SonicWALL SSL-VPN 2000 Series

Overview:

In recent years, there has been an increased dependence on mobile workers. This has prompted a need for providing secure remote access to network resources as well as remote control PC access. SonicWALL® provides a solution that meets the needs of organizations with demanding remote workforce requirements. Designed for networks of any size, SonicWALL secure remote access solutions are simple to deploy and even easier to use for a fraction of the price of most other SSL VPN products. Unlike products that charge a per-tunnel licensing fee, SonicWALL SSL VPN solutions have no restrictions on the number of concurrent user tunnels for remote access, allowing organizations to scale their remote access connectivity as they grow.

Remote access has never been so simple to use. Mobile employees only require a standard Web browser to log into a Web portal which provides access to e-mail, files, applications and internal Web sites. For even more powerful capabilities such as seamless, secure access to any resource on the corporate network including servers and complex or home-grown applications, the appliances transparently push a downloadable thin client (NetExtender) to the user’s desktop or laptop.

Remote support is also easy to implement using SonicWALL Virtual Assist.* It is a clientless tool that enables a technician to assume control of a customer’s computer in order to provide assistance. As a result, service can be provided on-demand while keeping costs low.

• Seamless integration behind virtually any firewall
• Clientless connectivity
• Unrestricted concurrent user tunnels
• NetExtender technology
• Granular policy configuration controls
• Clientless remote support
• Personalized portal
• Enhanced layered security in a SonicWALL environment
• Tokenless two-factor authentication
• Context-sensitive help
• Mobile device support
• Application offloading

* Additional license required; only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

Features & Benefits:

• Seamless integration behind virtually any firewall enables organizations to leverage the existing network infrastructure without the need to purchase additional hardware.
• Clientless connectivity removes the need for a pre-installed or “fat” VPN client, thus freeing administrators from the tedious and costly task of installing and updating a client on users’ PCs.
• Unrestricted concurrent user tunnels, unlike per-tunnel licensing, significantly reduces the costs associated with deploying a scalable secure remote access solution.
• NetExtender technology provides enhanced capabilities such as access to additional resources, services and applications on the corporate network.
• Granular policy configuration controls enable network administrators to create policies that “lock down” a user to specific applications/resources and prevent unauthorized access to them.
• Clientless remote support using SonicWALL Virtual Assist enables technicians to provide secure on-demand assistance to customers while leveraging the existing infrastructure.
• A personalized portal, provided through a customizable Web interface, displays only those resources that are available to the user based on company policy.
• Enhanced layered security is enabled when deployed alongside a SonicWALL Network Security Appliance which utilizes powerful deep packet inspection technology to scan traffic for malicious threats such as viruses, worms, Trojans and spyware. The combined solution is known as SonicWALL Clean VPN.
• Tokenless two-factor authentication provides enhanced protection against key loggers by combining a unique onetime password, generated by the SSL VPN appliance and sent to a remote user’s mobile device or e-mail address, with the user’s network user name and password.
• Context-sensitive help is provided throughout the Web-based administrative interface and enduser portal, increasing management flexibility and ease-of-use.
• Mobile device support to access an entire intranet as well as Web-based applications provides greater flexibility for a remote workforce.
• Application offloading enables users to access Web applications securely by leveraging strong authentication and granular access policy features.

Key Features:

SSL VPN: Secure Remote Access for Any Authorized User

The SonicWALL SSL VPN Series extends secure remote access beyond remote offices and corporate controlled laptops out to network environments and remote computers that are not controlled and managed by the corporate IT department.

Additionally, granular access controls enable the network administrator to provide remote access to specific and defined resources not only employees, but also to trusted partners and customers.

SSL VPN Solutions:

Access the Resources You Need from Anywhere, When You Need Them

SonicWALL SSL VPN solutions can be configured to provide users with simple, secure and clientless remote access to a broad range of resources on the corporate network.

*Available only on the SSL-VPN 2000 and 4000
** Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000
***Although the product is designed to support an assortment of Web applications, some may not be supported and NetExtender is recommended as an alternative.

Simple to Use, Simple to Manage

SonicWALL SSL VPN solutions feature intuitive Web interfaces that simplify remote access and policy management from any location. Context-sensitive help is provided throughout the administrative and user portals to enhance usability. Additionally, the SSL VPN Series can be managed globally using the SonicWALL Global Management System (GMS)† and monitored using the SonicWALL ViewPoint† reporting tool.

Secure, Easy-to-use Web Management Interface:

Administrators will find SonicWALL SSL VPN solutions extremely simple to deploy and manage. An easy-to-use graphical user interface makes it simple to configure, monitor and update the appliance and user policies. Additionally, the capability for granular policy configuration provides complete control over individual user access to specific network resources.

Personalized Portal Experience:

Remote users require only a standard browser to launch a personalized Web portal. The user simply points the browser to a specific URL and the SSL VPN portal automatically displays only those resources that are available to that individual based on company policy.

GMS Management and ViewPoint Reporting:

The administrator can now configure the SSL VPN appliance to send heartbeat and syslog messages to a designated SonicWALL GMS (4.0 or higher).† Multiple SSL VPN appliances can be centrally managed by GMS and their administrative interfaces can be accessed via one click. The administrator can also obtain granular reports on network resource access using SonicWALL ViewPoint.

SonicWALL Virtual Assist*:

The administrator can easily configure and license the module from the Administrative portal. The technician portal is used to manage and schedule the support queue. The easy-to-use user portal guides a customer through the simple steps of requesting and receiving support.

†Sold separately * Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

Seamless Integration Behind Virtually Any Firewall

Behind third-party firewalls:

SonicWALL SSL VPN appliances integrate seamlessly into any network topology and can be easily deployed alongside any third-party firewall as a secure remote access solution. This enables IT administrators to leverage the existing network infrastructure without the need to purchase additional hardware.

Enhanced security when used in a SonicWALL network environment:

When deployed with a SonicWALL Network Security Appliance running SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, SonicWALL SSL VPN solutions provide enhanced network integration and security benefits.

Endpoint security enforcement:

By deploying SonicWALL NetExtender and Enforced Client Anti-Virus and Anti-Spyware† on managed PCs, administrators can configure policies that require every computer accessing the network to have the most recent version of anti-virus and anti-spyware software installed and active.

Leveraging existing infrastructure:

SonicWALL Virtual Assist** can tightly integrate with an existing LDAP, AD, NT Domain, Radius, RSA or Vasco infrastructure. Alternately, the local database and the built-in tokenless two factor authentication may be used.

†Sold separately
** Additional license required; Only available as a software add-on module for the SSL-VPN 2000 and SSL-VPN 4000

1. Incoming HTTPS traffic is seamlessly forwarded by the SonicWALL NSA or TZ Series network security appliance to the SonicWALL SSL VPN appliance, which decrypts and authenticates network traffic.
2. Users are authenticated using the onboard database or through third-party authentication methods such as RSA***, Vasco, RADIUS, LDAP, Microsoft Active Directory or Windows NT Domain.
3. A personalized Web portal provides access to only those resources that the user is authorized to view based on company policies.
4. Traffic is passed back to the NSA or TZ Series network security appliance where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats by the SonicWALL Unified Threat Management solution.

***Available only on the SSL-VPN 2000 and 4000

Specifications:

* Available only on the SSL-VPN 2000 and 4000

Documentation:

 SonicWALL SSL-VPN Series Datasheet (.PDF)