Real-Time Gateway Anti-Virus, Anti-Spyware
and Intrusion Prevention. The PRO 4060
extends security from the network core to
the perimeter by integrating support for
SonicWALL's Gateway Anti-Virus, Anti-Spyware
and Intrusion Prevention Service, delivering
real-time protection against the latest
blended threats, including viruses, spyware,
worms, Trojans, software vulnerabilities and
other malicious code.
802.1q Virtual LANs. The PRO 4060 provides
support for 802.1q VLANs using virtual
interfaces with VLAN ID tag assignments.
Virtual interfaces provide many of the same
features as physical interfaces, including
zone assignment, DHCP Server, and NAT and
Access Rule controls.
Real-Time Blacklist Spam Filtering. The PRO
4060 provides the ability to use DNS to
query Real-Time Black List (RBL) services
that track well-known spam and open-relay
SMTP servers, and to deny SMTP connections
from servers that appear on the lists.
Dynamic RIP and OSPF Routing. The PRO 4060
provides full support for OSPF (Open
Shortest First Path) and RIP (Router
Information Protocol) dynamic routing
protocols.
Onboard Quality of Service (QoS) Features.
The PRO 4060 uses industry-standard 802.1p
and Differentiated Services Code Points (DSCP)
Class of Service (CoS) designators to
provide powerful and flexible bandwidth
management that is vital for Voice over IP (VoIP),
multimedia content and business-critical
applications.
Layer 2 Bridge Mode. The PRO 4060 can
operate in a “transparent bridge”
configuration for deployment flexibility and
specific network protection use cases.
Dynamic Address Objects. The PRO 4060 can
dynamically update MAC and FQDN address
objects used to create powerful firewall
access rules.
Powerful Content Filtering. The PRO 4060
supports SonicWALL's Content Filtering
Service, providing an enterprise-class,
scalable content filtering service that
enhances productivity and security.
Deep Packet Inspection Firewall. The PRO
4060 features a configurable, high
performance deep packet inspection firewall
for extended protection to key Internet
services such as Web, e-mail, file transfer,
Windows services, and DNS.
Integrated Wireless LAN Services. In
addition to being an integrated firewall and
VPN security appliance, the PRO 4060
functions as a secure wireless switch and
controller that automatically detects and
configures SonicPoints, SonicWALL wireless
access points, as they are added to the
network while simultaneously enforcing
security policies on all wired and wireless
traffic.
WAN ISP Fail-over and Load Balancing. The
PRO 4060 offers the ability to designate one
of the user-assigned ports as a secondary
WAN port that can be used in both
"active-active" and" active-passive"
failover configuration, providing a highly
efficient method for distributing or load
sharing outbound WAN traffic.
Multiple Interfaces per Security Zone.
Network administrators can group multiple
physical interfaces on the PRO 4060 into
logical "Zones" for ease of management and
flexibility. This provides tremendous
flexibility, scalability and added internal
security when deploying SonicWALL firewalls
in various network topologies.
Object/Policy-based Management. The PRO 4060
provides the ability to define an object
such as a user group, network, service or
interface. When security policies change,
the administrator can modify the pre-defined
object and propagate the changes instantly
without redefining rules. This enables
businesses to implement and manage security
policies easily and consistently.
Policy-based NAT. In addition to NAT
(many-to-one) functionality, the PRO 4060
exposes control of NAT policies to
administrators for one-to-one NAT,
many-to-many NAT, one-to-many NAT, inbound
Port Address Translation (PAT), flexible NAT
(for overlapping IP addresses), as well as
NAT policies on selective
source/destination/source translations. The
result is greater control and flexibility to
support and manage various NAT requirements.
Comprehensive Central Management Support.
Every SonicWALL Internet security appliance
can be managed using SonicWALL's
award-winning Global Management System,
which provides network administrators with
the tools for simplified configuration,
enforcement and management of global
security policies, VPN, and services, all
from a central location.
|