Firewall Overview
Application Layer Inspection
Stateful Packet Inspection Firewall
Unlimited File Size Protection
Protocols Scanned
ICSA Firewall Certified1
NSA 240
Full Layer 7
50+
NSA 2400
Full Layer 7
50+
NSA 3500
Full Layer 7
50+
NSA 4500
Full Layer 7
50+
NSA 5000
Full Layer 7
50+
Security Services
Application Firewall2
Gateway Anti-Virus,
Anti-Spyware, Intrusion Prevention Service2
Enforced Client Anti-Virus & Anti-Spyware2
Content & URL Filtering (CFS)2
ViewPoint Reporting2
Anti-Spam (RBL Filtering)
NSA 240
NSA 2400
NSA 3500
NSA 4500
NSA 5000
NSA 240
90 Days
NSA 2400
90 Days
NSA 3500
90 Days
NSA 4500
90 Days
NSA 5000
90 Days
Firewall General
Interfaces
Console Interface
USB Ports
Management
Nodes Supported
Included SonicOS Version
Memory
Site-to-Site VPN Tunnels
(w/ Expansion Upgrade)
Global VPN Clients
(Bundled)
Global VPN Clients
(Maximum)
Threat Signatures Capable
VLAN Interfaces
(w/ Expansion Upgrade)
SonicPoints
NSA 240
3GbE, 6FE
2
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
256Mb
25 (50)
2
25
25,000
10 (25)
16
NSA 2400
6 Gbe
2
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
512Mb
50
10
250
25,000
128
32
NSA 3500
6 Gbe
2
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
512Mb
800
50
1,000
25,000
128
48
NSA 4500
6 Gbe
2
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
512Mb
1,500
500
3,000
25,000
256
96
NSA 5000
6 Gbe
2
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
1Gb
2,500
1,000
3,500
25,000
256
96
Performance
Stateful Throughput3
UTM Performance
Gateway Anti-Virus Throughput4
Intrusion Prevention Throughput4
IMIX Performance
3DES/AES VPN
Throughput3
Connections
(w/ Expansion Upgrade)
Connections/sec
NSA 240
600 Mbps
110 Mbps
115 Mbps
195 Mbps
195 Mbps
150 Mbps
25,000
(35,000)
2,000
NSA 2400
775 Mbps
150 Mbps
160 Mbps
275 Mbps
235 Mbps
300 Mbps
32,000
4,000
NSA 3500
1.5 Gbps
240 Mbps
350 Mbps
750 Mbps
580 Mbps
625 Mbps
128,000
7,000
NSA 4500
2.75 Gbps
600 Mbps
690 Mbps
1.4 Gbps
700 Mbps
1.0 Gbps
450,000
10,000
NSA 5000
3.5 Gbps
800 Mbps
800 Mbps
1.7 Gbps
950 Mbps
1.5 Gbps
600,000
12,000
Features
Logging
SNMP
Authentication
Voice over IP
(VoIP) Security
Zone Security
Single Sign On
Dynamic Routing
Policy-based Routing
Dynamic Bandwidth Management
Integrated Wireless
Switch & Controller
Stateful High Availability5
WAN/WAN Failover
Load Balancing
Object-based
Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
Quality of Service (QoS)
SSL Control
IPv6 Ready
NSA 240
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 2400
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 3500
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 4500
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 5000
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
1ICSA Certification is currently pending for all NSA appliances.
2Services must be purchased separately.
3Testing Methodologies: Maximum performance based on RFC 2544 (for firewall and VPN). Actual performance may vary depending on network conditions and activated services.
4Testing using HTTP Throughput test.
5Not included in base configuration for NSA 240/2400/3500 appliances - must be purchased separately.
