SonicWall Capture Security Appliance CSA 1000 hardware firewall 1U

Reputation & Global Verdict lookup (configurable) Static analysis & dynamic analysis with RTDMI Whitelist/Blacklist on hash/domain Configurable scheduled reporting Role-based administration (configurable roles) Management – HTTPS or SSH via dedicated management interface or regular network interface SSH console access Logging & alerting False positive & false negative reporting with automatic whitelist/blacklist Direct connectivity or via VPN (IP Addressable) Closed Network Operation REST API support for file submission and analysis Hardened OS with Secure Boot and chain of trust for anti-tampering Local logging SonicWall Capture Security appliance 1000The SonicWall Capture Security appliance™ (CSa) brings Capture Advanced Threat Protection™ (ATP) and sandboxing malware analysis to on-premises deployment scenarios for customers with compliance and policy restrictions against sending files to cloud analysis, or who prefer for all of their data to remain inside their organization. The CSa 1000 can analyze suspicious files coming from other SonicWall products to provide rapid, high accuracy detection of previously unseen threats with the customer retaining custody of their files. Additionally, the REST API functionality on the CSa opens up the benefits of this highly effective file analysis capability to threat intelligence teams, third-party security systems and any software stack that can integrate with published APIs.The CSa uses a combination of reputation-based checks, static file analysis and SonicWall’s patented Real-Time Deep Memory Inspection™ (RTDMI) engine for dynamic analysis to ensure that it provides not only the best possible detection rate of malicious files, but also does this efficiently, in the shortest possible time. The SonicWall ecosystem of security products, already fully integrated with the cloud-delivered Capture ATP analysis, is able to enforce inline security with features such as Block Until Verdict. The same capabilities are supported when the SonicWall products are connected to the CSa series instead of the cloud Capture ATP.RTDMISonicWall’s patent-pending Real-Time Deep Memory Inspection (RTDMI) file analysis engine is a novel method of analyzing suspicious files by monitoring the behavior of an application in memory. RTDMI can see through any obfuscation or encryption techniques that modern malware may deploy to evade network and sandbox analysis, yielding extremely high accuracy detection of attacks borne by documents, executables, archive files and a variety of other file types.Real time protectionThe combination of reputation and global intelligence checks, statics analysis and RTDMI technology operate in concert to deliver results quickly enough to enable technologies like Block Until Verdict in SonicWall products. This capability allows for a file inspection policy on the firewall to prevent suspicious files from being downloaded by the end-user until the full inspection is completed and a verdict is reached by Capture ATP or CSa. Performance Mean time between failures (MTBF) 129601 h Heat dissipation 389 BTU/h Security Security algorithms FIPS 140-2 Ports & interfaces SFP+ module slots quantity 2 Number of console ports 1 Ethernet LAN data rates 1000,10000 Mbit/s Console port RJ-45 Ethernet LAN (RJ-45) ports 6 USB 3.2 Gen 1 (3.1 Gen 1) Type-A ports quantity 2 Storage Total storage capacity 2 TB SSD capacity 1 TB RAID support Yes RAID levels 1 Storage media type SSD Design Built-in fan Yes Number of fans 3 fan(s) Built-in display Yes Form factor 1U Rack mounting Yes Power Number of power supply units 2 Power consumption (typical) 114 W Input current 1.79 A AC input voltage 100-240 V Certificates Certification FCC, ICES, CE, C-Tick, VCCI; MIC, TUV/GS, UL, CE PSB, CCC, BSMI, CB scheme, WEEE, EU RoHS, China RoHS Operational conditions Operating temperature (T-T) 0 - 40 °C Weight & dimensions Weight 8.3 kg Height 45 mm Depth 415 mm Width 430 mm Packaging content Bundled software Intelligence Updates and Support Bundle Logistics data Harmonized System (HS) code 85176990