SonicWALL Network Security Virtual (NSV) 400 Virtual Appliance
Deep security for public, private or hybrid cloud environments

Features:

SonicOS Platform

The SonicOS architecture is at the core of every SonicWall physical and virtual firewall including the NS_v and NS_a Series, SuperMassive™ Series and TZ Series. Refer to the SonicWall SonicOS Platform datasheet for complete list of features and capabilities.

Automated breach prevention¹

This includes complete advanced threat protection, including high-performance intrusion and malware prevention, and cloud-based sandboxing.

Around-the-clock security¹

New threat updates are automatically pushed to firewalls in the field with active security services, and take effect immediately without reboots or interruptions.

Zero-day protection¹

NS_v protects against zero-day attacks with constant updates against the latest exploit methods and techniques that cover thousands of individual exploits.

Threat API

NS_v receives and leverages any and all proprietary, original equipment manufacturer and third-party intelligence feeds to combat advanced threats, such as zero-day, malicious insider, compromised credentials, ransomware and advanced persistent threats.

Zone protection

NS_v strengthens internal security by segmenting the network into multiple security zones, with intrusion prevention service keeping threats from propagating across the zone boundaries. Creating and applying access rules and NAT policies to traffic passing through the various interfaces, it can allow or deny internal or external network access based on various criteria.

Application intelligence and control¹

With application-specific policies, NS_v provides granular control over network traffic on the level of users, email addresses, schedules, and IP-subnets. It controls custom applications by creating signatures based on specific parameters or patterns unique to an application in its network communications. Internal or external network access are allowed or denied based on various criteria.

Data leakage prevention

NS_v provides the ability to scan streams of data for keywords. This restrict the transfer of certain file names, file types, email attachments, attachment types, email with certain subjects, and email or attachments with certain keywords or byte patterns.

Application layer bandwidth management

Using packet monitor, NS_v can select among various bandwidth management settings to reduce network bandwidth usage by an application. This helps gain further control over the network.

Secure communication

NS_v ensures that data exchange between groups of virtual machines is done securely, including isolation, confidentiality, integrity, and information flow control within these networks via use of segmentation.

Access control

NS_v validates that only VMs that satisfy a given set of conditions are able to access data that belongs to another through the use of VLANs.

User authentication

NS_v creates policies to control or restrict VM and workload access by unauthorised users.

Data confidentiality

NS_v blocks information theft and illegitimate access to protected data and services.

Virtual network resilience and availability

NS_v prevents disruption or degradation of application services and communications.

System safety and integrity

NS_v stops unauthorised takeover of VM systems and services.

Traffic validation, inspection and monitoring mechanisms

NS_v detects irregularities and malicious behaviors and stop attacks targeting VM workloads.

Deployment options²

NS_v can be deployed on a wide variety of virtualized and cloud platforms for various private/public cloud security use cases.

¹ Requires SonicWall Advanced Gateway Security Services (AGSS) subscription.
² Virtual machine image (VMI) support for MS Hyper-V, Amazon and MS Azure will be on a forthcoming release

Benefits:

Public and private cloud security

• Gain complete visibility into intrahost communication between virtual machines for threat prevention
• Ensure appropriate placement of security policies for application throughout the virtual environment
• Deliver safe application enablement rules by application, user and device regardless of VM location
• Implement proper security zoning and isolations

Virtual machine protection

• Defend against zero-day vulnerabilities with Capture Advanced Threat Protection (ATP)
• Prevent unauthorised takeover of virtual systems
• Stop unauthorised access to protected data assets
• Block malicious and intrusive actions, such as spreading malware, executing operating system commands, file system browsing and C&C communication
• Prevent service disruption of any part or entire virtual ecosystem

Governs Centrally

• Establish an easy path to comprehensive security management, analytic reporting and compliance to unify your network security defense program
• Automate and correlate workflows to form a fully coordinated security governance, compliance and risk management strategy

Compliance

• Helps make regulatory bodies and auditors happy with automatic PCI, HIPAA and SOX security reports
• Customize any combination of security auditable data to help you move towards specific compliance regulations

Risk Management

• Move fast and drive collaboration, communication and knowledge across the shared security framework
• Make informed security policy decisions based on time-critical and consolidated threat information for higher level of security efficiency

Compare Models:

¹ Published performance numbers are up to the specification and the actual performance may vary depending on underlying hardware, network conditions; firewall configuration and activated services. Performance and capacities may also vary based on underlying virtualization infrastructure, and we recommend additional testing within your environment to ensure your performance and capacity requirements are met. Performance metrics were observed using Intel Xeon W Processor (W-2195 2.3GHz, 4.3GHz Turbo, 24.75M Cache) running SonicOSv 6.5.0.2 with VMware vSphere 6.5.

Documentation:

Download the SonicWALL Network Security Virtual (NSV) Firewall Series Datasheet (.PDF)