SonicWALL PRO 4100 Series

Overview:

Dynamic Multi-function Network Security Appliances

Organizations of all sizes rely on their networked infrastructure as the primary means of communication and productivity. These networks are under constant attack from a continually evolving array of threats that affect performance, communications and reliability. Securing data from external as well as internal threats across distributed architectures is challenging. Point products can provide additional layers of security but are costly, difficult to manage and ineffective against multi-pronged attacks and network resource misuse.

The SonicWALL® PRO Series solves these issues by combining multiple network and security functions including a deep packet inspection firewall, IPSec VPN, layered anti-virus, anti-spyware, intrusion prevention and Web content filtering capabilities into a single integrated appliance that is easy to manage and deploy. Based on a dynamically updateable platform, PRO Series appliances are automatically updated to ensure zero day protection against a variety of network and application threats. Optimized for advanced networking and ultra reliable operation, they are designed for mission-critical data and network communication deployments. At the core of every PRO Series appliance is SonicOS, SonicWALL’s powerful operating system which provides policy-based firewall management over complex deployments and enables complete control over network traffic and application usage. The PRO Series delivers exceptional value and performance for organizations of all sizes, including branch offices, central sites, distributed enterprises and data centers.

The PRO Series features six models: PRO 1260, 2040, 3060, 4060, 4100 and 5060, designed to meet the network security needs for organizations of all sizes.

Features & Benefits:

• Powerful re-assembly free deep packet inspection engine eliminates threats over unlimited file sizes and unrestricted concurrent connections, offering ultimate scalability.
• Real-time gateway anti-virus, anti-spyware, anti-spam and intrusion prevention capabilities secure the network against a comprehensive array of dynamic threats including viruses, spyware, worms, Trojans, phishing attacks and software vulnerabilities such as buffer overflows.
• Innovative SonicWALL Clean VPN™ deep packet inspection architecture assures mobile user connections and branch office traffic are decontaminated to prevent vulnerabilities and malicious code from being introduced into the corporate network from remote connections.
• Comprehensive application control prevents non-business traffic such as peer-to-peer and instant messaging applications at the administrator’s discretion.
• Stateful high availability and load balancing features maximize total network bandwidth and maintain network uptime, ensuring uninterrupted access to critical resources.
• Standards-based Voice over IP capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.
• Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and configures SonicPoints™, SonicWALL wireless access points, for secure remote access in distributed network environments.
• Onboard Quality of Service (QoS) features use industry standard 802.1p and Differentiated Services Code Points (DSCP) Class of Service (CoS) designators to provide powerful and flexible bandwidth management that is vital for Voice over IP, multimedia content and business critical applications.
• Advanced security and networking features include 802.1q VLANs, enterprise routing support, WAN/WAN failover, zone and object-based management, inbound and outbound load balancing, advanced NAT modes and more, providing granular configuration flexibility and comprehensive protection.

Dynamic Security Architecture and Management:

(Click image for larger view)

1. The deep packet inspection architecture in SonicOS inspects traffic to ensure network risks such as viruses, worms, Trojans, spyware, phishing attacks, emerging threats and Internet misuse are properly prevented.
2. The uniquely scalable approach scans traffic in real-time as it moves through the engine without having to stall traffic in memory. This allows threats to be identified and eliminated over unlimited file sizes and unrestricted concurrent connections without any interruptions. No other solution offers the same scalability and limitless protection.
3. Because threats are always evolving, dynamic network protection is accomplished through automated and continuous security updates, ensuring the PRO Series appliance can prevent emerging threats without requiring any administrator intervention.

Unrestricted Threat and Application Protection:

The SonicWALL PRO Series’ deep packet inspection engine is designed for ultimate scalability and performance, delivering a complete range of protection from the network to the application layer. With its ability to scan unlimited files sizes and an unlimited number of connections, the PRO Series has no equal, offering the most comprehensive protection available. In addition, the PRO Series affords administrator control over various network applications like Skype, instant messaging and peer-to-peer programs, closing and scanning through some of the largest security holes in today’s networks.

SonicWALL Clean VPN:

The PRO Series includes innovative SonicWALL Clean VPN technology which prevents vulnerabilities and malicious code by decontaminating mobile user connections and branch office traffic before they enter the corporate network. Based on a real-time deep packet inspection engine, the PRO Series eliminates viruses, worms, Trojans, spyware and malicious code without any user intervention.

Centralized Policy Management:

The PRO Series can be managed using the SonicWALL Global Management System (GMS), which provides flexible, powerful and intuitive tools to centrally manage configurations, view real-time monitoring metrics and integrate policy and compliance reporting.

Flexible, Customizable Deployment Options - PRO Series At-A-Glance:

Secure Switching Series:

The PRO 1260 Series is the entry-level PRO Series network security appliance, combining intelligent switching with deep packet inspection firewall into a single, easy-to-deploy and manage solution, meeting the needs of small sized networks. It offers the flexibility to be configured either as an unmanaged switch under SonicOS Standard or as a managed LAN switching platform through the powerful SonicWALL PortShield architecture, using SonicOS Enhanced.

Flexibility Series:

The PRO 2040 is a flexible network security appliance, ideal for small and branch offices. Featuring up to four configurable 10/100 Ethernet interfaces, advanced firewall features and intuitive overall management, the PRO 2040 offers a perfect blend between value and performance.

The PRO 3060 is a robust network security appliance designed to meet the growing needs of both branch office to mid-sized networks. Featuring twice the processing power of the PRO 2040 and greater interface density (six vs. four fast Ethernet interfaces), it allows for more granular control and flexible network and security policy design.

Performance and Scalability Series;

The PRO 4060 is a multi-service network security appliance with mid-range performance and high-end features, designed to meet the critical security requirements of medium-to-large sized networks. Six fast Ethernet interfaces allow for greater network configuration flexibility.

The PRO 4100 is a flexible, ultra-high speed security appliance that delivers real-time internal and external network protection. Ten Gigabit Ethernet interfaces provide ample port density to segment the network into multiple trusted zones. Comprehensive security with advanced networking and configuration flexibility features makes the PRO 4100 an ideal security appliance for central site deployments and distributed environments.

The PRO 5060 is SonicWALL’s flagship network security appliance that features multi-gigabit performance security platform with ultimate scalability, targeted for enterprises and data center environments. Featuring a multi-processor ultra-high performance design, the PRO 5060 offers configuration flexibility through either the combination of six copper Gigabit or two fiber/four copper Gigabit Ethernet interfaces.

Subscription Services:

Each PRO Series network security appliance* supports an expanding array of dynamic subscription-based services and software designed to integrate seamlessly into any network.

• Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service delivers intelligent, real-time network security protection against sophisticated application layer and content-based attacks including viruses, spyware, worms, Trojans and software vulnerabilities such as buffer overflows.
• Enforced Client and Server Anti-Virus and Anti-Spyware delivers comprehensive virus and spyware protection for laptops, desktops and servers using a single integrated client and offers automated networkwide enforcement of anti-virus and antispyware policies, definitions and software updates.
• Content Filtering Service enforces protection and productivity policies by employing an innovative rating architecture, utilizing a dynamic database to block over 55 categories of objectionable Web content.
• ViewPoint is an easy-to-use Web-based reporting tool whose comprehensive reporting capabilities provide administrators instant insight into the health of their network including performance and security. Delivered through a series of historical reports using dashboards and detailed summaries, ViewPoint helps organizations of all sizes track Internet usage, fulfill regulatory compliance requirements and monitor the security status of their network.
• Dynamic Support Services are available as 8x5 or 24x7 support depending on customer needs. Features include crucial updates and upgrades, the finest technical support, access to extensive electronic tools and timely hardware replacement to help organizations make the most of their SonicWALL investment. *PRO 4100 and 5060 ships with one-year of free Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service

*PRO 4100 and 5060 ships with one-year of free Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service

Specifications:

Notes:

*Requires SonicOS Enhanced
**Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services
***VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544
****Throughput measured using HTTP throughput test

Documentation:

 SonicWALL PRO Series Datasheet (.PDF)