SonicWall SMA 400 Appliance
Enable mobile and remote worker productivity while protecting your organization from threats

Features & Benefits:

Enable users to access applications and data from anywhere so they stay productive, and keep your company competitive. Designed for organizations with up to 250 remote employees, the SonicWall Secure Mobile Access (SMA) 400 Appliance provides medium-sized businesses with a high performing, easy-to-use and cost-effective SMA solutions that require no pre-installed client software.

Single access gateway for mobile app, clientless or web-delivered clients
SMA 100 Series lowers IT costs by enabling network managers to easily deploy and manage a single secure access gateway that extends remote access via SSL VPN for both internal and external users to all network resources - including web-based, client/server, host-based (such as virtual desktop) and back-connect applications (such as VoIP). SMAs are either clientless with browser access to the customizable SMA Workplace portal or use mobile apps or lightweight web-delivered clients, reducing management overhead and support calls.

Common user experience across all operating systems
SMA technology provides transparent access to network resources from any network environment or device. A SMA appliance provides a single gateway for smartphone, tablet, laptop and desktop access and a common user experience across all operating systems - including Windows, Mac OS X, iOS, Android, Kindle, Chrome and Linux - from managed or unmanaged devices.

Mobile Connect app
Mobile Connect app for iOS, Mac OS X, Android, Kindle, Chrome and Windows mobile devices provides users with easy, network-level access to corporate and academic resources over encrypted SSL VPN connections. Mobile Connect is easily downloadable from the Apple App Store, Google Play, Microsoft or Kindle store and embedded with Windows 8.1 devices.

HTML5 Enhancements
Provides end-users a rich access experience within their own choice of web browser, which eliminates their need to download, install and maintain additional software on their systems. Everything can be run from within the context of the browser window, making connection to resources very easy and zero day support for all major OSs and browsers.

Context awareness
Access to the corporate network is granted only after the user has been authenticated and mobile device integrity has been verified.

Protects data at rest on mobile devices
Authenticated users can securely browse and view allowed intranet file shares and files from within the Mobile Connect app. Administrators can establish and enforce mobile application management policy. Adaptive addressing and routing - Dynamically adapts to networks, eliminating conflicts common with other solutions.

Setup wizard
All SMAs are easy to set up and deploy in just minutes. The setup wizard provides an easy, intuitive “out-of-the-box” experience with rapid installation and deployment.

Policy Wizards
Easy-to-use wizards to deploy policies for OWA, ActiveSync, Outlook Anywhere and Autodiscover. This saves IT administrators considerable time for the most commonly created policies, making them more productive and lowering the company's overall TCO.

Unified policy
SMA unified policy offers easy, object-based policy management of all users, groups, resources and devices while enforcing granular control based on both user authentication and endpoint interrogation.

Web Application Firewall (WAF) Enhancements
Helping to secure internal web applications from remote users, SonicWall’s award winning WAF engine has been enhanced to detect against additional exploits and threats. This allows customers to ensure the confidentiality of data, and internal web services remain uncompromised, should there be malicious or rogue authenticated user access.

Geo IP Detection and Botnet Protection
Grants customers with a mechanism to allow or restrict user access from various geographical locations. Also provides additional protection from compromised endpoint participating in a botnet, further verifying the validity of the connecting device.

Simple, secure mobile access to resources
The SMA 100 Series can be used to provide Windows, Mac OS X, iOS, Linux, Android, Chrome and Kindle users with access to a broad range of resources.

Context-aware authentication
Best-in-class, context-aware authentication grants access only to trusted devices and authorised users. Mobile devices are interrogated for essential security information such as jailbreak or root status, device ID, certificate status and OS versions prior to granting access. Laptops and PCs are also interrogated for the presence or absence of security software, client certificates, and device ID. Devices that do not meet policy requirements are not allowed network access and the user is notified of non-compliance.

Protection of data at rest on mobile devices
Authenticated Mobile Connect users can securely browse and view allowed intranet file shares and files from within the Mobile Connect app. Administrators can establish and enforce mobile application management policy for the Mobile Connect app to control whether files viewed can be opened in other apps (iOS 7 and newer), copied to the clipboard, printed or cached securely within the Mobile Connect app. For iOS 7 and newer, this allows administrators to isolate business data from personal data stored on the device and reduces the risk of data loss. In addition, if the user's credentials are revoked, content stored in the Mobile Connect app is locked and can no longer be accessed or viewed.

Clean VPN
When deployed with a SonicWall next-generation firewall, Mobile Connect establishes a Clean VPN, an extra layer of protection that decrypts and scans all SSL VPN traffic for malware before it enters the network.

Simple to manage
SMA 100 Series solutions feature unified policy and an intuitive webbased management interface that offers context-sensitive help to enhance usability. In addition, multiple products can be centrally managed using the SonicWall Global Management System (GMS 4.0+). Resource access via the products can be effortlessly monitored using the SonicWall Analyzer reporting tool.

Application & Deployment:

Granular access to authorised users

The SMA 100 Series extends secure mobile and remote access beyond managed employees to unmanaged mobile and remote employees, partners and customers by employing policy-enforced fine-grained access controls.

Web Application Firewall and PCI compliance

The SonicWall Web Application Firewall Service offers businesses a complete, affordable, well integrated compliance solution for web-based applications that is easy to manage and deploy. It supports OWASP Top Ten and PCI DSS compliance, providing protection against injection and cross-site scripting attacks (XSS), credit card and Social Security number theft, cookie tampering and cross-site request forgery (CSRF). Dynamic signature updates and custom rules protect against known and unknown vulnerabilities. Web Application Firewall can detect sophisticated web-based attacks and protect web applications (including SSL VPN portals), deny access upon detecting web application malware, and redirect users to an explanatory error page. It provides an easy-todeploy offering with advanced statistics and reporting options for meeting compliance mandates.

1. Incoming traffic is seamlessly forwarded by the SonicWall NSA or TZ Series firewall to the SonicWall SMA appliance, which decrypts and authenticates network traffic.
2. Users are authenticated using the onboard database or through thirdparty authentication methods such as LDAP, Active Directory, Radius, Dell Defender and other two-factor authentication solutions.
3. A personalized web portal provides access to only those resources that the user is authorised to view based on company policies.
4. to create a Clean VPN environment, traffic is passed through to the NSA or TZ Series firewall (running gateway anti-virus, anti-spyware, intrusion prevention, and application intelligence and control), where it is fully inspected for viruses, worms, Trojans, spyware and other sophisticated threats.

Specifications:

¹ The recommended number of users supported is based on factors such as access mechanisms, applications accessed and application traffic being sent.
² Available in conjunction with Secure Virtual Assist for SMA 400 and SRA Virtual Appliances only.
³ Refer to the latest SMA 100 Series release notes and admin guide for supported configurations.
⁴ Botnet filtering and Geolocation-based policies require an active support contract to be in place on the hardware or virtual appliance.

Documentation:

Download the SonicWall Secure Mobile Access 100 and 1000 Series Appliance Datasheet (.PDF)