Site-to-Site VPN

Appliance Based IPSec VPN Gateways

A VPN gateway can be embodied in software on a server, an enhancement to a router or firewall, or a security appliance. A VPN gateway handles the high-speed encryption/decryption, negotiates the SAs (Security Associations), provides tunneling services, and generally makes sure things get done to make a VPN connection.

The data processing requirements for running a VPN are high because of the heavy demands of encrypting and decrypting data as it passes through the VPN gateway. Because of these demands, choosing a VPN gateway that can handle the load is an important factor in deciding on a VPN solution.

The better VPN solutions use a dedicated security device or appliance that offloads the VPN and Internet security processing off a computer or router and puts it on a platform with a high-performance processor designed for high-demand data processing. An Internet security appliance is a standalone hardware platform that sits between the public and private networks to prevent unauthorized intrusions into the private network and acts as the VPN gateway.

SonicWALL VPN appliances are high performance, hardware-based security platforms that provide support for an expanding array of security services. All SonicWALL appliances include these features:

Stateful Packet Inspection Firewall. All SonicWALL VPN appliances use Stateful Packet Inspection, the sophisticated firewall technology found in enterprise firewalls. Based on advanced packet-handling technology, this firewall technology protects your network from Denial of Service attacks, IP spoofing, and other TCP/IP borne attacks. It’s transparent to users on the LAN and requires no client configuration. SonicWALL appliances are ICSA (International Computer Security Association) certified, demonstrating their effectiveness at protecting networks of any size.

IP Address Management. SonicWALL VPN appliances include built in NAT (Network Address Translation) and DHCP (Dynamic Host Configuration Protocol) features that enable remote offices to be integrated into the organization’s network and allow offices with multiple PCs to share broadband connections.

Ease of Management and Administration. SonicWALL VPN appliances are designed for easy setup and administration using a streamlined Web-based interface. They can also be managed remotely from a central location using the Global Management System.

SonicOS. Utilizing the new SonicOS operating system, SonicWALL appliances offer a choice between absolute ease of use for basic networks and ultimate flexibility for more complex networks. SonicOS Standard, allows rapid deployment in basic networks with a user-friendly Web interface and powerful wizards. SonicOS Enhanced is an optional software upgrade that builds upon SonicOS Standard to deliver advanced features for more complex network installations.

High Performance, Scalable Hardware Architecture. SonicWALL’s robust architecture based on powerful RISC processors supports throughput rates of over 100 Mbps allowing maximum performance of your network. In addition, the appliances utilize a solid-state design with no moving parts, which increases reliability and reduces downtime.

Additional Services. SonicWALL VPN products enable customers to add additional features and functionality when required without upgrading the hardware platform. These features, including authentication, anti-virus, content filtering, vulnerability assessment and more, are fully integrated with the VPN capability thus ensuring ease of use and reliability.

VPN Single-Arm Mode Enables a SonicWALL appliance to connect to a WAN interface on a subnet with an existing firewall and process all VPN traffic, removing the burden of encryption/decryption from the firewall protecting the Internet connections.

RIP Advertising RIP Advertising dynamically advertises updated VPN and static routing information to the internal network ensuring reliable connectivity to the critical resources. RIPv1 and RIPv2 are supported.

AES Support Support for the Advanced Encryption Standard (AES), an encryption algorithm in the process of emerging as the next encryption standard.

VPN Appliances for Every Size

SonicWALL line of VPN appliances include models designed to meet the diverse needs of different remote locations from the single telecommuter up to the large office. The award-winning family of SonicWALL appliances deliver a complete VPN and security solution.

TZ 150 Series

A total security platform delivering layered protection to small offices in an easy-to-use, affordable platform. The TZ 150 Series integrates deep packet inspection firewall, IPSec 3DES/AES VPN and 802.11b/g secure wireless capabilities with support for gateway anti-virus, anti-spyware, intrusion prevention and content filtering to deliver true layered security. Secure remote access to critical network resources is available through SonicWALL VPN Client upgrades.

TZ180 Series

SonicWALL TotalSecure TZ 180 Series removes the complexity associated with choosing between a host of point products and add-on services by integrating everything needed for complete network security into a convenient, affordable package. These all-in-one solutions combine a high-performance deep packet inspection firewall and dynamic security services to keep your network safe from viruses, spyware, worms, Trojans and more.

TZ190

The SonicWALL TZ 190 VPN solution instantly provides secure 3G wireless broadband access anywhere when other broadband options are impractical. A high-performance network security platform, the TZ 190 integrates support for a variety of 3G wireless broadband PC Cards, automated failover/failback technologies and deep packet inspection protection in a single appliance.

PRO Series

Support for the medium to large office with unlimited users. A robust VPN platform that allows from 50 to 3000 simultaneous site-to site VPN tunnels and 100 to 3000 remote access connections, depending on the model and the version of SonicOS.

NSA E-Series

SonicWALL E-Class NSAs are engineered to be the most scalable, reliable and highest performing multifunction threat appliances in their class. The NSA Series prevents against a vast spectrum of network attacks with unprecedented speed. This speed of protection is enabled through the NSA multi-core architecture, a parallel performance design for ultra-high-speed threat protection and deployment scalability. Taking protection to new levels of control is Application Firewall, a set of customizable protection tools that empowers administrators with precise control over network traffic. Operational reliability is delivered through a high availability suite of features at the hardware and system level to optimize uptime and improve security coverage.