Aventail EX-2500 SSL VPN

Overview

The SonicWALL Aventail EX-2500 is well-suited for enterprises that support hundreds or thousands of internal and external users and need to ensure anytime access to critical applications. The EX-2500 appliances provide access control by first detecting the security of the end point, protecting applications with granular policy based on who the user is and the end point used for access, and then connecting authorized employees and business partners effortlessly from a broad range of cross-platform devices only to authorized resources. The EX-2500 supports up to 2,000 concurrent users from a single appliance and can support 2-node active/active high availability (HA) support with integrated load balancing. The EX-2500 also supports up to 8 nodes configured behind an external load balancer.

Features & Benefits

Increases productivity. SonicWALL Aventail E-Class SSL VPNs work in more places, including home PCs, kiosks, PDAs and unmanaged devices over wired and wireless networks. SonicWALL Aventail SSL VPNs make your users more productive by providing easy access to more applications from more environments including Windows, Linux, Macintosh and mobile devices than any other secure access solution.

Lowers IT overhead and total cost of ownership. SonicWALL Aventail E-Class SSL VPN lowers IT costs by enabling network managers to easily deploy and manage a single secure access gateway that extends remote access via SSL VPN for both internal and external users to all network resources including Web based, client/server and host-based applications. SonicWALL Aventail SSL VPNs are clientless or use lightweight Web delivered clients, reducing management overhead and support calls.

Easy-to-use from any end point. SonicWALL Aventail E-Class SSL VPN technology provides transparent access to network resources from any network environment or device. A SonicWALL Aventail SSL VPN provides a single gateway for all access and a common user experience across all platforms including Windows, Windows Vista, Windows Mobile, Linux and Macintosh from managed or unmanaged devices. An award-winning anti-spam engine coupled with end-to-end attack monitoring ensures the most effective and current protection from spam attacks.

Robust mobile solution. SonicWALL Aventail E-Class SSL VPNs provides the most robust secure access solutions for mobile PDAs and smartphones, featuring Session Persistence across office, home or mobile IP addresses without re-authentication.

Access to all application platforms. SonicWALL Aventail Smart Tunneling delivers fast and easy access to all applications whether they are Web-based, client/server, server-based or host-based over a unique architecture that combines the application layer control of SSL with the reach of a Layer 3 tunnel.

Supports VoIP and remote help desk. SonicWALL Aventail Smart Tunneling provides granular, bidirectional access control for back-connect applications like VoIP and remote help desk.

Eliminates routing conflicts. Adaptive addressing and routing dynamically adapts to networks, eliminating addressing and routing conflicts common with other solutions.

Single access gateway. SonicWALL Aventail E-Class SSL VPNs give network managers a single secure access gateway for all users, internal and external, to all resources with complete control.

Rapid set-up and deployment. All SonicWALL Aventail E-Class SSL VPNs are easily set-up and deployed in just minutes. SonicWALL Aventail's Set-up Wizard provides an easy out- of-the-box experience with rapid set-up and deployment.

Easy-to-control with Unified Policy Management. SonicWALL Aventail Unified Policy off ers easy object based policy management of all users, groups, resources and devices, while enforcing granular control based on both user authentication and end point interrogation. Policy Zones can ensure unauthorized access is denied, or quarantined for remediation.

High AvailabilitySupport for high-availability 2-node clusters with built-inload-balancing and stateful authentication failover

Technical Specifications

Hardware
Processor: Intel Xeon 2.4 GHz CPU 533 MHz, FSB 2 GB DDR RAM RAM: 2GB Concurrent User License: up to 2,000	Dimensions: 17"W x 1.7"H x 19.6"D (43cm W x 4.4cm H x 50 cm D) Power Supply: MTBF 100,000 hours Output Power: 300 W Input Voltage: 120 (6A) / 240 (3A)VAC auto-switching

Key Features

Encryption: Configurable session length, Ciphers: DES, 3DES, RC4, AES, Hashes: MD5, SHA Authentication: Server-side digital certificates, Username/password, Client-side digital certificates RSA SecurID and other one-time password tokens, Dual/stacked authentication Applications Supported Proxy: HTTP, HTTPS, FTP, SSH, Telnet, RDP, VNC, Windows file sharing (Windows SMB/CIFS) NetExtender: Any TCP/IP based application: ICMP, Citrix, VoIP, IMAP, POP, SMTP, etc. Directories: Microsoft Active Directory, LDAP (Active Directory, Sun iPlanet, etc.), RADIUS; Dynamic groups based on LDAP/AD queries, Certificate revocation lists (CRL) Password Management:Notification of password expiration and password change from the SonicWALL Aventail WorkPlace portal Access Control Options:User and group, Source IP and network, Destination network, Service/Port (OnDemand and Connect only) Define resources by destination URL, host name or IP address, IP range, subnet and domain, Day, date, time and range, Browser encryption key length, Policy Zones (allows, denies and quarantines access and provides data protection based on end point security profile), File system access controls SonicWALL Aventail End Point Control (EPC): Detection of files, registry keys, running processes and Device Watermarks; Advanced Interrogator: (simplified granular end point detection, including detailed configuration information on over 100 anti-virus, anti-spyware and personal firewall solutions, including McAfee, Symantec, Sophos and Trend) Data Protection: Cache Control (data protection), Secure Desktop (advanced data protection)

Additional Features

High Availability Support for high-availability 2-node clusters with built-inload-balancing and stateful authentication failover

Access and Application Support Aventail WorkPlace (browser based and mobile access) Aventail Connect Access Aventail Connent Mobile Management and Administration High Availability On Demand Modules Advanced EPC (ASD included) Modules Native Access Modules

Regulatory Compliance

Emissions: FCC Part 15 Class A, CE, C-Tick, VCCI, CCC, BSMI

Safety: UL, cUL, CE, TUV, STQC, S, PSB, CCC, BSMI, CB Scheme

MTBF

9.0 years

Environment

Operating Temperature: 0degree - 50degree C (32degree F to 122degree F) Non-operating shock: 50g, 11msec

Online Documents and Demos

	SonicWALL E-Class SSL VPN for the Enterprise Easy, Secure and Clientless Remote Access for the Enterprise
	Introducing SonicWALL Clean VPN A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC)
	SoniWall Avetail Native Access Modules Provides users with a single integrated solution for all their secure remote access needs.
	SonicWALL Aventail Spike License Pack Instant secure remote access when it's needed most.
	SonicWALL Aventail Host Access Modules Secure terminal emulation over SSL VPN from anywhere.
	SonicWALL Aventail Connect Tunnel Offers users an easy and secure, in-office experience alternative.
	SonicWALL Aventail Connect Mobile Provides the most robust remote access solution for smart phone and PDA users.
	SonicWALL Aventail Advanced EPC End Point Control (EPC) brings together the most advanced endpoint detection.
	SonicWALL Aventail Advanced Reporting Powerful, custom drill-down reporting.
	SonicWALL Aventail Combined with EPC SonicWALL Aventail SSL VPN appliances have a feature called End Point Control (EPC)