Switch and Controller Policy-based Routing 3G Wireless Failover Comprehensive Optional Anti-Spam Service (CASS v.1.0 Only) Voice over IP (VoIP) IKEv2 VPN Secure Remote Management (SSHv2 Support) SSL VPN and IPSec VPN Remote Access Clients Virtual Assist Technicians Route-based VPN Multiple SSIDs using VAP Dynamic Address Objects Terminal Services User Authentication 802.1q VLANs RIPv2 and OSPF Routing Single Sign-On (SSO) Application Intelligence Optional SSL Control IPv6 Ready 1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. 2 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. 10

13 Network Security/Firewall Solutions The TZ Series is the ultimate total security platform for distributed environments, including remote and branch offices, SMBs, and retail/pos deployments. SonicWALL Branch Office and SMB Solutions: TZ Series At-A-Glance By integrating gateway anti-virus, anti-spyware, intrusion prevention, content filtering, anti-spam and application control, the SonicWALL TZ Series of Unified Threat Management (UTM) Firewalls shatters the limitations of stateful packet inspection firewalls by offering high performance multi-layered network protection. SonicWALL Application Intelligence and Control empowers IT with highly granular control over applications and users, bandwidth management, easy to use pre-defined application categories and real-time traffic visualization, regardless of port and protocol. Utilizing SonicWALL s unique Reassembly-Free Deep Packet Inspection (RFDPI) technology, the TZ Series delivers in-depth protection at unparalleled performance. The TZ Series also provides IPSec and SSL VPN remote access, VoIP, and b/g/n wireless, and 3G wireless failover and multi-wan connectivity. Designed for the needs of small businesses, branch offices, distributed enterprise sites, retailers and managed service providers, the TZ Series supports the highest speeds available from modern ISPs while delivering full UTM protection. Every TZ Series appliance packs the benefits of SonicWALL s SonicOS operating system into an affordable desktop appliance, providing business-class performance, advanced features and configuration flexibility. Standard on the TZ 210, TZ 200 and TZ 100 Series, feature-rich SonicOS Enhanced adds a suite of redundancy, management and wireless LAN features typically associated with more expensive appliances including ISP failover, load balancing, object/ zone-based management, policy-based NAT, route-based VPN and more. TZ Series appliances are easily managed remotely as part of a multi-firewall and VPN environment through a Web interface or using the industry-leading SonicWALL Global Management System (GMS). Every TZ Series appliance is available as a SonicWALL TotalSecure solution, a convenient and affordable solution that combines the hardware and all the services needed for comprehensive network protection from a wide range of network threats including viruses, spyware, worms, Trojans, keyloggers and other malicious threats. Together, these components form a Unified Threat Management (UTM) Firewall that delivers exceptional security to protect against emerging threats. SonicWALL TZ 210 Series The flagship of the revolutionary TZ Series, the TZ 210 Series, deployed as either a Next-Generation Firewall or Unified Threat Management Firewall, builds upon the TZ 200 and delivers our most sophisticated and future-proofed TZ Series offering. The TZ 210 infrastructure offers dual Gigabit Ethernet interfaces for the WAN and the primary LAN that can act independently or as part of the five-port 10/100 switch. Activating the Comprehensive Gateway Security Suite on the TZ Series enables powerful application intelligence, control and visualization to provide application-level access control over Web 2.0 applications such as social networking sites, application inspection, bandwidth management and throttling and data leakage prevention. The TZ 210 delivers the extraordinary redundancy and flexibility of dual USB ports for 3G and analog modem failover, integrated SSL VPN capabilities, as well as the future-proofed speed and powerful protection of 50 Mbps of full Unified Threat Management performance, 40% faster 1 than the TZ 200. The TZ 210 Wireless-N also integrates ultra-fast n wireless LAN capabilities. The TZ 210 is the most comprehensive network security appliance available to SMBs at a price point under $1,

14 Network Security/Firewall Solutions SonicWALL TZ 200 Series The new TZ 200 Series builds upon the TZ 100 delivering critical business continuity and flexibility through a host of advanced features. The TZ 200 adds critical failover capabilities that can provide 24x7 access to keep your organization up and running, with support for USB-based 3G and analog failover and box-to-box failover. Like the TZ 100, the TZ 200 comes pre-bundled with a single SSL VPN tunnel and is upgradeable to ten. The TZ 200 also adds SonicWALL Comprehensive Anti-Spam Service including sophisticated per-user mailbox quarantine capabilities as a complement to UTM, adding customization at a lower cost. The higher-performance TZ 200 significantly boosts memory and processor power to support all these additional features while running 40% faster 1 than the TZ 100. The TZ 200 Wireless-N version incorporates highspeed n. The entire TZ 200 Series delivers powerful, enterprise-class features that are normally only found in enterprise-priced offerings, all available for a low total cost of ownership. SonicWALL TZ 100 Series The TZ 100 is the entry point of the fifth-generation TZ Series, making high performance Unified Threat Management available and affordable for everyone. It features a powerful stateful packet inspection firewall plus an advanced Reassembly-Free Deep Packet Inspection engine capable of delivering SonicWALL s newly expanded comprehensive protection without compromising network throughput. The TZ 100 provides SMBs and distributed enterprises with a UTM protection lineup of gateway anti-virus, anti-spyware, intrusion prevention, anti-spam and advanced content filtering. The TZ 100 Series provides secure remote access by including a single SSL VPN tunnel that is upgradeable to five along with five configurable 10/100 interfaces. The TZ 100 Wireless- N version adds high-speed n. Plus, all TZ Series appliances support an integrated wireless switch controller to add managed distributed wireless to any network. 1 UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. 12

15 Network Security/Firewall Solutions Feature TZ 100 TZ 200 TZ 210 Series Series Series Nodes 1Unrestricted Unrestricted Unrestricted Network Interfaces 5 Fast Ethernet 5 Fast Ethernet, 2 Gigabit Ethernet 1 USB 5 Fast Ethernet, 2 USB Stateful Packet Inspection Throughput Mbps 100 Mbps 200 Mbps UTM Throughput 3 25 Mbps 35 Mbps 50 Mbps 3DES/AES Throughput 2 75 Mbps 75 Mbps 75 Mbps Maximum Connections 6,000 12,000 30,000 Maximum UTM Connections 6,000 12,000 20,000 Site-to-Site VPN Tunnels Remote Access IPSec VPN Tunnels (Max) Remote Access IPSec VPN Tunnels (Bundled) Optional Upgrade 2 2 Remote Access SSL VPN Tunnels (Max) Remote Access SSL VPN Tunnels (Bundled) Virtual Assist Technicians (Max) N/A 1 2 Virtual Assist Technicians (Bundled) N/A 0 0 VLAN Interfaces Zone Security Object-based Management Policy-based NAT Multiple ISP Failover ISP Failover Hardware Failover No Active/Passive Active/Passive Load Balancing Layer 2 Wireless Bridging Wireless Switch and Controller Virtual Access Points (VAPs) Integrated Access Point Optional n Optional n Optional n Comprehensive Anti-Spam Service Optional Optional Optional Voice over IP (VoIP) PortShield Security Route-based VPN 3G Wireless Failover N/A Bandwidth Management Application Intelligence and Control No No Application Visualization No No NetFlow/IPFIX Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. 2 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. 4 Virtual Access Points (VAPs) are supported on the integrated wireless radio only. 5 Please consult latest release notes for availability. 13

16 Network Security/Firewall Solutions SonicWALL Clean Wireless Solution SonicWALL makes wireless networking secure, simple and affordable with the innovative SonicWALL Clean Wireless Solution the first total security solution that integrates n and a/b/g wireless management with best-in-class Unified Threat Management (UTM) security and application intelligence, control and visualization to provide application based policy control. SonicWALL SonicPoint-N Series wireless access point devices and SonicWALL Power over Ethernet (PoE) Injectors complement our award-winning line of firewall appliances to flexibly extend comprehensive security across wireless networks. The SonicWALL Clean Wireless solution goes beyond mere secure wireless solutions by making wireless networks as secure as wired networks using deep packet inspection, delivering dual protection to secure the wireless network by encrypting wireless traffic and decontaminating it from network threats while also protecting the network from wireless attacks. The SonicPoint-Ni, SonicPoint-Ne and SonicPoint-N Dual-Radio are access points that are utilized to provide seamless, secure wireless LAN (WLAN) connectivity as well as advanced features and services. SonicWALL lowers total cost of ownership (TCO) by enabling administrators avoid implementing and separately managing an expensive wireless-specific solution that runs in parallel to their existing wired network. SonicWALL-N Dual-Radio SonicWALL SonicPoint-N Dual-Radio discreetly secures distributed wireless networks across 2.4 and 5 GHz bands. It s Clean Wireless technology integrates enforced a/b/g/n management with Reassembly-Free Deep Packet Inspection. SonicPoint-N Dual-Radio delivers a combined throughput of up to 600 Mbps, for greater security and productivity. SonicPoint-Ne Dual-Band SonicWALL SonicPoint-Ne Dual-Band access points integrate a/b/g/n management and enforcement features with Reassembly-Free Deep Packet Inspection, for flexible deployment into SonicWALL Clean Wireless networks. Flexible deployment options include both 802.3af Power over Ethernet (PoE), where an electrical outlet is not readily available, and direct power through an AC adapter. Ideal for hospitals or clinics, professional offices and other deployment scenarios that require discreet wireless deployment with light and logo covers, silent operation and controllable LED (except power). SonicPoint-Ni Dual-Band SonicWALL SonicPoint-Ni Dual-Band access points integrate a/b/g/n management and enforcement features with Reassembly-Free Deep Packet Inspection technology to secure highly discreet SonicWALL Clean Wireless network environments. Ideal for hospitals or clinics, professional offices and other deployment scenarios that require discreet wireless deployment with internal antennas, light and logo covers silent operation and controllable LED (except power). PoE Injector The SonicWALL PoE Injector is an IEEE 802.3af compliant power injector featuring an advanced auto-sensing algorithm that automatically detects the presence of PoE-compatible devices and injects the appropriate power into the data cable. A plug-and-play device, the PoE Injector fits easily into wireless Ethernet infrastructures and requires no configuration or management

17 Network Security/Firewall Solutions GAV/ Anti-Spyware/ IPS Content Filtering Service Enforced Client Anti-Virus and Anti-Spyware Advanced Security Services for Network Security Solutions SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Intelligence and Control Service SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Intelligence and Control Service delivers intelligent, real-time network security protection against a comprehensive array of dynamic threats including viruses, spyware, worms, Trojans and software vulnerabilities such as buffer overflows, as well as backdoor exploits and other malicious code. As an added layer of security, this powerful solution provides application layer attack protection not only against external threats, but also against those originating inside the network. SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service closes potential backdoors by inspecting over a multitude of , Web, file transfer and stream-based protocols as well as instant messaging (IM) and peer-to-peer (P2P) applications. SonicWALL Application Intelligence and Control provides granular control and real-time visualization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity. SonicWALL Content Filtering Service SonicWALL Content Filtering Service (CFS) provides businesses and schools with greater control to transparently enforce productivity and protection policies and block inappropriate, illegal and dangerous Web content. Featuring a dynamic rating and caching architecture, SonicWALL CFS blocks multiple categories of objectionable Web content, providing the ideal combination of control and flexibility to ensure the highest levels of productivity and protection. SonicWALL Enforced Client Anti-Virus and Anti-Spyware and SonicWALL Client/Server Anti-Virus Suite SonicWALL Enforced Client Anti-Virus and Anti-Spyware provides comprehensive virus and spyware protection with little administrative overhead. This product delivers enforced and auto-updated endpoint protection through automatic system-wide updates of virus definitions and software, eliminating machine-by-machine deployments. Combining the enforced client product with advanced server protection, SonicWALL Client/Server Anti-Virus Suite provides virus protection for Windows-based file, print, message and exchange servers. SonicWALL anti-virus solutions reduce the time and costs associated with administering an anti-virus policy throughout your entire network. SonicWALL Comprehensive Anti-Spam Service SonicWALL Comprehensive Anti-Spam Service (CASS) offers small- to medium-sized businesses comprehensive protection from spam and viruses, instantly deployed over existing SonicWALL network security appliances. CASS speeds deployment, eases administration and reduces overhead by consolidating solutions, providing one-click anti-spam services, with advanced configuration in just ten minutes. SonicWALL DPI SSL SonicWALL Deep Packet Inspection of SSL-encrypted traffic (DPI SSL) transparently decrypts and scans both inbound and outbound HTTPS traffic using SonicWALL RFDPI. The traffic is then re-encrypted and sent to its original destination if no threats or vulnerabilities are discovered. SonicWALL Virtual Assist SonicWALL Virtual Assist is a remote support tool that enables a technician to assume control of a customer s PC or laptop in order to provide technical assistance. With the customer s permission, the technician can gain instant access to the computer using a Web browser, making it easy to diagnose and fix a problem remotely. The easy-to-use customer Web portal provides a familiar look and feel for both Windows and Mac customers. Furthermore, the technician and standalone client facilitates the management and scheduling of the support queue. SonicWALL Virtual Assist allows tight integration by leveraging existing network and authentication infrastructures. 15

18 Network Security/Firewall Solutions Global VPN Client SonicOS Enhanced Software for Network Security Appliance SonicWALL VPN Clients For remote client-to-host secure access, SonicWALL offers both SSL VPN and IPSec VPN connectivity options. For SSL VPN, SonicWALL NetExtender allows for clientless remote access for Windows, Mac and Linux-based systems utilizing a Web portal to provide connectivity and access. For IPSec VPN, SonicWALL Global VPN Client enables the client system to download the VPN client for a more traditional client-based VPN experience. Firmware for Network Security Appliance SonicOS Enhanced Firmware SonicOS Enhanced is the powerful next-generation operating system from SonicWALL, integrating a host of advanced features to meet the business continuity, configuration flexibility and management requirements of complex networks today and into the future. WAN Acceleration Solutions SonicWALL WAN Acceleration Solutions The SonicWALL WAN Acceleration Appliance (WXA) Series reduces application latency and conserves bandwidth, significantly enhancing WAN application performance and user experience for small- to medium-sized organizations with remote and branch offices. After initial data transfer, the WXA Series dramatically reduces all subsequent traffic by transmitting only new or changed data across the network. The WXA de-duplicates data traversing the WAN, remembers previously transferred data, and replaces repeated byte sequences with an identifier, thus reducing application latency and conserving bandwidth. Other acceleration features include data caching, file de-duplication, metadata caching and data-in-flight compression. The WXA Series is comprised of the WXA 500 Live CD, WXA 2000 and WXA 4000 hardware appliances, and WXA 5000 Virtual Appliance. Unlike standalone WAN acceleration products, WXA solutions are integrated add-ons to SonicWALL E-Class Network Security Appliance (NSA), NSA and TZ Series appliances that are deployed as Next-Generation Firewalls. This integrated solution streamlines the placement, deployment, configuration, routing, management and integration of the WXA with other components, such as VPNs. When deployed in conjunction with SonicWALL Application Intelligence and Control Service, the WXA offers the unique combined benefit of both prioritizing application traffic and minimizing traffic between sites, resulting in optimal network performance. SonicWALL WXA 500 Live CD The WXA 500 Live CD supports flexible deployment via a bootable Live CD. SonicWALL WXA 2000 The WXA 2000 accelerates network performance for up to 120 users and 600 WAN optimization flows. SonicWALL WXA 4000 The WXA 4000 accelerates network performance for up to 240 users and 1,200 WAN optimization flows

19 WAN Acceleration Solutions SonicWALL WAN Acceleration Solutions SonicWALL WXA 5000 Virtual Appliance The WXA 5000 supports flexible virtual machine deployments in VMWare environments. Features WXA 500 Live CD WXA 2000 WXA 4000 WXA 5000 Virtual Appliance Platform Software/CD Hardware Appliance Hardware Appliance Virtual Appliance (VMWare) Maximum Users (See footnote 3 below) Maximum Flows ,200 (See footnote 3 below) Byte Caching TCP/File Compression Management TCP Visualization Requires SonicOS or later WFS Acceleration 2 SNMP Syslog Operating System Hardened SonicWALL Linux OS Rack-mount Chassis 1 RU CPU Intel 2.0GHz Intel Dual Core 2.0GHz RAM 2 GB 4 GB Hard Drive 250 GB 2x250 GB Redundant Disk Array (RAID) RAID 1 Dimensions 17.0 x 16.4 x 1.7 in/43.18 x x 4.44 cm Weight 16 lbs/7.26 kg WEEE Weight 16 lbs/7.37 kg Power Consumption (Watts) BTUs MTBF (Years) Hypervisor Operating System Installed Minimum CPU Allocated Memory Applied Disk Size VMware Hardware Compatibility Guide WXA 5000 Virtual Appliance Only ESX and ESXi (version 4.0 and newer) Hardened SonicLinux 2 x 1.6 GHz 4 GB 250 GB resources/compatibility/ search.php 1 Maximum users may vary depending on the number of flows being generated per user. 2 WFS Acceleration is available only when the Live CD image is installed on the provided hardware. 3 The virtual appliance hardware outlined above supports approximately 120 users with 600 flows. Max users and flows for the Virtual Appliance may vary depending on the provided hardware configuration. 17

20 Secure Remote Access Solutions SonicWALL Secure Remote Access delivers granular access control while remaining easy-to-use and SonicWALL Secure Remote Access Solutions The traditional corporate LAN is evolving into a distributed global network that connects employees, partners and customers over multiple Internet, intranet, extranet and VoIP channels. The modern mobile workforce demands more solutions for secure access to more resources from more remote devices including smartphones and platforms than ever before. SonicWALL provides scalable Secure Remote Access solutions to fit every organization from small- to medium-sized businesses to large global enterprises. SonicWALL Aventail E-Class SSL Secure Remote Access Series and SonicWALL Secure Remote Access Series for the SMB deliver flexible solutions for secure remote access, disaster recovery, wireless networking and secure extranets, and can be deployed as hardware or a virtual appliance. manage for the enterprise. SonicWALL Aventail E-Class SRA Series At-A-Glance SonicWALL Aventail E-Class Secure Remote Access (SRA) Series increases productivity with its easy-to-use access capability and reduce IT overhead costs by enforcing granular control while being easy to manage. Recognized by top analysts as an industry leader, SonicWALL Aventail s award-winning SSL VPNs answer the secure remote access needs of today s increasingly mobile enterprise. Offering a single, centrally-managed gateway or a virtual appliance in a VMWare environment to control access to network resources, SonicWALL Aventail SRA appliances deliver robust solutions by providing: n Secure remote access to mission-critical applications and resources from a wide range of endpoint device platforms, including Macintosh, Linux, Google Android, Microsoft Windows 7 and Microsoft Windows Mobile n Clientless browser access or Web-delivered thin client access for an in-office experience n Business continuity and disaster recovery during unexpected disruptions n Centralized secure access control for wireless networks supporting multiple device platforms n Secure access to business partner extranets to enhance collaborative productivity n Policy enforcement across disparate entry points, allowing granular access control n Even greater control over portal access, content and design with the newly-enhanced SonicWALL Workplace Portal n Enhanced security that detects inherent risks of an endpoint prior to authentication; protects resources with granular policy based on that user and endpoint; and then connects the user only to authorized resources n Recurring End Point Control scans at user login and administrator-defined intervals to ensure ongoing endpoint integrity n Unsurpassed levels of granular control that enforces access based on the trust for the user, the trust for the device used for access and the applications that the user needs to access. n A solid foundation for Network Access Control (NAC) today and in the future Secure Remote Access Solutions SonicWALL Aventail E-Class SRA Series SonicWALL Aventail E-Class SRA EX7000 The SonicWALL Aventail E-Class SRA EX7000 is a clientless SSL VPN solution that delivers secure, easy-to-manage remote access control for the mobile enterprise, supporting up to 5,000 concurrent users from a single appliance. The EX7000 increases user productivity and maximizes IT control by providing authorized access to any application from a broad range of cross-platform devices. SonicWALL Aventail E-Class SRA EX6000 The SonicWALL Aventail E-Class SRA EX6000 is a clientless SSL VPN solution that delivers secure, easy-to-manage remote access control for mid-size companies and enterprise departments that require up to 250 concurrent users. The EX6000 provides easy secure access to more applications from more devices and locations, while ensuring easy administrative control through one gateway, reducing deployment and management costs. 18