SonicWALL PRO 4060

Today's highly connected organizations move vast amounts of business-critical data across networks. The value of this data is extraordinary - as is the ability to move it quickly, reliably and securely. In order to maintain and safeguard business continuity these organizations must employ advanced features such as fast, secure VPN access, highly reliable network connectivity, powerful performance and flexible, scalable configurability.

The SonicWALL PRO 4060, part of SonicWALL's PRO Series Internet Security Platform, provides complete business continuity for even the most complex networks. Powered by SonicWALL's next-generation SonicOS operating system and powerful deep packet inspection architecture, the PRO 4060 delivers enterprise-class firewall throughput and VPN concentration. Unbeatable price/performance characteristics make the PRO 4060 the ideal solution for companies that need rock solid network protection coupled with fast, secure VPN access for remote employees.

The SonicWALL PRO 4060 provides hardware failover, WAN ISP failover and an automated secondary VPN gateway, ensuring continuous network uptime. Six configurable 10/100 Ethernet interfaces allow administrators to create multiple LANs, DMZs and custom-defined zones. The PRO 4060 also integrates gateway anti-virus, anti-spyware, intrusion prevention and anti-spam capabilities for real-time protection against today's dynamic threats, making it the ultimate choice for robust internal and external security, network configuration flexibility and ease of use.

• Real-Time Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention. The PRO 4060 extends security from the network core to the perimeter by integrating support for SonicWALL's Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, delivering real-time protection against the latest blended threats, including viruses, spyware, worms, Trojans, software vulnerabilities and other malicious code.¹
• 802.1q Virtual LANs. The PRO 4060 provides support for 802.1q VLANs using virtual interfaces with VLAN ID tag assignments. Virtual interfaces provide many of the same features as physical interfaces, including zone assignment, DHCP Server, and NAT and Access Rule controls.
• Real-Time Blacklist Spam Filtering. The PRO 4060 provides the ability to use DNS to query Real-Time Black List (RBL) services that track well-known spam and open-relay SMTP servers, and to deny SMTP connections from servers that appear on the lists.²
• Dynamic RIP and OSPF Routing. The PRO 4060 provides full support for OSPF (Open Shortest First Path) and RIP (Router Information Protocol) dynamic routing protocols.²
• Onboard Quality of Service (QoS) Features. The PRO 4060 uses industry-standard 802.1p and Differentiated Services Code Points (DSCP) Class of Service (CoS) designators to provide powerful and flexible bandwidth management that is vital for Voice over IP (VoIP), multimedia content and business-critical applications.
• Powerful Content Filtering. The PRO 4060 supports SonicWALL's Content Filtering Service, providing an enterprise-class, scalable content filtering service that enhances productivity and security.
• Deep Packet Inspection Firewall. The PRO 4060 features a configurable, high performance deep packet inspection firewall for extended protection to key Internet services such as Web, e-mail, file transfer, Windows services, and DNS.
• Integrated Wireless LAN Services. In addition to being an integrated firewall and VPN security appliance, the PRO 4060 functions as a secure wireless switch and controller that automatically detects and configures SonicPoints, SonicWALL wireless access points, as they are added to the network while simultaneously enforcing security policies on all wired and wireless traffic.
• WAN ISP Fail-over and Load Balancing. The PRO 4060 offers the ability to designate one of the user-assigned ports as a secondary WAN port that can be used in both "active-active" and" active-passive" failover configuration, providing a highly efficient method for distributing or load sharing outbound WAN traffic.
• Multiple Interfaces per Security Zone. Network administrators can group multiple physical interfaces on the PRO 4060 into logical "Zones" for ease of management and flexibility. This provides tremendous flexibility, scalability and added internal security when deploying SonicWALL firewalls in various network topologies.
• Object/Policy-based Management. The PRO 4060 provides the ability to define an object such as a user group, network, service or interface. When security policies change, the administrator can modify the pre-defined object and propagate the changes instantly without redefining rules. This enables businesses to implement and manage security policies easily and consistently.
• Policy-based NAT. In addition to NAT (many-to-one) functionality, the PRO 4060 exposes control of NAT policies to administrators for one-to-one NAT, many-to-many NAT, one-to-many NAT, inbound Port Address Translation (PAT), flexible NAT (for overlapping IP addresses), as well as NAT policies on selective source/destination/source translations. The result is greater control and flexibility to support and manage various NAT requirements.
• Comprehensive Central Management Support. Every SonicWALL Internet security appliance can be managed using SonicWALL's award-winning Global Management System, which provides network administrators with the tools for simplified configuration, enforcement and management of global security policies, VPN, and services, all from a central location.
  
  

  ¹ Gateway Anti-Virus requires SonicOS Standard or Enhanced 3.0. Anti-Spyware requires SonicOS Standard or Enhanced 3.1
  ² Requires SonicOS Enhanced 3.0

Hardware

• Processor: 2GHz Intel with dedicated cryptographic accelerator
• RAM: 256 MB
• Flash Memory: 64 MB
• Interfaces: (6) 10/100Base-T Ports (1 LAN, 1 WAN, 4 Configurable)
• Console: (1) Serial Port
• Dimensions: 1U rack-mountable 17.00 x 13.00 x 1.75 inches (43.18 x 33.02 x 4.45 cm)
• Weight: 13.00 lbs (5.90 kg)
• Power: 100V to 240VAC
• Max Power Consumption: 143W
• Total Heat Dissipation: 530BTU

Security

• Deep Packet Inspection hardware and firmware architecture
• Unlimited number of users
• Concurrent connections: 500,000
• Firewall performance: up to 300+ Mbps (bi-directional)1

VPN

• IPSec VPN, compatible with other IPSec-compliant VPN gateways
• Bundled with 1,000 VPN client sessions for remote users
• Supports up to 3,000 VPN site-to-site VPN policies
• 3DES and AES Performance: 190 Mbps

Value Added Services

• SonicWALL Hardware Failover
• The PRO 4060 ships standard with the following SonicWALL security services: One year of Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service for PRO 4060 appliances registered between 10/1/04 and 9/30/05; 30 days of Network Anti-Virus (25 user license); 30 days of Content Filtering Service Premium Edition; ViewPoint reporting software.

Network

• Network Address Translation (NAT)
• Dynamic Host Configuration Protocol (DHCP)
• Point-to-Point Protocol over Ethernet (PPPoE)
• Point-to-Point Tunneling Protocol (PPTP)

Warranty

• One-year warranty for repair or replacement of any defective product due to manufacturer's defects
• 90 days 8X5 support and software updates
• Access to SonicWALL electronic support tools

Standards

• TCP/IP, UDP, ICMP, HTTP, RADIUS, IPSec, ISAKMP/IKE, SNMP, L2TP, DHCP, PPPoE, PPTP

Regulatory Compliance

• FCC Class A, ICES Class A, CE, C-Tick, VCCI, BSMI, MIC, NOM, UL, cUL, TUV/GS

Certifications

• ICSA Firewall 4.1, ICSA IPSec VPN 1.0d, FIPS 140-2
• Pending: Commom Criteria EAL-2

Environment

• Temperature: 40-105 °F, 5-40 °C
• Humidity: 10-90% non-condensing

MTBF

• 6.8 years

¹ Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.

SonicWALL Pro 4060

"SonicWALL PRO 4060 Enterprise Security Made Easier to Manage" - Personal Computer World