What are the SonicWall NSv firewall installation requirements and maximum connections?
Description
NSv virtual firewall installation on ESXi 5.5/6/0/6/5 is supported and tested.The hardware requirements and maximum connection information are included in this article.
Resolution
The following table shows the hardware resource requirements and maximum connection and session information for the SonicWall Network Security Virtual Series models.
| Firewall | NSv 10 | NSv 25 | NSv 50 | NSv 100 |
| Supported platform | VMware ESXi v5.5 / v6.0 / v6.5 | |||
| Max Cores | 2 | 2 | 2 | 2 |
| Max Mgmt/DataPlane Cores | 1/1 | 1/1 | 1/1 | 1/1 |
| Min Memory Required | 4G | 4G | 4G | 4G |
| Supported IP/Nodes | 4G | 4G | 4G | 4G |
| Storage | 60 GB | |||
| SSO users | 25 | 25 | 100 | 100 |
| Logging | Analyzer, Local Log, Syslog | |||
| High availability | Active/Passive with State Sync | |||
| Firewall/VPN Performance | ||||
| Connections per second | 1,800 | 5,000 | 8,000 | 12,000 |
| Maximum connections (SPI) | 2,500 | 6,250 | 12,500 | 25,000 |
| Maximum connections (DPI) | 2,500 | 6,250 | 12,500 | 25,000 |
| SSL DPI connections | 500 | 1,000 | 2,000 | 4,000 |
| VPN | ||||
| Site-to-Site VPN Tunnels | 10 | 10 | 25 | 50 |
| IPSec VPN clients (max) | 10 | 10 | 25 | 25 |
| SSL VPN NetExtender Clients (Maximum) | 2(10) | 2(25) | 2(25) | 2(25) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B, Common Access Card (CAC) | |||
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v | |||
| Route-based VPN | RIP, OSPF, BGP | |||
| Networking | ||||
| IP address assignment | Static, DHCP, internal DHCP server, DHCP relay | |||
| NAT modes | NAT modes 1:1, many:1, 1:many, flexible NAT (overlapping IPs), PAT, transparent mode | |||
| VLAN interfaces | 25 | 25 | 50 | 50 |
| Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, Multicast | |||
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p | |||
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix | |||
| VoIP | Full H323-v1-5, SIP | |||
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, L2TP, PPTP, RADIUS | |||
| Firewall | NSv 200 | NSv 300 | NSv 400 | NSv 800 | NSv1600 |
| Supported platform | VMware ESXi v5.5 / v6.0 / v6.5 | ||||
| Max Cores | 2 | 3 | 4 | 8 | 16 |
| Max Mgmt/DataPlane Cores | 1/1 | 1/2 | 1/3 | 1/7 | 1/15 |
| Min Memory Required | 4G | 4G | 6G | 8G | 10G |
| Supported IP/Nodes | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Storage | 60 GB | ||||
| SSO users | 500 | 5,000 | 10,000 | 15,000 | 20,000 |
| Logging | Analyzer, Local Log, Syslog | ||||
| High availability | Active/Passive with State Sync | ||||
| Firewall/VPN Performance | |||||
| Connections per second | 15,000 | 15,000 | 60,000 | 130,000 | 229,000 |
| Maximum connections (SPI) | 225,000 | 1M | 1.5M | 7.5M | 10M |
| Maximum connections (DPI) | 125,000 | 500,000 | 1.5M | 2M | 2.5M |
| SSL DPI connections | 8,000 | 12,000 | 20,000 | 30,000 | 50,000 |
| VPN | |||||
| Site-to-Site VPN Tunnels | 75 | 100 | 6000 | 10,000 | 25,000 |
| IPSec VPN clients (max) | 50(1,000) | 50(1,000) | 2,000(4,000) | 2,000(6,000) | 2,000(10,000) |
| SSL VPN NetExtender Clients (Maximum) | 2(100) | 2(100) | 2(100) | 2(100) | 2(100) |
| Encryption/authentication | DES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B, Common Access Card (CAC) | ||||
| Key exchange | Diffie Hellman Groups 1, 2, 5, 14v | ||||
| Route-based VPN | RIP, OSPF, BGP | ||||
| Networking | |||||
| IP address assignment | Static, DHCP, internal DHCP server, DHCP relay | ||||
| NAT modes | NAT modes 1:1, many:1, 1:many, flexible NAT (overlapping IPs), PAT, transparent mode | ||||
| VLAN interfaces | 50 | 256 | 500 | 512 | 512 |
| Routing protocols | BGP, OSPF, RIPv1/v2, static routes, policy-based routing, Multicast | ||||
| QoS | Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p | ||||
| Authentication | XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix | ||||
| VoIP | Full H323-v1-5, SIP | ||||
| Standards | TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, L2TP, PPTP, RADIUS | ||||
Related Articles
not finding your answers?