SonicWALL TZ Series
N E T WO R K SECU R I T Y
n Uncompromising
performance
n SonicWALL
Reassembly-
Free Deep Packet
Inspection™
n SonicWALL
Unified
Threat Management
(UTM)
n SonicWALL
Comprehensive Anti-Spam Service
n SonicWALL
Firewall
Application n Modular
3G wireless broadband
n Secure
802.11b/g/n
wireless LAN (WLAN)
n Advanced
SSL VPN
IPSec and
n SonicWALL
PortShield
port-level security
n Automated
failback
n Intuitive
wizards
failover and configuration n Robust
Voice and Video over IP (VoIP)
n Global
Management
System
Uncompromising Security and Performance
Network security can not stand still while driving factors like Web 2.0 advancements, expanding
bandwidth and emerging threats rapidly evolve and overtake its capabilities. By leveraging
SonicWALL’s advanced processing technology, the all new TZ Series dramatically expands
comprehensive protection at a performance level that will not compromise network throughput.
Each TZ appliance is available as a SonicWALL TotalSecure™ solution, conveniently bundling all hardware
and services needed for comprehensive protection.
The all new SonicWALL® TZ Series, including the TZ 100, TZ 200 and TZ 210 network security
appliances, shatters these limitations by offering the revolutionary, fastest multi-layered network
security in its class. Utilizing SonicWALL’s industry-leading Unified Threat Management (UTM) and
patented Reassembly-Free Deep Packet Inspection,™* the TZ Series delivers in-depth protection at
unparalleled performance. The all new TZ Series dramatically outperforms their TZ 180 and 190
predecessors, with the entry level TZ 100 delivering two-and-a-half times the UTM throughput of its
predecessors. The TZ Series cost-effectively integrates IPSec and SSL VPN remote access, VoIP, and
optional 802.11b/g/n wireless with optional 3G wireless broadband. Designed for the needs of
distributed enterprise sites, branch offices, small and medium-sized businesses, retailers and
managed service providers, the TZ Series is the first affordable solution that can maximize the
highest speeds available from modern ISPs while delivering full UTM protection.
Features and Benefits
Uncompromising performance, applying real-time
scanning over state-of-the-art high-speed architecture,
delivers up to Gigabit Ethernet speeds.
SonicWALL Reassembly-Free Deep Packet
Inspection™ provides enterprise-class protection for
key Internet services such as Web, e-mail, file transfers,
Microsoft Windows services and messaging.
Secure 802.11b/g/n wireless LAN (WLAN)
technologies provide secure high-speed wireless
connectivity with SonicWALL’s wireless security
enforcement.
Advanced IPSec and SSL VPN connectivity
options provide secure, high-speed office-to-office
and individual user remote access.
SonicWALL Unified Threat Management (UTM)
delivers real-time gateway protection against the latest
viruses, spyware, intrusions, software vulnerabilities
and other malicious code.
SonicWALL PortShield port-level security offers
flexible protection from traffic on the WAN, DMZ and
devices inside your network by easily grouping ports
into logical units.
SonicWALL Comprehensive Anti-Spam Service
utilizes real-time sender IP reputation analysis and
cloud-based Advanced Content Management
techniques to remove spam, phishing and virus-laden
messages from inbound SMTP-based e-mails before
they reach your network. This service eliminates the
need for less effective, slow responding and error
prone real-time black list services.
Automated failover and failback ensures
continuous uptime of VPN tunnels by diverting traffic
over alternate WAN or WLAN connections in the event
of primary connection failure.
SonicWALL Application Firewall offers granular
application-level access controls to manage bandwidth
and prevent leaks of sensitive or proprietary information.
Modular 3G wireless broadband and analog
modem support can be used as either a primary or
secondary WAN connection for business continuity or
rapid deployment in remote locations.
Intuitive configuration wizards simplify even the
most complicated tasks, including VPN set-up, NAT
configuration and public server configuration.
Robust Voice and Video over IP (VoIP) capabilities
offer secure, standards-based support for sending
voice (audio), streaming video and other media over
IP-based networks.
Global Management System (GMS) provides
comprehensive global management and reporting
tools for simplified configuration, enforcement and
management from a central location.
*U.S. Patent 7,310,815–A method and apparatus for data stream analysis and blocking.
SonicWALL TZ Series - Wired and Wireless Security for Mission-critical Networks
Network security and control is accomplished through
a robust and flexible platform
SonicWALL Deep Packet Inspection Architecture
Eliminated Threats &
Clean VPN
Application Control
Content Filtering
Firewall
3
Anti-Spyware
Automatic Threat
Database Updates
Intrusion Prevention
SonicWALL Real-time
Unified Threat
Management
Gateway Anti-Virus
Non-business Traffic
1
Clean Traffic
Emerging
Blended Threats
Viruses
Forwarding
Engine
Network
I/O Engine
Routing
L7
L4
PROT
Exploits
L2
Bandwidth
Management
L3
Spyware
Traffic
IN
QoS
Defrag
Stateful Classification and Transformation
Normal
Traffic
OUT
Bandwidth
Management
Presentation
Flow Order
2
SonicWALL’s
Update Engine
Best-in-Class Threat Protection
TZ Series is the
ultimate security
platform for
1 SonicWALL deep packet inspection protects against
network risks such as viruses, worms, Trojans, spyware,
phishing attacks, emerging threats and Internet misuse.
Application Firewall adds highly-configurable controls
to prevent data leakage and manage bandwidth at the
application level.
2 The SonicWALL Reassembly-Free Deep Packet
Inspection™ (RFDPI) engine comprehensively scans
entire packets in real-time without stalling traffic
in memory. This functionality allows threats to be
identified and eliminated over unlimited file sizes
and unrestricted concurrent connections, without
interruption.
3 The TZ Series provides dynamic network protection
through continuous, automated security updates,
protecting against emerging and evolving threats
without requiring any administrator intervention.
distributed
SonicWALL Clean VPN™
and small
networks,
including remote
The TZ Series includes innovative SonicWALL
Clean VPN™ technology that protects against
vulnerabilities and decontaminates malicious
code in traffic from remote users, mobile users
and branch offices before it enters the corporate
network, all without user intervention. The
TZ Series supports both IPSec and SSL VPN
termination.
and branch
Clean
Traffic
Suppliers
TZ Series Appliance
Mobile Users
UTM Engine
Internal
Network
Telecommuters
Advanced
Content
Management
Advanced
Reputation
Management
offices and
retail/POS
Comprehensive Anti-Spam Service
Rejected
deployments
Eliminated
Threats
Email
Server
TZ Series Appliance
New SonicWALL Comprehensive Anti-Spam Service
Centralized Policy Management
enables SonicWALL’s fully-featured, market-leading protection
against spam, phishing, viruses and malware with one simple check
box. Using the same technology behind SonicWALL’s award-winning
Email Security product portfolio, you’ll enjoy a 98% effectiveness
rate against spam, and reduced bandwidth consumption by
eliminating up to 80% of threats at the connection level. With no
additional hardware, software or servers to purchase, you’ll benefit
from an integrated, single point of management, configuration and
reporting.
The TZ Series can be managed using the
SonicWALL Global Management System (GMS),
which provides flexible, powerful and intuitive
tools to manage configurations, view real-time
monitoring metrics and integrate policy and
compliance reporting, all from a central location.
Home Office
Deployments
Home Office/Small Office
Designed as a complete Unified Threat Management (UTM) platform
delivering business-class protection to home office networks, the
TZ Series features PortShield technology, which provides secure
segmentation of the home network from “work” equipment.
TZ Series
Technologies utilized:
n Unified Threat Management (Gateway Anti-Virus, Anti-Spyware,
Intrusion Prevention, Content Filtering, and Enforced Client Anti-Virus)
n PortShield
n SSL
Home Office/Small Office LAN
VPN and IPSec VPN
n Optional
802.11n Clean Wireless
TZ 100
TZ 200
ail/Small Office
Home/Family LAN
Comprehensive Gateway Security Suite includes
gateway anti-virus, gateway anti-spyware,
intrusion prevention, content filtering,
ViewPoint reporting and 24x7 support.
TZ 210
Small Office/Retail
The TZ Series is a high-performance security platform
for small professional offices and retail deployments
with mission-critical needs. The TZ 200 and TZ 210
Series feature 3G connectivity through an integrated
USB slot for use as either the primary or backup WAN
connection.
Site-to-Site
VPN
Corporate
3G/Analog Failover
Clean VPN to
encrypt and
decontaminate
traffic.
Global
Management
System
Technologies utilized:
n Unified Threat Management (Gateway Anti-Virus,
Anti-Spyware, Intrusion Prevention, Content
Filtering, and Enforced Client Anti-Virus)
Secure Wireless Zone
n 3G
Office LAN
Point-of-Sale Systems
Comprehensive Gateway Security Suite includes
gateway anti-virus, gateway anti-spyware,
intrusion prevention, content filtering,
ViewPoint reporting and 24x7 support.
Secure wireless zone
with Reassemblyfree Deep Packet
Inspection scanning.
failover
n WAN
and VPN failover
n PortShield
Clean VPN to
encrypt and
decontaminate
traffic.
n 802.11n
Remote Branch Office
n Global
Clean Wireless
Management System
TZ 100
Remote/Branch Office
The TZ 200 and TZ 210 Series are the fastest multilayered network security solutions in their class,
giving remote and branch offices unparalleled
Unified Threat Management protection against
continually evolving threats. PortShield offers network
segmentation, while Application Firewall on the TZ
210 provides application classification and policy
management to control applications. Get security and
segmentation, along with performance and reliability.
TZ 200
TZ 210
Site-to-Site
VPN
3G/Analog Failover
Corporate
Global
Management
System
Secure Wireless Zone
Technologies utilized:
n Unified Threat Management (Gateway Anti-Virus,
Anti-Spyware, Intrusion Prevention, Content
Filtering, and Enforced Client Anti-Virus)
n Comprehensive
n SSL
Anti-Spam Service
VPN and IPSec VPN
n 802.11n
n Global
Comprehensive Gateway Security Suite includes
gateway anti-virus, gateway anti-spyware,
intrusion prevention, content filtering,
ViewPoint reporting and 24x7 support.
Clean Wireless
n Optional
hardware failover
Management System
TZ 100
TZ 200
Sales Network
TZ 210
Protected Server Network
Secure wireless zone
with Reassemblyfree Deep Packet
Inspection scanning.
Clean VPN to
encrypt and
decontaminate
traffic.
Specifications
All New TZ Series
SonicWALL TZ 100
01-SSC-8734
SonicWALL TZ 100 Wireless-N
01-SSC-8736 (International)
SonicWALL TZ 100 TotalSecure
01-SSC-8739
SonicWALL TZ 100 Wireless-N
TotalSecure 01-SSC-8728
(International)
Firewall
SonicOS Version
Stateful Throughput 1
GAV Throughput 2
IPS Throughput 2
UTM Throughput 2
IMIX Throughput 2
Maximum Connections
New Connections/Sec
Nodes Supported
Denial of Service Attack Protection
SonicPoints Supported
TZ 180 Series TZ 100 Series
TZ 200 Series TZ 210 Series
SonicOS Standard
SonicOS Enhanced
SonicOS Enhanced
SonicOS Enhanced
90 Mbps
100 Mbps
100 Mbps
200 Mbps
10 Mbps
35 Mbps
50 Mbps
70 Mbps
15 Mbps
50 Mbps
70 Mbps
110 Mbps
10 Mbps
25 Mbps
35 Mbps
50 Mbps
–
40 Mbps
50 Mbps
110 Mbps
6,000
6,000
8,000
10,000
250
1,000
1,000
1,500
10/25/Unrestricted Unrestricted
22 classes of DoS, DDoS and scanning attacks
16
1
2
16
VPN
3DES/AES Throughput 3
Site-to-Site VPN Tunnels
Bundled GVC Licenses
(Maximum)
Bundled SSL VPN Licenses (Maximum)
Encryption/Authentication Key Exchange Certificate Support
VPN Features
Global VPN Client Platforms Supported
SSL VPN Platforms
TZ 180 Series 30 Mbps
2 (10 Node), 10 (25 Node)
0 (10 Node), 1 (25 Node)
5 (10 Node), 25 (25 Node)
–
SonicWALL TZ 200 Wireless-N
01-SSC-8743 (International)
SonicWALL TZ 200 TotalSecure
01-SSC-8746
SonicWALL TZ 200 Wireless-N
TotalSecure 01-SSC-8729
(International)
SonicWALL TZ 210
01-SSC-8753
SonicWALL TZ 210 Wireless-N
01-SSC-8755 (International)
SonicWALL TZ 210 TotalSecure
01-SSC-8769
SonicWALL TZ 210 Wireless-N
TotalSecure 01-SSC-8782
(International)
TZ 200 Series 75 Mbps
10
TZ 210 Series
75 Mbps
15
0 (5)
2 (10)
2 (25)
1 (5)
1 (10)
2 (10)
DES, 3DES, AES (128, 142, 256-bit), MD5, SHA-1
IKE, Manual Key, Certificates (X.509), L2TP over IPSec
Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWALL-to-SonicWALL VPN
Dead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway
Microsoft® Windows 2000, Windows XP, Vista 32/64-bit
Microsoft Windows 2000/ XP/ Vista 32/64-bit, Mac OSX 10.4+, Linux FC3+/ Ubuntu 7+/ OpenSUSE
Security Services
Deep Packet Inspection Services
Content Filtering Service (CFS) Enforced Client Anti-Virus and Anti-Spyware
Comprehensive Anti-Spam Service
Application Firewall
SonicWALL TZ 200
01-SSC-8741
TZ 100 Series
75 Mbps
5
TZ 180 Series –
–
TZ 100 Series
TZ 200 Series TZ 210 Series
Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention
HTTP URL, HTTPS IP, keyword and content scanning, ActiveX, Java Applet, and cookie blocking
HTTP/S, SMTP, POP3, IMAP and FTP, Enforced McAfee™ Client E-mail attachment blocking
Supported
Supported
Supported
–
–
Supported
Networking TZ 180 Series TZ 100 Series
TZ 200 Series TZ 210 Series
IP Address Assignment Static, (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP relay
NAT Modes
1, 1:many, many:many, transparent mode 1:1, 1:many, many:1, many:many, flexible NAT (overlapping IPs), PAT, transparent mode
VLANs
PortShield* PortShield
DHCP
Internal server, relay
Routing
RIPv1/v2 advertisement, OSPF, RIP v1/v2, static routes, static routes
policy-based routing, multicast
Authentication
XAUTH/RADIUS, Active Directory, SSO, LDAP, internal user database
User Database
100/150* users
25 users
100 users
150 users
VoIP
Full H.323v1-5, SIP, gatekeeper support, outbound bandwidth management, VoIP over WLAN,
deep inspection security, full interoperability with most VoIP gateway and communications devices
System
Zone Security
Schedules
Object-based/Group-based Management
DDNS
Management and Monitoring
Logging and Reporting
Hardware Failover
Anti-Spam
Load Balancing
Standards
TZ 180 Series Yes*
Yes
Yes*
Built-in Wireless LAN
TZ 180 Series –
TZ 100 Series
TZ 200 Series TZ 210 Series
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Dynamic DNS providers include: dyndns.org, yi.org, no-ip.com and changeip.com
Local CLI, Web GUI (HTTP, HTTPS), SNMP v2; Global management with SonicWALL GMS
ViewPoint, Local Log and Syslog
–
Active/Passive
Active/Passive
RBL support, Allowed/Blocked Lists, Optional SonicWALL Anti-Spam Desktop available*
Yes, Outgoing and Incoming*
TCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
TZ 100 Series
TZ 200 Series TZ 210 Series
Standards
802.11b/g (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, 802.11b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS)
EAP-PEAP, EAP-TTLS)
Antennas (5 dBi Diversity)
Dual, detachable, external
Triple, detachable, external
Radio Power
802.11b
13 dBm maximum
18 dBm maximum
802.11g
20 dBm maximum @ 6~48 Mbps, 18 dBM @ 6~48 Mbps
19dBm @ 54 Mbps
14 dBm @ 54 Mbps
802.11n
–
19 dBm MCS 0, 12 dBm MCS 15
Radio Receive Sensitivity
802.11b
-89 dBm @ 11 Mbps
-90 dBm @ 11Mbps
802.11g
-91 dBm @ 6 Mbps, 73 dBm @ 54 Mbps
-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps
802.11n
–
-89 dBm MCS 0, -70 dBm MCS 15
-in Wireless LAN
Hardware TZ 180 Series Interfaces
Flash Memory/RAM
3G Wireless/Modem
USB Ports
Power Input
Max Power Consumption
Total Heat Dissipation
Certifications
Certifications (Pending)
Form Factor and Dimensions
Weight
WEEE Weight
Major Regulatory Compliance
Environment/Humidity
MTBF
(7) 10/100
16 MB/128 MB
–
–
TZ 100 Series
TZ 200 Series TZ 210 Series
(5) 10/100
(5) 10/100
(2) 10/100/1000, (5) 10/100
16 MB/128 MB
16 MB/256 MB
32 MB/256 MB
–
With USB 3G Adapter/Modem
–
1
2
100 to 240 VAC, 50-60 Hz, 1 A
7.5 W/9.5 W (TZ 100 W)
8.6 W/10.6 W (TZ 200 W)
9.4 W/11.7 W (TZ 210 W)
26 BTU/33 BTU (TZ 100 W)
30 BTU/37 BTU (TZ 200 W)
32 BTU/40 BTU (TZ 210 W)
VPNC AES
7.7 W/10.0 W (TZ 180 W)
26 BTU/34 BTU (TZ 180 W)
ICSA Firewall 4.1, Common Criteria EAL4+, FIPS 140-2 Level 2, VPNC AES*
–
ICSA Firewall 4.1, FIPS
8.3 x 4.9 x 1.1 in
6.30 x 5.63 x 1.46 in
6.30 x 5.63 x 1.46 in
8.9 x 5.9 x 1.9 in
(21.1 x 12.4 x 2.8 cm)
(16 x 14.3 x 3.7 cm)
(16 x 14.3 x 3.7 cm)
(22.5 x 14.9 x 3.6 cm)
1.6 lbs/0.73 kg
2.0 lbs/0.91 kg
2.0 lbs/0.91 kg
2.0 lbs/0.91 kg
1.9 lbs/0.86 kg (TZ 180 W)
2.5 lbs/1.1 kg (TZ 100 W)
2.5 lbs/1.1 kg (TZ 200 W)
2.8 lbs/1.3 kg (TZ 210 W)
2.2 lbs/1.0 kg
1.5 lbs/0.7 kg
1.5 lbs/0.7 kg
2.8 lbs/1.3 kg
2.4 lbs/1.1 kg (TZ 180 W)
1.8 lbs/0.8 kg (TZ 100 W)
1.8 lbs/0.8 kg (TZ 200 W)
3.1 lbs/1.4 kg (TZ 210 W)
FCC Class B, ICES Class B, CE, C-Tick, VCCI Class B, MIC, NOM, UL, cUL, TUV/GS, CB, WEEE, RoHS
32-105° F, 0-40° C/ 5-95% non-condensing
8.5 Years
8 Years Minimum
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated
services. 2Throughput measured using Spirent HTTP throughput test. 3VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
*With SonicOS Enhanced. **3G card and modem are not included. See http://www.sonicwall.com/us/products/cardsupport.html for supported USB devices.
1
SonicWALL, Inc.
1143 Borregas Avenue
T +1 408.745.9600
Sunnyvale CA 94089-1306
F +1 408.745.9300
www.sonicwall.com
©2009 SonicWALL, Inc. SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks
of their respective companies. Specifications and descriptions subject to change without notice. 08/09 SW 702
Download PDF
Similar pages