Firewall Overview
Application Layer
Inspection
Stateful Packet
Inspection Firewall
Unlimited File Size Protection
Protocols Scanned
ICSA Firewall Certified1
Firewall General
Interfaces
Console Interface
USB Ports
Management
Nodes Supported
Included SonicOS Version
Memory
Site-to-Site VPN Tunnels
(w/ Expansion Upgrade)
Global VPN Clients (Bundled)
Global VPN Clients (Maximum)
Threat Signatures Capable
VLAN Interfaces
(w/ Expansion Upgrade)
SonicPoints
Features
Logging
SNMP
Authentication
Voice over IP (VoIP) Security
Zone Security
Single Sign On
Dynamic Routing
Policy-based Routing
Dynamic Bandwidth Management
Integrated Wireless Switch & Controller
Stateful High Availability5
WAN/WAN Failover
Load Balancing
Object-based
Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
Quality of Service (QoS)
SSL Control
IPv6 Ready
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
ViewPoint®, Local Log, Syslog
XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
OSPF, RIP
1ICSA Certification is currently pending for all NSA appliances.
2Services must be purchased separately.
3Testing Methodologies: Maximum performance based on RFC 2544 (for firewall and VPN). Actual performance may vary depending on network conditions and activated services.
4Testing using HTTP Throughput test.
5Not included in base configuration for NSA 240/2400/3500 appliances - must be purchased separately.
