Firewall Overview
Application Layer Inspection
Stateful Packet Inspection Firewall
Unlimited File Size Protection
Protocols Scanned
ICSA Firewall Certified1
NSA 2400
Full Layer 7
50+
NSA 3500
Full Layer 7
50+
NSA 4500
Full Layer 7
50+
NSA 5000
Full Layer 7
50+
Security Services2
Application Firewall
Gateway Anti-Virus, Anti-Spyware and
Intrusion Prevention Service (GAV/IPS)
Enforced Client Anti-Virus/Anti-Spyware
Content & URL Filtering (CFS)
ViewPoint Reporting
Anti-Spam (RBL Filtering)
NSA 2400
NSA 3500
NSA 4500
NSA 5000
NSA 2400
90 Days
NSA 3500
90 Days
NSA 4500
90 Days
NSA 5000
90 Days
Firewall General
Interfaces
Console Interface
• USB Ports
• Management
• Nodes Supported
Included SonicOS Version
Memory
Site-to-Site VPN Tunnels
Global VPN Clients (Bundled)
Global VPN Clients (Maximum)
Threat Signatures Capable
VLAN Interfaces (801.1q)
SonicPoints
NSA 2400
6 Gbe
Future
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
256Mb
75
10
250
25,000
128
32
NSA 3500
6 Gbe
Future
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
512Mb
800
50
1,000
25,000
128
32
NSA 4500
6 Gbe
Future
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
512Mb
1,500
500
3,000
25,000
256
64
NSA 5000
6 Gbe
Future
CLI, SSH, GUI, GMS
Unrestricted
Enhanced
1Gb
2,500
1,000
3,500
25,000
256
64
Firewall/VPN Performance
Stateful Throughput3
UTM Performance
Gateway Anti-Virus Throughput4
Intrusion Prevention Throughput4
3DES/AES VPN Throughput3
Connections
Connections/sec
NSA 2400
450 Mbps
50 Mbps
100 Mbps
120 Mbps
300 Mbps
48,000
3,000
NSA 3500
1 Gbps
170 Mbps
310 Mbps
220 Mbps
625 Mbps
128,000
5,000
NSA 4500
1.5 Gbps
300 Mbps
500 Mbps
410 Mbps
845 Mbps
450,000
7,500
NSA 5000
1.8 Gbps
350 Mbps
680 Mbps
500 Mbps
1.1 Gbps
600,000
8,500
Features
Logging
SNMP
Authentication
Voice over IP (VoIP) Security
Zone Security
Single Sign On2
Dynamic Routing
Policy-based Routing
Dynamic Bandwidth Management
Integrated Wireless Switch & Controller
Stateful High Availability5
WAN/WAN Failover
Load Balancing
Object-based Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
Quality of Service (QoS)
SSL Control
IPv6 Ready
NSA 2400
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 3500
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 4500
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
NSA 5000
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
1ICSA Certification is currently pending for all NSA appliances.
2Services must be purchased separately.
3Testing Methodologies: Maximum performance based on RFC 2544 (for firewall and VPN). Actual performance may vary depending on network conditions and activated services.
4Testing using HTTP Throughput test.
5Not included in base configuration for NSA 2400 and NSA 3500 appliances - must be purchased separately.
