SonicWALL TZ 180 manual What is a Zone?, Benefits, SonicWALL Intrusion Prevention Service

SonicWALL Intrusion Prevention Service

What is a Zone?

A Zone is a logical grouping of one or more interfaces and/or VLANs designed to make management, such as the definition and application of Access Rules, a simpler and more intuitive process than following strict physical interface scheme. Zone-based security is a powerful and flexible method of managing both internal and external network segments, allowing the administrator to separate and protect critical internal network resources from unapproved access or attack.

A network security zone is simply a logical method of grouping one or more interfaces with friendly, user-configurable names, and applying security rules as traffic passes from one zone to another zone. Network security zones provide an additional, more flexible, layer of security for the firewall. With the zone-based security, the administrator can group similar interfaces and apply the same policies to them, instead of having to write the same policy for each interface.

Benefits

The extensible signature language used in SonicWALL’s Deep Packet Inspection engine also provides proactive defense against newly discovered application and protocol vulnerabilities. SonicWALL IPS offloads the costly and time-consuming burden of maintaining and updating signatures for new hacker attacks through SonicWALL’s industry-leading Distributed Enforcement Architecture (DEA). Signature granularity allows SonicWALL IPS to detect and prevent attacks based on a global, attack group, or per-signature basis to provide maximum flexibility and control false positives.

Alternatively, SonicWALL Global Management System (SonicWALL GMS) provides global management capabilities that enabled administrators to manage SonicWALL IPS across multiple SonicWALL security appliances from a central location. SonicWALL GMS and SonicWALL ViewPoint solutions allow administrators to create detailed reports based on attack source, destination and type of intrusion, such as “Top Intrusions,” “Destinations Over Time” and “Intrusions Over Time.”

Note Please visit <http://www.sonicwall.com> for more information on SonicWALL GMS and SonicWALL ViewPoint.

Note Refer to the SonicWALL Gateway Anti-Virus Administrator’s Guide for information you need to successfully activate, configure, and administer SonicWALL Gateway Anti-Virus on a SonicWALL security appliance, located on the SonicWALL Web site: <http://www.sonicwall.com/services/documentation.html>.

12 SonicWALL TZ 180 TotalSecure