SonicWALL's Content Security Manager (CSM) series of appliances are 1U boxes that operate at the Internet gateway and filter/block objectionable and unwanted Web sites per organization policies and additionally provide anti-spyware and anti-virus scanning capabilities. The units are deployed on the network behind the firewall and operate as a transparent bridge, scanning multiple inbound and outbound protocols including SMTP, POP3, IMAP, HTTP, FTP, NetBIOS, IM, P2P, multi-media, and "dozens of stream-based protocols." Management is via a Web-based interface (a serial console port is also available).

Virus scanning and anti-spyware capabilities of the unit include protection against viruses, worms, trojans, and software vulnerabilities such as buffer overflows; and are facilitated through an automatically updated signatures database. Primary Web site filtering capabilties of the appliance are based on a listing of Web site ratings and categorization that can be used to create block policies for users (also automatically updated). 1 year of access to the vendor's update service is provided with the initial purchase price; and, according to the vendor, the appliance includes the ability to dynamically rate unknown URLs.

The appliance supports both authentication via an internal database and RADIUS; and additionally supports single-sign-on and directory connection capabilities such that the workstation or directory (A/D) can be queried to automatically determine the user's identity for purposes of filtering policy assignment/enforcement.

In addition to filtering, the vendor notes that the appliance is able to manage the use of IM, P2P, and multimedia applications. Other specific features include "Smart URL" parsing for filtering cached content provided by various search engines, logging and alerting capabilities, and failover support when deployed in pairs.

Two versions of the CSM appliance are offered as of this writing.

The CSM 2100 boasts 4 10/100 ports and an 800 MHz processor, for use in businesses with up to 250 nodes.

The CSM 3200, the new entry in the product line, boasts 6 10/100 ports and a 2 GHz processor, offering support for up to 1,000 nodes. The CSM 3200 additionally includes some features not available in the 2100: Intrusion Prevention scanning; "Safe Search" enoforcement, which allows for the enforcement of search restrictions on Yahoo, Google, MSN, Altavista, Lycos, Alltheweb, and Dogpile; and client-side anti-virus and anti-spyware enforcement capabilities, which verifies that end-user computers have the most recent A/V and A/S software installed and active before allowing them to access the Internet.

The SonicWALL CSM Series appliances are available now. Contact SonicWALL for further information.