NSA E-Class

While technical advances in remote access, mobility, and real-time applications extend network functionality, they also make it more complex. This new paradigm of network communications threatens to undermine control and policy across network boundaries and become the new conduit for evolving threats. The SonicWALL® E-Class Network Security Appliance (NSA) Series delivers the first and only globally deployable and manageable enterprise Unified Threat Management (UTM) solution combining a multi-tiered proactive defense that meets the demands of the new paradigm of network communications. Utilizing a high-speed deep packet inspection and traffic classification engine, the solution inspects real-time applications, files, and content-based traffic, irrespective of port and protocol without significantly impacting network performance or limiting overall scalability. The SonicWALL architecture extends protection over both external and internal networks, delivering content inspection, application control and threat prevention throughout an enterprise network.

Features and Benefits

Exceptional VPN Performance. The E-Class NSA family supports 1.5 Gbps to 3.0 Gbps 3DES/AES VPN performance. In addition the family supports up to 10,000 site-to-site VPN policies and 1,000,000 concurrent client connections. An E-Class appliance deployed in conjunction with a SonicWALL Aventail SSL VPN appliance can provide SonicWALL's Clean VPN solution. This protection is enabled through the NSA multi-core architecture, which provides ultra high-speed Deep Packet Inspection, Intrusion Prevention Service (IPS), Gateway Anti-Virus, Gateway Anti-Spyware, Content Filtering, and Application Firewall capabilities. The NSA ensures that all VPN traffic is scanned in real time and decontaminated before it is placed on the internal network.

Multi-core Performance Architecture. At the heart of the E-Class NSA is the SonicWALL multi-core performance architecture designed to provide breakthrough deep packet inspection and granular network intelligence over real-time network traffic without impacting network performance. The SonicWALL E-Class NSA can effectively deliver ultra-high-speed performance through the concurrent use of specialized security processing cores. Using the processing power of multiple cores in unison dramatically increases throughput and simultaneous inspection capabilities while lowering overhead impact.

Unified Threat Management Security Platform. The E-Class NSA Series delivers a highly redundant security and connectivity platform that is purpose-built for high speed internal and external network protection, consolidating and extending security functionality throughout the network. E-Class NSAs integrate real-time gateway anti-virus, spyware and intrusion prevention to secure networks and VPNs against an extensive array of dynamic threats including worms, Trojans, viruses, malware and software vulnerabilities.

Deployment Flexibility. Designed for highly redundant operations, the E-Class NSA appliances are an ideal solution for wired or wireless applications requiring high-speed access and heavy workgroup segmentation. With integrated support for standards-based VoIP, virtual local area networks (VLANs), enterprise-class routing and quality of service (QoS) E-Class NSAs increase deployment flexibility and enhance productivity.

Application Firewall and Custom Control. Application Firewall is a configurable set of granular, application specific policies that allow custom access control per network user, application, schedule or IP subnet level. These policies can restrict transfer of specific files and documents, scan e-mail attachments using user configurable criteria, automate bandwidth, control inspect internal and external Web access, and support custom signatures.

Dynamic Protection. Dynamic threat protection, content filtering and application control services are continually updated on a 24x7 basis to maximize security and decrease cost. IT productivity is increased by eliminating ad-hoc patch management for servers and workstations, automating the application of new protection signatures and removing the necessity to manually update security policies.

SSL VPN Remote Access provides clientless remote network level access for PC, Mac and Linux-based systems. With integrated SSL VPN technology, SonicWALL UTM appliances enable seamless and secure remote access to email, files, intranets, and applications from a variety of client platforms via NetExtender, a lightweight client that is pushed onto the user’s machine. NetExtender is installed and configured automatically, requiring no user interaction.

NSA E-Class Series VPN Comparison

VPN Feature	NSA E5500	NSA E6500	NSA E7500	NSA E8500
3DES/AES Throughput	1.5 Gbps	2.5 Gbps	4 Gbps	8 Gbps
Site-to-site VPN Tunnels	4000	6000	10,000	10,000
Bundled Global VPN Client Licenses/(Maximum)	2000/(4000)	2000/(6000)	2000/(10000)	2000/(10000)
Bundled SSL VPN Client Licenses/(Maximum)	2/(50)	2/(50)	2/(50)	2/(50)
Encryption / Authentication	DES, 3DES, AES (128, 192, 256 bit), MDS, SHA-1
Key Exchange	Ike, IKEv2, Manual Key, PKI (X.509)
L2TP/IPSec	Yes
Certificate Support	Verisign, Thawte, Baltimore, RSA Keon, Entrust, and Microsoft CA
Dead Peer Detection	Yes
DHCP over VPN	Yes
IPSec NAT Traversal	Yes, NAT_Tv00 and v03
Redundant VPN Gateway	Yes
Client Platform Support	Microsoft Windows 2000, Windows XP, Vista 32/64-bit

NSA E-Class Series Datasheet