Ravlin 3300

SSi

Small Office Member of the Ravlin Family

The Ravlin 3300 provides full VPN functionality and unmatched ease of use for just $2,000. The device can serve as a complete head-end VPN system, providing small businesses with feature-rich VPN concentration of both remote access users and site-to-site connections. Additionally, the Ravlin 3300 transparently interacts with legacy networking and security components for seamless VPN expansion of enterprise-scale secure networks. Employing advanced, dedicated security processors, VPN-specialized software and flexible networking technologies, the Ravlin 3300 supports up to 253 users, achieves broadband-ready throughput of up to 7 Mbps and can terminate a maximum of 20 site-to-site connections.

he Ravlin 3300 supports the strongest suite of IPsec network security features commercially available today. Ravlin gateways implement all mandatory components of the Internet Engineering Task Force (IETF) IP security (IPSec) standard for enhanced network security. The Ravlin 3300 provides data privacy using industry­standard 168­bit triple DES (3DES) algorithms. Content integrity is provided via two Hashed Message Authentication Code (HMAC) algorithms. These are Message Digest 5 (MD5), and Secure Hash Algorithm (SHA­1). Secure channels are identified, authenticated and negotiated using Digital Signature Standard (DSS), Diffie­Hellman key exchange, X.509 v.3 digital certificates, and IKE key management. SonicWALL's strict adherence to standards allows interoperability in several modes. Managed by Ravlin Node Manager GUI interfaces make configuration a snap. The firmware includes advanced DHCP capabilities, firewall, and address translation services. 

The Ravlin 3300 is connected in­line between your system and the access device or hub. The Ravlin 3300 firmware extends the VPN to include a full range of services: address services, authentication services, and firewall services. Acting as a gateway, the Ravlin 3300 also supports Ravlin Soft clients running on Windows 95/98/Me/NT/2000 allowing remote communications over public and private networks. 

Product Features

Ideal for branch & small offices

xDSL, cable, ISDN, T1 access

Embedded PPPoE client

RADIUS, ULA enabled

Ravlin Node Manager compatible

Management Services 

Secure communications between management system via Simple Network Management Protocol v.1 (SNMPv1)

Multiple destination forwarding of event logs by entry type and severity

Multiple destination forwarding of SNMP traps to external management systems (OpenView, Tivoli, Spectrum) for automation, paging, etc.

Secure download and update via flash memory

PPPoE ready

IPSec Services

Establishes and maintains secure communications using the Internet Key Exchange (IKE)

Establishes tunneled connections using Encapsulating Security Payload

Sequences packets to prevent replay attacks

Hashed Message Authentication Codes (HMAC) using MD5 and SHA­1

Strong encryption with 168­bit triple DES

Authentication Services 

Embedded RADIUS agent for one time passwords obtained from tokens or static names and passwords for domain logins

Pass vendor specific attributes for DNS, etc.

Unique embedded X.509 certificates for strong authentication

Pre­shared key support for multi­vendor interoperability

User Level Authentication for users on the network behind the Ravlin 3300 gateway

Address Services

Forward local DHCP requests to allow address provision across tunnel

Ports can request their own DHCP address

NAPT allows IP address translation to support multiple users via single address

Firewall Services

Pre­configured capabilities to enable or disable applications

Restrict to only IP traffic

Remote proxy ARP capabilities