SonicWall Gen 7 Firewalls Join the NSa & TZ Ranks

By Andrew Harmon

Posted On November 13, 2020

firewall sonicos SonicWALL sonicwall firewall sonicwall nsa Sonicwall tz

SonicWall Gen 7 Firewalls

The next generation of SonicWall next generation firewalls continues to grow. The powerhouse NSa 2700 and three new TZ small business firewalls, the TZ270, TZ370, & TZ470 are the latest entries in SonicWall Gen 7. Following the release of the TZ570 and TZ670 earlier this year, this week’s announcement marks six appliances with a seven in their name. So what does the seventh generation moniker mean?

It means each firewall runs on SonicOS 7.0, the latest iteration of SonicWall’s operating system. On top of that, it means more connections. It means the state-of-the-art protection of Capture ATP, which stops ransomware in its tracks. And of course a big one, top notch performance.

Let’s take a closer look at each of the new SonicWall Gen 7 firewalls.

SonicWall NSa 2700

The SonicWall NSa 2700 is the first of the mid-size firewalls in SonicWall Gen 7. That means this firewall packs an enterprise feature-rich punch, with a low total cost of ownership that won’t knock out budgets. The NSa 2700 boasts advanced networking features businesses come to expect, like SD-WAN, dynamic routing, and clustering. Along with that, it offers high-speed VPN for 2020’s remote workforce.

When it comes to security, in addition to Capture ATP, the NSa 2700 supports Cloud Application Security, Real Time Deep Memory Inspection, and Reassembly-Free Deep Packet Inspection. On top of that is Deep Packet Inspection for all traffic. In sum, the NSa 2700 with these features is ready to stop the latest threats, including the zero days we don’t know about yet. Here’s a brief look at its other tech specs:

Firewall Throughput: 5.5 Gbps

IPS Throughput: 3.4 Gbps

Threat Prevention Throughput: 3 Gbps

IPSec VPN Throughput: 2.1 Gbps

Maximum Connections (DPI): 500,000

Connections per Second: 25,000

Interfaces: 16x1GbE, 3x10G SFP+, 2 USB 3.0, 1 Console, 1 Management port

SonicWall TZ270, TZ370, & TZ470

SonicWall’s TZ firewall series is known for offering comprehensive protection to SMBs at an affordable price point. The new members of this series take the protection & performance up a notch. These SonicWall Gen 7 firewalls support the many of the latest security features (Capture ATP, RTDMI, & RFDPI) and connectivity capabilities (SD-WAN, VPN, etc.) we just discussed, but in a desktop package. The TZ270, TZ370, & TZ470 are designed for small businesses as well as enterprise branch offices. On top of the sizing options they provide, they also come in wireless models (look for the W) which can serve as firewalls and access points in one.

Speaking of wireless, you may have heard about a little technological advance known as 5G. Well, so has SonicWall. These TZ firewalls come equipped with a USB 3.0 port that allows for 5G & LTE connectivity. And because these are built for small business, getting them up and running is a snap. They feature zero-touch deployment and setup through the SonicExpress mobile app. Once they’re online, management with the aforementioned SonicOS 7.0 is a breeze as well. But the major differentiator for SonicWall Gen 7 firewalls is performance, so let’s take a look at their tech specs:

SonicWall TZ270/TZ270W

Firewall Throughput: 2 Gbps

IPS Throughput: 1 Gbps

Threat Prevention Throughput: 750 Mbps

IPSec VPN Throughput: 750 Mbps

Maximum Connections (DPI): 150,000

Connections per Second: 6,000

Interfaces: 8x1GbE, 2 USB 3.0, 1 Console

SonicWall TZ370/TZ370W

Firewall Throughput: 3 Gbps

IPS Throughput: 1.5 Gbps

Threat Prevention Throughput: 1 Gbps

IPSec VPN Throughput: 1.3 Gbps

Maximum Connections (DPI): 200,000

Connections per Second: 9,000

Interfaces: 8x1GbE, 2 USB 3.0, 1 Console

SonicWall TZ470/TZ470W

Firewall Throughput: 3.5 Gbps

IPS Throughput: 2 Gbps

Threat Prevention Throughput: 1.5 Gbps

IPSec VPN Throughput: 1.5 Gbps

Maximum Connections (DPI): 250,000

Connections per Second: 12,000

Interfaces: 8x1GbE, 2×2.5GbE, 2 USB 3.0, 1 Console

Which firewall is right for me?

With these new options – and many worthy existing ones – how do you decide which firewall works best for your business? Consider user counts, how those users behave, remote and branch connectivity, your incoming ISP speed, wireless needs, and more. Sound like a lot to consider on your own? Reach out to our certified experts, and they can walk you through the process (and probably get you a better price, too). Chat on our site anywhere you see the window pop up, or call 866-957-2975 to talk with them today!

The Best Wireless Access Points of 2020

By Andrew Harmon

Posted On October 28, 2020

fortiap ruckus ruckus unleashed ruckus wireless sonicwave sonicwave AP wifi wireless wireless access points wireless network

Setting up wifi is a business imperative in 2020, and that means finding the best wireless access points is, too. The days of wireless networking being an option are long gone. But how do you go from knowing you need wifi to making it happen? What are the best options for getting your unique needs addressed and your network up and running? Why are we asking so many questions? Read on for the answers, and for the best wireless access points of 2020…

What does a wireless access point do?

A wireless access point in essence creates your wireless network. With it, you’re connecting to a hard-wired router, network switch, or other hub. In many business settings, that means not only offering access to the internet, but also to your workplace network, including its applications, files, etcetera. With the right wireless access point, you get built-in security and the ability to add separate guest wifi.

Which is better, wifi extender or access point?

A wireless access point is better than a wifi extender when it comes to performance and configuration capabilities. While extenders are normally less expensive, you get what you pay for. An extender replicates an existing network transmitted from a router, and extends its reach. However, the quality of the connection degrades. A wireless access point creates its own network, ensuring top notch performance for those in range. And you can manage and configure access points to your needs.

How do I choose a wireless access point?

Choosing a wireless access point comes down to which factors are most important to you. Access points come with a variety of radio and bandwidth options that affect performance. So it’s important to consider how many users will need access simultaneously and your connection speed.

Also, consider your space – as in walls that could hamper signal strength, wiring to power the devices (PoE options are available), and how you’ll mount the devices (wall, ceiling, indoor/outdoor). While some deployment scenarios only require one access point, many often need multiple APs to ensure quality connectivity.

Security and management are additional factors. Each manufacturer offers its own management platform to gain visibility into your network and configure it to your needs. And built-in security options vary. Let’s dive into the best wireless access points of 2020.

The Best Wireless Access Points of 2020

SonicWall SonicWave 231c

Key Specs

Performance: 2×2:2 MU-MIMO
Wireless Standard: 802.11a/b/g/n/ac Wave 2
PoE: None
Deployment: Indoor (Ceiling)

What makes SonicWall SonicWave 231c one of the best wireless access points of 2020?

SonicWaves are the latest and greatest wireless access points from SonicWall. They offer Wave 2 wifi performance, allowing for more users with less lag. On top of that, the SonicWave 231c and its siblings integrates with the robust security of SonicWall NGFWs. That security extends to the AP itself, too, with a dedicated third radio focused on security. Plus, even if you don’t have a SonicWall firewall, it comes equipped with advanced security services like the Capture ATP sandbox on its own. In addition, you can manage the SonicWave through your SonicWall firewall, or with SonicWall’s WiFi Cloud Manager – an intuitive, cloud-based WiFi network management system ideal for networks of any size.

WatchGuard AP225W

Key Specs

Performance: 2×2:2 MU-MIMO
Wireless Standard: 802.11ac Wave 2
PoE: 802.3at PoE+
Deployment: Indoor (Wall/Ceiling)

What makes WatchGuard AP225W one of the best wireless access points of 2020?

The AP225W also features Wave 2 wireless. Plus, it combines that performance with the security of one of the Wireless Intrusion Prevention Systems (WIPS) out there. The WIPS detects and IDs access points and client devices to intelligently prevent six known categories of Wi-Fi threats. The best part? It does this without noticeably impacting performance. And another best part? security scanning and enforcement continues even if your connection is interrupted. On top of that, you get access to WatchGuard’s Wi-Fi Cloud management. This provides visibility, troubleshooting, and configuration capabilities in one place. Plus, it makes setup a snap. You can get your AP225W up and running in less than two minutes after connecting to the cloud. And as for deployment, its PoE+ capabilities make it simple to connect and turn on with one cord – whether you choose a wall or ceiling.

Fortinet FortiAP 431F

Key Specs

Performance: 4×4:4 MU-MIMO
Wireless Standard: 802.11ax Wi-Fi 6
PoE: PoE 802.3at
Deployment: Indoor (Wall/Ceiling)

What makes Fortinet FortiAP 431F one of the best wireless access points of 2020?

The FortiAP 431F, along with its siblings in the newly created F-series (the 433F and 231F) are the newest access points on this list. That newness also means the latest in wireless performance, with 802.11ax – better known as WiFi 6. WiFi 6 access points are faster and have more capacity than previous generations. And with the FortiAP 431F, you’re getting a top of the line device. It features four radios, five internal antennas (or antennae), and 24/7 scanning across both wireless bands while still providing access on both the 2.4 and 5 GHz bands. You also have the flexibility of Power over Ethernet and wall or ceiling deployment options. Fortinet keeps security top of mind as well, with built-in wireless security, integration into the Fortinet Security Fabric, and management either through your FortiGate firewall or the FortiAP Cloud provisioning and management portal.

Cisco Meraki MR70

Key Specs

Performance: 2×2:2 MU MIMO
Wireless Standard: 802.11a/b/g/n/ac Wave 2
PoE: PoE 802.3af
Deployment: Outdoor

What makes Cisco Meraki MR70 one of the best wireless access points of 2020?

We couldn’t make a top wireless access points list without including an outdoor option. And Cisco Meraki’s MR70 does just that, providing enterprise-grade security and simple management
in a ruggedized, IP67-rated form factor which protects it from the elements. Just as with our other best-ofs, Meraki doesn’t skimp on security. The MR70 boasts Air Marshal, a built-in WIPS for threat detection and remediation. Plus, it’s managed through the Meraki cloud, which monitors your AP around the clock and ensures you always get the latest firmware updates as soon as they’re out – protecting you from any emerging issues. It also makes setup a snap, with self-configuring, rapid plug-and-play deployment. The physical device has internal antennas, PoE, and plenty of Wave 2 connectivity juice, too.

Ruckus Unleashed R610

Key Specs

Performance: 3×3:3 MU MIMO
Wireless Standard: 802.11a/b/g/n/ac Wave 2
PoE: PoE 802.3af/at
Deployment: Indoor (Wall/Ceiling/Desk)

What makes Ruckus Unleashed R610 one of the best wireless access points of 2020?

For our final entry on this list, we’re going controller-less. Ruckus Unleashed wireless access points don’t require separate controllers and access point licenses to run your wifi, significantly
reducing upfront costs. As a matter of fact, the R610 can handle up to 25 access points with no controller necessary. The R610 also integrates BeamFlex+, which continually forms and directs each wifi packet over the best performing signal path. And it adapts in real time to anticipate hand-held device movement and rotation – because mobile devices are just that, mobile – ensuring consistent performance. This technology also boosts coverage, meaning you’ll need fewer APs to cover the same area. The R610 features multiple power over ethernet options, a wide range of mounting possibilities, and simple deployment.

Looking for the best wireless access points for your small business?

Give us a call at 866-957-2975 to find the perfect fit!

Shopping for email security, endpoint, or ransomware protection? Check these out, too:

3 Best Ransomware Protection Solutions 2020

By Andrew Harmon

Posted On October 13, 2020

3 Best Ransomware Protection Solutions 2020

capture atp forticlient fortinet fortisandbox intercept x malware Ransomware sandbox SonicWALL Sophos

3 Best Ransomware Protection Solutions for Business 2020

Once your network is infected, ransomware encrypts files on afflicted endpoints, making it impossible to read or open them. The best ransomware protection for small businesses proactively hunts down and eliminates even never-seen-before ransomware long before an employee ever gets a chance to fall for it. Here are a few key features you should seek when comparing the best ransomware protection services available in 2020:

Advanced email security
Cloud-based sandboxing
Behavior-based scanning
Regular threat intelligence updates

Want to avoid shelling out big bitcoin to get your small business’s data back under control? Get a ransomware security solution that does more than just look out for known ransomware signatures.

What is Ransomware Protection?

The best ransomware protection for businesses scans inbound and outbound traffic across your entire network, using artificial intelligence to monitor the behavior of files as they traverse and interact with other network resources. Ransomware protection solutions spot behavior that looks similar to malicious activity and further investigate it in nanoseconds. Faster than you can say mind palace, these solutions either allow or block file access based on that verdict.

What to Look for in a Ransomware Protection Service

The best ransomware protection systems include a cloud-based sandbox where suspicious files can be sent for disarmament or detonation. In other words, if your ransomware tool is even the least bit suspicious of a file, the system safely opens and inspects it without threatening your network health.

Additionally, the best ransomware services rely on artificial intelligence and machine learning to reach threat verdicts via behavior monitoring. This means that even if a strain of ransomware has never been seen by any other endpoint in the entire world, if it walks like ransomware, talks like ransomware, or displays any other tell-tale ransomware behavior, your ransomware protection should yank it aside for closer inspection. Traditional ransomware protection services fall back on known signatures that need to be constantly refreshed and can do nothing to stop zero-day threats.

Top 3 Ransomware Protection Services in 2020

SonicWall Capture Advanced Threat Protection (ATP)

Key Features:

Real-time threat intelligence updates with up-to-the-minute signatures
High security effectiveness & low false-positive rate against zero-days
Real-Time Deep Memory Inspection blocks mass-market malware

What Qualifies Capture ATP as one of the Best Ransomware Protection Services in 2020?

SonicWall Capture Advanced Threat Protection (available as an add-on for all SonicWall TZ or NSa firewalls) is a powerful cloud-based sandbox with malware-analysis that can detect evasive threats. Capture ATP blocks suspicious files at the gateway until a verdict is rendered.

SonicWall combines multi-layer sandboxing, Real-Time Deep Memory Inspection, full system emulation, virtualization techniques, and more to detect more threats than any single-engine sandbox available in 2020. On top of that, the low false-positive rate means it won’t block the legitimate files you need to do business.

Sophos Intercept X Advanced with EDR

Key Features:

Highly-acclaimed malware detection engine driven by deep learning
Exploit prevention stops attackers from taking advantage of vulnerable software & apps
Root cause analysis visualizes where threats originate & how they move on the network

What Qualifies Sophos Intercept X Advanced with EDR as one of the Best Ransomware Protection Services in 2020?

Sophos Intercept X Advanced with Endpoint Detection & Response is a mouthful. But it’s also a comprehensive, defense-in-depth tool that combines advanced techniques to squash malware, ransomware, and zero days. Intercept X also uses behavioral analysis to stop boot-record attacks.

Plus, even if a system is already infected, CryptoGuard stops the encryption process and reverts (or rolls back) files back to their pre-infection state.

Fortinet FortiEDR & FortiSandbox

Key Features:

Integrates with all Fortinet Security Fabric components to protect digital attack surfaces
Provides actionable intelligence via automation to detect & respond to advanced threats
HUGE accolades from third-party testers such as NSS Labs, BPS, & ICSA Labs

What Qualifies FortiEDR with FortiSandbox as one of the Best Ransomware Protection Services in 2020?

Fortinet’s EDR & FortiSandbox establish a two-step sandboxing approach centered around artificial intelligence. These services first compare at-risk files against known and emerging malware with static analysis. Then, second stage analysis uncovers the full attack lifecycle by detonating the cyber payload in a virtual, quarantined environment.

Detail analysis maps any uncovered malware to Mitre ATT&CK framework with powerful investigation tools to help admins better visualize security events.

Look for the best ransomware protection for your small business?

Give us a call at 866-957-2975 to find the perfect fit!

Best Endpoint Security of 2020 for Small Businesses

By Andrew Harmon

Posted On October 8, 2020

Best Endpoint Security of 2020 for Small Businesses

capture client cisco merak edr endpoint enduser protection epp fortinet intercept x SonicWALL Sophos systems manager

Best Endpoint Security of 2020 for Your Small Business

Finding the best endpoint security for your network needs can be a challenge. There are dozens of options, all supporting a myriad of advanced security features and integrations that may be impossible to navigate unless you’re an expert. Each vendor offers a unique set of services with strengths and weaknesses that will ultimately determine whether your users stay safe or not. The best endpoint security may vary from organization to organization, but here are our top picks for the best endpoint security options available in 2020.

What is Endpoint Security?

Endpoint security, end user security, endpoint protection—while the name can be flexible, its necessity for a secure network is not. Endpoint security software protects small businesses & enterprises by guarding connected devices against malware and other advanced cyberattacks. Modern endpoint security integrates with appliances and applications you already use to provide edge protection as employees and guests access your network.

Encrypted malware, ransomware, and business email compromise can spell disaster for small businesses. That’s why the ability to monitor end user activity in real time – as well as make decisions to quarantine and isolate individual machines – can mean the difference between a small, contained incident and a catastrophic breach.

In 2020, endpoint security platforms now incorporate Endpoint Detection & Response capabilities powered by AI. Guided response, rich reporting, and root cause analysis are all top-shelf features that organizations should seek in a quality endpoint security service.

What does Endpoint Security include?

The best endpoint security goes beyond the basics. Traditionally, end user protection included passive endpoint scans combined with basic antivirus capabilities. However, in 2020, the best endpoint security blow the basics out of the water with multiple advanced security features:

Continuous monitoring of files, applications, & connected devices
Automated incident detection and isolation of infected machines
Web content filtering to safeguard productivity and network usage
Auto-provisioning based on user group, OS, location, or time of day
Intuitive regulatory compliance controls & reporting
Real-time threat intelligence updates from a pedigreed threat research team

The threat landscape is always evolving. That means your end user protection must stand up to threats never-before-seen by the network security ecosystem. The ability to recognize zero day exploits based on machine learning and behavioral analysis is essential for organizations to stay secure in 2020.

What is the Best Endpoint Protection of 2020?

Here are our top picks for the best Endpoint Protection for small businesses in 2020:

SonicWall Capture Client

Key Features:

Continuous behavioral monitoring creates complete profile of network activity
Layered defense of cloud intelligence, advanced static analysis, & dynamic protection
Integration with Capture Advanced Threat Protection cloud-based sandboxing
Ability to rollback targeted endpoints to a restored state even after infection
Malware protection engine powered by SentinelOne

What makes SonicWall Capture Client unique?

SonicWall teams up with SentinelOne to deliver a heuristic endpoint protection suite with the unique capability to mirror Microsoft shadow copies for post-infection rollbacks. This eliminates the need for manual restoration after a ransomware attack and lets admins rest easy knowing they can always restore endpoints to their pre-infection state. In addition, round-the-clock behavioral monitoring eliminates the need for scheduled system scans. In short, this minimizes network resource hogging and safeguards user productivity.

Fortinet FortiClient

Key Features:

Integrates with all Fortinet Security Fabric components
Automated prevention of known & unknown threats through host-based security stack
Intelligent patch management & vulnerability shielding
SSL & IPSec VPN security provides reliable access to corporate networks
Detects elusive memory techniques used in exploits like buffer overflows

What makes Fortinet FortiClient unique?

Fortinet FortiClient end user protection services simplify remote user experience with built-in user provisioning, auto-connect, and an “always-up” VPN. FortiClient works perfectly in tandem with all Fortinet devices and services on your network through the Fortinet Security Fabric. According to NSS Labs 2019 Advanced Endpoint test, FortiClient blocked 100% of malware including extremely elusive threats.

Sophos Intercept X Advanced with EDR

Key Features:

Automatically detects, prioritizes, & investigates potential threats using AI
Leverages deep learning analysis to analyze malware in extreme detail
Out-of-the-box SQL queries categorized by use case
Live Response provides users command line access to endpoints & servers
Quickly search up to 90 days of current & historical on-disk data

What makes Sophos Intercept X Advanced with EDR unique?

Sophos made a huge splash with the upgrade to its original Intercept X service. It sports big changes that included Endpoint Detection & Response (EDR) capabilities in addition to its already robust real-time, integrated endpoint platform. Intercept X Advanced combines powerful endpoint protection with endpoint detection driven by machine learning. This means most threats are squashed long before they can damage your network. Artificial intelligence assists with guided response. To save your small business even more, an important note: the objective of Sophos endpoint protection is to reduce the need for added IT employees by consolidating their roles into a single automated system.

Cisco Meraki Systems Manager

Key Features:

Native Network Integration shares intelligence across all Meraki components
Automatic WiFi settings securely connect managed wireless devices
Auto-provisioning of VPN settings based on Client VPN
Zero-touch deployment through a self-service web portal
Deploy policies & changes from the cloud across the entire network

What makes Cisco Meraki Systems Manager unique?

Cisco Meraki’s endpoint management solution supports a variety of platforms and operating systems, making Systems Manager a flexible option for most any deployment. Systems Manager offers cloud-based endpoint management tools that easily scale up to meet growth needs. By providing admins the ability to manage distributed deployments from anywhere in the world, Systems Manager is an endpoint security solution built for a highly mobile, highly distributed world.

Look for the best endpoint protection for your small business?

Give us a call at 866-957-2975 to find the perfect fit!

Synchronized App Control: Minimize TCO & Firewall Management Hours

By Andrew Harmon

Posted On September 11, 2020

Synchronized App Control: Minimize TCO & Firewall Management Hours

app control applications Sophos synchronized securty xg firewall

Superior Application Visibility & Control

Modern businesses tend to deploy several cloud-based applications to meet the unique demands of their business. Apps such as DropBox and Skype–both common mainstays on SMB and enterprise networks alike–can make or break day-to-day business communication. However, every application comes with its own set of vulnerabilities, patches, and management dashboards that can make juggling multiple apps a headache for admins. Plus, these apps eat up huge amounts of bandwidth if left unchecked!

Sophos Synchronized Application Control, compatible with all Sophos XG Firewalls, attacks both issues. Plus, it provides a lower Total Cost of Ownership that makes your network security investment a win. Monitor all traffic, both inbound and outbound, across your network without the need to employ multiple network security specialists.

Synchronized Security enables you to deliver greater benefit for your security investment. Automated incident response frees up IT teams, while centralized management slashes day-to-day overheads. Driving down the total cost of owning and managing your firewall frees up resources, both human and monetary.

Synchronize your Security & Save Money

Synchronized App Control, as part of Sophos XG Firewall, uses Synchronized Security to share information across the network, gathering data points from all endpoints to provide a top-down view of your network topography. Configuring Synchronized App Control is quick and easy.

This lets you identify wasteful software, bandwidth-hungry apps, and potential security vulnerabilities. Sophos Intercept X endpoint protection paired with Synchronized App Control means that your network is constantly sharing information in real time, enabling your firewall to identify all applications on your network—even the ones trying really, really hard to stay hidden!

Application Categories & Labels

Synchronized App Control grants you the ability to block individual applications as well as entire categories of apps. That means if your business struggles to keep employees off unwanted instant messaging apps or unsecured file transfer apps, you can nix them all with a few clicks. Applications can be automatically marked with the following labels to simplify management:

New: Newly-detected apps unknown to your XG Firewall
Mapped: Detected apps automatically mapped to an app category
Customized: Applications that you mapped manually

Managing application labels and categories is made simpler with a handful of intuitive commands. XG Firewall includes a default set of categories for most common applications, but you can go more advanced with individual app controls. Synchronized App Control allows you to:

Acknowledge new applications & indicate that you don’t want to change their attributes
Customize an app to edit its name & category
Hide or Show applications you already know or don’t want to see
Delete apps & remove them from application filters. If XG Firewall detects a deleted app on an endpoint, the application will reappear on the application list

All of this is accomplished through one cloud-based management dashboard: a single pane of glass that acts as command and control for your entire security infrastructure. Whether you’re managing your bandwidth to ensure you squeeze every last MB out of your ISP or are hunting down network bottlenecks, a single unified console cuts your time spent in half.

Cybersecurity Evolved

Through Sept. 30th, Sophos is offering its Evolved Firewall Promo, making it more cost-effective than ever for small businesses to bolt on advanced security services like Synchronized App Control with XG Firewall. By purchasing a 3-year security service bundle, you get the firewall hardware free. It’s that simple. Enjoy the added benefits of Sophos XG Firewall & save money. Plus, we’ll throw in free, same-day ground shipping on your order.

← Older posts Newer posts →