Product Information
The SonicWALL TZ Series of nextgeneration firewalls (NGFW) is ideally suited for any organization that requires enterprise-grade network protection.
SonicWALL TZ Series firewalls provide broad protection from compromise by combining advanced security services consisting of on-box and cloudbased anti-malware, anti-spyware, intrusion prevention system (IPS), and content/URL filtering. To counter the trend of encrypted attacks, the SonicWALL TZ Series has the ability and processing power to inspect SSL connections against the latest threats, providing an even higher level of security. Backed by the SonicWALL Global Response Intelligent Defense (GRID) network, the SonicWALL TZ Series delivers continuous updates to maintain a strong network defense from cybercriminals. With full deep packet inspection operating at performance levels that match broadband connection speeds, the SonicWALL TZ Series is able to scan every byte of every packet on all ports and protocols with almost zero latency. This eliminates bottlenecks and allows organizations to use security as an enabler, not an inhibitor.
The SonicWALL TZ Series also features an integrated wireless access controller, 1-Gigabit Ethernet ports, and native VPN remote access clients for Apple IOS, Google Android, Windows, Mac OS and Linux for fast, secure mobile access. The SonicWALL Global Management System (GMS) enables deployment and management of SonicWALL TZ Series firewalls from a single system at the central office.
The products include fully tested routing features for IPv4 and IPv6, including route-based VPN protocols OSPF and RIP v1/v2. Authentication protocols support includes LDAP and RADIUS as well as single sign-on capability that can integrate with Active Directory. All SonicWALL firewalls provide advanced threat protection from botnets, and UDP and ICMP flooding.
- Protection for SMB
The SonicWALL TZ Series offers small and medium business (SMB) a broad range of security protection in an integrated solution that can match speed and budget requirements. Intuitive wizards simplify deployment and setup. And should broadband service be interrupted, connections can be retained with integrated 3G/4G support. In addition, the SonicWALL TZ Series products feature integrated wireless controller support for highspeed 802.11ac SonicPoint wireless access points. - Managed security for distributed environments
Schools, retail shops, remote sites, branch offices and distributed enterprises need a solution that integrates with their corporate firewall. SonicWALL TZ Series firewalls share the same code base - and same protection - as the flagship SuperMassive next generation firewalls. This simplifies remote site management, as every administrator sees the same user interface (UI). In addition, GMS enables remote SonicWall firewalls to be monitored, configured and managed through a single pane of glass. By adding high-speed, secure wireless, the SonicWALL TZ Series also extends the protection perimeter to include customers and guests frequenting the retail site or remote office. For complex distributed environments, SonicWall firewalls give you a strong security perimeter that extends from the central office to all remote locations to ensure consistent application of policies for the entire organization. - Reassembly-Free Deep Packet Inspection (RFDPI) engine
The RFDPI engine provides superior threat protection and application control without compromising performance. This patented engine inspects the traffic stream to detect threats at Layers 3-7. The RFDPI engine takes network streams through extensive and repeated normalization and decryption in order to neutralize advanced evasion techniques that seek to confuse detection engines and sneak malicious code into the network. Once a packet undergoes the necessary preprocessing, including SSL decryption, it is analyzed against a single proprietary memory representation of three signature databases: intrusion attacks, malware and applications. The connection state is then advanced to represent the position of the stream relative to these databases until it encounters a state of attack, or another "match" event, at which point a pre-set action is taken. As malware is identified, the SonicWALL firewall terminates the connection before any compromise can be achieved and properly logs the event. However, the engine can also be configured for inspection only or, in the case of application detection, to provide Layer 7 bandwidth management services for the remainder of the application stream as soon as the application is identified. - Extensible architecture for extreme scalability and performance
The RFDPI engine is designed from the ground up with an emphasis on providing security scanning at a high performance level, to match both the inherently parallel and ever-growing nature of network traffic. When combined with multi-core processor systems, this parallel-centric software architecture scales up perfectly to address the demands of deep packet inspection at high traffic loads. The SonicWALL TZ Series platform relies on processors that, unlike x86, are optimized for packet, crypto and network processing while retaining flexibility and programmability in the field - a weak point for ASICs systems. This flexibility is essential when new code and behavior updates are necessary to protect against new attacks that require updated and more sophisticated detection techniques.