Advertisement
Features
Intrusion prevention
Feature
Signature-based
Automatic signature
updates
Outbound threat
prevention
Intra-zone IPS
protection
VPN
IPSec VPN for site-
to-site connectivity
SSL VPN or IPSec
client remote access
Redundant VPN
gateway
Route-based VPN
Clean VPN
Gateway threat prevention
Gateway anti-malware
Reassembly-Free
Deep Packet (RFDPI)
Cloud anti-virus
Bi-directional
Inspection
24x7 signature
updates
Firewall and networking
Stateful packet inspection All network traffic is inspected, analyzed and brought into compliance with firewall access policies.
DOS attack protection
Flexible deployment
Policy-based routing
High availability
WAN load balancing
WAN acceleration
6
Description
Tightly integrated, signature-based intrusion prevention scans packet payloads for vulnerabilities
scanning and exploits that target critical internal systems.
Dell SonicWALL's Research Team continuously updates and deploys an extensive list of over 5,400
IPS signatures covering 52 attack categories. These signatures take immediate effect and do not
require reboots or any other interruption in service.
The ability to inspect both inbound and outbound traffic ensures that the network will not
unwittingly be used in Distributed Denial of Service attacks and will prevent any Command and
Control Botnet communication.
Intrusion prevention can be deployed between internal security zones to protect sensitive servers
and to prevent internal attacks.
High-performance IPSec VPN allows the firewall to connect remote branch offices to a central
location.
Utilize clientless SSL VPN technology or an easy-to-manage IPSec client for easy access to email,
files, computers, intranet sites and applications from a variety of platforms.
When using multiple WANs, a primary and secondary VPN can be configured to allow seamless
automatic failover and failback of all VPN sessions.
The ability to perform dynamic routing over VPN links ensures continuous uptime in the event of
temporary VPN tunnel failure by seamlessly re-routing traffic between endpoints through alternate routes.
Dell SonicWALL Clean VPN™ both secures the integrity of VPN access and decontaminates
malicious threats before they can enter the corporate network.
Dell SonicWALL's patented RFDPI engine scans all ports and protocols for viruses without file size
or stream length limitation. SonicLabs Researchers constantly provide updated threat protection,
providing faster response times and threat prevention.
Reassembly-Free Deep Packet Inspection keeps track of malware regardless of the order or
inspection timingwith which the packets arrive. This allows for extremely low latency while
eliminating file and stream size limitations. This provides greater performance and security than
outdated proxy designs which reassemble contents using sockets bolted to traditional anti-virus
programs and are plagued with inefficiencies and the overhead of memory thrashing leading to
high latency, low performance and size limitations.
Using the built-in RFDI engine, Dell SonicWALL can leverage the power of the cloud to provide the
most comprehensive set of anti-malware signatures available, while minimizing latency or delay.
The Dell SonicWALL Cloud Anti-Virus Service provides millions of additional malware signatures for
inspection of executable files using the most up-to-date information available.
RFDPI can be performed on both inbound and outbound connections to provide protection in all
networktraffic directions.
SonicLabs Research Team team creates and updates signature databases that are propagated
automatically to the firewalls in the field, with those signatures taking immediate effect without
any reboot or service interruption required.
SYN Flood protection provides defense against DOS attacks using both layer 3 SYN proxy and
layer 2 SYN blacklisting technologies.
Can be deployed in traditional NAT and Layer 2 Bridge modes.
Create routes based on protocol to direct traffic to a preferred WAN connection with the ability
to fail backto a secondary WAN in the event of an outage.
Supports Active/Passive failover to ensure increased reliability by protecting against hardware or
software faults.
Load balance up to four WAN interfaces using Round Robin, Spillover or Percentage based methods.
WAN Acceleration decreases latency and increases transfer speeds between remote sites for even
higher network efficiency gains.
Advertisement
