1. SonicWALL WXA – WAN Acceleration
Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE

2. SonicWALL, Inc. Dynamic Security for the Global Network

3. SonicWALL, Inc. Dynamic Security for the Global Network

4. SonicWALL’s Legacy

5. Not only Next-Generation Firewalls – although they rock of course
SuperMassive™ E10000 Series E-Class NSA Series NSA Series TZ Series
Data centers, ISPs
E10100
E10200
E10400
E10800
Medium to large
organizations
NSA E8510
NSA E8500
NSA E7500
NSA E6500
NSA E5500
Branch offices and
medium sized organizations
NSA 4500
NSA 3500
NSA 2400MX
NSA 2400
NSA 240
Small and remote
offices
TZ 210 Series
TZ 200 Series
TZ 100 Series

6. SonicWALL Product Line-up
Network Security WAN Acceleration Secure Remote Access Security Backup and Recovery Policy & Management
SSL VPN
Client
App Intell &
Control
Clean Wireless – SonicPoint-N Series
Connect
Mobile
Spike Access
Advanced Reporting
Native Access Modules
Virtual Assist
Virtual Access
Web App Firewall
Spike
Access

7. SonicWALL WXA Series WXA 500 Live CD WXA 2000 WXA 4000 WXA 5000
Copyright 2011 SonicWALL Inc. All Right Reserved

8. What Does WAN Acceleration Do?
Improve Performance of Business Applications
Optimize Response Times for Critical Applications
Reduce Bandwidth Consumption
Reduce associated Bandwidth Costs
… Make the network appear faster!
Copyright 2011 SonicWALL Inc. All Right Reserved

9. Have you ever…
…Collaborated with someone on a huge PowerPoint document with
10-15 revisions and passed the document back and forth?
Did the collaboration over a slow internet connection?
…Accessed a large document on a shared site multiple times and downloaded the whole file every time?
Redundant data sent back and forth results in waiting, wasting bandwidth and productivity loss.
SonicWALL CONFIDENTIAL All Rights Reserved

10. There is a need for WAN Acceleration
Outpaced by Growing Bandwidth Requirements
Traditional QoS Ineffective
Application Latency
Redundant Traffic Consuming Bandwidth
Copyright 2011 SonicWALL Inc. All Right Reserved

11. Two front assault – the SonicWALL way
Traffic Shaping
Ensure “Good Traffic” Composition
Block Unwanted Traffic
Utilize Bandwidth Effectively
Traffic Acceleration
Traffic De-duplication
WFS Caching
Protocol Optimization
SonicWALL CONFIDENTIAL All Rights Reserved

12. WAN Acceleration Step 1 – Shape!
Bandwidth manage and control applications
SonicWALL Application Intelligence, Control and Visualization
1550+ Applications (3600+ signatures)
Identify Applications
Prioritize important traffic
Block or restrict unimportant traffic
Goal:
“Good Traffic” at the gateway with Application Intelligence & Control
SonicWALL CONFIDENTIAL All Rights Reserved

13. Shape! – Choose your traffic
Important Apps
Unimportant Apps

14. Shape! - Application Intelligence
Identify
Categorize
Control
Users/Groups
Policy
Critical Apps
Application Chaos
Reassembly-Free
Deep Packet Inspection
Acceptable Apps
Ingress
Egress
Unacceptable Apps
Cloud-Based
Extra-Firewall
Intelligence
Malware Blocked

15. Shape! – Get immediate insight for decisions

16. Shape! – Get your users to love you….

17. WAN Acceleration Step 2 – Accelerate!
Extremely Effective on:
, PowerPoint, Excel spreadsheets, Word docs, PDF
SharePoint, Collaboration sites
Files between 20Kb-20MB+
Small Localized Changes
Benefits:
Eliminate redundant traffic
Increase responsiveness
Improve user experience
SonicWALL CONFIDENTIAL All Rights Reserved

18. How does it really work? Protocol Optimization
Reduce the chattiness of certain protocols like (WFS)
Optimizes protocols like Windows File Sharing (WFS), FTP,
Makes an intelligent decision about the nature of the traffic to eliminate latency
Decreases round-trips and chattiness of certain protocols
Before: WAN Acceleration
With: WAN Acceleration
SonicWALL CONFIDENTIAL All Rights Reserved

19. How does it really work? WFS Acceleration
Decrease the amount of data to be sent across the WAN =
Improves response times and transfer speeds when transfer files between remote locations.
File caching/de-duplication
Metadata caching (File directory information)
Active Directory Integration (The WXA becomes part of the domain)
SonicWALL CONFIDENTIAL All Rights Reserved

20. How does it really work? Understanding Byte-Caching
Without Byte Caching: 1 MB Change, Transfer Everything
Total: 125 Sec = 2 Min, 5 Sec
8 MB / 1 Mbps = 62.5 Sec*
8 MB / 1 Mbps = 62.5 Sec
(1 Mbps = 1024 Kbps; Kbps / ( 8 Bits/Byte) = 128 Kbytes/Sec.; 8 MB = 8192 Kbytes; 8192/128 = 62.5 Sec.)
SonicWALL CONFIDENTIAL All Rights Reserved

21. How does it really work? Understanding Byte-Caching
WITH Byte Caching: 1 MB Change, Transfer only the Change
Total: 70.5 Sec = 1 min, 10.5 Sec
50.5 Second Saving = 40% Savings
8 MB / 1 Mbps = 62.5 Sec
1 MB / 1 Mbps = 8 Sec
(1 Mbps = 1024 Kbps; Kbps / ( 8 Bits/Byte) = 128 Kbytes/Sec.; 8 MB = 8192 Kbytes; 8192/128 = 62.5 Sec.)
SonicWALL CONFIDENTIAL All Rights Reserved

22. How does it really work? Byte Caching
The WXA appliance builds and maintains dictionaries based on most commonly passed traffic
Data is replaced with tokens that the remote WXA can use to recognize and reconstruct data
WXA Series CONVEYS data across the WAN link.
SonicWALL CONFIDENTIAL All Rights Reserved

23. How does it really work? What cannot be accelerated…
De-duplication/Byte-Caching Acceleration relies on detecting repetition
1) Within a single file/stream
2) Within a network
Repetition signals an opportunity to optimize and accelerate.
However, some traffic cannot be accelerated
Traffic that does not repeat
High-entropy traffic
(Hint: These two types of traffic are connected)
SonicWALL CONFIDENTIAL All Rights Reserved

24. How does it really work? What cannot be accelerated…
High-Entropy Traffic
Non-Repeating Traffic
Encrypted traffic
SSL, IPSec
Compressed traffic
GZIP, RAR, 7zip, bzip
Video, Audio
Already optimized traffic
RDP, Citrix
Single file in one direction sent once
Single web page access
(High-Entropy Traffic)
SonicWALL CONFIDENTIAL All Rights Reserved

25. This is how we do it! Simple Two-Site Deployment
Result
Traffic between two sites optimized with minimal configuration
SonicWALL CONFIDENTIAL All Rights Reserved

26. You already know this!....
WXA Management through host SNWL firewall interface.
Firewall Takes Care of
Auto provisioning of the WXA hardware or software solution (similar to SonicPoints)
WXA license management
Firmware and configuration managed of the WXA appliance
Health check probes of the WXA appliance
Consolidated management
Application Control
Deep Packet Inspection
Wan Acceleration

27. …and its really simple to get started!
Firewall decides what traffic needs to be accelerated
Default is “everything” that we can accelerate
Benefit: Decreases the amount of data sent over to the WXA for processing
SonicWALL CONFIDENTIAL All Rights Reserved

28. Show me the money! Visualizes the benefits of using WAN Acceleration
SonicWALL CONFIDENTIAL All Rights Reserved

29. SonicWALL WXA Series WXA 500 Live CD WXA 2000 WXA 4000 WXA 5000
Copyright 2011 SonicWALL Inc. All Right Reserved

30. SonicWALL WXA Series Overview
Min. SonicOS Version
5.8.1
Recommended Users1 20
120
240
360
Max WAN Accel Flows
100
600
1200
1,800
Byte Caching
Yes
TCP Acceleration
Compression
WFS Acceleration
Yes2
Visualization
TCP/WFS
Copyright 2011 SonicWALL Inc. All Right Reserved

31. Choose anyone of these – they all speak WXA!
SuperMassive™ E10000 Series E-Class NSA Series NSA Series TZ Series
Data centers, ISPs
E10100
E10200
E10400
E10800
Medium to large
organizations
NSA E8510
NSA E8500
NSA E7500
NSA E6500
NSA E5500
Branch offices and
medium sized organizations
NSA 4500
NSA 3500
NSA 2400MX
NSA 2400
NSA 240
Small and remote
offices
TZ 210 Series
TZ 200 Series
TZ 100 Series

32. Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE
Thank you…
Dennis Bergström, CISSP SonicWALL Nordic Technical Account Manager/SE