SonicWALL Aventail EX-2500 SSL VPN Appliance delivers a complete remote access control solution, without escalating infrastructure costs or complexity. SonicWALL Aventail EX-2500 SSL VPN Appliance provides complete application access with full security, control of the end point and unified policy management. This easy-to-use, easy-to-control solution increases productivity by providing employees and extranet business partners with secure, clientless access to the resources they need from any device, anywhere, with the unmatched security of SSL VPN.

Specifications	EX-750	EX-1600	EX-2500
Performance
Concurrent users	An ideal solution for a user base of up to 50 concurrent users.	Support for up to 250 concurrent users per node or HA pair	Support for up to 2,000 concurrent users per load-balanced node or HA pair
Hardware
Form Factor	1U Rack-mount
Dimensions	17” W x 1.71” H x 15” D (43.18cm W x 4.34cm H x 38.1cm D)	16.8” W x 1.7” H x 13.2” D (4.4cm H x 42.6cm W x 33.4cm D)	17” W x 1.7” H x 19.6” D (43cm W x 4.4cm H x 50cm D)
Processor	Intel P4 2.4 GHz CPU, 533 MHz FSB, 512 MB DDR RAM	Intel P4 2.4 GHz CPU, 533 MHz FSB, 1 GB DDR RAM	Intel Xeon 2.4 GHz CPU 533 MHz, FSB 2 GB DDR RAM
Network	Two 10/100Base-T Ethernet	Two 10/100 and one 1000Base-T Ethernet, 2 USB Ports, 1 serial bus connection (DB9)	Six 10/100/1000Base-T Ethernet
Power
Input voltage	100 (5A)/240 (3A) VAC PFC auto-switching	120 (6A) / 240 (3A) VAC auto-switching	120 (6A) / 240 (3A) VAC auto-switching
Output power	200W	185W	300W
Power supply	MTBF 100,000 hours at 40° C (104° F)	MTBF 100,000 hours at 35° C (95° F)	MTBF 100,000 hours at 35° C (95° F)
Environmental
Operating Temperature	0° - 50° C (32°F to 122° F)	0°C to 40°C (32°F to 104° F)	0°C to 40°C (32°F to 104° F)
Non-operating shock	50g, 11msec	50g, 11msec	50g, 11msec
Regulatory Approvals
Emissions	FCC Class A, EN, VCCI	FCC Part 15 Class A, CE, C-Tick, VCCI, CCC, BSMI	FCC Part 15 Class A, CE, C-Tick, VCCI, CCC, BSMI
Safety	CAN/CSA, UL, CB Scheme	UL, cUL, CE, TUV, STQC, S, PSB, CCC, BSMI, CB Scheme	UL, cUL, CE, TUV, STQC, S, PSB, CCC, BSMI, CB Scheme
Key Features
Security
Encryption	Configurable session length, Ciphers: DES, 3DES, RC4, AES, Hashes: MD5, SHA
Authentication methods	Server-side digital certificates, Username/password, Client-side digital certificates RSA SecurID and other one-time password tokens, Dual/stacked authentication
Directories	Microsoft Active Directory, LDAP (Active Directory, Sun iPlanet, etc.), RADIUS; Dynamic groups based on LDAP/AD queries, Certificate revocation lists (CRL)
Password management	Notification of password expiration and password change from the SonicWALL Aventail WorkPlace portal
Access control options	User and group, Source IP and network, Destination network, Service/Port (OnDemand and Connect only) Define resources by destination URL, host name or IP address, IP range, subnet and domain, Day, date, time and range, Browser encryption key length, Policy Zones (allows, denies and quarantines access and provides data protection based on end point security profile), File system access controls
SonicWALL Aventail End Point Control™ (EPC™)	Detection of files, registry keys, running processes and Device Watermarks; Advanced Interrogator: (simplified granular end point detection, including detailed configuration information on over 100 anti-virus, anti-spyware and personal firewall solutions, including McAfee, Symantec, Sophos and Trend) Data Protection: Cache Control (data protection), Secure Desktop (advanced data protection)
Key Access and Application Support
SonicWALL Aventail WorkPlace™ Access (browser-based access)	Clientless access to Web-based resources, Web file access: SMB/ CIFS, DFS, Personal Bookmarks, Multiple optimized WorkPlace portals for different user groups, Access to any TCP- or UDP-based application via the WorkPlace portal (leveraging OnDemand Tunnel agent)
SonicWALL Aventail WorkPlace™ Mobile Access	Customized WorkPlace support for mobile phone, smartphone and PDA browsers
SonicWALL Aventail Connect™ Access	Pre-installed agent provides access to any TCP- or UDP-based application (Windows, Macintosh and Linux support)
SonicWALL Aventail Connect Mobile™	Lightweight agent provides access to both Web and client/server applications for Windows Mobile Devices
Management and Administration
Management	SonicWALL Aventail Management Console (AMC): centralized Web-based management for all access options, End Point Control configuration, access control policies and WorkPlace Portal configuration, easy policy replication across multiple appliances and locations, role-based administration
Auditing	SonicWALL Aventail Advanced Reporting™, RADIUS auditing and accounting integration
Monitoring and Logging	User connection monitoring, event alarms, View logs and performance information via the SonicWALL Aventail Management Console, SNMP integration including SonicWALL Aventail-specific SNMP MIB, Support for central SYSLOG server
High Availability
High Availability	N/A	Support for high-availability 2-node clusters with built-in load-balancing and stateful authentication failover	Support for high-availability 2-node clusters with built-in load-balancing and stateful authentication failover
Clustering	N/A	N/A	Support for load-balanced arrays using standard external load balancers