|
| |
| SSi |
SonicWALL VPN Appliance Comparison
|
 A
Comparison of the SonicWALL VPN Appliance Features
|
FIREWALL
FEATURES |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
Pro
5060 |
|
Operating system |
SonicOS/SonicOSe |
SonicOS/SonicOSe |
SonicOS/SonicOSe |
SonicOSe |
SonicOSe |
|
Firewall Throughput |
90 Mbps |
200 Mbps |
300Mbps |
300Mbps |
1+ Gbps |
|
Concurrent Connections |
6,000 |
32,000 |
128,000 |
500,000 |
750,000 |
|
Firewall Certification |
ICSA |
ICSA |
ICSA |
ICSA |
ICSA |
|
Packet filtering Method |
Stateful Packet |
Stateful Packet |
Stateful Packet |
Stateful Packet |
Stateful Packet |
|
Firewall
Policies |
100/250* |
2,000 |
5,000 |
10,000 |
15,000 |
|
Deep
Packet Inspection |
Yes |
Yes |
Yes |
Yes |
Yes |
|
DoS, DDos Protection |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Transparent Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Object-based
Management |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
Network Address Translation |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Policy-based NAT |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
Port Address Translation |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Predefined Services |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Customizable Services |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Number of Nodes |
10,25,
Unrestricted |
Unrestricted |
Unrestricted |
Unrestricted |
Unrestricted |
|
Network Access Rules |
Yes |
Yes |
Yes |
Yes |
Yes |
|
SECURITY SERVICES |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
|
Web Content Filtering |
Optional |
Optional |
Optional |
Optional |
Optional |
|
Intrusion Prevention |
Optional |
Optional |
Optional |
Optional |
Yes |
|
Custom Web Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Anti Virus Management |
Optional |
Optional |
Optional |
Optional |
Optional |
|
Gateway
Anti-virus |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Malicious Code Filtering |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Bandwidth Management |
Yes |
Yes |
Yes |
Yes |
Yes |
|
RBL Spam Filtering |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
NETWORKING SUPPORT |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
|
Interfaces |
(7) 10/100,
(incl Switch) |
(4) 10/100 |
(6) 10/100 |
(6) 10/100 |
(6) 1000 |
|
Remote Access Points |
2 |
8 |
8 |
16 |
32 |
|
Antenna |
802.11 b/g*** |
N/A |
N/A |
N/A |
N/A |
|
ISP Failover |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
Load Balancing |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
Active Directory/ LDAP
Authentication |
Yes* |
Yes* |
Yes* |
Yes |
Yes |
|
VPN Client
Pass Through |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PPTP/PPPoE
/L2TP Support |
Yes |
Yes |
Yes |
Yes |
Yes |
|
DHCP Client
Support |
Yes |
Yes |
Yes |
Yes |
Yes |
|
DHCP Server Support |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Total Static
Routes |
128 |
192 |
256 |
512 |
1000 |
|
DMZ |
Included |
Included |
Included |
Included |
Included |
|
Dynamic
DNS |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Static
ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
|
RIP v2 /
OSPF Routing |
No |
No |
No |
Yes |
Yes |
|
802.1q
VLAN Support |
No |
No |
No |
200
Interfaces |
400 Interfaces |
|
APPLIANCE
MANAGEMENT |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
|
Management
Method |
Web Browser |
Web Browser |
Web Browser |
Web Browser |
Web Browser |
|
Remote
Management |
Secure VPN Mgmt |
Secure VPN Mgmt |
Secure VPN Mgmt |
Secure VPN Mgmt |
Secure VPN Mgmt |
|
Global
Management |
SonicWALL GMS |
SonicWALL GMS |
SonicWALL GMS |
SonicWALL GMS |
SonicWALL GMS |
|
SNMP
Management |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Bandwidth Managemen |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Command Line Interface |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Firmware Update Method |
Web Browser |
Web Browser |
Web Browser |
Web Browser |
Web Browser |
|
Diagnostic
Tools |
Ping, Trace, NSLookup |
Ping, Trace, NSLookup |
Ping, Trace, NSLookup |
Ping, Trace, NSLookup |
Ping, Trace, NSLookup |
|
Logging and
Alerting |
Syslog, Email, Pager |
Syslog, Email, Pager |
Syslog, Email, Pager |
Syslog, Email, Pager |
Syslog, Email, Pager |
|
Reporting |
ViewPoint Optional |
ViewPoint Optional |
ViewPoint
or |
ViewPoint
or |
ViewPoint
or |
|
|
or 3rd Party |
or 3rd Party |
3rd Party |
3rd Party |
3rd Party |
|
HIGH AVAILABILITY |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
|
Failover Support |
Included |
Included |
Included |
Included |
Included |
|
Active-Standby /Mirroring |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Dual Power Supplies |
No |
No |
No |
No |
Yes |
|
Analog Modem |
Yes** |
No |
No |
No |
No |
|
IPSEC
VPN |
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
|
VPN Encryption |
Included |
Included |
Included |
Included |
Included |
|
Encryption
Methods |
3DES, AES |
AES, 3DES |
AES, 3DES |
AES, 3DES |
AES, 3DES |
|
Authentication |
MD5, SHA-1 |
MD5, SHA-1 |
MD5, SHA-1 |
MD5, SHA-1 |
MD5, SHA-1 |
|
Key
Management |
IKE, Manual |
IKE, Manual |
IKE, Manual |
IKE, Manual |
IKE, Manual |
|
VPN
Interoperability |
IPSec |
IPSec |
IPSec |
IPSec |
IPSec |
|
FIPS
Certification |
FIPS 140-2 |
FIPS
140-2 |
FIPS 140-2 |
FIPS
140-2 |
Pending |
|
Site-to Site VPN Policies |
2,10,10 |
50 |
500 (1,000*) |
3,000 |
4,000 |
|
Client
Licenses |
50 |
100 |
500 |
3,000 |
6,000 |
|
3DES/AES Speed |
30+ Mbps |
50 Mbps |
75 Mbps |
190 Mbps |
500 Mbps |
|
AES
Support |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Perfect Forward Secrecy |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Single-Arm
Mode |
No |
Yes |
Yes |
Yes |
Yes |
|
RIP
Advertising |
No |
Yes |
Yes |
Yes |
Yes |
|
Prevent Replay Attacks |
Yes |
Yes |
Yes |
Yes |
Yes |
|
NAT Traversal |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Group VPN
Tunnel |
Yes |
Yes |
Yes |
Yes |
Yes |
|
User
Authentication |
RADIUS, SecurID |
RADIUS, SecurID |
RADIUS, SecurID |
RADIUS, SecurID |
RADIUS, SecurID |
|
Hub and Spoke
VPN Support |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PKI/Digital Certificates |
Authentication Service |
Authentication Service |
Authentication Service |
Authentication Service |
Authentication Service |
|
VPN Client Sessions Included |
0,1,1 |
10 |
25 |
1,000 |
2,000 |
|
|
TZ 180 |
PRO 2040 |
PRO 3060 |
PRO 4060 |
PRO
5060 |
* With SonicOSe Option
** TZ170 SP & TZ170 SPW
*** TZ170 W & TZ 170 SPW
|
