Skip to Main Content »

Have a Question? We Can Help!
Call Toll-Free 866.403.5305

Welcome to

You're currently on:

Comparison of SonicWall NSa Series

Firewall general

NSA 2650

NSA 3650

NSA 4650

NSA 5650

Security processing cores441010
Interfaces4 x 2.5-GbE SFP,
4 x 2.5-GbE,
12 x 1-GbE,
1 GbE Management,
1 Console
2 x 10-GbE SFP+,
8 x 2.5-GbE SFP,
4 x 2.5-GbE,
12 x 1-GbE,
1 GbE Management,
1 Console
2 x 10-GbE SFP+,
4 x 2.5-GbE SFP,
4 x 2.5-GbE,
16 x 1-GbE,
1 GbE Management,
1 Console
2 x 10-GbE SFP+,
2 x 10-GbE,
4 x 2.5-GbE SFP,
4 x 2.5-GbE,
16 x 1-GbE,
1 GbE Management,
1 Console
Expansion1 Expansion Slot (Rear)*
Built-in storage16 GB32 GB32 GB64 GB
ManagementCLI, SSH, Web UI, Capture Security Center, GMS, REST APIs
SSO users40,00050,00060,00070,000
Maximum access points supported4896128192
LoggingAnalyzer, Local Log, Syslog
Firewall/VPN Performance
Firewall inspection throughput13.0 Gbps3.75 Gbps6.0 Gbps6.25 Gbps
Threat Prevention throughput2 (Max Security)600 Mbps730 Mbps1.2 Gbps1.7 Gbps
Threat Prevention throughput2,6 (Performance Optimized)1.20 Gbps1.75 Gbps2.50 Gbps3.40 Gbps
Application inspection throughput21.4 Gbps2.1 Gbps3.0 Gbps4.25 Gbps
IPS throughput21.4 Gbps1.8 Gbps2.3 Gbps3.4 Gbps
Anti-malware inspection throughput2600 Mbps800 Mbps1.25 Gbps1.7 Gbps
IMIX throughput700 Mbps900 Mbps1.3 Gbps1.45 Gbps
TLS/SSL decryption and inspection throughput (DPI SSL)2250 Mbps300 Mbps500 Mbps800 Mbps
VPN throughput31.3 Gbps1.5 Gbps3.0 Gbps3.5 Gbps
Connections per second14,000/sec14,000/sec40,000/sec40,000/sec
Maximum connections (SPI)1,000,0002,000,0003,000,0004,000,000
Maximum connections (DPI)500,000750,0001,000,0001,500,000
Maximum connections (DPI SSL)18,00024,00030,00037,000
Default connections (DPI/DPI SSL)4500,000/12,000625,000/15,000750,000/18,0001,000,000/19,000
Site-to-site tunnels1,0003,0004,0006,000
IPSec VPN clients (max)50 (1,000)500 (3,000)2,000 (4,000)2,000 (6,000)
SSL VPN NetExtender clients (max)2 (350)2 (500)2 (1,000)2 (1,500)
Encryption/AuthenticationDES, 3DES, AES (128, 192, 256-bit)/MD5, SHA-1, Suite B Cryptography
Key exchangeDiffie Hellman Groups 1, 2, 5, 14v
Route-based VPNRIP, OSPF, BGP
IP address assignmentStatic (DHCP, PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
NAT modes1:1, many:1, 1:many, flexible NAT (overlapping IPS), PAT, transparent mode
VLAN interfaces256256400500
Routing protocolsBGP, OSPF, RIPv1/v2, static routes, policy-based routing
QoSBandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
AuthenticationLDAP (multiple domains), XAUTH/RADIUS, SSO, Novell, internal user database, Terminal Services, Citrix, Common Access Card (CAC)
VoIPFull H323-v1-5, SIP
Certifications (in progress)ICSA Firewall, ICSA Anti-Virus, FIPS 140-2, Common Criteria NDPP (Firewall and IPS), UC APL, USGv6, CsFC
High availability5Active/Passive with State
Active/Passive with State Sync
Active/Active Clustering
Active/Passive with State
Sync, Active/Active DPI with
State Sync, Active/Active
Power supplyDual, redundant
120W (one included)
Dual, redundant
350W (one included)
FansDual, FixedDual, Removable
Input power100-240 VAC, 50-60 Hz
Maximum power consumption (W)37.24693.6103.6
MTBF @25ºC in hours162,231156,681154,529153,243
MTBF @25ºC in years18.517.917.617.5
Form factor1U Rack Mountable
Dimensions16.9 x 12.8 x 1.8 in (43 x 32.5 x 4.5 cm)16.9 x 16.3 x 1.8 in (43 x 41.5 x 4.5 cm)
Weight11.5 lb (5.2 kg)11.7 lb (5.3 kg)15.2 lb (6.9 kg)15.2 lb (6.9 kg)
WEEE weight12.1 lb (5.5 kg)12.3 lb (5.6 kg)19.6 lb (8.9 kg)19.6 lb (8.9 kg)
Shipping weight17.0 lb (7.7 kg)17.2 lb (7.8 kg)24.9 lb (11.3 kg)24.9 lb (11.3 kg)
Major regulatoryFCC Class A, CE (EMC, LVD, RoHS), C-Tick, VCCI Class A, MSIP/KCC Class A, UL, cUL, TUV/GS, CB, Mexico CoC by UL, WEEE , REACH, ANATEL, BSMI
Environment (Operating/Storage)32°-105° F (0°-40° C)/-40° to 158° F (-40° to 70° C)
Humidity10-90% non-condensing
1 Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2 Threat Prevention/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs. Threat Prevention throughput measured with Gateway AV, Anti-Spyware, IPS and Application Control enabled.
3 VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544. All specifications, features and availability are subject to change.
4 For every 125,000 DPI connections reduced, the number of available DPI SSL connections increases by 3,000 except for NSA 9250 and above.
Active/Active Clustering and Active/Active DPI with State Sync require purchase of Expanded License.

Performance optimized mode can provide significant increases in performance without major impact to threat prevention efficacy.
*Future use. All specifications, features and availability are subject to change.

Please wait...

Thank You.

has been added to your cart

Continue shopping
View cart & checkout