SonicWALL SSL-VPN 2000 Series

Overview:

In recent years, there has been an increased dependence on mobile workers. This has prompted a need for providing secure remote access to network resources as well as remote control PC access. SonicWALL provides a solution that meets the needs of organizations with demanding remote workforce requirements. Designed for networks of any size, SonicWALL secure remote access solutions are simple to deploy and even easier to use for a fraction of the price of most other SSL VPN products. Unlike products that charge a per-tunnel licensing fee, SonicWALL SSL VPN solutions have no restrictions on the number of concurrent user tunnels for remote access, allowing organizations to scale their remote access connectivity as they grow.

Remote access has never been so simple to use. Mobile employees only require a standard Web browser to log into a Web portal which provides access to e-mail, files, applications and internal Web sites. For even more powerful capabilities such as seamless, secure access to any resource on the corporate network including servers and complex or home-grown applications, the appliances transparently push a downloadable thin client (NetExtender) to the user’s desktop or laptop.

Remote support is also easy to implement using SonicWALL Virtual Assist.* It is a clientless tool that enables a technician to assume control of a customer’s computer in order to provide assistance. As a result, service can be provided on-demand while keeping costs low.

• Seamless integration behind virtually any firewall
• Clientless connectivity
• Unrestricted concurrent user tunnels
• NetExtender technology
• Granular policy configuration controls
• Clientless remote support
• Personalized portal
• Enhanced layered security in a SonicWALL environment
• Tokenless two-factor authentication
• Context-sensitive help
• Mobile device support
• Application offloading

* Additional license required; only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

Features & Benefits:

• Seamless integration behind virtually any firewall enables organizations to leverage the existing network infrastructure without the need to purchase additional hardware.
• Clientless connectivity removes the need for a pre-installed or “fat” VPN client, thus freeing administrators from the tedious and costly task of installing and updating a client on users’ PCs.
• Unrestricted concurrent user tunnels, unlike per-tunnel licensing, significantly reduces the costs associated with deploying a scalable secure remote access solution.
• NetExtender technology provides enhanced capabilities such as access to additional resources, services and applications on the corporate network.
• Granular policy configuration controls enable network administrators to create policies that “lock down” a user to specific applications/resources and prevent unauthorized access to them.
• Clientless remote support using SonicWALL Virtual Assist enables technicians to provide secure on-demand assistance to customers while leveraging the existing infrastructure.
• A personalized portal, provided through a customizable Web interface, displays only those resources that are available to the user based on company policy.
• Enhanced layered security is enabled when deployed alongside a SonicWALL Network Security Appliance which utilizes powerful deep packet inspection technology to scan traffic for malicious threats such as viruses, worms, Trojans and spyware. The combined solution is known as SonicWALL Clean VPN.
• Tokenless two-factor authentication provides enhanced protection against key loggers by combining a unique onetime password, generated by the SSL VPN appliance and sent to a remote user’s mobile device or e-mail address, with the user’s network user name and password.
• Context-sensitive help is provided throughout the Web-based administrative interface and enduser portal, increasing management flexibility and ease-of-use.
• Mobile device support to access an entire intranet as well as Web-based applications provides greater flexibility for a remote workforce.
• Application offloading enables users to access Web applications securely by leveraging strong authentication and granular access policy features.

Key Features:

SSL VPN: Secure Remote Access for Any Authorized User

 

The SonicWALL SSL VPN Series extends secure remote access beyond remote offices and corporate controlled laptops out to network environments and remote computers that are not controlled and managed by the corporate IT department.

Additionally, granular access controls enable the network administrator to provide remote access to specific and defined resources not only employees, but also to trusted partners and customers.

 

SSL VPN Solutions:

Access the Resources You Need from Anywhere, When You Need Them

SonicWALL SSL VPN solutions can be configured to provide users with simple, secure and clientless remote access to a broad range of resources on the corporate network.

Using only a standard Web browser, users have access to:

• Files and file systems (Includes support for FTP and Windows Network File Sharing)
• Web-based applications including Microsoft Outlook™ Web Access and Lotus Domino Web Access 7.0***
• HTTP and HTTPS intranets

Added flexibility for access to:

• Applications installed on desktop machines or hosted on an application server
• Desktop or server machines via Terminal Services (RDP) and VNC
• Terminals via Telnet and SSH (versions 1 and 2)
• Citrix XenApp™ *

SonicWALL NetExtender technology provides expanded access to:

• E-mail access through native clients residing on the user’s laptop (Microsoft Outlook, Lotus Notes, etc.)
• Commercial and home-grown applications
• Flexible network access as granted by the network administrator

Cost effective alternative to traditional remote access and remote support products:

• Facilitates full remote control of desktop devices without requiring pre-installation of “thick” client software, unlike more traditional tools such as VNC and RDP
• Enables access to a customer’s laptop or desktop via SonicWALL Virtual Assist** using a “thin” client, unlike traditional remote support tools that require preinstallation of a “thick” client

*Available only on the SSL-VPN 2000 and 4000
** Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000
***Although the product is designed to support an assortment of Web applications, some may not be supported and NetExtender is recommended as an alternative.

Simple to Use, Simple to Manage

SonicWALL SSL VPN solutions feature intuitive Web interfaces that simplify remote access and policy management from any location. Context-sensitive help is provided throughout the administrative and user portals to enhance usability. Additionally, the SSL VPN Series can be managed globally using the SonicWALL Global Management System (GMS)† and monitored using the SonicWALL ViewPoint† reporting tool.

Secure, Easy-to-use Web Management Interface:

Administrators will find SonicWALL SSL VPN solutions extremely simple to deploy and manage. An easy-to-use graphical user interface makes it simple to configure, monitor and update the appliance and user policies. Additionally, the capability for granular policy configuration provides complete control over individual user access to specific network resources.

Personalized Portal Experience:

Remote users require only a standard browser to launch a personalized Web portal. The user simply points the browser to a specific URL and the SSL VPN portal automatically displays only those resources that are available to that individual based on company policy.

GMS Management and ViewPoint Reporting:

The administrator can now configure the SSL VPN appliance to send heartbeat and syslog messages to a designated SonicWALL GMS (4.0 or higher).† Multiple SSL VPN appliances can be centrally managed by GMS and their administrative interfaces can be accessed via one click. The administrator can also obtain granular reports on network resource access using SonicWALL ViewPoint.

SonicWALL Virtual Assist*:

The administrator can easily configure and license the module from the Administrative portal. The technician portal is used to manage and schedule the support queue. The easy-to-use user portal guides a customer through the simple steps of requesting and receiving support.

†Sold separately * Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

Seamless Integration Behind Virtually Any Firewall

Behind third-party firewalls:

SonicWALL SSL VPN appliances integrate seamlessly into any network topology and can be easily deployed alongside any third-party firewall as a secure remote access solution. This enables IT administrators to leverage the existing network infrastructure without the need to purchase additional hardware.

Enhanced security when used in a SonicWALL network environment:

When deployed with a SonicWALL Network Security Appliance running SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, SonicWALL SSL VPN solutions provide enhanced network integration and security benefits.

Endpoint security enforcement:

By deploying SonicWALL NetExtender and Enforced Client Anti-Virus and Anti-Spyware† on managed PCs, administrators can configure policies that require every computer accessing the network to have the most recent version of anti-virus and anti-spyware software installed and active.

Leveraging existing infrastructure:

SonicWALL Virtual Assist** can tightly integrate with an existing LDAP, AD, NT Domain, Radius, RSA or Vasco infrastructure. Alternately, the local database and the built-in tokenless two factor authentication may be used.

†Sold separately
** Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

1. Incoming HTTPS traffic is seamlessly forwarded by the SonicWALL NSA or TZ Series network security appliance to the SonicWALL SSL VPN appliance, which decrypts and authenticates network traffic.
2. Users are authenticated using the onboard database or through third-party authentication methods such as RSA***, Vasco, RADIUS, LDAP, Microsoft Active Directory or Windows NT Domain.
3. A personalized Web portal provides access to only those resources that the user is authorized to view based on company policies.
4. Traffic is passed back to the NSA or TZ Series network security appliance where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats by the SonicWALL Unified Threat Management solution.

***Available only on the SSL-VPN 2000 and 4000

Specifications:

Models:	SSL-VPN 200	SSL-VPN 2000	SSL-VPN 4000
Performance
Customer Segment	Recommended for organizations with 50 or fewer employees	Recommended for organizations with 500 or fewer employees	Recommended for organizations with 500 or more employees
Concurrent User License	Unrestricted	Unrestricted	Unrestricted
Recommended Maximum Concurrent Users	10	50	200
Maximum allowable concurrent Virtual Assist Technicians	N/A	5	25
Key Features
Applications Supported	Proxy: Citrix (ICA),* HTTP, HTTPS, FTP, SSH, Telnet, RDP, VNC, Windows fi le sharing (Windows SMB/CIFS) NetExtender: Any TCP/IP based application: ICMP, VoIP, IMAP, POP, SMTP, etc.
Encryption	DES (128), 3DES (128, 256), AES (128, 192, 256), ARC4 (128), MD5, SHA-1
Authentication	RSA,* Vasco, One-time Passwords, Internal user database RADIUS, LDAP, Microsoft, Active Directory, Windows NT Domain
Multiple Domain Support	Yes
Fine Grain Access control	At the user, user group and network resource level
Session Security	Inactivity timeouts prevent unauthorized use of inactive sessions
Certificates	Server: Self-signed with editable common name and and imported from third parties Client: Optional client certificates supported*
Cache Cleaner	Optional. Upon logout all cached downloads, cookies and URLs downloaded through the SS tunnel are erased from the remote computer
Client PC Operating Systems Supported	Proxy: All operating systems NetExtender: Windows 2000, 2003, XP/Vista (32-bit and 64-bit) Win Mobile 5 (Pocket PC), Win Mobile 6 (Classic/Professional), MacOS 10.4+ (PowerPC and Intel), Linux Fedora Core 3+ / Ubuntu 7+ / OpenSUSE
Web Browsers Supported	Microsoft Internet Explorer, Firefox Mozilla
Personalized Portal	The remote user sees only those resources that the administrator has granted access to based on company policy
Management	Web GUI (HTTP, HTTPS), Send syslog and heartbeat messages to GMS (4.0 and higher)
Usage Monitoring	Graphic monitoring of memory, CPU, users and bandwidth usage*
Logging	Detailed logging in an easy-to-read format, Syslog supported e-mail alerts
Singl-Arm Mode	Yes
SonicWALL Virtual Assist*	Connection to remote PC, chat, FTP and diagnostic tools
IPv6 Support	Basic
Application Offloading	Yes
Hardware
Hardened Security Appliance	Yes
Cryptographic Hardware Acceleration	Yes
Interfaces	(5) 10/100 Ethernet	(4) 10/100 Ethernet, (1) Serial port	(6) 10/100 Ethernet, (1) Serial port
Processors	SonicWALL security processor, cryptographic accelerator	x86 main processor, cryptographic accelerator	P4 Celeron main processor, cryptographic accelerator
Memory	128 MB	512 MB	1 GB
Flash Memory	16 MB	128 MB	128 MB
Power Supply	20W, 12VDC, 1.66A	Internal	Internal
Max Power Consumption	10.4 W	48 W	108 W
Total Heat Dissipation	35.6 BTU	163.7 BTU	368.3 BTU
Dimensions (H x W x D)	7.45 x 4.55 x 1.06 in 18.92 x 11.56 x 2.69 cm	17.00 x 10.00 x 1.75 in 43.18 x 25.40 x 4.45 cm	17.00 x 13.25 x 1.75 in 43.18 x 33.66 x 4.45 cm
Weight	3.00 lbs 1.36 Kg	14.80 lbs 6.71 Kg	18.50 lbs 8.39 Kg
Regulatory and Standards Compliance
Regulatory Compliance	FCC Class A, ICES Class A, CE, C-Tick, VCCI, Class A, MIC, NOM, UL, cUL, TUV/GS, CB
Environment
Environment	40-105˚ F, 5-40˚ C Humidity 10-90% non-condensing
MTBF	9.0 years	11.2 years	9.2 years

* Available only on the SSL-VPN 2000 and 4000

Documentation:

SonicWALL SSL-VPN Series Datasheet (.PDF)