NSA Network Security Appliance Series
Utilizing the same architecture found in the flagship SuperMassive
Next-Generation Firewall line which was initially developed for the most
demanding carriers and enterprises, the SonicWall Network
Security Appliance (NSA) Series delivers that same enterprise-class
security and performance while also providing SonicWall’s acclaimed expertise
in delivering ease of use and high value to small and medium-size
organizations.
>Next-generation firewall security. A suite of tools, including intrusion prevention, gateway
anti-virus, and anti-spyware plus application intelligence and control,
offer granular control through application blocking, bandwidth
management and more. Additional security and connectivity capabilities
such as IPSec VPN, SSL VPN, content filtering, anti-spam and enforced
client anti-virus make the NSA Series a comprehensive and powerful
all-in-one security solution.
Multi-core architecture.
Single-core and ASIC processors may have been sufficient for the
design of traditional stateful firewalls. But NSA Series appliances go
above and beyond, with a multi-core design to help ensure that the deep
packet inspection provided by the SonicWall Next-Generation
Firewall can scale with your expanding organization. As many as 24 cores
spread the network load evenly and protect against extreme performance
degradation often present in other technologies when exposed to heavy
traffic conditions and malicious content
Deep packet inspection technology.
Proprietary SonicWall Reassembly-Free Deep Packet Inspection
(RFDPI) technology offers extremely high scalability and performance
suitable for even the most demanding environments. RFDPI scans traffic
on every port, on every protocol and in any direction to provide
ultimate visibility and control. The unique design of the RFDPI engine
allows it to inspect every byte of a connection—and up to hundreds of
thousands of simultaneous connections—in order to categorize application
traffic and protect against internal and external threats at both the
application and network layer.
Lowered complexity and cost.
Along with superior power efficiency, SonicWall NSA Series
appliances lower the total cost of ownership by reducing complexity and
the time necessary to configure, deploy and maintain security solutions.
An intuitive GUI and powerful set-up wizards make it easy to quickly
set up and fine-tune network policies, application rules, VPN
connections and more.
|
|
Overview
|
NSA 220/W
|
NSA 250M/W
|
NSA 2600
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
Operating system
|
SonicOS 5.9
|
SonicOS 5.9
|
SonicOS 6.1
|
SonicOS 6.1
|
SonicOS 6.1
|
SonicOS 6.1
|
SonicOS 6.1
|
Security Processor
|
2x 500 MHz
|
2x 700 MHz
|
4x 800 MHz
|
6x 800 MHz
|
8x 1.1 GHz
|
10x 1.3 GHz
|
24x 1.0 GHz
|
Memory (RAM)
|
512 MB
|
512 MB
|
2.0 GB
|
2.0 GB
|
2.0 GB
|
4.0 GB
|
4.0 GB
|
10 GbE SFP+ interfaces
|
0
|
0
|
0
|
2
|
2
|
2
|
4
|
1 GbE SFP interfaces
|
0
|
0
|
0
|
4
|
4
|
4
|
8
|
1 GbE Copper interfaces
|
7
|
5
|
8
|
12
|
12
|
12
|
8
|
1 GbE Copper Management interfaces
|
0
|
0
|
1
|
1
|
1
|
1
|
1
|
Expansion
|
SD Card, USB
|
Expansion Slot (Rear), SD Card, USB
|
Expansion Slot (Front), SD Card, USB
|
Expansion Slot (Rear), SD Card, USB
|
Expansion Slot (Rear), SD Card, USB
|
Expansion Slot (Rear), SD Card, USB
|
Expansion Slot (Rear), SD Card, USB
|
Firewall inspection throughput
1
|
600 Mbps
|
750 Mbps
|
1.9 Gbps
|
3.4 Gbps
|
6.0 Gbps
|
9.0 Gbps
|
12.0 Gbps
|
Full DPI throughput
2
|
110 Mbps
|
130 Mbps
|
300 Mbps
|
500 Mbps
|
800 Mbps
|
1.6 Gbps
|
3.0 Gbps
|
Application inspection throughput
2
|
195 Mbps
|
250 Mbps
|
700 Mbps
|
1.1 Gbps
|
2.0 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
IPS throughput
2
|
195 Mbps
|
250 Mbps
|
700 Mbps
|
1.1 Gbps
|
2.0 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
Anti-malware inspection throughput
2
|
115 Mbps
|
140 Mbps
|
400 Mbps
|
600 Mbps
|
1.1 Gbps
|
1.7 Gbps
|
3.0 Gbps
|
IMIX throughput
3
|
180 Mbps
|
210 Mbps
|
600 Mbps
|
900 Mbps
|
1.6 Gbps
|
2.4 Gbps
|
3.5 Gbps
|
SSL Inspection and Decryption (DPI SSL)
2
|
Available
|
Available
|
200 Mbps
|
300 Mbps
|
500 Mbps
|
800 Mbps
|
1.3 Gbps
|
VPN throughput
3
|
150 Mbps
|
200 Mbps
|
1.1 Gbps
|
1.5 Gbps
|
3.0 Gbps
|
4.5 Gbps
|
5.0 Gbps
|
Connections per second
|
2,200/sec
|
3,000/sec
|
15,000/sec
|
20,000/sec
|
40,000/sec
|
60,000/sec
|
90,000/sec
|
Maximum connections (SPI)
|
85,000
|
110,000
|
225,000
|
325,000
|
400,000
|
562,500
|
750,000
|
Maximum connections (DPI)
|
32,000
|
64,000
|
125,000
|
175,000
|
200,000
|
375,000
|
500,000
|
Single Sign On (SSO) Users
|
250
|
250
|
250
|
500
|
1000
|
2500
|
4000
|
VLAN interfaces
|
25
|
35
|
50
|
50
|
200
|
400
|
500
|
SonicPoints supported (Maximum)
|
16
|
16
|
32
|
48
|
64
|
96
|
96
|
VPN
|
NSA 220/W
|
NSA 250M/W
|
NSA 2600
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
Site-to-Site VPN Tunnels
|
25
|
50
|
75
|
800
|
1500
|
4000
|
6000
|
IPSec VPN clients (Maximum)
|
2(25)
|
2(25)
|
10(250)
|
50 (1,000)
|
500 (3,000)
|
2,000 (4,000)
|
2,000 (6,000)
|
SSL VPN licenses (Maximum)
|
2(15)
|
2(15)
|
2(25)
|
2 (30)
|
2 (30)
|
2 (50)
|
2 (50)
|
Encryption/Authentication
|
DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1
|
Key exchange
|
Diffie Hellman Groups 1, 2, 5, 14
|
Route-based VPN
|
RIP, OSPF
|
Networking
|
NSA 220/W
|
NSA 250M/W
|
NSA 2600
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
IP address assignment
|
Static, (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
|
NAT modes
|
1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
|
Routing protocols
|
BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
|
QoS
|
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
|
Authentication
|
XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
|
VoIP
|
Full H323-v1-5, SIP
|
Standards
|
TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
|
Certifications
|
VPNC, ICSA Firewall, ICSA Anti-Virus
|
Certifications pending
|
FIPS 140-2, Common Criteria EAL1+
|
Common Access Card (CAC)
|
SonicOS 5.9
|
SonicOS 5.9
|
Pending
|
Pending
|
Pending
|
Pending
|
Pending
|
High Availability
|
Stateful HA (License Required)
|
Stateful HA (License Required)
|
Stateful HA (License Required)
|
Stateful HA (License Required)
|
Stateful HA (Included)
|
Stateful HA (Included); Active/Active Clustering(License Required); Active/Active DPI (License Required)
|
Stateful HA (Included); Active/Active Clustering(License Required); Active/Active DPI (License Required)
|
Hardware
|
NSA 220/W
|
NSA 250M/W
|
NSA 2600
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
Form factor
|
Desktop (1U Rack Mountable Kit Available)
|
Desktop (1U Rack Mountable Kit Available)
|
1U Rack Mountable
|
1U Rack Mountable
|
1U Rack Mountable
|
1U Rack Mountable
|
1U Rack Mountable
|
Fans
|
No fan / 1 internal fan
|
2 Internal fans
|
Dual, Fixed
|
Dual, Fixed
|
Dual, Fixed
|
Dual, Fixed
|
Dual, redundant, hot swappable
|
Power Supply (W)
|
36
|
36
|
200
|
250
|
250
|
250
|
250
|
Maximum power consumption (W)
|
11 / 15
|
12 / 16
|
49.4
|
74.3
|
86.7
|
90.9
|
113.1
|
Input power
|
100-240 VAC, 60-50 Hz
|
Dimensions
|
7.1x1.5x10.5 in (18.1 x 3.8 x 26.7 cm)
|
1.4 x 7.1 x 10.7 (3.5 x 18 x 27cm)
|
1.75x10.25x17 in (4.5x26x43 cm)
|
1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm)
|
1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm)
|
1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm)
|
1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm)
|
Weight
|
1.95 lbs/0.88 kg/2.15 lbs/0.97 kg
|
3.05 lbs/1.38 kg/3.15 lbs/1.43 kg
|
10.1 lb / 4.6 kg
|
13.56 lb / 6.15 Kg
|
13.56 lb / 6.15 Kg
|
13.56 lb / 6.15 Kg
|
14.93 lb / 6.7 Kg
|
WEEE weight
|
3.05 lbs/1.38 kg/3.45 lbs/1.56 kg
|
4.4 lbs/2.0kg/4.65 lbs/2.11 kg
|
11.0 lb / 5.0 kg
|
14.24 lb / 6.46 Kg
|
14.24 lb / 6.46 Kg
|
14.24 lb / 6.46 Kg
|
19.78 lb / 8.97 Kg
|
Shipping weight
|
4.35 lbs / 4.7 lbs
|
5.6 lbs / 5.9 lbs
|
14.3 lb / 6.5 kg
|
20.79lb / 9.43 Kg
|
20.79lb / 9.43 Kg
|
20.79lb / 9.43 Kg
|
26.12 lb / 11.85 Kg
|
MTBF (Years)
|
28 / 15.6
|
23.4 / 14.1
|
20.2
|
16.8
|
16
|
15.4
|
13.3
|
Environment
|
40-105 F, 0 - 40 C
|
40-105 F, 0 - 40 C
|
32-105 F, 0-40 deg C
|
32-105 F, 0-40 deg C
|
32-105 F, 0-40 deg C
|
32-105 F, 0-40 deg C
|
32-105 F, 0-40 deg C
|
Humidity
|
5 - 95% non- condensing
|
5 - 95% non- condensing
|
10-90% non- condensing
|
10-90% non- condensing
|
10-90% non- condensing
|
10-90% non- condensing
|
10-90% non- condensing
|
Integrated Wireless
|
NSA 220/W
|
NSA 250M/W
|
NSA 2600
|
NSA 3600
|
NSA 4600
|
NSA 5600
|
NSA 6600
|
Standards
|
802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
|
802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Virtual access points (VAPs)5– antennas (5 dBi Diversity)
|
External triple, detachable
|
External triple, detachable
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Radio power–802.11a/802.11b/802.11g
|
15.5 dBm max/18 dBm max/17 dBM @ 6 Mbps, 13 dBM @ 54 Mbps
|
15.5 dBm max/18 dBm max/17 dBM @ 6 Mbps, 13 dBM @ 54 Mbps
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Radio power–802.11n (2.4GHz)/802.11n (5.0GHz)
|
19 dBm MCS 0, 11 dBm MCS 15/17 dBm MCS 0, 12 dBm MCS 15
|
19 dBm MCS 0, 11 dBm MCS 15/17 dBm MCS 0, 12 dBm MCS 15
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Radio receive sensitivity–802.11a/802.11b/802.11g
|
-95 dBm MCS 0, -81 dBm MCS 15/-90 dBm @ 11Mbps/-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps
|
-95 dBm MCS 0, -81 dBm MCS 15/-90 dBm @ 11Mbps/-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Radio receive sensitivity–802.11n(2.4GHz)/802.11n(5.0GHz)
|
-89 dBm MCS 0, -70 dBm MCS 15/-95 dBm MCS 0, -76 dBm MCS 15
|
-89 dBm MCS 0, -70 dBm MCS 15/-95 dBm MCS 0, -76 dBm MCS 15
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
|
|
|