Sonicwall Technology Systems India Private Limited

Model Name/Number	TZ400 Series
Brand	SonicWall
Usage/Application	Ideal for small to mid-size organizations and distributed enterprises
Form Factor	Desktop
Security	Firewall
Local User Database	150
VoIP	Full H.323v1-5,SIP
Power Consumption	9.2 W / 13.8 W
Input Power Supply	100-240 VAC,50-60 Hz,1 A
Total Heat Dissipation	31.3 / 47.1 BTU
Dimensions	3.5 x 13.4 x 19 cm
Weight	0.73 kg / 0.84 kg
MTBF	54.0 years
Operating Temperature	0 to 40 deg C
Storage Temperature	-40 to 70 deg C
Humidity	5-95% non-condensing

Superior threat prevention and performance
Our vision for securing networks in today’s continually-evolving cyber threat landscape is automated, real- time threat detection and prevention. Through a combination of cloud-based and on-box technologies we deliver protection to our firewalls that’s been validated by independent third-party testing for its extremely high security effectiveness. Unknown threats are sent to SonicWall’s cloud-based Capture Advanced Threat Protection (ATP) multi-engine sandbox for analysis. Enhancing Capture ATP is our patent-pending Real-Time Deep Memory Inspection (RTDMITM) technology. The RTDMI engine detects and blocks malware and zero-day threats by inspecting directly in memory. RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware’s weaponry is exposed for less than 100 nanoseconds.

In combination, our patented single pass Reassembly-Free Deep Packet Inspection (RFDPI) engine examines every byte of every packet, inspecting both inbound and outbound traffic directly on the firewall. By leveraging Capture ATP with RTDMI technology in the SonicWall Capture Cloud Platform in addition to on-box capabilities including intrusion prevention, anti-malware and web/ URL filtering, TZ series firewalls stop malware, ransomware and other threats at the gateway. For mobile devices used outside the firewall perimeter, SonicWall Capture Client provides an added layer of protection by applying advanced threat protection techniques such as machine learning and system rollback. Capture Client also leverages the deep inspection of encrypted TLS traffic (DPI-SSL) on TZ series firewalls by installing and managing trusted TLS certificates.

The continued growth in the use of encryption to secure web sessions means it is imperative firewalls are able to scan encrypted traffic for threats. TZ series firewalls provide complete  protection by performing full decryption and inspection of TLS/SSL and SSH encrypted connections regardless of port or protocol. The firewall searches for protocol non-compliance, threats, zero- days, intrusions, and even defined criteria by looking deep inside every packet.


The deep packet inspection engine detects and prevents hidden attacks that leverage cryptography. It also blocks encrypted malware downloads, ceases the spread of infections and thwarts command and control (C&C) communications and data exfiltration. Inclusion and exclusion rules allow total control to customize which traffic is subjected to decryption and inspection based on specific organizational compliance and/or legal requirements.

Easy deployment, setup and ongoing management
SonicWall makes it easy to configure and manage TZ series firewalls and SonicWave 802.11ac Wave 2 access points no matter where you deploy them. Centralized management, reporting, licensing and analytics are handled through our cloud-based Capture Security Center which offers the ultimate in visibility, agility and capacity to centrally govern the entire SonicWall security ecosystem from a single pane of glass.

A key component of the Capture Security Center is Zero-Touch Deployment. This cloud-based feature simplifies and speeds the deployment and provisioning of SonicWall firewalls at remote and branch office locations. The process requires minimal user intervention, and is fully automated to operationalize firewalls at scale in just a few steps. This significantly reduces the time, cost and complexity associated with installation and configuration, while security and connectivity occurs instantly and automatically. Together, the simplified deployment and setup along with the ease of management enable organizations to lower their total cost of ownership and realize a high return on investment.

Model Name/Number	TZ300 Series
Brand	SonicWall
Usage/Application	Corporates, SMEs, etc.
Form Factor	Desktop
Authentication	LDAP (multiple domains),XAUTH/ RADIUS,SSO,Novell,internal user database,Terminal Services
Local User Database	150
VoIP	Full H.323v1-5,SIP
Power Supply	100 to 240 VAC,50-60 Hz,1 A
Power Consumption	6.9 W / 12.0 W
Total Heat Dissipation	23.5 / 40.9 BTU
Dimensions	3.5 x 13.4 x 19 cm
Weight	0.73 kg / 0.84 kg
MTBF	56.1 years
Operating Temperature	0 to 40 deg C
Storage Temperature	-40 to 70 deg C
Humidity	5-95% non-condensing
Standards	802.11a/b/g/n/ac (WEP,WPA,WPA2,802.11i,TKIP,PSK,02.1x,EAP-PEAP,EAP-TTLS

For small business, retail and branch office locations, the SonicWall TZ400 series delivers enterprise-grade protection. Flexible wireless deployment is available with optional 802.11ac dual-band wireless integrated into the firewall.

RFDPI ENGINE

Reassembly-Free Deep Packet Inspection (RFDPI)
This high-performance, proprietary and patented inspection engine performs stream-based, bi-directional traffic analysis, without proxying or buffering, to uncover intrusion attempts and malware and to identify application traffic regardless of port.

Bi-directional inspection
Scans for threats in both inbound and outbound traffic simultaneously to ensure that the network is not used to distribute malware and does not become a launch platform for attacks in case an infected machine is brought inside.

Stream-based inspection
Proxy-less and non-buffering inspection technology provides ultra-low latency performance for DPI of millions of simultaneous network streams without introducing file and stream size limitations, and can be applied on common protocols as well as raw TCP streams.

Highly parallel and scalable
The unique design of the RFDPI engine works with the multi-core architecture to provide high DPI throughput and extremely high new session establishment rates to deal with traffic spikes in demanding networks.

Single-pass inspection
A single-pass DPI architecture simultaneously scans for malware, intrusions and application identification, drastically reducing DPI latency and ensuring that all threat information is correlated in a single architecture.

FIREWALL AND NETWORKING
Secure SD-WAN
An alternative to more expensive technologies such as MPLS, Secure SD-WAN enables distributed enterprise organizations to build, operate and manage secure, high-performance networks across remote sites for the purpose of sharing data, applications and services using readily-available, low-cost public internet services.

REST APIs
Allows the firewall to receive and leverage any and all proprietary, original equipment manufacturer and third-party intelligence feeds to combat advanced threats such as zero-day, malicious insider, compromised credentials, ransomware and advanced persistent threats.

Stateful packet inspection
All network traffic is inspected, analyzed and brought into compliance with firewall access policies.

DDoS/DoS attack protection
SYN flood protection provides a defense against DoS attacks using both Layer 3 SYN proxy and Layer2 SYN blacklisting technologies. Additionally, it protects against DoS/DDoS through UDP/ICMP flood protection and connection rate limiting.

Model Name/Number	TZ350 Series
Brand	SonicWall
Usage/Application	Enterprises, SMEs, etc.
Form Factor	Desktop
Operating System	SonicOS
Interfaces	5x1GbE,1 USB,1 Console
Expansion	USB
Management	CLI,SSH,Web UI,Capture Security Center,GMS,REST APIs
Single Sign-On (SSO) Users	500
VLAN Interfaces	25
Maximum Access Points Supported	8
Firewall Inspection Throughput	1.0 Gbps
Connections Per Second	6,000
Site-to-site VPN Tunnels	15
Encryption And Authentication	DES,3DES,AES (128,192,256-bit),MD5,SHA-1,Suite B Cryptography
Route Based VPN	RIP,OSPF,BGP
Mobile Connect	Apple iOS,Mac OS X,Google Android,Kindle Fire,Chrome,Windows 8.1 (Embedded)
Local User Database	150
VoIP	Full H.323v1-5,SIP
Power Supply	100 to 240 VAC,50-60 Hz,1 A
Power Consumption	6.9 W / 12.0 W
Dimensions	3.5 x 13.4 x 19 cm
Total Heat Dissipation	23.5 / 40.9 BTU
Weight	0.73 kg / 0.84 kg

Capture Cloud Platform
SonicWall's Capture Cloud Platform delivers cloud-based threat prevention and network management plus reporting and analytics for organizations of any size. The platform consolidates threat intelligence gathered from multiple sources including our award-winning multi-engine network sandboxing service, Capture Advanced Threat Protection, as well as more than 1 million SonicWall sensors located around the globe.

If data coming into the network is found to contain previously-unseen malicious code, SonicWall’s dedicated, in-house Capture Labs threat research team develops signatures that are stored in the Capture Cloud Platform database and deployed to customer firewalls for up-to-date protection. New updates take effect immediately without reboots or interruptions. The signatures resident on the appliance protect against wide
Classes of attacks, covering tens of thousands of individual threats.

In addition to the countermeasures on the appliance, TZ firewalls also have continuous access to the Capture Cloud Platform database which extends the onboard signature intelligence with tens of millions of signatures.

In addition to providing threat prevention, the Capture Cloud Platform offers single pane of glass management and administrators can easily create both real-time and historical reports on network activity. 

Advanced threat protection
At the center of SonicWall automated, real-time breach prevention is SonicWall Capture Advanced Threat Protection service, a cloud-based multi-engine sandbox that extends firewall threat protection to detect and prevent zero- day threats. Suspicious files are sent to the cloud where they are analyzed using deep learning algorithms with the option to hold them at the gateway until a verdict is determined.

The multi- engine sandbox platform, which includes Real-Time Deep Memory Inspection, virtualized sandboxing, full system emulation and hypervisor level analysis technology, executes suspicious code and analyzes behavior. When a file is identified as malicious, it is blocked and a hash is immediately created within Capture ATP.
Soon after, a signature is sent to firewalls to prevent follow-on attacks.

The service analyzes a broad range of operating systems and file types, including executable programs, DLL, PDFs, MS Office documents, archives, JAR and APK. 

For complete endpoint protection, the SonicWall Capture Client combines next- generation anti-virus technology with SonicWall's cloud-based multi-engine sandbox with optional integration with SonicWall firewalls.

Model Name/Number	TZ500 Series
Brand	SonicWall
Usage/Application	Branch offices and SMBs
Form Factor	Desktop
Operating System	SonicOS
Interfaces	8x1GbE, 2 USB, 1 Console
Expansion	2 USB
Management	CLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
Single Sign-On (SSO) Users	500
VLAN Interfaces	50
Maximum Access Points Supported	16
Firewall Throughput	1.4 Gbps
Threat Prevention Throughput	700 Mbps
IPS Throughput	1.0 Gbps
Maximum Connections	150,000
New Connections Per Second	8,000
Site To Site VPN Tunnels	25
Key Exchange	Diffie Hellman Groups 1, 2, 5, 14v
Route Based VPN	RIP, OSPF, BGP
IP Address Assignment	Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
Power Supply	100-240 VAC, 50-60 Hz, 1 A
Power Consumption	13.4 W / 17.7 W
Dimensions	3.5 x 15 x 22.5 cm
Weight	0.92 kg / 1.05 kg

Reassembly-Free Deep Packet Inspection engine

The SonicWall Reassembly-Free Deep Packet Inspection (RFDPI) is a single- pass, low latency inspection system that performs stream-based, bi-directional traffic analysis at high speed without proxying or buffering to effectively uncover intrusion attempts and malware downloads while identifying application traffic regardless of port and protocol. This proprietary engine relies on streaming traffic payload inspection to detect threats at Layers 3-7, and takes network streams through extensive and repeated normalization and decryption in order to neutralize advanced evasion techniques that seek to confuse detection engines and sneak malicious code into the network.

Once a packet undergoes the necessary pre-processing, including TLS/SSL decryption, it is analyzed against a single, proprietary memory representation of three signature databases: intrusion attacks, malware and applications. The connection state is then advanced to represent the position of the stream relative to these databases until it encounters a state of attack, or other“match” event, at which point a pre-set action is taken.

 

In most cases, the connection is terminated and proper logging and notification events are created. However, the engine can also be configured for inspection only or, in case of application detection, to provide Layer 7 band width management services for the remainder of the application stream as soon as the application is identified.

 

Centralized management and reporting

For highly regulated organizations wanting to achieve a fully coordinated security governance, compliance and risk management strategy, SonicWall provides administrators a unified,secure and extensible platform to manage SonicWall firewalls, wireless access points and Dell N-Series and X-Series switches through a correlated and auditable workstream process. Enterprises can easily consolidate the management of security appliances, reduce administrative and troubleshooting complexities, and govern all operational aspects of the security infrastructure, including centralized policy management and enforcement;real-time event monitoring; user activities; application identifications; flow analytics and forensics; compliance and audit reporting; and more. In addition, enterprises meet the firewall’s change management requirements through workflow automation which provides the agility and confidence to deploy the right firewall policies at the right time and in conformance with compliance regulations.

 

Available on-premises as SonicWall Global Management System and in the cloud as Capture Security Center, SonicWall management and reporting solutions provide a coherent way to manage network security by business processes and service levels, dramatically simplifying lifecycle management of your overall security environments compared to managing on a device-by-device basis.