The SonicWALLŽ Network Security Appliance (NSA) Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and anti-spyware with the application-level control of SonicWALL Application Firewall. With advanced routing, stateful high-availability and high-speed VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distribute mid-enterprise networks, while minimizing cost and complexity.
Legend
S Standard Feature
O Optional Feature
S Standard Feature
O Optional Feature| Firewall Overview | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Application Layer Inspection | Fully Layer 7 | Fully Layer 7 | Fully Layer 7 | Fully Layer 7 | Fully Layer 7 |
| Stateful Packet Inspection Firewall | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S |
| Protocols Scanned | 50+ | 50+ | 50+ | 50+ | 50+ |
| ICSA Firewall Certified | S | S | S | S | S |
| Security Services | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Application Firewall2 | S | S | S | S | S |
| Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention Service2 | S | S | S | S | S |
| Enforced Client Anti-Virus & Anti-Spyware2 | S | S | S | S | S |
| Content & URL Filtering (CFS)2 | S | S | S | S | S |
| ViewPoint Reporting2 | S | S | S | S | S |
| Comprehensive Anti-Spam Service2 | S | S | S | S | S |
| Support Services | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Dynamic Support 8x5 | 90 Days | 90 Days | 90 Days | 90 Days | 90 Days |
| Dynamic Support 24x72 | S | S | S | S | S |
| Firewall General | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Interfaces | 3 GbE, 6 FE, USB, PC Card Slot (Optional 3G/Analog Modem) | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/ 1000 Copper Gigabit Ports, 1 Console Interface, 2 USB |
| Console Interface | S | S | S | S | S |
| USB Ports | 2 | 2 | 2 | 2 | 2 |
| Management | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS | CLI, SSH, GUI, GMS |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Included SonicOS Version | Enhanced | Enhanced | Enhanced | Enhanced | Enhanced |
| Memory | 256Mb | 512Mb | 512Mb | 512Mb | 1Gb |
| Site-to-Site VPN Tunnels (w/ Expansion Upgrade) | 25 (50) | 75 | 800 | 1,500 | 2,500 |
| Global VPN Clients (Bundled) | 2 | 10 | 50 | 500 | 1,000 |
| Global VPN Clients (Maximum) | 25 | 250 | 1,000 | 3,000 | 3,500 |
| SSL VPN NetExtender Clients (Bundled) | 2 | 2 | 2 | 2 | 2 |
| SSL VPN NetExtender Clients (Maximum) | 15 | 25 | 30 | 30 | 30 |
| Threat Signatures Capable | 25,000 | 25,000 | 25,000 | 25,000 | 25,000 |
| Virtual Assist Technicians (Included) | 30-Day Trial | 1 | 2 | 2 | 2 |
| Virtual Assist Technicians (Maximum) | 5 | 5 | 10 | 10 | 10 |
| VLAN Interfaces (w/ Expansion Upgrade) | 10 (25) | 25 | 50 | 200 | 300 |
| SonicPoints | 16 | 32 | 32 | 64 | 64 |
| Connections/sec | 2,000 | 4,000 | 7,000 | 10,000 | 12,000 |
| Performance | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Stateful Throughput3 | 600 Mbps | 775 Mbps | 1.5 Gbps | 2.75 Gbps | 3.5 Gbps |
| UTM Performance | 110 Mbps | 150 Mbps | 240 Mbps | 600 Mbps | 800 Mbps |
| Gateway Anti-Virus Throughput4 | 115 Mbps | 160 Mbps | 350 Mbps | 690 Mbps | 800 Mbps |
| Intrusion Prevention Throughput4 | 195 Mbps | 275 Mbps | 750 Mbps | 1.4 Gbps | 1.7 Gbps |
| IMIX Performance | 195 Mbps | 235 Mbps | 580 Mbps | 700 Mbps | 950 Mbps |
| 3DES/AES VPN Throughput3 | 150 Mbps | 300 Mbps | 625 Mbps | 1.0 Gbps | 1.5 Gbps |
| Connections (w/ Expansion Upgrade) | 25,000 (35,000) | 32,000 | 128,000 | 450,000 | 600,000 |
| Features | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Deep Packet Inspection SSL | - | - | S | S | S |
| Logging | ViewPointŽ, Local Log, Syslog | ViewPointŽ, Local Log, Syslog | ViewPointŽ, Local Log, Syslog | ViewPointŽ, Local Log, Syslog | ViewPointŽ, Local Log, Syslog |
| SNMP | S | S | S | S | S |
| Authentication | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database | XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database |
| Single Sign-On | S | S | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S | S |
| Zone Security | S | S | S | S | S |
| Failover | |||||
| Hardware Failover | Optional Active/ Passive with State Sync7 | Optional Active/ Passive with State Sync | Optional Active/ Passive with State Sync | Active/ Passive with State Sync | Active/ Passive with State Sync |
| Multi-WAN Failover | S | S | S | S | S |
| Automated Failover/ Failback | S | S | S | S | S |
| Analog Modem Failover | S | S | S | S | S |
| 3G Cellular Modem Failover | S | S | S | S | S |
| Dynamic Routing | OSPF, RIP | OSPF, RIP | OSPF, RIP | OSPF, RIP | OSPF, RIP | Policy-based Routing | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S |
| Dynamic Bandwidth Management | S | S | S | S | S |
| Integrated Wireless Switch & Controller | S | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S | S |
| Multi-WAN | S | S | S | S | S |
| Load Balancing | S | S | S | S | S |
| Object-based Management | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S |
| Inbound Load Balancing | S | S | S | S | S |
| IKEv2 VPN | S | S | S | S | S |
| Quality of Service (QoS) | S | S | S | S | S |
| SSL Control | S | S | S | S | S |
| IPv6 Ready | S | S | S | S | S |
| Firewall Overview | NSA 240 TS |
NSA 2400 TS |
NSA 3500 TS |
NSA 4500 TS |
NSA 5000 TS |
| Hardware Platform | NSA 240 | NSA 2400 | NSA 3500 | NSA 4500 | NSA 5000 |
| Deep Packet Inspection Firewall | S | S | S | S | S |
| Stateful Packet Inspection Firewall | S | S | S | S | S |
| Unlimited File Size Protection | S | S | S | S | S |
| Protocols Scanned | 50+ | 50+ | 50+ | 50+ | 50+ |
| SonicPoints Supported (Max) | 16 | 32 | 32 | 32 | 32 |
| ICSA Firewall Certified | S | S | S | S | S |
| Security Services | NSA 240 TS |
NSA 2400 TS |
NSA 3500 TS |
NSA 4500 TS |
NSA 5000 TS |
| Gateway Anti-Virus, Anti-Spyware & IPS | S | S | S | S | S |
| Application Firewall | S | S | S | S | S |
| Content Filtering Service (CFS) Premium Edition | S | S | S | S | S |
| ViewPoint Reporting | S | S | S | S | S |
| Dynamic Support 24x7 | S | S | S | S | S |
| Comprehensive Anti-Spam Service | O | O | O | O | O |
| Enforced Client Anti-Virus & Anti-Spyware | O | O | O | O | O |
| Firewall General | NSA 240 TS |
NSA 2400 TS |
NSA 3500 TS |
NSA 4500 TS |
NSA 5000 TS |
| Interfaces | 3 GbE, 6 FE, USB, PC Card Slot (Optional 3G/Analog Modem) | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB | (6) 10/100/1000 Copper Gigabit Ports, 1 Console Interface, 2 USB |
| Nodes Supported | Unrestricted | Unrestricted | Unrestricted | Unrestricted | Unrestricted |
| Included SonicOS Version | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher | Enhanced 5.0 or Higher |
| RAM | 256 MB | 512 MB | 512 MB | 512 MB | 512 MB |
| Flash Memory | 32 MB | 512 MB | 512 MB | 512 MB | 512 MB |
| Site-to-Site VPN Tunnels | 25/507 | 75 | 800 | 1,500 | 2,500 |
| Bundled GVC Licenses (Max) | 2 (25) | 10 (250) | 50 (1,000) | 500 (3,000) | 1,000 (3,500) |
| Bundled SSL VPN Licenses (Max) | 2 (15) | 2 (25) | 2 (30) | 2 (30) | 2 (30) |
| Virtual Assist Technicians (Max) | 30-Day Trial (5) | 1 (5) | 2 (10) | 2 (10) | 2 (10) |
| VLAN Interfaces | 10/257 | 25 | 50 | 200 | 300 |
| Firewall / VPN / Performance | NSA 240 TS |
NSA 2400 TS |
NSA 3500 |
NSA 4500 TS |
NSA 5000 TS |
| Stateful Throughput6 | 600 Mbps | 775 Mbps | 1.5 Gbps | 2.75 Gbps | 3.5 Gbps |
| Deep Packet Inspection Throughput6 | 110 Mbps | 150 Mbps | 240 Mbps | 600 Mbps | 800 Mbps |
| 3DES/AES VPN Throughput6 | 150 Mbps | 300 Mbps | 625 Mbps | 1.0 Gbps | 1.5 Gbps |
| Maximum Connections8 | 25,000/ 35,0007 | 48,000 | 128,000 | 450,000 | 600,000 |
| Feature | NSA 240 TS |
NSA 2400 TS |
NSA 3500 TS |
NSA 4500 TS |
NSA 5000 TS |
| Deep Packet Inspection SSL | N | N | S | S | S |
| Voice over IP (VoIP) Security | S | S | S | S | S |
| Route-based VPN | S | S | S | S | S |
| Single Sign-On | S | S | S | S | S |
| Dynamic Routing | S | S | S | S | S |
| 802.11n Wireless Support via SonicPoints | S | S | S | S | S |
| Layer 2 Wireless Bridging | S | S | S | S | S |
| High Availability7 | S | S | S | S | S |
| Multi-WAN | S | S | S | S | S |
| Automated Failover & Failback | S | S | S | S | S |
| 3G Wireless/ Modem9 | With PC Card or USB 3G Adapter/ Modem | - | With USB 3G Adapter/ Modem | With USB 3G Adapter/ Modem | With USB 3G Adapter/ Modem |
| Object-based Management | S | S | S | S | S |
| Policy-based NAT | S | S | S | S | S |
| Load Balancing | S | S | S | S | S |
| PortShield Security | S | S | S | S | S |
| Terminal Services Authentication/ Citrix Support | S | S | S | S | S |
| Onboard Quality of Service (QoS) | S | S | S | S | S |
1ICSA Certification is currently pending for all NSA appliances.
2Services must be purchased separately.
3Testing Methodologies: Maximum performance based on RFC 2544 (for firewall and VPN). Actual performance may vary depending on network conditions and activated services.
4Testing using HTTP Throughput test.
5Not included in base configuration for NSA 240/2400/3500 appliances - must be purchased separately.
6Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services. VPN throughput UDP traffic at 1418 byte packet size adhering to RFC 2544. UTM performance is based on HTTP tests run on the Spirent Avalanche/Reflector. Testing done with multiple flows through multiple port pairs.
7Only with the NSA 240 Series Stateful HA and Expansion Upgrade.
8Actual maximum connection counts are lower when UTM services are enabled.
93G card and modem are not included. View supported PC Cards and USB devices.
