Fastest security appliance in the
small and medium market – NEW
DELL SonicWALL TZ Series
Daniel Buehler
System Engineer DELL SonicWALL
Switzerland and Austria
Confidential
New DELL SonicWALL
TZ Series
2
Vertraulich
SonicWALL
Design drivers for the new TZ series
Bandwidth speeds
growing
50Mbps
100 Mbps
200 Mbps
1 Gigabit
3
Wireless device
explosion and 802.11ac
2.4Ghz congestion
Multiple devices per person
Streaming media
Capacity for new security
features
Sandboxing
More SSL Decryption
More traffic
Q1FY16:Wired Models
Up to 4X the
performance
4
Fast
802.11ac
wireless
Q2/3FY16: Wireless Models
DPI SSL
New wizard
4X
SONICWALL TZ600
NSA 250M
4X
NSA 220
SONICWALL TZ500
SONICWALL TZ500-W
3.2X
TZ 215
SONICWALL TZ400
SONICWALL TZ400-W
SONICWALL TZ300
SONICWALL TZ300-W
SONICWALL SOHO
SONICWALL SOHO-W
2X
TZ 205
1.25X
5
TZ 105
Dell SonicWALL TZ600
4 x 1.4 GHz
1 GB System Memory
10x1GbE Copper
2 USB 3.0
64MB Flash
No Integrated Wireless
SPI (Mbps)
1,500
Full DPI (Mbps)
500
Anti-malware (Mbps)
500
IPS (Mbps)
1,100
IPSec
VPN (Mbps)
6
1,100
Dell SonicWALL TZ500
4 x 1.0 GHz
1 GB System Memory
8 x 1GbE Copper
2 USB 3.0
64MB Flash
Integrated Wireless 802.11ac
SPI (Mbps)
1,400
Full DPI (Mbps)
400
Anti-malware (Mbps)
400
IPS (Mbps)
1,000
IPSec
VPN (Mbps)
7
1,000
Dell SonicWALL TZ400
4 x 800 MHz
1 GB System Memory
7 x 1GbE Copper
1 USB 3.0
64MB Flash
Integrated Wireless 802.11ac
SPI (Mbps)
1,300
Full DPI (Mbps)
300
Anti-malware (Mbps)
300
IPS (Mbps)
900
IPSec
VPN (Mbps)
8
900
Dell SonicWALL TZ300
2 x 800 MHz
1 GB System Memory
5 x 1GbE Copper
1 USB 3.0
64MB Flash
Integrated Wireless 802.11ac
SPI (Mbps)
750
Full DPI (Mbps)
100
Anti-malware (Mbps)
100
IPS (Mbps)
300
IPSec
VPN (Mbps)
9
300
Dell SonicWALL SOHO
2 x 400 MHz
512 MB System Memory
5 x 1GbE Copper
1 USB 2.0
32 MB Flash
Integrated Wireless 802.11n
SPI (Mbps)
300
Full DPI (Mbps)
50
Anti-malware (Mbps)
50
IPS (Mbps)
100
IPSec
VPN (Mbps)
10
100
New TZ Feature Support
Feature
DPI SSL
TZ 105
LICENSE
×
TZ 205
×
Geo-IP Filter
Botnet Filter
App Visualization
×
×
×
×
×
×
Application Control
Stateful HA
√
×
√
×
Features copied from current
NSA and TZ products
11
TZ 215 NSA 220 NSA 250M
SUPPORTED
×
√
√
√
√
SUPPORTED
√
√
SUPPORTED
√
√
√
×
√
√
√
√
√
√
√
DPI SSL now available on all TZ
models
DPI Connection Count Increase
SONICWALL TZ600
SONICWALL TZ500
95%
215%
SONICWALL TZ300
320%
12
SONICWALL TZ400
90%
SONICWALL SOHO
215%
SonicPoints Supported Increase
SONICWALL TZ600
(24)
SONICWALL TZ500
(16)
SONICWALL TZ300
(16)
13
SONICWALL TZ400
(16)
SONICWALL SOHO
(16)
SSL VPN Session Increase
Model
14
SonicOS 6.2.0
SonicOS 6.2.2
SM 9600/9400/9200
50
3000
NSA 6600
50
1500
NSA 5600
50
1000
NSA 4600
30
500
NSA 3600
30
350
NSA 2600
25
250
Model
SonicOS 6.2.0
SonicOS 6.2.3
TZ 600
15
200
TZ 500
15
150
TZ 400
10
100
TZ 300
10
50
TZ SOHO
5
10
New TZs – Go-to-market
Hardware SKUs
- Secure Upgrade Plus
- Total Secure
- HA
15
License SKUs
- Standard licenses
- Standard Support
- 1-5 Years
Pricing
- 10-20% increase
from current
generation
- Bundle pricing
competitively
priced
Dell SonicWALL Security Appliance portfolio
SuperMassive Series
Large enterprises,
data centers, ISPs, carriers
NSA Series
Branch offices and
medium sized organizations
TZ Series
Small and remote
offices
16
Wireless
Models
E10800
9800
NSA 6600
TZ600
9600
NSA 5600
TZ500
E10400
9400
NSA 4600
TZ400
9200
NSA 3600
TZ300
NSA2600
SOHO
TZ 600/500/400/300/SOHO
Distributed/SMB Firewall Generational Refresh (6th Gen)
Product claim: High performance, enterprise-grade security for the SMB
Key differentiation & innovations
• High performance Deep Packet Inspection provides protection for
small businesses and for branch offices by scanning every packet of
every connection for malware and attacks
• Easy to use, feature rich platform based on SonicOS that fits perfectly
into SMB, distributed enterprise and retail security needs
Value proposition
• Proven leading security engine for ultimate network protection.
• High performance to avoid a tradeoff between performance and security.
• Ease of Use to for ease of installation and lower TCO
Target markets
• Small Businesses , distributed enterprise, retail locations, home
offices, branch offices, MSP/Telcos
Completes the Gen6 refresh
• SOHO uses 5.9.1.3
• TZ300 and up use SonicOS6.2.3
Product description
• High performance, power
efficient settop form factor,
5-9GbE interfaces
• 20-200Mbps+ DPI
Performance
• Web UI and Centralized
Management
• VPN and SSL VPN
capabilities
17
Differentiation TZ-Series and NSA-Series
• Standard 1RU rack mount product
• Higher VPN Performance numbers & Site-to-Site VPN Tunnels
• Higher no. of connection counts (New connections, Max. DPI & SPI
connections)
• Higher no. of VPN clients (IPSec, SSL)
• Supports 10GbE SFP+ and 1GbE SFP interfaces (NSA 3600 and higher)
• No. of Ports (18) more than the Gen6 TZ products (TZ600 has 10 1GbE
Copper ports)
With higher VPN throughput, connection counts, IPSec tunnels, and
VPN clients (IPSec and SSL), NSA-Series is the ideal branch office
product that connects multiple sites through IPSec tunnels
18
New DELL
SonicPoints Series
19
Vertraulich
SonicWALL
The new Dell SonicPoint Series
•
•
•
•
•
•
20
802.11ac
3x speed of 802.11n
Enterprise chipset
Dual radio – ac & n
6 external antennas
Plenum rated
SonicPoint N2
SonicPoint ACi
SonicPoint ACe
•
•
•
•
•
•
802.11ac
3x speed of 802.11n
Enterprise chipset
Dual radio – ac & n
Internal antennas
Plenum rated
•
•
•
•
•
•
802.11n
Enterprise chipset
Faster than NDR
Dual radio – both n
6 external antennas
Plenum rated
Requires SonicOS 5.9.1.0 (Gen5) or 6.2.2.0 (Gen6)
GMS 7.2 SP3
Dell SonicWALL differentiators
• Simplified deployment
 Integrated wireless controller
 Auto-detection and auto-provisioning
• Comprehensive security
 DPI security for wired and wireless traffic
 Application control, SSL
decryption/inspection,
intrusion prevention, content filtering
 Wireless security features
21





Virtual access points
Wireless guest services
External guest authentication (LHM)
Captive portal
Wireless intrusion detection/prevention
Dell SonicWALL differentiators
• Central management
 Single pane of glass
 Wireless and security
• Low TCO
 No wireless controller
 Simplified deployment
 Central management
22
SonicPoint support
• Yes, we will charge for support
• Bundled with hardware (1/3/5 years)
• Support is required on SonicPoint
and firewall
• Low renewal price
23