background image

Features

Intrusion prevention

Feature Description

 

Signature-based 

Tightly integrated, signature-based intrusion prevention scans packet payloads for vulnerabilities  

 

scanning and exploits that target critical internal systems. 

Automatic signature 

Dell SonicWALL’s Research Team continuously updates and deploys an extensive list of over 5,400  

updates 

IPS signatures covering 52 attack categories. These signatures take immediate effect and do not  

 

require reboots or any other interruption in service. 

Outbound threat 

The ability to inspect both inbound and outbound traffic ensures that the network will not  

prevention 

unwittingly be used in Distributed Denial of Service attacks and will prevent any Command and  

 

Control Botnet communication.  

Intra-zone IPS 

Intrusion prevention can be deployed between internal security zones to protect sensitive servers  

protection 

and to prevent internal attacks.

VPN

IPSec VPN for site- 

High-performance IPSec VPN  allows the firewall to connect remote branch offices to a central  

to-site connectivity  

location. 

 

SSL VPN or IPSec 

Utilize clientless SSL VPN technology or an easy-to-manage IPSec client for easy access to email,  

client remote access 

files, computers, intranet sites and applications from a variety of platforms.  

Redundant VPN 

When using multiple WANs, a primary and secondary VPN can be configured to allow seamless  

gateway 

automatic failover and failback of all VPN sessions. 

Route-based VPN 

The ability to perform dynamic routing over VPN links ensures continuous uptime in the event of  

 

temporary VPN tunnel failure by seamlessly re-routing traffic between endpoints through alternate routes. 

Clean VPN 

Dell SonicWALL Clean VPN™ both secures the integrity of VPN access and decontaminates    

 

malicious threats before they can enter the corporate network. 

Gateway threat prevention

Gateway anti-malware 

Dell SonicWALL’s patented RFDPI engine scans all ports and protocols for viruses without file size  

 

or stream length limitation. SonicLabs Researchers constantly provide updated threat protection,  

 

providing faster response times and threat prevention. 

Reassembly-Free 

Reassembly-Free Deep Packet Inspection keeps track of malware regardless of the order or    

Deep Packet (RFDPI)  

inspection timingwith which the packets arrive. This allows for extremely low latency while 

 

eliminating file and stream size limitations. This provides greater performance and security than  

 

outdated proxy designs which reassemble contents using sockets bolted to traditional anti-virus  

 

programs and are plagued with inefficiencies and the overhead of memory thrashing leading to  

 

high latency, low performance and size limitations.

Cloud anti-virus 

Using the built-in RFDI engine, Dell SonicWALL can leverage the power of the cloud to provide the  

 

most comprehensive set of anti-malware signatures available, while minimizing latency or delay.  

 

The Dell SonicWALL Cloud Anti-Virus Service provides millions of additional malware signatures for  

 

inspection of executable files using the most up-to-date information available.

Bi-directional 

RFDPI can be performed on both inbound and outbound connections to provide protection in all  

Inspection 

networktraffic directions.

24x7 signature 

SonicLabs Research Team team creates and updates signature databases that are propagated 

updates 

automatically  to the firewalls in the field, with those signatures taking immediate effect without  

 

any reboot or service interruption required.

Firewall and networking

Stateful packet inspection  All network traffic is inspected, analyzed and brought into compliance with firewall access policies. 
DOS attack protection 

SYN Flood protection provides defense against DOS attacks using both layer 3 SYN proxy and  

 

layer 2 SYN blacklisting technologies. 

Flexible deployment 

Can be deployed in traditional NAT and Layer 2 Bridge modes.  

Policy-based routing 

Create routes based on protocol to direct traffic to a preferred WAN connection with the ability  

 

to fail backto a secondary WAN in the event of an outage. 

High availability 

Supports Active/Passive failover to ensure increased reliability by protecting against hardware or  

 

software faults.

WAN load balancing 

Load balance up to four WAN interfaces using Round Robin, Spillover or Percentage based methods.

WAN acceleration 

WAN Acceleration decreases latency and increases transfer speeds between remote sites for even  

 

higher network efficiency gains.

6

Содержание TZ 105

Страница 1: ...ean VPN which decontaminates threats from VPN traffic Providing the most secure support for mobile platforms only Dell SonicWALL delivers full malware scanning of SSL encrypted traffic and application control for Android and iOS devices The new TZ Series is an elegant integration of multiple point products combined into a single solution providing value while reducing complexity About Dell SonicWA...

Страница 2: ...rate security co processors or Application Specific Integrated Circuits ASIC which can t keep up with evolving complex attacks in real time from both inside and outside the network perimeter The advanced high performance dual core architecture makes the TZ Series the fastest solution in its class with performance levels of up to 500 Mbps of stateful throughput 110 Mbps deep packet inspection throu...

Страница 3: ...increased productivity gains without the increased cost Dell SonicWALL TZ 105 home office small office Hardware description TZ 105 TotalSecure 1 year 01 SSC 4906 TZ 105 Wireless N TotalSecure International 1 year 01 SSC 4910 Service description Comprehensive Gateway Security Suite 1 year 01 SSC 4877 Gateway Anti Virus Intrusion Prevention and Application 01 SSC 4844 Control 1 year Content URL Filt...

Страница 4: ...ail Hardware description SKU TZ 205 01 SSC 6945 TZ 205 Wireless N International 01 SSC 4883 TZ 205 TotalSecure 1 year 01 SSC 4890 TZ 205 Wireless N TotalSecure International 1 year 01 SSC 4894 Service description SKU Comprehensive Gateway Security Suite 1 year 01 SSC 4838 Gateway Anti Virus Intrusion Prevention and Application 01 SSC 4799 Control 1 year Content URL Filtering 1 year 01 SSC 4805 Com...

Страница 5: ...lware intrusion prevention application control and URL filtering driving down cost and complexity It provides a dual core architecture delivering full deep packet inspection DPI without diminishing network performance thus eliminating bottlenecks that other products introduce enabling businesses to realize increased productivity gains The TZ 215 also provides application control to ensure bandwidt...

Страница 6: ...Reassembly Free Reassembly Free Deep Packet Inspection keeps track of malware regardless of the order or Deep Packet RFDPI inspection timingwith which the packets arrive This allows for extremely low latency while eliminating file and stream size limitations This provides greater performance and security than outdated proxy designs which reassemble contents using sockets bolted to traditional anti...

Страница 7: ...ful troubleshooting and forensics capabilities TZ 215 only Application signature A continuously expanding database of over 3 500 application signatures ensures that database administrators are able to control the usage of all the latest applications on their network at a category or individual level User activity tracking User identification is seamlessly integrated with Microsoft Active Directory...

Страница 8: ...ing Analyzer Scrutinizer GMS Local Log Syslog Solera Networks NetFlow v5 v9 TZ 215 IPFIX with Extensions TZ 215 Real time Visualization TZ 215 only Hardware failover Active Passive Active Passive Anti spam RBL support Allowed Blocked Lists Optional Dell SonicWALL Comprehensive Anti Spam Service6 Load balancing Yes Outgoing and Incoming Standards TCP IP UDP ICMP HTTP HTTPS IPSec ISAKMP IKE SNMP DHC...

Отзывы: