Sonicwall

Comparison Between SonicWALL NSA Firewall Appliance

Firewall Overview	NSA 240	NSA 2400 / NSA 2400MX	NSA 3500	NSA 4500	NSA 5000
Application Layer Inspection	Fully Layer 7	Fully Layer 7	Fully Layer 7	Fully Layer 7	Fully Layer 7
Stateful Packet Inspection Firewall
Unlimited File Size Protection
Protocols Scanned	50+	50+	50+	50+	50+
ICSA Firewall Certified
Firewall General	NSA 240	NSA 2400 / NSA 2400MX	NSA 3500	NSA 4500	NSA 5000
Interfaces	3GbE, 6FE	6 Gbe / 16 Gbe	6 Gbe	6 Gbe	6 Gbe
Console Interface
Included SonicOS Version	Enhanced 5.0 or Higher	Enhanced 5.0 or Higher / Enhanced 5.7 or Higher	Enhanced 5.0 or Higher	Enhanced 5.0 or Higher	Enhanced 5.0 or Higher
Memory	256Mb	512Mb	512Mb	512Mb	1Gb
Site-to-Site VPN Tunnels (w/ Expansion Upgrade)	25 (50)	75	800	1,500	2,500
Global VPN Clients Bundle (Maximum)	2 (25 )	10 (250)	50 (1000)	500 (3000)	1000 (3500)
SSL VPN NetExtender Clients (Bundled)	2	2	2	2	2
SSL VPN NetExtender Clients (Maximum)	15	25	30	30	30
Threat Signatures Capable	25000	25000	25000	25000	25000
VLAN Interfaces (w/ Expansion Upgrade)	10 (25)	25	50	200	300
SonicPoints	16	32	32	64	64
Performance	NSA 240	NSA 2400 / NSA 2400MX	NSA 3500	NSA 4500	NSA 5000
Stateful Throughput	600 Mbps	775 Mbps	1.5 Gbps	2.75 Gbps	3.5 Gbps
UTM Performance	110 Mbps	150 Mbps	240 Mbps	600 Mbps	800 Mbps
Gateway Anti-Virus Throughput	115 Mbps	160 Mbps	350 Mbps	690 Mbps	800 Mbps
Intrusion Prevention Throughput	195 Mbps	275 Mbps	750 Mbps	1.4 Gbps	1.7 Gbps
IMIX Performance	195 Mbps	235 Mbps	580 Mbps	700 Mbps	950 Mbps
3DES/AES VPN Throughput	150 Mbps	300 Mbps	625 Mbps	1.0 Gbps	1.5 Gbps
Connections (w/ Expansion Upgrade)	25,000 (35,000)	32,000	128,000	450,000	600,000
Connections/sec	2,000	4,000	7,000	10,000	12,000
Features	NSA 240	NSA 2400 / NSA 2400MX	NSA 3500	NSA 4500	NSA 5000
Logging	ViewPoint®, Local Log, Syslog	ViewPoint®, Local Log, Syslog	ViewPoint®, Local Log, Syslog	ViewPoint®, Local Log, Syslog	ViewPoint®, Local Log, Syslog
SNMP
Authentication	XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database	XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database	XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database	XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database	XAUTH/ RADIUS, Active Directory, SSO, LDAP, Internal User Database
Single Sign-On
Voice over IP (VoIP) Security
Zone Security
Dynamic Routing	OSPF, RIP	OSPF, RIP	OSPF, RIP	OSPF, RIP	OSPF, RIP
Policy-based Routing
Route-based VPN
Dynamic Bandwidth Management
Integrated Wireless Switch & Controller
Layer 2 Wireless Bridging
Stateful High Availability
Multi-WAN
WAN/WAN Failover
Load Balancing
Object-based Management
Policy-based NAT
Inbound Load Balancing
IKEv2 VPN
Quality of Service (QoS)
SSL Control
3G Wireless/ Modem		- /
IPv6 Ready
Pricing - Buy Now	NSA 240	NSA 2400/ NSA 2400MX	NSA 3500	NSA 4500	NSA 5000

Legend:

Organizations of all sizes depend on their networks to access internal and external mission-critical applications. As advances in networking continue to provide tremendous benefit to organizations, they are increasingly challenged by sophisticated and financially-motivated attacks designed to disrupt communication, degrade performance and compromise data. Malicious attacks penetrate outdated stateful packet inspection firewalls by exploiting higher network levels. Point products add layers of security, but are costly, difficult to manage, limited in controlling network misuse and ineffective against the latest multipronged attacks.

The SonicWALL® Network Security Appliance (NSA) Series revolutionizes network security, utilizing a breakthrough multi-core design and patented Reassembly-Free Deep Packet Inspection™ (RFDPI) technology* offering complete protection without compromising network performance. This platform was first made available on the SonicWALL E-Class NSA Series, and it is now available for mid-sized organizations.

The NSA Series overcomes the limitations of existing security solutions by scanning the entirety of each packet for current internal and external threats in real time. Built on a high-speed multi-core processing platform, the NSA Series enables deep packet inspection without adversely impacting the performance of mission-critical networks and applications.

The NSA Series applies next-generation Unified Threat Management (UTM) against a comprehensive array of attacks, combining intrusion prevention, anti-virus and antispyware with the application-level control of SonicWALL Application Intelligence Service. With advanced routing, stateful high-availability and high-speed IPSec and SSL VPN technology, the NSA Series adds security, reliability, functionality and productivity to branch offices, central sites and distributed mid-enterprise networks, while minimizing cost and complexity.

Comprised of the SonicWALL NSA 240, NSA 2400, NSA 3500 and NSA 4500, the NSA Series offers a scalable range of solutions designed to meet the network security needs of any organization.

Features and Benefits