SuperMassive 9000 Series

Transcription

1 SuperMassive 9000 Series Product SuperMassive 9200 SuperMassive 9400 SuperMassive 9600 SuperMassive 9800 Part Numbers Market Positioning and Bundled Services General Features Across all SM 9000 Appliances Specifications Nodes Cores Interfaces Firewall Inspection Throughput Application Inspection Throughput IPS Throughput DPI-SSL Throughput Anti-malware Inspection Throughput IMIX Throughput VPN Performance Site-to-Site VPN Policies IPSec VPN Client Licenses SSL VPN Licenses Concurrent Connections (SPI/DPI) New Connections/Second Support Warranty General Upgrade Options Across all SM 9000 Appliances Key Selling Points 01-SSC SSC-1717 TotalSecure Advanced 01-SSC-3811 High Availability Appliance Designed for enterprise organization, the SuperMassive 9200 next-generation firewall delivers scalability, reliability and deep security at multi-gigabit speeds. Includes: Application Intelligence and Control 24-Core Processor Nodes q VLAN Interfaces 30 Days IPS, Anti-malware and Application Int/Control/Visualization 30 Days 50-user Client/Server AV Suite Deep Packet Inspection TLS/SSL/SSH Auto-provision VPN 24 4x10-GbE SFP+, 8x1-GbE SFP, 8x1-GbE, 2 USB, 1-GbE Mgmt, 1 Console 15 Gbps 5 Gbps 5 Gbps 1 Gbps 3.5 Gbps 4.4 Gbps 5 Gbps 10,000 2,000 Bundled/4,000 Max 2 Bundled/50 Max 1,250,000 (Max)/1,000,000 (Max) 100,000 Intrusion Prevention, Anti-malware and Application Intelligence, Control and Visualization Advanced Gateway Security Suite 01-SSC SSC-1718 TotalSecure Advanced 01-SSC-3801 High Availability Appliance Designed for enterprise organization, the SuperMassive 9400 next-generation firewall delivers scalability, reliability and deep security at multi-gigabit speeds. Includes: Application Intelligence and Control 32-Core Processor Nodes q VLAN Interfaces 30 Days IPS, Anti-malware and Application Int/Control/Visualization 30 Days 50-user Client/Server AV Suite Dynamic Routing OSPF/RIP IPSec 3DES/AES Encryption Breakthrough multi-core next-generation firewall performance Ultra high-speed multi-layer threat protection Deep packet inspection of SSL/TLS-encrypted traffic Voice and Video over IP Route-based VPN 32 4x10-GbE SFP+, 8x1-GbE SFP, 8x1-GbE, 2 USB, 1-GbE Mgmt, 1 Console 20 Gbps 10 Gbps 10 Gbps 2 Gbps 4.5 Gbps 5.5 Gbps 10 Gbps 10,000 2,000 Bundled/6,000 Max 2 Bundled/50 Max 1,250,000 (Max)/1,000,000 (Max) 130,000 Comprehensive Gateway Security Suite Capture Advanced Threat Protection Client/Server Anti-Virus Suite 01-SSC SSC-1719 TotalSecure Advanced 01-SSC-3881 High Availability Appliance Designed for enterprise organization, the SuperMassive 9600 next-generation firewall delivers scalability, reliability and deep security at multi-gigabit speeds. Includes: Application Intelligence and Control 32-Core Processor Nodes q VLAN Interfaces 30 Days IPS, Anti-malware and Application Int/Control/Visualization 30 Days 50-user Client/Server AV Suite DHCP Server/DHCP Relay Policy-based User Authentication 32 4x10-GbE SFP+, 8x1-GbE SFP, 8x1-GbE, 2 USB, 1-GbE Mgmt, 1 Console 20 Gbps 11.5 Gbps 11.5 Gbps 2 Gbps 5 Gbps 5.5 Gbps 11.5 Gbps 10,000 2,000 Bundled/10,000 Max 2 Bundled/50 Max 1, 500,000 (Max)/1,250,000 (Max) 130,000 Content Filtering Service and Client Secure Virtual Assist Global Management System Cloud-based multi-engine sandboxing Unsurpassed business continuity and high availability protection Extensible and modular architecture Analyzer Reporting Global VPN Client Gold Support 24x7 01-SSC SSC-0802 TotalSecure 01-SSC-0801 High Availability Appliance Designed for enterprise organization, the SuperMassive 9800 next-generation firewall delivers scalability, reliability and deep security at multi-gigabit speeds. Includes: Application Intelligence and Control 64-Core Processor Nodes q VLAN Interfaces 30 Days IPS, Anti-malware and Application Int/Control/Visualization 30 Days 50-user Client/Server AV Suite Bandwidth Management/QoS 64 4x10-GbE SFP+, 8x1-GbE SFP, 8x1-GbE, 2 USB, 1-GbE Mgmt, 1 Console 40 Gbps 24 Gbps 24 Gbps 5 Gbps 10 Gbps 9 Gbps 18 Gbps 25,000 2,000 Bundled/10,000 Max 2 Bundled/50 Max 3,000,000 (Max)/2,500,000 (Max) 280,000 Mobile Connect SSL VPN ios/android/kindle Fire/ Chrome/Windows hr RMA Deployment scalability and flexibility Continually updatable platform

2 Security Services for SuperMassive 9000 Series Firewalls Product Part Numbers Description Comprehensive Gateway Security Suite Advanced Gateway Security Suite Bundle Intrusion Prevention, Anti- Malware and Application Control Capture Advanced Threat Protection Enforced Client Anti-Virus and Anti-Spyware For SM 9200 (2 Years/3 Years) 01-SSC-4173/01-SSC-4174 For SM 9400 (2 Years/3 Years) 01-SSC-4137/01-SSC-4138 For SM 9600 (2 Years/3 Years) 01-SSC-4101/01-SSC-4102 For SM 9800 (2 Years/3 Years) 01-SSC-0810/01-SSC-0811 Note: TotalSecure solutions ship with one year of CGSS included For SM 9200 (2 Years/3 Years) 01-SSC-1571/01-SSC-1572 For SM 9400 (2 Years/3 Years) 01-SSC-1581/01-SSC-1582 For SM 9600 (2 Years/3 Years) 01-SSC-1591/01-SSC-1592 For SM 9800 (2 Years/3 Years) 01-SSC-1184/01-SSC-1185 For SM 9200 (2 Years/3 Years) 01-SSC-4203/01-SSC-4204 For SM 9400 (2 Years/3 Years) 01-SSC-4167/01-SSC-4168 For SM 9600 (2 Years/3 Years) 01-SSC-4131/01-SSC-4132 For SM 9800 (2 Years/3 Years) 01-SSC-0840/01-SSC-0841 For SM 9200 (2 Years/3 Years) 01-SSC-1576/01-SSC-1577 For SM 9400 (2 Years/3 Years) 01-SSC-1586/01-SSC-1587 For SM 9600 (2 Years/3 Years) 01-SSC-1596/01-SSC-1597 For SM 9800 (2 Years/3 Years) 01-SSC-1189/01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC-2742 Discounted two- and three-year clients available Comprehensive Gateway Security Suite (CGSS) combines enterprise security, productivity and support in a single solution. Available on SuperMassive Series s, it is the perfect solution for turning your customers SonicWalls into total security and productivity platforms. The Comprehensive Gateway Security Suite is available in one, two and three-year subscriptions that include the following: Intrusion Prevention, Anti-Malware and Application Control Advanced Gateway Security Suite (AGSS) is a combination of the same tools within CGSS with the addition of Capture ATP. Available on Gen 6 firewalls, it combine the best tools to stop known and unknown threats in a single package: Capture ATP Intrusion Prevention, Anti-Malware and Application Control Available on SonicWall SuperMassive 9000 Series s, Intrusion Prevention, Anti-Malware and Application Control integrates gateway anti-virus, anti-spyware and intrusion prevention to deliver intelligent, real-time network security protection against a comprehensive array of dynamic threats including viruses, spyware, worms, Trojans and software vulnerabilities such as buffer overflows, as well as peer-to-peer and instant messenger applications, backdoor exploits, and other malicious code. Capture Advanced Threat Protection (ATP) is a multi-engine sandbox cloud service that blocks potentially malicious files. An add-on subscription service for SonicWall firewalls, Capture examines potentially malicious files, programs, and code in the cloud and can hold them at the gateway until a security verdict is determined. After malware is discovered, SonicWall s GRID network deploys remediation signatures to other network security s. Enforced Client Anti-Virus and Anti-Spyware provides comprehensive protection with little administrative overhead. Anti-virus and anti-spyware policies are automatically enforced network-wide whenever new threats appear. Comprehensive virus and spyware protection using a single integrated client Automated enforcement of virus and spyware protection policies Automated deployments of anti-virus and anti-spyware definition and software updates Full featured attachment filtering Secure Virtual Assist Up to 1 Technician 01-SSC-5967 Up to 5 Technicians 01-SSC-5974 Up to 10 Technicians 01-SSC-5971 Up to 25 Technicians 01-SSC-5972 Secure Virtual Assist is a remote support tool that enables a technician to assume control of a customer s PC or laptop for the purpose of providing remote technical assistance. With the customer s permission, the technician can gain instant access to a computer using a Web browser, making it easy to diagnose and fix a problem remotely without the need for a pre-installed fat client. Content Filtering Service Content Filtering Client CFS for SM 9200 (2 Years/3 Years) 01-SSC-4185/01-SSC-4186 CFS for SM 9400 (2 Years/3 Years) 01-SSC-4149/01-SSC-4150 CFS for SM 9600 (2 Years/3 Years) 01-SSC-4113/01-SSC-4114 CFS for SM 9800 (2 Years/3 Years) 01-SSC-0822/01-SSC-0823 CF Client 10/25 users (1 Yr) 01-SSC-1252/01-SSC-1225 Content Filtering Service provides granular controls and unequalled content filtering to enforce acceptable use policies and block access to websites containing information or images that are objectionable or unproductive. Extend enforcement of internal web use policies to block objectionable and unproductive internet content for devices located outside the firewall perimeter with the Content Filtering Client. Analyzer For SM 9000 Series 01-SSC-3382 Analyzer is an easy-to-use web-based application traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Analyzer supports SonicWall firewalls while leveraging application traffic analytics for security event reports. Global Management System 5-node License 10-node License 25-node License 01-SSC SSC SSC-3311 Global Management System (GMS ) provides organizations, distributed enterprises and service providers with a flexible, powerful and intuitive solution to centrally manage and rapidly deploy SonicWall firewall, access point, and WAN acceleration solutions. GMS also provides centralized real-time monitoring, and comprehensive policy and compliance reporting. Gold Support 24x7 Gold Support 24x7 Discounted two- and three-year contracts available Gold Support 24x7 provides the advanced support features enterprise organizations need to keep their networks running reliably and securely. With Gold Support 24x7, you have around-the-clock access to seasoned support engineers and the latest firmware features plus Advance Exchange hardware replacement, all of which combine to protect and maximize your SonicWall investment. Includes: Direct access to a team of seasoned Senior Support Engineers and firmware updates and upgrades Advance Exchange hardware replacement Service Bulletins and electronic support tools

3 NSA Series Product NSA 2650 NSA 3600 NSA 4600 NSA 5600 NSA 6600 Part Numbers Market Positioning and Bundled Services General Features 01-SSC SSC-1988 TotalSecure Advanced Designed for mid-sized organizations and distributed enterprises, the NSA 2650 delivers high-speed threat prevention. High port density including eight 2.5 GbE interfaces enables fast, scalable security across wired and cloud networks while supporting high-speed ac Wave 2 wireless connections. Includes: ISP Failover/WAN Load Balancing q VLAN Interfaces Stateful A/P HA (Option) 30 Days GAV, Anti-Spyware, IPS/App Intel/Control/Visualize 30 Days 25-user Client/Server Anti- Virus Suite Deep Packet Inspection TLS/SSL/SSH Auto-provision VPN 01-SSC SSC-1713 TotalSecure Advanced Secure your growing small to mediumsized organization, branch office and retail sites with the SonicWall NSA 3600 next-generation firewall with enterpriseclass features and uncompromising performance. Includes: ISP Failover/WAN Load Balancing q VLAN Interfaces Stateful A/P HA (Option) 30 Days GAV, Anti-Spyware, IPS/App Intel/Control/Visualize 30 Days 25-user Client/Server Anti- Virus Suite Dynamic Routing OSPF/RIP IPSec 3DES/AES Encryption 01-SSC SSC-1714 TotalSecure Advanced Secure your growing medium-sized organization or branch office with the SonicWall NSA 4600 next-generation firewall with enterprise-class features and uncompromising performance. Includes: ISP Failover/WAN Load Balancing q VLAN Interfaces 30 Days GAV, Anti-Spyware, IPS/App Intel/Control/Visualize 30 Days 25-user Client/Server Anti- Virus Suite Voice and Video over IP Route-based VPN 01-SSC SSC-1715 TotalSecure Advanced The SonicWall NSA 5600 is ideal for distributed, branch office and corporate environments with enterprise-class features and uncompromising performance. Includes: Multi-WAN Support ISP Failover and WAN Load Balancing Route-based VPN q VLAN Interfaces 30 Days GAV, Anti-Spyware, IPS and Application Int/Control/Visualization 30 Days 25-user Client/Server AV Suite DHCP Server/DHCP Relay Policy-based User Authentication 01-SSC SSC-1716 TotalSecure Advanced Secure your emerging large organization with the SonicWall NSA 6600 nextgeneration firewall featuring enterpriseclass features and uncompromising performance. Includes: Multi-WAN Support ISP Failover and WAN Load Balancing Route-based VPN q VLAN Interfaces 30 Days GAV, Anti-Spyware, IPS and Application Int/Control/Visualization 30 Days 50-user Client/Server AV Suite Bandwidth Management/QoS Single Sign-On Specifications Nodes Interfaces Stateful Firewall Performance App Inspection Performance IPS Performance DPI-SSL Performance Full DPI Performance VPN Performance Site-to-Site VPN Policies IPSec VPN Client Licenses SSL VPN Client Licenses Virtual Assist Technicians Concurrent Connections New Connections/Second Warranty General Upgrade Options Across all NSA Appliances Key Selling Points 12x1-GbE, 4x2.5-GbE, 4x2.5-GbE (SFP), 2 USB, 1 Console 3.0 Gbps 1.4 Gbps 1.4 Gbps 600 Mbps 1.5 Gbps (3DES/AES) 1, standard, non-shareable/1,000 Max 2 Bundled/350 Max 2 Bundled/10 Max 1,000,000 (Max)/500,000 (Max) 15,000 /90 days Limited Gateway AV, Anti-Spyware, IPS and Application Intelligence, Control and Visualization Advanced Gateway Security Suite 12x1-GbE, 4x1-GbE (SFP), 2x10-GbE (SFP+), 2 USB, 1 Console 3.4 Gbps 1.1 Gbps 1.1 Gbps 500 Mbps 1.5 Gbps (3DES/AES) 1, standard, non-shareable/1,000 Max 2 Bundled/350 Max 2 Bundled/10 Max 750,000 (Max)/325,000 (Max) 20,000 /90 days Limited Comprehensive Anti-Spam Service Client/Server Anti-Virus Suite Capture Advanced Threat Protection Breakthrough multi-core next-generation firewall performance Ultra high-speed multi-layer threat protection Deep packet inspection of SSL/TLS-encrypted traffic 12x1-GbE, 4x1-GbE (SFP), 2x10-GbE (SFP+), 2 USB, 1 Console 6.0 Gbps 2.0 Gbps 2.0 Gbps 500 Mbps 800 Mbps 3.0 Gbps (3DES/AES) 3, standard, non-shareable/3,000 Max 2 Bundled/500 Max 2 Bundled/10 Max 1,000,000 (Max)/500,000 (Max) 40,000 /90 days Limited Content Filtering Service and Client Global VPN Client Virtual Assist/Access 12x1-GbE, 4x1-GbE (SFP), 2x10-GbE (SFP+), 2 USB, 1 Console 9.0 Gbps 3.0 Gbps 3.0 Gbps 800 Mbps 1.6 Gbps 4.5 Gbps (3DES/AES) 4,000 2,000 standard, non-shareable/4,000 Max 2 Bundled/1,000 Max 2 Bundled/10 Max 1,500,000 (Max)/1,000,000 (Max) 60,000 /90 days Limited Global Management System Analyzer Reporting Unsurpassed business continuity and high availability protection Extensible and modular architecture Deployment scalability and flexibility Continually updatable platform 8x1-GbE, 8x1-GbE (SFP), 4x10-GbE (SFP+), 2 USB, 1 Console 12.0 Gbps 4.5 Gbps 4.5 Gbps 1.3 Gbps 3.0 Gbps 5.0 Gbps (3DES/AES) 6,000 2,000 standard, non-shareable/6,000 Max 2 Bundled/1,500 Max 2 Bundled/10 Max 1,500,000 (Max)/1,000,000 (Max) 90,000 /90 days Limited Mobile Connect SSL VPN ios/chrome/ Android/Kindle Fire/Windows 8.1 8x5 and 24x7 Support

4 Security Services for NSA Series Firewalls Product Part Numbers Description Comprehensive Gateway Security Suite Advanced Gateway Security Suite Bundle Silver/Dynamic/Gold Support 8x5 and 24x7 Gateway Anti-malware, Intrusion Prevention and Application Intelligence, Control and Visualization Capture Advanced Threat Protection Enforced Client Anti-Virus and Anti-Spyware Comprehensive Anti-Spam Service Note: Recommended for up to 250 users. Content Filtering Service Content Filtering Client For NSA 2650 (2 Years/3 Years) 01-SSC-1965/01-SSC-1966 For NSA 3600 (2 Years/3 Years) 01-SSC-4430/01-SSC-4431 For NSA 4600 (2 Years/3 Years) 01-SSC-4406/01-SSC-4407 For NSA 5600 (2 Years/3 Years) 01-SSC-4236/01-SSC-4236 For NSA 6600 (2 Years/3 Years) 01-SSC-4211/01-SSC-4212 Note: TotalSecure solutions ship with one year of CGSS included For NSA 2650 (2 Years/3 Years) 01-SSC-1799/01-SSC-1801 For NSA 3600 (2 Years/3 Years) 01-SSC-1481/01-SSC-1482 For NSA 4600 (2 Years/3 Years) 01-SSC-1491/01-SSC-1492 For NSA 5600 (2 Years/3 Years) 01-SSC-1551/01-SSC-1552 For NSA 6600 (2 Years/3 Years) 01-SSC-1561/01-SSC x5 Support 24x7 Support Gold 24x7 for NSA 5600 Gold 24x7 for NSA 6600 Discounted two- and three-year contracts available For NSA 2650 (2 Years/3 Years) 01-SSC-1977/01-SSC-1978 For NSA 3600 (2 Years/3 Years) 01-SSC-4436/01-SSC-4437 For NSA 4600 (2 Years/3 Years) 01-SSC-4412/01-SSC-4413 For NSA 5600 (2 Years/3 Years) 01-SSC-4241/01-SSC-4242 For NSA 6600 (2 Years/3 Years) 01-SSC-4217/01-SSC-4218 For NSA 2650 (2 Years/3 Years) 01-SSC-1959/01-SSC-1960 For NSA 3600 (2 Years/3 Years) 01-SSC-1486/01-SSC-1487 For NSA 4600 (2 Years/3 Years) 01-SSC-1496/01-SSC-1497 For NSA 5600 (2 Years/3 Years) 01-SSC-1556/01-SSC-1557 For NSA 6600 (2 Years/3 Years) 01-SSC-1566/01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC-2742 Discounted two- and three-year clients available For NSA 2650 (2 Years/3 Years) 01-SSC-2002/01-SSC-2003 For NSA 3600 (2 Years/3 Years) 01-SSC-4448/01-SSC-4449 For NSA 4600 (2 Years/3 Years) 01-SSC-4424/01-SSC-4425 For NSA 5600 (2 Years/3 Years) 01-SSC-9010/01-SSC-9011 For NSA 6600 (2 Years/3 Years) 01-SSC-4229/01-SSC-4230 For NSA 2650 (2 Years/3 Years) 01-SSC-1971/01-SSC-1972 For NSA 3600 (2 Years/3 Years) 01-SSC-4442/01-SSC-4443 For NSA 4600 (2 Years/3 Years) 01-SSC-4418/01-SSC-4419 For NSA 5600 (2 Years/3 Years) 01-SSC-4247/01-SSC-4248 For NSA 6600 (2 Years/3 Years) 01-SSC-4223/01-SSC-4224 CF Client 10/25 users (1 Yr) 01-SSC-1252/01-SSC-1225 Comprehensive Gateway Security Suite (CGSS) combines security, productivity, reporting and support in a single, low-cost solution. Available on all NSA Series s, it is the perfect solution for turning your customers SonicWalls into total security and productivity platforms. CGSS is available in one, two and three-year subscriptions that include the following: Gateway Anti-malware, Anti-Spyware and Intrusion Prevention Service and Application Intelligence/Control Advanced Gateway Security Suite (AGSS) is a combination of the same tools within CGSS with the addition of Capture ATP. Available on Gen 6 firewalls, it combine the best tools to stop known and unknown threats in a single package: Capture ATP Intrusion Prevention, Anti-Malware and Application Control For customers who need continued protection through ongoing firmware updates and advanced technical support, Silver, Dynamic and Gold Support Services deliver the support features and quality of service that organizations require to keep their networks running smoothly and efficiently. These services include: and firmware updates and upgrades Telephone and Web-based support Advance Exchange hardware replacement Service Bulletins and electronic support tools Gateway Anti-malware, Intrusion Prevention and Application Intelligence, Control and Visualization integrates gateway anti-virus, anti-spyware and intrusion prevention to deliver intelligent, real-time network security protection against a comprehensive array of dynamic threats including viruses, spyware, worms, Trojans and software vulnerabilities such as buffer overflows, as well as peer-to-peer and instant messenger applications, backdoor exploits, and other malicious code. Capture Advanced Threat Protection (ATP) is a multi-engine sandbox cloud service that blocks potentially malicious files. An addon subscription service for SonicWall firewalls, Capture examines potentially malicious files, programs, and code in the cloud and can hold them at the gateway until a security verdict is determined. After malware is discovered, SonicWall s GRID network deploys remediation signatures to other network security s. Enforced Client Anti-Virus and Anti-Spyware provides comprehensive protection with little administrative overhead. Anti-virus and anti-spyware policies are automatically enforced network-wide whenever new threats appear. Comprehensive virus and spyware protection using a single integrated client Automated enforcement of virus and spyware protection policies Automated deployments of anti-virus and anti-spyware definition and software updates Full featured attachment filtering Comprehensive Anti-Spam Service adds powerful enterprise-class protection that can immediately improve network performance by eliminating spam, phishing and viruses from entering your network. With just one mouse click, you can enable advanced cloud-based inbound SMTP protection based on the same technology as in SonicWall's award-winning line of Security software and s. Effective enough to be your primary anti-spam solution, or use in front of any existing anti-spam product as a first touch to reduce bandwidth consumption and improve security. Content Filtering Service provides granular controls and unequalled content filtering to enforce acceptable use policies and block access to websites containing information or images that are objectionable or unproductive. Extend enforcement of internal web use policies to block objectionable and unproductive internet content for devices located outside the firewall perimeter with the Content Filtering Client. Analyzer For NSA 2650 For NSA 3600 For NSA 4600 For NSA 5600/ SSC SSC SSC SSC-3382 Analyzer is an easy-to-use web-based application traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Analyzer supports SonicWall firewalls while leveraging application traffic analytics for security event reports. Global Management System 5-node License 10-node License 25-node License 01-SSC SSC SSC-3311 Global Management System (GMS ) provides organizations, distributed enterprises and service providers with a flexible, powerful and intuitive solution to centrally manage and rapidly deploy SonicWall firewall, access point, and WAN acceleration solutions. GMS also provides centralized real-time monitoring, and comprehensive policy and compliance reporting. Cloud GMS Mgmt Workflow & Reporting License (1 Year) 01-SSC-3435 Mgmt & Workflow License (1 Year) 01-SSC-3664 Cloud GMS provides management and reporting for multiple firewalls. Management features include group management, inheritance, workflow, alerts, backup and firewall upgrades. Flow-based Reporting includes historical data on applications, threats, CFS, users, traffic, source/destination information. Support included.

5 TZ Series Product SOHO/SOHO Wireless-N TZ300/300 Wireless-AC TZ400/400 Wireless-AC TZ500/500 Wireless-AC TZ600 Part Numbers Market Positioning and Bundled Services General Features Specifications Licensed Nodes Interfaces Stateful Packet Inspection GAV Performance IPS Performance Full UTM Performance VPN Performance Site-to-Site VPN Policies Global VPN Client Licenses SSL VPN Client Licenses Concurrent Connections Warranty General Upgrade Options Across all TZ Appliances 01-SSC-0217 (Wired) 01-SSC-0644 (Wireless) 01-SSC-0651 (Wired) TotalSecure 01-SSC-0655 (Wireless) TotalSecure The SOHO Series offers small offices bigbusiness protection and uncompromising security over wired and wireless networks. Includes: Nodes Dual Core Processor SonicOS 5.9.x/6.2.x Firmware Gigabit Ethernet WAN and LAN IPSec and SSL VPN Remote Access 3G/4G Wireless Broadband 5-port Auto-MDIX GbE Switch Additional Wireless Features: Optional n Wireless Wireless Intrusion Detection/Prevention 30 Days GAV, Anti-Spyware, IPS, App Intelligence and Control 30 Days Enforced Desktop Anti-Virus Deep Packet Inspection TLS/SSL/SSH Auto-provision VPN 5x1-GbE, 1 USB, 1 Console 50 Mbps 100 Mbps 50 Mbps 100 Mbps (3DES/AES) 10 1/5 Max 1/10 Max 10,000 (Max)/10,000 (Max) /90 days Limited Comprehensive Gateway Security Suite Gateway AV, Anti-Spyware and IPS Virtual Assist 01-SSC-0215 (Wired) 01-SSC-0574 (Wireless) 01-SSC-0581 (Wired) TotalSecure 01-SSC-0585 (Wireless) TotalSecure The TZ300 Series offers affordable protection over wired and wireless networks for small businesses that need enterprise-level security. Includes: Nodes Dual Core Processor SonicOS 6.x Firmware IPSec and SSL VPN Remote Access 3G/4G Wireless Broadband 5-port Auto-MDIX GbE Switch USB Port Additional Wireless Features: Optional ac Wireless Wireless Intrusion Detection/Prevention 30 Days GAV, Anti-Spyware, IPS, App Intelligence, Control and Visualization 30 Days Enforced Desktop Anti-Virus Dynamic DNS IPSec 3DES/AES Encryption 5x1-GbE, 1 USB, 1 Console 750 Mbps 100 Mbps 100 Mbps (3DES/AES) 10 1/10 Max 1/50 Max 50,000 (Max)/50,000 (Max) /90 days Limited 01-SSC-0213 (Wired) 01-SSC-0503 (Wireless) 01-SSC-0514 (Wired) TotalSecure 01-SSC-0518 (Wireless) TotalSecure Regardless of the size of the organization, the TZ400 Series delivers big-business protection for distributed enterprises with remote offices. Includes: Nodes Quad Core Processor SonicOS 6.x Firmware IPSec and SSL VPN Remote Access 3G/4G Wireless Broadband 7-port Auto-MDIX GbE Switch USB Port Additional Wireless Features: Optional ac Wireless Wireless Intrusion Detection/Prevention 30 Days GAV, Anti-Spyware, IPS, App Intelligence, Control and Visualization 30 Days Enforced Desktop Anti-Virus Voice and Video over IP Route-based VPN 7x1-GbE, 1 USB, 1 Console 1.3 Gbps 500 Mbps 900 Mbps (3DES/AES) 20 2/25 Max 2/100 Max 100,000 (Max)/90,000 (Max) /90 days Limited Content Filtering Service and Client Enforced Client Anti-Virus and Anti-Spyware Mobile Connect SSL VPN Mac OS X/iOS/ Android/Kindle Fire/Windows/ Chrome OS 01-SSC-0211 (Wired) 01-SSC-0449 (Wireless) 01-SSC-0445 (Wired) TotalSecure 01-SSC-0447 (Wireless) TotalSecure The TZ500 Series offers a no-compromise approach to securing growing networks for distributed enterprises with remote offices. Includes: Nodes Quad Core Processor SonicOS 6.x Firmware IPSec and SSL VPN Remote Access 3G/4G Wireless Broadband 8-port Auto-MDIX GbE Switch USB Ports Additional Wireless Features: Optional ac Wireless Wireless Intrusion Detection/Prevention 30 Days GAV, Anti-Spyware, IPS, App Intelligence, Control and Visualization 30 Days Enforced Desktop Anti-Virus DHCP Server Policy-based User Authentication 8x1-GbE, 2 USB, 1 Console 1.4 Gbps 400 Mbps 1.0 Gbps 400 Mbps 1.0 Gbps (3DES/AES) 25 2/25 Max 2/150 Max 125,000 (Max)/100,000 (Max) /90 days Limited Comprehensive Anti-Spam Service 8x5 and 24x7 Support Global VPN Client 01-SSC-0210 (Wired) 01-SSC-0219 TotalSecure The TZ600 offers enterprise-class features and uncompromising performance for distributed enterprises with remote offices. Includes: Nodes Quad Core Processor SonicOS 6.x Firmware IPSec and SSL VPN Remote Access 3G/4G Wireless Broadband 10-port Auto-MDIX GbE Switch USB Ports Additional Wireless Features: Optional ac Wireless Wireless Intrusion Detection/Prevention 30 Days GAV, Anti-Spyware, IPS, App Intelligence, Control and Visualize 30 Days Enforced Desktop Anti-Virus PPTP/DHCP/PPPoE/L2TP Client Bandwidth Management 10x1-GbE, 2 USB, 1 Console, 1 Expansion 1.5 Gbps 500 Mbps 1.1 Gbps 500 Mbps 1.1 Gbps (3DES/AES) 50 2/25 Max 2/200 Max 150,000 (Max)/ (Max) /90 days Limited Analyzer Reporting Global Management System Capture Advanced Threat Protection (except SOHO)

6 Security Services for TZ Series Firewalls Product Part Numbers Description Comprehensive Gateway Security Suite Advanced Gateway Security Suite Bundle Gateway Anti-malware, Intrusion Prevention and Application Control Capture Advanced Threat Protection Enforced Client Anti-Virus and Anti-Spyware Comprehensive Anti-Spam Service Note: Recommended for up to 250 users. Content Filtering Service Content Filtering Client For SOHO Series (2 Years/3 Years) 01-SSC-0689/01-SSC-0690 For TZ300 Series (2 Years/3 Years) 01-SSC-0638/01-SSC-0640 For TZ400 Series (2 Years/3 Years) 01-SSC-0568/01-SSC-0569 For TZ500 Series (2 Years/3 Years) 01-SSC-0489/01-SSC-0490 For TZ600 (2 Years/3 Years) 01-SSC-0259/01-SSC-0260 Note: TotalSecure solutions ship with one year of CGSS included For TZ300 Series (2 Years/3 Years) 01-SSC-1431/01-SSC-1432 For TZ400 Series (2 Years/3 Years) 01-SSC-1441/01-SSC-1442 For TZ500 Series (2 Years/3 Years) 01-SSC-1451/01-SSC-1452 For TZ600 (2 Years/3 Years) 01-SSC-1461/01-SSC-1462 For SOHO Series (2 Years/3 Years) 01-SSC-0670/01-SSC-0671 For TZ300 Series (2 Years/3 Years) 01-SSC-0603/01-SSC-0604 For TZ400 Series (2 Years/3 Years) 01-SSC-0535/01-SSC-0536 For TZ500 Series (2 Years/3 Years) 01-SSC-0459/01-SSC-0460 For TZ600 (2 Years/3 Years) 01-SSC-0229/01-SSC-0230 For TZ300 Series (2 Years/3 Years) 01-SSC-1431/01-SSC-1432 For TZ400 Series (2 Years/3 Years) 01-SSC-1446/01-SSC-1447 For TZ500 Series (2 Years/3 Years) 01-SSC-1456/01-SSC-1457 For TZ600 (2 Years/3 Years) 01-SSC-1466/01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC users (1 Yr) McAfee 01-SSC-2742 Discounted two- and three-year clients available For SOHO Series (2 Years/3 Years) 01-SSC-0683/01-SSC-0684 For TZ300 Series (2 Years/3 Years) 01-SSC-0633/01-SSC-0634 For TZ400 Series (2 Years/3 Years) 01-SSC-0562/01-SSC-0563 For TZ500 Series (2 Years/3 Years) 01-SSC-0483/01-SSC-0484 For TZ600 (2 Years/3 Years) 01-SSC-0253/01-SSC-0254 For SOHO Series (2 Years/3 Years) 01-SSC-0677/01-SSC-0678 For TZ300 Series (2 Years/3 Years) 01-SSC-0609/01-SSC-0610 For TZ400 Series (2 Years/3 Years) 01-SSC-0541/01-SSC-0542 For TZ500 Series (2 Years/3 Years) 01-SSC-0465/01-SSC-0466 For TZ600 (2 Years/3 Years) 01-SSC-0235/01-SSC-0236 CF Client 10/25 users (1 Yr) 01-SSC-1252/01-SSC-1225 Comprehensive Gateway Security Suite (CGSS) combines security, productivity, reporting and support in a single, lowcost solution. Available on all TZ Series s, it is the perfect solution for turning your customers SonicWalls into total security and productivity platforms. The Suite includes the following: Gateway Anti-malware, Intrusion Prevention and Application Intelligence and Control Application Visualization (not available on SOHO Series) Advanced Gateway Security Suite (AGSS) is a combination of the same tools within CGSS with the addition of Capture ATP. Available on Gen 6 firewalls, it combine the best tools to stop known and unknown threats in a single package: Capture ATP Intrusion Prevention, Anti-Malware and Application Control Gateway Anti-malware, Intrusion Prevention and Application Intelligence Control integrates gateway anti-virus, antispyware and intrusion prevention to deliver intelligent, real-time network security protection against a comprehensive array of dynamic threats including viruses, spyware, worms, Trojans and software vulnerabilities such as buffer overflows, as well as peer-to-peer and instant messenger applications, backdoor exploits, and other malicious code. Capture Advanced Threat Protection (ATP) is a multi-engine sandbox cloud service that blocks potentially malicious files. An add-on subscription service for SonicWall firewalls, Capture examines potentially malicious files, programs, and code in the cloud and can hold them at the gateway until a security verdict is determined. After malware is discovered, SonicWall s GRID network deploys remediation signatures to other network security s. Enforced Client Anti-Virus and Anti-Spyware provides comprehensive protection with little administrative overhead. Anti-virus and anti-spyware policies are automatically enforced network-wide whenever new threats appear. Comprehensive virus and spyware protection using a single integrated client Automated enforcement of virus and spyware protection policies Automated deployments of anti-virus and anti-spyware definition and software updates Full featured attachment filtering Comprehensive Anti-Spam Service adds powerful enterprise-class protection that can immediately improve network performance by eliminating spam, phishing and viruses from entering your network. With just one mouse click, you can enable advanced cloud-based inbound SMTP protection based on the same technology as in SonicWall's awardwinning line of Security software and s. Effective enough to be your primary anti-spam solution, or use in front of any existing anti-spam product as a first touch to reduce bandwidth consumption and improve security. Content Filtering Service provides granular controls and unequalled content filtering to enforce acceptable use policies and block access to websites containing information or images that are objectionable or unproductive. Extend enforcement of internal web use policies to block objectionable and unproductive internet content for devices located outside the firewall perimeter with the Content Filtering Client. Analyzer For TZ Series 01-SSC-3378 Analyzer is an easy-to-use web-based application traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Analyzer supports SonicWall firewalls while leveraging application traffic analytics for security event reports. Global Management System 5-node License 10-node License 25-node License 01-SSC SSC SSC-3311 Global Management System (GMS ) provides organizations, distributed enterprises and service providers with a flexible, powerful and intuitive solution to centrally manage and rapidly deploy SonicWall firewall, access point, and WAN acceleration solutions. GMS also provides centralized real-time monitoring, and comprehensive policy and compliance reporting. Cloud GMS Mgmt Workflow & Reporting License (1 Year) 01-SSC-3435 Mgmt & Workflow License (1 Year) 01-SSC-3664 Cloud GMS provides management and reporting for multiple firewalls. Management features include group management, inheritance, workflow, alerts, backup and firewall upgrades. Flow-based Reporting includes historical data on applications, threats, CFS, users, traffic, source/destination information. Support included. Dynamic Support 8x5 and 24x7 Dynamic Support 8x5 Dynamic Support 24x7 Discounted two- and three-year contracts available For customers who need continued protection through ongoing firmware updates and advanced technical support, Dynamic Support Services deliver the support features and quality of service that organizations require to keep their networks running smoothly and efficiently. These services include: Annual subscription to software and firmware updates and upgrades Access to telephone and Web-based support for installation, configuration and troubleshooting help Advance Exchange hardware replacement in the event of failure

7 SonicWave Series Access Point SonicWave 432e SonicWave 432i SonicWave 432o Power over Ethernet (PoE) Injector Part Numbers SonicPoint 432e with 1-Year Activation and 24x7 Support (Multi-Gigabit 802.3at PoE+) 01-SSC-2528 SonicPoint 432e with 3-Year Activation and 24x7 Support (No PoE) 01-SSC-2534 (4-pack) 01-SSC-2536 (8-pack) SonicPoint 432i with 1-Year Activation and 24x7 Support (Multi-Gigabit 802.3at PoE+) 01-SSC-2518 SonicPoint 432i with 3-Year Activation and 24x7 Support (No PoE) 01-SSC-2524 (4-pack) 01-SSC-2526 (8-pack) SonicPoint 432o with 1-Year Activation and 24x7 Support (No PoE) 01-SSC-2540 SonicPoint 432o with 3-Year Activation and 24x7 Support (No PoE) 01-SSC-2544 (4-pack) 01-SSC-2546 (8-pack) Market Positioning and The SonicWall SonicWave Series of ac Wave 2 access points features two indoor models (432e and 432i) and one indoor model (432o). All three models provide a superior user experience by delivering the performance, range and reliability of ac Wave 2 wireless technology in a solution that is easy to deploy and manage. Includes: Support for the IEEE ac Wave 2 wireless standard 4x4 Multiple User Multiple input, Multiple output technology (4x4 MU-MIMO) 2.5 GHz port enables multi-gigabit throughput Dedicated third scanning radio for security Automatic detection and provisioning from TZ, NSA and SuperMassive 9000 Series firewalls IEEE 802.3at Power over Ethernet receive capability Field-replaceable sector and panel antennas (SonicWave 432o only) Plenum rated Wall and ceiling mountable (Kit included) 01-SSC-2450 (Multi-Gigabit 802.3at PoE+) The SonicWall PoE Injector is an IEEE 802.3at compliant power injector that detects the presence of PoE-compatible devices and injects the appropriate power into the data cable. Includes: Remote power feeding IEEE 802.3at compliant Advanced auto-sensing algorithm Interlocking SonicPoint Series Access Point SonicPoint ACe SonicPoint ACi SonicPoint N2 Power over Ethernet (PoE) Injector Part Numbers SonicPoint ACe with PoE Injector and 1-year 24x7 Support 01-SSC-0883 SonicPoint ACe without PoE Injector and 3-year 24x7 Support 01-SSC-0892 (4-pack) 01-SSC-0893 (8-pack) SonicPoint ACi with PoE Injector and 1-year 24x7 Support 01-SSC-0886 SonicPoint ACi without PoE Injector and 3-year 24x7 Support 01-SSC-0894 (4-pack) 01-SSC-0895 (8-pack) SonicPoint N2 with PoE Injector and 1-year 24x7 Support 01-SSC-0889 SonicPoint N2 without PoE Injector and 3-year 24x7 Support 01-SSC-0896 (4-pack) 01-SSC-0897 (8-pack) Market Positioning and The SonicWall SonicPoint Series featuring the SonicPoint ACe, SonicPoint ACi and SonicPoint N2 are dependent access points that provide secure wireless LAN connectivity to users on the network. Includes: Automatic detection and provisioning from TZ, NSA, E-Class NSA and SuperMassive 9000 Series firewalls* Multiple security options (WPA, WPA2, WEP, SSL VPN, IPSec) Up to 8 distinct SSIDs with distinct security policies using Virtual Access Points (VAP) 3x3 Single User Multiple input, Multiple output technology (3x3 SU-MIMO) IEEE 802.3at Power over Ethernet receive capability** Detachable antennas (SonicPoint ACe and SonicPoint N2 only) Plenum rated/wifi certified Wall and ceiling mountable * Requires SonicOS (Gen5) or (Gen6) **SonicPoint ACi and SonicPoint N2 support PoE power only. SonicPoint ACe access points can also be powered directly through an AC adapter. 01-SSC-0176 (802.3at Gigabit AC) The SonicWall PoE Injector is an IEEE 1 GbE 802.3at compliant power injector that detects the presence of PoE-compatible devices and injects the appropriate power into the data cable. Includes: Remote power feeding IEEE 802.3at compliant Advanced auto-sensing algorithm Interlocking

8 Secure Mobile Access Product SMA 200 SMA 400 SMA 500v SMA 6200 SMA 7200 SMA 8200v SRA EX 9000 Part Numbers 01-SSC SSC SSC SSC SSC SSC SSC-9574 Market Positioning and General Features Specifications Concurrent Users SSL VPN Throughput* Storage Interfaces Memory CPU cores SSL acceleration Encryption (AES-NI) Virtual Platforms Warranty Support General Upgrade Options For SMA Designed to empower organizations with mobility and BYOD, the SonicWall SMA 200 provides affordable, simple, policyenforced secure access that scales up to 50 concurrent users. Includes: Geo IP & Botnet filter Web Application Firewall NetExtender thin client Remote support with Virtual Assist Granular access policy engine Dynamic EPC interrogation IPv6 support Up to 50 Up to 100 Mbps 2GB (Flash) 2X 1-GE, 2 USB, 1 console 2GB Dual core Central Management Server (CMS) for SMA Designed to empower organizations with mobility and BYOD, the SonicWall SMA 400 provides affordable, simple, policyenforced secure access that scales up to 250 concurrent users. Includes: Geo IP & Botnet filter Web Application Firewall NetExtender thin client Active/Passive High Availability Remote support with Virtual Assist Citrix XenDesktop / XenApp HTML5 ( RDP/ VNC/ICA/SSH/Telnet) Up to 250 Up to 368 Mbps 2GB (Flash) 4X 1-GE, 2 USB, 1 console 4GB Quad core CMS pooled user licenses Experience the robust secure access deliver from a virtual. The SonicWall SMA 500v provides affordable, simple, policy-enforced secure access that scales up to 250 concurrent users. Includes: Geo IP & Botnet filter Web Application Firewall NetExtender thin client Active/Passive High Availability Remote support with Virtual Assist TCP state replication User defined bookmarks Usage monitoring Up to 250 Up to 186 Mbps Not Application 2GB Single core ESX/ESXi Capture ATP add-on for SMA Move to the cloud and embrace mobility and BYOD using the unified secure access gateway. Enhance the hybrid IT environment with anytime, any device and any application access from a single URL. SMA 6200 scales up to 2,000 users per. Includes: On Demand tunnel Connect Tunnel thin client ICSA certification SSL-TLS Per app VPN Capture ATP integration FIPS certified SAML IdP gatekeeper MFA with OTP Federated SSO with SAML 2.0 Centralized management Available APIs Global Traffic Optimization Global High Availability EMM and MDM integration Forward & reverse proxy LDAP, RADIUS, Kerberos 2FA authentication Group AD, LDAP Forms based SSO & NTLM Up to 2,000 Up to 400 Mbps 2 X 500 GB SATA 6X 1GE 8GB Quad core High Availability and user licenses Move to the cloud and embrace mobility and BYOD using the unified secure access gateway. Enhance the hybrid IT environment with anytime, any device and any application access from a single URL. SMA 7200 scales up to 10,000 users per. Includes: On Demand tunnel Connect Tunnel thin client ICSA certification SSL-TLS Per app VPN Capture ATP integration FIPS certified SAML IdP gatekeeper MFA with OTP Federated SSO with SAML 2.0 Centralized management Available APIs Global Traffic Optimization Global High Availability EMM and MDM integration L3-7 smart tunnel proxy L7 application proxy PKI and client certificates Custom URL support Auto logon Up to 10,000 Up to 3.75 Gbps 2 X 500 GB SATA 6X 1GE, 2X 10Gb SFP+ 16GB Quad core Spike licenses ActiveSync Licenses Move to the cloud and embrace mobility and BYOD using the unified secure access gateway. Enhance the hybrid IT with a virtual that provides anytime, any device and any application access. SMA 8200v scales up to 5,000 users per. Includes: On Demand tunnel Connect Tunnel thin client ICSA certification SSL-TLS Per app VPN Capture ATP integration FIPS certified SAML IdP gatekeeper MFA with OTP Federated SSO with SAML 2.0 Centralized management Available APIs Global Traffic Optimization Global High Availability EMM and MDM integration Application offloading Mobile Connect client for all major mobile platforms SNMP MIBS Syslog and NTP Up to 5,000 Up to 1.58 Gbps 8GB Quad core ESX/ESXi/Hyper-V Web application firewall Secure virtual assist Embrace mobility and BYOD while moving to the cloud using the unified secure access gateway. Enhance the hybrid IT environment with anytime, any device and any application access from a single URL. SRA EX9000 scales up to 20,000 users per. Includes: On Demand tunnel Connect Tunnel thin client ICSA certification SSL-TLS Per app VPN Capture ATP integration FIPS certified SAML IdP gatekeeper MFA with OTP Federated SSO with SAML 2.0 Centralized management Available APIs Global Traffic Optimization Global High Availability EMM and MDM integration Split-tunnel and redirect-all Continual endpoint monitoring VMware View Spike licenses Up to 20,000 Up to 8.6 Gbps 2 X 2TB SATA 8X 1GE, 4X 10Gb SFP+ 32GB Octa core Subscription licenses contracts Key Selling Points Unified secure access gateway Award-winning SSL VPN any time, any device, any application access Network visibility - EPC Robust Clientless HTML5 web access Application level VPN Hybrid IT ready with federated SSO for campushosted or cloud-hosted application * Throughput performance may vary based on deployment and connectivity. Published numbers are based on internal lab conditions High performance low latency traffic optimization Demand based licensing Built-in load balancer Deployment scalability and flexibility Forward and reverse proxies Insure against business disruptions or seasonal spikes

9 SMA in 3 Easy Steps Step 1: Choose Your Appliance Platform For organizations that desire an security solution to run in a VMware or Hyper-V environment. SMA 500v 01-SSC-8469 (up to 250 users) System Requirements: VMWare ESXi and ESX (version 4.0 and newer); Appliance size (on disk): 2 GB; Allocated memory: 2 GB; CPU: 1 SMA 8200v 01-SSC-8468 (up to 5000 users) System Requirements: ESXi 4.0 Update 1 (Build ) and newer, ESXi 5 and newer; Windows Server 2012 R2, Windows Server 2016; Appliance size (on disk): 64 GB; Allocated memory: 8 GB; CPU: 4 Physical Appliance Platforms SonicWall SMA Appliances come with SMA OS pre-installed. Appliance Models SMA SSC-2231 (up to 50 users) 2 GB RAM, 2 GB Flash, 2-core CPU, 1U rack SMA SSC-2243 (up to 250 users) 4 GB RAM, 2 GB Flash, 4-core CPU, 1U rack SMA SSC-2300 (up to 2000 users) 8 GB RAM, 1 TB hard drive, 4-core CPU, 1U rack SMA SSC-2301 (up to 10,000 users) 16 GB RAM, 1 TB hard drive, 4-core CPU, 1U rack SRA EX SSC-9574 (up to 20,000 users) 32 GB RAM, 4 TB hard drive, 8-core CPU, 2U rack Step 2: Choose Your User License User licenses and a valid support contract are required for SMA to function. It is important to size the customers requirements and understand the use cases that need to be addressed. Customers can choose between traditional perpetual licenses or Central pooled licenses which are available as perpetual and subscription options. For specific use cases such as access, customers can choose low cost ActiveSync licenses. TE: 1. Customers need fewer user licenses under the pooled licenses, which are centrally managed and is allocated based on demand. 2. CMS is required to deploy pooled licenses (both subscription and perpetual) 3. Subscription based pooled licenses include 24X7 support. No additional contract required. Traditional User Licenses (Perpetual) User licenses for SMA 200, 400, 500v 01-SSC SSC SSC SSC SSC-2233 Stackable User licenses for SMA 6200, 7200, 8200v, EX SSC SSC SSC SSC SSC-7953 Support Contracts (2yr and 3yr contracts also available) 01-SSC SSC SSC SSC SSC SSC SSC SSC SSC SSC SSC SSC-2063 SMA 500v add 5 users SMA 500v add 100 users SMA 400 add 25 users SMA 400 add 100 users SMA 200 add 10 users SMA 5 user license SMA 100 user license SMA 250 user license SMA 5,000 user license SMA 20,000 user license 8X5 support for SMA 500v up to 25 user 1YR 24X7 support for SMA 500v up to 25 user 1YR 24X7 support for SMA user 1YR 24X7 support for SMA user 1YR 24X7 support for SMA user 1YR 24X7 support for SMA user 1YR 24X7 support for SMA 8200v 100 user 1YR 24X7 support for SMA 8200v 1000 user 1YR 24X7 support for SRA EX user 1YR Central (Pooled) User Licenses (For SMA 6200, 7200, 8200v, EX9000) *CMS required Perpetual Licenses Support Contracts 01-SSC SSC SSC-2075 CMS perpetual license 10user CMS perpetual license 1000user CMS perpetual license 50000user CMS 24x7 support 1yr 10user CMS 24x7 support 1yr 1000user CMS 24x7 support 1yr 50000user Subscription Licenses (24X7 support included) 01-SSC SSC SSC-5339 CMS pooled license 10 user 1yr CMS pooled license 1000 user 1yr CMS pooled license user 1yr ActiveSync Licenses (subscription w/ 24X7 support) 01-SSC-2088 CMS pooled license 10user 1yr 01-SSC-2093 CMS pooled license 1000user 1yr 01-SSC-2087 CMS pooled license 50000user 1yr Step 3: Choose Your Add-ons Optional services and subscription add-ons for SonicWall SMA solutions. Add-ons for SMA 6200, 7200, 8200v, EX9000 Central Management Server (CMS) 01-SSC SSC-8536 CMS base + 3 s license (free) CMS 100 s license 1yr Capture ATP Add-on (CMS required) 01-SSC-2116 FIPS Add-on 01-SSC SSC-2405 CMS Capture ATP trial 1yr for SMA SMA 7200 FIPS add-on SMA 6200 FIPS add-on Add-ons for SMA 200, 400, 500v Web Application Firewall (WAF) (2yr and 3yr contracts also available) 01-SSC SSC SSC-2254 Virtual Assist Technicians 01-SSC SSC SSC-5971 SMA 500v Web Application Firewall 1 YR SMA 200 Web Application Firewall 1 YR SMA 400 Web Application Firewall 1 YR Virtual Assist 1 Technician Virtual Assist 5 Concurrent Technicians Virtual Assist 10 Concurrent Technicians Spike Licenses for SMA (Incremental Needed to Reach Capacity) Traditional Spike Licenses 01-SSC SSC SSC SSC SSC SSC-2374 SMA day 50 user spike license SMA day 250 user spike license SMA 500v 10 day 250-user spike license SMA day spike license SMA 8200v 10 day ,000 spike license SMA day spike license Central Spike Licenses for SMA 6200, 7200, 8200v, EX SSC SSC SSC SSC-2115 SMA CMS spike license 100 user 5 days SMA CMS spike license 500 user 5 days SMA CMS spike license 1000 user 5 days SMA CMS spike license user 5 days

10 Security in 3 Easy Steps: Step 1: /Appliance/Hosted Platform SonicWall Security is for the organizations that desire an security solution to run on their existing Windows 2003 or 2008 Server system. 01-SSC-6636 System Requirements OS: Microsoft Hyper-V Server 2012 (64-bit) or higher Windows Server 2008 R2 (64 bit) or higher; CPU: Intel/AMD 64 bit; RAM: 8 GB min; HDD: 160 GB min. Platform 01-SSC-7636 For organizations that desire an security solution to run in a VMware environment. System Requirements: VMware ESXi and ESX (version 5.0 and newer); Allocated Memory 4 GB; Appliance Disk Size 160 GB. Appliance Platforms SonicWall Security Appliances come with the SonicWall Security software pre-installed. Appliance Models ESA SSC GB RAM, 500 GB hard drive, Celeron G1820 CPU ESA SSC GB RAM, 1 TB hard drive (RAID-1), i CPU ESA SSC GB RAM, 1 TB hard drive (RAID-5), E v3 CPU Hosted Platform SonicWall Hosted Security offers superior cloudbased protection from inbound and outbound threats including spam, phishing, zombie attacks and malware, while minimizing deployment, administration and bandwidth expense. Hosted Security Capture for Hosted with 24x7 Support (1 Yr) Security (1 Yr) 10 Users 01-SSC SSC Users 01-SSC SSC Users 01-SSC SSC Users 01-SSC SSC Users 01-SSC SSC Users 01-SSC SSC Users 01-SSC SSC ,000 Users 01-SSC SSC ,000 Users 01-SSC SSC ,000 Users 01-SSC SSC-1523 Step 2: Add Protection This required subscription activates features in the SonicWall Security (SES) system, Appliance or, for up to the number of users purchased. This subscription comes with either 8x5 or 24x7 Dynamic Support services. TE: Step 2 is not required when selecting Hosted Security. Hosted security includes Protection subscription features. Protection Subscription SonicWall Protection subscription with Dynamic Support (8x5 or 24x7) provides threat protection for SonicWall Security or Appliances. Includes: Anti-Spam, Anti-Phishing & Anti-Virus automatic updates from the SonicWall Capture Network and firmware updates Phone-based support (8x5 or 24x7), web-based support anytime RMA for the - One (1) year warranty for repair or replacement of any defective product due to manufacturer's defects User Packs 8 x 5 Support 24 x 7 Support 25 user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC ,000 user pack 01-SSC SSC ,000 user pack 01-SSC SSC ,000 user pack 01-SSC SSC ,000 user pack 01-SSC SSC-6730 User Packs can be quantity stacked to obtain the desired number of users for a given subscription, e.g. 75 users = 50 user pack + 25 user pack. Step 3: Add Optional Protection Optional subscription services can be added to SonicWall Security solutions. The number of users must be the same as the Protection subscription. Note: Hosted Security includes Compliance and Anti-Virus subscription features. Encryption is available as an optional subscription service. Capture for TotalSecure Subscription Includes: Capture ATP sandboxing service for Security. 25 user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC ,000 user pack 01-SSC Compliance Subscription Includes: Compliance Dictionaries, Attachment Scanning, Approval Boxes, Record ID matching, Archive, and Compliance Reports. 25 user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC ,000 user pack 01-SSC Encryption Subscription Includes: Compliance features plus policy-enforced encryption and secure exchange /Appliance Hosted 25 user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC user pack 01-SSC SSC ,000 user pack 01-SSC SSC-5104 Anti-Virus Subscription Includes McAfee Anti-Virus, SonicWall Time-Zero Anti-Virus and Zombie detection 25 user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC user pack 01-SSC ,000 user pack 01-SSC-6768

11 WAN Acceleration Product WXA WXA 2000 WXA 4000 WXA 5000 WXA Part Numbers 01-SSC-9438 (Includes 1 year Subscription and Dynamic Support 24x7) 01-SSC-9446 ( and 24x7 Support 1 Yr) 01-SSC-9447 ( and 24x7 Support 2 Yrs) 01-SSC-9448 ( and 24x7 Support 3 Yrs) 01-SSC-9440 (Includes 1 Year of Dynamic Support 24x7) 01-SSC-9442 (Includes 1 year of Dynamic Support 24x7) 01-SSC-9444 (Includes 1 year Subscription and Dynamic Support 24x7) 01-SSC-9455 ( and 24x7 Support 1 Yr) 01-SSC-9456 ( and 24x7 Support 2 Yrs) 01-SSC-9457 ( and 24x7 Support 3 Yrs) 01-SSC-9078 (Includes 1 year Subscription and Dynamic Support 24x7) 01-SSC-9079 ( and 24x7 Support 1 Yr) 01-SSC-9039 ( and 24x7 Support 2 Yrs) 01-SSC-9040 ( and 24x7 Support 3 Yrs) WXA Client Licenses 01-SSC-7160 Add 1 Concurrent User 01-SSC-7161 Add 5 Concurrent Users 01-SSC-7162 Add 10 Concurrent Users 01-SSC-7163 Add 25 Concurrent Users Market Positioning and Specifications Management Maximum Users 1 Maximum Connections Included/Max WXA Client Concurrent Licenses 4 Byte Caching Web (HTTP) Caching TCP/File Compression CIFS/SMB Acceleration Signed SMB Support The SonicWall WAN Acceleration Appliance (WXA) Series significantly enhances WAN application performance and improves the end user experience for small- to medium-sized organizations with remote and branch offices. After initial file transfer, the WXA solution dramatically reduces all subsequent traffic by transmitting only new or changed data across the network. Unlike standalone products, the WXA Series is an integrated add-on to SonicWall E-Class NSA, NSA and TZ firewalls, thus simplifying deployment, configuration, routing and management. When deployed in conjunction with SonicWall Application Intelligence and Control, the WXA Series offers the unique combined benefit of both prioritizing application traffic and minimizing traffic between sites. Requires SonicOS or later /20 2 Requires SonicOS or later /50 Requires SonicOS or later 240 1,200 2/125 Requires SonicOS or later 360 1, /125 * Requires SonicOS or later 2,000 10,000 2/ Maximum users may vary depending on the number of connections being generated per user. 2. CIFS/SMB acceleration is available only when the Live CD image is installed on the provided hardware. 3. The max number of connections is dependent on the hardware specifications and may vary depending on the hardware configuration. 4. NetExtender is required in order to use the WXA client software. Please refer to the WXA release notes for supported operating systems. 5. Requires specific SonicWall hardware in order to operate. * SonicWall Austria SonicWall Benelux SonicWall Eastern Europe SonicWall Germany SonicWall France SonicWall Italy austria@sonicwall.com benelux@sonicwall.com easterneurope@sonicwall.com germany@sonicwall.com france@sonicwall.com italy@sonicwall.com SonicWall Contact Information SonicWall MEA SonicWall Nordic SonicWall Portugal/Spain SonicWall Switzerland SonicWall UK/Ireland mea@sonicwall.com nordic@sonicwall.com spain@sonicwall.com switzerland@sonicwall.com uk@sonicwall.com 2017 SonicWall, Inc. #0917-SWPHS-123