Firewall
Stateful packet inspection | Reassembly-Free Deep Packet Inspection | DDoS attack protection (UDP/ICMP/SYN flood) | IPv4/IPv6 support | Biometric authentication for remote access | DNS proxy | Threat API
SSL/SSH decryption and inspection
Deep packet inspection for TLS/SSL/SSH | Inclusion/exclusion of objects, groups or hostnames | SSL control
Capture Advanced Threat Protection
Cloud-based multi-engine analysis | Virtualized sandboxing | Hypervisor level analysis | Full system emulation | Broad file type examination | Automated & manual submission | Real-time threat intelligence updates | Auto-Block capability
Intrusion prevention
Signature-based scanning | Automatic signature updates | Bidirectional inspection engine | Granular IPS rule capability
GeoIP/Botnet filtering2 | Regular expression matching
Anti-malware
Stream-based malware scanning | Gateway anti-virus | Gateway anti-spyware | Bi-directional inspection | No file size limitation
Cloud malware database
Application control
Application control | Application visualization2 | Application component blocking | Application bandwidth management | Custom application signature creation | Data leakage prevention | Application reporting over NetFlow/IPFIX | User activity tracking (SSO) | Comprehensive application signature database
Web content filtering
URL filtering | Anti-proxy technology | Keyword blocking | Bandwidth manage CFS rating categories | Unified policy model with app control | Content Filtering Service Client
VPN
Auto-provision VPN | IPSec VPN for site-to-site connectivity | SSL VPN and IPSec client remote access | Redundant VPN gateway | Mobile Connect for iOS, Mac OS X, Windows, Chrome, Android and Kindle Fire | Route-based VPN (OSPF, RIP)
Networking
PortShield | Enhanced logging | Layer-2 QoS | Port security | Dynamic routing | SonicPoint wireless controller | Policy-based routing
Asymmetric routing | DHCP server | NAT | Bandwidth management | High availability - Active/Standby with state sync3 | Inbound/outbound load balancing | L2 bridge mode, NAT mode | 3G/4G WAN failover | Common Access Card (CAC) support
VoIP
Granular QoS control | Bandwidth management | DPI for VoIP traffic | H.323 gatekeeper and SIP proxy support
Management and monitoring
Web GUI | Command line interface (CLI) | SNMPv2/v3 | Centralized management and reporting with SonicWall GMS | Logging
Netflow/IPFix exporting | Single Sign-On (SSO) | Terminal service/Citrix support | Application and bandwidth visualization | IPv4 and IPv6 management | Dell X-Series switch management
IPv6
IPv6 filtering | 6rd (rapid deployment) | DHCP prefix delegation | BGP
Wireless
Dual-band (2.4 GHz and 5.0 GHz) | 802.11 a/b/g/n/ac wireless standards2 | Wireless intrusion detection and prevention | Wireless guest services | Lightweight hotspot messaging | Virtual access point segmentation | Captive portal | Cloud ACL
