NSA Series

Organizations of all sizes depend on their networks to access internal and external mission-critical applications. As advances in networking continue to provide tremendous benefit to organizations, they are increasingly challenged by sophisticated and financially-motivated attacks designed to disrupt communication, degrade performance and compromise data.

Malicious attacks penetrate outdated stateful packet inspection firewalls by exploiting higher network levels. Point products add layers of security, but are costly, difficult to manage, limited in controlling network misuse and ineffective against the latest multipronged attacks. The SonicWALL Network Security Appliance (NSA) Series revolutionizes network security, utilizing a breakthrough multi-core design and patented Reassembly-Free Deep Packet Inspection™ (RFDPI) technology* offering complete protection without compromising network performance. This platform was first made available on the SonicWALL E-Class NSA Series, and it is now available for mid-sized organizations.

The NSA Series overcomes the limitations of existing security solutions by scanning the entirety of each packet for current internal and external threats in real time. Built on a high-speed multi-core processing platform, the NSA Series enables deep packet inspection without adversely impacting the performance of mission-critical networks and applications.

Features and Benefits

SonicWALL Clean VPN™ decontaminates vulnerabilities and malicious code from remote mobile users and branch offices traffic before it enters the corporate network, and without user intervention.

SonicWALL’s next generation security incorporates a new level of UTM that integrates intrusion prevention, gateway anti-virus and anti-spyware and features the Application Firewall suite of configurable tools to prevent data leakage and offer granular application control.

Scalable multi-core hardware and reassembly-free deep packet inspection scans and eliminates threats of unlimited fi le sizes, and provides virtually unrestricted concurrent connections with uncompromising speed.

Stateful high availability and load balancing features in SonicOS 5.0 Enhanced maximize total network bandwidth and maintain seamless network uptime, delivering uninterrupted access to mission-critical resources, and ensuring that VPN tunnels and other network traffic will not be interrupted in the event of a failover.

Advanced state-of-the-art performance and lowered TCO are achieved by using the processing power of multiple cores in unison to dramatically increase throughput and provide simultaneous inspection capabilities, while lowering power consumption.

Advanced routing services and networking features incorporate advanced networking and security technology including 802.1q VLANs, WAN/WAN failover, zone and object-based management, load balancing, advanced NAT modes and more, providing granular configuration flexibility and comprehensive protection at the administrator’s discretion.

Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.

Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and configures SonicPoints,™ SonicWALL wireless access points, for secure remote access in distributed network environments.

Onboard Quality of Service (QoS) features use industry standard 802.1p and Differentiated Services Code Points (DSCP) Class of Service (CoS) designators to provide powerful and flexible bandwidth management that is vital for VoIP, multimedia content and business-critical applications.

SSL VPN Remote Access provides clientless remote network level access for PC, Mac and Linux-based systems. With integrated SSL VPN technology, SonicWALL UTM appliances enable seamless and secure remote access to email, files, intranets, and applications from a variety of client platforms via NetExtender, a lightweight client that is pushed onto the user’s machine. NetExtender is installed and configured automatically, requiring no user interaction.

NSA Series VPN Comparison

VPN Feature	240	2400	3500	4500
Licensed Nodes	Unl	Unl	Unl	Unl
3DES/AES Throughput	150 Mbps	300 Mbps	625 Mbps	1.0 Gbps
Site-to-site VPN Tunnels/	25/50	75	800	1,500
Bundled Global VPN Client Licenses/(Maximum)	2(25)	10(250)	50(1000)	500(3000)
Bundled SSL VPN Client Licenses/(Maximum)	2(15)	2(25)	2(30)	2(30)
Encryption / Authentication	DES, 3DES, AES (128, 192, 256 bit), MDS, SHA-1
Key Exchange	IKE, IKEv2, Manual Key, PKI (X.509)
L2TP/IPSec	Yes
Certificate Support	Verisign, Thawte, Baltimore, RSA Keon, Entrust, and Microsoft CA
Dead Peer Detection	Yes
DHCP over VPN	Yes
IPSec NAT Traversal	Yes, NAT_Tv00 and v03
Redundant VPN Gateway	Yes
Client Platform Support	Microsoft Windows 2000, Windows XP, Vista 32/64-bit

NSA Series Datasheet