The Dell SonicWALL TZ 215 Security Firewall Appliance with TotalSecure is a Unified Threat Management firewall that protects your network in a retail, small business, distribution, or a branch office environment. It integrates anti-malware, intrusion prevention, application control, and URL filtering. Powered by a dual processor, it delivers deep packet inspection without slowing down network performance by eliminating bottlenecks that other firewalls may produce. In terms of security, you can utilize Reassembly-Free Deep Packet inspections to keep track of malware and viruses on both inbound and outbound connections. Moreover, Dell SonicWALL TotalSecure continuously delivers updates that take effect immediately without reboots and offers 24x7 support for a year.
The TZ 215 monitors applications to provide maximum bandwidth for critical tasks, while throttling down non-productive ones. Application traffic analytics provides you with insights about network traffic, bandwidth utilization, and security threats so you can identify non-business applications consuming network resources and adjust system policies accordingly to improve the network. With SSL and IPsec VPN, remote users can securely connect to your network with or without client-based access. In addition to VPN capabilities, the TZ 215 features a Gigabit WAN port for establishing a wired connection to your modem and six LAN Ethernet 10/100/1000 ports for networking with servers, Wireless-N access points, and anything else that's Ethernet-based. Advanced networking features include multiple ISP failover and load balancing, dual-band secure wireless, network segmentation, and PCI compliance capabilities.
Intrusion Prevention
- Signature-based scanning - tightly integrated, signature-based intrusion prevention scans packet payloads for vulnerabilities and exploits that target critical internal systems
- Automatic signature updates - Dell SonicWALL's Research Team continuously updates and deploys an extensive list of IPS signatures that take immediate effect and do not require reboots or any other interruption in service
- Outbound threat prevention - the ability to inspect both inbound and outbound traffic ensures that the network will not unwittingly be used in Distributed Denial of Service attacks and will prevent any Command and Control Botnet communication
- Intra-zone IPS protection - intrusion prevention can be deployed between internal security zones to protect sensitive servers and to prevent internal attacks
VPN
- IPSec VPN for site- to-site connectivity - high-performance IPSec VPN allows the firewall to connect remote branch offices to a central location
- SSL VPN or IPSec client remote access - utilize clientless SSL VPN technology or an easy-to-manage IPSec client for easy access to email, files, computers, intranet sites, and applications from a variety of platforms
- Redundant VPN gateway - when using multiple WANs, a primary and secondary VPN can be configured to allow seamless automatic failover and failback of all VPN sessions
- Route-based VPN - the ability to perform dynamic routing over VPN links ensures continuous uptime in the event of a temporary VPN tunnel failure by seamlessly re-routing traffic between endpoints through alternate routes
- Clean VPN - Dell SonicWALL Clean VPN both secures the integrity of VPN access and decontaminates malicious threats before they can enter the corporate network
Gateway Threat Prevention
- Gateway anti-malware - Dell SonicWALL's RFDPI engine scans all ports and protocols for viruses without file size or stream length limitation. SonicLabs Researchers constantly provide updated threat protection, providing faster response times and threat prevention
- Reassembly-Free Deep Packet Inspection (RFDPI) - this keeps track of malware regardless of the order or inspection timing with which the packets arrive. It allows for extremely low latency while eliminating file and stream size limitations. Additionally, it provides greater performance and security than outdated proxy designs that reassemble contents using sockets bolted to traditional anti-virus programs and are plagued with inefficiencies and the overhead of memory thrashing leading to high latency, low performance and size limitations
- Cloud anti-virus - using the built-in RFDI engine, Dell SonicWALL can leverage the power of the cloud to provide the most comprehensive set of anti-malware signatures available, while minimizing latency or delay. The Dell SonicWALL Cloud Anti-Virus Service provides millions of additional malware signatures for inspection of executable files using the most up-to-date information available
- Bi-directional Inspection - RFDPI can be performed on both inbound and outbound connections to provide protection in all network traffic directions
- 24x7 signature updates - the SonicLabs Research Team creates and updates signature databases that are propagated automatically to the firewalls in the field, with those signatures taking immediate effect without any reboot or service interruption required
Firewall and Networking
- Stateful packet inspection - all network traffic is inspected, analyzed, and brought into compliance with firewall access policies
- DOS attack protection - SYN Flood protection provides defense against DOS attacks using both layer 3 SYN proxy and layer 2 SYN blacklisting technologies
- Flexible deployment - can be deployed in traditional NAT and Layer 2 Bridge modes
- Policy-based routing - create routes based on protocol to direct traffic to a preferred WAN connection with the ability to fail back to a secondary WAN in the event of an outage
- High availability - supports Active/Passive failover to ensure increased reliability by protecting against hardware or software faults
- WAN load balancing - load balance up to four WAN interfaces using Round Robin, Spillover, or Percentage based methods
- WAN acceleration - decreases latency and increases transfer speeds between remote sites for even higher network efficiency gains
VoIP
- Advanced QoS - guarantee critical communications with 802.1p and DSCP tagging and remapping of VoIP traffic on the network
- DPI of VoIP traffic - predefined signatures detect and block VoIP specific threats
- H.323 gatekeeper and SIP proxy support - block spam calls by requiring that all incoming calls are authorized and authenticated by H.323 gatekeeper or SIP proxy
Management and Monitoring
- Web GUI - an intuitive web-based interface allows quick and convenient configuration in addition to management through Dell SonicWALL Global Management System (GMS) or the CLI
- SNMP - provides the ability to protectively monitor and respond to threats and alerts
- Netflow/IPFIX - export an extended set of data through IPFIX or NetFlow protocols for granular insight into application traffic, bandwidth utilization, and security threats in addition to troubleshooting and forensics capabilities. Compatible with Dell SonicWALL Scrutinizer and third-party monitoring and reporting applications
- Centralized policy management - with Dell SonicWALL GMS, monitor, configure, and report on multiple Dell SonicWALL appliances from a single intuitive interface and customize your security environment to suit your individual policies
Application Intelligence and Control
- Application control - identify and control applications or individual components of an application based on RFDPI technology instead of relying on well-known ports and protocols
- Application bandwidth management - allocate bandwidth to critical applications while throttling unproductive application traffic for an efficient and productive network
- Custom application identification - create and configure custom application identification based on traffic parameters or on patterns unique to an application in its network communications
- Application traffic analytics - provides organizations with granular insight into application traffic, bandwidth utilization, and security in addition to troubleshooting and forensics capabilities
- Application signature database - a continuously expanding database of over 3,500 application signatures ensures that administrators are able to control the usage of all the latest applications on their network at a category or individual level
- User activity tracking - user identification is seamlessly integrated with Microsoft Active Directory and other authentication systems enabling tracking and reporting of individual user identification
- GeoIP country traffic identification - identify and control network traffic going to or coming from specific countries
Convenient Network Security Package
Dell SonicWALL TotalSecure removes the complexity associated with choosing between a host of products and add-on services by integrating comprehensive network security in one package. The TotalSecure solution includes for one year:
- Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service subscription
- Application Intelligence, Control, and Visualization subscription included
- Content Filtering Service subscription
- 24x7 Support subscription