Network & Communication

Mid-size companies and enterprise departments can deliver easy-to-manage, full-featured, secure remote access for up to 2,000 concurrent users. Reduce deployment and management costs by controlling access from many device types to company applications through a single gateway.

Add flexibility with a mobility solution for every device

Enable access for Windows, Apple Mac OS, iOS, Google Android™ and Linux devices, plus ActiveSync support for iOS, Android and Windows devices.

Make it easy for your employees to securely access your critical applications and resources from anywhere

The SonicWall Mobile Connect app provides your employees with fast, policy-enforced SSL VPN access to allowed resources. Mobile Connect is embedded in Windows Phone 8.1 and available for quick download for Apple iOS and Mac OSX users from the App Store, for Google Android users from Google Play and for Kindle Fire users from the Kindle store.

Provide enhanced clientless access

SMA 11.2 adds secure access to more resources using a standard HTML 5 browser, further enhancing the true clientless experience and reducing the reliance on troublesome Java and ActiveX components. SMA now provides HTML 5 browser access to Citrix Xendesktop and Xenapps (ICA support), as well as RDP published apps and desktops. HTML 5 ensures zero day support for new devices and operating systems. It provides users of devices that traditionally don't support Java or ActiveX, such as iOS mobile devices, fast and convenient access to allowed resources.

Integrate SMA seamlessly with EMM

SMA Appliances integrate with all leading Enterprise Mobility Management products, including Enterprise Mobility Management (EMM), to provide the most secure end-to-end mobile management and security solution for BYO, CYO and managed devices. While EMM establishes on-device data protection policies and app management, SMA completes the end-to-end data protection and security solution. It does so by enforcing access control policy to ensure that VPN access is granted only to trusted users and devices, only via authorized and validated mobile apps, and only to allowed company networks and resources.

Validate security state of mobile devices

With SMA, prior to granting access, mobile devices are interrogated for essential security information such as jailbreak or root status, device ID, certificate status and OS version. Only devices that meet configured security policy requirements are allowed access. SMA also assesses the security posture of the device by looking for security components such as anti-virus and anti-spyware software.

Secure access to corporate resources from personal and corporate devices

SMA lets you enforce policy to designate that only authorized mobile business applications, including secure containers and VDI, are granted access to the network. Importantly, the SMA solution can support any mobile app or secure container with no modification, app wrapping or SDK development. This speeds deployment and reduces costs. In addition to establishing per-app VPN access policy, SMA validates the digital signature of the mobile app prior to granting access, ensuring the integrity of the app and further reducing the risk of malware infecting the corporate network.

Learn More

The SonicWall Capture Security appliance™ (CSa) brings Capture Advanced Threat Protection™ (ATP) and sandboxing malware analysis to on-premises deployment scenarios for customers with compliance and policy restrictions against sending files to cloud analysis, or who prefer for all of their data to remain inside their organization. The CSa 1000 can analyze suspicious files coming from other SonicWall products to provide rapid, high accuracy detection of previously unseen threats with the customer retaining custody of their files. Additionally, the REST API functionality on the CSa opens up the benefits of this highly effective file analysis capability to threat intelligence teams, third-party security systems and any software stack that can integrate with published APIs.

The CSa uses a combination of reputation-based checks, static file analysis and SonicWall's patented Real-Time Deep Memory Inspection™ (RTDMI) engine for dynamic analysis to ensure that it provides not only the best possible detection rate of malicious files, but also does this efficiently, in the shortest possible time. The SonicWall ecosystem of security products, already fully integrated with the cloud-delivered Capture ATP analysis, is able to enforce inline security with features such as Block Until Verdict.

The same capabilities are supported when the SonicWall products are connected to the CSa series instead of the cloud Capture ATP.

RTDMI

SonicWall's patent-pending Real-Time Deep Memory Inspection (RTDMI) file analysis engine is a novel method of analyzing suspicious files by monitoring the behavior of an application in memory. RTDMI can see through any obfuscation or encryption techniques that modern malware may deploy to evade network and sandbox analysis, yielding extremely high accuracy detection of attacks borne by documents, executables, archive files and a variety of other file types.

Real time protection

The combination of reputation and global intelligence checks, statics analysis and RTDMI technology operate in concert to deliver results quickly enough to enable technologies like Block Until Verdict in SonicWall products. This capability allows for a file inspection policy on the firewall to prevent suspicious files from being downloaded by the end-user until the full inspection is completed and a verdict is reached by Capture ATP or CSa.

Learn More

SonicWall Wireless Network Security

Secure, high-speed wireless solutions

SonicWall Wireless Network Security solutions combine high-performance IEEE 802.11ac Wave 2 wireless technology with industry-leading next-generation firewalls. The result is a superior experience for WiFi users that's as secure as any wired connection.

The solutions are based on:

• SonicWall SonicWave series indoor and outdoor wireless access points (APs) which support the 802.11ac Wave 2 wireless standard
• SonicWall TZ, NSA and SuperMassive firewalls, which use deep packet inspection technology to detect and eliminate threats over wired and wireless networks

Superior user experience

SonicWave APs take advantage of the capabilities in 802.11ac Wave 2 plus features such as band steering and a built-in 2.5 GbE port to deliver highspeed wireless performance. Other features, including 4x4 MU-MIMO and beamforming, improve performance in higher density environments when using bandwidth-intensive applications such as HD multimedia, and cloud and mobile apps.

Each SonicWave access point includes three radios. One operates in the less crowded 5 GHz frequency band, reducing interference from other devices while strengthening signal reliability. Another operates in the 2.4 GHz band to support legacy 802.11b/g/n clients. The third radio is dedicated to security and performs rogue AP detection, passive scanning and packet capturing. With four transmitting and four receiving antennas plus support for 4x4 MU-MIMO, SonicWave APs are engineered to optimize signal quality, range and reliability for wireless devices including Wave 2-enabled clients.

Comprehensive threat prevention

SonicWall firewalls scan all wireless traffic coming into and going out of the network using deep packet inspection technology and then remove harmful threats such as malware and intrusions, even over SSL/ TLS encrypted connections. Other security and control capabilities such as content filtering, application control and intelligence and Capture Advanced Threat Protection provide added layers of protection. The Wireless Network Security solution also integrates additional security-related features including wireless intrusion detection and prevention, virtual access point segmentation, wireless guest services, RF monitoring and wireless packet capture.

Simplified deployment and centralized management

Access point deployment and setup are greatly simplified, reducing total cost of ownership (TCO). Integrated into every SonicWall firewall is a wireless controller that auto-detects and auto-provisions SonicWave APs across the network. Wireless signal analysis tools provide a visual map to optimize site-based access point placement.

Management and monitoring for wireless and security are handled centrally through the firewall or through SonicWall Global Management System, providing network administrators with a single pane of glass from which to manage all aspects of the network.

SonicPoint series

For organizations with a substantial investment in 802.11ac clients, the SonicWall SonicPoint series features dual radios, high-speed 802.11ac performance, 3x3 SU-MIMO and all the security advantages that SonicWall Wireless Network Security solutions offer.

Learn More

SonicWall SMA is a unified secure access gateway that enables organizations to provide anytime, anywhere and any device access to mission critical corporate resources. SMA's granular access control policy engine, context aware device authorization, application level VPN and advanced authentication with single sign-on empowers organizations to embrace BYOD and mobility in a multicloud environment.

Mobility and BYOD

For organizations wishing to embrace BYOD, flexible working or third party access, SMA becomes the critical enforcement point across them all. SMA delivers best-in-class security to minimize surface threats, while making organizations more secure by supporting latest encryption algorithms and ciphers. SonicWall's SMA allows administrators to provision secure mobile access and identity-based privileges so end-users get fast, simple access to the business applications, data and resources they require. At the same time, organizations can institute secure BYOD policies to protect their corporate networks and data from rogue access and malware.

Move to the cloud

For organizations embarking on a cloud migration journey, SMA offers a single sign-on (SSO) infrastructure that uses a single web portal to authenticate users in a hybrid IT environment. Whether the corporate resource is on-premise, on the web or in a hosted cloud, the access experience is consistent and seamless. SMA also integrates with industry leading multi-factor authentication technologies for added security.

Managed service providers

For either organizations hosting their own infrastructure or for managed service providers, SMA provides turnkey solution to deliver a high degree of business continuity and scalability. SMA can support up to 20,000 concurrent connections on a single appliance, with the ability to scale upwards of hundreds of thousands users through intelligent clustering. Data centers can reduce costs with active-active clustering and a built-in dynamic load balancer, which reallocates global traffic to the most optimized data center in realtime based on user demand. SMA tool sets enable service providers to deliver services with zero downtime, allowing them to fulfill very aggressive SLAs.

Learn More

SonicWall Network Security appliance (NSa) series

Industry-validated security effectiveness and performance for mid-sized networks and distributed enterprises

The SonicWall Network Security appliance (NSa) series provides midsized networks, branch offices and distributed enterprises with advanced threat prevention in a high-performance security platform. Utilizing innovative deep learning technologies in the SonicWall Capture Cloud Platform, the NSa series delivers the automated realtime breach detection and prevention organizations need.

Cutting-edge threat prevention with superior performance

Today's network threats are highly evasive and increasingly difficult to identify using traditional methods of detection. Staying ahead of sophisticated attacks requires a more modern approach that heavily leverages security intelligence in the cloud. Without that cloud intelligence, gateway security solutions can't keep pace with today's complex threats. NSa series nextgeneration firewalls (NGFWs) integrate two advanced security technologies to deliver cutting-edge threat prevention that keeps your network one step ahead. Enhancing SonicWall's multi-engine Capture Advanced Threat Protection (ATP) service is our patent-pending Real-Time Deep Memory Inspection (RTDMI™) technology. The RTDMI engine proactively detects and blocks mass market, zero-day threats and unknown malware by inspecting directly in memory. Because of the real-time architecture, SonicWall RTDMI technology is precise, minimizes false positives, and identifies and mitigates sophisticated attacks where the malware's weaponry is exposed for less than 100 nanoseconds. In combination, SonicWall's patented* single-pass Reassembly-Free Deep Packet Inspection (RFDPI) engine examines every byte of every packet, inspecting both inbound and outbound traffic simultaneously on the firewall. By leveraging the SonicWall Capture Cloud Platform in addition to on-box capabilities including intrusion prevention, antimalware and web/URL filtering, the NSa series blocks even the most insidious threats at the gateway.

Further, SonicWall firewalls provide complete protection by performing full decryption and inspection of TLS/SSL and SSH encrypted connections as well as non-proxyable applications regardless of transport or protocol. The firewall looks deep inside every packet (the header and data) searching for protocol non-compliance, threats, zero-days, intrusions, and even defined criteria. The deep packet inspection engine detects and prevents hidden attacks that leverage cryptography, blocks encrypted malware downloads, ceases the spread of infections, and thwarts command and control (C&C) communications and data exfiltration. Inclusion and exclusion rules allow total control to customize which traffic is subjected to decryption and inspection based on specific organizational compliance and/or legal requirements.

When organizations activate deep packet inspection functions such as IPS, antivirus, anti-spyware, TLS/SSL decryption/ inspection and others on their firewalls,network performance often slows down, sometimes dramatically. NSa series firewalls, however, feature a multi-core hardware architecture that utilizes specialized security microprocessors. Combined with our RTDMI and RFDPI engines, this unique design eliminates the performance degradation networks experience with other firewalls.

Learn More