SonicWALL Aventail SRA EX7000 HA appliance(EX-2500) 50-500 User Count Upgrade 01-SSC-9658 User Manual
Product codes
01-SSC-9658
Detect the security of any endpoint
Robust interrogation for secure control of the endpoint
Only SonicWALL Aventail End Point Control™ (EPC™) lets you enforce granular access control rules for Windows®,
Windows Vista, Windows Mobile, Macintosh and Linux endpoints. EPC combines pre-authentication interrogation
to confi rm endpoint criteria like anti-virus updates. SonicWALL Aventail Policy Zones™ apply detected
endpoint criteria to automated policy enforcement. For example, a user’s access may be quarantined—and
redirected to remediation instructions—until a security patch is installed. Device Watermarks allow easy
access revocation of lost or stolen devices, based upon detection of client certifi cates. SonicWALL Aventail’s
Virtual Keyboard stops keystroke sniff ers on untrusted endpoints. SonicWALL Recurring EPC performs endpoint
scans at user login and at administrator-defi ned intervals to ensure the ongoing integrity of any endpoint.
Only SonicWALL Aventail End Point Control™ (EPC™) lets you enforce granular access control rules for Windows®,
Windows Vista, Windows Mobile, Macintosh and Linux endpoints. EPC combines pre-authentication interrogation
to confi rm endpoint criteria like anti-virus updates. SonicWALL Aventail Policy Zones™ apply detected
endpoint criteria to automated policy enforcement. For example, a user’s access may be quarantined—and
redirected to remediation instructions—until a security patch is installed. Device Watermarks allow easy
access revocation of lost or stolen devices, based upon detection of client certifi cates. SonicWALL Aventail’s
Virtual Keyboard stops keystroke sniff ers on untrusted endpoints. SonicWALL Recurring EPC performs endpoint
scans at user login and at administrator-defi ned intervals to ensure the ongoing integrity of any endpoint.
Advanced EPC for ultimate protection
Optional SonicWALL Aventail Advanced EPC™ combines granular endpoint control detection with superior
data protection. Advanced Interrogator simplifi es device profi le set-up using a comprehensive predefi ned
list of anti-virus, personal fi rewall and anti-spyware solutions for Windows, Macintosh and Linux platforms,
including version and currency of signature fi le update. Cache Control purges browser cache, session history,
cookies and passwords. Secure Desktop creates a virtual encrypted environment that prevents sensitive
information from being left behind. SonicWALL E-Class Aventail SRAs also block suspect e-mail attachments
in Outlook Web Access or Lotus iNotes, or block access to fi nancial data or patient records. On SonicWALL
Aventail SSL VPNs, connections are closed by default, providing “deny all” fi rewall-style protection.
Optional SonicWALL Aventail Advanced EPC™ combines granular endpoint control detection with superior
data protection. Advanced Interrogator simplifi es device profi le set-up using a comprehensive predefi ned
list of anti-virus, personal fi rewall and anti-spyware solutions for Windows, Macintosh and Linux platforms,
including version and currency of signature fi le update. Cache Control purges browser cache, session history,
cookies and passwords. Secure Desktop creates a virtual encrypted environment that prevents sensitive
information from being left behind. SonicWALL E-Class Aventail SRAs also block suspect e-mail attachments
in Outlook Web Access or Lotus iNotes, or block access to fi nancial data or patient records. On SonicWALL
Aventail SSL VPNs, connections are closed by default, providing “deny all” fi rewall-style protection.
Protect your enterprise resources with ease
Streamlined policy management
With its context-sensitive help and Setup Wizard, a SonicWALL Aventail E-Class Secure Remote Access
appliance is easy to set-up and deploy. The extensible, object-based SonicWALL Aventail Unifi ed Policy™
model consolidates control of all Web resources, fi le shares and client-server resources in a single location, so
that policy management can take only minutes. Groups can be populated dynamically based on RADIUS,
ACE, LDAP or Active Directory authentication repositories, including nested groups. SonicWALL Aventail
SRAs support Single Sign-On (SSO) and forms-based Web applications. And users can easily update their
own passwords without IT assistance. Also, SonicWALL Aventail Policy Replication lets IT easily replicate
policy across multiple appliance nodes, either in the same cluster or in a geographically-distributed fashion.
One-Time Password (OTP) support provides a built-in method to generate and distribute secondary factors,
for easy and cost-eff ective two-factor authentication. Administrators can associate OTPs by Realm for greater
fl exibility in authentication control.
With its context-sensitive help and Setup Wizard, a SonicWALL Aventail E-Class Secure Remote Access
appliance is easy to set-up and deploy. The extensible, object-based SonicWALL Aventail Unifi ed Policy™
model consolidates control of all Web resources, fi le shares and client-server resources in a single location, so
that policy management can take only minutes. Groups can be populated dynamically based on RADIUS,
ACE, LDAP or Active Directory authentication repositories, including nested groups. SonicWALL Aventail
SRAs support Single Sign-On (SSO) and forms-based Web applications. And users can easily update their
own passwords without IT assistance. Also, SonicWALL Aventail Policy Replication lets IT easily replicate
policy across multiple appliance nodes, either in the same cluster or in a geographically-distributed fashion.
One-Time Password (OTP) support provides a built-in method to generate and distribute secondary factors,
for easy and cost-eff ective two-factor authentication. Administrators can associate OTPs by Realm for greater
fl exibility in authentication control.
Intuitive management and reporting
The SonicWALL Aventail Management Console™ provides a rich, centralized set of monitoring capabilities for
auditing, compliance, management and resource planning. Optional Aventail Advanced Reporting™ audits
who accessed what enterprise resources, at what time, from which remote location, using standard or
custom reports that can be accessed from any Web browser. Visual tools provide real-time information on
system state and direct, intuitive options for managing system objects. Enhanced user monitoring features
streamline auditing and troubleshooting of current and historical user activity. Administrators can easily view
or fi lter activity by user, time, throughput, realm, community, zone, agents or IP address.
The SonicWALL Aventail Management Console™ provides a rich, centralized set of monitoring capabilities for
auditing, compliance, management and resource planning. Optional Aventail Advanced Reporting™ audits
who accessed what enterprise resources, at what time, from which remote location, using standard or
custom reports that can be accessed from any Web browser. Visual tools provide real-time information on
system state and direct, intuitive options for managing system objects. Enhanced user monitoring features
streamline auditing and troubleshooting of current and historical user activity. Administrators can easily view
or fi lter activity by user, time, throughput, realm, community, zone, agents or IP address.
SonicWALL Aventail E-Class Remote Access Solution provides secure access for all users, devices and applications.
Internal Users
Internal Access
Traveling
Employee
Remote Access
Customer/
Supplier
Behind a Firewall
Business Partner
from any Browser
Extranet Access
SonicWALL Aventail
E-Class SRA
Appliances
Employee
at a Kiosk
Day
Extender
Employee
Using a
Wireless
Hotspot
Employee
Using a
PDA
Corporate Data Center
Directories
Applications
Web Apps
Client/Server
Apps
Files Shares
Databases
VoIP
LDAP
ACE
AD
RADIUS
Connect
Protect
Detect
Connect
Protect
Detect
Internet
SonicWALL Aventail’s End Point Control continually detects the identity and security state of the end device
SonicWALL Aventail Unified Policy enforces devices access control, ensuring users access only to authorized applications
SonicWALL Aventail Smart Access and Smart Tunneling ensure easy, secure user access to all network resources