Application Control - SonicWall · NSS Labs engineers ... appropriate action based upon the...

Most businesses depend on network applications on a daily basis. They must also ensure that their employees remain productive, and that unknown applications don’t pose security risks. This can be a challenge for IT administrators, who cannot easily monitor and control applications on their networks to minimize risk and maximize productivity.

The Application Intelligence and Control service for Dell SonicWALL next-generation firewalls provides the tools

administrators need to easily manage privileges and bandwidth for applications, users, groups or devices. The policies are then applied automatically as new users and applications are added to IT systems. In addition, application traffic analytics provide administrators with real-time visibility that allows them to troubleshoot network outages and security risks quickly and efficiently.

Application ControlContext-aware application intelligence with real-time visibility

Benefits:• Simplified network management

• Comprehensive insight into network

activity

• Greater network bandwidth control

• Easy enforcement of acceptable-use

policies

• Automated and enhanced security

• Customizable, zone-based network

protection

• Enhanced productivity

• Customizable, long-term analytics

for strategic planning

• Comprehensive graphical view of

real-time activity for at-a-glance

insights and ongoing network

management

EgressIngress

Application chaosMany on ports 80 and 443

Cloud-basedextra-firewallintelligence

Users/groups Policy

Visualize and manage policy

Malware/intrusionsblocked

Massively scalablenext generation

security platform

High performance multi-core Reassembly-Free

DPIBotNets

Viruses

Spyware

Viruses

Spyware

Worms

BotNets

Worms

Threat DB

Reputation DB

GRID Network

AD

Critical apps Prioritized bandwidth

Unacceptable apps Blocked

Acceptable apps Managed Bandwidth

SAP Oracle

Sling Media

SalesforceVoIP

Pandora

BitTorrenteMule

Skype Facebook

FrostWire

YouTube

SAP

World of Warcraft

World of Warcraft

Oracle

Sling Media

Salesforce

VoIP

Pandora

BitTorrent

eMule

Skype

Facebook

FrostWire

YouTube

Control• Prioritize applications by policy• Manage applications by policy• Block applications by policy• Detect and block malware• Detect and prevent intrusion attempts

Identify• By application – Not by port and protocol• By user/group – Not by IP• By content inspection – Not by filename

Categorize• By application• By application category• By destination• By content• By user/group

Next-generation firewall with application intelligence, control and visualization

2

FeaturesDeep packet inspection—Enables high-performance, full-stack inspection of application traffic, regardless of the port or protocol used. This patented, Reassembly-Free Deep Packet Inspection® engine inspects every byte of every packet of all network traffic, including IPv4 and IPv6 networks, to determine which applications are being used and who is using them. Protection can be extended to SSL-encrypted traffic*, enabling enhanced compliance, content filtering, data leak prevention and elimination of other threats.

Context aware monitoring engine—Enables full visibility of traffic categorized according to user, application, source, destination, threat type, content or device.

Application signature database—Granular control and visualization for over 4,500 application actions. Automated updates ease administration.

Bandwidth management—Ensures dedicated throughput for business-critical applications or groups. Flexible policy engine enables scheduled or always-on enforcement, so critical network resources remain available when needed for maximum productivity.

Object-based policy engine—Enables zone-based protection for all network interfaces via quick and easy rule creation for specific systems, users, groups, hosts or networks. Rules can be set to prioritize, throttle, restrict or block applications and files, URLs or email attachments based on specific parameters.

SSO integration—Enables administrators to effortlessly enforce acceptable-use policies that allow, block or granularly control application usage. For example, an organization might allow employees to use Yahoo IM for chat but block video chat.

Application control templates—Enables customized, off-box IPFIX exporting for long-term analytics reporting.

Data-leakage prevention—Ability to block and control transmission of sensitive data via user-defined regular expression monitoring, such as passwords or specific file attachments to personal web mail services and corporate SMTP or POP3 email.

Application flow monitor—Provides integrated, real-time graphical insight into application and user traffic, including IPv6 and SSL-encrypted* traffic on non-standard ports. Easy-to-read user interface provides details on applications, ingress and egress bandwidth consumed, users and currently visited websites. In addition, it is possible to export the same data to any NetFlow/IPFIX analyzer for offline monitoring, troubleshooting and diagnostics of historical network activity.

“ Our testing found that Dell SonicWALL SuperMassive E10800 SonicOS 6.0 correctly enforced complex outbound and inbound policies consisting of multiple rules, objects, and applications. NSS Labs engineers verified that the device successfully determined the correct application and took the appropriate action based upon the policy.”NSS Labs, 2013 NGFW Product Analysis Report

*SSL Inspection service – TZ Series: not available; NSA Series: one-time license; SuperMassive Series: included with subscription

In 2013, Dell SonicWALL earned a ‘Recommend’ rating from NSS Labs in Next-Generation Firewall and Intrusion Prevention System group testing.

3

Application Control is available with Gateway Security Services as a one-, two- or three-year subscription. Application Control is also included with a Comprehensive Gateway Security Services subscription for select Network Security Appliance (NSA) and SuperMassive Series next-generation firewalls.

Gateway Anti-Malware, IPS and

AppControl

Comprehensive Gateway Security

Suite

Total Secure Bundle

Intrusion Prevention ✔ ✔ ✔

Malware Prevention ✔ ✔ ✔

Application Control* ✔ ✔ ✔

Content Filtering ✔ ✔

24x7 Technical Support ✔ ✔

NGFW Hardware Appliance ✔

*Application Control is not available on TZ105 or TZ205

Dell SonicWALL appliance

Application Control throughput

Maximum inspected connections

New connections per second

TZ 215 / TZ 215W 110 Mbps 32,000 1,800

NSA 220 / NSA 220W 195 Mbps 32,000 2,200

NSA 250M / NSA 250MW 250 Mbps 64,000 3,000

NSA 2600 700 Mbps 125,000 15,000

NSA 3600 1.1 Gbps 175,000 20,000

NSA 4600 2.0 Gbps 200,000 40,000

NSA 5600 3.0 Gbps 375,000 60,000

NSA 6600 4.5 Gbps 500,000 90,000

SuperMassive 9200 5.0 Gbps 1,000,000 100,000



SuperMassive E10200 7.5 Gbps 2,500,000 160,000

SuperMassive E10400 15 Gbps 5,000,000 320,000

SuperMassive E10800 30 Gbps 10,000,000 640,000

System requirementsThe Application Intelligence and Control Control service is available with the following Dell SonicWALL firewalls:

About Dell Dell Inc. (NASDAQ: DELL) listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information about Dell Connected Security, please visit Software.Dell.com/solutions/security

For more information

Dell SonicWALL2001 Logic DriveSan Jose, CA 95124

www.sonicwall.comT +1 408.745.9600F +1 408.745.9300

© 2014 Dell, Inc. ALL RIGHTS RESERVED. Dell, Dell Software, the Dell Software logo and products—as identified in this document—are registered trademarks of Dell, Inc. in the U.S.A. and/or other countries. All other trademarks and registered trademarks are property of their respective owners.DataSheet-ApplicationControl-US-TD603-20140320

Dell Software5 Polaris Way, Aliso Viejo, CA 92656 | www.dell.com If you are located outside North America, you can find local office information on our Web site.


App Control (1-year)


App Control (2-year)


App Control(3-year)


Suite (1-year)


Suite (2-year)


Suite (3-year)

TZ 215 / TZ 215W 01-SSC-4757 01-SSC-4758 01-SSC-4759 01-SSC-4793 01-SSC-4794 01-SSC-4795

NSA 220 / NSA 220W 01-SSC-4612 01-SSC-4613 01-SSC-4614 01-SSC-4648 01-SSC-4649 01-SSC-4650

NSA 250M / NSA 250MW 01-SSC-4570 01-SSC-4571 01-SSC-457 01-SSC-4606 01-SSC-4607 01-SSC-4608

NSA 2600 01-SSC-4459 01-SSC-4460 01-SSC-4461 01-SSC-4453 01-SSC-4454 01-SSC-4455





SuperMassive 9200 01-SSC-4202 01-SSC-4203 01-SSC-4204 01-SSC-4172 01-SSC-4173 01-SSC-4174



SuperMassive E10200 01-SSC-9527 01-SSC-9528 01-SSC-9529 01-SSC-9533 01-SSC-9534 01-SSC-9535



Application Control is also available for the following Dell SonicWALL Next-Generation Firewalls:

• TZ 210 • NSA 3500 • NSA E6500

• NSA 240 • NSA 4500 • NSA E7500

• NSA 2400 • NSA 5000 • NSA E8500

• NSA 2400MX • NSA E5500 • NSA E8510

Application Control - SonicWall · NSS Labs engineers ... appropriate action based upon the...

Documents

Transcript of Application Control - SonicWall · NSS Labs engineers ... appropriate action based upon the...