220 likes | 412 Views
The SonicWALL TZ 150 Wireless John Gordineer, Product Line Manager. Details contained within this presentation are preliminary, and may be subject to change. Wireless LANs are in Demand. Small businesses want wireless connectivity Employees demand wireless
E N D
The SonicWALL TZ 150 WirelessJohn Gordineer, Product Line Manager Details contained within this presentation are preliminary, and may be subject to change
Wireless LANs are in Demand • Small businesses want wireless connectivity • Employees demand wireless • Companies benefit from increased productivity Highest growth is in the smallest networks User Plans for Security Products and Services, North America, Infonetics, 2004
What are the Experts Saying? • WiFi clearly has not yet overcome the perception that it is not secure… failure to do so will impede its long-term growth potential. • Jeff Wilson, Infonetics • …”security remains the most significant barrier to adoption for wireless LANs.” • Richard Webb, Infonetics • “If you have public exposure to your signal or people wandering around with wireless NICs, then use VPN. It is the most secure approach.” • John Pescatore, Gartner • "A number of firms have been leery of deploying WLANs simply because they did not view these networks as secure." • Greg Collins, Dell'Oro Group. An RSA study found that of 328 wireless access points detected in downtown London, nearly two-thirds did not have even basic encryption turned on.
Wireless LAN Worries Small Businesses want wireless, but there are concerns • Wireless security is the top concern for business owners User Plans for Wireless LANs, North America, Infonetics, 2004
Wireless LAN Worries Small Businesses want wireless, but there are concerns • Wireless security is the top concern for business owners • Threats like viruses, worms and spyware become even more significant with mobile workers User Plans for Wireless LANs, North America, Infonetics, 2004
The “Hotspot” Threat • Workers using mobile offices for routine business activities • Checking e-mail at hotels or coffee shops • Threat of worms, viruses, spyware increases when workers are outside the secure network • When the worker returns to the office, the threat is spread through the WLAN to the secure LAN Protection is needed immediately when a mobile worker connects to the wireless LAN
Wireless LAN Worries Small Businesses want wireless, but there are concerns • Wireless security is the top concern for business owners • Threats like viruses, worms and spyware become even more significant with mobile workers • Low-end wireless broadband security appliances do not provide adequate protection from these threats! User Plans for Wireless LANs, North America, Infonetics, 2004
FIREWALL ANTI-VIRUS Impact of Blended Threats on Business • New worms and viruses (blended threats) defeat traditional AV and FW solutions with relative ease • Defending the perimeter of the network means expanding past traditional firewall capabilities SLAMMER CODE RED SCOB Buffer Overflows
Introducing the TZ 150 Wireless The TZ 150 Wireless is the first sub-$500 wireless gateway which scans all traffic (including WLAN) for viruses, worms, spyware* and more** • Business Class Hardware • Cavium Nitrox Security on a Chip (SOC) processor • 30+ Mbps SPI throughput • 10+ Mbps 3DES/AES throughput • 8 Mbps Gateway Anti-Virus throughput • Supports up to 10 users/computers • (5) 10/100 Ethernet (WAN, 4-port LAN switch) • Integrated 16.5 dBm 802.11b/g radio with a single, fixed 2 dBi antenna • Security and Productivity Integrated Services • Gateway Anti-Virus, Anti-Spyware* and Intrusion Prevention Service • Enforced desktop Anti-Virus clients • Content Filtering Service • SonicOS Standard *Anti-Spyware available April 2005 **Requires Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service Subscription
Key Features of TZ 150 Wireless • Complete deep packet inspection of all wireless and wired traffic stops viruses, worms, spyware and other application level exploits before they can infect the network • Comprehensive wireless security with enforced wireless encryption, rogue access point detection and wireless intrusion detection • Easy-to-use configuration wizards streamline installation and management • Wireless Guest Services allow the wireless Internet connection to be shared with guests without compromising network security • Secure IPSec VPN allows connectivity to remote networks • Comprehensive logging identifies suspicious network activity • Global management and reporting enable use in distributed networks
Small Business Gateway WIRED LAN WIRELESS LAN • Provides complete zone-to-zone protection between the LAN, WLAN and WAN • Allows guests to freely share the Internet without sacrificing LAN security
Telecommuter Gateway Work PC Work Laptop (WiFiSec) Home Laptop (WGS) Home Laptop (WGS) • Allow VPN tunnel access back to corporate only for wired LAN and WiFiSec computers • Use Wireless Guest Services to provide Internet access only for non-work PCs
AV and IPS FIREWALL ANTI-VIRUS Layered Protection • Deep packet inspection and gateway file scanning for viruses, worms, spyware, IM and P2P exploits, buffer overflow attacks, etc. is the solution SLAMMER CODE RED SCOB Buffer Overflows
Intrusion Prevention 2000+ Signatures DPI Engine Protection against buffer overflows, worms, Trojans and backdoor exploits Prevents IM and P2P applications Protects Internal Network as well as External Network Updateable database Anti-Spyware Real-time spyware installation prevention 1000+ Signatures Stops installation over ActiveX Prevents variety of Malware, Spyware Updateable Database SonicWALL Anti-Virus, Anti-Spyware and Intrusion Prevention Service One Solution • Gateway Anti-Virus • Real-time AV scanning • Reassembly-free patent pending DPI engine • Concurrently scans unlimited number of files of unlimited size for viruses • Supports a variety of protocol types • Updateable database
File Scanning Engine Design Packet Path E-mail Format Decoding Scanning Prevention Decompression Protocol State Machine Start Actions Web Traffic Reassembly- free deflate decompression Prevent SMTP - E-mail Packet E-mail Web IM P2P etc. Reassembly- free Base64 Decoding Gateway Anti-Virus and Anti-Spyware file scanning Reassembly- free ZIP decompression IMAP / POP3 Allow FTP - Files Reassembly- free GZIP decompression Log TCP Stream • No limits placed upon the size of file to be scanned • No limits placed on the concurrent number of files to be scanned
Spyware Protection* • The focus is on Gateway protection: Protect users from downloading spyware in the first place. Deny the opportunity to load malicious spyware and malware on internal computers. E-mailed Spyware Real-Time Deep Packet Inspection and File-based Scanning works in conjunction to scan for malicious Spyware, Malware and Greyware Sensitive Info sent to hackers Spyware Communications Wireless LAN Internal Network Spyware, Malware, Greyware *Available April 2005
SonicWALL Protection Against Outbreaks Single OS reduces test time Dedicated Engineering team “Push” technology for virus outbreaks SonicWALL Objective- Reduced time to protection It’s All About Rapid Response
Policy Server SonicWALL Rapid Response Process Sonic Alert Team Alert RRT Multivendor CLAM/Wild Internet MAFIA Alert Update Sig Update Check for Updates Hourly Pager Enforcement Alert Notify IT And Support SonicWALL Support and IT Marketing IT e-mail Perform Alert Validation SonicWALL QA Push content Content for SonicAlert Web Update
SonicWALL TZ Series The TZ Series is the ideal total security platform for small networks, providing a compelling blend of ease of use for basic networks and flexibility for more complex networks TZ 170 SP Family TZ 170 Family TZ 150 Family TZ 170 SP Wireless TZ 170 SP TZ 170 Wireless TZ 170 TZ 150 Wireless • All TZ 170 Features plus: • Failover/Failback • Analog Modem • Ships with 10 nodes, upgradeable to 25 and Unrestricted • Optional 802.11b/g access point TZ 150 • All TZ 150 Features plus: • 10, 25 and Unrestricted node versions • Upgradeable to SonicOS Enhanced • Optional Port (2nd LAN, WorkPort, DMZ) • 5-port MDIX Switch • Optional 802.11b/g access point • Deep Packet Inspection Engine – Virus, Spyware, Worm protection • 10 nodes (not upgradeable) • Ships with SonicOS Standard (not upgradeable) • 4-port MDIX Switch • Optional 802.11b/g access point
The TZ 150 Wireless Secure – Simple – Affordable • Next Generation Protection • No other small business product provides this level of security • Deep Packet Inspection Firewall • Gateway AV • Anti-Spyware • Intrusion Prevention • IM and P2P control • Content Filtering • Extremely Easy to use • Simple yet sophisticated user interface (UI) • Rapid to deploy • Easy to manage • Globally manageable • Crucial for xSPs and verticals like retail • Key competitive differentiator for enterprise telecommuters and micro-sized remote offices • Affordable The TZ 150 Wireless pricing is best-in-class