SonicWALL Internet Security Appliance Guide Page 9
SonicWALL Internet Security Appliance Features
Internet Security
•
ICSA-Certified Firewall
After undergoing a rigorous suite of tests to expose security vulnerabilities, the
SonicWALL Internet security appliance has received Firewall Certification from
ICSA, the internationally-accepted authority on network security. The SonicWALL
uses stateful packet inspection, the most effective method of packet filtering, to
protect your LAN from hackers and vandals on the Internet.
•
Hacker Attack Prevention
The SonicWALL automatically detects and thwarts Denial of Service (DoS) attacks
such as Ping of Death, SYN Flood, LAND Attack, and IP Spoofing.
•
Network Address Translation (NAT)
Network Address Translation (NAT) translates the IP addresses used on your
private LAN to a single, public IP address that is used on the Internet. NAT allows
multiple computers to access the Internet, even if only one IP address has been
provided by your ISP.
•
Network Access Rules
The default Network Access Rules allow traffic from the LAN to the Internet and
block traffic from the Internet to the LAN. You may create additional Network
Access Rules that allow inbound traffic to network servers, such as Web and mail
servers, or that restrict outbound traffic to certain destinations on the Internet.
•
Auto Update
The SonicWALL maintains the highest level of security by automatically notifying
you when new firmware is released. When new firmware is available, the
SonicWALL Web Management Interface displays a link to download and install the
latest firmware. The SonicWALL also send an E-mail with firmware release notes.
•
DMZ Port
SonicWALL GX250 and the SonicWALL GX650 include a DMZ port allowing users to
access public servers, such as Web and FTP servers. While Internet users have
unlimited access to the DMZ, the servers located on the DMZ are still protected
against DoS attacks.
Content Filtering
•
SonicWALL Content Filtering Overview
You may use the SonicWALL's Web content filtering to enforce your company's
Internet access policies. The SonicWALL blocks specified categories, such as
violence or nudity, using a Content Filter List. Users on your network can bypass
the Content Filter List by authenticating with a unique user name and password.
integrated_manual.book Page 9 Wednesday, June 13, 2001 6:21 PM
