SonicWall Aventail E-Class SRA Virtual Appliance
Easy-to-use, affordable and clientless secure remote access.

Overview:

In recent years, there has been an increased dependence on mobile workers. This has prompted a need for providing secure remote access to network resources as well as remote PC control. SonicWall® provides a solution that meets the needs of organizations with demanding remote workforce requirements. SonicWall Secure Remote Access (SRA) Series solutions, flexibly deployable as a hardware or a virtual appliance, are simple to implement and even easier to use for a fraction of the price of most other products.

Remote access has never been so simple to deploy and use. Mobile employees only require a standard browser to log into a customizable portal that provides access to email, files, Web applications and internal Web sites. For even more powerful capabilities such as secure access to any resource on the corporate network including servers and local applications, the appliances transparently push a downloadable thin client (NetExtender) to the user’s desktop or laptop.

SonicWall Virtual Assist/Virtual Access can be easily configured and licensed via the administrative interface as a cost-effective alternative to either traditional remote support tools or remote PC access productivity tools. Browser-based Virtual Assist thin clients can be pushed to technicians and customers to establish an interactive support session using SonicWall SRA. Alternatively, Virtual Access can increase productivity by enabling IT administrators or authorized end users to gain secure remote access to their unattended Windows-based computers from anywhere via SonicWall SRA.

• Seamless integration behind virtually any firewall
• NetExtender technology
• Personalized Web portal
• Remote support
• Remote PC control
• Web Application Firewall Service
• Tokenless two-factor authentication
• Mobile device support
• Load Balancing
• High Availability
• Unified Policy
• SonicWall Clean VPN

*Additional license required; available as a software add-on module

Features & Benefits:

• Seamless integration behind virtually any firewall enables organizations to leverage the existing network infrastructure.
• NetExtender technology enables network level access to resources, services and applications.
• A personalized Web portal displays only the resources that are available to the user based on company policy.
• Remote support using SonicWall Virtual Assist enables technicians to provide secure on-demand assistance to customers while leveraging the existing infrastructure.
• Remote PC control using SonicWall Virtual Access enables administrators or authorized end users to gain secure remote control of their unattended Windowsbased computers from anywhere.
• Web Application Firewall Service* detects and protects Web applications (including the SSL VPN appliance itself) from Web-based attacks, reducing potential losses and adhering to data protection compliance mandates.
• Tokenless two-factor authentication provides enhanced protection against key loggers by combining a unique one-time password generated by the SSL VPN appliance and sent to a remote user’s mobile device or email address, with the user’s network user name and password.
• Mobile device support to access an entire intranet as well as Web-based applications provides greater flexibility for a remote workforce.
• Load Balancing can be deployed to partition requests across multiple Web servers.
• High Availability allows administrators to deploy an active-backup pair of appliances to enhance uptime while reliably providing security for remote access users.
• Unified Policy displays granular bookmarks and policies in one centralized page, streamlining configuration, troubleshooting and administrative overhead. Administrators can easily create policies that can restrict user access to specific applications or resources, and prevent unauthorized access.
• SonicWall Clean VPN™ both secures the integrity of VPN access and decontaminates malicious threats before they can enter the corporate network through

*Additional license required; available as a software add-on module

Application & Deployment:

Granular Access to Authorized Users

The SonicWall Secure Remote Access (SRA) Series for small- to medium-sized businesses (SMBs) extends secure remote access beyond managed employees to unmanaged remote employees, partners, and customers. A customizable portal enables users to access specific resources via a Web browser as defined by a company’s IT policy.

Broad Access to Resources:

SonicWall SRA solutions for SMB can be used to provide users with access to a broad range of resources.

• NetExtender enables native access to corporate network applications such as Microsoft® Outlook
• The Virtual Office portal enables Web-based access to intranet (HTTP, HTTPS), file (FTP, CIFS), desktop (Citrix®*, Terminal Server, VNC), and terminal (Telnet, SSH) resources

Simple to Manage:

SonicWall SSL VPN solutions feature an intuitive Web-based management interface which offers context sensitive help to enhance usability. In addition, multiple products can be centrally managed using the SonicWall Global Management System (GMS v4.0+). Resource access via the products can be effortlessly monitored using the SonicWall ViewPoint reporting tool.

Remote PC Control:

In companies with distributed or branch locations, secondary disaster recovery sites, outsourced managed services or teleworkers, an administrator, technician, trusted service provider or authorized employee may require full control of specific PCs within the LAN from remote locations. SonicWall Virtual Access licensed with Virtual Assist, enhances productivity by enabling secure remote control of unattended Windows-based computer desktops.

Enhanced Solution:

SonicWall Secure Remote Access appliances integrate seamlessly into almost any network topology and can be easily deployed alongside virtually any third-party firewall. Deployment with a SonicWall Network Security appliance running Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service along with Application Intelligence and Control further enhances security benefits. Deploying NetExtender in conjunction with Enforced Client Anti-Virus and Anti-Spyware on managed PCs enforces endpoint security. Virtual Assist also offers seamless integration by leveraging the appliance’s local and external authentication facilities. Furthermore, Web Application Firewall Service blocks attacks on the SSL VPN appliance and other Web applications.

Remote Access Solution:

With an increasingly mobile workforce and greater threats of unexpected disruptions, remote access has become a business necessity. A SonicWall SRA appliances for the SMB product deployed in one-arm mode alongside a SonicWall UTM product or virtually any other third party firewall enables remote users to securely access corporate network resources from anywhere outside the LAN.

1. Incoming HTTPS traffic is seamlessly forwarded by the SonicWall NSa or TZ Series firewall network security appliance to the SonicWall SRA appliance, which decrypts and authenticates network traffic.
2. Users are authenticated using the onboard database or through third-party authentication methods such as RSA, VASCO, RADIUS, LDAP, Microsoft Active Directory or Windows NT Domain.
3. A personalized Web portal provides access to only those resources that the user is authorized to view based on company policies.
4. To create a Clean VPN environment, traffic is passed through to the NSa or TZ Series firewall (running Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Services where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats.

Remote Support Solution:

With more employees working remotely and customers dispersed globally, it is becoming increasingly important for organizations to provide remote support for off-site business devices such as laptops or home PCs. Ineffective support using expensive and cumbersome tools can undermine IT service level agreements and inhibit remote worker productivity. Using a SonicWall Virtual Assist on an SSL-VPN 4000 or SRA 4200 appliance, a Technician can instantly access a remote device over the Web, transfer files, and chat with the end user, enabling rapid diagnosis and problem resolution, without the need for pre-installed “fat” client.

Web Application Firewall and PCI Compliance

Available as a licensed service, SonicWall’s Web Application Firewall (WAF) Service allows customers to protect their Web applications against Web-based attacks. WAF provides automatic signature updates for continuous malware protection and intrusion prevention. It can be used in conjunction with strong two-factor authentication which SSL VPN technology provides to control Web site access. By protecting against common protocol and Web-based vulnerabilities, WAF can significantly help financial, healthcare, e-commerce, e-billing and other related businesses attain PCI compliance. It also provides acceleration features such as content caching which can significantly improve the performance of protected Web sites.

Clean VPN Remote Access Solution:

More corporations, universities, hospitals and governmental organizations are implementing wireless networks and using SSL VPN as a secure and centralized access control solution. SonicWall SSL VPNs integrate seamlessly with SonicWall wireless access solutions. When deployed alongside a SonicWall firewall (running Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Services and several SonicPoints, a SonicWall SSL VPN solution ensures that users get access from anywhere on campus and the wireless connections are encrypted via the SSL protocol. As an added bonus, remote workers away from campus can connect into the corporate network via an SSL VPN connection. IT maintains centralized, granular access control over who can access what resources using a single gateway.

Specifications:

 

Appliance Specifications	SRA 1200	SRA 4200
Hardware:
Hardened Security Appliance	Yes	Yes
Cryptographic Hardware Acceleration	No	Yes
Interfaces	2 x 10/100/1000 2 x USB 1 x Console	4 x 10/100/1000 2 x USB 1 x Console
Processor	x86 main processor	x86 main processor, cryptographic accelerator
Memory (RAM)	1 GB	2 GB
Flash Memory	1 GB	1 GB
Power Supply	Internal	Internal
Max Power Consumption	53 W	75 W
Total Heat Dissipation	181.0 BTU	256.0 BTU
Dimensions	17.0 x 10.13 x 1.75 in 43.18 x 25.73 x 4.45cm	17.0 x 10.13 x 1.75 in 43.18 x 25.73 x 4.45cm
Weight	9.50 lbs 4.30 kg	9.50 lbs 4.30 kg
Major Regulatory Compliance	FCC Class A, ICES Class A, CE, C-Tick, VCCI, Class A, MIC, NOM, UL, cUL, TUV/GS, CB
Environment	0° - 40° C (32°F to 105° F) Humidity, 5-95% RH, non-condensing
MTBF	13.0 years	8.3 years
Key Features:
Applications Supported	Proxy: Citrix (ICA), HTTP, HTTPS, FTP, SSH, Telnet, RDP, VNC, Windows® file sharing (Windows SMB/CIFS) NetExtender: Any TCP/IP based application: ICMP, VoIP, IMAP, POP, SMTP, etc.
Encryption	DES (128), 3DES (128, 256), AES (128, 192, 256), ARC4 (128), MD5, SHA-1
Authentication	RSA, Vasco, One-time Passwords, Internal user database RADIUS, LDAP, Microsoft, Active Directory, Windows NT Domain
Multiple Domain Support	Yes
Multiple Portal Support	Yes
Fine Grain Access Control	At the user, user group and network resource level
Session Security	Inactivity timeouts prevent unauthorized use of inactive sessions
Certificates	Server: Self-signed with editable common name and and imported from third parties Client: Optional client certificates supported*
Cache Cleaner	Configurable. Upon logout all cached downloads, cookies and URLs downloaded through the SSL tunnel are erased from the remote computer
Client PC Operating Systems Supported	Proxy: All operating systems NetExtender: Windows 2000, 2003, XP/Vista (32-bit and 64- bit), 7 (32-bit and 64-bit), Win Mobile 6.5 (Pocket PC), Win Mobile 6.5 (Classic/Professional), MacOS 10.4+ and SnowLeopard (PowerPC and Intel), Linux Fedora Core 3+ / Ubuntu 7+ / OpenSUSE
Web Browsers Supported	Microsoft Internet Explorer, Firefox Mozilla
Personalized Portal	The remote user sees only those resources that the administrator has granted access to based on company policy
Management	Web GUI (HTTP, HTTPS), Send syslog and heartbeat messages to GMS (4.0 and higher) SNMP Support
Usage Monitoring	Graphical monitoring of memory, CPU, users and bandwidth usage
Logging	Detailed logging in an easy-to-read format, Syslog supported e-mail alerts
Single-Arm Mode	Yes
SonicWall Virtual Assist	Connection to remote PC, chat, FTP and diagnostic tools
IPv6 Support	Basic
Application offloading	Yes
Web Application Firewall	Yes

 

Virtualized Platform	SRA Virtual Appliance
Environment Requirements
Hypervisor:	VMWare ESXi and ESX (version 4.0 and newer)
Appliance Sized (on disk):	80 GB
Allocated Memory	2 GB

Documentation:

Download the SonicWall Secure Remote Access Series Datasheet (.PDF)