Home > NSA Series
Choose a sub category:
NSA 2650 Firewalls NSA 2650 Services
NSA 3650 Firewalls NSA 3650 Services
NSA 4650 Firewalls NSA 4650 Services
NSA 5650 Firewalls NSA 5650 Services
NSA 6650 Firewalls NSA 6650 Services
NSA 3600 Firewalls NSA 3600 Services
NSA 4600 Firewalls NSA 4600 Services
NSA 5600 Firewalls NSA 5600 Services
NSA 6600 Firewalls NSA 6600 Services




NSA Network Security Appliance Series




Utilizing the same architecture found in the flagship SuperMassive Next-Generation Firewall line which was initially developed for the most demanding carriers and enterprises, the SonicWall Network Security Appliance (NSA) Series delivers that same enterprise-class security and performance while also providing SonicWall’s acclaimed expertise in delivering ease of use and high value to small and medium-size organizations.

>Next-generation firewall security. A suite of tools, including intrusion prevention, gateway anti-virus, and anti-spyware plus application intelligence and control, offer granular control through application blocking, bandwidth management and more. Additional security and connectivity capabilities such as IPSec VPN, SSL VPN, content filtering, anti-spam and enforced client anti-virus make the NSA Series a comprehensive and powerful all-in-one security solution.

Multi-core architecture. Single-core and ASIC processors may have been sufficient for the design of traditional stateful firewalls. But NSA Series appliances go above and beyond, with a multi-core design to help ensure that the deep packet inspection provided by the SonicWall Next-Generation Firewall can scale with your expanding organization. As many as 24 cores spread the network load evenly and protect against extreme performance degradation often present in other technologies when exposed to heavy traffic conditions and malicious content

Deep packet inspection technology.

Proprietary SonicWall Reassembly-Free Deep Packet Inspection (RFDPI) technology offers extremely high scalability and performance suitable for even the most demanding environments. RFDPI scans traffic on every port, on every protocol and in any direction to provide ultimate visibility and control. The unique design of the RFDPI engine allows it to inspect every byte of a connection—and up to hundreds of thousands of simultaneous connections—in order to categorize application traffic and protect against internal and external threats at both the application and network layer.



Lowered complexity and cost.

Along with superior power efficiency, SonicWall NSA Series appliances lower the total cost of ownership by reducing complexity and the time necessary to configure, deploy and maintain security solutions. An intuitive GUI and powerful set-up wizards make it easy to quickly set up and fine-tune network policies, application rules, VPN connections and more.



Overview NSA 220/W NSA 250M/W NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600
Operating system SonicOS 5.9 SonicOS 5.9 SonicOS 6.1 SonicOS 6.1 SonicOS 6.1 SonicOS 6.1 SonicOS 6.1
Security Processor 2x 500 MHz 2x 700 MHz 4x 800 MHz 6x 800 MHz 8x 1.1 GHz 10x 1.3 GHz 24x 1.0 GHz
Memory (RAM) 512 MB 512 MB 2.0 GB 2.0 GB 2.0 GB 4.0 GB 4.0 GB
10 GbE SFP+ interfaces 0
0
0
2 2 2 4
1 GbE SFP interfaces 0
0
0
4 4 4 8
1 GbE Copper interfaces 7 5 8 12 12 12 8
1 GbE Copper Management interfaces 0
0
1 1 1 1 1
Expansion SD Card, USB Expansion Slot (Rear), SD Card, USB Expansion Slot (Front), SD Card, USB Expansion Slot (Rear), SD Card, USB Expansion Slot (Rear), SD Card, USB Expansion Slot (Rear), SD Card, USB Expansion Slot (Rear), SD Card, USB
Firewall inspection throughput 1 600 Mbps 750 Mbps 1.9 Gbps 3.4 Gbps 6.0 Gbps 9.0 Gbps 12.0 Gbps
Full DPI throughput 2 110 Mbps 130 Mbps 300 Mbps 500 Mbps 800 Mbps 1.6 Gbps 3.0 Gbps
Application inspection throughput 2 195 Mbps 250 Mbps 700 Mbps 1.1 Gbps 2.0 Gbps 3.0 Gbps 4.5 Gbps
IPS throughput 2 195 Mbps 250 Mbps 700 Mbps 1.1 Gbps 2.0 Gbps 3.0 Gbps 4.5 Gbps
Anti-malware inspection throughput 2 115 Mbps 140 Mbps 400 Mbps 600 Mbps 1.1 Gbps 1.7 Gbps 3.0 Gbps
IMIX throughput 3 180 Mbps 210 Mbps 600 Mbps 900 Mbps 1.6 Gbps 2.4 Gbps 3.5 Gbps
SSL Inspection and Decryption (DPI SSL) 2 Available Available 200 Mbps 300 Mbps 500 Mbps 800 Mbps 1.3 Gbps
VPN throughput 3 150 Mbps 200 Mbps 1.1 Gbps 1.5 Gbps 3.0 Gbps 4.5 Gbps 5.0 Gbps
Connections per second 2,200/sec 3,000/sec 15,000/sec 20,000/sec 40,000/sec 60,000/sec 90,000/sec
Maximum connections (SPI) 85,000 110,000 225,000 325,000 400,000 562,500 750,000
Maximum connections (DPI) 32,000 64,000 125,000 175,000 200,000 375,000 500,000
Single Sign On (SSO) Users 250 250 250 500 1000 2500 4000
VLAN interfaces 25 35 50 50 200 400 500
SonicPoints supported (Maximum) 16 16 32 48 64 96 96
VPN NSA 220/W NSA 250M/W NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600
Site-to-Site VPN Tunnels 25 50 75 800 1500 4000 6000
IPSec VPN clients (Maximum) 2(25) 2(25) 10(250) 50 (1,000) 500 (3,000) 2,000 (4,000) 2,000 (6,000)
SSL VPN licenses (Maximum) 2(15) 2(15) 2(25) 2 (30) 2 (30) 2 (50) 2 (50)
Encryption/Authentication DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1
Key exchange Diffie Hellman Groups 1, 2, 5, 14
Route-based VPN RIP, OSPF
Networking NSA 220/W NSA 250M/W NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600
IP address assignment Static, (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
NAT modes 1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
Routing protocols BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
QoS Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
Authentication XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
VoIP Full H323-v1-5, SIP
Standards TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Certifications VPNC, ICSA Firewall, ICSA Anti-Virus
Certifications pending FIPS 140-2, Common Criteria EAL1+
Common Access Card (CAC) SonicOS 5.9 SonicOS 5.9 Pending Pending Pending Pending Pending
High Availability Stateful HA (License Required) Stateful HA (License Required) Stateful HA (License Required) Stateful HA (License Required) Stateful HA (Included) Stateful HA (Included); Active/Active Clustering(License Required); Active/Active DPI (License Required) Stateful HA (Included); Active/Active Clustering(License Required); Active/Active DPI (License Required)
Hardware NSA 220/W NSA 250M/W NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600
Form factor Desktop (1U Rack Mountable Kit Available) Desktop (1U Rack Mountable Kit Available) 1U Rack Mountable 1U Rack Mountable 1U Rack Mountable 1U Rack Mountable 1U Rack Mountable
Fans No fan / 1 internal fan 2 Internal fans Dual, Fixed Dual, Fixed Dual, Fixed Dual, Fixed Dual, redundant, hot swappable
Power Supply (W) 36 36 200 250 250 250 250
Maximum power consumption (W) 11 / 15 12 / 16 49.4 74.3 86.7 90.9 113.1
Input power 100-240 VAC, 60-50 Hz
Dimensions 7.1x1.5x10.5 in (18.1 x 3.8 x 26.7 cm) 1.4 x 7.1 x 10.7 (3.5 x 18 x 27cm) 1.75x10.25x17 in (4.5x26x43 cm) 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm) 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm) 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm) 1.75 x 19.1 x 17 in (4.5 x 48.5 x 43.3 cm)
Weight 1.95 lbs/0.88 kg/2.15 lbs/0.97 kg 3.05 lbs/1.38 kg/3.15 lbs/1.43 kg 10.1 lb / 4.6 kg 13.56 lb / 6.15 Kg 13.56 lb / 6.15 Kg 13.56 lb / 6.15 Kg 14.93 lb / 6.7 Kg
WEEE weight 3.05 lbs/1.38 kg/3.45 lbs/1.56 kg 4.4 lbs/2.0kg/4.65 lbs/2.11 kg 11.0 lb / 5.0 kg 14.24 lb / 6.46 Kg 14.24 lb / 6.46 Kg 14.24 lb / 6.46 Kg 19.78 lb / 8.97 Kg
Shipping weight 4.35 lbs / 4.7 lbs 5.6 lbs / 5.9 lbs 14.3 lb / 6.5 kg 20.79lb / 9.43 Kg 20.79lb / 9.43 Kg 20.79lb / 9.43 Kg 26.12 lb / 11.85 Kg
MTBF (Years) 28 / 15.6 23.4 / 14.1 20.2 16.8 16 15.4 13.3
Environment 40-105 F, 0 - 40 C 40-105 F, 0 - 40 C 32-105 F, 0-40 deg C 32-105 F, 0-40 deg C 32-105 F, 0-40 deg C 32-105 F, 0-40 deg C 32-105 F, 0-40 deg C
Humidity 5 - 95% non- condensing 5 - 95% non- condensing 10-90% non- condensing 10-90% non- condensing 10-90% non- condensing 10-90% non- condensing 10-90% non- condensing
Integrated Wireless NSA 220/W NSA 250M/W NSA 2600 NSA 3600 NSA 4600 NSA 5600 NSA 6600
Standards 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS 802.11a/b/g/n (WEP, WPA, WPA2, 802.11i, TKIP, PSK,02.1x, EAP-PEAP, EAP-TTLS N/A
N/A N/A N/A N/A
Virtual access points (VAPs)5– antennas (5 dBi Diversity) External triple, detachable External triple, detachable N/A N/A N/A N/A N/A
Radio power–802.11a/802.11b/802.11g 15.5 dBm max/18 dBm max/17 dBM @ 6 Mbps, 13 dBM @ 54 Mbps 15.5 dBm max/18 dBm max/17 dBM @ 6 Mbps, 13 dBM @ 54 Mbps N/A N/A N/A N/A N/A
Radio power–802.11n (2.4GHz)/802.11n (5.0GHz) 19 dBm MCS 0, 11 dBm MCS 15/17 dBm MCS 0, 12 dBm MCS 15 19 dBm MCS 0, 11 dBm MCS 15/17 dBm MCS 0, 12 dBm MCS 15 N/A N/A N/A N/A N/A
Radio receive sensitivity–802.11a/802.11b/802.11g -95 dBm MCS 0, -81 dBm MCS 15/-90 dBm @ 11Mbps/-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps -95 dBm MCS 0, -81 dBm MCS 15/-90 dBm @ 11Mbps/-91 dBm @ 6Mbps, -74 dBm @ 54 Mbps N/A N/A N/A N/A N/A
Radio receive sensitivity–802.11n(2.4GHz)/802.11n(5.0GHz) -89 dBm MCS 0, -70 dBm MCS 15/-95 dBm MCS 0, -76 dBm MCS 15 -89 dBm MCS 0, -70 dBm MCS 15/-95 dBm MCS 0, -76 dBm MCS 15 N/A N/A N/A N/A N/A