Firewall
Stateful packet inspection | Reassembly-Free Deep Packet Inspection | DDoS attack protection (UDP/ICMP/SYN flood) | IPv4/IPv6
Biometric authentication for remote access | DNS proxy
TLS/SSL/SSH decryption and inspection
Deep packet inspection for TLS/SSL/SSH | Inclusion/exclusion of objects, groups or hostnames | TLS/SSL control | Granular DPI SSL controls per zone or rule
Capture advanced threat protection
Real-Time Deep Memory Inspection | Cloud-based multi-engine analysis | Virtualized sandboxing | Hypervisor level analysis
Full system emulation | Broad file type examination | Automated and manual submission | Real-time threat intelligence updates | Block until verdict
Intrusion prevention
Signature-based scanning | Automatic signature updates | Bi-directional inspection | Granular IPS rule capability | GeoIP enforcement | Botnet filtering with dynamic list | Regular expression matching
Anti-malware
Stream-based malware scanning | Gateway anti-virus | Gateway anti-spyware | Bi-directional inspection | No file size limitation | Cloud malware database
Application identification
Application control | Application bandwidth management | Custom application signature creation | Data leakage prevention
Application reporting over NetFlow/IPFIX | Comprehensive application signature database
Traffic visualization and analytics
User activity | Application/bandwidth/threat usage
Web content filtering
URL filtering | Proxy avoidance | Bandwidth manage CFS rating categories | Unified policy model with app control | Content Filtering Client
VPN
Auto-provision VPN | IPSec VPN for site-to-site connectivity | SSL VPN and IPSec client remote access | Redundant VPN gateway
Mobile Connect for iOS, Mac OS X, Windows, Chrome, Android and Kindle Fire | Route-based VPN (OSPF, RIP, BGP)
Networking
PortShield | Jumbo frames | Enhanced logging | VLAN trunking | RSTP (Rapid Spanning Tree Protocol) | Port mirroring | Port security | Layer-2 QoS | Dynamic routing (RIP/OSPF/BGP) | SonicWall wireless controller | Policy-based routing | NAT | DNS/DNS proxy | DHCP server | Bandwidth management | Link aggregation (static and dynamic) | Port redundancy | A/P high availability with state sync | A/A clustering | Inbound/outbound load balancing | L2 bridge, wire/virtual wire mode, tap mode | Asymmetric routing
Common Access Card (CAC) support
Wireless
WIDS/WIPS | RF spectrum analysis | Rogue AP prevention | MiFi extender | Guest cyclic quota | LHM guest portal
VoIP
Granular QoS control | Bandwidth management | SIP and H.323 transformations per access rule | H.323 gatekeeper and SIP proxy support
Management and monitoring
GMS, Web, UI, CLI, SNMPv2/v3 | Logging | Netflow/IPFix exporting | BlueCoat Security Analytics Platform | SonicWall access point management
