Ravlin 5300

SSi

Ideal solution for the secure VPN needs of medium-sized organizations

For companies with broader bandwidth requirements and larger numbers of employees and locations, the Ravlin 5300 offers a high-throughput and yet cost-effective VPN solution that can support the most demanding applications and networks and thousands of users. The 5300 takes advantage of more powerful processors and cryptographic accelerators to support up to 45 Mbps of encrypted communications, concentrating up to 100 site-to-site connections and an unlimited number of remote users. Priced at $4,000, the Ravlin 5300 is the ideal solution for the secure VPN needs of medium-sized organizations that require fractional T3 secure network performance and the complete array of VPN concentration and authentication capabilities.

The Ravlin 5300 products are targeted towards larger corporations that require Fast Ethernet connectivity and support for a multiple site­to­site and remote access connections. Network administrators use the Ravlin 5300 to establish private communications within secure Intranets (between corporate divisions, workgroups, and branch offices) or within secure Extranets (between customers, suppliers, and strategic partners). Organizations can establish security over private or public IP networks quickly and easily. Acting as a gateway, the Ravlin 5300 also supports Ravlin Soft clients running on Windows 95/98/Me/NT/2000 allowing remote communications over public and private networks. 

The Ravlin 5300 supports the strongest suite of IPsec network security features commercially available today. Ravlin gateways implement all mandatory components of the Internet Engineering Task Force (IETF) IP security (IPsec) standard for enhanced network security. The Ravlin 5300 provides data privacy using industry­standard 168­bit triple DES (3DES) algorithms. Content integrity is provided via two Hashed Message Authentication Code (HMAC) algorithms. These are Message Digest 5 (MD5), and Secure Hash Algorithm (SHA­1). Secure channels are identified, authenticated and negotiated using Digital Signature Standard (DSS), Diffie­Hellman key exchange, X.509 v.3 digital certificates, and IKE key management. SonicWALL's strict adherence to standards allows interoperability in several modes. 

Managed by Ravlin Node Manager, GUI interfaces make configuration a snap. Both versions of firmware include advanced DHCP capabilities, stateful firewall, and address translations services. 

Product Features 

Ideal for regional & large offices

T3 access speeds

RADIUS and ULA enabled

Ravlin Node Manager compatible

Management Services

Secure communications between management system via Simple Network Management Protocol v.3 (SNMPv3)

Multiple destination forwarding of event logs by entry type and severity

Multiple destination forwarding of SNMP traps to external management systems (OpenView, Tivoli, Spectrum) for automation, paging, etc.

Audit scanning will expand to validate policy against requested policy to detect changes that violate policy

Secure download and update via flash memory

IPSec Services

Establishes and maintains secure communications using the Internet Key Exchange (IKE)

Establishes tunneled connections using Encapsulating Security Payload

Sequences packets to prevent replay attacks

Hashed Message Authentication Codes (HMAC) using MD5 and SHA­1

Strong encryption with 168­bit triple DES

Authentication Services

Embedded RADIUS agent for one time passwords obtained from tokens or static names and passwords for domain logins

Pass vendor specific attributes for DNS

Unique embedded X.509 certificates for strong authentication

Pre­shared key support for multi­vendor interoperability

User Level Authentication for users on the network behind the Ravlin 5300 gateway

Address Services

Forward local DHCP requests to allow address provision across tunnel

Ports can request their own DHCP address

NAPT allows IP address translation to support multiple users via single address

Firewall

Pre­configured capabilities to enable or disable applications

Restrict to only IP traffic

Remote proxy ARP capabilities

User selectable disposition of packets by RCOS firmware

Bandwidth Services

Differentiated Services (DiffServ) inheritance to support real time QoS applications through tunnels

Architecture is MPLS ready

QoS/CoS features for override, translate, and inherit functions by RCOS^TM firmware