You're currently on:
Border Gateway Protocol (BGP) advanced routing.
BGP is a large-scale routing protocol used to communicate routing information between Autonomous Systems (AS’s), which are well-defined, separately administered network domains. BGP support allows for SonicWALL security appliances to replace a traditional BGP router on the edge of a network's AS. The current SonicWALL implementation of BGP is most appropriate for "single-provider / single-homed" environments, where the network uses one ISP as their Internet provider and has a single connection to that provider.SonicWALL BGP is also capable of supporting "single-provider / multi-homed" environments, where the network uses a single ISP but has a small number of separate routes to the provider.
Because BGP transmits packets in the clear, SonicWALL supports using an IPSec tunnel for secure BGP sessions. The IPSec tunnel is configured independently within the VPN configuration section of the SonicOS Web-based management interface, while BGP is enabled on the Network > Routing page and then configured on the SonicOS Command Line Interface.
The following are the key features supported in all versions of SonicOS 5.6:
Deep Packet Inspection of SSL encrypted data (DPI-SSL) Provides the ability to transparently decrypt HTTPS and other SSL-based traffic, scan it for threats using SonicWALL’s Deep Packet Inspection technology, then re-encrypt (or optionally SSL-offload) the traffic and send it to its destination if no threats or vulnerabilities are found. This feature works for both client and server deployments. It provides additional security, application control, and data leakage prevention functionality for analyzing encrypted HTTPS and other SSL-based traffic. The following security services and features are capable of utilizing DPI-SSL: Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention, Content Filtering, Application Firewall, Packet Monitor and Packet Mirror. DPI-SSL is supported on SonicWALL NSA models 240 and higher.
3G and Modem Support SonicOS 5.6 supports 3G and Modem configurations for WAN Load Balancing (WLB). (3G and Modem support is available on all NSA models except the SonicWALL NSA 2400.)
Command Line Interface Enhancements Provides increased support through the command line interface to configure and modify Network Address Translation (NAT) Policies, Access Rules, Service Objects, and Service Groups.
Diagnostic Improvements Includes a diagnostic tool which automatically checks the network connectivity and service availability of several pre-defined functional areas of SonicOS. The tool also returns results and attempts to describe causes, if any exceptions are detected.
Dynamic DNS per Interface Provides the ability to assign a Dynamic DNS (DDNS) profile to a specific WAN interface. This allows administrators who are configuring WAN Load Balancing to advertise a predictable IP address to the DDNS service.
Increased DPI Connection Support Provides the ability to increase the number of simultaneous connections on which SonicWALL security appliances can apply Deep Packet Inspection (DPI) services (Intrusion Prevention Service, Application Firewall, Gateway Anti-Virus, and Gateway Anti-Spyware). This feature is intended for high-end (E-Class) customers who need to support a large number of concurrent connections. (Note: There is a slight performance decrease when this option is enabled.)
FairNet for SonicPoint-N Provides the ability to create policies that equally distribute bandwidth for all wireless users connected to a SonicPoint-N.
MAC-IP Spoof Detection and Prevention Provides additional protection against MAC address and IP address based spoofing attacks (such as Man-in-the-Middle attacks) through configurable Layer 2 and Layer 3 admission control.
Packet Mirroring Provides the ability to capture copies of specified network packets from other ports. This is commonly used for network appliances that require monitoring of network traffic, such as an intrusion detection system. Customers can now gather data from one of the other ports on a SonicWALL to look for threats and vulnerabilities and help aid with diagnostics and troubleshooting.
Route-based VPN with Dynamic Routing Support Extends support for advanced routing (either OSPF or RIP) to VPN networks. This simplifies complex VPN deployments by enabling dynamic routing to determine the best path that traffic should take over a VPN tunnel.
Signature Download through a Proxy Server Provides the ability for SonicWALL security appliances to download signatures even when they access the Internet through a proxy server. This feature also allows for registration of SonicWALL security appliances through a proxy server without compromising privacy.
Single Sign-on for Terminal Services and Citrix Provides support for transparent authentication of users logged in from a Terminal Services or Citrix server. This transparent authentication enables Application Firewall and CFS policy enforcement in Terminal Services and Citrix environments.
NOTE: The SonicWALL Terminal Services Agent is not supported in SonicOS 5.6.5.0 due to limitations of current SSO agent functionality that prevent its use with Active/Active Clustering.
SSL VPN Enhancements SonicOS 5.6 provides a number of SSL VPN enhancements:
o Granular User Controls Allows network administrators to configure different levels of policy access for NetExtender users based on user ID.
o One-Time Password Provides additional security by requiring users to enter a randomly generated, single-use password in addition to the standard user name and password credentials.
o Separate Port and Certificate Control Provides separate port access for SSL VPN and HTTPS management certificate control, allowing administrators to close HTTPS management while leaving SSL VPN open.
o Virtual Assist Provides a remote assistance tool to SonicWALL security appliance users. SonicWALL Virtual Assist is a thin client remote support tool provisioned via a Web browser. It enables a technician to assume control of a customer’s PC or laptop for the purpose of providing remote technical assistance.
Unbounded Multiple WAN Support Provides the ability to enable any number of WAN Ethernet interfaces for WAN Load Balancing and Failover on SonicWALL appliances.
VPN Policy Bound to VLAN Interface Allows users to bind a VPN policy to a VLAN interface when configuring a site-to-site VPN.
WebCFS Server Failover Provides the ability to enable WebCFS server failover, allowing a SonicWALL security appliance to contact another server for URL rating information if the local server is unavailable. This ensures performance continuity for Web navigation and Web content filtering functionality.
http://www.ntsecurity.com/sonicwall-nsa-2400-series-sonicos-expanded-license.html in_stock Yes Products Catalog USD
01-SSC-7090 Dell SonicWALL NSA 2400 Series SonicOS Expanded License
Details
Border Gateway Protocol (BGP) advanced routing.
BGP is a large-scale routing protocol used to communicate routing information between Autonomous Systems (AS’s), which are well-defined, separately administered network domains. BGP support allows for SonicWALL security appliances to replace a traditional BGP router on the edge of a network's AS. The current SonicWALL implementation of BGP is most appropriate for "single-provider / single-homed" environments, where the network uses one ISP as their Internet provider and has a single connection to that provider.SonicWALL BGP is also capable of supporting "single-provider / multi-homed" environments, where the network uses a single ISP but has a small number of separate routes to the provider.
Because BGP transmits packets in the clear, SonicWALL supports using an IPSec tunnel for secure BGP sessions. The IPSec tunnel is configured independently within the VPN configuration section of the SonicOS Web-based management interface, while BGP is enabled on the Network > Routing page and then configured on the SonicOS Command Line Interface.
The following are the key features supported in all versions of SonicOS 5.6:
Deep Packet Inspection of SSL encrypted data (DPI-SSL) Provides the ability to transparently decrypt HTTPS and other SSL-based traffic, scan it for threats using SonicWALL’s Deep Packet Inspection technology, then re-encrypt (or optionally SSL-offload) the traffic and send it to its destination if no threats or vulnerabilities are found. This feature works for both client and server deployments. It provides additional security, application control, and data leakage prevention functionality for analyzing encrypted HTTPS and other SSL-based traffic. The following security services and features are capable of utilizing DPI-SSL: Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention, Content Filtering, Application Firewall, Packet Monitor and Packet Mirror. DPI-SSL is supported on SonicWALL NSA models 240 and higher.
3G and Modem Support SonicOS 5.6 supports 3G and Modem configurations for WAN Load Balancing (WLB). (3G and Modem support is available on all NSA models except the SonicWALL NSA 2400.)
Command Line Interface Enhancements Provides increased support through the command line interface to configure and modify Network Address Translation (NAT) Policies, Access Rules, Service Objects, and Service Groups.
Diagnostic Improvements Includes a diagnostic tool which automatically checks the network connectivity and service availability of several pre-defined functional areas of SonicOS. The tool also returns results and attempts to describe causes, if any exceptions are detected.
Dynamic DNS per Interface Provides the ability to assign a Dynamic DNS (DDNS) profile to a specific WAN interface. This allows administrators who are configuring WAN Load Balancing to advertise a predictable IP address to the DDNS service.
Increased DPI Connection Support Provides the ability to increase the number of simultaneous connections on which SonicWALL security appliances can apply Deep Packet Inspection (DPI) services (Intrusion Prevention Service, Application Firewall, Gateway Anti-Virus, and Gateway Anti-Spyware). This feature is intended for high-end (E-Class) customers who need to support a large number of concurrent connections. (Note: There is a slight performance decrease when this option is enabled.)
FairNet for SonicPoint-N Provides the ability to create policies that equally distribute bandwidth for all wireless users connected to a SonicPoint-N.
MAC-IP Spoof Detection and Prevention Provides additional protection against MAC address and IP address based spoofing attacks (such as Man-in-the-Middle attacks) through configurable Layer 2 and Layer 3 admission control.
Packet Mirroring Provides the ability to capture copies of specified network packets from other ports. This is commonly used for network appliances that require monitoring of network traffic, such as an intrusion detection system. Customers can now gather data from one of the other ports on a SonicWALL to look for threats and vulnerabilities and help aid with diagnostics and troubleshooting.
Route-based VPN with Dynamic Routing Support Extends support for advanced routing (either OSPF or RIP) to VPN networks. This simplifies complex VPN deployments by enabling dynamic routing to determine the best path that traffic should take over a VPN tunnel.
Signature Download through a Proxy Server Provides the ability for SonicWALL security appliances to download signatures even when they access the Internet through a proxy server. This feature also allows for registration of SonicWALL security appliances through a proxy server without compromising privacy.
Single Sign-on for Terminal Services and Citrix Provides support for transparent authentication of users logged in from a Terminal Services or Citrix server. This transparent authentication enables Application Firewall and CFS policy enforcement in Terminal Services and Citrix environments.
NOTE: The SonicWALL Terminal Services Agent is not supported in SonicOS 5.6.5.0 due to limitations of current SSO agent functionality that prevent its use with Active/Active Clustering.
SSL VPN Enhancements SonicOS 5.6 provides a number of SSL VPN enhancements:
o Granular User Controls Allows network administrators to configure different levels of policy access for NetExtender users based on user ID.
o One-Time Password Provides additional security by requiring users to enter a randomly generated, single-use password in addition to the standard user name and password credentials.
o Separate Port and Certificate Control Provides separate port access for SSL VPN and HTTPS management certificate control, allowing administrators to close HTTPS management while leaving SSL VPN open.
o Virtual Assist Provides a remote assistance tool to SonicWALL security appliance users. SonicWALL Virtual Assist is a thin client remote support tool provisioned via a Web browser. It enables a technician to assume control of a customer’s PC or laptop for the purpose of providing remote technical assistance.
Unbounded Multiple WAN Support Provides the ability to enable any number of WAN Ethernet interfaces for WAN Load Balancing and Failover on SonicWALL appliances.
VPN Policy Bound to VLAN Interface Allows users to bind a VPN policy to a VLAN interface when configuring a site-to-site VPN.
WebCFS Server Failover Provides the ability to enable WebCFS server failover, allowing a SonicWALL security appliance to contact another server for URL rating information if the local server is unavailable. This ensures performance continuity for Web navigation and Web content filtering functionality.
Additional Information
| Manufacturer | SonicWALL |
|---|---|
| Subscription Service | SonicOS Expanded |
| Subscription Length | Does Not Expire |
| Special Sales Message | No |
| Price | $595.00 |
Loading...