System Security and Virus Protection

• Overview of Firewall and VPN Consulting Services
• Cisco Firepower, ASA and PIX Firewall Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Check Point Software Consulting
• Barracuda CloudGen Firewall Consulting
• WatchGuard Consulting
• Juniper Networks NetScreen Consulting
• SonicWall Consulting
• Fortinet FortiGate Firewall Consulting
• Symantec Raptor and VelociRaptor Consulting

SonicWall has been providing network security technology for two decades and has created a line of products and services designed to offer small and mid-size organizations a cost-effective Unified Threat Management (UTM) solution. SonicWall's current families of firewall/VPN appliances are built around the company's proprietary Reassembly-Free Deep Packet Inspection (RFDPI) technology, which provides in-depth intrusion protection and anti-malware with minimal sacrifice in performance. SonicWall's latest firewall/VPN products based on the SonicOS operating system include the SonicWall TZ series of UTM Firewalls for branch offices and temporary sites, the SonicWall Network Security Appliance (NSa) Series for small and mid-size businesses, and the SonicWall E-Class NSa Series for enterprises.

Progent's firewall SonicWall-certified consultants can provide expert online consulting and troubleshooting support for current and legacy SonicWall products and can help you integrate your SonicWall technology with other security products to build and maintain a cohesive solution for unified threat management.

SonicWall's Current Products Supported by Progent
SonicWall offers a wide selection of next-generation physical and virtual firewalls and subscription-based cloud services to provide Unified Threat Management (UTM) for small and home offices, midsize businesses, distributed enterprises, and large data centers. SonicWall's modern high-performance security gateways include SonicWall's TZ, NSa, and NSsp Series firewalls. Cloud services cover Gateway Anti-Virus, Intrusion Protection Service (IPS), Application Visibility and Control, Content Filtering Services, and Threat Analysis based on machine learning. SonicWall's next generation firewall/VPN appliances all run the SonicOS operating system and use SonicWall's RFDPI engine to check network traffic for embedded threats, signs of performance problems, and access to or usage of applications. RFDPI allows all this traffic inspection to take place without significant performance loss.

For details about SonicWall's next-generation firewalls and security services, see SonicWall next-generation firewall planning and deployment services.

SonicWall's Legacy Products Supported by Progent
SonicWall TZ Series Firewall/VPN Appliances: SonicWall's TZ Series security appliances, now in their fifth generation, provide a one-box, full-featured unified threat management solution for small businesses, branch offices, and distributed enterprise sites. The TZ Series supports a broad range of functions including firewall, IPsec and SSL VPN remote access, VoIP, 802.11b/g/n wireless, 3G wireless failover, and multi-WAN connectivity. TZ Series appliances offer high-performance anti-virus, anti-spyware and spam, intrusion prevention, content filtering, and application control as well as bandwidth management and real-time traffic visualization. Wireless versions are available for all models of the TZ family.

The entry-level SonicWall TZ 100 includes five 10/100 Ethernet ports and supports 6,000 UTM Connections and 5 site-to-site VPN tunnels. The TZ 100 offers Gateway Anti-Virus (GAV) throughput of 35 Mbps, Intrusion Prevention Service (IPS) throughput of 50 Mbps, UTM throughput of 25 Mbps, and IMIX throughput of 40 Mbps. The mid-range SonicWall TZ 200 includes five 10/100 Ethernet ports and supports 12,000 UTM Connections and 10 site-to-site VPN tunnels. The TZ 200 offers GAV throughput of 50 Mbps, IPS throughput of 70 Mbps, UTM throughput of 35 Mbps, and IMIX throughput of 50 Mbps. The mid-range SonicWall TZ 210 includes five 10/100 Ethernet ports plus two 10/100/1000 ports and supports 20,000 UTM Connections and 15 site-to-site VPN tunnels. The TZ 210 offers GAV throughput of 70 Mbps, IPS throughput of 110 Mbps, UTM throughput of 50 Mbps, and IMIX throughput of 110 Mbps.

SonicWall NSA Series Firewall/VPN Appliances: The SonicWall Network Security Appliance (NSA) Series is designed to provide fast routing, stateful high-availability, plus fast IPsec and SSL VPN support for branch offices, small and mid-size businesses, and distributed mid-enterprise networks. The NSA 240 comes in a desktop enclosure and includes three Gigabit Ethernet ports and six 10/100 Ethernet ports. The NSA 2400, 3500, and 4500 come in a 1U rack-mountable chassis and include six Gigabit Ethernet ports. The NSA 2400MX includes 16 Gigabit Ethernet ports.

The entry-level SonicWall NSA 240 can handle up to 32,000 DPI connections and supports 24 VPN tunnels at 150 Mbps. The NSA 240 offers stateful throughput of 600 Mbps, GAV performance of 115 Mbps, and IPS performance of 195 Mbps. UTM performance is 110 Mbps, and IMIX throughput is 195 Mbps. The SonicWall NSA 2400 can handle up to 125,000 DPI connections and supports 75 VPN tunnels at 300 Mbps. The NSA 2400 offers stateful throughput of 775 Mbps, GAV performance of 160 Mbps, and IPS performance of 275 Mbps. UTM performance is 150 Mbps, and IMIX throughput is 235 Mbps. The SonicWall NSA 2400MX has the same performance as the NAS 2400 but has higher port density plus two expansion slots. The SonicWall NSA 3500 can handle up to 175,000 DPI connections and supports 800 VPN tunnels at 625 Mbps. The NSA 3500 offers stateful throughput of 1.5 Gbps, GAV performance of 350 Mbps, and IPS performance of 750 Mbps. UTM performance is 240 Mbps, and IMIX throughput is 580 Mbps. The high-end SonicWall NSA 4500 can handle up to 250,000 DPI connections, and supports 1,500 VPN tunnels at 1 Gbps. The NSA 4500 offers stateful throughput of 2.75 Gbps, GAV performance of 690 Mbps, and IPS performance of 1.4 Gbps. UTM performance is 600 Mbps, and IMIX throughput is 700 Mbps.

SonicWall E-Class NSA Series Firewall/VPN Appliances: The SonicWall E-Class Network Security Appliances (NSA) offer top performance and high availability for enterprise data centers and campus networks. These firewall/VPN devices can be scaled to support up to 16 processor cores. Each 1U rack-mountable device offers stateful inspection as standard and deep packet inspection as an option and each can scan more than 50 protocols and block more than one million unique malware threats. Each version also includes a High Availability (HA) Gigabit Ethernet port.

The SonicWall NSA E5500 includes eight Gigabit Ethernet ports, can handle up to 500,000 full DPI connections, and supports 4,000 VPN tunnels at 1.7 Gbps. The E5500 offers stateful throughput of 3.9 Gbps, GAV performance of 1 Gbps, and IPS performance of 2 Gbps. Full deep packet inspection performance is 850 Mbps, and IMIX throughput is 1.1 Gbps. The mid-range SonicWall NSA E6500 includes eight Gigabit Ethernet ports, can handle up to 600,000 full DPI connections, and supports 6,000 VPN tunnels at 2.7 Gbps. The E6500 offers stateful throughput of 5 Gbps, GAV performance of 1.69 Gbps, and IPS performance of 2.3 Gbps. Full deep packet inspection performance is 1.59 Gbps, and IMIX throughput is 1.4 Gbps. The high-end SonicWall NSA E7500 includes four Gigabit Ethernet ports and four SFP (SX, LX or TX) ports, can handle up to 1,000,000 full DPI connections, and supports 10,000 VPN tunnels at 3 Gbps. The E7500 offers stateful throughput of 5.6 Gbps, GAV performance of 1.84 Gbps, and IPS performance of 2.58 Gbps. Full deep packet inspection performance is 1.7 Gbps, and IMIX throughput is 1.6 Gbps.

After two decades as a supplier of network security technology, SonicWall has shipped more than one million appliances worldwide. Popular legacy firewall/VPN devices from SonicWall include the SonicWall PRO 1260 and the SonicWall PRO 2040. Progent's firewall and VPN consultants are experienced in providing support for network environments that incorporate legacy SonicWall firewalls and that combine SonicWall devices with products from other vendors to create comprehensive security solutions. Progent can help you support, manage, and troubleshoot your legacy SonicWall equipment and software and can also help you assess the business case for migrating from older SonicWall products to more advanced technology. Legacy SonicWall products supported by Progent's online security engineers include:

SonicWall PRO 2040 Security Appliance: The SonicWall PRO 2040 delivers complete business continuity for small to mid-sized networks. With integrated support for SonicWall's Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, the PRO 2040 provides real-time protection against viruses, spyware, worms, Trojans and other malicious threats. The PRO 2040 also combines built-in anti-spam protection and support for SonicWall's Content Filtering Service to provide enhanced productivity and network utilization.

SonicWall PRO 1260 Secure Switch: The SonicWall PRO 1260 is a security and switching platform designed for small network applications. The PRO 1260 combines deep inspection Firewall and IPsec VPN capabilities with an intelligent, wire-speed, 24-port auto-sensing MDIX switch in a single network security and LAN switching platform. This Firewall/VPN appliance can be configured either as an unmanaged switch under SonicOS Standard or as an intelligent managed LAN switching platform through the SonicWall PortShield architecture enabled in SonicOS Enhanced.

SonicWall's PortShield architecture allows all 24 ports on the PRO 1260 to be independently configured into custom security zones (PortShield groups), each with its own "virtual Firewall," along with granular rate limiting on each interface. Virtual Firewalling ensures the ports are secured not only from the Internet, but also from other devices on the LAN. Additionally, the SonicOS Enhanced operating system allows managed switching functions such as port-level rate limiting, traffic monitoring and statistics, and configurability for link duplex and speed.

Progent's SonicWall Consulting Services
Progent's SonicWall consultants can help you select, deploy and support SonicWall's Firewall and VPN appliances and provide training to help you manage SonicWall technology. Progent can also assist you to integrate SonicWall hardware and software into a mixed-vendor networking environment and provide a single source for a broad range of support, training, and security consulting services. Progent's consultants hold the industry's most prestigious security certifications including CISM, CISSP-ISSAP, CISA, and GIAC. Progent's security services include security vulnerability scanning, proactive security and performance monitoring, security planning, and emergency recovery assistance.

Progent's expert online support saves time and money by doing away with the delay and expense of travel. This saves you from the loss of business productivity and opportunity that can result from prolonged network downtime. Progent's Technical Response Center has delivered online solutions to clients in every state in the United States. (Refer to Progent's customer testimonials).

Contact Progent for Security Consulting and Troubleshooting
To get in touch with Progent about SonicWall consulting and support services, call Progent at 800-993-9400 or visit Contact Progent.