SonicWALL WXA – WAN Acceleration Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE

SonicWALL, Inc. Dynamic Security for the Global Network

SonicWALL, Inc. Dynamic Security for the Global Network

SonicWALL’s Legacy

Not only Next-Generation Firewalls – although they rock of course SuperMassive™ E10000 Series E-Class NSA Series NSA Series TZ Series Data centers, ISPs E10100 E10200 E10400 E10800 Medium to large organizations NSA E8510 NSA E8500 NSA E7500 NSA E6500 NSA E5500 Branch offices and medium sized organizations NSA 4500 NSA 3500 NSA 2400MX NSA 2400 NSA 240 Small and remote offices TZ 210 Series TZ 200 Series TZ 100 Series

SonicWALL Product Line-up Network Security WAN Acceleration Secure Remote Access Email Security Backup and Recovery Policy & Management SSL VPN Client App Intell & Control Clean Wireless – SonicPoint-N Series Connect Mobile Spike Access Advanced Reporting Native Access Modules Virtual Assist Virtual Access Web App Firewall Spike Access

SonicWALL WXA Series WXA 500 Live CD WXA 2000 WXA 4000 WXA 5000 Copyright 2011 SonicWALL Inc. All Right Reserved

What Does WAN Acceleration Do? Improve Performance of Business Applications Optimize Response Times for Critical Applications Reduce Bandwidth Consumption Reduce associated Bandwidth Costs … Make the network appear faster! Copyright 2011 SonicWALL Inc. All Right Reserved

Have you ever… …Collaborated with someone on a huge PowerPoint document with 10-15 revisions and passed the document back and forth? Did the collaboration over a slow internet connection? …Accessed a large document on a shared site multiple times and downloaded the whole file every time? Redundant data sent back and forth results in waiting, wasting bandwidth and productivity loss. SonicWALL CONFIDENTIAL All Rights Reserved

There is a need for WAN Acceleration Outpaced by Growing Bandwidth Requirements Traditional QoS Ineffective Application Latency Redundant Traffic Consuming Bandwidth Copyright 2011 SonicWALL Inc. All Right Reserved

Two front assault – the SonicWALL way Traffic Shaping Ensure “Good Traffic” Composition Block Unwanted Traffic Utilize Bandwidth Effectively Traffic Acceleration Traffic De-duplication WFS Caching Protocol Optimization SonicWALL CONFIDENTIAL All Rights Reserved

WAN Acceleration Step 1 – Shape! Bandwidth manage and control applications SonicWALL Application Intelligence, Control and Visualization 1550+ Applications (3600+ signatures) Identify Applications Prioritize important traffic Block or restrict unimportant traffic Goal: “Good Traffic” at the gateway with Application Intelligence & Control SonicWALL CONFIDENTIAL All Rights Reserved

Shape! – Choose your traffic Important Apps Unimportant Apps

Shape! - Application Intelligence Identify Categorize Control Users/Groups Policy Critical Apps Application Chaos Reassembly-Free Deep Packet Inspection Acceptable Apps Ingress Egress Unacceptable Apps Cloud-Based Extra-Firewall Intelligence Malware Blocked

Shape! – Get immediate insight for decisions

Shape! – Get your users to love you….

WAN Acceleration Step 2 – Accelerate! Extremely Effective on: Email, PowerPoint, Excel spreadsheets, Word docs, PDF SharePoint, Collaboration sites Files between 20Kb-20MB+ Small Localized Changes Benefits: Eliminate redundant traffic Increase responsiveness Improve user experience SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? Protocol Optimization Reduce the chattiness of certain protocols like (WFS) Optimizes protocols like Windows File Sharing (WFS), FTP, email Makes an intelligent decision about the nature of the traffic to eliminate latency Decreases round-trips and chattiness of certain protocols Before: WAN Acceleration With: WAN Acceleration SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? WFS Acceleration Decrease the amount of data to be sent across the WAN = Improves response times and transfer speeds when transfer files between remote locations. File caching/de-duplication Metadata caching (File directory information) Active Directory Integration (The WXA becomes part of the domain) SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? Understanding Byte-Caching Without Byte Caching: 1 MB Change, Transfer Everything Total: 125 Sec = 2 Min, 5 Sec 8 MB / 1 Mbps = 62.5 Sec* 8 MB / 1 Mbps = 62.5 Sec (1 Mbps = 1024 Kbps; 1024 Kbps / ( 8 Bits/Byte) = 128 Kbytes/Sec.; 8 MB = 8192 Kbytes; 8192/128 = 62.5 Sec.) SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? Understanding Byte-Caching WITH Byte Caching: 1 MB Change, Transfer only the Change Total: 70.5 Sec = 1 min, 10.5 Sec 50.5 Second Saving = 40% Savings 8 MB / 1 Mbps = 62.5 Sec 1 MB / 1 Mbps = 8 Sec (1 Mbps = 1024 Kbps; 1024 Kbps / ( 8 Bits/Byte) = 128 Kbytes/Sec.; 8 MB = 8192 Kbytes; 8192/128 = 62.5 Sec.) SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? Byte Caching The WXA appliance builds and maintains dictionaries based on most commonly passed traffic Data is replaced with tokens that the remote WXA can use to recognize and reconstruct data WXA Series CONVEYS data across the WAN link. SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? What cannot be accelerated… De-duplication/Byte-Caching Acceleration relies on detecting repetition 1) Within a single file/stream 2) Within a network Repetition signals an opportunity to optimize and accelerate. However, some traffic cannot be accelerated Traffic that does not repeat High-entropy traffic (Hint: These two types of traffic are connected) SonicWALL CONFIDENTIAL All Rights Reserved

How does it really work? What cannot be accelerated… High-Entropy Traffic Non-Repeating Traffic Encrypted traffic SSL, IPSec Compressed traffic GZIP, RAR, 7zip, bzip Video, Audio Already optimized traffic RDP, Citrix Single file in one direction sent once Single web page access (High-Entropy Traffic) SonicWALL CONFIDENTIAL All Rights Reserved

This is how we do it! Simple Two-Site Deployment Result Traffic between two sites optimized with minimal configuration SonicWALL CONFIDENTIAL All Rights Reserved

You already know this!.... WXA Management through host SNWL firewall interface. Firewall Takes Care of Auto provisioning of the WXA hardware or software solution (similar to SonicPoints) WXA license management Firmware and configuration managed of the WXA appliance Health check probes of the WXA appliance Consolidated management Application Control Deep Packet Inspection Wan Acceleration

…and its really simple to get started! Firewall decides what traffic needs to be accelerated Default is “everything” that we can accelerate Benefit: Decreases the amount of data sent over to the WXA for processing SonicWALL CONFIDENTIAL All Rights Reserved

Show me the money! Visualizes the benefits of using WAN Acceleration SonicWALL CONFIDENTIAL All Rights Reserved

SonicWALL WXA Series WXA 500 Live CD WXA 2000 WXA 4000 WXA 5000 Copyright 2011 SonicWALL Inc. All Right Reserved

SonicWALL WXA Series Overview Min. SonicOS Version 5.8.1 Recommended Users1 20 120 240 360 Max WAN Accel Flows 100 600 1200 1,800 Byte Caching Yes TCP Acceleration Compression WFS Acceleration Yes2 Visualization TCP/WFS Copyright 2011 SonicWALL Inc. All Right Reserved

Choose anyone of these – they all speak WXA! SuperMassive™ E10000 Series E-Class NSA Series NSA Series TZ Series Data centers, ISPs E10100 E10200 E10400 E10800 Medium to large organizations NSA E8510 NSA E8500 NSA E7500 NSA E6500 NSA E5500 Branch offices and medium sized organizations NSA 4500 NSA 3500 NSA 2400MX NSA 2400 NSA 240 Small and remote offices TZ 210 Series TZ 200 Series TZ 100 Series

Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE Thank you… Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE