• SonicOSX 7
• Product Overview
  • Enterprise Class High-performance Firewall
  • Feature Summary
    • Simplified Management and Reporting
    • Advanced Threat Protection
    • Capture Cloud Platform
    • Deep Packet Inspection of SSL/TLS (DPI-SSL)
    • Content Filtering Service
    • Intrusion Prevention Service
    • Application Control
    • Unified Policy Configuration and Management
    • Multiple Instances / High Availability
  • System Architecture
  • Hardware Overview
    • Front Panel
    • Rear Panel
    • LEDs
    • Specifications
• System Setup
  • Default Settings
  • System Startup
    • HTTPS Management via X0
    • HTTPS Management via MGMT Port
      • Using SafeMode
      • Using CLI
  • SonicOSXBasic Configuration
  • Connecting LAN and WAN Interfaces
  • Network Configuration
  • Registration and Licensing
• Configuring Multiple Instances
  • Enabling Multi-Instances
  • Configuring Multi-Instances
• Licenses for Multiple Instances
  • Surveying Multiple Instances
  • Instance Registration
  • Instance License Update
  • Deactivating an Instance
  • Instance HA Pair on a Standalone NSsp Node
• Configuring High Availability
  • High Availability Overview
  • Setting Up Unit-to-Unit HA
  • Configuring Advanced Settings
  • Checking High Availability Status
  • Monitoring High Availability
  • Configuring Multi-Appliance Instance-Level HA
• CLI Bring-up
  • Access the Console Port
  • At the ChassisOS Prompt
  • To Change to the Console Port of Another Physical Blade
  • Check Network Address Settings
  • Commands at ChassisOS Prompt
  • Show Commands at ChassisOS Prompt
  • Configure IP Addresses from the CLI
  • Restart SonicOSX from the CLI
  • To Access SonicOSX Console
• Using the SafeMode GUI
  • Accessing SafeMode
  • Rebooting the System
  • Upgrading Firmware
  • Diagnostics
• SonicWall Support
  • About This Document

System Architecture

The NSsp 15700 centers on four Intel Xeon processors on two cards, or physical blades, linked by a 3.2 Terabits per second switch fabric. This enables the support of multiple independent firewalls with direct access to the NSsp's high-performance hardware. Non-Unified Memory Access architecture combined with software containers maximizes security and performance.

There are two logical blades, or CPUs, per physical blade. These logical blades are allocated to a Root Instance firewall, or to tenant instances. Each logical blade offers the nine cores available on each Xeon minus one devoted to system software. At the time of this writing, the Root Instance requires a minimum two logical blades, and a maximum of two logical blades are available to support virtual firewalls.

Virtual firewall instances are confined to software containers, consequently providing the highest security and predictable performance.

Virtual firewalls require an allocation of at least two CPU cores: one Control Plane (CP) and one Data Plane (DP). Up to two CP cores and seven DP cores can support a virtual firewall. Cores supporting a virtual firewall must reside on one logical blade.