Software firewall is divided into: ISA Server / Check Point hardware firewall is divided into: Juniper (more high-end) / Sonic Wall (more in the end) / the FortiGate (low-end) Summary SonicWALL? Network security appliance (NSA) Series next-generation firewall uses unique multi-core design and patented Reassembly-Free Deep Packet Inspection? (the RFDPI) technology *, so you can get a full range of security protection without compromising network performance. The NSA Series overcome various limitations of existing security solutions, it is a real-time implementation of a packet the overall scan to detect the current internal and external threats. NSA Series provides intrusion prevention, malware protection, and application intelligence, control and visualization capabilities, while providing a breakthrough performance. NSA Series With advanced routing, stateful high-availability and high-speed IPSec and SSL VPN technology allows branch offices, central sites and distributed mid-enterprise networks even more security, reliability, functionality and productivity, and also the cost and complexity a minimum. NSA Series SonicWALL NSA 220, NSA 220 Wireless-N, NSA 250M, NSA 250M Wireless-N, NSA 2400, NSA 3500 and NSA 4500, provides a variety of solutions designed to meet a variety of enterprise network security needs. The main features and advantages? Next-generation firewall with integrated intrusion prevention, gateway anti-virus, anti-spyware, URL filtering, application intelligence and control, SSL decryption and other functions, to prevent threats from entering the network, providing granular application control, without sacrificing network performance. ? Scalable multi-core hardware and reassembly-free deep packet inspection scanning and clear threat of unlimited file sizes, wire-speed scan thousands of connections, and the delay is almost zero. ? Application intelligence, control and visualization applications fine-grained control and real-time visualization, can protect the bandwidth priority implementation, to ensure maximum network security and productivity. ? Stateful high-availability and load-balancing capabilities make full use of network bandwidth, to ensure maximum network uptime, and you can at any time access to critical business resources and ensure that VPN tunnels and other network traffic will not be interrupted during failover. ? Standard VoIP features for each element of the VoIP infrastructure, from communications equipment to apply to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Server, to provide the highest level of security protection. ? SonicWALL Clean Wireless function can optionally be integrated into the dual-band wireless mode, or via SonicWALL SonicPoint wireless access points that provide powerful, secure 802.11a/b/g/n 3x3 MIMO wireless capabilities, and in accordance with the PCI DSS standard scanning illegal wireless access point. ? Networking quality of service (QoS) features use industry standard 802.1p and differentiated services code point (DSCP) Class of Service (CoS) designators to provide powerful and flexible bandwidth management, VoIP, multimedia and business-critical applications play crucial an important role. NSA 250M and NSA 250M Wireless-N devices integrated module supports device integration reduces the purchase and maintenance costs, while enhancing the flexibility of deployment. Technical specifications specifications firewall NSA 220 / W NSA 250M / W NSA 2400 NSA 3500 NSA 4500 SonicOS version of SonicOS 5.8.1.1 SonicOS Enhanced version 5.6 (or later version) state throughput of 600 Mbps 750 Mbps 775 Mbps 1.5 Gbps 2.75 Gbps GAV performance of 115 Mbps 140 Mbps 160 Mbps 350 Mbps 690 Mbps IPS performance 2 195 Mbps 250 Mbps 275 Mbps 750 Mbps 1.4 Gbps comprehensive DPI performance 110 Mbps 130 Mbps 150 Mbps 240 Mbps 600 Mbps IMIX performance 180 Mbps 210 Mbps 235 Mbps 580 Mbps 700 Mbps maximum number of connections 3 85,000 110,000 225,000 325,000 500,000 DPI connections 32,000 64,000 125,000 175,000 250,000 new connections per second 2,200 3,000 4,000 7,000 10,000 the support node unlimited refused service attack defense 22 classes of DoS, DDoS and scanning attacks support SonicPoint (up to) 16 24 32 48 64 VPN 3DES/AES Throughput 5 150 Mbps 200 Mbps 300 Mbps 625 Mbps 1.0 Gbps point-to-point VPN tunnel 255,075,800 1,500 Bundled Global VPN client licenses (up to) 2 (25) 2 ( 25) 10 (250) 50 (1,000) 500 (3,000) bundled SSL VPN license (up to) 2 (15) 2 (15) 2 (25) 2 (30) 2 (30) bundled virtual auxiliary technical staff ( up to) a 30-day trial period (5) 1 (5) 2 (10) 2 (10) encryption / authentication / DH Group DES, 3DES, AES (128, 192, 256 bit) MD5 SHA-1/DH Groups 1, 2, 5, 14 key exchange Key Exchange IKE, IKEv2, manual key, PKI (X.509), L2TP over IPSec-based VPN support of the routing (OSPF, RIP Global VPN) Certificate to support Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN, SCEP failure peer detection (DPD) support DHCP over VPN support IPSec NAT traversal support redundant VPN gateway supports support Client Platform Microsoft? Windows 2000, Windows XP, Microsoft? Vista 32/64 bit, Windows 7 32/64 bit support SSL VPN platform Microsoft? Windows 2000/XP/Vista 32/64 bit / Windows 7, Mac 10.4 +, Linux FC 3 + / Ubuntu 7 + / OpenSUSE * Test Method: maximum performance should be consistent with the provisions of RFC2544 (for firewall). Actual performance may vary depending on network conditions and service. VPN throughput UDP traffic, packet size of 1418 bytes, in line with the provisions of RFC2544. UTM performance the HTTP test results on the Spirent Avalanche / Reflector. Ordering Information To learn more about SonicWALL completely anti-virus or any SonicWALL security products and services For more information, please contact E-mail hldt45@tesin.cn.