NSA 2400MX Partner Overview Name Title Email Phone.

NSA 2400MX Partner Overview

Name

Title

Email

Phone

SonicWALL Network Security Portfolio - 2010

NSA E7500

NSA E6500

NSA E5500

TZ SERIESNSA SERIESE-CLASS NSA SERIES

NSA 3500

NSA 2400

NSA 240

NSA 4500

TZ 210 Series

TZ 100/200 Series

WIRELESS AP

SonicPoint-N

2 For SonicWALL Partner Use All Rights Reserved

http://images.google.com/imgres?imgurl=http://www.phaos.com/images/nav/fips_logo.gif&imgrefurl=http://www.phaos.com/products/crypto_fips/crypto_fips.html&h=687&w=688&sz=46&hl=en&start=13&um=1&tbnid=UFPwGYEx7zzPRM:&tbnh=139&tbnw=139&prev=/images?q=FIPS+140+logo&um=1&hl=en&rlz=1T4GFRG_enUS219US219&sa=N

http://www.pcmag.com/article2/0,1895,2159541,00.asp

http://www.itpro.co.uk/reviews/101039/sonicwall-pro-4100.html

http://searchsecurity.techtarget.com/magazineFeature/0,296894,sid14_gci1257125_idx1,00.html

Drivers & Trends

3

Technology Trends

Growth in real-time & Internet-based applications & communication

SaaS / Web 2.0

Virtualization of services / SOA

Employees increasingly utilize network services – productive and unproductive

High speed and available information sharing is critical

Increases in bandwidth and volume of traffic

Business Drivers

Reduction in operating costs

Focus on TCO

Mobilization of the workforce

Compliance

Outsourcing growth

Gaining competitive advantage

Organizations are continually adapting to their competitive environment and ongoing technology trends


New Challenges To Solve

Threats Are Increasing

Web 2.0 & SaaS

Impacts to servers, users & networks Threats go invisible

Poor Application Visibility Abundance of unknown

application use Ports are ineffective at blocking

application use Network misuse is rampant

Increased Performance Demands Bandwidth efficiency is a top concern,

increasing security slows performance Admins don’t want the trade-off

between security and performance4 For SonicWALL Partner Use All Rights Reserved

Current Solutions Present Challenges

Network safeguards are changing with threats; As threats move up the OSI model, inspection must be more complete and scalable

Application visibility is paramount to overcome the next generation of threats and productivity issues

Siloed solutions are the current response due to performance butmulti-layered protection is the future

Current

Traditional Firewall

Threats

Legacy System Access

IDS/IDPBasic Applications

Worms

Application Access

Application Layer ThreatsProxy

Software Vulnerabilities

1

2

3

Required

Complete Inspection must span the communication spectrum


Next-Generation Security Requirements

Consolidated & Integrated Security Technology Covering a Wide Spectrum of Content-based, File-based & Application Layer

Attacks Application Visibility

Inspection of Real-time & Latency Sensitive Applications/Traffic Scalable & High Performing

High-Speed Protection Against Perimeter and Internal Network Challenges

Solutions

Multi-Tiered Protection

Threats

Legacy System Access

Basic Applications

Worms

Application Access

Application Layer Threats

Software Vulnerabilities

DPI Firewall

IDP/IPS/File

App Layer

Real-time Prot.

What Is the Ideal Solution for Next-Generation Protection?

Content Filter


Introducing the NSA 2400MX

Introducing the NSA 2400MX

NSA 2400MX MSRP: $2,995

SonicOS 5.7

Key Features: (8+2) GbE + 16 FE Interfaces, 2 USB, 1

Console Dual Expansion slots (Back) USB 3G/Analog Modem Failover Optional Stateful HA Advanced Switching Multi-WAN GAV/IPS/Anti-Spyware/Application

Intelligence Comprehensive Anti-Spam Service Expandable Wireless with SonicPoint-N

Dual-Band Integrated SSL VPN Virtual Assist/Access

For SonicWALL Partner Use All Rights Reserved 8

High performance and scalable UTM Security

Flexible and redundant connectivity Increased port density and

advanced switching feature set

2+8 GbE Interfaces

16 FE Interfaces

Dual Expansion Slots (Future Use)

x Unprotected - 70% of traffic is not scanned properly or at all

x Slow Access - No method of distinguishing business vs. non-business traffic

x Mystery Traffic - 25-35% Unknown Application Use

x Limited Control - Uncontrolled Web access, not tied to users; Non-business activity overwhelms bandwidth; No end point protection strategy

Next-Generation Protection

Office Network

Typical Protection SonicWALL Solution Protected – 100% traffic scanning including

unlimited file sizes - Truly scalable UTM

Best-in-class Performance – Optimize the network by distinguishing business vs. non-business traffic; deploy gigabit networking

Uncover App Usage – Identify unknown application use with the Application Intelligencefeature set

Ultimate Control – Control Web and application access, from network to the end point

Flexibility & Redundancy – Failover and high availability options for the ultimate in business continuity

Increased Port Density/Switching – Provides 26 ports with advanced switching features for internal connectivity


http://en.wikipedia.org/wiki/Image:BitTorrentLogo.gif

http://en.wikipedia.org/wiki/Image:H_logo.gif

http://images.google.com/imgres?imgurl=http://farm1.static.flickr.com/202/484304113_b6979df85b.jpg&imgrefurl=http://robashwell20.wordpress.com/2008/01/22/facebook-gives-good-karma/&h=188&w=500&sz=25&hl=en&start=1&um=1&tbnid=hzLoStHa2DhnmM:&tbnh=49&tbnw=130&prev=/images?q=facebook+logo&um=1&hl=en

http://en.wikipedia.org/wiki/Image:Skype_logo.png

Application Intelligence and Control

Traditional Firewalls can only determine port and protocol

SonicWALL’s Patented RFDPI Technology provides Application Classification and Inspection offering 1,100+ pre-defined applications

Control, Block or bandwidth limit what applications are used on a per user basis

Business RelatedNon-Business Related

Corporate NetworkHTTP

TCP

IM

Email

Permit Business Related Applications

Block or Bandwidth limitNon-Business Related Applications

Internet


http://en.wikipedia.org/wiki/Image:BitTorrentLogo.gif



http://www.salesforce.com/products/

http://www.oracle.com/index.html

http://images.google.com/imgres?imgurl=http://www.experientia.com/blog/uploads/2007/08/sap.jpg&imgrefurl=http://www.experientia.com/blog/sap-user-experience-testing/&h=1188&w=2395&sz=205&hl=en&start=6&um=1&tbnid=TgxjctreCJb-NM:&tbnh=74&tbnw=150&prev=/images?q=sap&um=1&hl=en&sa=N

http://images.google.com/imgres?imgurl=http://www.instranet.com/company/partners/images/siebel_logo.gif&imgrefurl=http://www.instranet.com/company/partners/&h=60&w=200&sz=2&hl=en&start=1&um=1&tbnid=J7qL057FlT2mkM:&tbnh=31&tbnw=104&prev=/images?q=siebel+logo&um=1&hl=en

http://images.google.com/imgres?imgurl=http://www.beckerconsulting.us/images/Microsoft%20Office%20Sharepoint%20logo.jpg&imgrefurl=http://www.beckerconsulting.us/sharepoint.htm&h=71&w=327&sz=14&hl=en&start=8&um=1&tbnid=-rK2HZP2edynhM:&tbnh=26&tbnw=118&prev=/images?q=sharepoint+logo&um=1&hl=en&sa=X

http://www.salesforce.com/products/

http://images.google.com/imgres?imgurl=http://www.instranet.com/company/partners/images/siebel_logo.gif&imgrefurl=http://www.instranet.com/company/partners/&h=60&w=200&sz=2&hl=en&start=1&um=1&tbnid=J7qL057FlT2mkM:&tbnh=31&tbnw=104&prev=/images?q=siebel+logo&um=1&hl=en


http://images.google.com/imgres?imgurl=http://www.beckerconsulting.us/images/Microsoft%20Office%20Sharepoint%20logo.jpg&imgrefurl=http://www.beckerconsulting.us/sharepoint.htm&h=71&w=327&sz=14&hl=en&start=8&um=1&tbnid=-rK2HZP2edynhM:&tbnh=26&tbnw=118&prev=/images?q=sharepoint+logo&um=1&hl=en&sa=X




Next-Generation NSA Architecture

11

SonicWALLSolution Features

1. Consolidated & Integrated Security Technology

2. Application Visibility - Inspection of Real-time & Latency Sensitive Applications/Traffic

3. Scalable & High Performing Enough to Protect Against Perimeter and Internal Network Challenges

Multi-Tiered Protection Technology

2010 SecurityRequirements

Patented Re-Assembly Free DPI (RFDPI)

Multi-Core High Performance Architecture


NSA 2400MX Features

Multi-Function Security Integration Complete Threat Protection with IPS & Anti-

Malware/Virus/Spyware Content Control & Filtering

Application Visibility Integrated Application Intelligence Bandwidth Management, Application Lists

Ultimate Connectivity “Clean VPN” Secure IPSec VPN SSL VPN Clients with Windows, MAC & Linux Exceptional User Policy Control Integrated Wireless Switch

Switching Features Increased port density (8+2 GbE, 16 FE) VLAN Trunking, Link Aggregation, Layer 2 Discover

SSL and IPSec VPN

Intrusion Prevention

Anti-Malware

Content Filtering

Bandwidth Management

Application Intelligence

Anti-Spam

Wireless Management

Enforced Client Anti-Virus


Advanced Switching

NSA 2400MX Compare Models Chart

NSA 240 NSA 2400 NSA 2400MX NSA 3500Interfaces 3 GbE, 6 FE, PC Card

Slot, 2 USB6 GbE 8+2 GbE, 16 FE, 2

USB, 2 Module Slots 6 GbE, 2 USB

Stateful Throughput 600 Mbps 775 Mbps 775 Mbps 1.5 Gbps

IPS Throughput 195 Mbps 275 Mbps 275 Mbps 750 Mbps

GAV Throughput 115 Mbps 160 Mbps 160 Mbps 350 Mbps

UTM Throughput 110 Mbps 150 Mbps 150 Mbps 240 Mbps

IMIX Throughput 195 Mbps 235 Mbps 235 Mbps 580 Mbps

MAX UTM Connections

32,000/50,000 125,000 125,000 175,000

Site-to-Site VPN 25/50 75 75 800

GVC Bundled/Max 2/25 10/250 10/250 50/1,000

SSL VPN Bundled/Max

2/15 2/25 2/25 2/30

Virtual Assist Bundled/Max

30-Day Trial/5 1/5 1/5 2/10


Customer:

Branch Office

Key Upsell:

• 4-Core design provides a 60% increase in threat prevention performance

Gigabit level firewall performance

Increase in Application Intelligence policies

NSA 350001-SSC-7016

4-Core CPU

512 MB RAM

6 GbE Interfaces

Customer:

Branch Office

Key Upsell:

8-Core design provides a 150% increase in threat prevention performance

Includes Stateful High Availability for increased network reliability

Increase in VPN performance

NSA 450001-SSC-7012

8-Core CPU

512 MB RAM

6 GbE Interfaces

Customer:

Small Organizations

Key Upsell:

Provides scalable deployment options for mid-size networks

6 10/100/1000 interfaces for Multi-WAN failover, LAN and DMZ

NSA Lineup Including the NSA 2400MX

NSA 240001-SSC-7020

2-Core CPU

256 MB RAM

6 GbE Interfaces

Customer:

Small Organizations

Key Upsell:

Provides scalable deployment options for mid-size networks

3 GbE, 6 FE, PortShield

WWAN (3G/Modem)

NSA 24001-SSC-8760

2-Core CPU

256 MB RAM

3 GbE, 6 FE

Customer:

Small Organizations/ Branch Offices

Key Upsell:

Increased port density (16 FE, 2+8 GbE Interfaces)

Advanced switching (Port Bonding, VLAN Trunking, Layer 2 QoS)

Future Modular Expansion

NSA 2400MX01-SSC-7100

2-Core CPU

256 MB RAM

2+8 GbE, 16 FE, Dual Expansion Slots

Customer:

Large Enterprise

Key Upsell:

8 10/100/1000 interfaces for high-speed connectivity to WAN, LAN and DMZ networks

Dedicated interface for Stateful High Availability

LCD information center

Advanced 24x7 support

NSA E5500

SKU: 01-SSC-7008

E-Class Support 24x7

SKU: 01-SSC-7260

8-Core CPU

1 GB RAM

8 GbE Interfaces

New

400 Mbps UTM 750 Mbps UTM100 Mbps UTM 150 Mbps UTM


NSA 2400MX Offers the Following Over the PRO 1260

NSA 2400MX PRO 1260

Interfaces 8+2 GbE, 16 FE, 2 USB, 2 Module Slots

27 FE

UTM Performance 150 Mbps 5 Mbps

UTM Connections 125,000 6,000

Application Intelligence and Control Yes N/A

Modular Expansion (Future) Yes N/A

Advanced Switching Features Yes N/A

Stateful High Availability Yes N/A

SSL-VPN Yes N/A


■ (2+8) GbE Ethernet Interfaces with Future Modular Expansion■ Advanced Switching Features ■ Application Intelligences and Control■ Greater UTM Performance■ Optional Stateful High Availability■ SSL-VPN for Remote Access

Target Customers for the NSA 2400MX

Current customers looking to upgrade their PRO 1260 Appliances

Customers with Security and Switch Requirements Port Density VLAN Trunking, Link Aggregation, Port Security

Customers looking for Application Intelligences and Control


Qualifying Questions

Does your customer have a requirement for increased port-density?

Does your customer have a requirement to decrease the number of devices on their internal network?

Does your customer have a requirement for increased security across multiple switch ports?

Does the customer have a need for additional switching features on their network security appliance?


Introducing SonicOS 5.7

18

SonicOS 5.7 Redefines Deployment & Management Simplicity and Functionality

Advanced Switching

TSA/Citrix Authentication

Integrated Load Balancing

Application Bandwidth Management

Single Sign-On

Route-based VPN

Fully Dynamic GUI

And more…


“New” in SonicOS 5.7

VLAN Trunking

Layer 2 Discovery

Link Aggregation

Port Security

Layer 2 QoS

Rate Control

Rapid Spanning Tree

Port Mirroring


Switching features available on the NSA 2400MX

VLAN Trunking

Provides the ability to “Trunk” different VLANs between multiple switches

Customer Advantage: Simplifies VLAN management and configuration by reducing the need to configure VLAN information on every switch


Layer 2 Discovery

Uses IEEE 802.1AB (LLDP)/Microsoft LLTD protocols and switch forwarding table to discover devices visible from a port

Customer Advantage: Provides Layer 2 network information for all devices attached to the NSA 2400MX


Link Aggregation


Aggregate ports to increase performance and redundancy

Customer Advantage: Can increase performance and port redundancy when connected to a switch/server that supports aggregation

Port Security

Customer Advantage: Allows administrators to bind trusted MAC address/addresses to a specific port to decrease unauthorized access on that port


Provides the ability to bind MAC Address/Addresses to a specific port interface

SonicWALL Services


Gateway Anti-Virus, Anti-Spyware, IPS

Gateway AV, Anti-Spyware and Intrusion Prevention: Delivers real-time gateway scanning for viruses,

worms, Trojans and more Blocks installation of malicious spyware at gateway Protects against network-based application layer

threats by scanning for software vulnerabilities such as buffer overflows and back-door exploits

Application Intelligence* provides bandwidth management, application level access and data leakage controls

Utilizes dynamically updated database containing thousands of threat signatures

Did You Know?SonicWALL’s solution is unique in its ability to handle unlimited file sizes

and virtually hundreds of thousands of concurrent downloads

*Available on TZ 210, NSA and E-Class NSA Series appliances

Intelligent, Real-time Network Security Protection


Content Filtering

Content Filtering Service (CFS): Blocks inappropriate and illegal content, reduces

organizational liability and increases productivity Allows granular level blocking based on pre-defined

categories Utilizes a vast ratings database of ~16M million

Web site entries Apply access or denial policies on up to 56

categories by individual or group identity, or by time of day with CFS Premium Edition

Unequalled Content Filtering Enforcement

Did You Know?To receive eRate funding you are required by law to install a content

filtering solution in compliance with the Children’s Internet Protection Act


Reporting and Graphs

ViewPoint: Allows for early security protection

Understand and respond to malicious activities

Delivers insight into firewall activity Understand and control the use of Internet activities

Reduces productivity losses Understand user behavior; identify bandwidth-

intensive activities

Controls costs by enabling more efficient bandwidth utilization Understand bandwidth usage; anticipate future needs

Instant Visibility Into Your Network

Did You Know?ViewPoint enables you to create on-demand and scheduled reports that

can be exported in a variety of formats for distribution


Combined Package

Comprehensive Gateway Security Suite: Combines Gateway Anti-Virus, Anti-Spyware, Intrusion

Prevention, Application Intelligence*, Content Filtering, 24x7 Support and ViewPoint reporting in one solution

Keeps your network safe from viruses, spyware, worms, Trojans and more

Turns your SonicWALL firewall into a Unified Threat Management solution

Automatic signature updates stop attacks before they can enter your network, ensuring around the-clock protection

Complete Network Security in One Package

* Available on TZ 210, NSA and E-Class NSA Series appliances

Did You Know?SonicWALL CGSS saves you up to 75% off the

cost of purchasing the services individually


Enforced Client Protection

Client/Server Anti-Virus Suite: Delivers gateway-enforced, layered virus and

spyware protection for desktops and laptops and comprehensive virus protection for servers

Provides automated signature updates, eliminating machine-by-machine deployment

Ensures all computers accessing the network have the latest software installed, updated and active

Centralized desktop firewall blocks unwanted Internet access to or from the computer

Automated and Enforced Client AV Protection

Did You Know?Client/Server Anti-Virus Suite allows you to create on-demand and

scheduled Web-based reports that give you a real-time view of yournetwork, anti-virus and anti-spyware environment


VPN Clients

Global VPN Client and SSL VPN for UTM: Provide two easy-to-use, easy-to-manage options

for secure remote access to network resourcessuch as files, applications and email

Utilize SonicWALL Clean VPN technology to scanand clean incoming traffic

Allow you to add user licenses quickly and easily as your network grows

SSL VPN for UTM utilizes SonicWALL NetExtender technology on Windows, Mac and Linux PCs

Secure Remote Access to Network Resources

Did You Know?SonicWALL TZ 200/210, NSA and E-Class NSA firewalls include Global VPN Client & SSL VPN user licenses for

secure remote access from any location


Email Protection

Remove junk email before it enters your network

Did You Know?Spam, phishing and virus-laden email makes up over 90% the

email traffic an organization receives each day

Comprehensive Anti-Spam Service (CASS) Easy to activate – Activates with one click,

requires minutes to configure. Works immediately – once activated the service

will immediately start to block spam, phishing and virus-laden email.

Saves bandwidth – Blocks and rejects junk email at the gateway, before it enters your network.

Saves time – The TZ or NSA network security appliance is your single point of management for all traffic going through the device, including spam.


Maximize Your Investment

Global Support Services:

Only through an active support agreement can you get: Access to the latest features and firmware releases 24x7x365 technical support if there’s ever a problem Advance Exchange hardware replacement in the

event of failure

Support is available as a stand-alone contract or as part of a software or hardware bundle

Did You Know?SonicWALL is a two-time SSPA STAR award finalist for

“Service Excellence in Emerging Business Support”

SonicWALL Global Support Services Make a Difference!

Next Generation Protection, Today

High-performance, scalable UTM security Multi-core architecture for increased performance Application Intelligence and Control IPS, GAV and Anti-Malware inspection

Flexible and redundant connectivity Multi-WAN Failover and Load Balancing Optional Stateful High Availability

Increased port density and advanced switching feature set 26 interfaces VLAN Trunking, Link Aggregation, Layer 2 Discovery

NSA 2400MX Hardware/Support


NSA 2400MX Hardware and HA SKU

NSA 2400MX 01-SSC-7100

NSA 2400MX TotalSecure 1 Year 01-SSC-8854

NSA 2400MX High Availability Unit 01-SSC-8855

SonicWALL Stateful HA Upgrade for NSA 2400 Series 01-SSC-7095

Support Services SKU

SonicWALL Dynamic Support 8 X 5 for 2400 Series 1YR01-SSC-7245






SonicWALL Software and Firmware Updates for 2400 Series 1YR01-SSC-7251



NSA 2400MX Security Services


Security Service SKU

GAV/IPS/Anti-Spyware/ Application Intelligence Service

Gateway Anti-Virus and IPS for NSA 2400 Series 1YR01-SSC-6135



Content Filtering Premium Service

Premium Content Filtering Service for NSA 2400 Series 1YR01-SSC-7334



Comprehensive Gateway Security Suite

Comprehensive Gateway Security Suite for NSA 2400 Series 1YR01-SSC-9225



Question/Answer

Thank You

NSA 2400MX Partner Overview Name Title Email Phone.

Documents

Transcript of NSA 2400MX Partner Overview Name Title Email Phone.