IPS in Sonicwall PDF

Intrusion Prevention
Advanced threat protection for blocking cyber attacks
Todays cybercriminals are developing and integrates a high- performance, deep Benefits:
new and increasingly sophisticated attacks packet inspection architecture with Highly rated, comprehensive threat
to find a way into your network. They are dynamically updated countermeasures for protection
also creating specialized exploits to take complete protection from application Provides complete and
advantage of new vulnerabilities exploits and other malicious traffic. The continuously updated security
sometimes even before software vendors Dell IPS Service is scalable to support Simplified deployment and
have an opportunity to release a patch so virtually any size organization. It also management of security across a
delays in patching these zero-day provides enforcement between each distributed network
vulnerabilities provides attackers a network zone and the internet, and Customized to fit your security
dangerous window of opportunity. In between internal zones for added security. needs with granular management
order to combat these evolving threats, Scalable to secure any size network
systems administrators need a robust In addition, the Dell IPS Service is powered
network security solution that protects the by an industry-leading threat research
network 24 hours a day, 365 days a year. team with extensive experience in
vulnerability analysis and countermeasure
The Dell SonicWALL Intrusion Prevention creation. The team gathers threat
System (IPS) Service provides network intelligence from over one million
protection around the clock including connected sensors around the world, so
the critical periods between regularly SonicWALL Dell IPS subscribers benefit
scheduled updates. Dells award-winning from a nimble and fast response to new
IPS Service is activated as a license on Dell attacks, regular security updates and
SonicWALL TZ, Network Security Appliance out-of-band updates when necessary.
(NSA) and SuperMassive Series appliances,
[Placeholder image]
Features Smurf, SYN/RST/FIN Flood, WinNuke,
Bi-directional, full stack inspection LAND.c, ICMP Flood, UDP Flood, LOIC,
Provides inbound and outbound Christmas Tree and Backscatter.
inspection of critical application traffic.
Includes protection for a wide variety of Clean VPNInspects all incoming and
attacks, such as SQL injection, cross-site outgoing VPN traffic for attacks and
scripting, remote code execution, shell blocks malicious traffic.
code payloads and remote procedure
calls. Zone-based protectionFlexible,
Dell SonicWALL has a
object-based policy engine enables
partnership Microsoft to
Robust protocols inspectionSpans a quick and easy rule creation for specific
receive advance notification
wide variety of protocols, including TCP, systems, users, groups, hosts or
of new threats through
ICMP, DNS, HTTP, HTTPS, SMTP, IMAP, networks.
MAPP. This enables our threat
POP3, FTP, Telnet, SIP, H.323, RTP, SNMP,
research team to respond
MySQL, MS-SQL, RPC, NetBIOS, SMB Application traffic analyticsOffers
quickly to regular and out-of-
and SMB2. comprehensive logging with filtering
band security advisories.
options, on-box reporting and
Context aware monitoring engine administrator notification capabilities.
System requirements
Features full traffic visibility on end users, Includes customized intrusion
IPS is available with the following
applications, sources, destinations, prevention templates for off-box IPFix
Dell SonicWALL firewalls:
threat types, content and devices. exporting for long-term analytics reporting.
TZ 105 / TZ 105W
TZ 205 / TZ 205W Full network traffic inspectionInspects Application controlProvides the ability
all ports, protocols and IP addresses, to monitor and manage over 4,500
TZ 215 / TZ 215W and includes support for IPv6 traffic and applications including instant messaging
NSA 220 / NSA 220W SSL-encrypted traffic (this requires SSL and peer-to-peer file sharing programs,
Inspection Service). closing a potential back door that can be
NSA 250M / NSA 250MW
used to compromise the network, while
NSA 2600 Robust, sophisticated traffic improving employee productivity and
normalizationProvides advanced conserving bandwidth.
NSA 3600
resistance to evasion, including IP
NSA 4600 packet fragmentation, TCP stream Administrator-defined regular
NSA 5600 segmentation, RPC fragmentation, expression monitoringPrevents data
SMB/NetBIOS, Payload Encoding, leakage by enabling transmission control
NSA 6600 and blocking of sensitive data such as
FTP, TCP Split Handshake and layered
SuperMassive 9200 combinations. credit card and social security numbers,
or specific file attachments to personal
SuperMassive 9400
Compression algorithm inspection web mail services and corporate SMTP
SuperMassive 9600 Supports on-the-fly inspections for or POP3 email.
SuperMassive E10200 numerous algorithms, including Deflate,
Zip, gzip, LZH, gz, tar, tar.gz, tar.Z, tar.bz2
SuperMassive E10400 and Base64 encoding.
SuperMassive E10800
Anomaly-based protectionProvides
numerous forms of security, including
malformed packets, protocol fuzzing,
IP spoofing, MAC spoofing, RFC 793
/ RFC 1122 violations, port scanning,
URL obfuscation, HTML obfuscation,
multicast snooping and DNS tunneling.
In 2013, Dell SonicWALL earned a
Denial of service threshold and heuristic Recommend rating from NSS Labs in
protectionIncludes Ping of Death, Next-Generation Firewall and Intrusion
Teardrop, Bonk, Sub-Seven, Nestea, Prevention System group testing.
2
PDF DOC XLS
1011010101110110101101010110
101011010101100110001001010
DOC 101001010111001011011010101
101101010110110101010
IM
PDF XLS
Client-side Web application Server-side Data Leakage Application control

threat prevention protection threat prevention Prevention
The Dell SonicWALL Intrusion Prevention Service protects against a wide array of attack types.
Next-Generation Threat Prevention
Incoming Outgoing Secured Packet

Packet
Intrusion Prevention Java Protection SQL Injection
Malware Prevention ActiveX Protection Buffer Overflows
Application Control Advanced Logging Software Exploits
7: Application layer DATA CnC Traffic Blocking NetBIOS Evasion SNMPv3
User Activity HTML Obfuscation RADIUS
Monitoring FTP Evasion
SSL Inspection DLP RegEx Filtering SMB Attacks

6: Presentation layer DATA
Payload Encoding Kerberos Attacks
Content Filtering
CnC Traffic SSL VPN
Stateful Packet RPC Fragmentation DNS Poisoning

Inspection SMB Evasion L2TP Attacks
5: Session layer DATA
Session Hijacking Clean VPN
Port Agnostic Inspection
Port Scanning Detection SIP Attacks
TCP Stream Enforcement UDP Flood

Segmentation Multicast Snooping SYN Flood
4: Transport layer DATA TCP Handshake Christmas Tree Land.c Blocking
RFC 793 Enforcement Attacks WinNuke Blocking
TCP Checksum TCP Flood
IP Fragmentation IPv6 Inspection OSPFv3

3: Network layer DATA IP Filtering Botnet Filtering IPSec
IP Reputation Geo-IP Filtering
IP Spoofing Teardrop Blocking
Ping of Death Blocking ICMP Flood
RFC 1122 Enforcement Smurf Blocking
2: Datalink layer DATA MAC Filtering VLAN Hopping Multicast Snooping

MAC Flood DHCP Starvation WEP/WPA/WPA2
MAC Spoof ARP Cache Poisoning
High Availability Redundant Power 3G/ 4G WAN

1: Physical layer DATA Fail-Over Supplies Fail-Over
Hot-Swappable Fans FIPS 140-2
The Dell SonicWALL Intrusion Prevention system utilizes a patented reassembly-free deep packet inspection engine
for full stack protection.
3
Gateway
Maximum Comprehensive
Dell SonicWALL Intrusion prevision New connections Anti- Total
inspected Gateway
appliance throughput per second Malware, Secure
connections Security
IPS and Bundle
Suite
AppControl
TZ 105 / TZ 105W 60 Mbps 8,000 1,000
Intrusion Prevention
TZ 205 / TZ 205W 80 Mbps 12,000 1,500
Malware Prevention
TZ 215 / TZ 215W 110 Mbps 32,000 1,800
Application Control*
NSA 220 / NSA 220W 195 Mbps 32,000 2,200 Content Filtering
NSA 250M / NSA 250MW 250 Mbps 64,000 3,000 24x7 Technical

Support
NSA 2600 700 Mbps 125,000 15,000
NGFW Hardware

NSA 3600 1.1 Gbps 175,000 20,000 Appliance
NSA 4600 2.0 Gbps 200,000 40,000 *Application Control is not available on TZ105 or TZ205
NSA 5600 3.0 Gbps 375,000 60,000

NSA 6600 4.5 Gbps 500,000 90,000 Intrusion Prevention is also available for the following Dell
SonicWALL Next-Generation and Unified Threat Management
SuperMassive 9200 5.0 Gbps 1,000,000 100,000 Firewalls:
SuperMassive 9400 8.0 Gbps 1,000,000 130,000 TZ 100 NSA 2400MX NSA E6500
SuperMassive 9600 9.7 Gbps 1,250,000 130,000 TZ 200 NSA 3500 NSA E7500
SuperMassive E10200 7.5 Gbps 2,500,000 160,000 TZ 210 NSA 4500 NSA E8500
SuperMassive E10400 15 Gbps 5,000,000 320,000 NSA 240 NSA 5000 NSA E8510
SuperMassive E10800 30 Gbps 10,000,000 640,000 NSA 2400 NSA E5500
Gateway Anti- Gateway Anti- Gateway Anti-

Comprehensive Comprehensive Comprehensive
Malware, IPS and Malware, IPS and Malware, IPS and
Gateway Suite Gateway Suite Gateway Suite
App Control App Control App Control
Services (1-year) Services (2-year) Services (3-year)
(1-year) (2-year) (3-year)
TZ 105 / TZ 105W 01-SSC-4844 01-SSC-4845 01-SSC-4846 01-SSC-4877 01-SSC-4878 01-SSC-4879
NSA 220 / NSA 220W 01-SSC-4612 01-SSC-4613 01-SSC-4614 01-SSC-4648 01-SSC-4649 01-SSC-4650
NSA 250M / NSA 250MW 01-SSC-4570 01-SSC-4571 01-SSC-457 01-SSC-4606 01-SSC-4607 01-SSC-4608
NSA 2600 01-SSC-4459 01-SSC-4460 01-SSC-4461 01-SSC-4453 01-SSC-4454 01-SSC-4455
SuperMassive 9200 01-SSC-4202 01-SSC-4203 01-SSC-4204 01-SSC-4172 01-SSC-4173 01-SSC-4174
SuperMassive E10200 01-SSC-9527 01-SSC-9528 01-SSC-9529 01-SSC-9533 01-SSC-9534 01-SSC-9535
For more information About Dell

Dell Inc. (NASDAQ: DELL) listens to
Dell SonicWALL
2001 Logic Drive customers and delivers worldwide
San Jose, CA 95124 innovative technology, business
solutions and services they trust and
www.sonicwall.com
value. For more information about Dell
T +1 408.745.9600
F +1 408.745.9300 Connected Security, please visit
SoftwareDell.com/solutions/security
Dell Software
5 Polaris Way, Aliso Viejo, CA 92656 | www.dell.com 2014 Dell, Inc. ALL RIGHTS RESERVED. Dell, Dell Software, the Dell Software logo and productsas
If you are located outside North America, you can find local identified in this documentare registered trademarks of Dell, Inc. in the U.S.A. and/or other countries.
office information on our Web site. All other trademarks and registered trademarks are property of their respective owners.
DataSheet-IPS-US-TD595-20140320

IPS in Sonicwall PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

IPS in Sonicwall PDF

Uploaded by

Copyright:

Available Formats

Intrusion Prevention

Advanced threat protection for blocking cyber attacks

Client-side Web application Server-side Data Leakage Application control

Next-Generation Threat Prevention

Incoming Outgoing Secured Packet

SSL Inspection DLP RegEx Filtering SMB Attacks

Stateful Packet RPC Fragmentation DNS Poisoning

TCP Stream Enforcement UDP Flood

IP Fragmentation IPv6 Inspection OSPFv3

2: Datalink layer DATA MAC Filtering VLAN Hopping Multicast Snooping

High Availability Redundant Power 3G/ 4G WAN

NSA 5600 3.0 Gbps 375,000 60,000

Gateway Anti- Gateway Anti- Gateway Anti-

For more information About Dell

You might also like