Internet Security

Skip to Main Content »

Have a Question? We Can Help!
Call Toll-Free 866.403.5305

Welcome to Firewalls.com.

You're currently on:

SonicWALL NSA UTM Firewall Appliances

The SonicWALL NSA (Network Security Appliance) Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and antispyware with the application-level control of SonicWALL Application Firewall. With advanced routing, stateful high-availability and high-speed VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distribute mid-enterprise networks, while minimizing cost and complexity.

The SonicWALL NSA Series is Best Used for:
• Small-Medium business networks
• Perfect for a VPN hub location
• Advanced WAN and hardware failover. 
Download SonicWALL firewall Buyers Guide

Browse SonicWALL NSA Series

SonicWALL NSA 220

» Unlimited Users
» 7 Gigabit Ethernet Ports
» 25 VPN Tunnels
» 2 SSL VPN Clients
» 2 IPSec VPN Clients
» 802.11 Dual-band Wireless
» 110 Mbps Throughput Speed
» Supports up to 16 SonicPoints

SonicWALL NSA 250M

» Unlimited Users
» 5 Gigabit Ethernet Ports
» 50 VPN Tunnels
» 2 SSL VPN Clients
» 2 IPSec VPN Clients
» 802.11 Dual-band Wireless
» 130 Mbps Throughput Speed
» Supports up to 24 SonicPoints

SonicWALL NSA 2400

nsa 2400
» Unlimited Users
» 6 Gigabit Ethernet Ports
» 75 VPN Tunnels
» 2 SSL VPN Clients
» 10 IPSec VPN Clients
» Optimized for DSL / Cable / FIOS
» 150 Mbps Throughput Speed
» Supports up to 32 SonicPoints

SonicWALL NSA 2600

» Unlimited Users
» 8 Gigabit Ethernet Ports
» 300 Mbps DPI Throughput
» 75 VPN Tunnels
» 2 SSL VPN Clients
» Optimized for DSL / Cable / FIOS
» 1.9 Gbps Throughput Speed
» Supports up to 32 SonicPoints

SonicWALL NSA 3600

» Unlimited Users
» 12 Gigabit Ethernet Ports
» 2 10GbE SFP+ 4 1GbE SFP
» 800 VPN Tunnels
» 2 SSL VPN Clients
» Optimized for DSL / Cable / FIOS
» 3.4 Gbps Throughput Speed
» Supports up to 48 SonicPoints

SonicWALL NSA 4600

» Unlimited Users
» 12 Gigabit Ethernet Ports
» 2 10GbE SFP+ 4 1GbE SFP
» 1500 VPN Tunnels
» 2 SSL VPN Clients
» Optimized for DSL / Cable / FIOS
» 6 Gbps Throughput Speed
» Supports up to 64 SonicPoints

SonicWALL NSA 5600

» Unlimited Users
» 12 Gigabit Ethernet Ports
» 2 10GbE SFP+ 4 1GbE SFP
» 4000 VPN Tunnels
» 2 SSL VPN Clients
» Optimized for DSL / Cable / FIOS
» 9 Gbps Throughput Speed
» Supports up to 96 SonicPoints

SonicWALL NSA 6600

» Unlimited Users
» 12 Gigabit Ethernet Ports
» 4 10GbE SFP+ 8 1GbE SFP
» 6000 VPN Tunnels
» 2 SSL VPN Clients
» Optimized for DSL / Cable / FIOS
» 12 Gbps Throughput Speed
» Supports up to 96 SonicPoints

Comparison Between SonicWALL NSA Firewall Appliance

NSA 220 NSA 250M
nsa 2400
NSA 3600 NSA 3600 NSA 3600 NSA 6600

Firewall Overview

NSA 220

NSA 250M

NSA 2400

NSA 3600

NSA 4600

NSA 5600

NSA 6600

Application Layer Inspection Fully Layer 7 Fully Layer 7 Fully Layer 7 Fully Layer 7 Fully Layer 7 Fully Layer 7 Fully Layer 7
Stateful Packet Inspection Firewall
Unlimited File Size Protection
Protocols Scanned 50+ 50+ 50+ 50+ 50+ 50+ 50+
ICSA Firewall Certified

Firewall General

NSA 220

NSA 250M

NSA 2400

NSA 3600

NSA 4600

NSA 5600

NSA 6600

Interfaces 7 Gbe 5 Gbe 6 Gbe 2 10GbE SFP+ 4 1GbE SFP 12 1GE copper 1 Managment 2 10GbE SFP+ 4 1GbE SFP 12 1GE copper 1 Managment 2 10GbE SFP+ 4 1GbE SFP 12 1GE copper 1 Managment 4 10GbE SFP+ 8 1GbE SFP 8 1GE copper 1 Managment
Memory 512 MB 512 MB 512Mb 2 GB 2 GB 4 GB 4 GB
Site-to-Site VPN Tunnels (w/ Expansion Upgrade) 25 50 75 800 1500 4000 6000
Global VPN Clients Bundle (Maximum) 2 (25) 2 (25) 10 (250) 50 (1,000) 500 (3,000) 2,000 (4,000) 2,000 (6,000)
SSL VPN NetExtender Clients (Bundled) 2 2 2 2 2 2 2
SSL VPN NetExtender Clients (Maximum) 15 15 25 30 30 50 50
Unique Malware Threats Blocked 10+ million 10+ million 10+ million 10+ million 10+ million 10+ million 10+ million
VLAN Interfaces (w/ Expansion Upgrade) 25 35 25 512 512 512 512
SonicPoints 16 24 32 48 64 96 96

Performance

NSA 220

NSA 250M

NSA 2400

NSA 3600

NSA 4600

NSA 5600

NSA 6600

Stateful Throughput 600 Mbps 750 Mbps 775 Mbps 3.4 Gbps 6 Gbps 9 Gbps 12 Gbps
UTM Performance 110 Mbps 130 Mbps 150 Mbps 450 Mbps 800 Mbps 1.6 Gbps 3.0 Gbps
Gateway Anti-Virus Throughput 115 Mbps 140 Mbps 160 Mbps 600 Mbps 1.1 Gbps 1.7 Gbps 3.0 Gbps
Intrusion Prevention Throughput 195 Mbps 250 Mbps 275 Mbps 1.1 Gbps 2.0 Gbps 3.0 Gbps 4.5 Gbps
IMIX Performance 180 Mbps 210 Mbps 235 Mbps 900 Mbps 1.6 Gbps 2.4 Gbps 3.5 Gbps
3DES/AES VPN Throughput 0 Mbps 200 Mbps 300 Mbps 1.5 Gbps 3.0 Gbps 4.5 Gbps 5.0 Gbps
Connections (w/ Expansion Upgrade) 85,000 110,000 32,000 325000 500000 750000 1000000
Connections/sec 2,200 3,000 4,000 20000 40000 60000 90000

Features

NSA 220

NSA 250M

NSA 2400

NSA 3600

NSA 4600

NSA 5600

NSA 6600

Logging ViewPoint®, Local Log, Syslog ViewPoint®, Local Log, Syslog ViewPoint®, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog Analyzer, Local Log, Syslog
SNMP
Authentication XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database XAUTH/ RADIUS, Active Directory, SSO, LDAP, Terminal Services, Citrix, Internal User Database XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, Terminal Services, Citrix
Single Sign-On
Voice over IP (VoIP) Security
Zone Security
Dynamic Routing OSPF, RIP OSPF, RIP OSPF, RIP BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast BGP, OSPF, RIPv1/v2, static routes, policy-based routing, multicast
Policy-based Routing
Route-based VPN
Dynamic Bandwidth Management
Integrated Wireless Switch & Controller
Layer 2 Wireless Bridging
Stateful High Availability
Multi-WAN
WAN/WAN Failover
Load Balancing
Object-based Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
Quality of Service (QoS)
SSL Control
3G Wireless/ Modem
IPv6 Ready - - - -

Pricing - Buy Now

NSA 220 NSA 250M

NSA 2400

NSA 3600

NSA 4600

NSA 5600

NSA 6600

Legend:
- Optional Upgrade (must be purchased separately)
- Feature Included
NSA Series

Organizations of all sizes depend on their networks to access internal and external mission-critical applications. As advances in networking continue to provide tremendous benefit to organizations, they are increasingly challenged by sophisticated and financially-motivated attacks designed to disrupt communication, degrade performance and compromise data.

Malicious attacks penetrate outdated stateful packet inspection firewalls by exploiting higher network levels. Point products add layers of security, but are costly, difficult to manage, limited in controlling network misuse and ineffective against the latest multipronged attacks.

The SonicWALL® Network Security Appliance (NSA) Series revolutionizes network security, utilizing a breakthrough multi-core design and patented Reassembly-Free Deep Packet Inspection™ (RFDPI) technology* offering complete protection without compromising network performance. This platform was first made available on the SonicWALL E-Class NSA Series, and it is now available for mid-sized organizations.

The NSA Series overcomes the limitations of existing security solutions by scanning the entirety of each packet for current internal and external threats in real time. Built on a high-speed multi-core processing platform, the NSA Series enables deep packet inspection without adversely impacting the performance of mission-critical networks and applications.

The NSA Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and antispyware with the application-level control of SonicWALL Application Intelligence Service. With advanced routing, stateful high-availability and high-speed IPSec and SSL VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distributed mid-enterprise networks, while minimizing cost and complexity.

Comprised of the SonicWALL NSA 220, NSA 240, , NSA 250M, NSA 2400, NSA 3600 and NSA 4600, the NSA Series offers a scalable range of solutions designed to meet the network security needs of any organization.

Features and Benefits

SonicWALL's next generation security incorporates a new level of UTM that integrates intrusion prevention, gateway anti-virus and anti-spyware and features the Application Intelligence Service suite of configurable tools to prevent data leakage and offer granular application control. Advanced routing services and networking features incorporate advanced networking and security technology including 802.1q VLANs, Multi-WAN failover, zone and object-based management, load balancing, advanced NAT modes and more, providing granular configuration flexibility and comprehensive protection at the administrator's discretion.
Scalable multi-core hardware and Reassembly-Free Deep Packet Inspection scans and eliminates threats of unlimited file sizes, and provides virtually unrestricted concurrent connections with uncompromising speed. The NSA 240 can be configured using primary or secondary modem or 3G wireless interfaces for futureproofed extensibility.
Standards-based Voice over IP (VoIP) capabilities provide the highest levels of security for every element of the VoIP infrastructure, from communications equipment to VoIP-ready devices such as SIP Proxies, H.323 Gatekeepers and Call Servers.
Stateful High Availability and load balancing features in SonicOS 5.5 Enhanced maximize total network bandwidth and maintain seamless network uptime, delivering uninterrupted access to mission-critical resources, and ensuring that VPN tunnels and other network traffic will not be interrupted in the event of a failover.
Secure distributed wireless LAN services enable the appliance to function as a secure wireless switch and controller that automatically detects and configures SonicPoints,™ SonicWALL wireless access points, for secure remote access in distributed network environments.
High performance and lowered TCO are achieved by using the processing power of multiple cores in unison to dramatically increase throughput and provide simultaneous inspection capabilities, while lowering power consumption. Onboard Quality of Service (QoS) features use industry standard 802.1p and Differentiated Services Code Points (DSCP) Class of Service (CoS) designators to provide powerful and flexible bandwidth management that is vital for VoIP, multimedia content and business-critical applications.