SonicWALL SSL-VPN 4000 Series

Overview:

In recent years, there has been an increased dependence on mobile workers. This has prompted a need for providing secure remote access to network resources as well as remote control PC access. SonicWALL provides a solution that meets the needs of organizations with demanding remote workforce requirements. SonicWALL Secure Remote Access (SRA) solutions are simple to deploy and even easier to use for a fraction of the price of most other products.

Remote access has never been so simple to use. Mobile employees only require a standard browser to log into a portal which provides access to e-mail, files, Web applications and internal Web sites. For even more powerful capabilities such as secure access to any resource on the corporate network including servers and local applications, the appliances transparently push a downloadable thin client (NetExtender) to the user’s desktop or laptop.

Remote support is also easy to implement using SonicWALL Virtual Assist.* It is a clientless tool that enables a technician to assume control of a customer’s computer in order to provide assistance. As a result, service can be provided on-demand while keeping costs low.

• Seamless integration behind virtually any firewall
• Clientless connectivity
• NetExtender technology
• Granular policy configuration controls
• Personalized Web portal
• Remote support
• Tokenless two-factor authentication
• Mobile device support
• Application offloading
• Context-sensitive help
• Enhanced layered security in a SonicWALL environment

*Additional license required; only available as a software add-on module for the SSL-VPN 4000 and SRA 4200 **Available only on the SSL-VPN 4000 and SRA 4200

Features & Benefits:

• Seamless integration behind virtually any firewall enables organizations to leverage the existing network infrastructure.
• Clientless connectivity removes the need for a pre-installed VPN client, thus freeing administrators from a tedious and costly task.
• NetExtender technology enables network level access to resources, services and applications.
• Granular policy configuration controls enable network administrators to create policies that “lock down” a user to specific applications/resources and prevent unauthorized access to them.
• A personalized Web portal displays only those resources that are available to the user based on company policy. Remote support using SonicWALL Virtual Assist* enables technicians to provide secure on-demand assistance to customers while leveraging the existing infrastructure.
• Tokenless two-factor authentication provides enhanced protection against key loggers by combining a unique one-time password, generated by the SSL VPN appliance and sent to a remote user’s mobile device or e-mail address, with the user’s network user name and password.
• Mobile device support to access an entire intranet as well as Web-based applications provides greater flexibility for a remote workforce.
• Application offloading** enables users to access Web applications securely by leveraging strong authentication and granular access policy features.
• Context-sensitive help is provided throughout the administrative interface and end-user portal, increasing management flexibility and ease-of-use.
• Enhanced layered security is enabled when deployed alongside a SonicWALL Network Security Appliance which utilizes powerful deep packet inspection technology to scan traffic for malicious threats such as viruses, worms, Trojans and spyware. The combined solution is known as SonicWALL Clean VPN.

*Additional license required; only available as a software add-on module for the SSL-VPN 4000 and SRA 4200 **Available only on the SSL-VPN 4000 and SRA 4200

Application & Deployment:

Granular Access to Authorized Users

The SonicWALL Secure Remote Access (SRA) Series for small- to medium-sized businesses (SMB) extends secure remote access beyond managed employees to unmanaged remote employees, partners, and customers. A customizable portal enables users to access specific resources via a Web browser as defined by a company’s IT policy.

Broad Access to Resources:

SonicWALL SRA solutions for SMB can be used to provide users with access to a broad range of resources.

• NetExtender enables native access to corporate network applications such as Microsoft Outlook
• The Virtual Office portal enables Web-based access to intranet (HTTP, HTTPS), file (FTP, CIFS), desktop (Citrix*, Terminal Server, VNC), and terminal (Telnet, SSH) resources

Simple to Manage:

SonicWALL SSL VPN solutions feature an intuitive Web-based management interface which offers context sensitive help to enhance usability. In addition, multiple products can be centrally managed using the SonicWALL Global Management System (GMS v4.0+). Resource access via the products can be effortlessly monitored using the SonicWALL ViewPoint reporting tool.

Remote Support:

SonicWALL Virtual Assist* can be easily configured and licensed via the administrative interface as a cost effective alternative to traditional remote support tools. Browser-based thin clients are pushed to Technicians and Customers in order to establish a session through the cloud via an SSL VPN product.

Enhanced Solution:

SonicWALL Secure Remote Access appliances integrate seamlessly into virtually any network topology and can be easily deployed alongside any third-party firewall. When deployed with a SonicWALL Network Security/Unified Threat Management (UTM) firewall appliance running Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service along with Application Firewall, enhanced security benefits are realized. Moreover, endpoint security can be enforced by deploying NetExtender in conjunction with Enforced Client Anti-Virus and Anti-Spyware on managed PCs. Virtual Assist also benefits from the seamless integration by leveraging the appliance’s local and external authentication facilities.

 *Available only on the SSL-VPN 4000 and SRA 4200

Remote Access Solution:

With an increasingly mobile workforce and greater threats of unexpected disruptions, remote access has become a business necessity. A SonicWALL SRA appliances for the SMB product deployed in one-arm mode alongside a SonicWALL UTM product or virtually any other third party firewall enables remote users to securely access corporate network resources from anywhere outside the LAN.

1. Incoming HTTPS traffic is seamlessly forwarded by the SonicWALL NSA or TZ Series network security appliance to the SonicWALL SSL VPN appliance, which decrypts and authenticates network traffic.
2. Users are authenticated using the onboard database or through third-party authentication methods such as RSA*, Vasco, RADIUS, LDAP, Microsoft Active Directory or Windows NT Domain.
3. A personalized Web portal provides access to only those resources that the user is authorized to view based on company policies.
4. Traffic is passed back to the NSA or TZ Series network security appliance where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats by the SonicWALL Unified Threat Management solution.

*Available only on the SRA 4200 and SSL-VPN 4000

Remote Support Solution:

With more employees working remotely and customers dispersed globally, it is becoming increasingly important for organizations to provide remote support for off-site business devices such as laptops or home PCs. Ineffective support using expensive and cumbersome tools can undermine IT service level agreements and inhibit remote worker productivity. Using a SonicWALL Virtual Assist on an SSL-VPN 4000 or SRA 4200 appliance, a Technician can instantly access a remote device over the Web, transfer files, and chat with the end user, enabling rapid diagnosis and problem resolution, without the need for pre-installed “fat” client.

Disaster Recovery Solution:

Disaster recovery can be triggered by a catastrophic event like a hurricane or epidemic, or by something as simple as a regional power outage, severe weather, flu outbreaks, or flooding of an office building because of a burst water pipe. Business disruption can mean lost opportunities, revenues, or reputation. SonicWALL SSL VPN and CDP products with a subscription to SonicWALL CDP Offsite Data Backup Service enable employees that are not able to physically get to the corporate office, access your corporate resources remotely via a secure SSL VPN connection. Corporate resources are always accessible as they are backed up both locally and offsite.

Clean Wireless Solution:

More corporations, universities, hospitals and governmental organizations are implementing wireless networks and using SSL VPN as a secure and centralized access control solution. SonicWALL SSL VPNs integrate seamlessly with SonicWALL wireless access solutions. A SonicWALL SSL VPN deployed alongside a SonicWALL UTM firewall and several SonicPoints ensure that users get access from anywhere on campus and the wireless connections are encrypted via the SSL protocol. As an added bonus, remote workers away from campus can connect into the corporate network via an SSL VPN connection. IT maintains centralized, granular access control over who can access what resources from using a single gateway.

Specifications:

Model Comparison	SSL-VPN 200	SRA 4200	SSL-VPN 4000
Performance:
Environment:	Recommended for organizations with 50 or fewer employees.	Recommended for organizations with 500 or fewer employees	Recommended for organizations with 500 or more employees
Concurrent User License:	Unrestricted	Unrestricted	Unrestricted
Recommended Maximum Concurrent Users:	10	50	200
Maximum allowable concurrent Virtual Assist technicians:	n/a	5	25
Hardware:
Hardened Security Appliance	Yes	Yes	Yes
Cryptographic Hardware Acceleration	Yes	Yes	Yes
Interfaces	5 x 10/100 Ethernet	4 x 10/100/1000 2 x USB 1 x Console	6 x 10/100 1 x Serial Port
Processor	SonicWALL security processor, cryptographic accelerator	x86 main processor, cryptographic accelerator	P4 Celeron main processor, cryptographic accelerator
Memory (RAM)	128 MB	2 GB	1 GB
Flash Memory	16 MB	1 GB	128 MB
Power Supply	20W, 12VDC, 1.66A	Internal	Internal
Max Power Consumption	10.4 W	75 W	108 W
Total Heat Dissipation	35.6 BTU	256.0 BTU	368.3 BTU
Dimensions	7.45 x 4.55 x 1.06 in 18.92 x 11.56 x 2.69cm	17.0 x 10.13 x 1.75 in 43.18 x 25.73 x 4.45cm	17.0 x 13.25 x 1.75 in 43.18 x 33.66 x 4.45cm
Weight	3.00 lbs 1.36 kg	15.00 lbs 6.80 kg	18.50 lbs 8.39 kg
Major Regulatory Compliance	FCC Class A, ICES Class A, CE, C-Tick, VCCI Class A, MIC, NOM, UL, cUL, TUV/GS, CB
Environment	0 - 40 C (32F to 105 F) Humidity, 5-95% RH, non-condensing
MTBF	9.0 years	8.3 years	9.2 years
Key Features:
Applications Supported	Proxy: Citrix (ICA),* HTTP, HTTPS, FTP, SSH, Telnet, RDP, VNC, Windows file sharing (Windows SMB/CIFS) NetExtender: Any TCP/IP based application: ICMP, VoIP, IMAP, POP, SMTP, etc.
Encryption	DES (128), 3DES (128, 256), AES (128, 192, 256), ARC4 (128), MD5, SHA-1
Authentication	RSA,* Vasco, One-time Passwords, Internal user database RADIUS, LDAP, Microsoft, Active Directory, Windows NT Domain
Multiple Domain Support	Yes
Fine Grain Access Control	At the user, user group and network resource level
Session Security	Inactivity timeouts prevent unauthorized use of inactive sessions
Certificates	Server: Self-signed with editable common name and and imported from third parties Client: Optional client certificates supported*
Cache Cleaner	Configurable. Upon logout all cached downloads, cookies and URLs downloaded through the SSL tunnel are erased from the remote computer
Client PC Operating Systems Supported	Proxy: All operating systems NetExtender: Windows 2000, 2003, XP/Vista (32-bit and 64-bit) Win Mobile 5 (Pocket PC), Win Mobile 6 (Classic/Professional), MacOS 10.4+ (PowerPC and Intel), Linux Fedora Core 3+ / Ubuntu 7+ / OpenSUSE
Web Browsers Supported	Microsoft Internet Explorer, Firefox Mozilla
Personalized Portal	The remote user sees only those resources that the administrator has granted access to based on company policy
Management	Web GUI (HTTP, HTTPS), Send syslog and heartbeat messages to GMS (4.0 and higher)
Usage Monitoring	Graphical monitoring of memory, CPU, users and bandwidth usage*
Logging	Detailed logging in an easy-to-read format, Syslog supported e-mail alerts
Single-Arm Mode	Yes
SonicWALL Virtual Assist*	Connection to remote PC, chat, FTP and diagnostic tools
IPv6 Support*	Basic
Application offloading*	Yes

* Available only on the SSL-VPN 4000 and SRA 4200

Documentation:

SonicWALL SSL-VPN Series for SMB Datasheet (.PDF)