The Network Security SonicOS Platform Application Intelligence, Control and Visualization
Dell™ SonicWALL™ Application Intelligence and Control provides granular control and real-time visualization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity. A tightly integrated feature of Dell SonicWALL Next-Generation Firewalls, Dell SonicWALL Application Intelligence uses Dell SonicWALL Reassembly-Free Deep Packet Inspection™ to identify and control applications, regardless of port or protocol.
The continuum from threats to non-threats.
It can be a real challenge for IT administrators to efficiently deliver critical corporate solutions while also contending with employee use of wasteful and often dangerous applications. Critical applications need bandwidth prioritization while social media and gaming applications need to be bandwidth throttled or completely blocked.
Because the stateful packet inspection firewalls used in many organizations rely on port and protocol, they cannot solve the problem because they are not able to identify applications. Boiling it down, stateful packet inspection firewalls cannot sort out the good from the bad. Inbound and outbound network traffic often is not easy to classify as being just good or bad. For example, peer-to-peer (P2P), social networking, VoIP, instant messenger (IM), and similar applications can range from very useful in certain organizations to completely unproductive in others.
Application Intelligence and Control puts the power back into the hands of IT administrators with new levels of management and ease-of-use, allowing them to maintain granular control of applications and users. Administrators can easily create bandwidth management policies based on logical pre-defined categories (such as social media or gaming), individual applications, or even users and groups. As new applications are created, new signatures are pushed to the firewalls and the appropriate policies are automatically updated without IT spending costly time and effort to update rules and application objects. In addition, administrators can use granular application-based policy to restrict or block the transfer of specific files and documents, prioritize or throttle bandwidth and deny access to internal or external websites.
The building blocks for Application Intelligence and Control.
Dell SonicWALL Application Intelligence and Control manages and controls applications and data as it passes through the firewall at wire speed. Dell SonicWALL firewalls deliver breakthrough performance using multi-core processors, from 2 cores in the NSA 240, to up to 16 cores in the NSA E8500. In addition, the scanning capability of these systems is powered by Dell SonicWALL Reassembly-Free Deep Packet Inspection™ (RFDPI) technology1, which delivers industry-leading performance in evaluating traffic payloads in real-time as they pass through the system. This technology was designed to optimize processing across multiple cores while expanding threat identification beyond traditional ports and protocols to add application classification and inspection. These technologies have established Dell SonicWALL as a leader in the Next-Generation Firewall market.
Greater traffic visibility.
Administrators must visualize application traffic to properly control network use and to adjust network policy based on critical observations. The Dell SonicWALL Application Flow Monitor provides real-time graphs of applications, ingress and egress bandwidth, websites visited and all user activity. Administrators can then modify application rules to conform to network policy. In addition, the same data can be continuously sent to any NetFlow/IPFIX analyzer for off-box monitoring, troubleshooting and analysis of historical network activity.
Automatic and seamless protection.
Dell SonicWALL Application Intelligence and Control is both comprehensive and easy to use, leveraging a continuously expanding threat signature database that currently recognizes over 2,800 applications and detects millions of pieces of malware to protect the network automatically and seamlessly. Application Intelligence and Control is available as part of the Dell SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control Service as well as the Dell SonicWALL Comprehensive Gateway Security Suite (CGSS) on the TZ 210, Network Security Appliance (NSA) and E-Class NSA Series firewalls.
- U.S. Patents 7,310,815; 7,600,257; 7,738,380; 7,835,361– A method and apparatus for data stream analysis and blocking.