RFC 2544 Performance Evaluation and Internal Measurements for a Linux Based Open Router

Highlights:• 5 GbE interfaces in a desktop form factor • SD-Branch ready• Secure SD-WAN capability • SonicExpress App onboarding • Zero-Touch Deployment• Single-pane-of-glass-management through cloud or firewall • SonicWall Switch, SonicWave Access Point and Capture Client integration • Built-in and expandable storage • Redundant power • High port density • Cellular failover • SonicOS 7.0 • TLS 1.3 support• Groundbreaking performance • High connection count • Fast DPI performance • Low TCOSonicWall TZ570 /570W/570PThe SonicWall TZ570 series, available in three models (TZ570, TZ570W, TZ570P) is the first desktop-form-factor next-generation firewall (NGFW) with 5 Gigabit Ethernet interfaces.Designed for mid-sized organizations and distributed enterprise with SD-Branch locations, the TZ570 series delivers industry-validated security effectiveness with best-in-class price-performance. TZ570 NGFWs address the growing trends in web encryption, connected devices and high-speed mobility by delivering a solution that meets the need for automated, real-time breach detection and prevention. The TZ570 is highly scalable, with high port density of 10 ports. It features both in-built and anexpandable storage of up to 256GB, that enables various features including logging, reporting, caching, firmware backup and more. An optionalsecond power supply provides added redundancy in case of failure. Deployment of TZ570 is furthersimplified by Zero-Touch Deployment, with the ability to simultaneously roll out these devices across multiple locations with minimal IT support. Built on next-gen hardware, itintegrates firewalling, switching and wireless capabilities, plus provides integration with Capture Client for seamless endpoint security.SonicOS and Security ServicesThe SonicOS architecture is at the core of TZ NGFWs. TZ570 is powered by the feature rich SonicOS 7.0operating system with new modern looking UX/UI, advanced security, networking and managementcapabilities. TZ570 features integrated SD-WAN , TLS 1.3 support, real-time visualization, high-speed virtual private networking (VPN) and other robust security features.Unknown threats are sent to SonicWall’s cloud-based Capture Advanced Threat Protection (ATP) multiengine sandbox for analysis. Enhancing Capture ATP is our patent-pending Real-Time Deep Memory Inspection (RTDMI™) technology. As one of Capture ATP’s engine, RTDMI detects and blocks malware and zero-day threats by inspecting directly in memory.By leveraging Capture ATP with RTDMI technology, in addition tosecurity services such as Reassembly-Free Deep Packet Inspection (RFDPI), Anti-virus and Anti-spyware Protection, intrusion preventionsystem, Application Intelligence and Control, Content Filtering Services, DPI-SSL, TZ series firewalls stop malware, ransomware and otherDeploymentsSmall to Medium size Business• Save space and money with an integrated gateway security solution with firewalling, switching and wireless capabilities •Reduce complexity and get the business runningwithout relying on IT personnel with easy onboarding using SonicExpress App and Zero-Touch Deployment, and easy management through a single pane of glass • Attain business continuity by providing failover to cellular connectivity • Protect network from attacks with a comprehensive security solution that incorporates VPN, IPS, CFS, AV and much more • Leverage high port density to power on multiple PoE devices such as IP phones and IP cameras • Boost employee productivity by blockingunauthorized access with traffic segmentation and access policiesSonicWall SwitchZero-T ouch Deployment CapableSonicWave Access PointZero-T ouch Deployment CapableCamera IP PhoneLaptopSmartphoneCapture Client Access SecurityEndpoint SecurityD istributed Enterprise with SD-Branches• Enhance customer experience and adapt to the changing business needs by enabling next-gen branch connectivity with SD-Branch • Drive business growth by investing in next-genappliances with multi-gigabit and advanced security features, to future-proof against the changing network and security landscape • Secure networks from the most advanced attacks with advanced security features and automatically block threats on decrypted traffic using protocols such as TLS 1.3• Leverage end-to-end network security withseamless integration of SonicWave access points, SonicWall Switches and Capture Client • Ensure seamless communication as stores talk to HQ via easy VPN connectivity which allows IT administrators to create a hub and spoke configuration for the safe transport of data between all locations • Improve business efficiency, performance and reduce costs by leveraging TZ570’s hardware and software enhancements, plus features such SD-WAN technology • Scale quickly and effortlessly with SonicExpress App and Zero-Touch Deployment • Ensure business continuity by providing failover to cellular connectivity • Maintain compliance with security features, and leverage built-in and expandable storage to store logs for audit purposesIPSec VPN clients (maximum)10 (500)SSL VPN licenses (maximum) 2 (200)Encryption/authentication DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B CryptographyKey exchange Diffie Hellman Groups 1, 2, 5, 14vRoute-based VPN RIP, OSPF, BGPRoute-based VPN Verisign, Thawte, Cybertrust, RSA Keon, Entrust and Microsoft CA for SonicWall-to-SonicWall VPN, SCEPVPN featuresDead Peer Detection, DHCP Over VPN, IPSec NAT Traversal, Redundant VPN Gateway,Route-based VPNGlobal VPN client platforms supported Microsoft ® Windows 10NetExtender Microsoft ® Windows 10, LinuxMobile ConnectApple ® iOS, Mac OS X, Google ® Android ™, Kindle Fire, Chrome OS, Windows 10SonicWall TZ570/570W/570P specifications- WAN X1 and X2 Port LEDs - X0–X7 RJ45 Port LEDs- X8 / X9 SFP/SFP+ Port LEDsSuperSpeed PortsLEDs -Security LED-Storage LEDPower InputConsole PortSonicWall TZ570/570W/570P specifications, continuedContent Filtering Service (CFS)HTTP URL, HTTPS IP, keyword and content scanning, Comprehensive filtering basedon file types such as ActiveX, Java, Cookies for privacy, allow/forbid lists Comprehensive Anti-Spam Service YesApplication Visualization YesApplication Control YesCapture Advanced Threat Protection YesDNS SecurityYesMajor regulatory complianceFCC Class B, FCC , ICESClass B, CE (EMC, LVD,RoHS), C-Tick, VCCI ClassB, UL/cUL, TUV/GS, CB,Mexico DGN notice byUL, WEEE, REACH, BSMI,KCC/MSIP, ANATELFCC P15E, ICES Class B,ISED/IC, CE (RED, RoHS),C-Tick, VCCI Class B, JapanWireless, UL/cUL, TUV/GS,CB, Mexico DGN notice byUL, WEEE, REACH, BSMI,NCC (TW) KCC/MSIP,SRRC, ANATELFCC Class A, ICES ClassA, CE (EMC, LVD, RoHS),C-Tick, VCCI Class A, UL/cUL, TUV/ GS, CB, MexicoDGN notice by UL, WEEE,REACH, BSMI, KCC/MSIP,ANATELSonicWall TZ570W specifications, continuedFrequency bands802.11a: 5.180-5.825 GHz; 802.11b/g: 2.412-2.472 GHz; 802.11n: 2.412-2.472 GHz,5.180-5.825 GHz; 802.11ac: 5.180-5.825 GHzOperating channels 802.11a: US and Canada 12, Europe 11, Japan 4, Singapore4, Taiwan 4; 802.11b/g: US and Canada 1-11, Europe 1-13, Japan (14-802.11b only); 802.11n (2.4 GHz): US and Canada 1-11, Europe 1-13, Japan 1-13; 802.11n (5 GHz): US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64; 802.11ac: US and Canada 36-48/149-165, Europe 36-48, Japan 36-48, Spain 36-48/52-64Transmit output power Based on the regulatory domain specified by the system administrator Transmit power control YesData rates supported 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11b: 1, 2, 5.5, 11 Mbps per channel; 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel; 802.11n: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 15, 30, 45, 60, 90, 120, 135, 150 Mbps per channel; 802.11ac: 7.2, 14.4, 21.7, 28.9, 43.3, 57.8, 65, 72.2, 86.7, 96.3, 15, 30, 45, 60, 90, 120, 135, 150, 180, 200, 32.5, 65, 97.5, 130, 195, 260, 292.5, 325, 390, 433.3, 65, 130, 195, 260, 390, 520, 585, 650, 780, 866.7 Mbps per channelModulation technology spectrum802.11a: Orthogonal Frequency Division Multiplexing (OFDM); 802.11b: Direct Sequence Spread Spectrum (DSSS); 802.11g: Orthogonal Frequency Division Multiplexing (OFDM)/Direct Sequence Spread Spectrum (DSSS); 802.11n: Orthogonal Frequency Division Multiplexing (OFDM); 802.11ac: Orthogonal Frequency DivisionMultiplexing (OFDM)1. Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.2. Threat Prevention/GatewayAV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.3. VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.4. For rack mount, separate rack mount kit available.5. All TZ integrated wireless models can support either 2.4GHz or 5GHz band. For dual-band support, please use SonicWall's wireless access point products.SonicOS 7.0 Feature SummaryFirewall• Stateful packet inspection• Reassembly-Free Deep Packet Inspection • DDoS attack protection (UDP/ICMP/SYN flood)• IPv4/IPv6 support• Biometric authentication for remote access • DNS proxy• Full API support• SonicWall Switch integration• SD-WAN scalability• SD-WAN Usability Wizard1• SonicCoreX and SonicOS containerization1• Connections scalability (SPI, DPI, DPI SSL) Enhanced dashboard1• Enhanced device view• Top traffic and user summary• Insights to threats• Notification centerTLS/SSL/SSH decryption and inspection• TLS 1.3 with enhanced security1• Deep packet inspection for TLS/SSL/SSH • Inclusion/exclusion of objects, groupsor hostnames• SSL control• Enhancements for DPI-SSL with CFS• Granular DPI SSL controls per zone or rule Capture advanced threat protection2• Real-Time Deep Memory Inspection• Cloud-based multi-engine analysis• Virtualized sandboxing• Hypervisor level analysis• Full system emulation• Broad file type examination• Automated and manual submission• Real-time threat intelligence updates• Block until verdict• Capture ClientIntrusion prevention2• Signature-based scanning• Automatic signature updates• Bi-directional inspection• Granular IPS rule capability• GeoIP enforcement• Botnet filtering with dynamic list• Regular expression matchingAnti-malware2• Stream-based malware scanning• Gateway anti-virus• Gateway anti-spyware• Bi-directional inspection• No file size limitation• Cloud malware databaseApplication identification2• Application control• Application bandwidth management• Custom application signature creation• Data leakage prevention• Application reporting over NetFlow/IPFIX• Comprehensive application signature databaseTraffic visualization and analytics• User activity• Application/bandwidth/threat usage• Cloud-based analyticsHTTP/HTTPS Web content filtering2• URL filtering• Proxy avoidance• Keyword blocking• Policy-based filtering (exclusion/inclusion)• HTTP header insertion• Bandwidth manage CFS rating categories• Unified policy model with app control• Content Filtering ClientVPN• Secure SD-WAN• Auto-provision VPN• IPSec VPN for site-to-site connectivity• SSL VPN and IPSec client remote access• Redundant VPN gateway• Mobile Connect for iOS, Mac OS X, Windows,Chrome, Android and Kindle Fire• Route-based VPN (OSPF, RIP, BGP)Networking• PortShield• Jumbo frames• Path MTU discovery• Enhanced logging• VLAN trunking• Port mirroring (NS a 2650 and above)• Layer-2 QoS• Port security• Dynamic routing (RIP/OSPF/BGP)• SonicWall wireless controller• Policy-based routing (ToS/metric and ECMP)• NAT• DHCP server• Bandwidth management• A/P high availability with state sync• Inbound/outbound load balancing• High availability - Active/Standby withstate sync• L2 bridge, wire/virtual wire mode, tap mode,NAT mode• Asymmetric routing• Common Access Card (CAC) supportVoIP• Granular QoS control• Bandwidth management• DPI for VoIP traffic• H.323 gatekeeper and SIP proxy supportManagement, monitoring and support• Capture Security Appliance (CS a) support• Capture Threat Assessment (CTA) v2.0• New design or template• Industry and global average comparison• New UI/UX, Intuitive feature layout1• Dashboard• Device information, application, threats• Topology view• Simplified policy creation and management• Policy/Objects usage statistics1• Used vs Un-used• Active vs Inactive• Global search for static data• Storage support1• Internal and external storage management1• WWAN USB card support (5G/LTE/4G/3G)• Network Security Manager (NSM) support• Web GUI• Command line interface (CLI)• Zero-Touch registration & provisioning• CSC Simple Reporting1• SonicExpress mobile app support• SNMPv2/v3• Centralized management and reporting withSonicWall Global Management System (GMS)2• Logging• Netflow/IPFix exporting• Cloud-based configuration backup• BlueCoat security analytics platform• Application and bandwidth visualization• IPv4 and IPv6 management• CD management screen• Dell N-Series and X-Series switchmanagement including cascaded switchesDebugging and diagnostics• Enhanced packet monitoring• SSH terminal on UIWireless• SonicWave AP cloud management• WIDS/WIPS• Rogue AP prevention• Fast roaming (802.11k/r/v)• 802.11s mesh networking• Auto-channel selection• RF spectrum analysis• Floor plan view• Topology view• Band steering• Beamforming• AirTime fairness• Bluetooth Low Energy• MiFi extender• RF enhancements and improvements• Guest cyclic quotaIntegrated Wireless (TZ570W only)• 802.11ac Wave 2 wireless• Dual-band (2.4 GHz and 5.0 GHz)• 802.11 a/b/g/n/ac wireless standards• Wireless intrusion detection and prevention• Wireless guest services• Lightweight hotspot messaging• Virtual access point segmentation• Captive portal• Cloud ACLProduct SKUTZ570 with 1-year TotalSecure Essential Edition02-SSC-5651 TZ570W with 1-year TotalSecure Essential Edition02-SSC-5649 TZ570P with 1-year TotalSecure Essential Edition02-SSC-5653 TZ570 High Availability02-SSC-5694 TZ570P High Availability02-SSC-5655 TZ570 with 3-year Secure Upgrade Plus Essential Edition02-SSC-5661 TZ570W with 3-year Secure Upgrade Plus Essential Edition 02-SSC-5663 TZ570P with 3-year Secure Upgrade Plus Essential Edition02-SSC-5667Services for SonicWall TZ570SKU Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year)02-SSC-5137 Capture Advanced Threat Protection for TZ570 (1-year)02-SSC-5083 Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year)02-SSC-5155 Content Filtering Service (1-year)02-SSC-5119 Comprehensive Anti-Spam Service (1-year)02-SSC-5101 24x7 Support (1-year)02-SSC-5065Services for SonicWall TZ570W SKU Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year)02-SSC-5149 Capture Advanced Threat Protection for TZ570W (1-year)02-SSC-5095 Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year)02-SSC-5167 Content Filtering Service (1-year)02-SSC-5131 Comprehensive Anti-Spam Service (1-year)02-SSC-5113 24x7 Support (1-year)02-SSC-5077Services for SonicWall TZ570P SKU Essential Protection Service Suite - Capture ATP, Threat Prevention, Content Filtering, Anti-Spam and 24x7 Support (1-year)02-SSC-5143 Capture Advanced Threat Protection for TZ570P (1-year)02-SSC-5089 Gateway Anti-Virus, Intrusion Prevention and Application Control (1-year)02-SSC-5161 Content Filtering Service (1-year)02-SSC-5125 Comprehensive Anti-Spam Service (1-year)02-SSC-5107 24x7 Support (1-year)02-SSC-5071Accessories SKU SonicWall TZ670/570 Series FRU Power Supply02-SSC-3078 SonicWall TZ670/570 Series Rack Mount Kit02-SSC-3112 SonicWall 32GB Storage Module for TZ670/570 Series02-SSC-3114 SonicWall 64GB Storage Module for TZ670/570 Series02-SSC-3115 SonicWall 128GB Storage Module for TZ670/570 Series02-SSC-3116 SonicWall 256GB Storage Module for TZ670/570 Series02-SSC-3117 SonicWall Micro USB Console Cable for TZ670/570 Series02-SSC-5173 10GB-SR SFP+ Short Reach Fiber Module Multi-Mode No Cable01-SSC-9785 10GB-LR SFP+ Long Reach Fiber Module Single-Mode No Cable01-SSC-9786 10GB SFP+ Copper with 1M Twinax Cable01-SSC-9787 10GB SFP+ Copper with 3M Twinax Cable01-SSC-9788 1GB-SX SFP Short Haul Fiber Module Multi-Mode No Cable01-SSC-9789 1GB-LX SFP Long Haul Fiber Module Single-Mode No Cable01-SSC-9790 1GB-RJ45 SFP Copper Module No Cable01-SSC-9791 SonicWall SFP+ 10GBASE-T Transceiver Copper RJ45 Module02-SSC-1874Regulatory model numbersTZ570APL62-0F7 TZ570W APL62-0F8 TZ570P APL63-0F9About SonicWallSonicWall delivers Boundless Cybersecurity for the hyper-distributed era and a work reality where everyone is remote, mobile and unsecure. By knowing the unknown, providing real-time visibility and enabling breakthrough economics, SonicWall closes the cybersecurity business gap for enterprises, governments and SMBs worldwide. For more information, visit .。

IxAutomate配置方法—时延
点击Port Names配置接口IP地址，本次测试使用的是透明模式，两个 接口网关互指
IxAutomate配置方法—时延
Test Setup配置运行的参数
IxAutomate配置方法—时延
Duration设置测试的时间，Tset Parameters设置测试次数等
IxAutomate配置方法—吞吐量
在Iteration中设置吞吐最大最小百分比，默认即可 右边图中显示为： 最小吞吐率能到0.001% 从100%开始，最大也是100% 本次用了一对接口，也就是2G流量。
IxAutomate配置方法
点击开始测试
查看测试结果—吞吐量
在Logs中可以查看测试过程和结果
测试时延必须要有DUT的每个字节的吞吐量，以一定数 据帧长在测定的对应发送吞吐量速率下发送数据流穿 过DUT。如刚才测试的吞吐量帧长64字节的吞吐量为 56.582%，那么我们在测试64字节的时延时选取的吞吐 值为55%，下面就用测试64字节的时延来为大家介绍一 下IxAutomate如何配置吧。
网络层性能指标
IETF RFC1242中对时延也做出了定义和计算方法。对存储转发 设备，时延按照LIFO的方法计算，即从数据帧的最后一位进入 输入端口开始计时，到数据帧的第一位出现在输出端口结束， 这期间的时间间隔。而对直通转发设备，时延按照FIFO的方法 计算，即从数据帧的第一位进入输入端口开始计时，到数据帧 的第一位出现在输出端口结束，这期间的时间间隔。 IETF RFC2544中给出了该项测试的步骤过程，首先测定防火墙在每种 数据帧长下的吞吐量大小。以一定数据帧长在测定的对应发送 吞吐量速率下发送数据流穿过防火墙，测试过程一般延迟120s，

The SonicWALL TZ 170 SeriesThe SonicWALL® TZ 170 Series is the ideal total security platform for small networks including remote and branch offices and retail/POS deployments, providing organizations a choice between absolute ease-of-use for basic networks and unsurpassed flexibility for networks with more complex needs.Integrating a deep packet inspection firewall, 802.11b/g secure wireless, gateway anti-virus, anti-spyware, intrusion prevention, content filtering, failover/failback technologies, and IPSec VPN capabilities into a cost-effective solution, the TZ 170 Series scales to protect your investment as your organization grows. Available in multiple hardware and nodeconfi gurations, including the SonicWALL TZ 170, TZ 170 SP, TZ 170 Wireless and TZ 170 SP Wireless, the TZ 170 Series allows you to add features and functionality when your network needs them.Features and BenefitsPowerful deep packet inspection firewall protects against malicious application layer attacks originating from either internal or external sources.Integrated gateway anti-virus, anti-spywareand intrusion prevention shields the network from dynamic threats including viruses, spyware, worms, Trojans, software vulnerabilities, and other malicious code. Protection is also provided for peer-to-peer and instant messenger applications, enabling the worry-free use of these productivity enhancing tools.Secure 802.11b/g wireless option LAN provides IPSec and WPA secured, high-speed wireless connectivity.Dynamic Domain Name Service (DDNS) support d rastically reduces the costs associated with hosting e-mail servers, Web servers and site-to-site VPN by allowing the use of dynamic IP addresses.Integrated and automated failover/failback technologies ensure continuous network uptime by automatically switching to a secondary WAN or tothe integrated analog modem should the primary connection fail.Intuitive configuration wizards simplify even the most complicated tasks, including VPN set-up and NAT configuration.Advanced NAT modes offer greater control and flexibility to support and manage various NAT requirements.Award-winning Global Management System (GMS) provides comprehensive global managementand reporting tools for simplified configuration, enforcement and management of global security policies, VPN and services, all from a central location.TZ 170Powerful, proven network protection for smaller and distributed networks TZ 170 Wireless802.11b/g secure wirelessplatform to set yourbusiness freeTZ 170 SPIntegrated analog modemprovides failover/failback forcritical deployments, such asretail or healthcareTZ 170 SP WirelessTrusted secure wireless andintegrated analog modemfor the ultimate in reliablewire-free networking■ Powerful deep packet inspection firewall■ Integrated gatewayanti-virus, anti-spyware and intrusion prevention support■ Secure 802.11b/g wireless option■Dynamic Domain Name Service (DDNS) support■Automated failover/ failback■Intuitive configuration wizards■Advanced NAT modes■Global management and reporting������������������������������������������������������������������������������������������������������������SonicOS SonicOS Features StandardEnhancedStreamlined GUI■■Advanced Management Wizards ■■Scheduled & Prompted Dial-out ■■WAN ISP Failover■Object-based Management ■Policy-based NAT ■SonicPoint Management ■Configurable Optional Port As Workport As Workport, LAN, (TZ 170 only)WAN, WLAN, DMZ(on all models)SonicOSSonicOS Standard allows rapid deployment in basic networks with a user-friendly Web interface and powerful wizards. Building upon SonicOS Standard, SonicOS Enhanced is a sophisticated software upgrade that provides advanced features for more complex network installations.Security■ Deep packet inspection firewall plus dynamicallyupdated SonicWALL Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service guarantee protection against the latest threats.■ Advanced security services provide layered security,including gateway anti-virus, anti-spyware, intrusionprevention and content filtering.Wireless■ Wireless intrusion detection services protectwireless networks from wireless security threats and rogue access points.*■ Wireless firewalling provides control over thecommunications between the appliance and connecting clients.*■ Enforced IPSec encryption and WPA on the WLANoffer the highest available security for wireless traffic.*■ Wireless guest services provide customers, partnersand guests with wireless Internet-only access.*■ Lightweight HotSpot messaging provides supportfor external authentication via back-end systems forbusinesses providing wireless HotSpot services.*■ Distributed WLAN support creates seamlessintegration and management of SonicPoint™ satellite access points.Business Continuity■ Integrated and automated failover and failbacktechnologies ensure continuous uptime for IPSec VPN tunnels while also providing the best connection speed possible.**■ Broadband-to-broadband-to-analog WANredundancy provides unparalleled network uptimevia multiple WAN redundancies.**■ WAN/WAN failover and load balancing offerround-robin, percent-based and spill-over load balancing.General■ Integrated 5-port auto-MDIX switch allows multiplecomputers to network together.■ System-on-a-chip technology delivers 90 Mbps ofstateful packet inspection firewall and 30+ Mbps 3DES and AES throughput.■ Optional port can be configured as a second LAN,a second WAN, a DMZ or as a WLAN for maximum network configuration flexibility.■ Advanced NAT modes create flexible site-to-siteconnectivity and management.■ Award-winning Global Management System (GMS)enables comprehensive management and reporting. *Available on Wireless models **Available on SP modelsKey FeaturesSonicWALL’s TZ 170 Series i s the ultimate total security p latform for small networks, including remote and branch offi cesand retail/POS deploymentsSpecificationsNodes Supported Stateful Throughput 90 Mbps†Deep Packet Inspection Protection from viruses, spyware, worms, Trojans and application layer attacksRequires Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service subscriptionGateway Anti-Virus Throughput 8 Mbps††† Intrusion Prevention Throughput 8 Mbps†††Connections 6,000Policies100 (SonicOS Standard)/250 (SonicOS Enhanced) Denial of Service Attack Protection 22 classes of DoS, DDoS and scanning attacks 3DES/AES Throughput 30+ Mbps† Site-to-Site VPN Tunnels 10 Node: 2 25 Node: 10Unrestricted Node: 10Bundled Global VPN Client Licenses for Remote Access Encryption DES, 3DES, AES (128, 192, 256-bit)Authentication MD5, SHA-1Key Exchange Manual Key, PKI (X.509), IKEXAUTH/RADIUS Yes L2TP/IPSecYesCertificate Support Verisign®, Thawte, Baltimore, RSA Keon, Entrust®, and Microsoft® CA for SonicWALL-to-SonicWALL VPNDead Peer Detection Yes DHCP Over VPN YesIPSec NAT Traversal Yes, NAT_Tv00 and v03Redundant VPN Gateway YesS ingle-arm VPNN/AYes (Not available on SonicOS Enhanced) Gateway Anti-Virus, Anti-Spyware and Comprehensive signature database. Intrusion Prevention Service Peer-to-peer and instant messaging control and signature updates through Distributed Enforcement Architecture 1 Content Filtering Service (CFS) Standard Edition URL, keyword and content scanning ActiveX®, Java Applet, and cookie blocking 1 Gateway-enforced Network Anti-Virus (SMTP, POP3) Enforced McAfee™ Clients 1 E-mail attachment blocking 2Bundled Features 90 days 8x5/international support, Global VPN Clients and services as described aboveDHCP Relay, internal serverNAT Modes 1:1, 1:many, many:1††, many:many, flexible NAT (overlapping IPs)††, PAT††, transparent mode(Note: TZ 170 Wireless requires SonicOS Enhanced to operate in transparent mode) Policy-based Routing Routing decisions based on combinations of Source IP, Destination IP and IP Service††Multicast Secure multicast forwarding with full IGMPv1, v2, v3 support†† Authentication RADIUS, Active Directory††, LDAP††, internal user databaseDDNSSupport for services offered by the following dynamic DNS providers: , , and User Database 100 (SonicOS Standard)/150 (SonicOS Enhanced)VoIP Full H.323v1-5, SIP, gatekeeper support, inbound/outbound bandwidth management, call trackingand monitoring, full interoperability with most VOIP gateway and communications devices Zone SecurityYes†† Object-based Management Yes††Management and Monitoring Local CLI, Web GUI (HTTP, HTPS), SNMP v2; Global management with SonicWALL GMSLogging and Reporting ViewPoint™, Local Log and SyslogFailover/Failback WAN/WAN/Analog Yes Yes†† N/A N/A WAN/WAN Yes Yes†† Yes†† Yes†† WAN/Analog YesYesN/AN/ALoad Balancing Yes, with percent-based, round-robin and spill-over††StandardsTCP/IP, UDP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS Wireless Standards – 802.11b/g, WEP, WPA, TKIP, 802.11b/g, WEP, WPA, TKIP, –802.1x, EAP-PEAP, EAP-TTLS802.1x, EAP-PEAP, EAP-TTLS† Testing Methodologies: Maximum performance based on RFC 2544 (for fi rewall). Actual performance may vary depending on conditions and activated services.†† Requires SonicOS Enhanced 2.5 or greater ††† Throughput measured using HTTP fi le downloads1) 30-day service included 2) 30-day 10-user service included10 (25 and Unrestricted by node upgrade)10, 25 and UnrestrictedOptional10 Node: Optional 25 Node: 1Unrestricted Node: 1SonicWALL TZ 170 TZ 170 10 Node(International) 01-SSC-5556TZ 170 10 Node 8x5 Support Bundle (International) 01-SSC-5550TZ 170 10 NodeComprehensive Gateway Security Bundle(International) 01-SSC-5828TZ 170 25 Node(International) 01-SSC-5559TZ 170 25 Node 8x5 Support Bundle(International) 01-SSC-5552TZ 170 25 Node Comprehensive Gateway Security Bundle(International)01-SSC-5829TZ 170 Unrestricted Node(International)01-SSC-5562 TZ 170 Unrestricted Node 8x5 Support Bundle (International) 01-SSC-5554TZ 170 Unrestricted Node Comprehensive Gateway Security Bundle (International)01-SSC-5830NOTE: C omprehensive Gateway Security B undles include 1 year of 8x5 support, C ontent Filtering Service, Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service as well as ViewPoint reporting software.SonicWALL TZ 170 SP TZ 170 SP 10 Node(International) 01-SSC-5732©2005 SonicWALL, Inc. is a registered trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Specifi cations and descriptions subject to change without notice. G113_SW.1302.DS.A4.v5SonicWALL, Inc.1143 Borregas Avenue T +1 408.745.9600 Sunnyvale CA 94089-1306F +1 408.745.9300SpecificationsSonicWALL Value-added Security ServicesSonicWALL Internet security appliances integrate seamlessly with an expanding array of value-added security services to provide a comprehensive security solution. Gateway anti-virus, anti-spyware, intrusion prevention and content filtering can be deployed over both the wired and wireless LANs.Interfaces(7) 10/100 Ethernet (WAN, 5-port LAN switch, optional port)802.3af Power over Ethernet (Receive) Yes, Port 1 –Yes, Port 1–Processor SonicWALL Security ProcessorMemory (RAM) 64MB Flash Memory 8MBIntegrated Modemv.92 Analog Modem– Antennas – Dual, External Dual, External –5 dBi Diversity 5 dBi DiversityRadio Power– Note: Power output of the radio 802.11b802.11b–Up to 21 dBm/125 mW MaxUp to 21 dBm/125 mW Maxwill change to comply with local regulatory authority limitations 802.11g802.11gUp to 19 dBm/79 mW MaxUp to 19 dBm/79 mW MaxChannels US, Canada, Taiwan– US, Canada, TaiwanChannels 1-11 –Channels 1-13 –EU, Korea – EU, KoreaChannels 1-14Japan– Japan –Radio Receive Sensitivity (-86,-78,-70,-68) dBm at multiple– (-86,-78,-70,-68) dBm at multiple–(6, 24, 48, 54) Mbps(6, 24, 48, 54) Mbps Power Supply 12 WPower Input100 to 240 VAC, 60-50 Hz, 6 AMax Power Consumption 10.6 W 9.4 W 9.4 W 10.6 W Total Heat Dissipation 36.1 BTU32.1 BTU 32.1 BTU36.1 BTU Certifications ICSA Firewall 4.1 ICSA Firewall 4.1 (SonicOS Enhanced) ICSA IPSec 1.0dICSA IPSec 1.0dFIPS 140-2Dimensions 9.07 x 6.63 x 1.63 in 23.03 x 16.84 x 4.14 cmWeight 1.40 lbs 1.15 lbs 1.40 lbs 1.15 lbs0.64 kg0.52 kg0.64 kg0.52 kgMajor Regulatory ComplianceF CC Class B, ICES Class B, CE, C-Tick, VCCI, BSMI, MIC, UL, cUL, TUV/GS, CB, NOM Environment 40-105 F, 5-40 C Humidity 10-90% non-condensingMTBF7.5 years11.7 years7.9 years13.3 years† Testing Methodologies: Maximum performance based on RFC 2544 (for fi rewall). Actual performance may vary depending on conditions and activated services.†† Requires SonicOS Enhanced 2.5 or greater ††† Throughput measured using HTTP fi le downloads1) 30-day service included 2) 30-day 10-user service includedFor more information on SonicWALL security services, including Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service, Network Anti-Virus and Content Filtering Service please visit our Web site at/products/vpnsoft.htmlSonicWALL TZ 170 Wireless TZ 170 Wireless 10 Node(International)01-SSC-5716TZ 170 Wireless 25 Node(International)01-SSC-5718TZ 170 Wireless Unrestricted Node(International)01-SSC-5720SonicWALL TZ 170 SP Wireless TZ 170 SP Wireless 10 Node(International)01-SSC-5742SonicWALL Comprehensive G ateway Security SuiteTZ 170 Series Unrestricted Node01-SSC-5844TZ 170 Series 10 and 25 Node 01-SSC-5845SonicWALL Gateway Anti-Virus, A nti-Spyware and Intrusion P revention ServiceTZ 170 Series Unrestricted Node 01-SSC-5751TZ 170 Series 10 and 25 Node01-SSC-5752SonicWALL Content Filtering Service StandardTZ 170 Series Unrestricted Node01-SSC-5505TZ 170 Series 10 and 25 Node 01-SSC-5508SonicWALL Content Filtering Service Premium Business Edition TZ 170 Series 01-SSC-5650SopnicWALL SonicOS Enhanced Firmware Upgrade TZ 170 Series 01-SSC-5568NOTE: C omprehensive Gateway Security Suite i ncludes 1 year of 8x5 support, Content Filtering Service, Gateway Anti-Virus, A nti-Spyware and Intrusion Prevention S ervice as well as ViewPoint reporting software.�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������。

VIAVI SolutionsData SheetVIAVINetwork & Service Companion (NSC-100)Enterprise Ethernet TestEmpower techs with the simplest, most comprehensive, fastest (one-minute) service activation test and troubleshooting solution.Benefitsy Support of Fiber, Ethernet and WiFi in one solutiony Flexible multi-tool for enterprise andfixed-line/mobile fronthaul service installation, performance measurements and troubleshootingy Drive compliance of both direct and contracted staff with centralized,cloud-based workflow and result management y Remote control for leave-behind use case enables long-term testing and failure analysis y Service activation, test and performance management (L2/L3 loopback up to 10G, TWAMP reflector)y Centralized test system (VIAVI Fusion) leveraging NSCs as remote controlled test agentsFeaturesy Ethernet test interfaces up to 10G y Ethernet testing up to Layer 4 (TCP/UDP) y WiFi 3x3 tests and WiFi Expert up to WiFi 6 y StrataSync and Mobile T ech app support y Job ManagerThe NSC-100 is a test solution for Ethernet, Enterprise and Data Center Networks. It combines active Ethernet and WiFi testing capabilities enabling service activation and troubleshooting tests on all network layers. y Simplify the Ethernet turn-up and troubleshooting process by enabling Ethernet tests on network Layers 2, 3, and 4.y Identify and prevent customer affecting throughput issues by running active throughput tests (Speedtest, TrueSpeed RFC6349, iPerf).y Validate business services as standalone unit, or as remote loopback device when combined with the T-BERD/MTS-5800 for Y .1564 and RFC2544 tests. y Optimize WiFi coverage and performance; get network improvement recommendations when performance is below expectation.yPerform 24/7 monitoring sessions for long-term, root cause failure analysis and SLA monitoring.2019 Broadband Technology Review - 4.0 Diamond Award Winner2022 Broadband Technology Review -4.0 Diamond Award WinnerSpecificationsOrdering Information© 2023 VIAVI Solutions Inc.Product specifications and descriptions in this document are subject to change without notice.Patented as described at /patentsnsc100-ethernet-ds-xpf-nse-ae 30190934 908 0223Contact Us+1 844 GO VIAVI (+1 844 468 4284)To reach the VIAVI office nearest you, visit /contactVIAVI SolutionsOrdering Information continued。